Edit tour

Windows Analysis Report
http://www.northamericaniron.com

Overview

General Information

Sample URL:	http://www.northamericaniron.com
Analysis ID:	1591373
Infos:

Detection

Score:	56
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Classification

Process Tree

System is w10x64

chrome.exe (PID: 1440 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5352 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2108 --field-trial-handle=2000,i,13573262282238499897,10695487862641750673,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6516 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.northamericaniron.com" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: http://www.northamericaniron.com

Avira URL Cloud: detection malicious, Label: phishing

Antivirus detection for URL or domain

Source: http://www.northamericaniron.com/files/IMG_12.jpg	Avira URL Cloud: Label: phishing
Source: http://www.northamericaniron.com/files/IMG_24.jpg	Avira URL Cloud: Label: phishing
Source: http://www.northamericaniron.com/files/IMG_10.jpg	Avira URL Cloud: Label: phishing
Source: http://www.northamericaniron.com/files/IMG_3.jpg	Avira URL Cloud: Label: phishing
Source: http://www.northamericaniron.com/files/IMG_7.jpg	Avira URL Cloud: Label: phishing
Source: http://www.northamericaniron.com/files/IMG_1.jpg	Avira URL Cloud: Label: phishing
Source: http://www.northamericaniron.com/files/IMG_9.jpg	Avira URL Cloud: Label: phishing
Source: http://www.northamericaniron.com/files/IMG_25.jpg	Avira URL Cloud: Label: phishing
Source: http://www.northamericaniron.com/files/new%20logo.png	Avira URL Cloud: Label: phishing
Source: http://www.northamericaniron.com/files/IMG_5.jpg	Avira URL Cloud: Label: phishing
Source: http://www.northamericaniron.com/files/IMG_15.jpg	Avira URL Cloud: Label: phishing
Source: http://www.northamericaniron.com/favicon.ico	Avira URL Cloud: Label: phishing
Source: http://www.northamericaniron.com/files/IMG_22.jpg	Avira URL Cloud: Label: phishing
Source: http://www.northamericaniron.com/files/IMG_11.jpg	Avira URL Cloud: Label: phishing
Source: http://www.northamericaniron.com/files/body_bkgd.jpg	Avira URL Cloud: Label: phishing
Source: http://www.northamericaniron.com/files/IMG_0.jpg	Avira URL Cloud: Label: phishing
Source: http://www.northamericaniron.com/files/background.jpg	Avira URL Cloud: Label: phishing

Source: http://www.northamericaniron.com/	HTTP Parser: No favicon
Source: http://www.northamericaniron.com/about.html	HTTP Parser: No favicon

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Tue, 14 Jan 2025 21:56:54 GMTServer: ApacheUpgrade: h2,h2cConnection: Upgrade, Keep-AliveLast-Modified: Mon, 05 Oct 2020 07:17:54 GMTETag: "1041430-14f7-5b0e747e9ec80-gzip"Accept-Ranges: bytesVary: Accept-EncodingContent-Encoding: gzipContent-Length: 1820Keep-Alive: timeout=5Content-Type: text/htmlData Raw: 1f 8b 08 00 00 00 00 00 00 03 ad 58 6d 73 e2 38 12 fe 9e aa fc 87 3e 4f dd 66 66 2b 60 1b f3 4e 48 55 42 b8 d9 ec 4d 92 a9 c0 6e 2e 9f a6 84 2d 40 1b d9 f2 49 32 0c 3b b5 ff fd 5a 36 0c 36 18 92 bb 9b a4 12 6c a9 f5 74 3f dd ad 56 8b 8b bf dd 3c 0c c6 cf 9f 87 30 d7 21 87 cf bf 5d 7f ba 1d 80 55 b1 ed 27 6f 60 db 37 e3 1b f8 65 7c f7 09 ea 55 c7 85 b1 24 91 62 9a 89 88 70 db 1e de 5b 60 cd b5 8e bb b6 bd 5c 2e ab 4b af 2a e4 cc 1e 3f da 06 aa 6e 73 21 14 ad 06 3a b0 2e 4f 4f 2e cc 18 7e 9a 27 4a 02 33 12 52 4d 20 22 21 ed 5b 33 1a 51 49 b4 90 16 f8 22 d2 34 d2 7d 6b 20 a6 53 4a 07 49 0c bf 33 95 10 0e 23 a6 29 dc 50 c5 66 28 7c 0e bf 53 a9 d0 12 68 55 1d b8 4e 18 0f a0 0d 53 21 e1 89 45 81 58 2a eb bb 0a 63 62 85 fe 3b 61 0b 03 9a a2 57 c6 ab 98 e6 74 69 fa 55 a7 56 f7 fc 39 91 8a ea 7e a2 a7 95 76 39 c6 7f 6f 2c bc 37 fe f1 53 19 3f 89 f1 29 fc 60 ed b8 c0 97 94 68 1a e4 30 c7 09 3d 07 f4 fa 3f e8 04 6a 8e eb 82 d3 ea d6 db 5d b7 09 1f ef c6 56 ea 4b 84 d0 4c 73 7a 09 f7 42 ea 39 5c 85 54 32 9f 44 70 2b d1 33 17 76 36 99 ca 29 bd e2 14 34 f2 5e d3 f5 95 ca 40 00 c0 fe 19 c6 c3 7f 8d 61 34 7e fe 34 1c c1 cf b6 19 af 1a b1 74 99 03 df a6 68 55 65 4a 42 c6 57 dd 31 99 8b 90 f4 d2 a1 25 65 b3 b9 ee 46 42 86 84 67 43 e9 92 e2 08 fb 93 76 5d 27 d6 3d 03 59 09 a8 2f d0 81 18 3c 94 8a 68 cf 17 5c c8 ee bb 69 fa d3 fb 2b af d9 7d 55 f3 44 f0 e0 ff d3 db ea 98 5f a3 77 eb 8d 87 eb 5f 87 83 1d 7f 04 6c 51 7d 98 fc 41 7d ed 7a 75 f8 06 b1 c8 f6 42 97 4c 94 e0 89 a6 3d d0 22 ee 36 bc f8 6b 0f 38 9d 6a 8c 96 79 fc b3 82 19 49 bf 76 9d 1e fc 55 44 69 1c 46 a9 d5 b7 28 ad 66 1e c6 dd 83 69 be 09 a6 d1 2e c0 d4 f6 60 5a 6f 82 69 76 0a 30 de 1e 4c fb 4d 30 6d a7 00 53 df 83 e9 bc 09 c6 6b 16 60 1a bb 30 75 e7 08 4c bb b1 f5 71 27 0f d3 dc 83 71 0f c3 78 4e 6b 6b 8e eb e6 71 5a 7b 38 b5 b7 e1 34 5b 79 98 f6 1e 8c 77 18 a6 e9 e4 d2 cf cb c3 74 f6 60 8e 64 71 d3 dd 26 4e bd 90 7e 7b 69 5c 3f 92 c6 4d b7 79 60 37 b8 98 c7 e9 ae 24 1c 6b 64 d7 48 f4 60 c9 02 3d 47 4f a4 8b 76 b4 1c c9 f2 bc 96 46 a7 40 da ad 1d 56 e3 95 a9 39 b2 0b 3c a7 96 8b 74 21 63 5c ef a0 9a 46 bb be 56 93 2f 30 d7 0f 37 cf c5 f2 32 11 c1 0a be e1 7c 48 e4 8c 45 5d 13 47 7c 8b 49 10 b0 68 06 9b f7 9c 16 1f 8f 09 2a cd e0 3c ab 85 ae e3 fc dd bc 66 8a 37 6f 13 e2 bf cc a4 48 a2 a0 c2 42 32 a3 5d 48 24 7f 7f 36 65 9c 2a db 68 fd 32 79 99 05 d5 3f e2 d9 d9 07 94 2f d4 c1 4f b7 f7 ff 2c 9a 79 d5 e5 2c 7a 41 27 ed 55 6d 33 b7 60 e8 39 1a c0 a1 f9 b9 58 e0 71 b8 9d 75 9c 56 ab dd ce 66 33 8d b7 77 57 1f 87 45 95 2c 9c e1 8a 89 90 01 95 5d 07 4c ed de f1 e6 e0 e1 7e 7c 75 7b 3f 7c 84 c7 df b6 eb de 99 a3 94 30 73 00 e7 62 2a 29 c7 33 60 81 31 dd 3a 1a 4
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Tue, 14 Jan 2025 21:57:09 GMTServer: ApacheUpgrade: h2,h2cConnection: Upgrade, Keep-AliveLast-Modified: Mon, 05 Oct 2020 07:17:54 GMTETag: "1041740-11f9-5b0e747e9ec80-gzip"Accept-Ranges: bytesVary: Accept-EncodingContent-Encoding: gzipContent-Length: 1521Keep-Alive: timeout=5Content-Type: text/htmlData Raw: 1f 8b 08 00 00 00 00 00 00 03 bd 58 db 6e db 38 10 7d 5f 60 ff 61 56 c5 36 6d 11 eb ea 8b 2c 5f 80 c4 71 d3 74 73 db d8 6d 37 4f 01 2d d1 36 5b 49 d4 92 54 5c b7 e8 bf 2f 29 d9 b1 64 cb 69 0a 04 9b 20 b6 44 0e cf 99 33 24 67 c8 74 ff 38 b9 1a 8c 6f af 87 30 17 51 08 d7 1f 8e cf cf 06 a0 d5 0c e3 93 33 30 8c 93 f1 09 bc 1b 5f 9c 43 5d 37 2d 18 33 14 73 22 08 8d 51 68 18 c3 4b 0d b4 b9 10 89 67 18 8b c5 42 5f 38 3a 65 33 63 7c 63 28 a8 ba 11 52 ca b1 1e 88 40 eb ff fe 5b 57 b5 c9 6f f5 84 51 a0 5a 22 2c 10 c4 28 c2 3d 6d 86 63 cc 90 a0 4c 03 9f c6 02 c7 a2 a7 0d e8 74 8a f1 20 4d e0 23 e1 29 0a 61 44 04 86 13 cc c9 4c 1a 1f c2 47 cc b8 f4 04 5a ba 09 c7 29 09 03 70 61 4a 19 7c 22 71 40 17 5c 7b a0 50 2e d6 f0 bf 29 b9 57 a0 19 7a 6d bc 4c 70 81 4b e0 af 22 f3 ba e3 cf 11 e3 58 f4 52 31 ad b9 d5 18 bf ee 2c bc 52 f1 f1 33 1b 3f 4d e4 53 f4 5a db 0a 81 cf 30 12 38 28 60 8e 53 7c 08 32 ea 6f f1 04 6c d3 b2 c0 6c 79 75 d7 b3 9a 70 7a 31 d6 b2 58 4a 08 41 44 88 fb 70 b1 84 4f 78 c2 15 6b 0d 8e 26 34 15 d0 35 f2 be cc 8c 8b 65 88 41 48 d9 2b b5 3e e7 39 06 00 18 6f 60 3c fc 67 0c a3 f1 ed f9 70 04 6f 0c d5 ae 2b b3 6c 98 09 df a7 d2 a9 da 14 45 24 5c 7a 63 34 a7 11 ea 64 4d 0b 4c 66 73 e1 c5 94 45 28 cc 9b b2 21 e5 16 f2 0d 7b 96 99 88 8e 82 ac 05 d8 a7 32 7e 72 ee a4 55 8c 3b 3e 0d 29 f3 5e 4c b3 9f ce 8f 22 b3 f5 bf 30 b7 da ea 57 31 6f e2 71 75 fc 7e 38 d8 8a 48 40 ee f5 ab c9 67 ec 0b ab ee c2 77 48 68 be 19 3c 34 e1 34 4c 05 ee 80 a0 89 67 d7 93 af 1d 08 f1 54 78 f5 56 53 3d 7f ab c9 35 89 bf 7a 66 07 7e 94 61 da 4f 82 69 b8 25 18 6b 1b a6 61 3e 09 a6 d9 2e c1 d8 3b 30 d6 93 60 5c b3 04 e3 ec c0 d8 4f 82 71 9a 25 98 fa 0e 8c f3 08 8c db d8 c4 d8 2d c2 34 76 60 ea fb 61 1a ce 1e 94 e6 0e 4a 63 3f 4a d3 2c a0 b4 8b 30 ad 1d 98 e6 93 60 72 bf d6 28 ee 0e 4a eb 11 14 ab b9 99 6f db 2e e2 b4 a5 85 da 05 28 94 49 c9 53 16 1d 58 90 40 cc 3d c7 6c 29 c3 2d 96 47 96 b8 63 b6 37 2c a5 c8 59 e6 5e 16 d7 71 2a 58 1e d9 01 45 2d e5 f9 b1 ac bd 2c b6 6b af 58 8a db f9 f8 ea e4 b6 bc 99 27 34 58 c2 77 d9 1f 21 36 23 b1 a7 a2 2f df 12 14 04 24 9e c1 fa bd c0 e2 cb ac 8c 99 6a 9c e7 b9 c7 32 cd 3f d5 6b 4e bc 7e 9b 20 ff cb 8c d1 34 0e 6a 24 42 33 ec 41 ca c2 57 07 53 12 62 6e 28 d6 bb c9 97 59 a0 7f 4e 66 07 af a5 7d 29 eb 9c 9f 5d fe 55 76 f3 c8 0b 49 fc 45 c6 68 27 4b aa be 7b a2 32 7e 00 fb fa e7 f4 5e 56 9f 4d af 69 b6 5a ae 9b f7 e6 8c 67 17 47 a7 c3 32 25 89 66 72 c4 84 b2 00 33 cf 04 95 29 b7 a2 39 b8 ba 1c 1f 9d 5d 0e 6f e0 e6 c3 66 dc 0b 55 b9 10 51 f5 ae 30 a5 0c 87 32 e3 de cb 29 dd 04 1a 50 2a 28 98 d9 57 67 1d cd 66 3d db 00 79 30 db f9 6e d8 99 e3 d5 f4 d4 b2 35 a1 4c 32 cf ba 46 96 fa 55 45 35 56 a7 0

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.northamericaniron.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /files/IMG_0.jpg HTTP/1.1Host: www.northamericaniron.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.northamericaniron.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /files/IMG_1.jpg HTTP/1.1Host: www.northamericaniron.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.northamericaniron.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /files/IMG_10.jpg HTTP/1.1Host: www.northamericaniron.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.northamericaniron.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /files/body_bkgd.jpg HTTP/1.1Host: www.northamericaniron.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.northamericaniron.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /files/background.jpg HTTP/1.1Host: www.northamericaniron.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.northamericaniron.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /files/new%20logo.png HTTP/1.1Host: www.northamericaniron.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.northamericaniron.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /files/IMG_5.jpg HTTP/1.1Host: www.northamericaniron.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.northamericaniron.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /files/IMG_1.jpg HTTP/1.1Host: www.northamericaniron.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /files/IMG_9.jpg HTTP/1.1Host: www.northamericaniron.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.northamericaniron.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /files/IMG_12.jpg HTTP/1.1Host: www.northamericaniron.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.northamericaniron.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /files/IMG_5.jpg HTTP/1.1Host: www.northamericaniron.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /files/IMG_0.jpg HTTP/1.1Host: www.northamericaniron.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /files/IMG_7.jpg HTTP/1.1Host: www.northamericaniron.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.northamericaniron.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /files/IMG_11.jpg HTTP/1.1Host: www.northamericaniron.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.northamericaniron.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /files/IMG_3.jpg HTTP/1.1Host: www.northamericaniron.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.northamericaniron.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /files/IMG_9.jpg HTTP/1.1Host: www.northamericaniron.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /files/IMG_12.jpg HTTP/1.1Host: www.northamericaniron.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /files/new%20logo.png HTTP/1.1Host: www.northamericaniron.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /files/background.jpg HTTP/1.1Host: www.northamericaniron.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /files/IMG_10.jpg HTTP/1.1Host: www.northamericaniron.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.northamericaniron.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.northamericaniron.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /files/body_bkgd.jpg HTTP/1.1Host: www.northamericaniron.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /files/IMG_11.jpg HTTP/1.1Host: www.northamericaniron.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /files/IMG_7.jpg HTTP/1.1Host: www.northamericaniron.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /files/IMG_3.jpg HTTP/1.1Host: www.northamericaniron.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.northamericaniron.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /about.html HTTP/1.1Host: www.northamericaniron.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Referer: http://www.northamericaniron.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /files/IMG_22.jpg HTTP/1.1Host: www.northamericaniron.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.northamericaniron.com/about.htmlAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /files/IMG_15.jpg HTTP/1.1Host: www.northamericaniron.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.northamericaniron.com/about.htmlAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /files/IMG_24.jpg HTTP/1.1Host: www.northamericaniron.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.northamericaniron.com/about.htmlAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /files/IMG_25.jpg HTTP/1.1Host: www.northamericaniron.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.northamericaniron.com/about.htmlAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /files/IMG_22.jpg HTTP/1.1Host: www.northamericaniron.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /files/IMG_15.jpg HTTP/1.1Host: www.northamericaniron.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /files/IMG_24.jpg HTTP/1.1Host: www.northamericaniron.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /files/IMG_25.jpg HTTP/1.1Host: www.northamericaniron.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: www.northamericaniron.com

Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443

Source: classification engine

Classification label: mal56.win@16/52@6/4

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2108 --field-trial-handle=2000,i,13573262282238499897,10695487862641750673,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.northamericaniron.com"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2108 --field-trial-handle=2000,i,13573262282238499897,10695487862641750673,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	2 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	2 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
http://www.northamericaniron.com	100%	Avira URL Cloud	phishing

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label
http://www.northamericaniron.com/files/IMG_12.jpg	100%	Avira URL Cloud	phishing
http://www.northamericaniron.com/files/IMG_24.jpg	100%	Avira URL Cloud	phishing
http://www.northamericaniron.com/files/IMG_10.jpg	100%	Avira URL Cloud	phishing
http://www.northamericaniron.com/files/IMG_3.jpg	100%	Avira URL Cloud	phishing
http://www.northamericaniron.com/files/IMG_7.jpg	100%	Avira URL Cloud	phishing
http://www.northamericaniron.com/files/IMG_1.jpg	100%	Avira URL Cloud	phishing
http://www.northamericaniron.com/files/IMG_9.jpg	100%	Avira URL Cloud	phishing
http://www.northamericaniron.com/files/IMG_25.jpg	100%	Avira URL Cloud	phishing
http://www.northamericaniron.com/files/new%20logo.png	100%	Avira URL Cloud	phishing
http://www.northamericaniron.com/files/IMG_5.jpg	100%	Avira URL Cloud	phishing
http://www.northamericaniron.com/files/IMG_15.jpg	100%	Avira URL Cloud	phishing
http://www.northamericaniron.com/favicon.ico	100%	Avira URL Cloud	phishing
http://www.northamericaniron.com/files/IMG_22.jpg	100%	Avira URL Cloud	phishing
http://www.northamericaniron.com/files/IMG_11.jpg	100%	Avira URL Cloud	phishing
http://www.northamericaniron.com/files/body_bkgd.jpg	100%	Avira URL Cloud	phishing
http://www.northamericaniron.com/files/IMG_0.jpg	100%	Avira URL Cloud	phishing
http://www.northamericaniron.com/files/background.jpg	100%	Avira URL Cloud	phishing

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
northamericaniron.com	50.63.8.11	true	false	unknown
www.google.com	142.250.186.100	true	false	high
www.northamericaniron.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://www.northamericaniron.com/files/IMG_24.jpg	true	Avira URL Cloud: phishing	unknown
http://www.northamericaniron.com/	true		unknown
http://www.northamericaniron.com/files/new%20logo.png	true	Avira URL Cloud: phishing	unknown
http://www.northamericaniron.com/files/IMG_9.jpg	true	Avira URL Cloud: phishing	unknown
http://www.northamericaniron.com/files/IMG_3.jpg	true	Avira URL Cloud: phishing	unknown
http://www.northamericaniron.com/files/IMG_25.jpg	true	Avira URL Cloud: phishing	unknown
http://www.northamericaniron.com/files/IMG_10.jpg	true	Avira URL Cloud: phishing	unknown
http://www.northamericaniron.com/files/IMG_1.jpg	true	Avira URL Cloud: phishing	unknown
http://www.northamericaniron.com/files/IMG_12.jpg	true	Avira URL Cloud: phishing	unknown
http://www.northamericaniron.com/about.html	true		unknown
http://www.northamericaniron.com/files/IMG_5.jpg	true	Avira URL Cloud: phishing	unknown
http://www.northamericaniron.com/files/IMG_7.jpg	true	Avira URL Cloud: phishing	unknown
http://www.northamericaniron.com/files/IMG_15.jpg	true	Avira URL Cloud: phishing	unknown
http://www.northamericaniron.com/favicon.ico	true	Avira URL Cloud: phishing	unknown
http://www.northamericaniron.com/files/IMG_22.jpg	true	Avira URL Cloud: phishing	unknown
http://www.northamericaniron.com/files/body_bkgd.jpg	true	Avira URL Cloud: phishing	unknown
http://www.northamericaniron.com/files/IMG_11.jpg	true	Avira URL Cloud: phishing	unknown
http://www.northamericaniron.com/files/IMG_0.jpg	true	Avira URL Cloud: phishing	unknown
http://www.northamericaniron.com/files/background.jpg	true	Avira URL Cloud: phishing	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.186.100	www.google.com	United States	15169	GOOGLEUS	false
50.63.8.11	northamericaniron.com	United States	26496	AS-26496-GO-DADDY-COM-LLCUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1591373
Start date and time:	2025-01-14 22:55:51 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 3s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://www.northamericaniron.com
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal56.win@16/52@6/4
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.227, 142.250.181.238, 64.233.184.84, 142.250.186.46, 172.217.16.206, 2.16.100.168, 2.17.190.73, 199.232.210.172, 142.250.185.238, 142.250.186.78, 142.250.184.206, 142.250.185.142, 216.58.212.131, 2.23.242.162, 20.12.23.50, 13.107.246.45
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, otelrules.azureedge.net, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, redirector.gvt1.com, update.googleapis.com, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://www.northamericaniron.com

Simulations

Behavior and APIs

⊘No simulations

Input	Output
URL: http://www.northamericaniron.com Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": false, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: http://www.northamericaniron.com
URL: http://www.northamericaniron.com/ Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Click here to view document", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: http://www.northamericaniron.com/about.html Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: http://www.northamericaniron.com/about.html Model: Joe Sandbox AI	{ "brands": [ "North American Iron" ] }

URL: http://www.northamericaniron.com/ Model: Joe Sandbox AI	{ "brands": [ "North American Iron" ] }

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

Chrome Cache Entry: 49

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 109x29, components 3
Category:	dropped
Size (bytes):	1288
Entropy (8bit):	7.404002159971811
Encrypted:	false
SSDEEP:	24:enWCfKdEkJ4924d1h1sw+zXlLfJ842tsh5SDN5fVnATa4vq5:qRoJ4EQF+zVLCtsh5SLdk2
MD5:	5541F4F9A08006B37A9CEA0A8A046F09
SHA1:	D6188B559B139B6B9895B0A28C755FBEAC9C79C2
SHA-256:	E8A2E6BB1BD59065046FC36570B568DBD74E293CD06EFE6782B748D8D82F58CC
SHA-512:	A38CA05D7024B6966F2045F305DD9E6CA8A3C56E6A1DB0984A6A25AA56314EC276F22B1AC7F7B9BFC5902435A4C6DC5634FBE809813B0249DA80DA3F61840976
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`.....C....................................................................C.........................................................................m..".....................................,.........................R.....QS.!.."#12q................................+.......................!...1a.AQ"2....B..............?...l~E.l~E...u..3E.u.t.G..K......5.....h...'.u.b.6?".6?"......^...3$....._..2A.O...^....v....-.I.l.&1.'...#.(Rx$..O.`h(.?...J...l...X.S[.....v....>].gR..6@\.d...b.A.fK......v.c.-3c.-Y...9~...a}.8..u...i.,...........G...{.%=..U.u..c..a.....e........e....m:.:h....'.PS...d&.......wf.~<_h....\.4.R.N...j..n..P.>..w6?".6?"..%...F..[.$.=\|.:.$....2..`...AR.'8H..".d#.f..~..0..A\.X..g....1y<....QHS..9Pb..I...\...L...SY.._.f..~.'...\..l~E.l~E...u..3E.ti8..s.9..j:.w.w..u...[6.4=y.,.u.5.u;...:.{{.K......L.b.....,.p.....[p..]N.....1]....QS.;....{'A.-..5..B.2.&\.T..........LI.~._....u...N....f.x"bAv..n....Q.X.!Xy.%...X.....N...

Chrome Cache Entry: 50

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 560 x 420, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	27173
Entropy (8bit):	7.879714509906674
Encrypted:	false
SSDEEP:	768:UcLohQ/lzZG9lr1R+cNrNH237cTipfH6A5q:N4ilzmr1cc1NH2Lkh
MD5:	1BAD6B40BC63F26102A850D120B4FBC1
SHA1:	FCD4AE7E65A3C54BF6A62587E0EF211136DCD7AA
SHA-256:	046F951F7D32CC5B2A919AB66126D54B7BF53A74616060376E475B18D3F5F02B
SHA-512:	8EAD410D806D0D1DBDD1E6E7BE58F671807D6B0F7476FE95A42F23C4E6645666B1CA449669C1E805DE370992BAB6691FC9F96CDB28CF4EB4C353901AB8BC951F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0........./.......bKGD..............pHYs...........~...i.IDATx...t$U...<:...3..LI .!.1.h....6!.i...h39..Q.h...]..w...E...P..d..0.@\...2.(( 3.C.1..A..<V.c......J..........93Su......}.[..r................0......0......0............................................. `..... `..... `....................................................@......@......@...........................0......0......0.................................................... `..... `..... `.........................R.-k..?.........Y..............&]]].YQ.Y..f..t..YQQ..r......@..r.Y3a%Z.TUUm...QOmm...........,......j)....<...Q.es4..\__.3HS$r.I.lF......Y..C.....n.LEE.\|MM.$....n...6.to3....VO...>.......Z[[.(.9c...w..suuus.3... `V........nD..........:...6,...0s\|_..X.......$a4....i..=1Oy.].V..\.H$2Mi$..... `V.R...`....X.'.H[[.\|.....E1.....D..7..O....FV3-....."......k....f%.X..p......i.\|GG.\|......8...1..tm...0n...6 ...b.hk....0+K....---..........7..L....1$.....7.p3..D,..G[.....Y..F

Chrome Cache Entry: 51

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 1x271, components 3
Category:	dropped
Size (bytes):	309
Entropy (8bit):	3.4342110144896774
Encrypted:	false
SSDEEP:	6:dfNXtkkgnnSnctabnUUigZ+DtqR3xl/l9msk:F4nS/nUUfNxl/T6
MD5:	D4D8C357D80B5C0E81FCB29F25FD8BBA
SHA1:	E9778C92179C2508820559FBD337BFDB968661A6
SHA-256:	8102A248C921E89223DD983DCEED84E4BA218F569A81EAC2E52583CCFC9CA43E
SHA-512:	DB72526FAAB7BE6B86E8C73E7CCE487A83BB016712C47645A96B81BAECA3AC0A739F93401F57954CA66C9B488A19621C4A7A3FCC474A7891EABD58E7EFAB00A6
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`.....C....................................................................C............................................................................"............................................................................................................?..............................

