Edit tour

Windows Analysis Report
http://oabrj.org.br/

Overview

General Information

Sample URL:	http://oabrj.org.br/
Analysis ID:	1529408
Tags:	urlscan
Infos:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5748 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 6804 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2392 --field-trial-handle=2240,i,10084335980790775695,9773633834861979999,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 5928 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://oabrj.org.br/" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

HTTP traffic detected: POST /popup/popup HTTP/1.1Host: api.sac.digitalConnection: keep-aliveContent-Length: 38sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-type: application/x-www-form-urlencodedAccept: */*Origin: https://oabrj.org.brSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://oabrj.org.br/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: unknown	HTTPS traffic detected: 13.107.246.64:443 -> 192.168.2.9:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.9:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.9:49765 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.11
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.11
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.11
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.11
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.11
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.64
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.64
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.64
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.64
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.64
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.64
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.64
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.64
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.64
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.64
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.64
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.64
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.64
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.64
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.11
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.64
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.64
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.64
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.64
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.64
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.64
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.64
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.64
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.64
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.64
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.64
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.64
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.64
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.64
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.64
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.64
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.64
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.64
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.64
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.64
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.64
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.64
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.64
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.64
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.64
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.64

Source: chromecache_259.2.dr	String found in binary or memory: <a href="https://www.facebook.com/oabrj/" class="elementor-icon elementor-social-icon elementor-social-icon-facebook elementor-repeater-item-a04c006" target="_blank"> equals www.facebook.com (Facebook)
Source: chromecache_381.2.dr, chromecache_544.2.dr, chromecache_435.2.dr, chromecache_292.2.dr, chromecache_425.2.dr	String found in binary or memory: <li class="list-inline-item"><a href="https://twitter.com/OABRJ_oficial" target="_blank" title="Abrir outra janela para o Twitter"><svg xmlns="http://www.w3.org/2000/svg" width="2em" height="2em" fill="currentColor" viewBox="0 0 16 16"><path d="M5.026 15c6.038 0 9.341-5.003 9.341-9.334 0-.14 0-.282-.006-.422A6.685 6.685 0 0 0 16 3.542a6.658 6.658 0 0 1-1.889.518 3.301 3.301 0 0 0 1.447-1.817 6.533 6.533 0 0 1-2.087.793A3.286 3.286 0 0 0 7.875 6.03a9.325 9.325 0 0 1-6.767-3.429 3.289 3.289 0 0 0 1.018 4.382A3.323 3.323 0 0 1 .64 6.575v.045a3.288 3.288 0 0 0 2.632 3.218 3.203 3.203 0 0 1-.865.115 3.23 3.23 0 0 1-.614-.057 3.283 3.283 0 0 0 3.067 2.277A6.588 6.588 0 0 1 .78 13.58a6.32 6.32 0 0 1-.78-.045A9.344 9.344 0 0 0 5.026 15z"/></svg></a></li> equals www.twitter.com (Twitter)
Source: chromecache_381.2.dr, chromecache_544.2.dr, chromecache_435.2.dr, chromecache_292.2.dr, chromecache_425.2.dr	String found in binary or memory: <li class="list-inline-item"><a href="https://www.facebook.com/oabrj/" target="_blank" title="Abrir outra janela para o Facebook"><svg xmlns="http://www.w3.org/2000/svg" width="2em" height="2em" fill="currentColor" viewBox="0 0 16 16"><path d="M16 8.049c0-4.446-3.582-8.05-8-8.05C3.58 0-.002 3.603-.002 8.05c0 4.017 2.926 7.347 6.75 7.951v-5.625h-2.03V8.05H6.75V6.275c0-2.017 1.195-3.131 3.022-3.131.876 0 1.791.157 1.791.157v1.98h-1.009c-.993 0-1.303.621-1.303 1.258v1.51h2.218l-.354 2.326H9.25V16c3.824-.604 6.75-3.934 6.75-7.951z"/></svg></a></li> equals www.facebook.com (Facebook)
Source: chromecache_381.2.dr, chromecache_544.2.dr, chromecache_435.2.dr, chromecache_292.2.dr, chromecache_425.2.dr	String found in binary or memory: <li class="list-inline-item"><a href="https://www.linkedin.com/company/14030277/admin/" target="_blank" title="Abrir outra janela para o LinkedIn"><svg xmlns="http://www.w3.org/2000/svg" width="2em" height="2em" fill="currentColor" class="bi bi-linkedin" viewBox="0 0 16 16"> equals www.linkedin.com (Linkedin)
Source: chromecache_381.2.dr, chromecache_544.2.dr, chromecache_435.2.dr, chromecache_292.2.dr, chromecache_425.2.dr	String found in binary or memory: <li class="list-inline-item"><a href="https://www.youtube.com/oabrjoficial" target="_blank" title="Abrir outra janela para o YouTube"><svg xmlns="http://www.w3.org/2000/svg" width="2em" height="2em" fill="currentColor" viewBox="0 0 16 16"><path d="M8.051 1.999h.089c.822.003 4.987.033 6.11.335a2.01 2.01 0 0 1 1.415 1.42c.101.38.172.883.22 1.402l.01.104.022.26.008.104c.065.914.073 1.77.074 1.957v.075c-.001.194-.01 1.108-.082 2.06l-.008.105-.009.104c-.05.572-.124 1.14-.235 1.558a2.007 2.007 0 0 1-1.415 1.42c-1.16.312-5.569.334-6.18.335h-.142c-.309 0-1.587-.006-2.927-.052l-.17-.006-.087-.004-.171-.007-.171-.007c-1.11-.049-2.167-.128-2.654-.26a2.007 2.007 0 0 1-1.415-1.419c-.111-.417-.185-.986-.235-1.558L.09 9.82l-.008-.104A31.4 31.4 0 0 1 0 7.68v-.123c.002-.215.01-.958.064-1.778l.007-.103.003-.052.008-.104.022-.26.01-.104c.048-.519.119-1.023.22-1.402a2.007 2.007 0 0 1 1.415-1.42c.487-.13 1.544-.21 2.654-.26l.17-.007.172-.006.086-.003.171-.007A99.788 99.788 0 0 1 7.858 2h.193zM6.4 5.209v4.818l4.157-2.408L6.4 5.209z"/></svg></a></li> equals www.youtube.com (Youtube)
Source: chromecache_381.2.dr, chromecache_544.2.dr, chromecache_435.2.dr, chromecache_292.2.dr, chromecache_425.2.dr	String found in binary or memory: <li class="list-inline-item me-0"><a href="https://www.facebook.com/oabrj/" target="_blank" class="text-dark px-4 px-lg-1 py-2 d-block" title="Abrir outra janela para o Facebook"> equals www.facebook.com (Facebook)
Source: chromecache_381.2.dr, chromecache_544.2.dr, chromecache_435.2.dr, chromecache_292.2.dr, chromecache_425.2.dr	String found in binary or memory: <li class="list-inline-item me-0"><a href="https://www.linkedin.com/company/14030277/admin/" target="_blank" class="text-dark px-4 px-lg-1 py-2 d-block" title="Abrir outra janela para o LinkedIn"> equals www.linkedin.com (Linkedin)
Source: chromecache_381.2.dr, chromecache_544.2.dr, chromecache_435.2.dr, chromecache_292.2.dr, chromecache_425.2.dr	String found in binary or memory: <li class="list-inline-item me-0"><a href="https://www.youtube.com/oabrjoficial" target="_blank" class="text-dark px-4 px-lg-1 py-2 d-block" title="Abrir outra janela para o YouTube"> equals www.youtube.com (Youtube)
Source: chromecache_381.2.dr	String found in binary or memory: <a href="https://twitter.com/intent/tweet?text=http%3A%2F%2Fwww.oabrj.org.br%2Fnoticias%2Fjustica-custa-um-absurdo-oabrj-leva-ao-cnj-memorial-solicitando-revisao-nos-valores-das" class="social-twitter" target="_blank"><svg aria-hidden="true" role="img" xmlns="http://www.w3.org/2000/svg" fill="currentColor" viewBox="0 0 16 16" width="1em" height="1em"><path d="M5.026 15c6.038 0 9.341-5.003 9.341-9.334 0-.14 0-.282-.006-.422A6.685 6.685 0 0 0 16 3.542a6.658 6.658 0 0 1-1.889.518 3.301 3.301 0 0 0 1.447-1.817 6.533 6.533 0 0 1-2.087.793A3.286 3.286 0 0 0 7.875 6.03a9.325 9.325 0 0 1-6.767-3.429 3.289 3.289 0 0 0 1.018 4.382A3.323 3.323 0 0 1 .64 6.575v.045a3.288 3.288 0 0 0 2.632 3.218 3.203 3.203 0 0 1-.865.115 3.23 3.23 0 0 1-.614-.057 3.283 3.283 0 0 0 3.067 2.277A6.588 6.588 0 0 1 .78 13.58a6.32 6.32 0 0 1-.78-.045A9.344 9.344 0 0 0 5.026 15z"/></svg></a> equals www.twitter.com (Twitter)
Source: chromecache_544.2.dr	String found in binary or memory: <a href="https://twitter.com/intent/tweet?text=http%3A%2F%2Fwww.oabrj.org.br%2Fnoticias%2Fum-salto-sua-carreira-concorra-uma-das-2-mil-bolsas-integrais-pos-graduacao-direito" class="social-twitter" target="_blank"><svg aria-hidden="true" role="img" xmlns="http://www.w3.org/2000/svg" fill="currentColor" viewBox="0 0 16 16" width="1em" height="1em"><path d="M5.026 15c6.038 0 9.341-5.003 9.341-9.334 0-.14 0-.282-.006-.422A6.685 6.685 0 0 0 16 3.542a6.658 6.658 0 0 1-1.889.518 3.301 3.301 0 0 0 1.447-1.817 6.533 6.533 0 0 1-2.087.793A3.286 3.286 0 0 0 7.875 6.03a9.325 9.325 0 0 1-6.767-3.429 3.289 3.289 0 0 0 1.018 4.382A3.323 3.323 0 0 1 .64 6.575v.045a3.288 3.288 0 0 0 2.632 3.218 3.203 3.203 0 0 1-.865.115 3.23 3.23 0 0 1-.614-.057 3.283 3.283 0 0 0 3.067 2.277A6.588 6.588 0 0 1 .78 13.58a6.32 6.32 0 0 1-.78-.045A9.344 9.344 0 0 0 5.026 15z"/></svg></a> equals www.twitter.com (Twitter)
Source: chromecache_435.2.dr	String found in binary or memory: <a href="https://twitter.com/intent/tweet?text=http%3A%2F%2Fwww.oabrj.org.br%2Fsorteio-mentoria-bolsas-integrais-curso-pos-graduacao" class="social-twitter" target="_blank"><svg aria-hidden="true" role="img" xmlns="http://www.w3.org/2000/svg" fill="currentColor" viewBox="0 0 16 16" width="1em" height="1em"><path d="M5.026 15c6.038 0 9.341-5.003 9.341-9.334 0-.14 0-.282-.006-.422A6.685 6.685 0 0 0 16 3.542a6.658 6.658 0 0 1-1.889.518 3.301 3.301 0 0 0 1.447-1.817 6.533 6.533 0 0 1-2.087.793A3.286 3.286 0 0 0 7.875 6.03a9.325 9.325 0 0 1-6.767-3.429 3.289 3.289 0 0 0 1.018 4.382A3.323 3.323 0 0 1 .64 6.575v.045a3.288 3.288 0 0 0 2.632 3.218 3.203 3.203 0 0 1-.865.115 3.23 3.23 0 0 1-.614-.057 3.283 3.283 0 0 0 3.067 2.277A6.588 6.588 0 0 1 .78 13.58a6.32 6.32 0 0 1-.78-.045A9.344 9.344 0 0 0 5.026 15z"/></svg></a> equals www.twitter.com (Twitter)