Chrome Cache Entry: 52

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 109x29, components 3
Category:	dropped
Size (bytes):	1250
Entropy (8bit):	7.403114784368202
Encrypted:	false
SSDEEP:	24:enWgIXKWAMIpwmBWIf7aADafSAn5vZw07PiG/UfUrhoWKHtlg:qExAc6Lf7aAASAn5Bw07PiAuUmFHDg
MD5:	B0BA218BFB679E57D3DA1156D8F81819
SHA1:	D1A1243A3C546FABF16F46728BD1E8FFEF3C9988
SHA-256:	7300EE43A9C9F0F2CC66032AB233E3B624095640070321BAA8E4A41F7F437823
SHA-512:	70DE15BEE515E068320209C6277E9DF41992BB284CC9AF0AF21F6CCDD7D69938865781EBE1D4DD78EC03806C739638FFF7DFA7144E1B6A54310376E84FE17A37
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`.....C....................................................................C.........................................................................m.."......................................+............................R..QS...!"A3a.................................-.......................!....Aa.1Qq...."r...............?....~..v?p`..w.....\|.~.6o7x...~..v?p`..w.....\|...%.%...1].....4.M[q...6...).v.....13..C1D.._...t..'..8.\...o0.X..XU-_...v..4]@....... .....Yih."S..o~......:.-Yliax+....A\@.P..+g.c..+....$...j.K......\|.n.....I.e....3r8P..!......8.2..y..1ibN...v.cJ........kf.8.....S......"L..<..^...P.z4.M....u.G..B(..R..s4.V.v?pb...0...U.\5w[.Rx.e..s..9.TFZ)82e..\|e0]b..f',.....>.+...1t.^n.~.P...VF.h........x..H. ....d.c..+.......\|.t.....l..%.%...1]...5t...+...0e6c.n.n......^.....l.V...]K.+.w..z.=.W..2.g.9.8.2..m*.$.7U..n.$.2F9.....Q.......b...Zp.4..h..P......U.".)0..)....Q(.....9v.^.....S............,....)..x.9t.../]R)..W......%G.....O.e...6

Chrome Cache Entry: 53

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 109x29, components 3
Category:	dropped
Size (bytes):	866
Entropy (8bit):	7.0046385464018135
Encrypted:	false
SSDEEP:	24:enWRjlysmyyZHqOvaSgz/7BGV3hFDZQihWsn:q+LyZHqK2K3XZQC1n
MD5:	23193E28E54ACF72BDF8ACCF278B74D2
SHA1:	BB82E5F816995C541AAC6E35C17FB2BD8BCB6C75
SHA-256:	8E611B72B1B366403A2DF5440628BDAF7B21A57572A33C51662DD5520790DEEB
SHA-512:	32F857E28482E52F347FDF58846CB36CAE338E80DFA933C414F03A71B820747D03C8559CF41CEB9DC5D5E964E224D296D60C8D1864A4C745920D5A3FBD0982D5
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`.....C....................................................................C.........................................................................m.."......................................(.............................!.".#1QRa............................&.....................A.!Q....."a................?..c....0.3.SW>..5%TbzT...fC.......UD....M....>2._Q#j.Er..7.v.Y}..$'./....d..35T.U=.\|...c..t.k~2.?.5.."l.....#z....F...,..z.G..$...mIU....Le.k....z....q...5h..On..:.h..E....#...T.[.o....c..m.2.o.O.......6+'n....".!.$..#..N.H.Nu".hTD...{2..U..sOJ.;g..1.1.`.c.......w.....q....P.W"..5.w......`UC..;.r..K...?..4.u....Z..-8^.1....+..."........<...,..J#.$................5%.s.,..>..{.:~..Axq:..N...i...lx=.....`.e....I.(I!$vW...))}s...3M..7..$.....P6........L..u..+.#..B8Q.<w...*& E...j...p.?.2Z2...j1.`.c....

Chrome Cache Entry: 54

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 109x29, components 3
Category:	downloaded
Size (bytes):	853
Entropy (8bit):	6.9954581937921825
Encrypted:	false
SSDEEP:	12:F4nS/nUU1hnDjF3P7DqhwhzbMqWVkMNYmTabgGUSdsW3C7D6Tk98+wfjGhxn:enW7Dd7uhwDNMCmebg5SdsWmqk98jfqx
MD5:	BB4FF901BACC16A25A240C3F3BA5B8E2
SHA1:	CC1B16065D8632E5C849A120F4291CCF421B2BD5
SHA-256:	C2C73A4278A7CC9F155F541764D9453C5E11E51032CA41BECC8AEE0644B7C42C
SHA-512:	8B9A75C8D8AABC83DC863E386F84103E7BD7D0C66529E5D7AF7DA97A80B7FB03A0CB04E69141F33B8C01B816A00FAEDFDF79FA896CC59558E346B56A6E28FA0F
Malicious:	false
Reputation:	low
URL:	http://www.northamericaniron.com/files/IMG_22.jpg
Preview:	......JFIF.....`.`.....C....................................................................C.........................................................................m.."....................................'...............................!"#BQa...........................$....................1..A...!q...Q.............?..R....(.+S..n......(~...C.,.;T...R..I.;........\|`.x.f[....i...j...9..u....#....m_.r<.O..%K......)...{&E.Uk/.lK-.l..~S..rn.r.c...'.....$-..+...[H).^.....m.+...R/....,.e,.....D..K.(..p....Q.Z....[......Uw...b.1...U.J.e.t....j.Y}M..3..y.....4..QG.EQu.*?\.J.bx]W.......)@)JP.R..S..X.ej.,.0.=.........k.HPI..`oD..Wc..Fi....3....xL..R..<.......T......t..j...e.t.H.I.......p.....=..........=.-e....z....e..YM...h..}&9:...K<...{../..9.......)Z.2f.E..6./.e....d8-.M..f....g............:..'ED.N>..E..E)J.JR...

Chrome Cache Entry: 55

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 96x96, components 3
Category:	downloaded
Size (bytes):	4085
Entropy (8bit):	7.820023394950317
Encrypted:	false
SSDEEP:	96:qJgl2c9n8yDI4nYE3ADqgdWrflTapxzg/4:qoDDvY9DkftapxE/4
MD5:	4953750BE019FA2A889AA16F8ED7EBEE
SHA1:	8AB7D9FC50936BACCD5122C9CEE4C9A82D93077A
SHA-256:	28A099615B2ED722075E8A1061956AEDA052C1FB1B8A665AA74F218DD96D7064
SHA-512:	4314CE29E87A75C8DCB595AE132636179040E34117B83F158CDAAD0DA463F8F7348443780E6A1CFAC81CF4B08A3DFDD07FE5118E2D6A52510DC3A651E4ADBC3D
Malicious:	false
Reputation:	low
URL:	http://www.northamericaniron.com/files/body_bkgd.jpg
Preview:	......JFIF.....`.`.....C....................................................................C.......................................................................`.`.."..................................../........................!".12.AQb#B3R.$C4ar..........................................................?.?.".....U.r<......U=.{.....(x>.e.R.\|..Cj.Sx....^..o....pg.I.-.!K..k.`.b...Ye]....WI$,Y..rA........e...m....... .6.../.X..KjO.Y..m...@..f....l..b.9.i..h.Wc.U.0..4.g..YRyD'......X....;4...R.......i..,..h,..J.....S..sH..w.e....x..q...L1.c.Dr.vqVZa../.).8..(Iu.(%1.B....../.V.p.H..].QE..R.....`I..Do.....Q.T..D...r..@..$6..d=.5.m....$Ki.gd..2..YlS..1.x...q#......1.....}.../..9.9#Y6..Y#...X....A........I..'.L.WE.........}UB...m.n....E.<.1..J^.......V.x...Xdah.......V.2m.f.9>..Z8"te.W.y.p...C.....CW..........j.I.....h.P...^.._N.e.fm...<h...GPTUWX...I..H.......C...CP..U}..%....n7Q.U\|..O..;. !..$.U...h:..LCG":... .u.H.0.9.!..O.&.n.I.kl0U...d.6C.C.\|.

Chrome Cache Entry: 56

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 421x204, components 3
Category:	dropped
Size (bytes):	53954
Entropy (8bit):	7.976497263867909
Encrypted:	false
SSDEEP:	768:LqPFMRBH8Js6QbjkXN9n2fc0HC+2/3syMGjQccjtFoWe6RlxqiZknlYXWAweVR+b:WPrwbSbdMC+2fsyFQcc/5e6LIAwezg/
MD5:	FDE02289371DC4992AC6EC3D99D931DA
SHA1:	49CB107406FBE7CCACFB96F3DE605CD367B9FAF3
SHA-256:	5EA5D9664BEFF0A9E7CAA2F4DC42D319E6664EA2453B8022F1B0E0432D2CF54B
SHA-512:	6FE106D85B48251190B9FA24339E3A08263CC8697B674684707F62AA9ADC3CD4E28E43D7268F047622E1B4F222C4709EB08275647D5B1747E927FD8880F6991B
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`.....C....................................................................C............................................................................"..........................................B...........................!..1"A..Q.#2aq.....B......$3R...%4C&b................................;......................!..1..AQ"aq..........2.#.b..BR..3r.............?.3.a,..%6,8.-?...o .=F.J....E!ITF.......Q.Q..,.6....y....uF.y.@.......G..>...wi..^%....4.>......8.............E..Cy.]....?...6._.$.4..?R....6..?.l}.d_....~.....?...........@...m........?...x.b.,4%....<...'...t.\|.i..J...?...~zq.^....I..6>.....t........L;.Q=B.%w.<....u.8.?....lZ....b.)...6.......9.q...=.?...#...!.~w.gF..KE_.T.h......t.ek...M ..Z.......N.!..8..........9..q..,<{.....7J77.S. X.T.W`.4.'...E....K..O0H9l.4@.....>../;.;..C.a.......m......g..@_I...{m.....o...?..~V.....A..;u..VD....~...?.].)e.....P?....~...4.P..._..P..JL..8..v#.?...{Z..v.a........>..}C..[1.~.....t.<H.N.=h

Chrome Cache Entry: 57

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 867x322, components 3
Category:	dropped
Size (bytes):	6577
Entropy (8bit):	6.56911644456447
Encrypted:	false
SSDEEP:	96:qxl8Y3luZsH7O0pSwaJatUEcypU7oRb6zSjgeREwX1z2nwWE54F:qxPu6IAtUfypioRb4eR5CO4
MD5:	DCDFE162D25DB534B0835093A1B9B879
SHA1:	374A73DA84EE631F7BA4DEC4273F23DC92B582B9
SHA-256:	B37785140051D3BE6D0BBE992CAF7008C42EF106CD1E53231E7E7D525430896E
SHA-512:	54469035B645B86262F38C888AFB5290782B1F024D5DE734BC0C87360FA14264B1B39B0A256DA538685599EAE4CEE5B5694FA4ACE9A549906EBE9746B80FA90D
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`.....C....................................................................C.......................................................................B.c..".........................................8................................!6Whv...."1.2..#$AQa%3............................+.....................1A..!"a...q...Q....b............?......................................................................................._.^...O..6....G.j....~..w..M..u.5S<..L..<....<D.........!v.....;\|n...ecY..i.qk...7?M.i.....S.Lz...\|.....Q....qjj..>.o.............w.....&9z...m.&{D...[w.67.%........<D.........vk...f.....m\|.n..1..^...&...MUE...tt...5DG;ur.........).8Y......4.;M...}.NE....&..z.Ms1..&}^.r.i.1.k...lS.K.../..nx.v9....C....\|W.^.n..w.Uhq.[.4[.:\|t.\.....lM_...&_...x...3......:\Q....^...k..U.E=<..j..?.c....?...>.<..}..%........kr....gv./p.^.^.G].....e.OL...zz.:bj..........nh.y..6.9..:e.J.........TW.yt.......\|."j.......>.<..}..%........k.svq.^.....H...ztWr.4.

Chrome Cache Entry: 58

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 867x222, components 3
Category:	dropped
Size (bytes):	63767
Entropy (8bit):	7.968177305308508
Encrypted:	false
SSDEEP:	1536:BEoDGeXc1DxFTHn1aDWXXUadep6y9pezm+codAU:BEZekz1KWXXXyX9pe+RU
MD5:	DF7F6F9C98AC7A7DE93F45EB5E99CEED
SHA1:	B3886E6787531EA153EA17E45FBDB40DF4B912BE
SHA-256:	D3017C4981C0D8A6C43DBE0B1641DB8FFC643090073434E89F4F3E4D92003770
SHA-512:	97C746BAFC23BDF5F451954E0B5FA8EC268DBD3555429254F132ED96E696E7F9389F1AC0F14C042605913E3210D1FC045BD80034AAD1B9F66C5A850B5854FD40
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`.....C....................................................................C.........................................................................c.."..........................................O...........................!Q.."1Aa...#2q....b....$B...%....34CR.&....STVWeu...................................R........................!1..A.Qa....."q.....2Sr......#BCR.....b.$34DEUcs..T%&'5.............?..`x.0<.W.\|h.5.....j.....j...G...Q..h..5_....BZ...4`x......\|i!-T`x.0<.W.\|h.4...0<......4p_.HKU......U._.8/.$%....F..../......F......\|....I.j.....j...G...Q..h..5_....BZ...4`x......\|i!-T`x.0<.W.\|h.4...0<......4p_.HKU......U._.8/.$%....F..../......F......\|....I.j.....j...G...Q..h..5_....BZ...4`x......\|i!-T`x.0<.W.\|h.4...0<......4p_.HKU......U._.8/.$%....F..../......F......\|....I.j.....j...G...Q..h..5_....BZ...4....3..-..u.?..a..w../.I[~..=.O..4.....rx..o........Wd..l...d..J.G.w.....~+.........I}.n.q.5..U..m.9.=...MV.K...h.o.N...!USR.Z....P..

Chrome Cache Entry: 59

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 109x29, components 3
Category:	dropped
Size (bytes):	986
Entropy (8bit):	7.160184331185415
Encrypted:	false
SSDEEP:	12:F4nS/nUUynI4VqHFZ9SMDTRdK2LbUhFyILCsVhFXMZCorNz1G98mw4Z+A0AuYks2:enWy04C9dKRxC+t2xM98X407KidzJUc
MD5:	91ED92342D45BA5B7154D1564EA1A09F
SHA1:	91305645AB232DE2D9C7827FAE0D9CC0B6923BE0
SHA-256:	1E688A6FDE7950A91D4656103F0CC512ABDC25A2BBB11592DC14E2E201CD4D4D
SHA-512:	03760D68E4DD5D4BED9D5A4C0A471BA1C98A0C4E18820B3A913541F5449530DBCA83D218E3895797D9698AFAF344656B269052A6B4D9DB13D284E5141087FF71
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`.....C....................................................................C.........................................................................m..".....................................%.............................."!.#1...........................(....................!q.."AQa.......1..............?..c..&1."c)s!..Q...6.i.g................y.S_Q.....Q.:U/h.....Gz......)..:.....,..=3./+q.QDeEz..T...xk.".Q.8..>.?G...U..{.j..x.l...5Wv....S.2...IEq.Y#...!N..{..._......gW./i.-V9.Q.".2}.F.D.FD.A..RW.Dq}i....;..^.c..&.x.....@bc....T.l.)kV...}."......V.E6..Q._%.~....7.4......X.H.k.Mbmz4"n.a.`..uI\S# .E._.RO.h9v.8.f..v.....2..0..c...0.cA.OW......6x5......!#........~..HQ{QD...#.Go.4.....I.....n....I.........tG. .I....{.5.0..r1....J.c7.v.Y....+]f....O../....k..[.U.W..S..k.n..e...0.e.s=....nj4v-.Q&...Qp..B._J._..2.j.%74.5....!{}..N......~.3.qdxWJ{.j..\|.@.C..W.}c......#L.6...^..2...'c.^.f..@.^.'...........^K.w...Z,....1.dU1.a...

Chrome Cache Entry: 60

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 109x29, components 3
Category:	downloaded
Size (bytes):	1035
Entropy (8bit):	7.1939944859949545
Encrypted:	false
SSDEEP:	24:enW+rjAYJjYU3lSNtNJilV+BFQtyGRh+xtqT:q5vpYfNtNMlV+Utzh+xtQ
MD5:	AC1ADE49EB07D24F74501DD32947C0F6
SHA1:	18D4ED207D552B76AFC18CBD13B17F9335612777
SHA-256:	0534A085446F0F8A7A7EB3FF3A3594BB744342029389FFA35B8595B5073DEC2D
SHA-512:	22D1CC9B715EAD51F7F1E6584DE95416BE5E73DAC387094DFBA04CE7BD71C9521743021D611350324DDD4EDA44ED1835688E5F059D902787849959D9F0B60EB8
Malicious:	false
Reputation:	low
URL:	http://www.northamericaniron.com/files/IMG_3.jpg
Preview:	......JFIF.....`.`.....C....................................................................C.........................................................................m.."......................................'...........................!..."#1.Aq...........................%.....................!1.."AQaq...............?..1.`.c%th......d.:Wl..YQ...GSD2..}...../.f%.T.S2..X.k...cU...$.....mn..YD%T/...iRU.QQty...g./..v.G.W..+d....f.Nn.._!...d.$....0...^..C.D-5Y+....e.....3M..Mo`{_....&F.n3..icJ..Xa.2....J...;w..v^.#V..'p.6...WH.t.).3&......=.8fj.'(..D$..[H..1my...&.l..H...9n.6.r.Ul.yq.'V..q.."Z....E.Qo...hD=.Bo.O.t/.F...^I9p.H.-.YV.A>.J.V..:...I...1.NXu[....M.1...c.c........%....d..............W../.J..8.G./_..p..5:}Da[5f.F..Y.ZB......n"........K..../5O.j.N,K..c2.^Iq........%....^z..(..R.p...F..T...+.)W.E$.eU....H...'./aDOY...%....g....e..Fv..(.....$.2.n........8H.....a....^l....v..k...*'..@.V..g.2...@.8d.:.()z^..>..b~^.3R..5.U...........HLP..6

Chrome Cache Entry: 61

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 236x22, components 3
Category:	downloaded
Size (bytes):	2548
Entropy (8bit):	7.7600015640080064
Encrypted:	false
SSDEEP:	48:qG/ykr3WnTh+48Lac7JO3qp+3Iad9gkxkPmN89Hkr3WLJ7GsGn:qwykr3E1N8GckIad+kxnq9Hkr3WJ0
MD5:	2FC84B8C0B18C305C3D204C9C1502876
SHA1:	5C5334187444A8B407B76BF92E6FDD0288D590A6
SHA-256:	FC6B5D36C5140D682018A66EFBD5508076E8C2FB027F0B509B495045BDF954A2
SHA-512:	59587519655E92589434E3488036F25495D0CB02705C2C1FC1EE404FD241B3AB0CAF912D6C92591E5C9B79795BA3D3C0604427A6677DE7E4F6FB55CB08289B22
Malicious:	false
Reputation:	low
URL:	http://www.northamericaniron.com/files/IMG_12.jpg
Preview:	......JFIF.....`.`.....C....................................................................C............................................................................".......................................+............................!."1..AQ.#ba2.................................................!A."Qa...1......Bq..#..............?..cS\M..q..K.!($.M0D.u5T.2D.<.....T..M.[..0....].a.].`8.Jd.T\l\|{pU...{E.......On..\|<...@.Hhh.}c2....g...?)h.luw....0$.7..m5.c.F$.Qk.>W...4TU....& ..f...g...}..a...l.q....?.&l....N..H_Ma[(.M.......C.../..h]..M.x._..)......."h.....6=......+..E...UA@Di.'.F....v.^......L.kk)..X.(.....%...HR\|}.-..'.b...y..m8H....g.5Yw...M".&.n...L}5.R.F...V.;6..2<.1....)LG.2$m._.=b....^..2...Ld..D.YF..!.......6....:WP.;__..P...t~`A.+Vo...r%...m...6.RV.=d.o..:MFd.$l.L.E_.."U.""..&j.n0.[..z......c.a...b...HR;.....U.....}..i.D.w..>ew5..C.!..1..M..y.....bFF.=.}.J."j+~.Tp;.=1c..1Z..;s..W.5.`.nP.L.0"....)....D'\.E..UN.zD.>sCB...\|W....m.F.F.v..

Chrome Cache Entry: 62

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 109x29, components 3
Category:	downloaded
Size (bytes):	1250
Entropy (8bit):	7.403114784368202
Encrypted:	false
SSDEEP:	24:enWgIXKWAMIpwmBWIf7aADafSAn5vZw07PiG/UfUrhoWKHtlg:qExAc6Lf7aAASAn5Bw07PiAuUmFHDg
MD5:	B0BA218BFB679E57D3DA1156D8F81819
SHA1:	D1A1243A3C546FABF16F46728BD1E8FFEF3C9988
SHA-256:	7300EE43A9C9F0F2CC66032AB233E3B624095640070321BAA8E4A41F7F437823
SHA-512:	70DE15BEE515E068320209C6277E9DF41992BB284CC9AF0AF21F6CCDD7D69938865781EBE1D4DD78EC03806C739638FFF7DFA7144E1B6A54310376E84FE17A37
Malicious:	false
Reputation:	low
URL:	http://www.northamericaniron.com/files/IMG_9.jpg
Preview:	......JFIF.....`.`.....C....................................................................C.........................................................................m.."......................................+............................R..QS...!"A3a.................................-.......................!....Aa.1Qq...."r...............?....~..v?p`..w.....\|.~.6o7x...~..v?p`..w.....\|...%.%...1].....4.M[q...6...).v.....13..C1D.._...t..'..8.\...o0.X..XU-_...v..4]@....... .....Yih."S..o~......:.-Yliax+....A\@.P..+g.c..+....$...j.K......\|.n.....I.e....3r8P..!......8.2..y..1ibN...v.cJ........kf.8.....S......"L..<..^...P.z4.M....u.G..B(..R..s4.V.v?pb...0...U.\5w[.Rx.e..s..9.TFZ)82e..\|e0]b..f',.....>.+...1t.^n.~.P...VF.h........x..H. ....d.c..+.......\|.t.....l..%.%...1]...5t...+...0e6c.n.n......^.....l.V...]K.+.w..z.=.W..2.g.9.8.2..m*.$.7U..n.$.2F9.....Q.......b...Zp.4..h..P......U.".)0..)....Q(.....9v.^.....S............,....)..x.9t.../]R)..W......%G.....O.e...6

Chrome Cache Entry: 63

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 1x271, components 3
Category:	downloaded
Size (bytes):	309
Entropy (8bit):	3.4342110144896774
Encrypted:	false
SSDEEP:	6:dfNXtkkgnnSnctabnUUigZ+DtqR3xl/l9msk:F4nS/nUUfNxl/T6
MD5:	D4D8C357D80B5C0E81FCB29F25FD8BBA
SHA1:	E9778C92179C2508820559FBD337BFDB968661A6
SHA-256:	8102A248C921E89223DD983DCEED84E4BA218F569A81EAC2E52583CCFC9CA43E
SHA-512:	DB72526FAAB7BE6B86E8C73E7CCE487A83BB016712C47645A96B81BAECA3AC0A739F93401F57954CA66C9B488A19621C4A7A3FCC474A7891EABD58E7EFAB00A6
Malicious:	false
Reputation:	low
URL:	http://www.northamericaniron.com/files/IMG_11.jpg
Preview:	......JFIF.....`.`.....C....................................................................C............................................................................"............................................................................................................?..............................

Chrome Cache Entry: 64

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 867x222, components 3
Category:	dropped
Size (bytes):	64283
Entropy (8bit):	7.964589524007604
Encrypted:	false
SSDEEP:	1536:YYCQ57WrIAxBsqVpXXs4dhng7+e/j/lfDWH4lXx:YYCQ5AIAxXXzOKer/lrWH4lXx
MD5:	7C72A5A74E0E5438158B6538C2B2F364
SHA1:	0DEEAABF2FB50C15F1EEB417CB3FB128DC6AF1D3
SHA-256:	E5EED1287E3BBF6960702A70FEA3AEEC1D8FC1B1BB7A95B6DCF18864FDF2A535
SHA-512:	93388E50F0EE2A3BF39C21F8B440C6CBD5422B11D33F2A71F2E1F3B3CC0D021FFDB655385CFB09184EADFBF33B881A3F767CEF656BB1C02A3D9EB8C55002246F
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`.....C....................................................................C.........................................................................c.."..........................................W...........................!Q..1"a..A.#2...bq..$B.....R...%34CDVr...5UuTWdt...........................................P........................!..1AQ.aq.....".......S.......#23BCRbr.c..45DET$Us.%..............?..`x.0<.W.\|h.5..B.F...4`x......\|i!-T`x.0<.W.\|h.4...0<......4p_.HKU......U._.8/.$%....F..../......F......\|....I.j.....j...G...Q..h..5_....BZ...4`x......\|i!-T`x.0<.W.\|h.4...0<......4p_.HKU......U._.8/.$%....F..../......F......\|....I.j.....j...G...Q..h..5_....BZ...4`x......\|i!-T`x.0<.W.\|h.4...0<......4p_.HKU......U._.8/.$%....F..../......F......\|....I.j.....j...G...Q..h..5_....BZ...4`x......\|i!-T`x.0<.W.\|h.4......Q..h&...... ...G........'.Z.eUKKk.f...Rr..+.8...YZ.C:...$..0.#...........F..S.(..`.9..I....Z..........d....2G......uv.

Chrome Cache Entry: 65

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 109x29, components 3
Category:	downloaded
Size (bytes):	866
Entropy (8bit):	7.0046385464018135
Encrypted:	false
SSDEEP:	24:enWRjlysmyyZHqOvaSgz/7BGV3hFDZQihWsn:q+LyZHqK2K3XZQC1n
MD5:	23193E28E54ACF72BDF8ACCF278B74D2
SHA1:	BB82E5F816995C541AAC6E35C17FB2BD8BCB6C75
SHA-256:	8E611B72B1B366403A2DF5440628BDAF7B21A57572A33C51662DD5520790DEEB
SHA-512:	32F857E28482E52F347FDF58846CB36CAE338E80DFA933C414F03A71B820747D03C8559CF41CEB9DC5D5E964E224D296D60C8D1864A4C745920D5A3FBD0982D5
Malicious:	false
Reputation:	low
URL:	http://www.northamericaniron.com/files/IMG_1.jpg
Preview:	......JFIF.....`.`.....C....................................................................C.........................................................................m.."......................................(.............................!.".#1QRa............................&.....................A.!Q....."a................?..c....0.3.SW>..5%TbzT...fC.......UD....M....>2._Q#j.Er..7.v.Y}..$'./....d..35T.U=.\|...c..t.k~2.?.5.."l.....#z....F...,..z.G..$...mIU....Le.k....z....q...5h..On..:.h..E....#...T.[.o....c..m.2.o.O.......6+'n....".!.$..#..N.H.Nu".hTD...{2..U..sOJ.;g..1.1.`.c.......w.....q....P.W"..5.w......`UC..;.r..K...?..4.u....Z..-8^.1....+..."........<...,..J#.$................5%.s.,..>..{.:~..Axq:..N...i...lx=.....`.e....I.(I!$vW...))}s...3M..7..$.....P6........L..u..+.#..B8Q.<w...*& E...j...p.?.2Z2...j1.`.c....

Chrome Cache Entry: 66

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 867x222, components 3
Category:	downloaded
Size (bytes):	64283
Entropy (8bit):	7.964589524007604
Encrypted:	false
SSDEEP:	1536:YYCQ57WrIAxBsqVpXXs4dhng7+e/j/lfDWH4lXx:YYCQ5AIAxXXzOKer/lrWH4lXx
MD5:	7C72A5A74E0E5438158B6538C2B2F364
SHA1:	0DEEAABF2FB50C15F1EEB417CB3FB128DC6AF1D3
SHA-256:	E5EED1287E3BBF6960702A70FEA3AEEC1D8FC1B1BB7A95B6DCF18864FDF2A535
SHA-512:	93388E50F0EE2A3BF39C21F8B440C6CBD5422B11D33F2A71F2E1F3B3CC0D021FFDB655385CFB09184EADFBF33B881A3F767CEF656BB1C02A3D9EB8C55002246F
Malicious:	false
Reputation:	low
URL:	http://www.northamericaniron.com/files/IMG_0.jpg
Preview:	......JFIF.....`.`.....C....................................................................C.........................................................................c.."..........................................W...........................!Q..1"a..A.#2...bq..$B.....R...%34CDVr...5UuTWdt...........................................P........................!..1AQ.aq.....".......S.......#23BCRbr.c..45DET$Us.%..............?..`x.0<.W.\|h.5..B.F...4`x......\|i!-T`x.0<.W.\|h.4...0<......4p_.HKU......U._.8/.$%....F..../......F......\|....I.j.....j...G...Q..h..5_....BZ...4`x......\|i!-T`x.0<.W.\|h.4...0<......4p_.HKU......U._.8/.$%....F..../......F......\|....I.j.....j...G...Q..h..5_....BZ...4`x......\|i!-T`x.0<.W.\|h.4...0<......4p_.HKU......U._.8/.$%....F..../......F......\|....I.j.....j...G...Q..h..5_....BZ...4`x......\|i!-T`x.0<.W.\|h.4......Q..h&...... ...G........'.Z.eUKKk.f...Rr..+.8...YZ.C:...$..0.#...........F..S.(..`.9..I....Z..........d....2G......uv.

Chrome Cache Entry: 67

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 109x29, components 3
Category:	downloaded
Size (bytes):	986
Entropy (8bit):	7.160184331185415
Encrypted:	false
SSDEEP:	12:F4nS/nUUynI4VqHFZ9SMDTRdK2LbUhFyILCsVhFXMZCorNz1G98mw4Z+A0AuYks2:enWy04C9dKRxC+t2xM98X407KidzJUc
MD5:	91ED92342D45BA5B7154D1564EA1A09F
SHA1:	91305645AB232DE2D9C7827FAE0D9CC0B6923BE0
SHA-256:	1E688A6FDE7950A91D4656103F0CC512ABDC25A2BBB11592DC14E2E201CD4D4D
SHA-512:	03760D68E4DD5D4BED9D5A4C0A471BA1C98A0C4E18820B3A913541F5449530DBCA83D218E3895797D9698AFAF344656B269052A6B4D9DB13D284E5141087FF71
Malicious:	false
Reputation:	low
URL:	http://www.northamericaniron.com/files/IMG_7.jpg
Preview:	......JFIF.....`.`.....C....................................................................C.........................................................................m..".....................................%.............................."!.#1...........................(....................!q.."AQa.......1..............?..c..&1."c)s!..Q...6.i.g................y.S_Q.....Q.:U/h.....Gz......)..:.....,..=3./+q.QDeEz..T...xk.".Q.8..>.?G...U..{.j..x.l...5Wv....S.2...IEq.Y#...!N..{..._......gW./i.-V9.Q.".2}.F.D.FD.A..RW.Dq}i....;..^.c..&.x.....@bc....T.l.)kV...}."......V.E6..Q._%.~....7.4......X.H.k.Mbmz4"n.a.`..uI\S# .E._.RO.h9v.8.f..v.....2..0..c...0.cA.OW......6x5......!#........~..HQ{QD...#.Go.4.....I.....n....I.........tG. .I....{.5.0..r1....J.c7.v.Y....+]f....O../....k..[.U.W..S..k.n..e...0.e.s=....nj4v-.Q&...Qp..B._J._..2.j.%74.5....!{}..N......~.3.qdxWJ{.j..\|.@.C..W.}c......#L.6...^..2...'c.^.f..@.^.'...........^K.w...Z,....1.dU1.a...

Chrome Cache Entry: 68

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 4601
Category:	downloaded
Size (bytes):	1521
Entropy (8bit):	7.853975981573828
Encrypted:	false
SSDEEP:	24:XkPg3waCJdoXMZKjSL4eopiSVDVhNv0oIKY1aZ4LWoTGqQ2Fd4xlDD:XMIQkLeoYSVD3N5Iv1aZ47HQCmP
MD5:	785120A239FA2C2FA069A2564E79AF37
SHA1:	81EA72097782BD3EB98E1E941DC91BC0EFABF176
SHA-256:	2F9FE02081533C4EDCE36B02832DD920BC6A148D1D417BEA97E9D51BD5D161B2
SHA-512:	84F90D0B8AE90CEBF5FAA7D917FEA8A8728106B00EC499F744A5AA21AB04049DF7EED8038C97475FF15DCE113977C04AF5BA3C04C2EF96546AEE36B39974F898
Malicious:	false
Reputation:	low
URL:	http://www.northamericaniron.com/about.html
Preview:	...........X.n.8.}_`.aV.6m...,_..q.ts..m7O.-.6[I.T\../).d.i... .D..3$g.t.8...o..0.Q...........30......_.C]7-.3.s"..Qh..K.....g...B_8:e3c\|c(...R...@...[W..o..Q.Z",..(.=m.c..L........t.. M.#.).aD.....L...G...Z...)..paJ.\|"q@.\{.P...).W..zm.Lp.K.".....X.R1......,.R..3.?M.S.Z....0.8(`.S\|.2.o..l..lyu..pz1.XJ.AD..p..Ox..k..&4..5...e.AH.+.>.9...o`<.g.....p.o..+.l......E$\zc4...dM.Lfs..E(..!....{........2~r.U.;>.).^L..."...0...W1o.qu.~8.H@....g.....wHh..<4.4L...g.....Tx.VS=...5..zf.~.a.O.i.%.k..a>......;0.`\......O.q.%...........-.4v`..a......Jc?J.,...0....`r..(..J......o......(.I.S..X.@.=.l).-.G..c.7,..Y.^..qX...E-.....,.k.X.......'4X.w..!6#.../....$.........j...2.?.kN.~. ...4.j$B3.A..W.S.bn(..Y..Nf...}).].Uv...I.E.h'K..{.2~.....^V.M.i.Z....g.G..2%.fr...3...)..9.....].o...f..U..Q..0...2...)...P(..Wg..f=..y0..n.....5.L2.F..UE5V....b...j.....v/.{Y..".{.CV..]Y....4.........*(..=-....;..&Q.@...Z.yO....V.z....]..?...].......;./h....t....^p&.w.

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 109x29, components 3
Category:	downloaded
Size (bytes):	1066
Entropy (8bit):	7.291333859656246
Encrypted:	false
SSDEEP:	12:F4nS/nUUsZkhMH5pGb9rekqTiF6K8aRy+R6pExRJzmZTO7XgDHi7e3N1rzJJTG0f:enWaQOGHH4+hjzmZTOMj39U0mSIjRW
MD5:	6BBD5C3CB4C119BA08EE5F553FB1903B
SHA1:	72EAD907AF4C2EB5C922B1C0D158CA309C3BBA23
SHA-256:	F8ADCEF3C1DA973FD6E292342855FC39C753ABA32B889E15AA57B64D683C776F
SHA-512:	49E536A64894B48528ADC5CF6E7A80E557CB8C8F7490C1402BDFF14F508A38CF4E001ED7C462C85DFD0FA4B44C27ECA1D025DBCBAE47D9F77B2A6C2E40A368F0
Malicious:	false
Reputation:	low
URL:	http://www.northamericaniron.com/files/IMG_5.jpg
Preview:	......JFIF.....`.`.....C....................................................................C.........................................................................m..".....................................(............................!.".1..#2A...........................%.....................a.!1..A...Q...............?..c....h.E...?Si4y...x5!.E....(......}s.f&..5)fs.L..........aCOc.5..c.b.k..H.c.HyX...TF.I.N.......E...%.]..+.(6F...Ap..Z...-.!Sl.~D1!.#..T:...-..d..^'.......Yv...tw.5V.j.kz.n..jEe%.rkYp.V.6.C....>D).)...}..t.t..{y..{.8....:H~02H.8O7._2"..c........S.]t.;...c....U....v.G._2..u.ND..$...2\|..~L......U....W..z.msvjp.<.O....n..6......."...D..6.\..T.u..nMJ....c.4c....0.v.....h.,.$..!"...9m.$!..._i.TT_...3.MC56.....m...%i:..........fR.\....0zC.....A.m>.'....s......]>....Dj%{R.T..H....5T.E.....S...2.i.?....r..;..&.".i......a.{..,....v$.0.n.........r?...l=L..(c.KM[..[.v......r@.$."..6(. ..=.K..3.J9.x*]S.].\|.Y...l.g.........x.m.....}Q].Q........+.e.

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 867x322, components 3
Category:	downloaded
Size (bytes):	6577
Entropy (8bit):	6.56911644456447
Encrypted:	false
SSDEEP:	96:qxl8Y3luZsH7O0pSwaJatUEcypU7oRb6zSjgeREwX1z2nwWE54F:qxPu6IAtUfypioRb4eR5CO4
MD5:	DCDFE162D25DB534B0835093A1B9B879
SHA1:	374A73DA84EE631F7BA4DEC4273F23DC92B582B9
SHA-256:	B37785140051D3BE6D0BBE992CAF7008C42EF106CD1E53231E7E7D525430896E
SHA-512:	54469035B645B86262F38C888AFB5290782B1F024D5DE734BC0C87360FA14264B1B39B0A256DA538685599EAE4CEE5B5694FA4ACE9A549906EBE9746B80FA90D
Malicious:	false
Reputation:	low
URL:	http://www.northamericaniron.com/files/IMG_10.jpg
Preview:	......JFIF.....`.`.....C....................................................................C.......................................................................B.c..".........................................8................................!6Whv...."1.2..#$AQa%3............................+.....................1A..!"a...q...Q....b............?......................................................................................._.^...O..6....G.j....~..w..M..u.5S<..L..<....<D.........!v.....;\|n...ecY..i.qk...7?M.i.....S.Lz...\|.....Q....qjj..>.o.............w.....&9z...m.&{D...[w.67.%........<D.........vk...f.....m\|.n..1..^...&...MUE...tt...5DG;ur.........).8Y......4.;M...}.NE....&..z.Ms1..&}^.r.i.1.k...lS.K.../..nx.v9....C....\|W.^.n..w.Uhq.[.4[.:\|t.\.....lM_...&_...x...3......:\Q....^...k..U.E=<..j..?.c....?...>.<..}..%........kr....gv./p.^.^.G].....e.OL...zz.:bj..........nh.y..6.9..:e.J.........TW.yt.......\|."j.......>.<..}..%........k.svq.^.....H...ztWr.4.

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 5367
Category:	downloaded
Size (bytes):	1820
Entropy (8bit):	7.892529388952369
Encrypted:	false
SSDEEP:	48:XviDMOiKxkaNbrH/4ofWST0Og4vxpdp+35/l:f/Mx7z4ofpQWp9+3b
MD5:	7DBB3DE14D8B2C6926BE7ABA44468ED0
SHA1:	0B0DA1EE55D82B41588D9F65AFF045338D4BB35A
SHA-256:	B928DE8B3497E0C196DA871A2B80E3EC456787F971E7D3421B62ABE8E280C3C9
SHA-512:	0899FA03F9BDE5A4AFC80E21165AAFC5505AA7DD51895EB051EDABED1CCCAEE26713392EA7E99EDAC6F15C2C76DD91594CD85889D8C0B8498805ACF1F1B2272D
Malicious:	false
Reputation:	low
URL:	http://www.northamericaniron.com/
Preview:	...........Xms.8......>O.ff+`..NHUB...M...n....-@...I2.;...Z6.6......l..t?.V....<....0.!..]....U..'o`.7...e\|...U..$.b...p...[`.....\..K....?...ns!...:..OO...~.'J.3.RM "!.[3.QI....".4.}k .SJ.I..3...#.).P.f(\|..S...hU..N....S!.E.X..cb..;a....W...ti.U.V..9...~...v9..o,.7..S.?..).`....h..0..=...?..j......].....V.K..Lsz..B.9\.T2.Dp+.3.v6..)...4.^....@........a4~.4.......t...hUeJB.W.1.....%e...FB..gC.....v]'.=.Y../..<..h..\..i...+..}U.D......_.w.._.....lQ}..A}.zu.....B.L....=.".6..k.8.j..y....I.v...UDi.F..(.f...i........`Zo.iv.0..L.M0m..S....k.`..0u..L...q'...q..xNkk...qZ{8...4[y....w........t.`.dq..&N..~{i\?..M.y`7....$.kd.H.`..=GO..v....F.@..V.9..<...t!c\.F..V./0..7...2.....\|H.E].G\|.I..h..........<......f.7o...H...B2.]H$..6e..h.2y...?...../..O...,.y..,zA'.Um3.`.9.....X.q..u.V...f3..wW..E.,.....].L......~\|u{?\|.......0s..b*).3`.1.:.H..8.Go..f=.J.3;...:<.4).Hj...F....>._.!L7`.....s8..9Q.o}?g...C_I.oe......1....>..L.[mS6...}.V.t..6..T.@.lo$..-2

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 109x29, components 3
Category:	dropped
Size (bytes):	1066
Entropy (8bit):	7.291333859656246
Encrypted:	false
SSDEEP:	12:F4nS/nUUsZkhMH5pGb9rekqTiF6K8aRy+R6pExRJzmZTO7XgDHi7e3N1rzJJTG0f:enWaQOGHH4+hjzmZTOMj39U0mSIjRW
MD5:	6BBD5C3CB4C119BA08EE5F553FB1903B
SHA1:	72EAD907AF4C2EB5C922B1C0D158CA309C3BBA23
SHA-256:	F8ADCEF3C1DA973FD6E292342855FC39C753ABA32B889E15AA57B64D683C776F
SHA-512:	49E536A64894B48528ADC5CF6E7A80E557CB8C8F7490C1402BDFF14F508A38CF4E001ED7C462C85DFD0FA4B44C27ECA1D025DBCBAE47D9F77B2A6C2E40A368F0
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`.....C....................................................................C.........................................................................m..".....................................(............................!.".1..#2A...........................%.....................a.!1..A...Q...............?..c....h.E...?Si4y...x5!.E....(......}s.f&..5)fs.L..........aCOc.5..c.b.k..H.c.HyX...TF.I.N.......E...%.]..+.(6F...Ap..Z...-.!Sl.~D1!.#..T:...-..d..^'.......Yv...tw.5V.j.kz.n..jEe%.rkYp.V.6.C....>D).)...}..t.t..{y..{.8....:H~02H.8O7._2"..c........S.]t.;...c....U....v.G._2..u.ND..$...2\|..~L......U....W..z.msvjp.<.O....n..6......."...D..6.\..T.u..nMJ....c.4c....0.v.....h.,.$..!"...9m.$!..._i.TT_...3.MC56.....m...%i:..........fR.\....0zC.....A.m>.'....s......]>....Dj%{R.T..H....5T.E.....S...2.i.?....r..;..&.".i......a.{..,....v$.0.n.........r?...l=L..(c.KM[..[.v......r@.$."..6(. ..=.K..3.J9.x*]S.].\|.Y...l.g.........x.m.....}Q].Q........+.e.

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 421x204, components 3
Category:	downloaded
Size (bytes):	53954
Entropy (8bit):	7.976497263867909
Encrypted:	false
SSDEEP:	768:LqPFMRBH8Js6QbjkXN9n2fc0HC+2/3syMGjQccjtFoWe6RlxqiZknlYXWAweVR+b:WPrwbSbdMC+2fsyFQcc/5e6LIAwezg/
MD5:	FDE02289371DC4992AC6EC3D99D931DA
SHA1:	49CB107406FBE7CCACFB96F3DE605CD367B9FAF3
SHA-256:	5EA5D9664BEFF0A9E7CAA2F4DC42D319E6664EA2453B8022F1B0E0432D2CF54B
SHA-512:	6FE106D85B48251190B9FA24339E3A08263CC8697B674684707F62AA9ADC3CD4E28E43D7268F047622E1B4F222C4709EB08275647D5B1747E927FD8880F6991B
Malicious:	false
Reputation:	low
URL:	http://www.northamericaniron.com/files/background.jpg
Preview:	......JFIF.....`.`.....C....................................................................C............................................................................"..........................................B...........................!..1"A..Q.#2aq.....B......$3R...%4C&b................................;......................!..1..AQ"aq..........2.#.b..BR..3r.............?.3.a,..%6,8.-?...o .=F.J....E!ITF.......Q.Q..,.6....y....uF.y.@.......G..>...wi..^%....4.>......8.............E..Cy.]....?...6._.$.4..?R....6..?.l}.d_....~.....?...........@...m........?...x.b.,4%....<...'...t.\|.i..J...?...~zq.^....I..6>.....t........L;.Q=B.%w.<....u.8.?....lZ....b.)...6.......9.q...=.?...#...!.~w.gF..KE_.T.h......t.ek...M ..Z.......N.!..8..........9..q..,<{.....7J77.S. X.T.W`.4.'...E....K..O0H9l.4@.....>../;.;..C.a.......m......g..@_I...{m.....o...?..~V.....A..;u..VD....~...?.].)e.....P?....~...4.P..._..P..JL..8..v#.?...{Z..v.a........>..}C..[1.~.....t.<H.N.=h

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 867x222, components 3
Category:	downloaded
Size (bytes):	63767
Entropy (8bit):	7.968177305308508
Encrypted:	false
SSDEEP:	1536:BEoDGeXc1DxFTHn1aDWXXUadep6y9pezm+codAU:BEZekz1KWXXXyX9pe+RU
MD5:	DF7F6F9C98AC7A7DE93F45EB5E99CEED
SHA1:	B3886E6787531EA153EA17E45FBDB40DF4B912BE
SHA-256:	D3017C4981C0D8A6C43DBE0B1641DB8FFC643090073434E89F4F3E4D92003770
SHA-512:	97C746BAFC23BDF5F451954E0B5FA8EC268DBD3555429254F132ED96E696E7F9389F1AC0F14C042605913E3210D1FC045BD80034AAD1B9F66C5A850B5854FD40
Malicious:	false
Reputation:	low
URL:	http://www.northamericaniron.com/files/IMG_25.jpg
Preview:	......JFIF.....`.`.....C....................................................................C.........................................................................c.."..........................................O...........................!Q.."1Aa...#2q....b....$B...%....34CR.&....STVWeu...................................R........................!1..A.Qa....."q.....2Sr......#BCR.....b.$34DEUcs..T%&'5.............?..`x.0<.W.\|h.5.....j.....j...G...Q..h..5_....BZ...4`x......\|i!-T`x.0<.W.\|h.4...0<......4p_.HKU......U._.8/.$%....F..../......F......\|....I.j.....j...G...Q..h..5_....BZ...4`x......\|i!-T`x.0<.W.\|h.4...0<......4p_.HKU......U._.8/.$%....F..../......F......\|....I.j.....j...G...Q..h..5_....BZ...4`x......\|i!-T`x.0<.W.\|h.4...0<......4p_.HKU......U._.8/.$%....F..../......F......\|....I.j.....j...G...Q..h..5_....BZ...4....3..-..u.?..a..w../.I[~..=.O..4.....rx..o........Wd..l...d..J.G.w.....~+.........I}.n.q.5..U..m.9.=...MV.K...h.o.N...!USR.Z....P..

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 109x29, components 3
Category:	dropped
Size (bytes):	853
Entropy (8bit):	6.9954581937921825
Encrypted:	false
SSDEEP:	12:F4nS/nUU1hnDjF3P7DqhwhzbMqWVkMNYmTabgGUSdsW3C7D6Tk98+wfjGhxn:enW7Dd7uhwDNMCmebg5SdsWmqk98jfqx
MD5:	BB4FF901BACC16A25A240C3F3BA5B8E2
SHA1:	CC1B16065D8632E5C849A120F4291CCF421B2BD5
SHA-256:	C2C73A4278A7CC9F155F541764D9453C5E11E51032CA41BECC8AEE0644B7C42C
SHA-512:	8B9A75C8D8AABC83DC863E386F84103E7BD7D0C66529E5D7AF7DA97A80B7FB03A0CB04E69141F33B8C01B816A00FAEDFDF79FA896CC59558E346B56A6E28FA0F
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`.....C....................................................................C.........................................................................m.."....................................'...............................!"#BQa...........................$....................1..A...!q...Q.............?..R....(.+S..n......(~...C.,.;T...R..I.;........\|`.x.f[....i...j...9..u....#....m_.r<.O..%K......)...{&E.Uk/.lK-.l..~S..rn.r.c...'.....$-..+...[H).^.....m.+...R/....,.e,.....D..K.(..p....Q.Z....[......Uw...b.1...U.J.e.t....j.Y}M..3..y.....4..QG.EQu.*?\.J.bx]W.......)@)JP.R..S..X.ej.,.0.=.........k.HPI..`oD..Wc..Fi....3....xL..R..<.......T......t..j...e.t.H.I.......p.....=..........=.-e....z....e..YM...h..}&9:...K<...{../..9.......)Z.2f.E..6./.e....d8-.M..f....g............:..'ED.N>..E..E)J.JR...

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 96x96, components 3
Category:	dropped
Size (bytes):	4085
Entropy (8bit):	7.820023394950317
Encrypted:	false
SSDEEP:	96:qJgl2c9n8yDI4nYE3ADqgdWrflTapxzg/4:qoDDvY9DkftapxE/4
MD5:	4953750BE019FA2A889AA16F8ED7EBEE
SHA1:	8AB7D9FC50936BACCD5122C9CEE4C9A82D93077A
SHA-256:	28A099615B2ED722075E8A1061956AEDA052C1FB1B8A665AA74F218DD96D7064
SHA-512:	4314CE29E87A75C8DCB595AE132636179040E34117B83F158CDAAD0DA463F8F7348443780E6A1CFAC81CF4B08A3DFDD07FE5118E2D6A52510DC3A651E4ADBC3D
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`.....C....................................................................C.......................................................................`.`.."..................................../........................!".12.AQb#B3R.$C4ar..........................................................?.?.".....U.r<......U=.{.....(x>.e.R.\|..Cj.Sx....^..o....pg.I.-.!K..k.`.b...Ye]....WI$,Y..rA........e...m....... .6.../.X..KjO.Y..m...@..f....l..b.9.i..h.Wc.U.0..4.g..YRyD'......X....;4...R.......i..,..h,..J.....S..sH..w.e....x..q...L1.c.Dr.vqVZa../.).8..(Iu.(%1.B....../.V.p.H..].QE..R.....`I..Do.....Q.T..D...r..@..$6..d=.5.m....$Ki.gd..2..YlS..1.x...q#......1.....}.../..9.9#Y6..Y#...X....A........I..'.L.WE.........}UB...m.n....E.<.1..J^.......V.x...Xdah.......V.2m.f.9>..Z8"te.W.y.p...C.....CW..........j.I.....h.P...^.._N.e.fm...<h...GPTUWX...I..H.......C...CP..U}..%....n7Q.U\|..O..;. !..$.U...h:..LCG":... .u.H.0.9.!..O.&.n.I.kl0U...d.6C.C.\|.

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 560 x 420, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	27173
Entropy (8bit):	7.879714509906674
Encrypted:	false
SSDEEP:	768:UcLohQ/lzZG9lr1R+cNrNH237cTipfH6A5q:N4ilzmr1cc1NH2Lkh
MD5:	1BAD6B40BC63F26102A850D120B4FBC1
SHA1:	FCD4AE7E65A3C54BF6A62587E0EF211136DCD7AA
SHA-256:	046F951F7D32CC5B2A919AB66126D54B7BF53A74616060376E475B18D3F5F02B
SHA-512:	8EAD410D806D0D1DBDD1E6E7BE58F671807D6B0F7476FE95A42F23C4E6645666B1CA449669C1E805DE370992BAB6691FC9F96CDB28CF4EB4C353901AB8BC951F
Malicious:	false
Reputation:	low
URL:	http://www.northamericaniron.com/files/new%20logo.png
Preview:	.PNG........IHDR...0........./.......bKGD..............pHYs...........~...i.IDATx...t$U...<:...3..LI .!.1.h....6!.i...h39..Q.h...]..w...E...P..d..0.@\...2.(( 3.C.1..A..<V.c......J..........93Su......}.[..r................0......0......0............................................. `..... `..... `....................................................@......@......@...........................0......0......0.................................................... `..... `..... `.........................R.-k..?.........Y..............&]]].YQ.Y..f..t..YQQ..r......@..r.Y3a%Z.TUUm...QOmm...........,......j)....<...Q.es4..\__.3HS$r.I.lF......Y..C.....n.LEE.\|MM.$....n...6.to3....VO...>.......Z[[.(.9c...w..suuus.3... `V........nD..........:...6,...0s\|_..X.......$a4....i..=1Oy.].V..\.H$2Mi$..... `V.R...`....X.'.H[[.\|.....E1.....D..7..O....FV3-....."......k....f%.X..p......i.\|GG.\|......8...1..tm...0n...6 ...b.hk....0+K....---..........7..L....1$.....7.p3..D,..G[.....Y..F

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 236x22, components 3
Category:	dropped
Size (bytes):	2548
Entropy (8bit):	7.7600015640080064
Encrypted:	false
SSDEEP:	48:qG/ykr3WnTh+48Lac7JO3qp+3Iad9gkxkPmN89Hkr3WLJ7GsGn:qwykr3E1N8GckIad+kxnq9Hkr3WJ0
MD5:	2FC84B8C0B18C305C3D204C9C1502876
SHA1:	5C5334187444A8B407B76BF92E6FDD0288D590A6
SHA-256:	FC6B5D36C5140D682018A66EFBD5508076E8C2FB027F0B509B495045BDF954A2
SHA-512:	59587519655E92589434E3488036F25495D0CB02705C2C1FC1EE404FD241B3AB0CAF912D6C92591E5C9B79795BA3D3C0604427A6677DE7E4F6FB55CB08289B22
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`.....C....................................................................C............................................................................".......................................+............................!."1..AQ.#ba2.................................................!A."Qa...1......Bq..#..............?..cS\M..q..K.!($.M0D.u5T.2D.<.....T..M.[..0....].a.].`8.Jd.T\l\|{pU...{E.......On..\|<...@.Hhh.}c2....g...?)h.luw....0$.7..m5.c.F$.Qk.>W...4TU....& ..f...g...}..a...l.q....?.&l....N..H_Ma[(.M.......C.../..h]..M.x._..)......."h.....6=......+..E...UA@Di.'.F....v.^......L.kk)..X.(.....%...HR\|}.-..'.b...y..m8H....g.5Yw...M".&.n...L}5.R.F...V.;6..2<.1....)LG.2$m._.=b....^..2...Ld..D.YF..!.......6....:WP.;__..P...t~`A.+Vo...r%...m...6.RV.=d.o..:MFd.$l.L.E_.."U.""..&j.n0.[..z......c.a...b...HR;.....U.....}..i.D.w..>ew5..C.!..1..M..y.....bFF.=.}.J."j+~.Tp;.=1c..1Z..;s..W.5.`.nP.L.0"....)....D'\.E..UN.zD.>sCB...\|W....m.F.F.v..