Source: chromecache_425.2.dr	String found in binary or memory: <a href="https://twitter.com/intent/tweet?text=http%3A%2F%2Fwww.oabrj.org.br%2Ftabela-anuidades-2024" class="social-twitter" target="_blank"><svg aria-hidden="true" role="img" xmlns="http://www.w3.org/2000/svg" fill="currentColor" viewBox="0 0 16 16" width="1em" height="1em"><path d="M5.026 15c6.038 0 9.341-5.003 9.341-9.334 0-.14 0-.282-.006-.422A6.685 6.685 0 0 0 16 3.542a6.658 6.658 0 0 1-1.889.518 3.301 3.301 0 0 0 1.447-1.817 6.533 6.533 0 0 1-2.087.793A3.286 3.286 0 0 0 7.875 6.03a9.325 9.325 0 0 1-6.767-3.429 3.289 3.289 0 0 0 1.018 4.382A3.323 3.323 0 0 1 .64 6.575v.045a3.288 3.288 0 0 0 2.632 3.218 3.203 3.203 0 0 1-.865.115 3.23 3.23 0 0 1-.614-.057 3.283 3.283 0 0 0 3.067 2.277A6.588 6.588 0 0 1 .78 13.58a6.32 6.32 0 0 1-.78-.045A9.344 9.344 0 0 0 5.026 15z"/></svg></a> equals www.twitter.com (Twitter)
Source: chromecache_381.2.dr	String found in binary or memory: <a href="https://www.facebook.com/sharer/sharer.php?u=http%3A%2F%2Fwww.oabrj.org.br%2Fnoticias%2Fjustica-custa-um-absurdo-oabrj-leva-ao-cnj-memorial-solicitando-revisao-nos-valores-das" class="social-facebook" target="_blank"><svg aria-hidden="true" role="img" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 264 512" width="1em" height="1em"><path fill="currentColor" d="M76.7 512V283H0v-91h76.7v-71.7C76.7 42.4 124.3 0 193.8 0c33.3 0 61.9 2.5 70.2 3.6V85h-48.2c-37.8 0-45.1 18-45.1 44.3V192H256l-11.7 91h-73.6v229"></path></svg></a> equals www.facebook.com (Facebook)
Source: chromecache_544.2.dr	String found in binary or memory: <a href="https://www.facebook.com/sharer/sharer.php?u=http%3A%2F%2Fwww.oabrj.org.br%2Fnoticias%2Fum-salto-sua-carreira-concorra-uma-das-2-mil-bolsas-integrais-pos-graduacao-direito" class="social-facebook" target="_blank"><svg aria-hidden="true" role="img" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 264 512" width="1em" height="1em"><path fill="currentColor" d="M76.7 512V283H0v-91h76.7v-71.7C76.7 42.4 124.3 0 193.8 0c33.3 0 61.9 2.5 70.2 3.6V85h-48.2c-37.8 0-45.1 18-45.1 44.3V192H256l-11.7 91h-73.6v229"></path></svg></a> equals www.facebook.com (Facebook)
Source: chromecache_435.2.dr	String found in binary or memory: <a href="https://www.facebook.com/sharer/sharer.php?u=http%3A%2F%2Fwww.oabrj.org.br%2Fsorteio-mentoria-bolsas-integrais-curso-pos-graduacao" class="social-facebook" target="_blank"><svg aria-hidden="true" role="img" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 264 512" width="1em" height="1em"><path fill="currentColor" d="M76.7 512V283H0v-91h76.7v-71.7C76.7 42.4 124.3 0 193.8 0c33.3 0 61.9 2.5 70.2 3.6V85h-48.2c-37.8 0-45.1 18-45.1 44.3V192H256l-11.7 91h-73.6v229"></path></svg></a> equals www.facebook.com (Facebook)
Source: chromecache_425.2.dr	String found in binary or memory: <a href="https://www.facebook.com/sharer/sharer.php?u=http%3A%2F%2Fwww.oabrj.org.br%2Ftabela-anuidades-2024" class="social-facebook" target="_blank"><svg aria-hidden="true" role="img" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 264 512" width="1em" height="1em"><path fill="currentColor" d="M76.7 512V283H0v-91h76.7v-71.7C76.7 42.4 124.3 0 193.8 0c33.3 0 61.9 2.5 70.2 3.6V85h-48.2c-37.8 0-45.1 18-45.1 44.3V192H256l-11.7 91h-73.6v229"></path></svg></a> equals www.facebook.com (Facebook)
Source: chromecache_267.2.dr, chromecache_545.2.dr	String found in binary or memory: return b}QC.F="internal.enableAutoEventOnTimer";var gc=ka(["data-gtm-yt-inspected-"]),SC=["www.youtube.com","www.youtube-nocookie.com"],TC,UC=!1; equals www.youtube.com (Youtube)
Source: chromecache_530.2.dr	String found in binary or memory: return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var b=f.getFbeventsModules("signalsFBEventsGetTier"),c=d();function d(){try{if(a.trustedTypes&&a.trustedTypes.createPolicy){var b=a.trustedTypes;return b.createPolicy("facebook.com/signals/iwl",{createScriptURL:function(a){var b=new URL(a);b=b.hostname.endsWith(".facebook.com")&&b.pathname=="/signals/iwl.js";if(!b)throw new Error("Disallowed script URL");return a}})}}catch(a){}return null}e.exports=function(a,d){d=b(d);d=d==null?"www.facebook.com":"www."+d+".facebook.com";d="https://"+d+"/signals/iwl.js?pixel_id="+a;if(c!=null)return c.createScriptURL(d);else return d}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_530.2.dr	String found in binary or memory: return function(f,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=/^https:\/\/www\.([A-Za-z0-9\.]+)\.facebook\.com\/tr\/?$/,b=["https://www.facebook.com/tr","https://www.facebook.com/tr/"];e.exports=function(c){if(b.indexOf(c)!==-1)return null;var d=a.exec(c);if(d==null)throw new Error("Malformed tier: "+c);return d[1]}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_530.2.dr	String found in binary or memory: return function(f,g,h,i){var j={exports:{}};j.exports;(function(){"use strict";var a={ENDPOINT:"https://www.facebook.com/tr/",INSTAGRAM_TRIGGER_ATTRIBUTION:"https://www.instagram.com/tr/",AEM_ENDPOINT:"https://www.facebook.com/.well-known/aggregated-event-measurement/",GPS_ENDPOINT:"https://www.facebook.com/privacy_sandbox/pixel/register/trigger/",TOPICS_API_ENDPOINT:"https://www.facebook.com/privacy_sandbox/topics/registration/"};j.exports=a})();return j.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_381.2.dr, chromecache_544.2.dr, chromecache_435.2.dr, chromecache_292.2.dr, chromecache_425.2.dr	String found in binary or memory: src="https://www.facebook.com/tr?id=375683401386134&ev=PageView&noscript=1" equals www.facebook.com (Facebook)
Source: chromecache_513.2.dr, chromecache_452.2.dr	String found in binary or memory: tpl:'<div class="fancybox-share"><h1>{{SHARE}}</h1><p><a class="fancybox-share__button fancybox-share__button--fb" href="https://www.facebook.com/sharer/sharer.php?u={{url}}"><svg viewBox="0 0 512 512" xmlns="http://www.w3.org/2000/svg"><path d="m287 456v-299c0-21 6-35 35-35h38v-63c-7-1-29-3-55-3-54 0-91 33-91 94v306m143-254h-205v72h196" /></svg><span>Facebook</span></a><a class="fancybox-share__button fancybox-share__button--tw" href="https://twitter.com/intent/tweet?url={{url}}&text={{descr}}"><svg viewBox="0 0 512 512" xmlns="http://www.w3.org/2000/svg"><path d="m456 133c-14 7-31 11-47 13 17-10 30-27 37-46-15 10-34 16-52 20-61-62-157-7-141 75-68-3-129-35-169-85-22 37-11 86 26 109-13 0-26-4-37-9 0 39 28 72 65 80-12 3-25 4-37 2 10 33 41 57 77 57-42 30-77 38-122 34 170 111 378-32 359-208 16-11 30-25 41-42z" /></svg><span>Twitter</span></a><a class="fancybox-share__button fancybox-share__button--pt" href="https://www.pinterest.com/pin/create/button/?url={{url}}&description={{descr}}&media={{media}}"><svg viewBox="0 0 512 512" xmlns="http://www.w3.org/2000/svg"><path d="m265 56c-109 0-164 78-164 144 0 39 15 74 47 87 5 2 10 0 12-5l4-19c2-6 1-8-3-13-9-11-15-25-15-45 0-58 43-110 113-110 62 0 96 38 96 88 0 67-30 122-73 122-24 0-42-19-36-44 6-29 20-60 20-81 0-19-10-35-31-35-25 0-44 26-44 60 0 21 7 36 7 36l-30 125c-8 37-1 83 0 87 0 3 4 4 5 2 2-3 32-39 42-75l16-64c8 16 31 29 56 29 74 0 124-67 124-157 0-69-58-132-146-132z" fill="#fff"/></svg><span>Pinterest</span></a></p><p><input class="fancybox-share__input" type="text" value="{{url_raw}}" onclick="select()" /></p></div>'}}),e(t).on("click","[data-fancybox-share]",function(){var t,o,i=e.fancybox.getInstance(),a=i.current\|\|null;a&&("function"===e.type(a.opts.share.url)&&(t=a.opts.share.url.apply(a,[i,a])),o=a.opts.share.tpl.replace(/\{\{media\}\}/g,"image"===a.type?encodeURIComponent(a.src):"").replace(/\{\{url\}\}/g,encodeURIComponent(t)).replace(/\{\{url_raw\}\}/g,n(t)).replace(/\{\{descr\}\}/g,i.$caption?encodeURIComponent(i.$caption.text()):""),e.fancybox.open({src:i.translate(i,o),type:"html",opts:{touch:!1,animationEffect:!1,afterLoad:function(t,e){i.$refs.container.one("beforeClose.fb",function(){t.close(null,0)}),e.$content.find(".fancybox-share__button").click(function(){return window.open(this.href,"Share","width=550, height=450"),!1})},mobile:{autoFocus:!1}}}))})}(document,jQuery),function(t,e,n){"use strict";function o(){var e=t.location.hash.substr(1),n=e.split("-"),o=n.length>1&&/^\+?\d+$/.test(n[n.length-1])?parseInt(n.pop(-1),10)\|\|1:1,i=n.join("-");return{hash:e,index:o<1?1:o,gallery:i}}function i(t){""!==t.gallery&&n("[data-fancybox='"+n.escapeSelector(t.gallery)+"']").eq(t.index-1).focus().trigger("click.fb-start")}function a(t){var e,n;return!!t&&(e=t.current?t.current.opts:t.opts,""!==(n=e.hash\|\|(e.$orig?e.$orig.data("fancybox")\|\|e.$orig.data("fancybox-trigger"):""))&&n)}n.escapeSelector\|\|(n.escapeSelector=function(t){return(t+"").replace(/([\0-\x1f\x7f]\|^-?\d)\|^-$\|[^\x80-\uFFFF\w-]/g,
Source: chromecache_513.2.dr, chromecache_452.2.dr	String found in binary or memory: tpl:'<div class="fancybox-share"><h1>{{SHARE}}</h1><p><a class="fancybox-share__button fancybox-share__button--fb" href="https://www.facebook.com/sharer/sharer.php?u={{url}}"><svg viewBox="0 0 512 512" xmlns="http://www.w3.org/2000/svg"><path d="m287 456v-299c0-21 6-35 35-35h38v-63c-7-1-29-3-55-3-54 0-91 33-91 94v306m143-254h-205v72h196" /></svg><span>Facebook</span></a><a class="fancybox-share__button fancybox-share__button--tw" href="https://twitter.com/intent/tweet?url={{url}}&text={{descr}}"><svg viewBox="0 0 512 512" xmlns="http://www.w3.org/2000/svg"><path d="m456 133c-14 7-31 11-47 13 17-10 30-27 37-46-15 10-34 16-52 20-61-62-157-7-141 75-68-3-129-35-169-85-22 37-11 86 26 109-13 0-26-4-37-9 0 39 28 72 65 80-12 3-25 4-37 2 10 33 41 57 77 57-42 30-77 38-122 34 170 111 378-32 359-208 16-11 30-25 41-42z" /></svg><span>Twitter</span></a><a class="fancybox-share__button fancybox-share__button--pt" href="https://www.pinterest.com/pin/create/button/?url={{url}}&description={{descr}}&media={{media}}"><svg viewBox="0 0 512 512" xmlns="http://www.w3.org/2000/svg"><path d="m265 56c-109 0-164 78-164 144 0 39 15 74 47 87 5 2 10 0 12-5l4-19c2-6 1-8-3-13-9-11-15-25-15-45 0-58 43-110 113-110 62 0 96 38 96 88 0 67-30 122-73 122-24 0-42-19-36-44 6-29 20-60 20-81 0-19-10-35-31-35-25 0-44 26-44 60 0 21 7 36 7 36l-30 125c-8 37-1 83 0 87 0 3 4 4 5 2 2-3 32-39 42-75l16-64c8 16 31 29 56 29 74 0 124-67 124-157 0-69-58-132-146-132z" fill="#fff"/></svg><span>Pinterest</span></a></p><p><input class="fancybox-share__input" type="text" value="{{url_raw}}" onclick="select()" /></p></div>'}}),e(t).on("click","[data-fancybox-share]",function(){var t,o,i=e.fancybox.getInstance(),a=i.current\|\|null;a&&("function"===e.type(a.opts.share.url)&&(t=a.opts.share.url.apply(a,[i,a])),o=a.opts.share.tpl.replace(/\{\{media\}\}/g,"image"===a.type?encodeURIComponent(a.src):"").replace(/\{\{url\}\}/g,encodeURIComponent(t)).replace(/\{\{url_raw\}\}/g,n(t)).replace(/\{\{descr\}\}/g,i.$caption?encodeURIComponent(i.$caption.text()):""),e.fancybox.open({src:i.translate(i,o),type:"html",opts:{touch:!1,animationEffect:!1,afterLoad:function(t,e){i.$refs.container.one("beforeClose.fb",function(){t.close(null,0)}),e.$content.find(".fancybox-share__button").click(function(){return window.open(this.href,"Share","width=550, height=450"),!1})},mobile:{autoFocus:!1}}}))})}(document,jQuery),function(t,e,n){"use strict";function o(){var e=t.location.hash.substr(1),n=e.split("-"),o=n.length>1&&/^\+?\d+$/.test(n[n.length-1])?parseInt(n.pop(-1),10)\|\|1:1,i=n.join("-");return{hash:e,index:o<1?1:o,gallery:i}}function i(t){""!==t.gallery&&n("[data-fancybox='"+n.escapeSelector(t.gallery)+"']").eq(t.index-1).focus().trigger("click.fb-start")}function a(t){var e,n;return!!t&&(e=t.current?t.current.opts:t.opts,""!==(n=e.hash\|\|(e.$orig?e.$orig.data("fancybox")\|\|e.$orig.data("fancybox-trigger"):""))&&n)}n.escapeSelector\|\|(n.escapeSelector=function(t){return(t+"").replace(/([\0-\x1f\x7f]\|^-?\d)\|^-$\|[^\x80-\uFFFF\w-]/g,