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 867x322, components 3
Category:	downloaded
Size (bytes):	2016
Entropy (8bit):	0.8621277821452077
Encrypted:	false
SSDEEP:	6:dfNXtkkgnnSnctabnUUivDtqR3xl/l9msf:F4nS/nUUbxl/Tl
MD5:	49406C084D8EDF9AB97731941D80BCA9
SHA1:	42D02141AC8ECCB1386A0C9BDCBEA277C0E540C4
SHA-256:	65807EDA6E951E660F95DCAED42610FBAAC255EA9A32B7823F416A19926DA90F
SHA-512:	4ABEE7FDD5284E4A4A801590CBC4C6F46B2854FD67F3BB3A988F4A5C4DD5FBA438294DA9ADC3A3A77315BCAF2A254165391B01A04F6D3724F758ED71B5EE653F
Malicious:	false
Reputation:	low
URL:	http://www.northamericaniron.com/files/IMG_24.jpg
Preview:	......JFIF.....`.`.....C....................................................................C.......................................................................B.c.."............................................................................................................?.................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 109x29, components 3
Category:	downloaded
Size (bytes):	1288
Entropy (8bit):	7.404002159971811
Encrypted:	false
SSDEEP:	24:enWCfKdEkJ4924d1h1sw+zXlLfJ842tsh5SDN5fVnATa4vq5:qRoJ4EQF+zVLCtsh5SLdk2
MD5:	5541F4F9A08006B37A9CEA0A8A046F09
SHA1:	D6188B559B139B6B9895B0A28C755FBEAC9C79C2
SHA-256:	E8A2E6BB1BD59065046FC36570B568DBD74E293CD06EFE6782B748D8D82F58CC
SHA-512:	A38CA05D7024B6966F2045F305DD9E6CA8A3C56E6A1DB0984A6A25AA56314EC276F22B1AC7F7B9BFC5902435A4C6DC5634FBE809813B0249DA80DA3F61840976
Malicious:	false
Reputation:	low
URL:	http://www.northamericaniron.com/files/IMG_15.jpg
Preview:	......JFIF.....`.`.....C....................................................................C.........................................................................m..".....................................,.........................R.....QS.!.."#12q................................+.......................!...1a.AQ"2....B..............?...l~E.l~E...u..3E.u.t.G..K......5.....h...'.u.b.6?".6?"......^...3$....._..2A.O...^....v....-.I.l.&1.'...#.(Rx$..O.`h(.?...J...l...X.S[.....v....>].gR..6@\.d...b.A.fK......v.c.-3c.-Y...9~...a}.8..u...i.,...........G...{.%=..U.u..c..a.....e........e....m:.:h....'.PS...d&.......wf.~<_h....\.4.R.N...j..n..P.>..w6?".6?"..%...F..[.$.=\|.:.$....2..`...AR.'8H..".d#.f..~..0..A\.X..g....1y<....QHS..9Pb..I...\...L...SY.._.f..~.'...\..l~E.l~E...u..3E.ti8..s.9..j:.w.w..u...[6.4=y.,.u.5.u;...:.{{.K......L.b.....,.p.....[p..]N.....1]....QS.;....{'A.-..5..B.2.&\.T..........LI.~._....u...N....f.x"bAv..n....Q.X.!Xy.%...X.....N...

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 867x322, components 3
Category:	dropped
Size (bytes):	2016
Entropy (8bit):	0.8621277821452077
Encrypted:	false
SSDEEP:	6:dfNXtkkgnnSnctabnUUivDtqR3xl/l9msf:F4nS/nUUbxl/Tl
MD5:	49406C084D8EDF9AB97731941D80BCA9
SHA1:	42D02141AC8ECCB1386A0C9BDCBEA277C0E540C4
SHA-256:	65807EDA6E951E660F95DCAED42610FBAAC255EA9A32B7823F416A19926DA90F
SHA-512:	4ABEE7FDD5284E4A4A801590CBC4C6F46B2854FD67F3BB3A988F4A5C4DD5FBA438294DA9ADC3A3A77315BCAF2A254165391B01A04F6D3724F758ED71B5EE653F
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`.....C....................................................................C.......................................................................B.c.."............................................................................................................?.................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 109x29, components 3
Category:	dropped
Size (bytes):	1035
Entropy (8bit):	7.1939944859949545
Encrypted:	false
SSDEEP:	24:enW+rjAYJjYU3lSNtNJilV+BFQtyGRh+xtqT:q5vpYfNtNMlV+Utzh+xtQ
MD5:	AC1ADE49EB07D24F74501DD32947C0F6
SHA1:	18D4ED207D552B76AFC18CBD13B17F9335612777
SHA-256:	0534A085446F0F8A7A7EB3FF3A3594BB744342029389FFA35B8595B5073DEC2D
SHA-512:	22D1CC9B715EAD51F7F1E6584DE95416BE5E73DAC387094DFBA04CE7BD71C9521743021D611350324DDD4EDA44ED1835688E5F059D902787849959D9F0B60EB8
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`.....C....................................................................C.........................................................................m.."......................................'...........................!..."#1.Aq...........................%.....................!1.."AQaq...............?..1.`.c%th......d.:Wl..YQ...GSD2..}...../.f%.T.S2..X.k...cU...$.....mn..YD%T/...iRU.QQty...g./..v.G.W..+d....f.Nn.._!...d.$....0...^..C.D-5Y+....e.....3M..Mo`{_....&F.n3..icJ..Xa.2....J...;w..v^.#V..'p.6...WH.t.).3&......=.8fj.'(..D$..[H..1my...&.l..H...9n.6.r.Ul.yq.'V..q.."Z....E.Qo...hD=.Bo.O.t/.F...^I9p.H.-.YV.A>.J.V..:...I...1.NXu[....M.1...c.c........%....d..............W../.J..8.G./_..p..5:}Da[5f.F..Y.ZB......n"........K..../5O.j.N,K..c2.^Iq........%....^z..(..R.p...F..T...+.)W.E$.eU....H...'./aDOY...%....g....e..Fv..(.....$.2.n........8H.....a....^l....v..k...*'..@.V..g.2...@.8d.:.()z^..>..b~^.3R..5.U...........HLP..6

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 14, 2025 22:56:47.177686930 CET	49675	443	192.168.2.4	173.222.162.32
Jan 14, 2025 22:56:52.044689894 CET	49737	443	192.168.2.4	142.250.186.100
Jan 14, 2025 22:56:52.044780016 CET	443	49737	142.250.186.100	192.168.2.4
Jan 14, 2025 22:56:52.044868946 CET	49737	443	192.168.2.4	142.250.186.100
Jan 14, 2025 22:56:52.045110941 CET	49737	443	192.168.2.4	142.250.186.100
Jan 14, 2025 22:56:52.045130968 CET	443	49737	142.250.186.100	192.168.2.4
Jan 14, 2025 22:56:52.726052046 CET	443	49737	142.250.186.100	192.168.2.4
Jan 14, 2025 22:56:52.726504087 CET	49737	443	192.168.2.4	142.250.186.100
Jan 14, 2025 22:56:52.726567984 CET	443	49737	142.250.186.100	192.168.2.4
Jan 14, 2025 22:56:52.728243113 CET	443	49737	142.250.186.100	192.168.2.4
Jan 14, 2025 22:56:52.728308916 CET	49737	443	192.168.2.4	142.250.186.100
Jan 14, 2025 22:56:52.729408979 CET	49737	443	192.168.2.4	142.250.186.100
Jan 14, 2025 22:56:52.729516983 CET	443	49737	142.250.186.100	192.168.2.4
Jan 14, 2025 22:56:52.770404100 CET	49737	443	192.168.2.4	142.250.186.100
Jan 14, 2025 22:56:52.770464897 CET	443	49737	142.250.186.100	192.168.2.4
Jan 14, 2025 22:56:52.817198038 CET	49737	443	192.168.2.4	142.250.186.100
Jan 14, 2025 22:56:53.718621969 CET	49740	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:53.718813896 CET	49741	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:53.723522902 CET	80	49740	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:53.723609924 CET	49740	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:53.723666906 CET	80	49741	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:53.723725080 CET	49741	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:53.723831892 CET	49740	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:53.728573084 CET	80	49740	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.294799089 CET	80	49740	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.294862032 CET	80	49740	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.294979095 CET	49740	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:54.311825991 CET	49742	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:54.311995983 CET	49740	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:54.312712908 CET	49741	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:54.317111969 CET	80	49742	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.317151070 CET	80	49740	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.317194939 CET	49742	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:54.317399979 CET	49742	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:54.317581892 CET	80	49741	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.322235107 CET	80	49742	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.331589937 CET	49743	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:54.332047939 CET	49744	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:54.333262920 CET	49745	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:54.336766005 CET	80	49743	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.336846113 CET	49743	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:54.336919069 CET	80	49744	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.337080002 CET	49744	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:54.337198019 CET	49743	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:54.337280989 CET	49744	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:54.338089943 CET	80	49745	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.338229895 CET	49745	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:54.338551998 CET	49745	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:54.341965914 CET	80	49743	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.342077971 CET	80	49744	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.343420029 CET	80	49745	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.475172997 CET	80	49740	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.475241899 CET	80	49740	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.475279093 CET	80	49740	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.475311995 CET	80	49740	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.475341082 CET	49740	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:54.475375891 CET	80	49740	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.475409031 CET	80	49740	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.475441933 CET	80	49740	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.475474119 CET	80	49740	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.475482941 CET	49740	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:54.475508928 CET	80	49740	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.475542068 CET	80	49740	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.475545883 CET	49740	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:54.475577116 CET	80	49740	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.475615978 CET	49740	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:54.475627899 CET	80	49740	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.476408958 CET	49740	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:54.479135990 CET	80	49741	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.480313063 CET	49741	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:54.480458975 CET	80	49740	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.485129118 CET	80	49741	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.520118952 CET	49746	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:54.522578001 CET	49740	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:54.525352001 CET	80	49746	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.528325081 CET	49746	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:54.535104990 CET	80	49740	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.535137892 CET	80	49740	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.535700083 CET	49746	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:54.535703897 CET	49740	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:54.540541887 CET	80	49746	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.562498093 CET	80	49740	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.562532902 CET	80	49740	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.562566996 CET	80	49740	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.562598944 CET	80	49740	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.562633991 CET	80	49740	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.562787056 CET	49740	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:54.562858105 CET	80	49740	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.563059092 CET	80	49740	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.563108921 CET	80	49740	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.563143015 CET	80	49740	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.563152075 CET	49740	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:54.563177109 CET	80	49740	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.563210011 CET	80	49740	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.563215971 CET	49740	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:54.563582897 CET	49740	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:54.563931942 CET	80	49740	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.563983917 CET	80	49740	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.564018011 CET	80	49740	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.564023972 CET	49740	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:54.564050913 CET	80	49740	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.564085007 CET	80	49740	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.564088106 CET	49740	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:54.564277887 CET	49740	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:54.564781904 CET	80	49740	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.564832926 CET	80	49740	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.564866066 CET	80	49740	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.564898014 CET	80	49740	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.564932108 CET	80	49740	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.564970016 CET	49740	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:54.565650940 CET	80	49740	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.565686941 CET	80	49740	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.565721035 CET	49740	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:54.605057001 CET	80	49740	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.605087042 CET	80	49740	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.605252028 CET	49740	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:54.643532991 CET	80	49741	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.643575907 CET	80	49741	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.645582914 CET	49741	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:54.645690918 CET	49740	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:54.648216009 CET	49741	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:54.648931980 CET	49747	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:54.649933100 CET	80	49740	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.649969101 CET	80	49740	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.650003910 CET	80	49740	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.650036097 CET	80	49740	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.650070906 CET	80	49740	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.650111914 CET	49740	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:54.650249004 CET	80	49740	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.650300980 CET	80	49740	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.650335073 CET	80	49740	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.650342941 CET	49740	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:54.650369883 CET	80	49740	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.650404930 CET	80	49740	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.650405884 CET	49740	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:54.650741100 CET	49740	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:54.650878906 CET	80	49740	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.650913000 CET	80	49740	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.650947094 CET	80	49740	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.650979042 CET	80	49740	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.651012897 CET	80	49740	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.651047945 CET	49740	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:54.651494980 CET	80	49740	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.651529074 CET	80	49740	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.651567936 CET	49740	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:54.652283907 CET	49740	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:54.653021097 CET	80	49741	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.653764009 CET	80	49747	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.653945923 CET	49747	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:54.653945923 CET	49747	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:54.654553890 CET	49748	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:54.657130003 CET	80	49740	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.658833981 CET	80	49747	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.659425974 CET	80	49748	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.659606934 CET	49748	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:54.659606934 CET	49748	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:54.664555073 CET	80	49748	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.809751034 CET	80	49740	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.809794903 CET	80	49740	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.810123920 CET	49740	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:54.813369989 CET	80	49741	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.813400030 CET	80	49741	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.813795090 CET	49741	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:54.908519983 CET	80	49745	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.908562899 CET	80	49745	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.908612967 CET	80	49745	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.908646107 CET	80	49745	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.908646107 CET	49745	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:54.908679008 CET	80	49745	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.908711910 CET	80	49745	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.908729076 CET	49745	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:54.908746958 CET	80	49745	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.908780098 CET	80	49745	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.908813000 CET	80	49745	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.908849001 CET	80	49745	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.908859015 CET	49745	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:54.908859015 CET	49745	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:54.912406921 CET	80	49744	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.912456036 CET	80	49744	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.912489891 CET	80	49744	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.912522078 CET	80	49744	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.912542105 CET	49745	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:54.912573099 CET	80	49744	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.912605047 CET	80	49744	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.912637949 CET	80	49744	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.912666082 CET	80	49744	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.912672997 CET	49744	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:54.912672997 CET	49744	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:54.912698984 CET	80	49744	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.912734032 CET	80	49744	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.912743092 CET	49744	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:54.913752079 CET	80	49745	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.913785934 CET	80	49745	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.913819075 CET	80	49745	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.913851976 CET	80	49745	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.913907051 CET	49745	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:54.913912058 CET	49744	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:54.916062117 CET	49745	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:54.917376041 CET	80	49743	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.917404890 CET	80	49743	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.917437077 CET	80	49743	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.917469025 CET	80	49743	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.917470932 CET	49743	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:54.917503119 CET	80	49743	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.917608023 CET	80	49744	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.917639971 CET	80	49744	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.917673111 CET	80	49744	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.917675018 CET	49743	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:54.917705059 CET	80	49744	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.917752028 CET	49744	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:54.919954062 CET	80	49742	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.920010090 CET	49744	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:54.920041084 CET	80	49742	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.920070887 CET	80	49742	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.920104027 CET	80	49742	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.920137882 CET	80	49742	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.920171022 CET	80	49742	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.920250893 CET	49742	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:54.920250893 CET	49742	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:54.928394079 CET	49742	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:54.941759109 CET	80	49740	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.941790104 CET	80	49740	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.948298931 CET	49740	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:54.949906111 CET	80	49741	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.993756056 CET	49741	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:54.993771076 CET	49740	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:54.997318029 CET	80	49745	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.997355938 CET	80	49745	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.997410059 CET	80	49745	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.997458935 CET	80	49745	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.997478008 CET	49745	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:54.997493029 CET	80	49745	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.997524977 CET	80	49745	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.997544050 CET	80	49745	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.997620106 CET	49745	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:54.997821093 CET	49745	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:54.998260975 CET	80	49745	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.998296022 CET	80	49745	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.998330116 CET	80	49745	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.998339891 CET	49745	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:54.998408079 CET	49745	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:54.998629093 CET	80	49745	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.998661995 CET	80	49745	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.998713017 CET	80	49745	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.998744965 CET	80	49741	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.998774052 CET	80	49740	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:54.998811960 CET	49745	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:55.001065016 CET	80	49744	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.001096964 CET	80	49744	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.001131058 CET	80	49744	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.001270056 CET	80	49744	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.001302958 CET	80	49744	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.001336098 CET	80	49744	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.001480103 CET	49744	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:55.001632929 CET	80	49744	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.001684904 CET	80	49744	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.001717091 CET	80	49744	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.001749992 CET	80	49744	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.001832008 CET	49744	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:55.001832008 CET	49744	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:55.002307892 CET	80	49744	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.002357960 CET	80	49744	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.002391100 CET	80	49744	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.002423048 CET	80	49744	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.002456903 CET	80	49744	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.002489090 CET	80	49744	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.002509117 CET	49744	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:55.002509117 CET	49744	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:55.002718925 CET	49744	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:55.003351927 CET	80	49744	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.003405094 CET	80	49744	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.003437996 CET	80	49744	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.003469944 CET	80	49744	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.003503084 CET	80	49744	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.003513098 CET	49744	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:55.003535986 CET	80	49744	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.003535986 CET	49744	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:55.003917933 CET	80	49743	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.003959894 CET	49744	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:55.004204988 CET	80	49744	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.004255056 CET	80	49744	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.006377935 CET	80	49744	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.006409883 CET	80	49744	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.006417990 CET	49744	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:55.014725924 CET	80	49742	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.014909029 CET	49744	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:55.046376944 CET	49743	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:55.064296007 CET	49742	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:55.092797995 CET	80	49744	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.092868090 CET	80	49744	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.092901945 CET	80	49744	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.092933893 CET	80	49744	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.092951059 CET	49744	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:55.092971087 CET	80	49744	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.093004942 CET	80	49744	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.093039989 CET	80	49744	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.093069077 CET	80	49744	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.093075991 CET	49744	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:55.093101978 CET	80	49744	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.093137026 CET	49744	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:55.093137980 CET	80	49744	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.096272945 CET	49744	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:55.119004011 CET	80	49746	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.152798891 CET	49745	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:55.157680035 CET	80	49745	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.172271967 CET	49746	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:55.183748960 CET	80	49740	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.187005043 CET	80	49741	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.187036037 CET	80	49741	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.188282013 CET	49741	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:55.232295036 CET	49740	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:55.298011065 CET	80	49747	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.298122883 CET	80	49747	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.298413992 CET	49747	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:55.299155951 CET	80	49748	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.299232960 CET	80	49748	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.299263954 CET	80	49748	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.299310923 CET	49748	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:55.299335003 CET	80	49748	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.299371958 CET	80	49748	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.299406052 CET	80	49748	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.299438953 CET	80	49748	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.299442053 CET	49748	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:55.299472094 CET	80	49748	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.299504995 CET	49748	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:55.299505949 CET	80	49748	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.299540043 CET	80	49748	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.299572945 CET	49748	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:55.304332018 CET	80	49748	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.304373980 CET	49748	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:55.304383993 CET	80	49748	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.304416895 CET	80	49748	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.304449081 CET	80	49748	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.304729939 CET	49748	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:55.313457966 CET	49747	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:55.315002918 CET	49746	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:55.317117929 CET	49750	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:55.317256927 CET	49749	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:55.318248987 CET	80	49747	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.318845034 CET	49751	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:55.319911003 CET	80	49746	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.322051048 CET	80	49750	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.322083950 CET	80	49749	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.322171926 CET	49750	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:55.322304964 CET	49749	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:55.322396994 CET	49749	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:55.322426081 CET	49750	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:55.323695898 CET	80	49751	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.323824883 CET	49751	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:55.323970079 CET	49751	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:55.327219963 CET	80	49749	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.327342033 CET	80	49750	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.328747034 CET	80	49751	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.353061914 CET	80	49745	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.353095055 CET	80	49745	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.353193045 CET	49745	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:55.360207081 CET	49745	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:55.365062952 CET	80	49745	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.388499975 CET	80	49748	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.388551950 CET	80	49748	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.388586044 CET	80	49748	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.388618946 CET	80	49748	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.388653040 CET	80	49748	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.388686895 CET	80	49748	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.388772964 CET	49748	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:55.388772964 CET	49748	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:55.389065981 CET	80	49748	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.389098883 CET	80	49748	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.389130116 CET	49748	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:55.389132023 CET	80	49748	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.389161110 CET	49748	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:55.389164925 CET	80	49748	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.389216900 CET	80	49748	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.389250994 CET	80	49748	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.389278889 CET	49748	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:55.389978886 CET	80	49748	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.390012026 CET	80	49748	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.390045881 CET	80	49748	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.390048981 CET	49748	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:55.390078068 CET	80	49748	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.390084028 CET	49748	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:55.390110970 CET	80	49748	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.390144110 CET	80	49748	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.390177011 CET	49748	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:55.390558004 CET	49748	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:55.390782118 CET	80	49748	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.390830994 CET	80	49748	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.390865088 CET	80	49748	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.390896082 CET	80	49748	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.390928984 CET	80	49748	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.390930891 CET	49748	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:55.390964031 CET	80	49748	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.390968084 CET	49748	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:55.391736984 CET	49748	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:55.472151995 CET	80	49747	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.472182035 CET	80	49747	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.472223997 CET	49747	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:55.475687981 CET	80	49746	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.475723028 CET	80	49746	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.475756884 CET	80	49746	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.475799084 CET	49746	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:55.477271080 CET	80	49748	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.477303982 CET	80	49748	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.477339029 CET	80	49748	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.477361917 CET	49748	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:55.477370024 CET	80	49748	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.477404118 CET	80	49748	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.477415085 CET	49748	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:55.477432013 CET	49746	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:55.477440119 CET	80	49748	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.477483034 CET	49748	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:55.477555037 CET	80	49748	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.477586985 CET	80	49748	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.477621078 CET	80	49748	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.477629900 CET	49748	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:55.477653027 CET	80	49748	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.477686882 CET	80	49748	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.477694988 CET	49748	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:55.477719069 CET	80	49748	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.477751017 CET	80	49748	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.477758884 CET	49748	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:55.478377104 CET	80	49748	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.478409052 CET	80	49748	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.478434086 CET	49748	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:55.478441954 CET	80	49748	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.478473902 CET	80	49748	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.478482962 CET	49748	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:55.478508949 CET	80	49748	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.478537083 CET	80	49748	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.478545904 CET	49748	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:55.478984118 CET	49748	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:55.482553959 CET	80	49746	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.483808994 CET	80	49748	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.516578913 CET	80	49745	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.567368984 CET	49745	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:55.604665041 CET	80	49747	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.605420113 CET	49747	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:55.610214949 CET	80	49747	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.634887934 CET	80	49746	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.635061026 CET	80	49746	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.635076046 CET	80	49746	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.635091066 CET	80	49746	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.635138988 CET	49746	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:55.635138988 CET	49746	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:55.636241913 CET	49746	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:55.636298895 CET	80	49748	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.637959957 CET	49748	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:55.641025066 CET	80	49746	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.642812014 CET	80	49748	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.764345884 CET	80	49747	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.764379978 CET	80	49747	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.764425993 CET	49747	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:55.793678045 CET	80	49746	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.793708086 CET	80	49746	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.793776035 CET	49746	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:55.799829960 CET	80	49748	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.848881960 CET	49748	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:55.903974056 CET	80	49749	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.904042006 CET	80	49749	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.904076099 CET	80	49749	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.904130936 CET	80	49749	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.904181004 CET	80	49749	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.904215097 CET	80	49749	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.904213905 CET	49749	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:55.904213905 CET	49749	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:55.904247046 CET	80	49749	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.904284954 CET	80	49749	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.904297113 CET	49749	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:55.904330015 CET	49749	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:55.904340982 CET	80	49749	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.904376030 CET	80	49749	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.904432058 CET	49749	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:55.909395933 CET	80	49749	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.909427881 CET	80	49749	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.909461975 CET	80	49749	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.909681082 CET	49749	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:55.917063951 CET	80	49750	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.917098045 CET	80	49750	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.917130947 CET	80	49750	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.917172909 CET	49750	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:55.917251110 CET	80	49750	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.917284966 CET	80	49750	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.917298079 CET	49750	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:55.917319059 CET	80	49750	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.917351007 CET	80	49750	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.917362928 CET	49750	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:55.917385101 CET	80	49750	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.917417049 CET	80	49750	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.917429924 CET	49750	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:55.917452097 CET	80	49750	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.917493105 CET	49750	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:55.918492079 CET	80	49751	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.918586016 CET	80	49751	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.918617010 CET	80	49751	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.918651104 CET	80	49751	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.918684959 CET	80	49751	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.918716908 CET	80	49751	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.918797016 CET	49751	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:55.918797016 CET	49751	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:55.918797016 CET	49751	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:55.922442913 CET	80	49750	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.922476053 CET	80	49750	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.922508955 CET	80	49750	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.922539949 CET	49750	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:55.973822117 CET	49750	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:55.991308928 CET	80	49749	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.991362095 CET	80	49749	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.991396904 CET	80	49749	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.991429090 CET	80	49749	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.991463900 CET	80	49749	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.991627932 CET	49749	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:55.991627932 CET	49749	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:55.991684914 CET	80	49749	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.991871119 CET	49749	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:55.991925001 CET	80	49749	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.991959095 CET	80	49749	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.991995096 CET	80	49749	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.992027998 CET	80	49749	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:55.992096901 CET	49749	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:55.992096901 CET	49749	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:55.992439985 CET	80	49749	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:56.023977041 CET	80	49751	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:56.024029016 CET	80	49750	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:56.024085999 CET	80	49750	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:56.024117947 CET	80	49750	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:56.024152040 CET	80	49750	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:56.024184942 CET	80	49750	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:56.024221897 CET	80	49750	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:56.024240017 CET	49750	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:56.024240017 CET	49750	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:56.024254084 CET	80	49750	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:56.024260998 CET	49750	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:56.024292946 CET	80	49750	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:56.024333954 CET	49750	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:56.024940014 CET	80	49750	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:56.024975061 CET	80	49750	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:56.025007963 CET	80	49750	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:56.025022030 CET	49750	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:56.025039911 CET	80	49750	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:56.025074959 CET	80	49750	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:56.025080919 CET	49750	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:56.025805950 CET	80	49750	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:56.025839090 CET	80	49750	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:56.025860071 CET	49750	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:56.025873899 CET	80	49750	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:56.025907040 CET	80	49750	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:56.025914907 CET	49750	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:56.025940895 CET	80	49750	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:56.025979996 CET	49750	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:56.026653051 CET	80	49750	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:56.026686907 CET	80	49750	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:56.026720047 CET	80	49750	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:56.026731014 CET	49750	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:56.026753902 CET	80	49750	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:56.026787996 CET	80	49750	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:56.026794910 CET	49750	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:56.029141903 CET	80	49750	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:56.029197931 CET	49750	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:56.036178112 CET	49749	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:56.037802935 CET	80	49750	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:56.037833929 CET	80	49750	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:56.037880898 CET	49750	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:56.067394018 CET	49751	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:56.116722107 CET	80	49750	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:56.116775036 CET	80	49750	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:56.116810083 CET	80	49750	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:56.116839886 CET	49750	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:56.116843939 CET	80	49750	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:56.116879940 CET	80	49750	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:56.116895914 CET	49750	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:56.116913080 CET	80	49750	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:56.116947889 CET	80	49750	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:56.116962910 CET	49750	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:56.116981030 CET	80	49750	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:56.117016077 CET	80	49750	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:56.117022991 CET	49750	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:56.161283970 CET	49750	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:59.914398909 CET	80	49744	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:59.914516926 CET	49744	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:59.919040918 CET	80	49743	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:59.919121981 CET	49743	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:56:59.921312094 CET	80	49742	50.63.8.11	192.168.2.4
Jan 14, 2025 22:56:59.921395063 CET	49742	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:00.017832994 CET	49744	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:00.017864943 CET	49742	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:00.017882109 CET	49743	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:00.022720098 CET	80	49744	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:00.022748947 CET	80	49743	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:00.022761106 CET	80	49742	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:00.157938957 CET	80	49740	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:00.158036947 CET	49740	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:00.162825108 CET	80	49741	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:00.162895918 CET	49741	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:00.517524004 CET	80	49745	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:00.517671108 CET	49745	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:00.765871048 CET	80	49747	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:00.768295050 CET	49747	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:00.794774055 CET	80	49746	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:00.796299934 CET	49746	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:00.800719023 CET	80	49748	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:00.803179026 CET	49748	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:00.908647060 CET	80	49749	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:00.908704042 CET	49749	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:00.917932987 CET	80	49750	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:00.917978048 CET	49750	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:00.920387983 CET	80	49751	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:00.920453072 CET	49751	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:02.006510019 CET	49747	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:02.006591082 CET	49746	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:02.006618977 CET	49748	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:02.006664991 CET	49749	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:02.006726980 CET	49750	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:02.006737947 CET	49751	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:02.006758928 CET	49740	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:02.006803036 CET	49741	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:02.006861925 CET	49745	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:02.011327028 CET	80	49747	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:02.011414051 CET	80	49746	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:02.011429071 CET	80	49748	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:02.011467934 CET	80	49749	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:02.011491060 CET	80	49750	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:02.011503935 CET	80	49751	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:02.011518955 CET	80	49740	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:02.011531115 CET	80	49741	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:02.011574984 CET	80	49745	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:02.624557972 CET	443	49737	142.250.186.100	192.168.2.4
Jan 14, 2025 22:57:02.624623060 CET	443	49737	142.250.186.100	192.168.2.4
Jan 14, 2025 22:57:02.624700069 CET	49737	443	192.168.2.4	142.250.186.100
Jan 14, 2025 22:57:04.006346941 CET	49737	443	192.168.2.4	142.250.186.100
Jan 14, 2025 22:57:04.006414890 CET	443	49737	142.250.186.100	192.168.2.4
Jan 14, 2025 22:57:04.612270117 CET	49723	80	192.168.2.4	199.232.214.172
Jan 14, 2025 22:57:04.617795944 CET	80	49723	199.232.214.172	192.168.2.4
Jan 14, 2025 22:57:04.618969917 CET	49723	80	192.168.2.4	199.232.214.172
Jan 14, 2025 22:57:08.619543076 CET	49762	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:08.624758005 CET	80	49762	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:08.624881029 CET	49762	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:08.649621964 CET	49763	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:08.654786110 CET	80	49763	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:08.654894114 CET	49763	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:08.657933950 CET	49762	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:08.662880898 CET	80	49762	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:09.214212894 CET	80	49762	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:09.214271069 CET	80	49762	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:09.214566946 CET	49762	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:09.247814894 CET	49764	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:09.248464108 CET	49763	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:09.248516083 CET	49762	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:09.248517990 CET	49765	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:09.253249884 CET	80	49764	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:09.253341913 CET	49764	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:09.253703117 CET	80	49763	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:09.253741980 CET	80	49762	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:09.253745079 CET	49764	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:09.253777027 CET	80	49765	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:09.253961086 CET	49765	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:09.254265070 CET	49765	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:09.258812904 CET	80	49764	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:09.259433031 CET	80	49765	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:09.409087896 CET	80	49763	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:09.412400007 CET	80	49762	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:09.412436962 CET	80	49762	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:09.412736893 CET	49762	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:09.417829990 CET	49766	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:09.418530941 CET	49767	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:09.422780037 CET	80	49766	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:09.422880888 CET	49766	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:09.423069000 CET	49766	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:09.423690081 CET	80	49767	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:09.423893929 CET	49767	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:09.423985958 CET	49767	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:09.427917957 CET	80	49766	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:09.428819895 CET	80	49767	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:09.458642006 CET	49763	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:09.832762003 CET	80	49764	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:09.832814932 CET	80	49764	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:09.832964897 CET	49764	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:09.839930058 CET	49768	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:09.839962959 CET	80	49765	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:09.840020895 CET	80	49765	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:09.840051889 CET	80	49765	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:09.840075016 CET	80	49765	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:09.840094090 CET	80	49765	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:09.840110064 CET	80	49765	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:09.840127945 CET	80	49765	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:09.840140104 CET	80	49765	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:09.840157032 CET	80	49765	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:09.840177059 CET	80	49765	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:09.840389967 CET	49765	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:09.840389967 CET	49765	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:09.845088959 CET	80	49768	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:09.845207930 CET	49768	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:09.845412970 CET	49768	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:09.845519066 CET	80	49765	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:09.845567942 CET	80	49765	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:09.845602989 CET	80	49765	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:09.845629930 CET	49765	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:09.845639944 CET	80	49765	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:09.845711946 CET	49765	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:09.850845098 CET	80	49768	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:09.931159019 CET	80	49765	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:09.931216002 CET	80	49765	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:09.931343079 CET	80	49765	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:09.931380987 CET	80	49765	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:09.931413889 CET	80	49765	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:09.931437016 CET	49765	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:09.931437016 CET	49765	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:09.931446075 CET	80	49765	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:09.931480885 CET	80	49765	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:09.931503057 CET	49765	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:09.931514978 CET	80	49765	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:09.931550980 CET	80	49765	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:09.931588888 CET	49765	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:09.931773901 CET	80	49765	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:09.931807041 CET	80	49765	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:09.931838989 CET	80	49765	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:09.931869030 CET	80	49765	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:09.931901932 CET	80	49765	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:09.931941986 CET	49765	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:09.931942940 CET	49765	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:09.931942940 CET	49765	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:09.932889938 CET	80	49765	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:09.932939053 CET	80	49765	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:09.932974100 CET	80	49765	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:09.932997942 CET	49765	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:09.933007002 CET	80	49765	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:09.933043003 CET	80	49765	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:09.933062077 CET	49765	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:09.933567047 CET	80	49765	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:09.933599949 CET	80	49765	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:09.933624029 CET	49765	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:09.933634043 CET	80	49765	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:09.933700085 CET	49765	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:09.975750923 CET	80	49765	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:09.975797892 CET	80	49765	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:09.975832939 CET	80	49765	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:09.976057053 CET	49765	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:09.993910074 CET	80	49766	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:10.008574963 CET	80	49767	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:10.008614063 CET	80	49767	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:10.008704901 CET	49767	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:10.021249056 CET	80	49765	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:10.021286011 CET	80	49765	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:10.021321058 CET	80	49765	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:10.021353960 CET	80	49765	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:10.021354914 CET	49765	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:10.021388054 CET	80	49765	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:10.021447897 CET	49765	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:10.021447897 CET	49765	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:10.021538973 CET	80	49765	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:10.021588087 CET	80	49765	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:10.021621943 CET	80	49765	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:10.021653891 CET	80	49765	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:10.021687031 CET	80	49765	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:10.021718979 CET	80	49765	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:10.021752119 CET	80	49765	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:10.021753073 CET	49765	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:10.021753073 CET	49765	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:10.021842003 CET	49765	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:10.022509098 CET	80	49765	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:10.022542953 CET	80	49765	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:10.022574902 CET	80	49765	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:10.022582054 CET	49765	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:10.022608042 CET	80	49765	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:10.022634029 CET	49765	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:10.022641897 CET	80	49765	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:10.022692919 CET	49765	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:10.034867048 CET	49766	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:10.035563946 CET	49767	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:10.040436029 CET	80	49767	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:10.197272062 CET	80	49767	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:10.197320938 CET	80	49767	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:10.197357893 CET	80	49767	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:10.197391033 CET	80	49767	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:10.197443962 CET	80	49767	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:10.197477102 CET	80	49767	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:10.197510004 CET	80	49767	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:10.197510004 CET	49767	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:10.197510004 CET	49767	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:10.197540045 CET	80	49767	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:10.197573900 CET	80	49767	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:10.197587967 CET	49767	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:10.197587967 CET	49767	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:10.197668076 CET	80	49767	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:10.197695017 CET	80	49767	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:10.197741032 CET	49767	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:10.197793961 CET	80	49767	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:10.197850943 CET	49767	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:10.202512980 CET	80	49767	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:10.202545881 CET	80	49767	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:10.202580929 CET	80	49767	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:10.202620029 CET	49767	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:10.253899097 CET	49767	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:10.263921976 CET	80	49767	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:10.263964891 CET	80	49767	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:10.264051914 CET	49767	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:10.284060955 CET	80	49767	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:10.284104109 CET	80	49767	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:10.284140110 CET	80	49767	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:10.284174919 CET	80	49767	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:10.284205914 CET	80	49767	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:10.284240961 CET	80	49767	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:10.284285069 CET	49767	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:10.284285069 CET	49767	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:10.284285069 CET	49767	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:10.284492016 CET	80	49767	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:10.284544945 CET	80	49767	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:10.284579039 CET	80	49767	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:10.284605026 CET	49767	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:10.284611940 CET	80	49767	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:10.284646988 CET	80	49767	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:10.284661055 CET	49767	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:10.285300970 CET	80	49767	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:10.285334110 CET	80	49767	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:10.285367012 CET	80	49767	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:10.285377979 CET	49767	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:10.285399914 CET	80	49767	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:10.285429955 CET	49767	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:10.285435915 CET	80	49767	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:10.285470009 CET	80	49767	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:10.285491943 CET	49767	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:10.286129951 CET	80	49767	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:10.286179066 CET	80	49767	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:10.286187887 CET	49767	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:10.286212921 CET	80	49767	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:10.286245108 CET	80	49767	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:10.286267996 CET	49767	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:10.286278963 CET	80	49767	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:10.286313057 CET	80	49767	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:10.286338091 CET	49767	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:10.326694965 CET	49767	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:10.330728054 CET	80	49767	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:10.330770016 CET	80	49767	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:10.330804110 CET	80	49767	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:10.330837965 CET	80	49767	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:10.330876112 CET	49767	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:10.331038952 CET	49767	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:10.370676041 CET	80	49767	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:10.370721102 CET	80	49767	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:10.370776892 CET	80	49767	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:10.370812893 CET	80	49767	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:10.370845079 CET	80	49767	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:10.370877981 CET	80	49767	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:10.370909929 CET	80	49767	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:10.370945930 CET	80	49767	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:10.370970964 CET	49767	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:10.370978117 CET	80	49767	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:10.370971918 CET	49767	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:10.370971918 CET	49767	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:10.371022940 CET	80	49767	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:10.371048927 CET	49767	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:10.371089935 CET	49767	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:10.371473074 CET	80	49767	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:10.371506929 CET	80	49767	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:10.371539116 CET	80	49767	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:10.371571064 CET	80	49767	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:10.371571064 CET	49767	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:10.371603966 CET	80	49767	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:10.371625900 CET	49767	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:10.371696949 CET	80	49767	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:10.371731997 CET	80	49767	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:10.371766090 CET	49767	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:10.412444115 CET	49767	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:10.412861109 CET	80	49768	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:10.412909031 CET	80	49768	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:10.413074970 CET	49768	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:14.409434080 CET	80	49763	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:14.409493923 CET	49763	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:14.413882017 CET	80	49762	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:14.413964033 CET	49762	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:14.850301027 CET	80	49764	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:14.850369930 CET	49764	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:14.854302883 CET	80	49765	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:14.854362965 CET	49765	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:15.008831024 CET	80	49766	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:15.008918047 CET	49766	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:15.215305090 CET	80	49767	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:15.215492010 CET	49767	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:15.417520046 CET	80	49768	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:15.417603970 CET	49768	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:16.006057024 CET	49766	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:16.006062031 CET	49767	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:16.006062984 CET	49768	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:16.006098986 CET	49764	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:16.006099939 CET	49762	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:16.006115913 CET	49765	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:16.006140947 CET	49763	80	192.168.2.4	50.63.8.11
Jan 14, 2025 22:57:16.011156082 CET	80	49767	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:16.011195898 CET	80	49768	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:16.011229992 CET	80	49766	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:16.011259079 CET	80	49764	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:16.011286020 CET	80	49765	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:16.011332989 CET	80	49762	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:16.011377096 CET	80	49763	50.63.8.11	192.168.2.4
Jan 14, 2025 22:57:52.099425077 CET	49828	443	192.168.2.4	142.250.186.100
Jan 14, 2025 22:57:52.099513054 CET	443	49828	142.250.186.100	192.168.2.4
Jan 14, 2025 22:57:52.099704027 CET	49828	443	192.168.2.4	142.250.186.100
Jan 14, 2025 22:57:52.099931955 CET	49828	443	192.168.2.4	142.250.186.100
Jan 14, 2025 22:57:52.099961042 CET	443	49828	142.250.186.100	192.168.2.4
Jan 14, 2025 22:57:52.765203953 CET	443	49828	142.250.186.100	192.168.2.4
Jan 14, 2025 22:57:52.765470982 CET	49828	443	192.168.2.4	142.250.186.100
Jan 14, 2025 22:57:52.765511990 CET	443	49828	142.250.186.100	192.168.2.4
Jan 14, 2025 22:57:52.765795946 CET	443	49828	142.250.186.100	192.168.2.4
Jan 14, 2025 22:57:52.766072989 CET	49828	443	192.168.2.4	142.250.186.100
Jan 14, 2025 22:57:52.766127110 CET	443	49828	142.250.186.100	192.168.2.4
Jan 14, 2025 22:57:52.816854954 CET	49828	443	192.168.2.4	142.250.186.100
Jan 14, 2025 22:57:53.340181112 CET	49724	80	192.168.2.4	199.232.214.172
Jan 14, 2025 22:57:53.345185995 CET	80	49724	199.232.214.172	192.168.2.4
Jan 14, 2025 22:57:53.345243931 CET	49724	80	192.168.2.4	199.232.214.172
Jan 14, 2025 22:58:02.705996037 CET	443	49828	142.250.186.100	192.168.2.4
Jan 14, 2025 22:58:02.706161022 CET	443	49828	142.250.186.100	192.168.2.4
Jan 14, 2025 22:58:02.706242085 CET	49828	443	192.168.2.4	142.250.186.100
Jan 14, 2025 22:58:04.018419027 CET	49828	443	192.168.2.4	142.250.186.100
Jan 14, 2025 22:58:04.018452883 CET	443	49828	142.250.186.100	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 14, 2025 22:56:47.763305902 CET	53	59312	1.1.1.1	192.168.2.4
Jan 14, 2025 22:56:47.791919947 CET	53	60681	1.1.1.1	192.168.2.4
Jan 14, 2025 22:56:48.902497053 CET	53	56476	1.1.1.1	192.168.2.4
Jan 14, 2025 22:56:52.036818027 CET	57469	53	192.168.2.4	1.1.1.1
Jan 14, 2025 22:56:52.036818027 CET	51942	53	192.168.2.4	1.1.1.1
Jan 14, 2025 22:56:52.043756962 CET	53	57469	1.1.1.1	192.168.2.4
Jan 14, 2025 22:56:52.043828964 CET	53	51942	1.1.1.1	192.168.2.4
Jan 14, 2025 22:56:53.559808969 CET	56014	53	192.168.2.4	1.1.1.1
Jan 14, 2025 22:56:53.559937000 CET	51915	53	192.168.2.4	1.1.1.1
Jan 14, 2025 22:56:53.570473909 CET	53	51915	1.1.1.1	192.168.2.4
Jan 14, 2025 22:56:53.717755079 CET	53	56014	1.1.1.1	192.168.2.4
Jan 14, 2025 22:56:54.483902931 CET	53150	53	192.168.2.4	1.1.1.1
Jan 14, 2025 22:56:54.484059095 CET	57648	53	192.168.2.4	1.1.1.1
Jan 14, 2025 22:56:54.492979050 CET	53	57648	1.1.1.1	192.168.2.4
Jan 14, 2025 22:56:54.519575119 CET	53	53150	1.1.1.1	192.168.2.4
Jan 14, 2025 22:57:04.917299986 CET	138	138	192.168.2.4	192.168.2.255
Jan 14, 2025 22:57:05.951092005 CET	53	55625	1.1.1.1	192.168.2.4
Jan 14, 2025 22:57:25.044747114 CET	53	57652	1.1.1.1	192.168.2.4
Jan 14, 2025 22:57:47.389004946 CET	53	52475	1.1.1.1	192.168.2.4
Jan 14, 2025 22:57:47.606981039 CET	53	53418	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jan 14, 2025 22:56:52.036818027 CET	192.168.2.4	1.1.1.1	0x100f	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 22:56:52.036818027 CET	192.168.2.4	1.1.1.1	0x3d5	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jan 14, 2025 22:56:53.559808969 CET	192.168.2.4	1.1.1.1	0x9554	Standard query (0)	www.northamericaniron.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 22:56:53.559937000 CET	192.168.2.4	1.1.1.1	0xe93	Standard query (0)	www.northamericaniron.com	65	IN (0x0001)	false
Jan 14, 2025 22:56:54.483902931 CET	192.168.2.4	1.1.1.1	0x8eb8	Standard query (0)	www.northamericaniron.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 22:56:54.484059095 CET	192.168.2.4	1.1.1.1	0x6ed4	Standard query (0)	www.northamericaniron.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jan 14, 2025 22:56:52.043756962 CET	1.1.1.1	192.168.2.4	0x100f	No error (0)	www.google.com		142.250.186.100	A (IP address)	IN (0x0001)	false
Jan 14, 2025 22:56:52.043828964 CET	1.1.1.1	192.168.2.4	0x3d5	No error (0)	www.google.com			65	IN (0x0001)	false
Jan 14, 2025 22:56:53.570473909 CET	1.1.1.1	192.168.2.4	0xe93	No error (0)	www.northamericaniron.com	northamericaniron.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 22:56:53.717755079 CET	1.1.1.1	192.168.2.4	0x9554	No error (0)	www.northamericaniron.com	northamericaniron.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 22:56:53.717755079 CET	1.1.1.1	192.168.2.4	0x9554	No error (0)	northamericaniron.com		50.63.8.11	A (IP address)	IN (0x0001)	false
Jan 14, 2025 22:56:54.492979050 CET	1.1.1.1	192.168.2.4	0x6ed4	No error (0)	www.northamericaniron.com	northamericaniron.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 22:56:54.519575119 CET	1.1.1.1	192.168.2.4	0x8eb8	No error (0)	www.northamericaniron.com	northamericaniron.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 22:56:54.519575119 CET	1.1.1.1	192.168.2.4	0x8eb8	No error (0)	northamericaniron.com		50.63.8.11	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

www.northamericaniron.com

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49740	50.63.8.11	80	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jan 14, 2025 22:56:53.723831892 CET	440	OUT	GET / HTTP/1.1 Host: www.northamericaniron.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 14, 2025 22:56:54.294799089 CET	1236	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 21:56:54 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, Keep-Alive Last-Modified: Mon, 05 Oct 2020 07:17:54 GMT ETag: "1041430-14f7-5b0e747e9ec80-gzip" Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 1820 Keep-Alive: timeout=5 Content-Type: text/html Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ad 58 6d 73 e2 38 12 fe 9e aa fc 87 3e 4f dd 66 66 2b 60 1b f3 4e 48 55 42 b8 d9 ec 4d 92 a9 c0 6e 2e 9f a6 84 2d 40 1b d9 f2 49 32 0c 3b b5 ff fd 5a 36 0c 36 18 92 bb 9b a4 12 6c a9 f5 74 3f dd ad 56 8b 8b bf dd 3c 0c c6 cf 9f 87 30 d7 21 87 cf bf 5d 7f ba 1d 80 55 b1 ed 27 6f 60 db 37 e3 1b f8 65 7c f7 09 ea 55 c7 85 b1 24 91 62 9a 89 88 70 db 1e de 5b 60 cd b5 8e bb b6 bd 5c 2e ab 4b af 2a e4 cc 1e 3f da 06 aa 6e 73 21 14 ad 06 3a b0 2e 4f 4f 2e cc 18 7e 9a 27 4a 02 33 12 52 4d 20 22 21 ed 5b 33 1a 51 49 b4 90 16 f8 22 d2 34 d2 7d 6b 20 a6 53 4a 07 49 0c bf 33 95 10 0e 23 a6 29 dc 50 c5 66 28 7c 0e bf 53 a9 d0 12 68 55 1d b8 4e 18 0f a0 0d 53 21 e1 89 45 81 58 2a eb bb 0a 63 62 85 fe 3b 61 0b 03 9a a2 57 c6 ab 98 e6 74 69 fa 55 a7 56 f7 fc 39 91 8a ea 7e a2 a7 95 76 39 c6 7f 6f 2c bc 37 fe f1 53 19 3f 89 f1 29 fc 60 ed b8 c0 97 94 68 1a e4 30 c7 09 3d 07 f4 fa 3f e8 04 6a 8e eb 82 d3 ea d6 db 5d b7 09 1f ef c6 56 ea 4b 84 d0 4c 73 7a 09 f7 42 ea 39 5c 85 54 32 9f 44 [TRUNCATED] Data Ascii: Xms8>Off+`NHUBMn.-@I2;Z66lt?V<0!]U'o`7e\|U$bp[`\.K?ns!:.OO.~'J3RM "![3QI"4}k SJI3#)Pf(\|ShUNS!EXcb;aWtiUV9~v9o,7S?)`h0=?j]VKLszB9\T2Dp+3v6)4^@a4~4thUeJBW1%eFBgCv]'=Y/<h\i+}UD_w_lQ}A}zuBL="6k8jyIvUDiF(fi.`Zoiv0LM0mSk`0uLq'qxNkkqZ{84[ywt`dq&N~{i\?My`7$kdH`=GOvF@V9<t!c\FV/072\|HE]G\|Ih<f7oHB2]H$6eh2y?/O,y,zA'Um3`9XquVf3wWE,]L~\|u{?\|0sb*)3`1:H8Go
Jan 14, 2025 22:56:54.294862032 CET	932	IN	Data Raw: e3 cd 66 3d dd 4a 99 33 3b d9 be da 8b f1 3a 3c 95 34 29 8c 48 6a d9 85 9d 1e 46 e6 88 b7 d7 ed 0e 3e 1a 5f 9b 21 4c 37 60 01 1e f9 1b f3 b2 73 38 1d f7 39 51 aa 6f 7d 3f 67 ac cb 0b 43 5f 49 bf 6f 65 11 bb bd fb f8 c5 31 d1 b2 00 08 c7 3e c1 ca Data Ascii: f=J3;:<4)HjF>_!L7`s89Qo}?gC_Ioe1>L[mS6}Vt6T@lo$-26DW-"_!njwDJDKdsNha:NFB#\0A.GGo856akG6~vam#Pl
Jan 14, 2025 22:56:54.311995983 CET	398	OUT	GET /files/IMG_0.jpg HTTP/1.1 Host: www.northamericaniron.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.northamericaniron.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 14, 2025 22:56:54.475172997 CET	1236	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 21:56:54 GMT Server: Apache Last-Modified: Mon, 05 Oct 2020 07:04:23 GMT ETag: "10824a6-fb1b-5b0e717930bc0" Accept-Ranges: bytes Content-Length: 64283 Keep-Alive: timeout=5 Connection: Keep-Alive Content-Type: image/jpeg Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 02 01 01 01 01 01 02 01 01 01 02 02 02 02 02 04 03 02 02 02 02 05 04 04 03 04 06 05 06 06 06 05 06 06 06 07 09 08 06 07 09 07 06 06 08 0b 08 09 0a 0a 0a 0a 0a 06 08 0b 0c 0b 0a 0c 09 0a 0a 0a ff db 00 43 01 02 02 02 02 02 02 05 03 03 05 0a 07 06 07 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a ff c0 00 11 08 00 de 03 63 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 00 02 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 03 07 02 04 05 06 08 09 01 0a ff c4 00 57 10 00 02 01 03 03 03 03 02 03 05 05 05 06 01 01 19 01 02 03 04 05 11 00 06 12 07 21 51 08 13 31 22 61 09 14 41 15 23 32 91 a1 16 62 71 81 f0 24 42 b1 d1 d2 0a 17 52 c1 e1 f1 95 25 33 34 43 44 56 72 92 18 19 35 55 75 54 57 64 74 82 84 85 93 94 a2 a4 b2 c2 ff c4 00 1d 01 01 00 02 03 01 01 01 01 00 00 00 00 00 00 00 00 00 02 03 01 04 05 06 07 08 09 ff c4 00 50 11 00 01 03 02 [TRUNCATED] Data Ascii: JFIF``CCc"W!Q1"aA#2bq$BR%34CDVr5UuTWdtP!1AQaq"S#23BCRbrc45DET$Us%?`x0<W\|h5BF4`x\|i!-T`x0<W\|h40<4p_HKUU_8/$%F/F\|IjjGQh5_BZ4`x\|i!-T`x0<W\|h40<4p_HKUU_8/$%F/F\|IjjGQh5_BZ4`x\|i!-T`x0<W\|h40<4p_HKUU_8/$%F/F\|IjjGQh5_BZ4`x\|i!-T`x0<W\|h4Qh& G'ZeUKKkfRr+8YZC:$0#FS(`9
Jan 14, 2025 22:56:54.475241899 CET	1236	IN	Data Raw: 49 ea af 90 ad 0f ac 5a af 84 d2 af c7 bd 8e ac c0 e2 d0 ca 64 03 2e 10 09 32 47 9b bf 8a 8e 96 cb 75 76 e2 96 9a 82 7c 08 1b fe 5a 62 ed bb fb 76 5b 0d 61 ef 8e d4 af ff 00 2d 48 34 b4 0c ed c2 28 0b 47 f7 6c 7d 24 7f a2 3b ff 00 c3 be 66 d9 4d Data Ascii: IZd.2Guv\|Zbv[a-H4(Gl}$;fMNK[K 6j!\|~Umi]uHU)SV~kz?3K D.<~CQ!6\|gUM*gc>m{?hncZZ\|.
Jan 14, 2025 22:56:54.475279093 CET	1236	IN	Data Raw: 1e 07 9f fd 74 fa bb 0d 64 71 96 9e 06 08 70 49 61 fa 9c fc f8 f8 fe ba 89 d7 1a ad 20 1a 6d ed 2a 4d f8 3b 68 77 09 18 fa be 85 3e f5 ca bf d8 2d ee 0f 13 b2 ee b9 f1 fb 3a 5f fa 74 7f 60 b7 be 39 7f 62 ee b8 f3 fb 3a 5f fa 75 d3 eb 4c a9 95 3c Data Ascii: tdqpIa mM;hw>-:_t`9b:_uL<NdG7W78;e]A*0tbXv4t7}_BzwW__u?QGN8uH
Jan 14, 2025 22:56:54.475311995 CET	1236	IN	Data Raw: 97 25 a9 58 3e 0e 8c 1f 07 4d f6 fe fa 3d bf be 97 25 a9 58 3e 0e 8c 1f 07 4d f6 fe fa 3d bf be 97 25 a9 58 3e 0e 8c 1f 07 4d f6 fe fa 3d bf be 97 25 a9 58 3e 0e 8c 1f 07 4d f6 fe fa 3d bf be 97 25 a9 58 3e 0e 8c 1f 07 4d f6 fe fa 3d bf be 97 25 Data Ascii: %X>M=%X>M=%X>M=%X>M=%X>M=%X>M=%X>M=%X>M=%X>M=%X>M=%h1]P6j*r!od#N)G\|\/gaT#5/SW
Jan 14, 2025 22:56:54.475375891 CET	1236	IN	Data Raw: f4 07 b1 28 a0 f7 00 8f 1a fb f9 39 08 fa 94 7c e3 ea 1f 1f 7d 64 d6 99 47 71 9e c0 60 7f e5 f3 af ad 4c b2 63 11 03 92 08 ee 3b 6a 5c ac 64 aa e4 a7 62 c5 4b 48 8f fb b6 4e c3 20 9f 8f e7 fe 63 43 52 8e 18 55 c9 27 23 23 e3 fd 67 59 36 a4 00 83 Data Ascii: (9\|}dGq`Lc;j\dbKHN cCRU'##gY6RG~cpYV8S\|\|(O\|vw;9h9B\'i~c8"H0SX@ \|/cyy<'uxr \|\|
Jan 14, 2025 22:56:54.475409031 CET	1120	IN	Data Raw: ca fc 01 f3 fa 78 d6 42 9e 04 51 82 87 20 7d 2a dd b1 f6 ff 00 df 56 91 b2 29 56 24 8e fc 4e 4f 6e e7 ed fe bb eb 25 07 00 7f 2f 0b af 11 fa 94 3e 3c ff 00 31 fe 5a e4 9a 85 7b 93 41 11 c6 82 5c 3b 06 f8 2c 33 8e 27 e7 57 02 9d be 23 0e 38 81 c8 Data Ascii: xBQ }*V)V$NOn%/><1Z{A\;,3'W#8\|$0Q~ir w\|g5W5O<0')+ciTQ?u9uP~?8~>IA+6K8`7Z\|NF<H\0-}HKg@w<=5XV
Jan 14, 2025 22:56:54.475441933 CET	1236	IN	Data Raw: cf 9f 1a 54 dc 9e 42 30 06 7b 63 e3 07 3f fa eb ec b3 31 1c c4 78 3c 7e 07 c7 6c ff 00 ac e9 4d 34 48 7b 9f 81 80 31 f1 9f 1a c1 79 52 14 e3 62 a6 48 d9 43 0e 7f c5 d8 60 60 7f 2d 2a 48 d4 b6 10 f6 03 1c b3 f3 df b0 ff 00 0f f9 6a b7 9b 93 95 51 Data Ascii: TB0{c?1x<~lM4H{1yRbHC``-HjQ[I<jXW?~JFK1/c:MG3wHeJb$N\#\oe?JoljF2ebN\|Y<t~
Jan 14, 2025 22:56:54.475474119 CET	1236	IN	Data Raw: 0a 3a b0 3e 18 11 d8 82 50 b5 f0 7e 59 aa a4 96 35 8e 38 5e 49 25 67 c2 c7 1a a1 77 62 7f 45 54 52 c4 fc 00 09 3d bb e9 ca 80 02 58 e9 82 b2 22 50 8c c9 93 c8 77 7f 9e dd ff 00 d7 fc 75 71 14 81 ce 72 ff 00 38 24 77 07 3e 35 ac d7 75 0f 65 59 9a Data Ascii: :>P~Y58^I%gwbETR=X"Pwuqr8$w>5ueYM=_b&FGlg_):Z-G+,6wr3`7$j\|5PJ\|5z+u]]WRZ*'9PH\|Rv%A"SsNNu
Jan 14, 2025 22:56:54.475508928 CET	1236	IN	Data Raw: 52 bd 83 67 07 b6 7e 33 87 03 37 85 1f 8b d6 26 43 57 5d 99 17 3c 0b 72 24 60 1c 7c f7 f1 aa 59 f1 94 2f f4 8f 9c 91 db bf fc b5 c8 37 9f c4 a6 ae 82 a8 b4 7b 7e c7 04 3f b3 da 5c 57 5c 11 4a c8 51 24 8d 03 24 cc 84 15 27 39 21 83 8e 3c 32 18 6a Data Ascii: Rg~37&CW]<r$`\|Y/7{~?\W\JQ$$'9!<2j'i-&y6%u&g1 ,F1T'_sJvTI?!p0~?uQ([Jle{F9Na=#bW8=TMWdHJ8#_4<nirHcv
Jan 14, 2025 22:56:54.475542068 CET	1236	IN	Data Raw: 23 47 03 e4 69 25 2d 54 70 1e 4e 8e 03 c9 d5 7c 0f 91 a3 81 f2 34 92 96 aa 38 0f 27 47 01 e4 ea be 07 c8 d1 c0 f9 1a 49 4b 55 1c 07 93 a3 80 f2 75 5f 03 e4 68 e0 7c 8d 24 a5 aa 8e 03 c9 d1 c0 79 3a af 81 f2 34 70 3e 46 92 52 d5 47 01 e4 e8 e0 3c Data Ascii: #Gi%-TpN\|48'GIKUu_h\|$y:4p>FRG<W8#I)jtpN\|Qy:8'U>FJZ<#Gi%-TpN\|48'GIKUu_h\|$y:4p>FRG<W8#I)jtpN\|
Jan 14, 2025 22:56:54.652283907 CET	399	OUT	GET /files/IMG_12.jpg HTTP/1.1 Host: www.northamericaniron.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.northamericaniron.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 14, 2025 22:56:54.809751034 CET	1236	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 21:56:54 GMT Server: Apache Last-Modified: Mon, 05 Oct 2020 07:04:23 GMT ETag: "10824aa-9f4-5b0e717930bc0" Accept-Ranges: bytes Content-Length: 2548 Keep-Alive: timeout=5 Connection: Keep-Alive Content-Type: image/jpeg Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 02 01 01 01 01 01 02 01 01 01 02 02 02 02 02 04 03 02 02 02 02 05 04 04 03 04 06 05 06 06 06 05 06 06 06 07 09 08 06 07 09 07 06 06 08 0b 08 09 0a 0a 0a 0a 0a 06 08 0b 0c 0b 0a 0c 09 0a 0a 0a ff db 00 43 01 02 02 02 02 02 02 05 03 03 05 0a 07 06 07 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a ff c0 00 11 08 00 16 00 ec 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 01 00 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 04 07 08 05 06 03 01 ff c4 00 2b 10 00 01 04 02 02 02 01 03 04 03 01 01 00 00 00 00 02 01 03 04 05 00 06 07 11 12 13 21 14 22 31 08 16 41 51 15 23 62 61 32 ff c4 00 16 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 02 ff c4 00 2e 11 00 01 02 03 07 02 05 04 03 00 00 00 00 00 00 00 01 00 11 02 21 41 12 22 51 61 a1 b1 f0 31 91 03 13 81 82 d1 42 71 b2 c1 23 a2 f1 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 b6 [TRUNCATED] Data Ascii: JFIF``CC"+!"1AQ#ba2.!A"Qa1Bq#?cS\MqK!($M0Du5T2D<TM[0]a]`8JdT\l\|{pU{EOn\|<@Hhh}c2g?)hluw0$7m5cF$Qk>W4TU& fg}alq?&lNH_Ma[(MC/h]Mx_)"h6=+EUA@Di'Fv^Lkk)X(%HR\|}-'bym8Hg5YwM"&nL}5RFV;62<1)LG2$m_=b^2LdDYF!6:WP;__Pt~`A+Vor%m6RV=do.:MFd$lLE_"U""&jn0[zcabHR;U}iDw>ew5C!1MybFF=}J"j+~Tp;=1c1Z;sW5`nPL0")D'\
Jan 14, 2025 22:56:54.993771076 CET	399	OUT	GET /files/IMG_11.jpg HTTP/1.1 Host: www.northamericaniron.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.northamericaniron.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 14, 2025 22:56:55.183748960 CET	578	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 21:56:55 GMT Server: Apache Last-Modified: Mon, 05 Oct 2020 07:04:23 GMT ETag: "10824a9-135-5b0e717930bc0" Accept-Ranges: bytes Content-Length: 309 Keep-Alive: timeout=5 Connection: Keep-Alive Content-Type: image/jpeg Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 02 01 01 01 01 01 02 01 01 01 02 02 02 02 02 04 03 02 02 02 02 05 04 04 03 04 06 05 06 06 06 05 06 06 06 07 09 08 06 07 09 07 06 06 08 0b 08 09 0a 0a 0a 0a 0a 06 08 0b 0c 0b 0a 0c 09 0a 0a 0a ff db 00 43 01 02 02 02 02 02 02 05 03 03 05 0a 07 06 07 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a ff c0 00 11 08 01 0f 00 01 03 01 22 00 02 11 01 03 11 01 ff c4 00 15 00 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 ff c4 00 14 10 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff c4 00 14 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff c4 00 14 11 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 ff d9 Data Ascii: JFIF``CC"?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49741	50.63.8.11	80	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jan 14, 2025 22:56:54.312712908 CET	398	OUT	GET /files/IMG_1.jpg HTTP/1.1 Host: www.northamericaniron.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.northamericaniron.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 14, 2025 22:56:54.479135990 CET	1161	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 21:56:54 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, Keep-Alive Last-Modified: Mon, 05 Oct 2020 07:04:23 GMT ETag: "10824a7-362-5b0e717930bc0" Accept-Ranges: bytes Content-Length: 866 Keep-Alive: timeout=5 Content-Type: image/jpeg Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 02 01 01 01 01 01 02 01 01 01 02 02 02 02 02 04 03 02 02 02 02 05 04 04 03 04 06 05 06 06 06 05 06 06 06 07 09 08 06 07 09 07 06 06 08 0b 08 09 0a 0a 0a 0a 0a 06 08 0b 0c 0b 0a 0c 09 0a 0a 0a ff db 00 43 01 02 02 02 02 02 02 05 03 03 05 0a 07 06 07 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a ff c0 00 11 08 00 1d 00 6d 03 01 22 00 02 11 01 03 11 01 ff c4 00 1a 00 01 01 00 02 03 00 00 00 00 00 00 00 00 00 00 00 00 07 05 08 03 04 06 ff c4 00 28 10 00 01 04 02 02 02 02 02 01 05 00 00 00 00 00 00 02 01 03 04 05 00 06 11 12 07 13 08 21 14 22 15 23 31 51 52 61 ff c4 00 17 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 01 02 03 ff c4 00 26 11 00 02 01 03 02 04 07 00 00 00 00 00 00 00 00 00 00 01 11 02 41 f0 21 51 81 91 b1 d1 12 22 61 a1 c1 e1 f1 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 a8 63 18 c0 18 c6 30 06 33 b1 53 57 [TRUNCATED] Data Ascii: JFIF``CCm"(!"#1QRa&A!Q"a?c03SW>5%TbzTfCUDM>2_Q#jEr7vY}$'/d35TU=\|ctk~2?5"l#z.F,zG$mIULekzq5hOn:hE#T[ocm2oO6+'n"!$#NHNu"hTD{2UsOJ;g11`cwqPW"5w`UC;rK?4u.Z-8^1+"<,J#$5%s,>{:~Axq:Nilx=`eI(I!$vW))}s3M7$P6Lu+#B8Q<w*& Ejp?2Z2j1`c
Jan 14, 2025 22:56:54.480313063 CET	398	OUT	GET /files/IMG_5.jpg HTTP/1.1 Host: www.northamericaniron.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.northamericaniron.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 14, 2025 22:56:54.643532991 CET	1236	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 21:56:54 GMT Server: Apache Last-Modified: Mon, 05 Oct 2020 07:04:23 GMT ETag: "10824b3-42a-5b0e717930bc0" Accept-Ranges: bytes Content-Length: 1066 Keep-Alive: timeout=5 Connection: Keep-Alive Content-Type: image/jpeg Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 02 01 01 01 01 01 02 01 01 01 02 02 02 02 02 04 03 02 02 02 02 05 04 04 03 04 06 05 06 06 06 05 06 06 06 07 09 08 06 07 09 07 06 06 08 0b 08 09 0a 0a 0a 0a 0a 06 08 0b 0c 0b 0a 0c 09 0a 0a 0a ff db 00 43 01 02 02 02 02 02 02 05 03 03 05 0a 07 06 07 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a ff c0 00 11 08 00 1d 00 6d 03 01 22 00 02 11 01 03 11 01 ff c4 00 19 00 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 07 06 04 05 03 ff c4 00 28 10 00 01 04 02 01 04 02 02 02 03 00 00 00 00 00 00 02 01 03 04 05 00 06 11 07 08 12 21 13 22 14 31 16 17 23 32 41 ff c4 00 16 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 01 ff c4 00 25 11 00 02 01 02 05 04 03 01 00 00 00 00 00 00 00 00 00 01 11 12 61 02 21 31 81 f0 41 a1 b1 e1 51 c1 d1 f1 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 a8 63 18 c0 18 c6 68 fa 45 a4 c4 ea 3f 53 69 [TRUNCATED] Data Ascii: JFIF``CCm"(!"1#2A%a!1AQ?chE?Si4yx5!E(}sf&5)fsLaCOc5cbkHcHyXTFINE%]+(6FApZ-!Sl~D1!#T:-d^'Yvtw5VjkznjEe%rkYpV6C>D))}tt{y{8:H~02H8O7_2"cS]t;cUvG_2uND$2\|~LUWzmsvjp<On6"D6\TunMJc4c0vh,$!"9m$!._iTT_3MC56m%i:fR\0zCAm>'s]>Dj%{RTH5TES2i?r;&"ia{,v$0nr?l=L(cKM[[vr@$"6( =K3J9x*]S]\|Ylg
Jan 14, 2025 22:56:54.643575907 CET	100	IN	Data Raw: ad df b7 2e f5 fb 78 91 6d 19 95 f1 d7 c9 7d 51 5d f8 51 a9 00 aa 06 a2 1c b6 ea b8 2b f1 a7 af 65 cf 9b 55 d6 59 14 7a db b5 14 dd 3f d7 a2 58 bf 54 f5 73 fb 14 66 e5 37 2d c8 ee f9 23 82 40 2f a4 75 55 02 56 fc 95 9f 2f 1e 17 9f 24 42 cc 66 30 Data Ascii: .xm}Q]Q+eUYz?XTsf7-#@/uUV/$Bf0s\1`c
Jan 14, 2025 22:56:54.648216009 CET	398	OUT	GET /files/IMG_9.jpg HTTP/1.1 Host: www.northamericaniron.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.northamericaniron.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 14, 2025 22:56:54.813369989 CET	1236	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 21:56:54 GMT Server: Apache Last-Modified: Mon, 05 Oct 2020 07:04:24 GMT ETag: "10824c1-4e2-5b0e717a24e00" Accept-Ranges: bytes Content-Length: 1250 Keep-Alive: timeout=5 Connection: Keep-Alive Content-Type: image/jpeg Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 02 01 01 01 01 01 02 01 01 01 02 02 02 02 02 04 03 02 02 02 02 05 04 04 03 04 06 05 06 06 06 05 06 06 06 07 09 08 06 07 09 07 06 06 08 0b 08 09 0a 0a 0a 0a 0a 06 08 0b 0c 0b 0a 0c 09 0a 0a 0a ff db 00 43 01 02 02 02 02 02 02 05 03 03 05 0a 07 06 07 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a ff c0 00 11 08 00 1d 00 6d 03 01 22 00 02 11 01 03 11 01 ff c4 00 1a 00 01 01 01 00 03 01 00 00 00 00 00 00 00 00 00 00 06 00 07 02 03 05 08 ff c4 00 2b 10 00 00 04 04 04 06 03 01 01 01 00 00 00 00 00 00 01 02 03 04 00 05 06 15 11 12 14 52 07 13 51 53 91 a1 08 21 22 41 33 61 ff c4 00 1c 01 00 02 02 02 03 00 00 00 00 00 00 00 00 00 00 00 00 04 02 03 05 06 01 07 09 ff c4 00 2d 11 00 01 01 05 06 05 03 05 00 00 00 00 00 00 00 00 01 11 00 02 03 04 21 05 12 13 14 41 61 15 31 51 71 81 06 a1 f0 22 72 91 b1 b2 ff da 00 0c 03 01 00 02 11 03 11 [TRUNCATED] Data Ascii: JFIF``CCm"+RQS!"A3a-!Aa1Qq"r?~v?p`w\|~6o7x~v?p`w\|%%1]4M[q6)v13C1D_t'8\o0XXU-_v4]@. Yih"So~:-Yliax+A\@P+gc+$jK\|nIe3r8P!82y1ibNvcJkf8S"L<^Pz4MuGB(.Rs4Vv?pb0U\5w[Rxes9TFZ)82e\|e0]bf',>+1t^n~PVFhxH dc+\|tl%%1]5t+0e6cnn^lV]K+wz=W2g982m*$7Un$2F9QbZp4hPU")0)Q(9v^S,)