Source: global traffic	DNS traffic detected: DNS query: oabrj.org.br
Source: global traffic	DNS traffic detected: DNS query: cdn.jsdelivr.net
Source: global traffic	DNS traffic detected: DNS query: unpkg.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: cdn.equalweb.com
Source: global traffic	DNS traffic detected: DNS query: connect.facebook.net
Source: global traffic	DNS traffic detected: DNS query: api.sac.digital
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: www.oabrj.org.br
Source: global traffic	DNS traffic detected: DNS query: transparenciaoabrj.org
Source: global traffic	DNS traffic detected: DNS query: s.w.org
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2392 --field-trial-handle=2240,i,10084335980790775695,9773633834861979999,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://oabrj.org.br/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2392 --field-trial-handle=2240,i,10084335980790775695,9773633834861979999,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source	Detection	Scanner	Label
https://ampcid.google.com/v1/publisher:getClientId	0%	URL Reputation	safe
https://swiperjs.com	0%	URL Reputation	safe
http://www.opensource.org/licenses/mit-license.php	0%	URL Reputation	safe
https://fontawesome.com/license/free	0%	URL Reputation	safe
https://getbootstrap.com/)	0%	URL Reputation	safe

Name	IP	Active	Malicious	Reputation
oabrj.org.br	188.114.97.3	true	false	unknown
star-mini.c10r.facebook.com	157.240.0.35	true	false	unknown
api.sac.digital	177.53.170.78	true	false	unknown
cdn.equalweb.com	172.67.71.113	true	false	unknown
www.oabrj.org.br	188.114.97.3	true	false	unknown
default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com	217.20.57.18	true	false	unknown
transparenciaoabrj.org	89.116.59.44	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
scontent.xx.fbcdn.net	157.240.252.13	true	false	unknown
cdnjs.cloudflare.com	104.17.24.14	true	false	unknown
www.google.com	216.58.206.68	true	false	unknown
unpkg.com	104.17.246.203	true	false	unknown
s.w.org	192.0.77.48	true	false	unknown
www.facebook.com	unknown	unknown	false	unknown
cdn.jsdelivr.net	unknown	unknown	false	unknown
connect.facebook.net	unknown	unknown	false	unknown

IP	Domain	Country	ASN	ASN Name	Malicious
172.67.71.113	cdn.equalweb.com	United States	13335	CLOUDFLARENETUS	false
104.17.248.203	unknown	United States	13335	CLOUDFLARENETUS	false
89.116.59.44	transparenciaoabrj.org	Lithuania	15419	LRTC-ASLT	false
177.53.170.78	api.sac.digital	Brazil	262474	ALTERNATELECOMUNICACOESECONECTIVIDADELTDAEPPBR	false
157.240.0.6	unknown	United States	32934	FACEBOOKUS	false
157.240.252.13	scontent.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
104.17.246.203	unpkg.com	United States	13335	CLOUDFLARENETUS	false
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
157.240.0.35	star-mini.c10r.facebook.com	United States	32934	FACEBOOKUS	false
216.58.206.68	www.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
188.114.97.3	oabrj.org.br	European Union	13335	CLOUDFLARENETUS	false
188.114.96.3	unknown	European Union	13335	CLOUDFLARENETUS	false
104.26.13.95	unknown	United States	13335	CLOUDFLARENETUS	false
157.240.251.35	unknown	United States	32934	FACEBOOKUS	false

IP
192.168.2.7
192.168.2.9
192.168.2.5

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1529408
Start date and time:	2024-10-09 00:12:16 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 23s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://oabrj.org.br/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	10
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean0.win@22/515@46/18
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://oabrj.org.br/noticias/justica-custa-um-absurdo-oabrj-leva-ao-cnj-memorial-solicitando-revisao-nos-valores-das Browse: https://www.oabrj.org.br/sorteio-mentoria-bolsas-integrais-curso-pos-graduacao Browse: https://oabrj.org.br/noticias/um-salto-sua-carreira-concorra-uma-das-2-mil-bolsas-integrais-pos-graduacao-direito Browse: https://oabrj.org.br/tabela-anuidades-2024 Browse: https://transparenciaoabrj.org/

Input	Output
URL: https://oabrj.org.br/ Model: jbxai	{ "brand":["OABRJ"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"OK", "text_input_field_labels":["Digite sua busca"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "text":"OABRJ pede ao CNJ reviso nos valores das custas judiciais do TJ Veja lista complementar do sorteio de bolsas para ps-graduao Concorra a uma das 2 mil bolsas oferecidas pela Mentoria Aproveite Parceria entre a Caarj e o Sesc Rio foi renovada", "has_visible_qrcode":false}

URL: https://oabrj.org.br/ Model: jbxai	{ "brand":["OABRJ"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"OK", "text_input_field_labels":["Digite sua busca"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "text":"SORTEIO MENTORIA: BOLSAS INTEGRAIS PARA PS GRADUAO OABRJ pede ao CNJ reviso nos valores das custas judiciais do TJ Veja lista complementar do sorteio de bolsas para ps-graduao Concorra a uma das 2 mil bolsas oferecidas pela Mentoria Aproveite Parceria entre a Caarj e o Sesc Rio foi renovada", "has_visible_qrcode":false}

URL: https://oabrj.org.br/noticias/justica-custa-um-absurdo-oabrj-leva-ao-cnj-memorial-solicitando-revisao-nos-valores-das Model: jbxai	{ "brand":["OABRJ"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "text":"A Justia custa um absurdo': OABRJ leva ao CNJ memorial solicitando reviso nos valores das custas judiciais praticadas pelo TJ RJ", "has_visible_qrcode":false}

URL: https://oabrj.org.br/ Model: jbxai	{ "brand":["OABRJ"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"OK", "text_input_field_labels":["Digite sua busca"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "text":"OABRJ DEFENDENDO DIREITOS GARANTINDO JUSTIA CONSULTE AQUI TODAS AS INFORMAES OABRJ pede ao CNJ reviso nos valores das custas judiciais do TJ Veja lista complementar do sorteio de bolsas para ps-graduao Concorra a uma das 2 mil bolsas oferecidas pela Mentoria Aproveite Parceria entre a Caarj e o Sesc Rio foi renovada", "has_visible_qrcode":false}

URL: https://oabrj.org.br/noticias/justica-custa-um-absurdo-oabrj-leva-ao-cnj-memorial-solicitando-revisao-nos-valores-das Model: jbxai	{ "brand":["OABRJ"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "text":"A Justia custa um absurdo': OABRJ leva ao CNJ memorial solicitando reviso nos valores das custas judiciais praticadas pelo TJRJ", "has_visible_qrcode":false}

URL: https://oabrj.org.br/tabela-anuidades-2024 Model: jbxai	{ "brand":["OABRJ"], "contains_trigger_text":true, "trigger_text":"Inscritos at 2019", "prominent_button_name":"OK", "text_input_field_labels":["Valor vista de 11/01/2024 a 12/02/2024"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":true, "text":"Tabela de anuidades 2024", "has_visible_qrcode":false}

URL: https://oabrj.org.br/noticias/um-salto-sua-carreira-concorra-uma-das-2-mil-bolsas-integrais-pos-graduacao-direito Model: jbxai	{ "brand":["OAB RJ"], "contains_trigger_text":true, "trigger_text":"D um salto na sua carreira: concorra a uma das 2 mil bolsas integrais de ps-graduao em Direito Processual Civil oferecidas pela Mentoria", "prominent_button_name":"OK", "text_input_field_labels":["anunciada em maio"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":true, "text":"D um salto na sua carreira: concorra a uma das 2 mil bolsas integrais de ps-graduao em Direito Processual Civil oferecidas pela Mentoria As inscries acontecem desta segunda, dia 7, at 23 de outubro. No perca a oportunidade!", "has_visible_qrcode":false}

URL: https://oabrj.org.br/noticias/um-salto-sua-carreira-concorra-uma-das-2-mil-bolsas-integrais-pos-graduacao-direito Model: jbxai	{ "brand":["OAB RJ"], "contains_trigger_text":true, "trigger_text":"D um salto na sua carreira: concorra a uma das 2 mil bolsas integrais de ps-graduao em Direito Processual Civil oferecidas pela Mentoria", "prominent_button_name":"OK", "text_input_field_labels":["anunciada em maio"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":true, "text":"D um salto na sua carreira: concorra a uma das 2 mil bolsas integrais de ps-graduao em Direito Processual Civil oferecidas pela Mentoria As inscries acontecem desta segunda, dia 7, at 23 de outubro. No perca a oportunidade!", "has_visible_qrcode":false}

URL: https://www.oabrj.org.br/sorteio-mentoria-bolsas-integrais-curso-pos-graduacao Model: jbxai	"{ \"brand\": [\"OABRJ\"], \"contains_trigger_text\": true, \"trigger_text\": \"Sorteio Mentoria: bolsas integrais para curso de ps-graduao\", \"prominent_button_name\": \"OK\", \"text_input_field_labels\": [\"Edital do sorteio\", \"Formulrio de inscrio\"], \"pdf_icon_visible\": false, \"has_visible_captcha\": false, \"has_urgent_text\": false, \"text\": \"Institucional 24/09/2024 - 19:15 \| ltima atualizao em 08/10/2024 - 18:47 Sorteio Mentoria: bolsas integrais para curso de ps-graduao OABRJ sortear bolsas estudantis integrais para ps-graduao online Edital do sorteio Formulrio de inscrio BOLSAS INTEGRAIS PARA PS GRADUAO Voc sabe qual o plano de sade a melhor opo pra voc? Voc sabe qual o plano de sade a melhor opo pra voc? OAB SADE Ementas / Jurisprudncias Recorte Digital $ Tabela de anuidades Tabela de anuidades Tabela de anuidades Tabela de anuidades Tabela de anuidades Tabela de anuidades Tabela de anuidades Tabela de anuidades Tabela de anuidades Tabela de anuidades Tabela de anuidades Tabela de anuidades Tabela de anuidades Tabela de anuidades Tabela de anuidades Tabela de anuidades Tabela de anuidades Tabela de anuidades Tabela de anuidades Tabela de anuidades Tabela de anuidades Tabela de anuidades Tabela de anuidades Tabela de anuidades Tabela de anuidades Tabela de anuidades Tabela de anuidades Tabela de anuidades Tabela de anui} "

URL: https://www.oabrj.org.br/sorteio-mentoria-bolsas-integrais-curso-pos-graduacao Model: jbxai	"{ \"brand\": [\"OABRJ\"], \"contains_trigger_text\": true, \"trigger_text\": \"Sorteio Mentoria: bolsas integrais para curso de ps-graduao\", \"prominent_button_name\": \"OK\", \"text_input_field_labels\": [\"Edital do sorteio\", \"Formulrio de inscrio\"], \"pdf_icon_visible\": false, \"has_visible_captcha\": false, \"has_urgent_text\": false, \"text\": \"Institucional 24/09/2024 - 19:15 \| ltima atualizao em 08/10/2024 - 18:47 Sorteio Mentoria: bolsas integrais para curso de ps-graduao OABRJ sortear bolsas estudantis integrais para ps-graduao online Edital do sorteio Formulrio de inscrio BOLSAS INTEGRAIS PARA PS GRADUAO Voc sabe qual o plano de sade a melhor opo pra voc? Voc sabe qual o plano de sade a melhor opo pra voc? OAB SADE Ementas / Jurisprudncias Recorte Digital $ Tabela de anuidades Tabela de anuidades Tabela de anuidades Tabela de anuidades Tabela de anuidades Tabela de anuidades Tabela de anuidades Tabela de anuidades Tabela de anuidades Tabela de anuidades Tabela de anuidades Tabela de anuidades Tabela de anuidades Tabela de anuidades Tabela de anuidades Tabela de anuidades Tabela de anuidades Tabela de anuidades Tabela de anuidades Tabela de anuidades Tabela de anuidades Tabela de anuidades Tabela de anuidades Tabela de anuidades Tabela de anuidades Tabela de anuidades Tabela de anuidades Tabela de anuidades Tabela de anui} "

URL: https://transparenciaoabrj.org/ Model: jbxai	{ "brand":["OABRJ"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "text":"O Portal da Transparncia da OABRJ torna pblicas todas as contas e demonstraes financeiras da instituio, permitindo o acompanhamento minucioso tanto da arrecadao, quanto do gerenciamento e da utilizao dos recursos financeiros. Alm dos balancetes contbeis da Seccional, o Portal traz dados atualizados sobre a estrutura e as despesas de cada subseo, em um mapa interativo que distingue as 63 representaes da Ordem no Estado do Rio de Janeiro. O acesso informao premissa bsica das melhores prticas de gesto e se conecta diretamente ao conceito de responsabilidade social. Mais que um compromisso da OABRJ, o princpio da transparncia traduz o respeito da Seccional as advogadas, aos advogados, aos estagirios e sociedade de forma ampla.", "has_visible_qrcode":false}

Name	Malicious	Reputation
https://www.oabrj.org.br/misc/jquery.once.js?v=1.2	false	unknown
https://transparenciaoabrj.org/wp-content/plugins/jet-blocks/assets/js/jet-blocks.min.js?ver=1.1.10.1	false	unknown
https://transparenciaoabrj.org/wp-content/plugins/anywhere-elementor-pro/includes/assets/js/common.min.js?ver=2.12.1	false	unknown
https://transparenciaoabrj.org/wp-includes/js/jquery/ui/datepicker.min.js?ver=1.11.4	false	unknown
https://transparenciaoabrj.org/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=2.6.7	false	unknown
https://oabrj.org.br/sites/default/files/footer/logo_cor.png	false	unknown
https://oabrj.org.br/sites/default/files/mosaic/0410-inverta-site2_0.png	false	unknown
https://www.oabrj.org.br/misc/drupal.js?sl24uh	false	unknown
https://oabrj.org.br/sites/default/files/favicon_site_oabrj.png	false	unknown
https://transparenciaoabrj.org/wp-content/plugins/premium-addons-pro/assets/frontend/js/lib/cycle.min.js?ver=1.6.3	false	unknown
https://transparenciaoabrj.org/wp-content/plugins/jet-menu/cherry-framework/modules/cherry-handler/assets/css/cherry-handler-styles.min.css?ver=1.5.11	false	unknown
https://oabrj.org.br/tabela-anuidades-2024	false	unknown
https://oabrj.org.br/modules/user/user.css?sl24uh	false	unknown
https://transparenciaoabrj.org/wp-content/plugins/jet-smart-filters/assets/js/public.js?ver=1.4.0	false	unknown
https://oabrj.org.br/sites/all/modules/jquery_update/replace/jquery/2.2/jquery.min.js?v=2.2.4	false	unknown
https://transparenciaoabrj.org/wp-includes/js/jquery/ui/mouse.min.js?ver=1.11.4	false	unknown
https://transparenciaoabrj.org/wp-content/plugins/anywhere-elementor-pro/includes/assets/lib/vegas/vegas.min.css?ver=5.2.21	false	unknown
https://unpkg.com/swiper/swiper-bundle.min.js	false	unknown
https://transparenciaoabrj.org/wp-content/plugins/anywhere-elementor-pro/includes/assets/js/ae-pro.min.js?ver=2.12.1	false	unknown
https://www.oabrj.org.br/sites/default/files/footer/logo_branco.png	false	unknown
https://transparenciaoabrj.org/wp-content/plugins/elementor/assets/lib/swiper/swiper.min.js?ver=4.4.6	false	unknown
https://transparenciaoabrj.org/wp-content/plugins/anywhere-elementor-pro/includes/assets/lib/masonry/js/masonry.pkgd.min.js?ver=2.0.1	false	unknown
https://transparenciaoabrj.org/wp-content/plugins/ultimate-elementor/assets/min-css/uael-frontend.min.css?ver=1.15.0	false	unknown
https://oabrj.org.br/modules/field/theme/field.css?sl24uh	false	unknown
https://oabrj.org.br/modules/system/system.messages.css?sl24uh	false	unknown
https://unpkg.com/swiper@11.1.14/swiper-bundle.min.css	false	unknown
https://cdn.equalweb.com/style/style.css	false	unknown
https://transparenciaoabrj.org/wp-content/plugins/anywhere-elementor-pro/includes/assets/css/ae-pro.min.css?ver=5.2.21	false	unknown
https://transparenciaoabrj.org/wp-content/plugins/jet-engine/assets/css/frontend.css?ver=1.4.8	false	unknown
https://www.oabrj.org.br/modules/system/system.messages.css?sl24uh	false	unknown
https://transparenciaoabrj.org/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-brands-400.woff2	false	unknown
https://transparenciaoabrj.org/wp-includes/css/dist/block-library/theme.min.css?ver=5.2.21	false	unknown
https://oabrj.org.br/modules/system/system.base.css?sl24uh	false	unknown
https://transparenciaoabrj.org/wp-content/uploads/elementor/css/post-69.css?ver=1715883556	false	unknown
https://transparenciaoabrj.org/wp-content/themes/twentynineteen/print.css?ver=1.4	false	unknown
https://www.oabrj.org.br/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js	false	unknown
https://oabrj.org.br/sites/all/modules/panels/css/panels.css?sl24uh	false	unknown
https://transparenciaoabrj.org/wp-content/plugins/premium-addons-pro/assets/frontend/css/premium-addons.css?ver=1.6.3	false	unknown
https://transparenciaoabrj.org/wp-includes/js/wp-embed.min.js?ver=5.2.21	false	unknown
https://transparenciaoabrj.org/wp-includes/js/jquery/jquery.js?ver=1.12.4-wp	false	unknown
https://cdn.equalweb.com/assets/images/1.svg	false	unknown
https://oabrj.org.br/sites/default/files/footer/0504-oab-saude-site.png	false	unknown
https://www.oabrj.org.br/misc/jquery-html-prefilter-3.5.0-backport.js?v=2.2.4	false	unknown
https://www.facebook.com/privacy_sandbox/pixel/register/trigger/?id=375683401386134&ev=PageView&dl=https%3A%2F%2Fwww.oabrj.org.br%2Fsorteio-mentoria-bolsas-integrais-curso-pos-graduacao&rl=&if=false&ts=1728425636519&sw=1280&sh=1024&v=2.9.170&r=stable&ec=0&o=4126&fbp=fb.2.1728425603276.738484766700728537&cs_est=true&ler=empty&cdl=API_unavailable&it=1728425634844&coo=false&rqm=FGET	false	unknown

Name	Source	Malicious	Antivirus Detection	Reputation
https://github.com/cure53/DOMPurify/blob/2.0.11/dist/purify.js#L128	chromecache_270.2.dr, chromecache_508.2.dr, chromecache_411.2.dr, chromecache_449.2.dr	false		unknown
https://oabrj.org.br/sites/default/files/news/images/reuniao_cnj_campanha_justica_custa_absurdo_5.jp	chromecache_381.2.dr	false		unknown
http://transparenciaoabrj.org/index.php/mapas/	chromecache_259.2.dr	false		unknown
https://www.oabrj.org.br/pap-inss-digital	chromecache_381.2.dr, chromecache_544.2.dr, chromecache_435.2.dr, chromecache_292.2.dr, chromecache_425.2.dr	false		unknown
http://www.smartmenus.org/	chromecache_506.2.dr, chromecache_404.2.dr	false		unknown
https://transparenciaoabrj.org/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.cs	chromecache_259.2.dr	false		unknown
https://ampcid.google.com/v1/publisher:getClientId	chromecache_392.2.dr, chromecache_297.2.dr	false	URL Reputation: safe	unknown
https://swiperjs.com	chromecache_348.2.dr, chromecache_306.2.dr	false	URL Reputation: safe	unknown
https://transparenciaoabrj.org/wp-content/plugins/jet-menu/cherry-framework/modules/cherry-js-core/a	chromecache_259.2.dr	false		unknown
http://www.opensource.org/licenses/mit-license.php	chromecache_557.2.dr, chromecache_370.2.dr, chromecache_336.2.dr, chromecache_378.2.dr	false	URL Reputation: safe	unknown
https://transparenciaoabrj.org/wp-content/plugins/jet-blocks/assets/js/jet-blocks.min.js?ver=1.1.10.	chromecache_259.2.dr	false		unknown
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_486.2.dr, chromecache_483.2.dr	false		unknown
https://cdn.equalweb.com/	chromecache_381.2.dr, chromecache_544.2.dr, chromecache_435.2.dr, chromecache_292.2.dr, chromecache_425.2.dr	false		unknown
https://github.com/jquery/jquery/blob/1.5/jquery.js#L4960	chromecache_270.2.dr, chromecache_508.2.dr, chromecache_411.2.dr, chromecache_449.2.dr	false		unknown
https://cdn.jsdelivr.net/gh/fancyapps/fancybox	chromecache_425.2.dr	false		unknown
https://transparenciaoabrj.org/wp-content/uploads/elementor/thumbs/oabemmapas2-obzf8ak4knzzft40uq2l3	chromecache_259.2.dr	false		unknown
https://transparenciaoabrj.org/wp-content/uploads/elementor/thumbs/prestacao2-obzf8ak4k87mizsxganedd	chromecache_259.2.dr	false		unknown
https://github.com/jquery/jquery/blob/1.5/jquery.js#L4958	chromecache_270.2.dr, chromecache_508.2.dr, chromecache_411.2.dr, chromecache_449.2.dr	false		unknown
https://github.com/jquery/jquery/blob/1.5/jquery.js#L4957	chromecache_270.2.dr, chromecache_508.2.dr, chromecache_411.2.dr, chromecache_449.2.dr	false		unknown
http://historicooabrj.webjur.com.br/PortalOab/	chromecache_292.2.dr, chromecache_425.2.dr	false		unknown
http://fancyapps.com/fancybox/	chromecache_513.2.dr, chromecache_452.2.dr	false		unknown
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11022	chromecache_449.2.dr	false		unknown
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11023	chromecache_449.2.dr	false		unknown
http://revistaeletronica.oabrj.org.br/	chromecache_381.2.dr, chromecache_544.2.dr, chromecache_435.2.dr, chromecache_292.2.dr, chromecache_425.2.dr	false		unknown
https://transparenciaoabrj.org/index.php/administrativo/	chromecache_259.2.dr	false		unknown
http://agenciadraft.com.br	chromecache_259.2.dr	false		unknown
https://guardioes.prerrogativasoabrj.org/prerrogativas-guardiao-e-book	chromecache_381.2.dr, chromecache_544.2.dr, chromecache_435.2.dr, chromecache_292.2.dr, chromecache_425.2.dr	false		unknown
https://transparenciaoabrj.org/wp-content/plugins/elementor-pro/assets/lib/smartmenus/jquery.smartme	chromecache_259.2.dr	false		unknown
http://www.oabrj.org.br/arquivos/files/PRERROGATIVAS_Guia_de_prerrogativas_site.pdf	chromecache_381.2.dr, chromecache_544.2.dr, chromecache_292.2.dr, chromecache_425.2.dr	false		unknown
https://transparenciaoabrj.org/index.php/prestacoes-de-contas-2021/	chromecache_259.2.dr	false		unknown
https://transparenciaoabrj.org/wp-content/uploads/2019/08/cropped-logo-1-270x270.png	chromecache_259.2.dr	false		unknown
https://fontawesome.com/license/free	chromecache_480.2.dr, chromecache_493.2.dr, chromecache_565.2.dr	false	URL Reputation: safe	unknown
https://github.com/jquery/jquery/blob/3.4.0/dist/jquery.js#L4712	chromecache_270.2.dr, chromecache_508.2.dr, chromecache_411.2.dr, chromecache_449.2.dr	false		unknown
https://transparenciaoabrj.org/wp-content/plugins/anywhere-elementor-pro/includes/assets/js/ae-pro.m	chromecache_259.2.dr	false		unknown
https://transparenciaoabrj.org/wp-content/plugins/jet-parallax/assets/js/jet-parallax-frontend.js?ve	chromecache_259.2.dr	false		unknown
https://transparenciaoabrj.org/index.php/prestacoes-de-contas-2022/	chromecache_259.2.dr	false		unknown
https://transparenciaoabrj.org/wp-includes/wlwmanifest.xml	chromecache_259.2.dr	false		unknown
http://transparenciaoabrj.org/index.php/contato/	chromecache_259.2.dr	false		unknown
https://pos.invertaeducacional.com.br/processo-seletivo	chromecache_544.2.dr	false		unknown
https://twitter.com/OABRJ_oficial	chromecache_425.2.dr	false		unknown
https://twitter.com/intent/tweet?text=http%3A%2F%2Fwww.oabrj.org.br%2Fnoticias%2Fum-salto-sua-carrei	chromecache_544.2.dr	false		unknown
https://getbootstrap.com/)	chromecache_486.2.dr, chromecache_483.2.dr, chromecache_420.2.dr	false	URL Reputation: safe	unknown
https://transparenciaoabrj.org/wp-content/plugins/jet-menu/assets/public/js/jet-menu-public-script.j	chromecache_259.2.dr	false		unknown
https://transparenciaoabrj.org/wp-content/plugins/elementor/assets/lib/swiper/swiper.min.js?ver=4.4.	chromecache_259.2.dr	false		unknown
https://transparenciaoabrj.org/index.php/prestacoes-de-contas-2023/	chromecache_259.2.dr	false		unknown
https://api.jquery.com/jquery.browser/	chromecache_398.2.dr, chromecache_344.2.dr, chromecache_305.2.dr, chromecache_405.2.dr	false		unknown
https://oabrj.org.br/sites/default/files/news/images/reuniao_cnj_campanha_justica_custa_absurdo_4.jp	chromecache_381.2.dr	false		unknown
https://developer.mozilla.org/en-US/docs/Web/HTML/Element	chromecache_270.2.dr, chromecache_508.2.dr, chromecache_411.2.dr, chromecache_449.2.dr	false		unknown
https://oabrj.org.br/rss.xml	chromecache_292.2.dr	false		unknown
https://arearestrita.oabrj.org.br/arearestrita/#/login	chromecache_381.2.dr, chromecache_544.2.dr, chromecache_435.2.dr, chromecache_292.2.dr, chromecache_425.2.dr	false		unknown
https://oabrj.org.br/sites/default/files/styles/large/public/news/images/reuniao_cnj_campanha_justic	chromecache_381.2.dr	false		unknown
https://transparenciaoabrj.org/wp-content/uploads/2019/08/cropped-logo-1-180x180.png	chromecache_259.2.dr	false		unknown
http://transparenciaoabrj.org/index.php/demonstracoes/	chromecache_259.2.dr	false		unknown
http://www.cofry.com.br/oabrj_caarj	chromecache_425.2.dr	false		unknown
https://adservice.google.com/pagead/regclk?	chromecache_545.2.dr	false		unknown
https://github.com/jquery/jquery/blob/1.9.0/jquery.js#L6419	chromecache_270.2.dr, chromecache_508.2.dr, chromecache_411.2.dr, chromecache_449.2.dr	false		unknown