Jan 14, 2025 22:56:54.813400030 CET	224	IN	Data Raw: 78 af 39 74 92 10 f2 2f 5d 52 29 ad c7 57 ed 1b ae ca ef e5 25 47 99 06 b4 f5 1f 4f c9 65 ad a5 d3 36 a8 49 a5 a8 b9 16 e5 33 f4 85 27 2b e2 b2 e7 50 54 12 65 00 c4 f9 0b cb 28 01 70 c4 07 ce 61 f2 16 a9 97 db 39 2c 25 c3 6a a5 1e 53 ed f3 a2 a7 Data Ascii: x9t/]R)W%GOe6I3'+PTe(pa9,%jSFsjOG+Zz{"QG>{_yLgt@hhjg!gQPAQr/IL@W!@H%#.u^R9vA) sqf
Jan 14, 2025 22:56:54.949906111 CET	60	IN	Data Raw: 1e bc f7 54 00 9e e8 02 93 a9 2a f1 35 24 96 45 75 2e f8 ae a5 df 07 75 ea f4 f7 16 bd 5e 9e e2 cc ab 2b 9f 2c 8a ea 5d f1 5d 4b be 0e eb d5 e9 ee 2d 7a bd 3d c1 95 63 3e 5b ff d9 Data Ascii: T*5$Eu.u^+,]]K-z=c>[
Jan 14, 2025 22:56:54.993756056 CET	398	OUT	GET /files/IMG_7.jpg HTTP/1.1 Host: www.northamericaniron.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.northamericaniron.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 14, 2025 22:56:55.187005043 CET	1236	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 21:56:55 GMT Server: Apache Last-Modified: Mon, 05 Oct 2020 07:04:24 GMT ETag: "10824c0-3da-5b0e717a24e00" Accept-Ranges: bytes Content-Length: 986 Keep-Alive: timeout=5 Connection: Keep-Alive Content-Type: image/jpeg Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 02 01 01 01 01 01 02 01 01 01 02 02 02 02 02 04 03 02 02 02 02 05 04 04 03 04 06 05 06 06 06 05 06 06 06 07 09 08 06 07 09 07 06 06 08 0b 08 09 0a 0a 0a 0a 0a 06 08 0b 0c 0b 0a 0c 09 0a 0a 0a ff db 00 43 01 02 02 02 02 02 02 05 03 03 05 0a 07 06 07 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a ff c0 00 11 08 00 1d 00 6d 03 01 22 00 02 11 01 03 11 01 ff c4 00 19 00 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 07 06 05 03 04 ff c4 00 25 10 00 01 04 02 02 02 03 01 00 03 00 00 00 00 00 00 02 01 03 04 05 00 06 07 11 12 13 08 14 22 21 16 23 31 ff c4 00 16 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 02 ff c4 00 28 11 00 01 02 03 06 06 03 00 00 00 00 00 00 00 00 00 11 00 01 21 71 f0 12 22 41 51 61 b1 02 81 91 a1 e1 f1 31 c1 d1 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 a8 63 18 c2 26 31 8c 22 63 29 73 21 e8 1c 51 [TRUNCATED] Data Ascii: JFIF``CCm"%"!#1(!q"AQa1?c&1"c)s!Q6igyS_QQ:U/hGz):,=3/+qQDeEzTxk"Q8>?G.U{jxl5WvS2IEqY#!N{_gW/i-V9Q"2}FDFDARWDq}i;^c&x@bcTl)kV}"VE6Q_%~74XHkMbmz4"na`uI\S# E_ROh9v8fv20c0cAOW6x5!#~HQ{QD.#Go4InItG I{50r1Jc7vY+]fO/k[UWSkne0es=nj4v-Q&QpB_J_2j%745!{}.N~3qdxWJ{j\|@CW}c#L6^2'c^f@^'^Kw
Jan 14, 2025 22:56:55.187036037 CET	19	IN	Data Raw: 19 a2 f5 5a 2c 86 02 b2 d9 31 8c 64 55 31 8c 61 17 ff d9 Data Ascii: Z,1dU1a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49742	50.63.8.11	80	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jan 14, 2025 22:56:54.317399979 CET	399	OUT	GET /files/IMG_10.jpg HTTP/1.1 Host: www.northamericaniron.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.northamericaniron.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 14, 2025 22:56:54.919954062 CET	1236	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 21:56:54 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, Keep-Alive Last-Modified: Mon, 05 Oct 2020 07:04:23 GMT ETag: "10824a8-19b1-5b0e717930bc0" Accept-Ranges: bytes Content-Length: 6577 Keep-Alive: timeout=5 Content-Type: image/jpeg Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 02 01 01 01 01 01 02 01 01 01 02 02 02 02 02 04 03 02 02 02 02 05 04 04 03 04 06 05 06 06 06 05 06 06 06 07 09 08 06 07 09 07 06 06 08 0b 08 09 0a 0a 0a 0a 0a 06 08 0b 0c 0b 0a 0c 09 0a 0a 0a ff db 00 43 01 02 02 02 02 02 02 05 03 03 05 0a 07 06 07 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a ff c0 00 11 08 01 42 03 63 03 01 22 00 02 11 01 03 11 01 ff c4 00 1d 00 01 01 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 05 07 09 04 06 08 03 01 02 ff c4 00 38 10 01 00 01 03 02 03 04 09 03 02 07 01 01 00 00 00 00 01 02 03 04 05 06 07 11 12 08 13 19 a6 14 21 36 57 68 76 b5 d4 e4 15 22 31 17 32 09 16 23 24 41 51 61 25 33 ff c4 00 17 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 01 02 03 ff c4 00 2b 11 01 00 01 02 03 07 04 02 03 01 00 00 00 00 00 00 00 01 02 11 31 41 f0 12 21 22 61 a1 b1 d1 71 91 c1 e1 51 81 03 13 d2 62 ff da [TRUNCATED] Data Ascii: JFIF``CCBc"8!6Whv"12#$AQa%3+1A!"aqQb?_^O6Gj~wMu5S<L<<D!v;\|necYiqk7?MiSLz\|Qqjj>ow&9zm&{D[w67%<Dvkfm\|n1^&MUEtt5DG;ur)8Y4;M}NE&zMs1&}^ri1klSK/nxv9C\|W^nwUhq[4[:\|t\lM_&_x3:\Q^kUE=<j?c?.><}%krgv/p^^G]eOLzz:bjnhy69:eJTWyt
Jan 14, 2025 22:56:54.920041084 CET	224	IN	Data Raw: f2 e7 cf fe 09 dd 13 7c 96 22 6a 98 88 cd b3 1f 11 2e c7 3e f8 3c bf a8 7d b9 e2 25 d8 e7 df 07 97 f5 0f b7 6b d7 73 76 71 e3 5e da e2 06 a1 c3 48 e1 b6 b7 a8 ea 7a 74 57 72 ba 34 bd 1f 26 f4 5e b1 17 26 dc 64 db 8e ee 2a aa cd 55 44 c5 37 39 44 Data Ascii: \|"j.><}%ksvq^HztWr4&^&dUD79DKlo-.gysU6\Q\13?)T/zSkf_c\|_>sovm={32%5m3"{92)]oM*spolk
Jan 14, 2025 22:56:54.920070887 CET	1236	IN	Data Raw: 38 d7 b0 b5 2b d8 b5 e4 d9 d3 f2 f4 7b f6 ef d7 66 98 aa 6a b9 16 ea a6 2a 9a 22 28 ae 66 a8 8e 51 14 cf fd 4b 53 13 13 31 39 7c 6e ee 46 fc 35 ba fd 9b 23 f1 12 ec 73 ef 83 cb fa 87 db 9e 22 5d 8e 7d f0 79 7f 50 fb 77 84 36 ef 64 4e 32 e7 dc db Data Ascii: 8+{fj"(fQKS19\|nF5#s"]}yPw6dN2[hj(2234LU/]((oQ7~[6TM->?.QLsHj]36U%<Dsm}wm:p/ouLESf
Jan 14, 2025 22:56:54.920104027 CET	1236	IN	Data Raw: a8 9f e6 ba e9 8e 7f c4 73 e7 3c a3 d6 e4 20 71 2b d9 dc 6f 98 34 9f a8 63 af a2 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: s< q+o4cY}p}NVdcvqj8:^V];;g/JG.]1O(>1Z~ucus9s\|"<l17~~b2S^>&
Jan 14, 2025 22:56:54.920137882 CET	1236	IN	Data Raw: cd 9c ff 00 45 c4 bf 4e ad 7b 2e 2c de 9c 29 a7 22 ab 75 da e8 8e ab 33 54 44 d5 4c 55 13 4f 5c 44 be 28 71 83 41 d7 36 46 ec db 78 1b 97 4d ab 27 51 ce db d6 ec 5a d0 31 73 ad 62 65 62 e1 e1 e4 5b aa 22 72 e6 ab b5 d3 45 53 62 39 de 98 aa a9 a6 Data Ascii: EN{.,)"u3TDLUO\D(qA6FxM'QZ1sbeb["rESb9}^<"<eZv<HZqA/NWcVMXZ\|cZ3M*St\|HhxOuMzKk^y6&{ft)Du=UU9K#?x=DyG
Jan 14, 2025 22:56:54.920171022 CET	672	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 e2 57 b3 b8 df 30 69 3f 50 c7 5f 40 Data Ascii: @W0i?P_@W0i?P_%{;u%{;u
Jan 14, 2025 22:56:55.014725924 CET	1034	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 e2 57 b3 b8 df 30 69 3f 50 c7 5f 40 e2 57 b3 b8 df 30 69 3f 50 c7 5f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: @W0i?P_@W0i?P_%{;u%{;u@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49743	50.63.8.11	80	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jan 14, 2025 22:56:54.337198019 CET	402	OUT	GET /files/body_bkgd.jpg HTTP/1.1 Host: www.northamericaniron.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.northamericaniron.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 14, 2025 22:56:54.917376041 CET	1236	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 21:56:54 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, Keep-Alive Last-Modified: Mon, 05 Oct 2020 07:04:24 GMT ETag: "10824c5-ff5-5b0e717a24e00" Accept-Ranges: bytes Content-Length: 4085 Keep-Alive: timeout=5 Content-Type: image/jpeg Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 02 01 01 01 01 01 02 01 01 01 02 02 02 02 02 04 03 02 02 02 02 05 04 04 03 04 06 05 06 06 06 05 06 06 06 07 09 08 06 07 09 07 06 06 08 0b 08 09 0a 0a 0a 0a 0a 06 08 0b 0c 0b 0a 0c 09 0a 0a 0a ff db 00 43 01 02 02 02 02 02 02 05 03 03 05 0a 07 06 07 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a ff c0 00 11 08 00 60 00 60 03 01 22 00 02 11 01 03 11 01 ff c4 00 18 00 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 02 03 01 04 00 ff c4 00 2f 10 00 02 02 01 04 02 01 04 02 02 02 01 05 00 00 00 01 02 03 11 12 00 04 21 22 13 31 32 14 41 51 62 23 42 33 52 05 24 43 34 61 72 81 82 ff c4 00 14 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff c4 00 14 11 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 3f c3 22 ba c8 b0 a2 93 18 55 8d 72 3c 9c 96 81 be 18 e2 55 3d c8 7b bf 1e a9 1e cc [TRUNCATED] Data Ascii: JFIF``CC``"/!"12AQb#B3R$C4ar??"Ur<U={(x>eR\|CjSx^opgI-!Kk`bYe]WI$,YrAem 6/X.KjOYm@flb9i.hWcU04gYRyD'X;4Ri,h,JSsHwexqL1cDrvqVZa/)8(Iu(%1B/VpH]QER`IDoQTDr@$6d=5m.$Kigd2YlS1xq#1}/99#Y6Y#XAI'LWE.}UBmnE<1J^VxXdahV2mf9>Z8"te.WypCCWjIhP^_Nefm<hGPTUWXIHCCPU}%n7QU\|O;
Jan 14, 2025 22:56:54.917404890 CET	224	IN	Data Raw: 21 1c af 24 aa 55 b1 ec fc 68 3a a1 c8 4c 43 47 22 3a da 03 8a 20 e0 75 0a 48 c4 30 be 39 c6 21 fb 1d 4f cd 26 df 6e f1 49 b1 6b 6c 30 55 8c 90 e0 b1 64 e3 86 36 43 15 43 cb 7c df 81 a4 ab 14 4d d6 11 d9 ca 2a 22 97 06 aa 94 2b 1b 20 90 59 63 22 Data Ascii: !$Uh:LCG": uH09!O&nIkl0Ud6CC\|M*"+ Yc"Y40@lOlW`fII^LI>-\|c39`TD UQ6LxVfy%]cVWt<K3$O,\|4
Jan 14, 2025 22:56:54.917437077 CET	1236	IN	Data Raw: 6a 55 03 94 5a 85 17 13 ca 90 c5 13 1b b0 32 e5 11 b9 90 f7 7e 06 90 ff 00 11 66 9a 3e f1 1a 75 ba 45 00 33 31 6e 2c 12 3b 37 b6 38 aa 75 bd 2f 24 6b 1c 6e 77 0b 37 c9 f3 46 2e 31 34 1b b7 b2 0b 7c d8 51 6f 82 56 86 7e 38 e6 8e 59 b0 7c ee 11 c2 Data Ascii: jUZ2~f>uE31n,;78u/$knw7F.14\|QoV~8Y\|H P%F#\\|Un~/^x\|Sd#a~;2I:0ee_pX,{9WmwR]E5.%G1c')2$+V$0AA^aHvyN"r
Jan 14, 2025 22:56:54.917469025 CET	1236	IN	Data Raw: 04 15 a0 cd f3 e2 d2 4f 34 ce cc ec d9 aa b6 42 b8 2c 4b 8e 48 e3 b4 80 5c 85 71 5e 2f 4b 2d e6 ce 13 0c 8d b8 47 f2 71 22 28 5a 75 04 81 44 52 95 5e 78 18 c4 b9 7f 6d 52 1c 63 92 39 26 91 bc 87 b6 59 04 78 c8 4e e4 00 08 ce 94 df da 15 fc b6 a0 Data Ascii: O4B,KH\q^/K-Gq"(ZuDR^xmRc9&YxNX9DDPwz}2Ex (!O&n<pCi0P$pG=#3xfO5$}d{IdqV#Ec#8aL+Ccy
Jan 14, 2025 22:56:54.917503119 CET	448	IN	Data Raw: 96 3d 13 a8 d0 85 b7 11 c8 61 7d c4 aa ef 41 17 25 57 c8 30 1c 02 28 30 1e c1 eb 12 fb ec 78 02 d3 49 34 99 2c 92 a8 0e 24 c7 db 07 55 36 a4 90 55 5d 54 31 ff 00 58 97 f2 da 4d 14 d2 33 48 b2 05 e1 18 32 c6 58 2d b5 a2 84 bb aa 36 8a 7e 5f 26 15 Data Ascii: =a}A%W0(0xI4,$U6U]T1XM3H2X-6~_&i+$G@Sk^\|D\|-/BA63Rzef-Z[p6.r*]<+(KcYTyR@eVq,yeHdE#<\
Jan 14, 2025 22:56:55.003917933 CET	1	IN	Data Raw: d9 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49744	50.63.8.11	80	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jan 14, 2025 22:56:54.337280989 CET	403	OUT	GET /files/background.jpg HTTP/1.1 Host: www.northamericaniron.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.northamericaniron.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 14, 2025 22:56:54.912406921 CET	1236	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 21:56:54 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, Keep-Alive Last-Modified: Mon, 05 Oct 2020 07:04:24 GMT ETag: "10824c4-d2c2-5b0e717a24e00" Accept-Ranges: bytes Content-Length: 53954 Keep-Alive: timeout=5 Content-Type: image/jpeg Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 02 01 01 01 01 01 02 01 01 01 02 02 02 02 02 04 03 02 02 02 02 05 04 04 03 04 06 05 06 06 06 05 06 06 06 07 09 08 06 07 09 07 06 06 08 0b 08 09 0a 0a 0a 0a 0a 06 08 0b 0c 0b 0a 0c 09 0a 0a 0a ff db 00 43 01 02 02 02 02 02 02 05 03 03 05 0a 07 06 07 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a ff c0 00 11 08 00 cc 01 a5 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 00 01 05 00 03 01 01 00 00 00 00 00 00 00 00 00 07 03 04 05 06 08 01 02 09 00 0a ff c4 00 42 10 00 02 02 01 03 03 03 02 03 06 03 06 06 02 02 03 01 02 03 04 05 06 11 12 00 07 21 08 13 31 22 41 09 14 51 15 23 32 61 71 f0 81 91 a1 16 42 b1 c1 d1 e1 0a 17 24 33 52 f1 18 19 25 34 43 26 62 ff c4 00 1b 01 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 02 03 01 04 05 00 06 07 ff c4 00 3b 11 00 01 03 02 03 04 09 04 02 01 02 06 03 00 00 00 01 02 03 11 00 21 04 12 31 05 13 [TRUNCATED] Data Ascii: JFIF``CC"B!1"AQ#2aqB$3R%4C&b;!1AQ"aq2#bBR3r?3a,%6,8-?o =FJE!ITFQQ,6yuFy@G>wi^%4>8.ECy]?6_$4?R6?l}d_~?@m?xb,4%<'t\|iJ?~zq^I6>t.L;Q=B%w<u8?lZb)69q=?#!~wgFKE_ThtekM ZN!89q,<{7J77S XTW`4'EKO0H9l4@>/;;Camg@_I{mo?~VA;uVD~?])e*P?~4P
Jan 14, 2025 22:56:54.912456036 CET	1236	IN	Data Raw: 5f 04 ee 50 0d ba 4a 4c 9a c0 38 1b 2e 76 23 ec bf 3f df e9 d4 7b 5a 91 c1 2a 76 03 61 b0 1e 00 ff 00 90 f3 d7 3e f4 fb 7d 43 e0 1e 5b 31 1e 7e 7f a7 eb d3 03 74 b5 3c 48 81 4e db 3d 68 20 58 e4 66 20 6c 48 8d 49 ff 00 87 49 9d 41 92 52 d2 46 40 Data Ascii: _PJL8.v#?{Z*va>}C[1~t<HN=h Xf lHIIARF@?n1I!]vvO!@]Zf39#l63?oC>]b~Gi(~j`A;Oc[y,}ld\|/R+`W
Jan 14, 2025 22:56:54.912489891 CET	1236	IN	Data Raw: 0a 91 85 0a 3e cb f0 76 03 c6 df f1 ea 66 6a b2 ac 45 65 d9 89 dc 94 04 ec 3e ff 00 df cf 4d 2d c1 1b 21 46 01 7c 80 5b 90 24 ef f7 f3 f0 3f ea 7f af 52 5d b5 49 45 a0 0a 88 58 fd a9 5e 24 9e 45 50 7e 9e 2b b8 f9 3f cc 75 f7 4a d9 88 a3 06 f6 f7 Data Ascii: >vfjEe>M-!F\|[$?R]IEX^$EP~+?uJ7$BmPV(xr8\41p6^@nC)~zZe}j]wPUCFQ8CNk-+9t`@_nyy\|NE]eB}P
Jan 14, 2025 22:56:54.912522078 CET	1236	IN	Data Raw: d2 4f 18 04 95 1b 9d fc f9 fb 7f 7b 75 1b d3 35 db ab 53 39 ab 82 e4 38 e4 47 ca 8f d7 f4 3f f5 e9 09 60 2c 78 b8 dc 7f 21 e3 fc ba 7d 3c 20 ec 55 0b 21 1e 40 f1 b1 fe c7 49 4b 12 28 2f fa 10 42 93 b1 23 fb 23 a9 de 9a 90 d0 02 98 35 23 e3 8a 9d Data Ascii: O{u5S98G?`,x!}< U!@IK(/B##5#}m}>6z0dm>:BUH'sDZ2hFB<6?mc?;11$)?fK7jds_;yHSql<x
Jan 14, 2025 22:56:54.912573099 CET	896	IN	Data Raw: 4f 55 76 00 32 89 38 ef c4 10 01 3b 75 dc b2 aa f1 58 fc ed e3 cf c9 fb 74 9f d0 36 f6 c8 24 6d f2 36 fe 9d 70 5f 7d f7 db f9 92 7f 9f fa 75 05 51 44 00 e1 5d ff 00 5d cf 2f 3f fc bc 9e ba 34 8a c3 ea 7d c9 1e 0a 9e b8 77 0d e4 ed ff 00 1f ef e7 Data Ascii: OUv28;uXt6$m6p_}uQD]]/?4}w?m*VWnA~\|]?bkiVp#fGfAo%!U~ wb?c\|(/5,6?$r/op\|2
Jan 14, 2025 22:56:54.912605047 CET	1236	IN	Data Raw: 78 23 e3 c7 f3 f2 3f d0 74 e1 5c 2a 97 2c 47 15 df c2 fc 78 fe 7f fd 75 e7 96 7b d4 ff 00 a8 6c 8d 86 9e 5e e4 cb 1c aa a9 ed 3c 52 2d 60 50 b8 04 f1 0e a0 9d b6 23 e9 3b ed b7 c1 6e a5 72 5d f2 f5 29 6b 31 67 39 8d ee 30 ab 0c ee ef 0e 0e 3c f1 Data Ascii: x#?t\*,Gxu{l^<R-`P#;nr])k1g90<+B:;0n<vh$VDS\|+99muIrKL4RYbvNnw_1wYKLer#`p5j^Lm?#
Jan 14, 2025 22:56:54.912637949 CET	224	IN	Data Raw: d7 91 5d cc 61 5c 2e da 68 6e aa 4f 80 ea 4f c7 92 3a 90 d4 fa df d0 fc 76 6b 4f 95 d0 7d c8 a9 9a 7c 7b 3d 3a 29 dc 8a 17 a8 c5 17 b8 db 38 6f d9 35 9f ea 3c f9 28 5d fe c0 90 06 c8 3b 54 24 dc 76 6b ed 46 9d 96 54 0c 1e da de f5 7d 49 76 01 ad Data Ascii: ]a\.hnOO:vkO}\|{=:)8o5<(];T$vkFT}IvEiry'}w;.bAw'4j"Ud5,HBX'%QfZgNK) p]c,A!\|~O-,p~IG+l:H2
Jan 14, 2025 22:56:54.912666082 CET	1236	IN	Data Raw: 79 8d 98 ec 7f 42 37 e4 ed 05 b8 7a 36 ee 34 6a d9 a9 44 13 7e c3 fd 57 af 1a f7 bb 7d 8a d0 76 a4 ac dd ff 00 d1 39 67 82 a8 9e cf ec 5c e0 b0 11 4b 46 a1 54 80 04 ce 7d d0 78 44 5d 80 49 09 00 46 c4 52 6d 7a c5 f4 f5 4e 9c 97 24 ee 15 77 8e 19 Data Ascii: yB7z64jD~W}v9g\KFT}xD]IFRmzN$w'X"wnj nTG>rkI]CU4+`\,W-IFX62g;ZkcS3S'"P{r,('AF+F;:3dtMD5'DI*pUK)^Ja
Jan 14, 2025 22:56:54.912698984 CET	224	IN	Data Raw: a7 fd 4d e1 a0 07 e7 2a 8f b1 6c 8b c8 ef ad b4 7f 15 2d 5c 48 93 ff 00 2c 68 c8 03 ed 70 57 96 42 f0 a1 90 af 31 c8 af 31 b2 b6 fc 84 7e 40 1f 04 11 c5 ef c5 37 53 c3 6e 71 43 45 62 ec d7 8e 30 f0 3c a2 58 64 94 93 e4 6d c9 95 76 fb 1e 64 f9 1b Data Ascii: M*l-\H,hpWB11~@7SnqCEb0<XdmvdXJeS7FfDVxl1Bua+v/{l2,Z1^&ge3{i]W`AkzA:sl5ih4s}Q_dP51
Jan 14, 2025 22:56:54.912734032 CET	1236	IN	Data Raw: 48 3b 8f 62 3b 52 4f 18 75 3c b8 f2 60 76 43 b2 93 b6 e4 f8 d8 6f b1 df 0f 62 35 9e a1 d1 99 39 21 93 1b 6a b6 3c dc 31 46 f6 e2 e2 c5 49 01 09 e2 58 72 03 81 3b 31 fe 21 fa 8e ad 1a df 49 f7 0a fd 1a 3d c2 b1 a3 b2 cd 8c 92 28 96 6c a0 c5 cc 6a Data Ascii: H;b;ROu<`vCob59!j<1FIXr;1!I=(ljj(QXQ)(s"/`2+[a}StjOHG=sGZ_3WJb$"IXTmq7NAvgij0Q0N6v
Jan 14, 2025 22:56:54.917608023 CET	1236	IN	Data Raw: ee 2d 59 cf f9 54 7e 76 d4 06 84 5d 29 f0 1e d5 a8 6d e5 71 7f 98 96 b4 38 c9 ec dd 89 62 79 61 87 9f b1 b3 6e 49 65 0b bf 21 ba fc 0f b9 2d f1 b7 4b 43 73 09 8e cb 8b 78 7c 7e a0 c9 53 49 22 82 bd b3 49 c2 72 75 2c bc 9d 91 43 90 db 82 c5 54 0e Data Ascii: -YT~v])mq8byanIe!-KCsx\|~SI"Iru,CT/GJhz[,8+QYtkb9}GVx2tLiC_BYAPA).&}[O4n+fGe~%mX\|5V>vf06G