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Oct 8 21:13:11 2024, atime=Wed Sep 27 08:36:55 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2673
Entropy (8bit):	3.9789727441267044
Encrypted:	false
SSDEEP:	48:80I/dfWTwjHSHn8ZidAKZdA1P4ehwiZUklqehRdy+3:80I5W8jH28zOwdy
MD5:	17B564FA27B541A65CF1B0D0D82E1CE9
SHA1:	86E9F49A4C5A84FBED5444F578DF4BB0240658A8
SHA-256:	101FE4CA76D0094768510D5ED320D70ECDA5BD149D9FC0C30663B9C439C9AA53
SHA-512:	DFD6C8E7F51F9587445635AFEE45443F718A37ED7B497A762D8587FD72E1BB7E20DBFDD5146D37371CA688648AB205957265FA8B7D1C194422E57F744FA4AFDD
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....lY.C......v'&... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW.I..PROGRA~1..t......O.IHY......B...............J.....\...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VHY......L.....................p+j.G.o.o.g.l.e.....T.1.....EW.F..Chrome..>......CW.VHY......M......................O..C.h.r.o.m.e.....`.1.....EW.F..APPLIC~1..H......CW.VHY...............................A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.L .CHROME~1.EXE..R......CW.VHY.............................).c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............J.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 9, 2024 00:13:11.515094042 CEST	192.168.2.9	1.1.1.1	0x4efe	Standard query (0)	oabrj.org.br	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:13:11.515199900 CEST	192.168.2.9	1.1.1.1	0xb5e8	Standard query (0)	oabrj.org.br	65	IN (0x0001)	false
Oct 9, 2024 00:13:12.003133059 CEST	192.168.2.9	1.1.1.1	0x1ad7	Standard query (0)	oabrj.org.br	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:13:12.003432035 CEST	192.168.2.9	1.1.1.1	0xcb75	Standard query (0)	oabrj.org.br	65	IN (0x0001)	false
Oct 9, 2024 00:13:13.457303047 CEST	192.168.2.9	1.1.1.1	0x1c79	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:13:13.457628012 CEST	192.168.2.9	1.1.1.1	0x9230	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
Oct 9, 2024 00:13:13.458554983 CEST	192.168.2.9	1.1.1.1	0x643e	Standard query (0)	unpkg.com	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:13:13.458739996 CEST	192.168.2.9	1.1.1.1	0xb755	Standard query (0)	unpkg.com	65	IN (0x0001)	false
Oct 9, 2024 00:13:13.607795000 CEST	192.168.2.9	1.1.1.1	0xe1f8	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:13:13.609791040 CEST	192.168.2.9	1.1.1.1	0xc759	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 9, 2024 00:13:15.962833881 CEST	192.168.2.9	1.1.1.1	0x441c	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:13:15.963053942 CEST	192.168.2.9	1.1.1.1	0x43ea	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
Oct 9, 2024 00:13:17.806175947 CEST	192.168.2.9	1.1.1.1	0xe679	Standard query (0)	oabrj.org.br	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:13:17.806521893 CEST	192.168.2.9	1.1.1.1	0xfd43	Standard query (0)	oabrj.org.br	65	IN (0x0001)	false
Oct 9, 2024 00:13:20.508413076 CEST	192.168.2.9	1.1.1.1	0xe6da	Standard query (0)	cdn.equalweb.com	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:13:20.508579016 CEST	192.168.2.9	1.1.1.1	0x89dc	Standard query (0)	cdn.equalweb.com	65	IN (0x0001)	false
Oct 9, 2024 00:13:20.689331055 CEST	192.168.2.9	1.1.1.1	0x981	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:13:20.689582109 CEST	192.168.2.9	1.1.1.1	0xb143	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Oct 9, 2024 00:13:21.253248930 CEST	192.168.2.9	1.1.1.1	0xb8af	Standard query (0)	cdn.equalweb.com	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:13:21.253633976 CEST	192.168.2.9	1.1.1.1	0x2a7b	Standard query (0)	cdn.equalweb.com	65	IN (0x0001)	false
Oct 9, 2024 00:13:22.142563105 CEST	192.168.2.9	1.1.1.1	0xf2e3	Standard query (0)	api.sac.digital	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:13:22.143268108 CEST	192.168.2.9	1.1.1.1	0xc0e4	Standard query (0)	api.sac.digital	65	IN (0x0001)	false
Oct 9, 2024 00:13:23.070437908 CEST	192.168.2.9	1.1.1.1	0x47c7	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:13:23.070610046 CEST	192.168.2.9	1.1.1.1	0x8d89	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Oct 9, 2024 00:13:23.071424961 CEST	192.168.2.9	1.1.1.1	0xf550	Standard query (0)	unpkg.com	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:13:23.071424961 CEST	192.168.2.9	1.1.1.1	0xc33a	Standard query (0)	unpkg.com	65	IN (0x0001)	false
Oct 9, 2024 00:13:23.916589975 CEST	192.168.2.9	1.1.1.1	0x5270	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:13:23.916834116 CEST	192.168.2.9	1.1.1.1	0xfe86	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Oct 9, 2024 00:13:24.508164883 CEST	192.168.2.9	1.1.1.1	0xa75	Standard query (0)	api.sac.digital	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:13:24.509126902 CEST	192.168.2.9	1.1.1.1	0x3a45	Standard query (0)	api.sac.digital	65	IN (0x0001)	false
Oct 9, 2024 00:13:24.945794106 CEST	192.168.2.9	1.1.1.1	0x747f	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:13:24.946000099 CEST	192.168.2.9	1.1.1.1	0xced2	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Oct 9, 2024 00:13:49.230864048 CEST	192.168.2.9	1.1.1.1	0xa6b3	Standard query (0)	www.oabrj.org.br	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:13:49.230864048 CEST	192.168.2.9	1.1.1.1	0xe545	Standard query (0)	www.oabrj.org.br	65	IN (0x0001)	false
Oct 9, 2024 00:13:52.984091997 CEST	192.168.2.9	1.1.1.1	0xb7db	Standard query (0)	www.oabrj.org.br	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:13:52.984690905 CEST	192.168.2.9	1.1.1.1	0x67fb	Standard query (0)	www.oabrj.org.br	65	IN (0x0001)	false
Oct 9, 2024 00:14:16.948321104 CEST	192.168.2.9	1.1.1.1	0x85b3	Standard query (0)	transparenciaoabrj.org	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:14:16.948574066 CEST	192.168.2.9	1.1.1.1	0x9be8	Standard query (0)	transparenciaoabrj.org	65	IN (0x0001)	false
Oct 9, 2024 00:14:19.938041925 CEST	192.168.2.9	1.1.1.1	0xe877	Standard query (0)	s.w.org	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:14:19.938281059 CEST	192.168.2.9	1.1.1.1	0x55fe	Standard query (0)	s.w.org	65	IN (0x0001)	false
Oct 9, 2024 00:14:20.265716076 CEST	192.168.2.9	1.1.1.1	0x726c	Standard query (0)	transparenciaoabrj.org	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:14:20.265966892 CEST	192.168.2.9	1.1.1.1	0x6fb	Standard query (0)	transparenciaoabrj.org	65	IN (0x0001)	false
Oct 9, 2024 00:14:26.892199039 CEST	192.168.2.9	1.1.1.1	0xbda3	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:14:26.892508030 CEST	192.168.2.9	1.1.1.1	0x8a87	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Oct 9, 2024 00:14:27.687778950 CEST	192.168.2.9	1.1.1.1	0x5deb	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:14:27.687926054 CEST	192.168.2.9	1.1.1.1	0x3e3a	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 9, 2024 00:13:12.000011921 CEST	1.1.1.1	192.168.2.9	0x4efe	No error (0)	oabrj.org.br		188.114.97.3	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:13:12.000011921 CEST	1.1.1.1	192.168.2.9	0x4efe	No error (0)	oabrj.org.br		188.114.96.3	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:13:12.000303030 CEST	1.1.1.1	192.168.2.9	0xb5e8	No error (0)	oabrj.org.br			65	IN (0x0001)	false
Oct 9, 2024 00:13:12.050693989 CEST	1.1.1.1	192.168.2.9	0x1ad7	No error (0)	oabrj.org.br		188.114.96.3	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:13:12.050693989 CEST	1.1.1.1	192.168.2.9	0x1ad7	No error (0)	oabrj.org.br		188.114.97.3	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:13:12.240515947 CEST	1.1.1.1	192.168.2.9	0xcb75	No error (0)	oabrj.org.br			65	IN (0x0001)	false
Oct 9, 2024 00:13:13.467844963 CEST	1.1.1.1	192.168.2.9	0x9230	No error (0)	cdn.jsdelivr.net	cdn.jsdelivr.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 9, 2024 00:13:13.468780994 CEST	1.1.1.1	192.168.2.9	0x1c79	No error (0)	cdn.jsdelivr.net	cdn.jsdelivr.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 9, 2024 00:13:13.470346928 CEST	1.1.1.1	192.168.2.9	0xb755	No error (0)	unpkg.com			65	IN (0x0001)	false
Oct 9, 2024 00:13:13.470359087 CEST	1.1.1.1	192.168.2.9	0x643e	No error (0)	unpkg.com		104.17.246.203	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:13:13.470359087 CEST	1.1.1.1	192.168.2.9	0x643e	No error (0)	unpkg.com		104.17.249.203	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:13:13.470359087 CEST	1.1.1.1	192.168.2.9	0x643e	No error (0)	unpkg.com		104.17.245.203	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:13:13.470359087 CEST	1.1.1.1	192.168.2.9	0x643e	No error (0)	unpkg.com		104.17.247.203	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:13:13.470359087 CEST	1.1.1.1	192.168.2.9	0x643e	No error (0)	unpkg.com		104.17.248.203	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:13:13.614979029 CEST	1.1.1.1	192.168.2.9	0xe1f8	No error (0)	www.google.com		216.58.206.68	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:13:13.616528988 CEST	1.1.1.1	192.168.2.9	0xc759	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 9, 2024 00:13:16.275975943 CEST	1.1.1.1	192.168.2.9	0x43ea	No error (0)	cdn.jsdelivr.net	cdn.jsdelivr.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 9, 2024 00:13:16.276097059 CEST	1.1.1.1	192.168.2.9	0x441c	No error (0)	cdn.jsdelivr.net	cdn.jsdelivr.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 9, 2024 00:13:17.817794085 CEST	1.1.1.1	192.168.2.9	0xfd43	No error (0)	oabrj.org.br			65	IN (0x0001)	false
Oct 9, 2024 00:13:18.058696032 CEST	1.1.1.1	192.168.2.9	0xe679	No error (0)	oabrj.org.br		188.114.97.3	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:13:18.058696032 CEST	1.1.1.1	192.168.2.9	0xe679	No error (0)	oabrj.org.br		188.114.96.3	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:13:20.517137051 CEST	1.1.1.1	192.168.2.9	0x89dc	No error (0)	cdn.equalweb.com			65	IN (0x0001)	false
Oct 9, 2024 00:13:20.519016981 CEST	1.1.1.1	192.168.2.9	0xe6da	No error (0)	cdn.equalweb.com		172.67.71.113	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:13:20.519016981 CEST	1.1.1.1	192.168.2.9	0xe6da	No error (0)	cdn.equalweb.com		104.26.12.95	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:13:20.519016981 CEST	1.1.1.1	192.168.2.9	0xe6da	No error (0)	cdn.equalweb.com		104.26.13.95	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:13:20.696273088 CEST	1.1.1.1	192.168.2.9	0x981	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 9, 2024 00:13:20.696273088 CEST	1.1.1.1	192.168.2.9	0x981	No error (0)	scontent.xx.fbcdn.net		157.240.252.13	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:13:20.696290970 CEST	1.1.1.1	192.168.2.9	0xb143	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 9, 2024 00:13:20.696290970 CEST	1.1.1.1	192.168.2.9	0xb143	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Oct 9, 2024 00:13:20.696290970 CEST	1.1.1.1	192.168.2.9	0xb143	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Oct 9, 2024 00:13:21.263511896 CEST	1.1.1.1	192.168.2.9	0x2a7b	No error (0)	cdn.equalweb.com			65	IN (0x0001)	false
Oct 9, 2024 00:13:21.263530016 CEST	1.1.1.1	192.168.2.9	0xb8af	No error (0)	cdn.equalweb.com		104.26.13.95	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:13:21.263530016 CEST	1.1.1.1	192.168.2.9	0xb8af	No error (0)	cdn.equalweb.com		172.67.71.113	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:13:21.263530016 CEST	1.1.1.1	192.168.2.9	0xb8af	No error (0)	cdn.equalweb.com		104.26.12.95	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:13:22.360177040 CEST	1.1.1.1	192.168.2.9	0xf2e3	No error (0)	api.sac.digital		177.53.170.78	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:13:23.079205990 CEST	1.1.1.1	192.168.2.9	0x47c7	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 9, 2024 00:13:23.079205990 CEST	1.1.1.1	192.168.2.9	0x47c7	No error (0)	scontent.xx.fbcdn.net		157.240.0.6	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:13:23.079416990 CEST	1.1.1.1	192.168.2.9	0x8d89	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 9, 2024 00:13:23.079416990 CEST	1.1.1.1	192.168.2.9	0x8d89	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Oct 9, 2024 00:13:23.079416990 CEST	1.1.1.1	192.168.2.9	0x8d89	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Oct 9, 2024 00:13:23.079571009 CEST	1.1.1.1	192.168.2.9	0xf550	No error (0)	unpkg.com		104.17.248.203	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:13:23.079571009 CEST	1.1.1.1	192.168.2.9	0xf550	No error (0)	unpkg.com		104.17.249.203	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:13:23.079571009 CEST	1.1.1.1	192.168.2.9	0xf550	No error (0)	unpkg.com		104.17.246.203	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:13:23.079571009 CEST	1.1.1.1	192.168.2.9	0xf550	No error (0)	unpkg.com		104.17.247.203	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:13:23.079571009 CEST	1.1.1.1	192.168.2.9	0xf550	No error (0)	unpkg.com		104.17.245.203	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:13:23.080348015 CEST	1.1.1.1	192.168.2.9	0xc33a	No error (0)	unpkg.com			65	IN (0x0001)	false
Oct 9, 2024 00:13:23.925012112 CEST	1.1.1.1	192.168.2.9	0x5270	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 9, 2024 00:13:23.925012112 CEST	1.1.1.1	192.168.2.9	0x5270	No error (0)	star-mini.c10r.facebook.com		157.240.0.35	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:13:23.925597906 CEST	1.1.1.1	192.168.2.9	0xfe86	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 9, 2024 00:13:24.171772957 CEST	1.1.1.1	192.168.2.9	0xec0f	No error (0)	edge.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 9, 2024 00:13:24.171772957 CEST	1.1.1.1	192.168.2.9	0xec0f	No error (0)	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		217.20.57.18	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:13:24.171772957 CEST	1.1.1.1	192.168.2.9	0xec0f	No error (0)	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		217.20.57.34	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:13:24.954256058 CEST	1.1.1.1	192.168.2.9	0x747f	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 9, 2024 00:13:24.954256058 CEST	1.1.1.1	192.168.2.9	0x747f	No error (0)	star-mini.c10r.facebook.com		157.240.251.35	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:13:24.954293013 CEST	1.1.1.1	192.168.2.9	0xced2	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 9, 2024 00:13:25.438735962 CEST	1.1.1.1	192.168.2.9	0xa75	No error (0)	api.sac.digital		177.53.170.78	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:13:26.948833942 CEST	1.1.1.1	192.168.2.9	0xda6c	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 9, 2024 00:13:26.948833942 CEST	1.1.1.1	192.168.2.9	0xda6c	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:13:43.276874065 CEST	1.1.1.1	192.168.2.9	0xf432	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 9, 2024 00:13:43.276874065 CEST	1.1.1.1	192.168.2.9	0xf432	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:13:49.485156059 CEST	1.1.1.1	192.168.2.9	0xa6b3	No error (0)	www.oabrj.org.br		188.114.97.3	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:13:49.485156059 CEST	1.1.1.1	192.168.2.9	0xa6b3	No error (0)	www.oabrj.org.br		188.114.96.3	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:13:49.628756046 CEST	1.1.1.1	192.168.2.9	0xe545	No error (0)	www.oabrj.org.br			65	IN (0x0001)	false
Oct 9, 2024 00:13:52.997684956 CEST	1.1.1.1	192.168.2.9	0xb7db	No error (0)	www.oabrj.org.br		188.114.96.3	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:13:52.997684956 CEST	1.1.1.1	192.168.2.9	0xb7db	No error (0)	www.oabrj.org.br		188.114.97.3	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:13:53.050725937 CEST	1.1.1.1	192.168.2.9	0x67fb	No error (0)	www.oabrj.org.br			65	IN (0x0001)	false
Oct 9, 2024 00:14:02.837611914 CEST	1.1.1.1	192.168.2.9	0x2151	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 9, 2024 00:14:02.837611914 CEST	1.1.1.1	192.168.2.9	0x2151	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:14:17.003185034 CEST	1.1.1.1	192.168.2.9	0x85b3	No error (0)	transparenciaoabrj.org		89.116.59.44	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:14:19.946517944 CEST	1.1.1.1	192.168.2.9	0xe877	No error (0)	s.w.org		192.0.77.48	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:14:20.300777912 CEST	1.1.1.1	192.168.2.9	0x726c	No error (0)	transparenciaoabrj.org		89.116.59.44	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:14:26.898988962 CEST	1.1.1.1	192.168.2.9	0xbda3	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:14:26.898988962 CEST	1.1.1.1	192.168.2.9	0xbda3	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:14:26.899930000 CEST	1.1.1.1	192.168.2.9	0x8a87	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Oct 9, 2024 00:14:27.694849968 CEST	1.1.1.1	192.168.2.9	0x5deb	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:14:27.694849968 CEST	1.1.1.1	192.168.2.9	0x5deb	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Oct 9, 2024 00:14:27.694861889 CEST	1.1.1.1	192.168.2.9	0x3e3a	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false

Timestamp	Bytes transferred	Direction	Data
2024-10-08 22:13:10 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 22:13:10 UTC	540	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 22:13:10 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Tue, 08 Oct 2024 05:32:11 GMT ETag: "0x8DCE75A8F43FDF4" x-ms-request-id: 6f3499de-501e-008f-5174-199054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T221310Z-1657d5bbd48xsz2nuzq4vfrzg800000005h00000000041pb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 22:13:10 UTC	15844	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-08 22:13:10 UTC	16384	IN	Data Raw: 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e Data Ascii: "0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" />
2024-10-08 22:13:11 UTC	16384	IN	Data Raw: 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 Data Ascii: <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-781
2024-10-08 22:13:11 UTC	16384	IN	Data Raw: 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32"
2024-10-08 22:13:11 UTC	16384	IN	Data Raw: 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f Data Ascii: "0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Co
2024-10-08 22:13:11 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a Data Ascii: <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C>
2024-10-08 22:13:11 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 Data Ascii: <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMillisec
2024-10-08 22:13:11 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e Data Ascii: R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIn
2024-10-08 22:13:11 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L>
2024-10-08 22:13:11 UTC	16384	IN	Data Raw: 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <

Timestamp	Bytes transferred	Direction	Data
2024-10-08 22:13:12 UTC	655	OUT	GET / HTTP/1.1 Host: oabrj.org.br Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-08 22:13:13 UTC	880	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 22:13:13 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close X-Content-Type-Options: nosniff X-Content-Type-Options: nosniff X-Drupal-Cache: HIT Content-Language: pt-br X-Frame-Options: SAMEORIGIN Cache-Control: public, max-age=600 Last-Modified: Tue, 08 Oct 2024 21:55:57 GMT Expires: Sun, 19 Nov 1978 05:00:00 GMT Vary: Cookie,Accept-Encoding cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=U8zNVOA9aulbPucirycVccZ8pHmFjTRUlo%2BCw8gdMuqDUi%2FyLOi5rjUQ5xiUFjKBYfgTOD1nMvg53k15h12Qiym16CORWR2%2B%2Bzm9gGXHjl%2F3ZZsQRooAMFI4Dwn7cSY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cf97a11de948c6b-EWR
2024-10-08 22:13:13 UTC	489	IN	Data Raw: 37 63 33 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 70 74 2d 62 72 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 72 73 73 2b 78 6d 6c 22 20 74 69 74 6c 65 3d 22 4f 41 42 52 4a 20 52 53 53 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6f 61 62 72 6a 2e 6f 72 67 2e 62 72 2f 72 73 73 2e 78 6d 6c 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 Data Ascii: 7c31<!DOCTYPE html><html lang="pt-br"><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8" /><link rel="alternate" type="application/rss+xml" title="OABRJ RSS" href="https://oabrj.org.br/rss.xml" /><meta http-equiv="X-UA-Compati
2024-10-08 22:13:13 UTC	1369	IN	Data Raw: 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 32 3f 66 61 6d 69 6c 79 3d 4f 70 65 6e 2b 53 61 6e 73 3a 77 67 68 74 40 33 30 30 3b 34 30 30 3b 35 30 30 3b 36 30 30 3b 37 30 30 3b 38 30 30 26 66 61 6d 69 6c 79 3d 50 54 2b 53 61 6e 73 2b 4e 61 72 72 6f 77 26 64 69 73 70 6c 61 79 3d 73 77 61 70 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 3e 0a 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 6a 73 64 65 6c 69 76 72 2e 6e 65 74 2f 6e 70 6d 2f 62 6f 6f 74 73 74 72 61 70 40 35 2e Data Ascii: connect" href="https://fonts.gstatic.com" crossorigin><link href="https://fonts.googleapis.com/css2?family=Open+Sans:wght@300;400;500;600;700;800&family=PT+Sans+Narrow&display=swap" rel="stylesheet"><link href="https://cdn.jsdelivr.net/npm/bootstrap@5.
2024-10-08 22:13:13 UTC	1369	IN	Data Raw: 61 6c 6c 2f 6d 6f 64 75 6c 65 73 2f 76 69 65 77 73 2f 63 73 73 2f 76 69 65 77 73 2e 63 73 73 3f 73 6c 32 34 75 68 22 29 3b 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 6d 65 64 69 61 3d 22 61 6c 6c 22 3e 0a 40 69 6d 70 6f 72 74 20 75 72 6c 28 22 68 74 74 70 73 3a 2f 2f 6f 61 62 72 6a 2e 6f 72 67 2e 62 72 2f 73 69 74 65 73 2f 61 6c 6c 2f 6d 6f 64 75 6c 65 73 2f 63 74 6f 6f 6c 73 2f 63 73 73 2f 63 74 6f 6f 6c 73 2e 63 73 73 3f 73 6c 32 34 75 68 22 29 3b 0a 40 69 6d 70 6f 72 74 20 75 72 6c 28 22 68 74 74 70 73 3a 2f 2f 6f 61 62 72 6a 2e 6f 72 67 2e 62 72 2f 73 69 74 65 73 2f 61 6c 6c 2f 6d 6f 64 75 6c 65 73 2f 70 61 6e 65 6c 73 2f 63 73 73 2f 70 61 6e 65 6c 73 2e 63 73 73 3f 73 6c 32 34 75 68 22 29 3b 0a Data Ascii: all/modules/views/css/views.css?sl24uh");</style><style type="text/css" media="all">@import url("https://oabrj.org.br/sites/all/modules/ctools/css/ctools.css?sl24uh");@import url("https://oabrj.org.br/sites/all/modules/panels/css/panels.css?sl24uh");
2024-10-08 22:13:13 UTC	1369	IN	Data Raw: 74 74 70 73 3a 2f 2f 6f 61 62 72 6a 2e 6f 72 67 2e 62 72 2f 73 69 74 65 73 2f 64 65 66 61 75 6c 74 2f 66 69 6c 65 73 2f 6c 61 6e 67 75 61 67 65 73 2f 70 74 2d 62 72 5f 58 52 65 38 6f 5a 4e 6a 76 41 74 5a 5a 47 73 56 56 49 5f 72 36 6a 41 76 6d 34 4d 39 35 2d 50 66 75 5a 49 38 76 32 53 52 67 55 51 2e 6a 73 3f 73 6c 32 34 75 68 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 6a 73 64 65 6c 69 76 72 2e 6e 65 74 2f 67 68 2f 66 61 6e 63 79 61 70 70 73 2f 66 61 6e 63 79 62 6f 78 40 33 2e 35 2e 36 2f 64 69 73 74 2f 6a 71 75 65 72 79 2e 66 61 6e 63 79 62 6f 78 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 Data Ascii: ttps://oabrj.org.br/sites/default/files/languages/pt-br_XRe8oZNjvAtZZGsVVI_r6jAvm4M95-PfuZI8v2SRgUQ.js?sl24uh"></script><script type="text/javascript" src="https://cdn.jsdelivr.net/gh/fancyapps/fancybox@3.5.6/dist/jquery.fancybox.min.js"></script><scrip
2024-10-08 22:13:13 UTC	1369	IN	Data Raw: 22 3a 31 2c 22 6d 6f 64 75 6c 65 73 5c 2f 73 65 61 72 63 68 5c 2f 73 65 61 72 63 68 2e 63 73 73 22 3a 31 2c 22 6d 6f 64 75 6c 65 73 5c 2f 75 73 65 72 5c 2f 75 73 65 72 2e 63 73 73 22 3a 31 2c 22 73 69 74 65 73 5c 2f 61 6c 6c 5c 2f 6d 6f 64 75 6c 65 73 5c 2f 76 69 65 77 73 5c 2f 63 73 73 5c 2f 76 69 65 77 73 2e 63 73 73 22 3a 31 2c 22 73 69 74 65 73 5c 2f 61 6c 6c 5c 2f 6d 6f 64 75 6c 65 73 5c 2f 63 74 6f 6f 6c 73 5c 2f 63 73 73 5c 2f 63 74 6f 6f 6c 73 2e 63 73 73 22 3a 31 2c 22 73 69 74 65 73 5c 2f 61 6c 6c 5c 2f 6d 6f 64 75 6c 65 73 5c 2f 70 61 6e 65 6c 73 5c 2f 63 73 73 5c 2f 70 61 6e 65 6c 73 2e 63 73 73 22 3a 31 2c 22 68 74 74 70 73 3a 5c 2f 5c 2f 63 64 6e 2e 6a 73 64 65 6c 69 76 72 2e 6e 65 74 5c 2f 67 68 5c 2f 66 61 6e 63 79 61 70 70 73 5c 2f 66 61 Data Ascii: ":1,"modules\/search\/search.css":1,"modules\/user\/user.css":1,"sites\/all\/modules\/views\/css\/views.css":1,"sites\/all\/modules\/ctools\/css\/ctools.css":1,"sites\/all\/modules\/panels\/css\/panels.css":1,"https:\/\/cdn.jsdelivr.net\/gh\/fancyapps\/fa
2024-10-08 22:13:13 UTC	1369	IN	Data Raw: 67 65 20 2e 6c 65 67 65 6e 64 20 2e 74 69 74 6c 65 2c 0d 0a 09 2e 66 61 6e 63 79 2d 6d 6f 73 61 69 63 20 61 72 74 69 63 6c 65 2e 6c 61 72 67 65 20 2e 6c 65 67 65 6e 64 20 2e 74 69 74 6c 65 20 7b 0d 0a 09 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 30 70 78 3b 0d 0a 09 7d 0d 0a 0d 0a 7d 0d 0a 0d 0a 40 6d 65 64 69 61 20 61 6c 6c 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 37 36 38 70 78 29 20 7b 0d 0a 09 2e 6c 6f 67 6f 20 7b 0d 0a 09 09 77 69 64 74 68 3a 20 31 39 36 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 34 38 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 20 33 36 30 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 63 65 6e 74 65 Data Ascii: ge .legend .title,.fancy-mosaic article.large .legend .title { font-size: 20px;}}@media all and (min-width: 768px) {.logo {width: 196px; height: 48px; background-size: 360px; background-position: cente
2024-10-08 22:13:13 UTC	1369	IN	Data Raw: 2d 77 61 72 6e 69 6e 67 2c 20 0d 0a 68 65 61 64 65 72 20 2e 62 74 6e 2d 64 61 6e 67 65 72 20 7b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 64 61 6e 67 65 72 2d 6c 74 29 3b 0d 0a 20 20 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 64 61 6e 67 65 72 2d 6c 74 29 3b 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 57 68 69 74 65 3b 0d 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0d 0a 20 20 20 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 2e 32 73 20 41 6c 6c 3b 0d 0a 7d 0d 0a 0d 0a 68 65 61 64 65 72 20 2e 62 74 6e 2d 77 61 72 6e 69 6e 67 3a 68 6f 76 65 72 2c 20 0d 0a 68 65 61 64 65 72 20 2e 62 74 6e 2d 64 61 6e 67 65 72 3a 68 6f 76 65 72 20 7b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f Data Ascii: -warning, header .btn-danger { background-color: var(--danger-lt); border-color: var(--danger-lt); color: White; opacity: 1; transition: .2s All;}header .btn-warning:hover, header .btn-danger:hover { background-colo
2024-10-08 22:13:13 UTC	1369	IN	Data Raw: 20 5d 2c 0d 0a 20 20 20 20 20 20 20 20 22 73 63 61 6c 65 22 3a 20 5b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 30 2e 36 22 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 30 2e 38 22 0d 0a 20 20 20 20 20 20 20 20 5d 2c 0d 0a 20 20 20 20 20 20 20 20 22 63 6f 6c 6f 72 22 3a 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 6d 61 69 6e 22 3a 20 22 23 66 35 30 33 30 39 22 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 73 65 63 6f 6e 64 22 3a 20 22 23 30 30 31 30 32 32 22 0d 0a 20 20 20 20 20 20 20 20 7d 2c 0d 0a 20 20 20 20 20 20 20 20 22 69 63 6f 6e 22 3a 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 74 79 70 65 22 3a 20 31 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 73 68 61 70 65 22 3a 20 22 63 69 72 63 6c 65 22 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: ], "scale": [ "0.6", "0.8" ], "color": { "main": "#f50309", "second": "#001022" }, "icon": { "type": 1, "shape": "circle"
2024-10-08 22:13:13 UTC	1369	IN	Data Raw: 22 31 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 22 0d 0a 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 74 72 3f 69 64 3d 33 37 35 36 38 33 34 30 31 33 38 36 31 33 34 26 65 76 3d 50 61 67 65 56 69 65 77 26 6e 6f 73 63 72 69 70 74 3d 31 22 0d 0a 2f 3e 3c 2f 6e 6f 73 63 72 69 70 74 3e 0d 0a 3c 21 2d 2d 20 45 6e 64 20 4d 65 74 61 20 50 69 78 65 6c 20 43 6f 64 65 20 2d 2d 3e 0a 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 6f 6f 67 6c 65 2d 73 69 74 65 2d 76 65 72 69 66 69 63 61 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 52 73 54 47 37 76 37 44 51 6c 33 42 45 32 6a 48 6c 62 58 69 42 41 52 6d 4f 44 42 55 2d 6b 4c 7a 4d 66 42 5f 61 43 63 44 77 33 49 22 20 2f 3e 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d Data Ascii: "1" style="display:none"src="https://www.facebook.com/tr?id=375683401386134&ev=PageView&noscript=1"/></noscript>... End Meta Pixel Code --><meta name="google-site-verification" content="RsTG7v7DQl3BE2jHlbXiBARmODBU-kLzMfB_aCcDw3I" /><meta name=
2024-10-08 22:13:13 UTC	1369	IN	Data Raw: 79 70 65 3d 22 68 69 64 64 65 6e 22 20 6e 61 6d 65 3d 22 66 6f 72 6d 5f 69 64 22 20 76 61 6c 75 65 3d 22 73 65 61 72 63 68 5f 66 6f 72 6d 22 20 2f 3e 0a 3c 2f 64 69 76 3e 3c 2f 66 6f 72 6d 3e 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 3c 66 6f 72 6d 20 63 6c 61 73 73 3d 22 73 65 61 72 63 68 2d 66 6f 72 6d 2d 64 69 73 70 6c 61 79 20 6d 62 2d 30 22 3e 0a 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 6e 70 75 74 2d 67 72 6f 75 70 20 6d 62 2d 30 22 3e 0a 09 09 09 09 09 09 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 74 65 78 74 22 20 63 6c 61 73 73 3d 22 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 20 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 2d 73 6d 22 20 70 6c 61 63 65 68 6f 6c 64 65 72 3d 22 44 69 67 69 74 65 20 73 75 61 20 62 75 73 63 61 22 20 61 72 69 61 2d 6c 61 Data Ascii: ype="hidden" name="form_id" value="search_form" /></div></form></div><form class="search-form-display mb-0"><div class="input-group mb-0"><input type="text" class="form-control form-control-sm" placeholder="Digite sua busca" aria-la