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49745	50.63.8.11	80	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jan 14, 2025 22:56:54.338551998 CET	403	OUT	GET /files/new%20logo.png HTTP/1.1 Host: www.northamericaniron.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.northamericaniron.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 14, 2025 22:56:54.908519983 CET	1236	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 21:56:54 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, Keep-Alive Last-Modified: Mon, 05 Oct 2020 07:04:24 GMT ETag: "10824cd-6a25-5b0e717a24e00" Accept-Ranges: bytes Content-Length: 27173 Keep-Alive: timeout=5 Content-Type: image/png Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 30 00 00 01 a4 08 06 00 00 00 2f ee 1f a7 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 69 c5 49 44 41 54 78 da ed 9d 0b 74 24 55 9d ff 99 3c 3a a9 f4 a4 33 99 c9 4c 49 20 a6 21 da 31 1a 68 8d c4 f4 12 36 21 12 69 89 c6 c2 68 33 39 c6 d3 51 f7 68 f4 af 98 5d 16 1d 77 0f 90 d5 45 a2 ab 12 50 98 01 64 88 88 30 8a 40 5c 14 02 8b 32 8b 28 28 20 33 ca 43 e4 31 c3 1b 41 86 a0 3c 56 c4 63 ff 7f bf ec ed d9 4a a5 1e b7 ba aa ba ab 93 ef 9c f3 39 33 53 75 9f bf fb bb b7 be 7d ef ad 5b 07 e4 72 b9 03 00 00 00 00 00 ca 09 18 01 00 00 00 00 10 30 00 00 00 00 00 10 30 00 00 00 00 00 10 30 00 00 00 00 80 80 01 00 00 00 00 80 80 01 00 00 00 00 80 80 01 00 00 00 00 04 0c 00 00 00 00 00 04 0c 00 00 00 00 00 04 0c 00 00 00 00 20 60 00 00 00 00 00 20 60 00 00 00 00 00 20 60 00 00 00 00 00 01 03 00 00 00 00 00 01 03 00 00 00 00 00 01 03 00 00 00 00 08 18 00 00 00 00 00 08 18 00 00 00 00 [TRUNCATED] Data Ascii: PNGIHDR0/bKGDpHYs~iIDATxt$U<:3LI !1h6!ih39Qh]wEPd0@\2(( 3C1A<VcJ93Su}[r000 ` ` `@@@000 ` ` `R-k?Y&]]]YQY.ftYQQr@rY3a%ZTUUm.QOmm,j)<Qes4\__3HS$rIlFYCnLEE\|MM$n6to3VO>Z[[(9cwsuuus3 `VnD:6,0s\|_X$a4i=1Oy]V\H$2Mi$ `VR`X'H[[\|E1D7OFV3-"kf%Xpi\|GG\|81tm0n6 bhk
Jan 14, 2025 22:56:54.908562899 CET	1236	IN	Data Raw: 10 30 2b 4b c0 cc b8 15 04 2d 2d 2d f3 83 83 83 f3 c7 1e fb 8e f9 8d 1b 37 ca cc 84 4c 92 18 92 12 31 24 98 c6 df f0 86 37 ec 70 33 d3 e2 44 2c 16 9b 47 5b 03 00 00 80 80 59 c5 02 46 bc 95 34 df de de 3e 7f d4 51 47 2d fe 6d 36 f3 62 36 13 53 53 Data Ascii: 0+K---7L1$7p3D,G[YF4>QG-m6b6SSScDaz(\|yhFX9o%""r8;fb%eUeFX9o%l)$=x%'>glc#&xh_&1D"iFv~m}=FXaT'
Jan 14, 2025 22:56:54.908612967 CET	448	IN	Data Raw: eb e7 d7 af 5f ef f6 e3 8e b3 68 4f 00 00 00 10 30 ab 67 f9 48 0b d3 69 ba 6b d7 ae 9d ec ec ec d4 9a 9b 9b c7 65 e3 e1 35 6a 00 00 00 10 30 ab 8c 48 24 32 1b a2 03 e9 c6 75 6f 45 b5 92 a0 c1 6b d4 00 00 00 20 60 c0 b2 57 a7 db 49 04 84 e9 ed a3 Data Ascii: _hO0gHike5j0H$2uoEk `WIMrFC{Y=G[B\|h5,b1\|Jiv6cLmm-UtCLKK?m~bl:(rI'4VoCo+
Jan 14, 2025 22:56:54.908646107 CET	1236	IN	Data Raw: 01 03 8a 0c 3d b0 43 f5 f1 46 16 35 bc 54 b4 61 c3 86 cd 5e ca 4a 69 98 0a 18 4a 3f 29 96 a2 e6 fc 3a b8 8f ca 35 01 5f 02 00 00 08 18 50 5c 01 33 15 c6 2f 4a 8b 65 a0 1e 83 f8 68 75 23 84 f4 af 53 d3 9f 24 c1 df 7a 9a 2e 46 59 01 00 00 40 c0 80 Data Ascii: =CF5Ta^JiJ?):5_P\3/Jehu#S$z.FY@UsB4TVVn0HDs"VWWQ~1V1FPX&`qd*`=>8z0hKTMlFS__?moj&zov-&]xVMQ
Jan 14, 2025 22:56:54.908679008 CET	1236	IN	Data Raw: 90 b5 39 12 30 fd e2 80 39 08 98 22 8a 18 4a 63 12 be 08 00 00 10 30 a0 c0 8d bc e2 43 89 45 df 13 53 5b 5b 5b b6 02 c6 c7 37 93 20 62 00 00 00 02 06 94 d3 9b 48 cd cd cd b3 24 9e f8 1b 47 8b d0 b5 fd f0 f1 fb 0d eb d6 6d 59 bb 76 ed 96 ba ba ba Data Ascii: 909"Jc0CES[[[7 bH$GmYv-UUU0I1dJ\|\|$Y\|3; 0'~IY&0<LDf+Wg?YWW7g`ta?@o-0?6~v&d"
Jan 14, 2025 22:56:54.908711910 CET	448	IN	Data Raw: 4c 32 6c 1f 7e e4 33 81 f0 66 12 00 00 40 c0 84 92 ea ea 6a df 4e c6 6d 6a 6a 72 14 30 24 72 a6 30 03 53 bc 37 93 bc 52 57 57 37 8b 7e 02 00 00 10 30 61 3b fb 45 f5 f3 81 c9 cb 20 6b d6 ac 69 08 c3 39 30 01 ec b3 e9 29 46 9b 28 75 75 93 01 88 2f Data Ascii: L2l~3f@jNmjjr0$r0S7RWW7~0a;E ki90)F(uu/o& ``0E[HA9{Fa{3@pPSS3nx$sZleXn#Z-^n)`LxS/DTTTU2CCt_qD@
Jan 14, 2025 22:56:54.908746958 CET	1236	IN	Data Raw: ce 58 2c d6 ca a7 b6 1a 66 69 96 2d 23 d5 d7 d7 4f 96 ab 80 21 41 b2 8d eb c4 cb 63 fc 3d 27 2b e8 fe b6 fc ec 04 2f fd 84 55 78 40 c0 00 00 00 04 4c b9 9d fd 92 f6 f1 a1 be ff 95 69 9e 35 30 dc db 41 2c 59 46 7a d3 9b de 34 15 b6 fd 1c 00 02 06 Data Ascii: X,fi-#O!Ac='+/Ux@Li50A,YFz4 `~{iUUUj$f<@3;v,/*\|-#xg:_fxCx`ZY9Y0@@0 ` `0
Jan 14, 2025 22:56:54.908780098 CET	1236	IN	Data Raw: a6 db e0 73 9a 7c 4a ef dc 6a 10 30 d1 68 54 83 80 41 3f 02 00 40 c0 80 12 ec 83 e1 33 61 02 98 dd e9 a7 87 db 8a 17 31 35 35 35 13 10 30 e8 47 00 00 08 18 50 7c 01 d3 53 59 59 b9 25 a0 b7 9c 56 fc ab d5 7e ef 21 82 80 01 00 00 08 18 e0 e2 75 6a Data Ascii: s\|Jj0hTA?@3a15550GP\|SYY%V~!uj1>0W)~f0rD+v)I>%0A.Sz Y!(3A,^^_b `,?ZSzWRtuuu0+r)to<W!A `@)
Jan 14, 2025 22:56:54.908813000 CET	448	IN	Data Raw: f0 e2 2d 24 08 18 00 01 03 64 76 e0 b3 80 a9 a9 a9 c9 c5 62 b1 5c 43 43 43 2e 1a 8d e6 6a 6b 6b f3 c2 66 a7 17 01 a3 3b 8b 66 2e e4 4b 48 7c 16 cc 8c 10 08 bb 64 06 31 89 81 6f aa 0c 05 cc 38 04 4c 49 5f e1 dd 89 37 90 20 60 00 04 0c f0 e7 15 c2 Data Ascii: -$dvb\CCC.jkkf;f.KH\|d1o8LI_7 `W#,`xHbP4@0I#~F0$^nm ar0@J3QE W3b*0o?~CK4[BhKZWl
Jan 14, 2025 22:56:54.908849001 CET	1236	IN	Data Raw: 02 06 14 4b c0 98 7e ac cf 8b 80 71 31 f3 21 35 10 3b 3c 64 67 2c 3a f7 4e 97 83 f6 9c 07 fb 85 e2 84 cf a0 97 90 2c 06 ee a0 71 fc 82 b3 07 7f 6b f5 cb d7 0c bf 96 0b 16 30 7e f7 1d 17 07 ba 49 1d 15 50 60 f9 02 3d 00 d2 ef 25 24 af 3e 10 44 5b Data Ascii: K~q1!5;<dg,:N,qk0~IP`=%$>D[!`@1tHsv,O)C*b<N?}vP]W0fG3t@~sTo^}Mrf$=<H3
Jan 14, 2025 22:56:54.913752079 CET	1236	IN	Data Raw: 81 80 81 80 59 5d 02 c6 e9 d0 3b af 0f 52 de 4b d3 d8 d8 98 3b fc f0 c3 73 ef 78 c7 3b 16 97 9c 58 c8 cc ce ce fe 8d 67 6a 5e 7d f5 d5 89 87 1e 7a 68 f3 ed b7 df de b3 75 eb 56 f5 13 9f f8 44 03 04 0c 04 0c 04 0c 04 4c 41 1f 11 83 80 81 80 59 29 Data Ascii: Y];RK;sx;Xgj^}zhuVDLAY)F<w3Dx644:ky4KN[N>s9G1~v)w#],c[%1d1,/;%~\XX'A$!` `\Ir0
Jan 14, 2025 22:56:55.152798891 CET	398	OUT	GET /files/IMG_3.jpg HTTP/1.1 Host: www.northamericaniron.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.northamericaniron.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 14, 2025 22:56:55.353061914 CET	1236	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 21:56:55 GMT Server: Apache Last-Modified: Mon, 05 Oct 2020 07:04:23 GMT ETag: "10824af-40b-5b0e717930bc0" Accept-Ranges: bytes Content-Length: 1035 Keep-Alive: timeout=5 Connection: Keep-Alive Content-Type: image/jpeg Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 02 01 01 01 01 01 02 01 01 01 02 02 02 02 02 04 03 02 02 02 02 05 04 04 03 04 06 05 06 06 06 05 06 06 06 07 09 08 06 07 09 07 06 06 08 0b 08 09 0a 0a 0a 0a 0a 06 08 0b 0c 0b 0a 0c 09 0a 0a 0a ff db 00 43 01 02 02 02 02 02 02 05 03 03 05 0a 07 06 07 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a ff c0 00 11 08 00 1d 00 6d 03 01 22 00 02 11 01 03 11 01 ff c4 00 1a 00 01 00 03 01 01 01 00 00 00 00 00 00 00 00 00 00 00 05 06 07 04 02 03 ff c4 00 27 10 00 01 04 02 02 02 01 05 00 03 00 00 00 00 00 00 02 01 03 04 05 00 06 11 12 07 21 13 08 15 22 23 31 17 41 71 ff c4 00 16 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 02 ff c4 00 25 11 00 01 03 02 05 04 03 00 00 00 00 00 00 00 00 00 00 01 11 f0 21 31 02 12 22 41 51 61 71 81 f1 91 a1 b1 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 d4 31 8c 60 0c 63 25 74 68 ba a4 ed ce aa 1e [TRUNCATED] Data Ascii: JFIF``CCm"'!"#1Aq%!1"AQaq?1`c%thd:WlYQGSD2}/f%TS2XkcU$mnYD%T/iRUQQtyg/vGW+dfNn_!d$0^CD-5Y+e3MMo`{_&Fn3icJXa2J;wv^#V'p6WHt)3&=8fj'(D$[H1my&lH9n6rUlyq'Vq"ZEQohD=BoOt/F^I9pH-YVA>JV:I1NXu[M1cc%dW/J8G/_p5:}Da[5fFYZBn"K/5OjN,Kc2^Iq%^z(RpFT+)WE$eUH'/aDOY.%g.eFv($2n8Ha^l.vk*'@Vg2@8d:()z
Jan 14, 2025 22:56:55.360207081 CET	394	OUT	GET /favicon.ico HTTP/1.1 Host: www.northamericaniron.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.northamericaniron.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 14, 2025 22:56:55.516578913 CET	290	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 21:56:55 GMT Server: Apache Last-Modified: Mon, 05 Oct 2020 07:17:54 GMT ETag: "104142d-0-5b0e747e9ec80" Accept-Ranges: bytes Content-Length: 0 Vary: Accept-Encoding Keep-Alive: timeout=5 Connection: Keep-Alive Content-Type: image/x-icon