Timestamp	Bytes transferred	Direction	Data
2024-10-08 22:13:12 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 22:13:12 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 22:13:12 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 4545068c-701e-0050-0e05-176767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T221312Z-1657d5bbd48jwrqbupe3ktsx9w00000005vg000000005bq1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 22:13:12 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Timestamp	Bytes transferred	Direction	Data
2024-10-08 22:13:12 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 22:13:12 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 22:13:12 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: d4448e94-101e-00a2-2703-179f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T221312Z-1657d5bbd48brl8we3nu8cxwgn00000005sg00000001005k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 22:13:12 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Timestamp	Bytes transferred	Direction	Data
2024-10-08 22:13:12 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 22:13:12 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 22:13:12 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: b27588a3-a01e-003d-6001-1798d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T221312Z-1657d5bbd48lknvp09v995n790000000054000000000w8ey x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 22:13:12 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://oabrj.org.br/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 251

Chrome Cache Entry: 252

Chrome Cache Entry: 253

Chrome Cache Entry: 254

Chrome Cache Entry: 255

Chrome Cache Entry: 256

Chrome Cache Entry: 257

Chrome Cache Entry: 258

Chrome Cache Entry: 259

Chrome Cache Entry: 260

Chrome Cache Entry: 261

Chrome Cache Entry: 262

Chrome Cache Entry: 263

Chrome Cache Entry: 264

Chrome Cache Entry: 265

Chrome Cache Entry: 266

Chrome Cache Entry: 267

Chrome Cache Entry: 268

Chrome Cache Entry: 269

Chrome Cache Entry: 270

Chrome Cache Entry: 271

Chrome Cache Entry: 272

Windows Analysis Report
http://oabrj.org.br/

Timestamp	Bytes transferred	Direction	Data
2024-10-08 22:13:12 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 22:13:12 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 22:13:12 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 8aaf7b13-d01e-0028-46fd-167896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T221312Z-1657d5bbd48vlsxxpe15ac3q7n00000005g000000000q5rq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 22:13:12 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Timestamp	Bytes transferred	Direction	Data
2024-10-08 22:13:12 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 22:13:12 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 22:13:12 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: c311ea9c-301e-006e-4507-19f018000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T221312Z-1657d5bbd48762wn1qw4s5sd3000000005fg00000000a482 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 22:13:12 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Timestamp	Bytes transferred	Direction	Data
2024-10-08 22:13:13 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 22:13:13 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 22:13:13 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 1be53f37-001e-00a2-0266-17d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T221313Z-1657d5bbd482tlqpvyz9e93p5400000005sg0000000023up x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 22:13:13 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Timestamp	Bytes transferred	Direction	Data
2024-10-08 22:13:13 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 22:13:13 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 22:13:13 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: 1707b783-801e-00a3-53e5-167cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T221313Z-1657d5bbd482tlqpvyz9e93p5400000005m000000000r10g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 22:13:13 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Timestamp	Bytes transferred	Direction	Data
2024-10-08 22:13:13 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 22:13:13 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 22:13:13 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 73fc0cc0-d01e-008e-5fee-16387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T221313Z-1657d5bbd48762wn1qw4s5sd3000000005f000000000azmy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 22:13:13 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Timestamp	Bytes transferred	Direction	Data
2024-10-08 22:13:13 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 22:13:13 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 22:13:13 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 15158de7-401e-0029-4b00-179b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T221313Z-1657d5bbd48q6t9vvmrkd293mg00000005m00000000098sw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 22:13:13 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Timestamp	Bytes transferred	Direction	Data
2024-10-08 22:13:13 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 22:13:14 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 22:13:13 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: 87fc294c-201e-0051-40f3-167340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T221313Z-1657d5bbd48xsz2nuzq4vfrzg800000005k0000000000656 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 22:13:14 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Timestamp	Bytes transferred	Direction	Data
2024-10-08 22:13:13 UTC	560	OUT	GET /modules/system/system.base.css?sl24uh HTTP/1.1 Host: oabrj.org.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://oabrj.org.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-08 22:13:14 UTC	716	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 22:13:14 GMT Content-Type: text/css Content-Length: 5428 Connection: close X-Content-Type-Options: nosniff Last-Modified: Tue, 13 Apr 2021 18:07:16 GMT ETag: "1534-5bfde801f96fa" Cache-Control: max-age=1209600 Expires: Tue, 22 Oct 2024 22:13:14 GMT CF-Cache-Status: MISS Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BGmzObARIx12zuMoEnawVVRsM%2BYFEbfOEMsw89b3Q8ZoENGn8UuTJAsbzVlTtSFEnwMqIkHc2rZ1hZ%2FlP1KGewZ4u1rQq%2FWQnr5jJO0Sm2hs7js7ceMv1kqNW7t3Yh0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cf97a1a99f7425b-EWR
2024-10-08 22:13:14 UTC	653	IN	Data Raw: 0a 2f 2a 2a 0a 20 2a 20 40 66 69 6c 65 0a 20 2a 20 47 65 6e 65 72 69 63 20 74 68 65 6d 65 2d 69 6e 64 65 70 65 6e 64 65 6e 74 20 62 61 73 65 20 73 74 79 6c 65 73 2e 0a 20 2a 2f 0a 0a 2f 2a 2a 0a 20 2a 20 41 75 74 6f 63 6f 6d 70 6c 65 74 65 2e 0a 20 2a 0a 20 2a 20 40 73 65 65 20 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2e 6a 73 0a 20 2a 2f 0a 2f 2a 20 53 75 67 67 65 73 74 69 6f 6e 20 6c 69 73 74 20 2a 2f 0a 23 61 75 74 6f 63 6f 6d 70 6c 65 74 65 20 7b 0a 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 3b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 7a 2d 69 6e 64 65 78 3a 20 31 30 30 3b 0a 7d 0a 23 61 75 74 6f 63 6f 6d 70 6c 65 74 65 20 75 6c 20 7b 0a 20 20 6c 69 Data Ascii: /** * @file * Generic theme-independent base styles. //* * Autocomplete. * * @see autocomplete.js // Suggestion list */#autocomplete { border: 1px solid; overflow: hidden; position: absolute; z-index: 100;}#autocomplete ul { li
2024-10-08 22:13:14 UTC	1369	IN	Data Raw: 74 68 72 6f 62 62 69 6e 67 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 75 72 6c 28 2e 2e 2f 2e 2e 2f 6d 69 73 63 2f 74 68 72 6f 62 62 65 72 2d 61 63 74 69 76 65 2e 67 69 66 29 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 31 30 30 25 20 63 65 6e 74 65 72 3b 20 2f 2a 20 4c 54 52 20 2a 2f 0a 7d 0a 0a 2f 2a 2a 0a 20 2a 20 43 6f 6c 6c 61 70 73 69 62 6c 65 20 66 69 65 6c 64 73 65 74 73 2e 0a 20 2a 0a 20 2a 20 40 73 65 65 20 63 6f 6c 6c 61 70 73 65 2e 6a 73 0a 20 2a 2f 0a 68 74 6d 6c 2e 6a 73 20 66 69 65 6c 64 73 65 74 2e 63 6f 6c 6c 61 70 73 65 64 20 7b 0a 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 77 69 64 74 68 3a 20 30 3b 0a 20 20 62 6f 72 64 65 72 2d 6c 65 66 74 2d 77 69 64 74 68 3a 20 30 3b 0a 20 Data Ascii: throbbing { background-image: url(../../misc/throbber-active.gif); background-position: 100% center; /* LTR /}/* * Collapsible fieldsets. * * @see collapse.js */html.js fieldset.collapsed { border-bottom-width: 0; border-left-width: 0;
2024-10-08 22:13:14 UTC	1369	IN	Data Raw: 65 6d 20 30 2e 35 65 6d 3b 20 2f 2a 20 4c 54 52 20 2a 2f 0a 20 20 77 69 64 74 68 3a 20 31 33 70 78 3b 0a 7d 0a 61 2e 74 61 62 6c 65 64 72 61 67 2d 68 61 6e 64 6c 65 2d 68 6f 76 65 72 20 2e 68 61 6e 64 6c 65 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 36 70 78 20 2d 31 31 70 78 3b 0a 7d 0a 64 69 76 2e 69 6e 64 65 6e 74 61 74 69 6f 6e 20 7b 0a 20 20 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 20 2f 2a 20 4c 54 52 20 2a 2f 0a 20 20 68 65 69 67 68 74 3a 20 31 2e 37 65 6d 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 2d 30 2e 34 65 6d 20 30 2e 32 65 6d 20 2d 30 2e 34 65 6d 20 2d 30 2e 34 65 6d 3b 20 2f 2a 20 4c 54 52 20 2a 2f 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 2e 34 32 65 6d 20 30 20 30 2e 34 32 65 6d 20 30 2e 36 65 6d 3b 20 2f 2a 20 4c 54 Data Ascii: em 0.5em; /* LTR / width: 13px;}a.tabledrag-handle-hover .handle { background-position: 6px -11px;}div.indentation { float: left; / LTR / height: 1.7em; margin: -0.4em 0.2em -0.4em -0.4em; / LTR / padding: 0.42em 0 0.42em 0.6em; / LT
2024-10-08 22:13:14 UTC	1369	IN	Data Raw: 72 6f 67 72 65 73 73 2d 62 61 72 20 7b 0a 20 20 77 69 64 74 68 3a 20 31 36 65 6d 3b 0a 7d 0a 0a 2f 2a 2a 0a 20 2a 20 49 6e 6c 69 6e 65 20 69 74 65 6d 73 2e 0a 20 2a 2f 0a 2e 63 6f 6e 74 61 69 6e 65 72 2d 69 6e 6c 69 6e 65 20 64 69 76 2c 0a 2e 63 6f 6e 74 61 69 6e 65 72 2d 69 6e 6c 69 6e 65 20 6c 61 62 65 6c 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 0a 7d 0a 2f 2a 20 46 69 65 6c 64 73 65 74 20 63 6f 6e 74 65 6e 74 73 20 61 6c 77 61 79 73 20 6e 65 65 64 20 74 6f 20 62 65 20 72 65 6e 64 65 72 65 64 20 61 73 20 62 6c 6f 63 6b 2e 20 2a 2f 0a 2e 63 6f 6e 74 61 69 6e 65 72 2d 69 6e 6c 69 6e 65 20 2e 66 69 65 6c 64 73 65 74 2d 77 72 61 70 70 65 72 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 7d 0a 0a 2f 2a 2a 0a 20 2a 20 50 Data Ascii: rogress-bar { width: 16em;}/** * Inline items. /.container-inline div,.container-inline label { display: inline;}/ Fieldset contents always need to be rendered as block. /.container-inline .fieldset-wrapper { display: block;}/* * P
2024-10-08 22:13:14 UTC	668	IN	Data Raw: 6e 3b 0a 20 20 68 65 69 67 68 74 3a 20 31 70 78 3b 0a 7d 0a 0a 2f 2a 2a 0a 20 2a 20 54 68 65 20 2e 65 6c 65 6d 65 6e 74 2d 66 6f 63 75 73 61 62 6c 65 20 63 6c 61 73 73 20 65 78 74 65 6e 64 73 20 74 68 65 20 2e 65 6c 65 6d 65 6e 74 2d 69 6e 76 69 73 69 62 6c 65 20 63 6c 61 73 73 20 74 6f 20 61 6c 6c 6f 77 0a 20 2a 20 74 68 65 20 65 6c 65 6d 65 6e 74 20 74 6f 20 62 65 20 66 6f 63 75 73 61 62 6c 65 20 77 68 65 6e 20 6e 61 76 69 67 61 74 65 64 20 74 6f 20 76 69 61 20 74 68 65 20 6b 65 79 62 6f 61 72 64 2e 0a 20 2a 2f 0a 2e 65 6c 65 6d 65 6e 74 2d 69 6e 76 69 73 69 62 6c 65 2e 65 6c 65 6d 65 6e 74 2d 66 6f 63 75 73 61 62 6c 65 3a 61 63 74 69 76 65 2c 0a 2e 65 6c 65 6d 65 6e 74 2d 69 6e 76 69 73 69 62 6c 65 2e 65 6c 65 6d 65 6e 74 2d 66 6f 63 75 73 61 62 6c 65 Data Ascii: n; height: 1px;}/** * The .element-focusable class extends the .element-invisible class to allow * the element to be focusable when navigated to via the keyboard. */.element-invisible.element-focusable:active,.element-invisible.element-focusable

Timestamp	Bytes transferred	Direction	Data
2024-10-08 22:13:13 UTC	561	OUT	GET /modules/system/system.menus.css?sl24uh HTTP/1.1 Host: oabrj.org.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://oabrj.org.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-08 22:13:14 UTC	723	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 22:13:14 GMT Content-Type: text/css Content-Length: 2035 Connection: close X-Content-Type-Options: nosniff Last-Modified: Tue, 13 Apr 2021 18:07:16 GMT ETag: "7f3-5bfde801fbe0b" Cache-Control: max-age=1209600 Expires: Tue, 22 Oct 2024 22:13:14 GMT CF-Cache-Status: MISS Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xZDr2xZsYuvXe0n%2Fdk%2BUsRiw95hUREUvSKI7vt3Qe%2F%2BuHHjTjPE54z7HR1tIg%2B7lBF72iqHsd6RE2wo5ez8t1oPJmEq44AyyGT05zJF0dGCCnD%2ByM78ZP7sWBG%2Fs7v4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cf97a1aae24421f-EWR
2024-10-08 22:13:14 UTC	646	IN	Data Raw: 0a 2f 2a 2a 0a 20 2a 20 40 66 69 6c 65 0a 20 2a 20 53 74 79 6c 65 73 20 66 6f 72 20 6d 65 6e 75 73 20 61 6e 64 20 6e 61 76 69 67 61 74 69 6f 6e 20 6d 61 72 6b 75 70 2e 0a 20 2a 2f 0a 0a 2f 2a 2a 0a 20 2a 20 4d 61 72 6b 75 70 20 67 65 6e 65 72 61 74 65 64 20 62 79 20 74 68 65 6d 65 5f 6d 65 6e 75 5f 74 72 65 65 28 29 2e 0a 20 2a 2f 0a 75 6c 2e 6d 65 6e 75 20 7b 0a 20 20 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 3b 0a 20 20 6c 69 73 74 2d 73 74 79 6c 65 3a 20 6e 6f 6e 65 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 20 2f 2a 20 4c 54 52 20 2a 2f 0a 7d 0a 75 6c 2e 6d 65 6e 75 20 6c 69 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 30 20 30 2e 35 65 6d 3b 20 2f 2a 20 4c 54 52 20 2a 2f 0a 7d 0a 75 6c 20 6c 69 2e 65 78 70 61 6e 64 65 64 20 7b 0a Data Ascii: /** * @file * Styles for menus and navigation markup. //* * Markup generated by theme_menu_tree(). /ul.menu { border: none; list-style: none; text-align: left; / LTR /}ul.menu li { margin: 0 0 0 0.5em; / LTR */}ul li.expanded {
2024-10-08 22:13:14 UTC	1369	IN	Data Raw: 0a 20 20 63 6f 6c 6f 72 3a 20 23 30 30 30 3b 0a 7d 0a 74 64 2e 6d 65 6e 75 2d 64 69 73 61 62 6c 65 64 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 63 63 63 3b 0a 7d 0a 0a 2f 2a 2a 0a 20 2a 20 4d 61 72 6b 75 70 20 67 65 6e 65 72 61 74 65 64 20 62 79 20 74 68 65 6d 65 5f 6c 69 6e 6b 73 28 29 2e 0a 20 2a 2f 0a 75 6c 2e 69 6e 6c 69 6e 65 2c 0a 75 6c 2e 6c 69 6e 6b 73 2e 69 6e 6c 69 6e 65 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 30 3b 0a 7d 0a 75 6c 2e 69 6e 6c 69 6e 65 20 6c 69 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 0a 20 20 6c 69 73 74 2d 73 74 79 6c 65 2d 74 79 70 65 3a 20 6e 6f 6e 65 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 20 30 2e 35 65 6d 3b 0a 7d Data Ascii: color: #000;}td.menu-disabled { background: #ccc;}/** * Markup generated by theme_links(). */ul.inline,ul.links.inline { display: inline; padding-left: 0;}ul.inline li { display: inline; list-style-type: none; padding: 0 0.5em;}
2024-10-08 22:13:14 UTC	20	IN	Data Raw: 3a 20 34 70 78 20 73 6f 6c 69 64 20 23 39 39 39 3b 0a 7d 0a Data Ascii: : 4px solid #999;}

Timestamp	Bytes transferred	Direction	Data
2024-10-08 22:13:13 UTC	564	OUT	GET /modules/system/system.messages.css?sl24uh HTTP/1.1 Host: oabrj.org.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://oabrj.org.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-08 22:13:14 UTC	726	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 22:13:14 GMT Content-Type: text/css Content-Length: 961 Connection: close X-Content-Type-Options: nosniff Last-Modified: Tue, 13 Apr 2021 18:07:16 GMT ETag: "3c1-5bfde801fc9c3" Cache-Control: max-age=1209600 Expires: Tue, 22 Oct 2024 22:13:14 GMT CF-Cache-Status: MISS Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rJ%2F9jogN40WfKLweigjCLUWV%2BlsuJ%2FayH1%2Fhz7z2XLlrmm8mLXkIQxxs35xKvEXJ%2FCa9e8clgnqOm%2FWfdEZ5syCIas%2Fj3mLu%2Bp%2FcXFZiMMatW9QzOxvKybPjx7zaFy0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cf97a1aad1a443e-EWR
2024-10-08 22:13:14 UTC	643	IN	Data Raw: 0a 2f 2a 2a 0a 20 2a 20 40 66 69 6c 65 0a 20 2a 20 53 74 79 6c 65 73 20 66 6f 72 20 73 79 73 74 65 6d 20 6d 65 73 73 61 67 65 73 2e 0a 20 2a 2f 0a 0a 64 69 76 2e 6d 65 73 73 61 67 65 73 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 38 70 78 20 38 70 78 3b 20 2f 2a 20 4c 54 52 20 2a 2f 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 20 6e 6f 2d 72 65 70 65 61 74 3b 0a 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 36 70 78 20 30 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 31 30 70 78 20 31 30 70 78 20 31 30 70 78 20 35 30 70 78 3b 20 2f 2a 20 4c 54 52 20 2a 2f 0a 7d 0a 0a 64 69 76 2e 73 74 61 74 75 73 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 Data Ascii: /** * @file * Styles for system messages. /div.messages { background-position: 8px 8px; / LTR / background-repeat: no-repeat; border: 1px solid; margin: 6px 0; padding: 10px 10px 10px 50px; / LTR */}div.status { background-image:
2024-10-08 22:13:14 UTC	318	IN	Data Raw: 3a 20 75 72 6c 28 2e 2e 2f 2e 2e 2f 6d 69 73 63 2f 6d 65 73 73 61 67 65 2d 32 34 2d 65 72 72 6f 72 2e 70 6e 67 29 3b 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 65 64 35 34 31 64 3b 0a 7d 0a 64 69 76 2e 65 72 72 6f 72 2c 0a 2e 65 72 72 6f 72 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 38 63 32 65 30 62 3b 0a 7d 0a 64 69 76 2e 65 72 72 6f 72 2c 0a 74 61 62 6c 65 20 74 72 2e 65 72 72 6f 72 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 65 66 35 66 31 3b 0a 7d 0a 64 69 76 2e 65 72 72 6f 72 20 70 2e 65 72 72 6f 72 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 33 33 33 3b 0a 7d 0a 0a 64 69 76 2e 6d 65 73 73 61 67 65 73 20 75 6c 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 30 20 31 65 6d 3b 20 2f 2a 20 4c 54 52 20 2a 2f 0a 20 20 Data Ascii: : url(../../misc/message-24-error.png); border-color: #ed541d;}div.error,.error { color: #8c2e0b;}div.error,table tr.error { background-color: #fef5f1;}div.error p.error { color: #333;}div.messages ul { margin: 0 0 0 1em; /* LTR */