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49746	50.63.8.11	80	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jan 14, 2025 22:56:54.535700083 CET	293	OUT	GET /files/IMG_1.jpg HTTP/1.1 Host: www.northamericaniron.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 14, 2025 22:56:55.119004011 CET	1161	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 21:56:55 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, Keep-Alive Last-Modified: Mon, 05 Oct 2020 07:04:23 GMT ETag: "10824a7-362-5b0e717930bc0" Accept-Ranges: bytes Content-Length: 866 Keep-Alive: timeout=5 Content-Type: image/jpeg Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 02 01 01 01 01 01 02 01 01 01 02 02 02 02 02 04 03 02 02 02 02 05 04 04 03 04 06 05 06 06 06 05 06 06 06 07 09 08 06 07 09 07 06 06 08 0b 08 09 0a 0a 0a 0a 0a 06 08 0b 0c 0b 0a 0c 09 0a 0a 0a ff db 00 43 01 02 02 02 02 02 02 05 03 03 05 0a 07 06 07 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a ff c0 00 11 08 00 1d 00 6d 03 01 22 00 02 11 01 03 11 01 ff c4 00 1a 00 01 01 00 02 03 00 00 00 00 00 00 00 00 00 00 00 00 07 05 08 03 04 06 ff c4 00 28 10 00 01 04 02 02 02 02 02 01 05 00 00 00 00 00 00 02 01 03 04 05 00 06 11 12 07 13 08 21 14 22 15 23 31 51 52 61 ff c4 00 17 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 01 02 03 ff c4 00 26 11 00 02 01 03 02 04 07 00 00 00 00 00 00 00 00 00 00 01 11 02 41 f0 21 51 81 91 b1 d1 12 22 61 a1 c1 e1 f1 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 a8 63 18 c0 18 c6 30 06 33 b1 53 57 [TRUNCATED] Data Ascii: JFIF``CCm"(!"#1QRa&A!Q"a?c03SW>5%TbzTfCUDM>2_Q#jEr7vY}$'/d35TU=\|ctk~2?5"l#z.F,zG$mIULekzq5hOn:hE#T[ocm2oO6+'n"!$#NHNu"hTD{2UsOJ;g11`cwqPW"5w`UC;rK?4u.Z-8^1+"<,J#$5%s,>{:~Axq:Nilx=`eI(I!$vW))}s3M7$P6Lu+#B8Q<w*& Ejp?2Z2j1`c
Jan 14, 2025 22:56:55.315002918 CET	294	OUT	GET /files/IMG_12.jpg HTTP/1.1 Host: www.northamericaniron.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 14, 2025 22:56:55.475687981 CET	1236	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 21:56:55 GMT Server: Apache Last-Modified: Mon, 05 Oct 2020 07:04:23 GMT ETag: "10824aa-9f4-5b0e717930bc0" Accept-Ranges: bytes Content-Length: 2548 Keep-Alive: timeout=5 Connection: Keep-Alive Content-Type: image/jpeg Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 02 01 01 01 01 01 02 01 01 01 02 02 02 02 02 04 03 02 02 02 02 05 04 04 03 04 06 05 06 06 06 05 06 06 06 07 09 08 06 07 09 07 06 06 08 0b 08 09 0a 0a 0a 0a 0a 06 08 0b 0c 0b 0a 0c 09 0a 0a 0a ff db 00 43 01 02 02 02 02 02 02 05 03 03 05 0a 07 06 07 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a ff c0 00 11 08 00 16 00 ec 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 01 00 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 04 07 08 05 06 03 01 ff c4 00 2b 10 00 01 04 02 02 02 01 03 04 03 01 01 00 00 00 00 02 01 03 04 05 00 06 07 11 12 13 21 14 22 31 08 16 41 51 15 23 62 61 32 ff c4 00 16 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 02 ff c4 00 2e 11 00 01 02 03 07 02 05 04 03 00 00 00 00 00 00 00 01 00 11 02 21 41 12 22 51 61 a1 b1 f0 31 91 03 13 81 82 d1 42 71 b2 c1 23 a2 f1 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 b6 [TRUNCATED] Data Ascii: JFIF``CC"+!"1AQ#ba2.!A"Qa1Bq#?cS\MqK!($M0Du5T2D<TM[0]a]`8JdT\l\|{pU{EOn\|<@Hhh}c2g?)hluw0$7m5cF$Qk>W4TU& fg}alq?&lNH_Ma[(MC/h]Mx_)"h6=+EUA@Di'Fv^Lkk)X(%HR\|}-'bym8Hg5YwM"&nL}5RFV;62<1)LG2$m_=b^2LdDYF!6:WP;__Pt~`A+Vor%m6RV=do.:MFd$lLE_"U""&jn0[zcabHR;U}iDw>ew5C!1MybFF=}J"j+~Tp;=1c1Z;sW5`nPL0")D'\
Jan 14, 2025 22:56:55.475723028 CET	1236	IN	Data Raw: f1 45 f0 04 55 4e c9 7a 44 ed 3e 73 43 42 d1 fd 9a 7c 57 af f8 ce a9 ad 6d fd 46 de 46 e9 76 e6 bc c3 2f 57 5f 36 72 7c 58 57 91 a4 38 4e 03 a3 14 02 28 28 01 21 a2 20 12 1a e5 7f fa 69 d9 64 69 f5 bb ee c9 1d 91 77 e9 75 16 95 d8 e6 bf 6b ed 2d Data Ascii: EUNzD>sCB\|WmFFv/W_6r\|XW8N((! idiwuk-q TqZ'Zed!C STH{NT\|%TZJsQf3G2N>fI0}vx p9obmhn8'9t*$
Jan 14, 2025 22:56:55.475756884 CET	346	IN	Data Raw: 75 77 ba ce c5 cc 30 24 a1 37 c7 f1 6d 35 ca 63 ef b5 46 24 0b 51 6b d5 3e 57 f0 0e cb 34 54 55 eb d7 f9 fc 26 20 bd 13 66 dd d8 8d 04 67 da 91 dd 85 f2 7d c7 e4 61 1e e5 99 bf 1f 9c e8 53 6a f7 bb 04 0b 3b 3a 88 3e e6 29 e1 24 bb 13 f6 88 fa 59 Data Ascii: uw0$7m5cF$Qk>W4TU& fg}aSj;:>)$YW[iTR{_ETM"&nL}5NFV;62<XIp#6TDYz]ZMJa1m:jbJJ EB3B*Cg:f'5NO~%-I+8i
Jan 14, 2025 22:56:55.477432013 CET	297	OUT	GET /files/body_bkgd.jpg HTTP/1.1 Host: www.northamericaniron.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 14, 2025 22:56:55.634887934 CET	1236	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 21:56:55 GMT Server: Apache Last-Modified: Mon, 05 Oct 2020 07:04:24 GMT ETag: "10824c5-ff5-5b0e717a24e00" Accept-Ranges: bytes Content-Length: 4085 Keep-Alive: timeout=5 Connection: Keep-Alive Content-Type: image/jpeg Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 02 01 01 01 01 01 02 01 01 01 02 02 02 02 02 04 03 02 02 02 02 05 04 04 03 04 06 05 06 06 06 05 06 06 06 07 09 08 06 07 09 07 06 06 08 0b 08 09 0a 0a 0a 0a 0a 06 08 0b 0c 0b 0a 0c 09 0a 0a 0a ff db 00 43 01 02 02 02 02 02 02 05 03 03 05 0a 07 06 07 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a ff c0 00 11 08 00 60 00 60 03 01 22 00 02 11 01 03 11 01 ff c4 00 18 00 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 02 03 01 04 00 ff c4 00 2f 10 00 02 02 01 04 02 01 04 02 02 02 01 05 00 00 00 01 02 03 11 12 00 04 21 22 13 31 32 14 41 51 62 23 42 33 52 05 24 43 34 61 72 81 82 ff c4 00 14 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff c4 00 14 11 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 3f c3 22 ba c8 b0 a2 93 18 55 8d 72 3c 9c 96 81 be 18 e2 55 3d c8 7b bf 1e a9 1e cc [TRUNCATED] Data Ascii: JFIF``CC``"/!"12AQb#B3R$C4ar??"Ur<U={(x>eR\|CjSx^opgI-!Kk`bYe]WI$,YrAem 6/X.KjOYm@flb9i.hWcU04gYRyD'X;4Ri,h,JSsHwexqL1cDrvqVZa/)8(Iu(%1B/VpH]QER`IDoQTDr@$6d=5m.$Kigd2YlS1xq#1}/99#Y6Y#XAI'LWE.}UBmnE<1J^VxXdahV2mf9>Z8"te.WypCCWjIhP^_Nefm<hGPTUWXIHCCPU}%n7QU\|O; !$Uh:LCG": uH
Jan 14, 2025 22:56:55.635061026 CET	1236	IN	Data Raw: c4 30 be 39 c6 21 fb 1d 4f cd 26 df 6e f1 49 b1 6b 6c 30 55 8c 90 e0 b1 64 e3 86 36 43 15 43 cb 7c df 81 a4 ab 14 4d d6 11 d9 ca 2a 22 97 06 aa 94 2b 1b 20 90 59 63 22 db e4 da 9c 9b a8 f2 59 a3 db 02 e5 0c 92 34 b2 16 06 30 40 cc b8 b2 6c e2 1e Data Ascii: 09!O&nIkl0Ud6CC\|M*"+ Yc"Y40@lOlW`fII^LI>-\|c39`TD UQ6LxVfy%]cVWt<K3$O,\|4jUZ2~f>uE31n,;78
Jan 14, 2025 22:56:55.635076046 CET	1236	IN	Data Raw: 7c d0 30 8f c6 21 52 e0 f6 b4 18 b7 35 6d 6b 19 3d 8f 76 e3 50 4f a5 db c6 f2 6f 99 1e 37 77 60 86 f1 0a 5a 98 b3 85 0c 45 8a 67 5e 5b e0 a0 0d 56 26 67 54 da ae e2 8b 79 11 8f 99 8d ae 58 b9 2c 14 9f 62 9d c7 2c 5b 15 e3 41 25 99 b7 5e 06 e0 b4 Data Ascii: \|0!R5mk=vPOo7w`ZEg^[V&gTyX,b,[A%^2yXmxgIFjm~?sKpHDT"/>n=#(=yITc<8hyW\NTO WO4B,KH\q^/K-Gq"(Zu
Jan 14, 2025 22:56:55.635091066 CET	647	IN	Data Raw: e1 a3 dc 00 e5 82 3b 2a 80 e1 82 93 59 58 50 c1 7f 1d 62 1e fb 13 a0 9d c9 26 50 6e 25 8d 9b e9 d9 89 79 b8 e5 bb 87 61 c9 16 1b 29 3d b1 e8 9a a9 5d e2 b6 5b 09 a4 01 4f 21 e8 39 60 78 a0 2e 8a 8c b9 3c 44 bf 96 d2 db b6 e2 37 68 f2 9c 00 e6 90 Data Ascii: ;*YXPb&Pn%ya)=][O!9`x.<D7hF=jT`,CNfI# <iyb%f7WQGUUhE<i.o6q5HH9p$kAZk?p+0BD55U<=a}A%W0(0xI4,$U
Jan 14, 2025 22:56:55.636241913 CET	293	OUT	GET /files/IMG_3.jpg HTTP/1.1 Host: www.northamericaniron.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 14, 2025 22:56:55.793678045 CET	1236	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 21:56:55 GMT Server: Apache Last-Modified: Mon, 05 Oct 2020 07:04:23 GMT ETag: "10824af-40b-5b0e717930bc0" Accept-Ranges: bytes Content-Length: 1035 Keep-Alive: timeout=5 Connection: Keep-Alive Content-Type: image/jpeg Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 02 01 01 01 01 01 02 01 01 01 02 02 02 02 02 04 03 02 02 02 02 05 04 04 03 04 06 05 06 06 06 05 06 06 06 07 09 08 06 07 09 07 06 06 08 0b 08 09 0a 0a 0a 0a 0a 06 08 0b 0c 0b 0a 0c 09 0a 0a 0a ff db 00 43 01 02 02 02 02 02 02 05 03 03 05 0a 07 06 07 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a ff c0 00 11 08 00 1d 00 6d 03 01 22 00 02 11 01 03 11 01 ff c4 00 1a 00 01 00 03 01 01 01 00 00 00 00 00 00 00 00 00 00 00 05 06 07 04 02 03 ff c4 00 27 10 00 01 04 02 02 02 01 05 00 03 00 00 00 00 00 00 02 01 03 04 05 00 06 11 12 07 21 13 08 15 22 23 31 17 41 71 ff c4 00 16 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 02 ff c4 00 25 11 00 01 03 02 05 04 03 00 00 00 00 00 00 00 00 00 00 01 11 f0 21 31 02 12 22 41 51 61 71 81 f1 91 a1 b1 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 d4 31 8c 60 0c 63 25 74 68 ba a4 ed ce aa 1e [TRUNCATED] Data Ascii: JFIF``CCm"'!"#1Aq%!1"AQaq?1`c%thd:WlYQGSD2}/f%TS2XkcU$mnYD%T/iRUQQtyg/vGW+dfNn_!d$0^CD-5Y+e3MMo`{_&Fn3icJXa2J;wv^#V'p6WHt)3&=8fj'(D$[H1my&lH9n6rUlyq'Vq"ZEQohD=BoOt/F^I9pH-YVA>JV:I1NXu[M1cc%dW/J8G/_p5:}Da[5fFYZBn"K/5OjN,Kc2^Iq%^z(RpFT+)WE$eUH'/aDOY.%g.eFv($2n8Ha^l.vk*'@Vg2@8d:()z
Jan 14, 2025 22:56:55.793708086 CET	69	IN	Data Raw: 5e 11 11 3e 16 9e 62 7e 5e a1 33 52 a5 d0 35 fa 55 b4 8f 1d 9b 9b 0a 90 94 2e cf 06 48 4c 50 c0 df 36 43 97 00 0d 55 b6 c3 f2 4f 5c 22 aa 2d 37 18 45 65 79 38 e3 66 23 51 a4 fd dd c6 31 8c 01 8c 63 00 ff d9 Data Ascii: ^>b~^3R5U.HLP6CUO\"-7Eey8f#Q1c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49747	50.63.8.11	80	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jan 14, 2025 22:56:54.653945923 CET	293	OUT	GET /files/IMG_5.jpg HTTP/1.1 Host: www.northamericaniron.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 14, 2025 22:56:55.298011065 CET	1236	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 21:56:55 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, Keep-Alive Last-Modified: Mon, 05 Oct 2020 07:04:23 GMT ETag: "10824b3-42a-5b0e717930bc0" Accept-Ranges: bytes Content-Length: 1066 Keep-Alive: timeout=5 Content-Type: image/jpeg Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 02 01 01 01 01 01 02 01 01 01 02 02 02 02 02 04 03 02 02 02 02 05 04 04 03 04 06 05 06 06 06 05 06 06 06 07 09 08 06 07 09 07 06 06 08 0b 08 09 0a 0a 0a 0a 0a 06 08 0b 0c 0b 0a 0c 09 0a 0a 0a ff db 00 43 01 02 02 02 02 02 02 05 03 03 05 0a 07 06 07 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a ff c0 00 11 08 00 1d 00 6d 03 01 22 00 02 11 01 03 11 01 ff c4 00 19 00 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 07 06 04 05 03 ff c4 00 28 10 00 01 04 02 01 04 02 02 02 03 00 00 00 00 00 00 02 01 03 04 05 00 06 11 07 08 12 21 13 22 14 31 16 17 23 32 41 ff c4 00 16 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 01 ff c4 00 25 11 00 02 01 02 05 04 03 01 00 00 00 00 00 00 00 00 00 01 11 12 61 02 21 31 81 f0 41 a1 b1 e1 51 c1 d1 f1 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 a8 63 18 c0 18 c6 68 fa 45 a4 c4 ea 3f 53 69 [TRUNCATED] Data Ascii: JFIF``CCm"(!"1#2A%a!1AQ?chE?Si4yx5!E(}sf&5)fsLaCOc5cbkHcHyXTFINE%]+(6FApZ-!Sl~D1!#T:-d^'Yvtw5VjkznjEe%rkYpV6C>D))}tt{y{8:H~02H8O7_2"cS]t;cUvG_2uND$2\|~LUWzmsvjp<On6"D6\TunMJc4c0vh,$!"9m$!._iTT_3MC56m%i:fR\0zCAm>'s]>Dj%{RTH5TES2i?r;&"ia{,v$0nr?l=L(cKM[[vr@$"6( =K
Jan 14, 2025 22:56:55.298122883 CET	126	IN	Data Raw: e6 33 16 4a 39 a4 78 2a 5d 53 d7 5d e6 7c 94 59 fd c7 de 6c 13 67 ca dd fa 7f ad df b7 2e f5 fb 78 91 6d 19 95 f1 d7 c9 7d 51 5d f8 51 a9 00 aa 06 a2 1c b6 ea b8 2b f1 a7 af 65 cf 9b 55 d6 59 14 7a db b5 14 dd 3f d7 a2 58 bf 54 f5 73 fb 14 66 e5 Data Ascii: 3J9x*]S]\|Ylg.xm}Q]Q+eUYz?XTsf7-#@/uUV/$Bf0s\1`c
Jan 14, 2025 22:56:55.313457966 CET	293	OUT	GET /files/IMG_9.jpg HTTP/1.1 Host: www.northamericaniron.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 14, 2025 22:56:55.472151995 CET	1236	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 21:56:55 GMT Server: Apache Last-Modified: Mon, 05 Oct 2020 07:04:24 GMT ETag: "10824c1-4e2-5b0e717a24e00" Accept-Ranges: bytes Content-Length: 1250 Keep-Alive: timeout=5 Connection: Keep-Alive Content-Type: image/jpeg Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 02 01 01 01 01 01 02 01 01 01 02 02 02 02 02 04 03 02 02 02 02 05 04 04 03 04 06 05 06 06 06 05 06 06 06 07 09 08 06 07 09 07 06 06 08 0b 08 09 0a 0a 0a 0a 0a 06 08 0b 0c 0b 0a 0c 09 0a 0a 0a ff db 00 43 01 02 02 02 02 02 02 05 03 03 05 0a 07 06 07 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a ff c0 00 11 08 00 1d 00 6d 03 01 22 00 02 11 01 03 11 01 ff c4 00 1a 00 01 01 01 00 03 01 00 00 00 00 00 00 00 00 00 00 06 00 07 02 03 05 08 ff c4 00 2b 10 00 00 04 04 04 06 03 01 01 01 00 00 00 00 00 00 01 02 03 04 00 05 06 15 11 12 14 52 07 13 51 53 91 a1 08 21 22 41 33 61 ff c4 00 1c 01 00 02 02 02 03 00 00 00 00 00 00 00 00 00 00 00 00 04 02 03 05 06 01 07 09 ff c4 00 2d 11 00 01 01 05 06 05 03 05 00 00 00 00 00 00 00 00 01 11 00 02 03 04 21 05 12 13 14 41 61 15 31 51 71 81 06 a1 f0 22 72 91 b1 b2 ff da 00 0c 03 01 00 02 11 03 11 [TRUNCATED] Data Ascii: JFIF``CCm"+RQS!"A3a-!Aa1Qq"r?~v?p`w\|~6o7x~v?p`w\|%%1]4M[q6)v13C1D_t'8\o0XXU-_v4]@. Yih"So~:-Yliax+A\@P+gc+$jK\|nIe3r8P!82y1ibNvcJkf8S"L<^Pz4MuGB(.Rs4Vv?pb0U\5w[Rxes9TFZ)82e\|e0]bf',>+1t^n~PVFhxH dc+\|tl%%1]5t+0e6cnn^lV]K+wz=W2g982m*$7Un$2F9QbZp4hPU")0)Q(9v^S,)
Jan 14, 2025 22:56:55.472182035 CET	224	IN	Data Raw: 78 af 39 74 92 10 f2 2f 5d 52 29 ad c7 57 ed 1b ae ca ef e5 25 47 99 06 b4 f5 1f 4f c9 65 ad a5 d3 36 a8 49 a5 a8 b9 16 e5 33 f4 85 27 2b e2 b2 e7 50 54 12 65 00 c4 f9 0b cb 28 01 70 c4 07 ce 61 f2 16 a9 97 db 39 2c 25 c3 6a a5 1e 53 ed f3 a2 a7 Data Ascii: x9t/]R)W%GOe6I3'+PTe(pa9,%jSFsjOG+Zz{"QG>{_yLgt@hhjg!gQPAQr/IL@W!@H%#.u^R9vA) sqf
Jan 14, 2025 22:56:55.604665041 CET	60	IN	Data Raw: 1e bc f7 54 00 9e e8 02 93 a9 2a f1 35 24 96 45 75 2e f8 ae a5 df 07 75 ea f4 f7 16 bd 5e 9e e2 cc ab 2b 9f 2c 8a ea 5d f1 5d 4b be 0e eb d5 e9 ee 2d 7a bd 3d c1 95 63 3e 5b ff d9 Data Ascii: T*5$Eu.u^+,]]K-z=c>[
Jan 14, 2025 22:56:55.605420113 CET	293	OUT	GET /files/IMG_7.jpg HTTP/1.1 Host: www.northamericaniron.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 14, 2025 22:56:55.764345884 CET	1236	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 21:56:55 GMT Server: Apache Last-Modified: Mon, 05 Oct 2020 07:04:24 GMT ETag: "10824c0-3da-5b0e717a24e00" Accept-Ranges: bytes Content-Length: 986 Keep-Alive: timeout=5 Connection: Keep-Alive Content-Type: image/jpeg Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 02 01 01 01 01 01 02 01 01 01 02 02 02 02 02 04 03 02 02 02 02 05 04 04 03 04 06 05 06 06 06 05 06 06 06 07 09 08 06 07 09 07 06 06 08 0b 08 09 0a 0a 0a 0a 0a 06 08 0b 0c 0b 0a 0c 09 0a 0a 0a ff db 00 43 01 02 02 02 02 02 02 05 03 03 05 0a 07 06 07 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a ff c0 00 11 08 00 1d 00 6d 03 01 22 00 02 11 01 03 11 01 ff c4 00 19 00 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 07 06 05 03 04 ff c4 00 25 10 00 01 04 02 02 02 03 01 00 03 00 00 00 00 00 00 02 01 03 04 05 00 06 07 11 12 13 08 14 22 21 16 23 31 ff c4 00 16 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 02 ff c4 00 28 11 00 01 02 03 06 06 03 00 00 00 00 00 00 00 00 00 11 00 01 21 71 f0 12 22 41 51 61 b1 02 81 91 a1 e1 f1 31 c1 d1 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 a8 63 18 c2 26 31 8c 22 63 29 73 21 e8 1c 51 [TRUNCATED] Data Ascii: JFIF``CCm"%"!#1(!q"AQa1?c&1"c)s!Q6igyS_QQ:U/hGz):,=3/+qQDeEzTxk"Q8>?G.U{jxl5WvS2IEqY#!N{_gW/i-V9Q"2}FDFDARWDq}i;^c&x@bcTl)kV}"VE6Q_%~74XHkMbmz4"na`uI\S# E_ROh9v8fv20c0cAOW6x5!#~HQ{QD.#Go4InItG I{50r1Jc7vY+]fO/k[UWSkne0es=nj4v-Q&QpB_J_2j%745!{}.N~3qdxWJ{j\|@CW}c#L6^2'c^f@^'^Kw
Jan 14, 2025 22:56:55.764379978 CET	19	IN	Data Raw: 19 a2 f5 5a 2c 86 02 b2 d9 31 8c 64 55 31 8c 61 17 ff d9 Data Ascii: Z,1dU1a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49748	50.63.8.11	80	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jan 14, 2025 22:56:54.659606934 CET	293	OUT	GET /files/IMG_0.jpg HTTP/1.1 Host: www.northamericaniron.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 14, 2025 22:56:55.299155951 CET	1236	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 21:56:55 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, Keep-Alive Last-Modified: Mon, 05 Oct 2020 07:04:23 GMT ETag: "10824a6-fb1b-5b0e717930bc0" Accept-Ranges: bytes Content-Length: 64283 Keep-Alive: timeout=5 Content-Type: image/jpeg Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 02 01 01 01 01 01 02 01 01 01 02 02 02 02 02 04 03 02 02 02 02 05 04 04 03 04 06 05 06 06 06 05 06 06 06 07 09 08 06 07 09 07 06 06 08 0b 08 09 0a 0a 0a 0a 0a 06 08 0b 0c 0b 0a 0c 09 0a 0a 0a ff db 00 43 01 02 02 02 02 02 02 05 03 03 05 0a 07 06 07 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a ff c0 00 11 08 00 de 03 63 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 00 02 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 03 07 02 04 05 06 08 09 01 0a ff c4 00 57 10 00 02 01 03 03 03 03 02 03 05 05 05 06 01 01 19 01 02 03 04 05 11 00 06 12 07 21 51 08 13 31 22 61 09 14 41 15 23 32 91 a1 16 62 71 81 f0 24 42 b1 d1 d2 0a 17 52 c1 e1 f1 95 25 33 34 43 44 56 72 92 18 19 35 55 75 54 57 64 74 82 84 85 93 94 a2 a4 b2 c2 ff c4 00 1d 01 01 00 02 03 01 01 01 01 00 00 00 00 00 00 00 00 00 02 03 01 04 05 06 07 08 09 ff c4 00 50 11 00 01 03 02 [TRUNCATED] Data Ascii: JFIF``CCc"W!Q1"aA#2bq$BR%34CDVr5UuTWdtP!1AQaq"S#23BCRbrc45DET$Us%?`x0<W\|h5BF4`x\|i!-T`x0<W\|h40<4p_HKUU_8/$%F/F\|IjjGQh5_BZ4`x\|i!-T`x0<W\|h40<4p_HKUU_8/$%F/F\|IjjGQh5_BZ4`x\|i!-T`x0<W\|h40<4p_HKUU_8/$%F/F\|IjjGQh5_BZ4`x\|i!-T`x0<W\|h4Qh& G'ZeUKKkfRr+8YZC:$0#
Jan 14, 2025 22:56:55.299232960 CET	224	IN	Data Raw: 8f f2 ff 00 d3 f4 ed af 1b 8d d6 9c 46 13 1f 53 0e 28 82 1a 60 19 39 ec dc bf 49 ea af 90 ad 0f ac 5a af 84 d2 af c7 bd 8e ac c0 e2 d0 ca 64 03 2e 10 09 32 47 9b bf 8a 8e 96 cb 75 76 e2 96 9a 82 7c 08 1b fe 5a 62 ed bb fb 76 5b 0d 61 ef 8e d4 af Data Ascii: FS(`9IZd.2Guv\|Zbv[a-H4(Gl}$;fMNK[K 6j!\|~Umi]uHU)SV~kz?3K D.<~CQ!6\|gUM*g
Jan 14, 2025 22:56:55.299263954 CET	1236	IN	Data Raw: 63 ea fd 1d 3e f5 03 8d a1 ba 88 04 6d 7b 86 08 c8 3f 92 7f f9 68 fe c8 6e a2 bc 86 d7 b8 63 cf e4 9f fe 5a e8 5a 0b 7c f0 a1 2e d0 a9 ef c8 19 ff 00 c8 79 cf eb ab c8 60 b7 c7 83 24 90 12 08 04 bb 33 ff 00 88 c9 d4 7e 59 62 27 2a 2d ed 2a 63 e0 Data Ascii: c>m{?hncZZ\|.y`$3~Yb'-c*7@Zl}?SQl+m:G2$Osj[p#L{c+uL\|gj.-lks~>v%%N;Im_?:r"
Jan 14, 2025 22:56:55.299335003 CET	1236	IN	Data Raw: b0 77 c0 f9 d9 57 5f 8c ff 00 f7 b6 5f fa 75 f7 fb 03 be 3f fa 8a bb 7f f0 d9 7f e9 d7 51 1a 47 c8 ca 93 c9 4e 38 8f 8e fe 75 48 81 c1 55 94 e1 82 e0 0d 63 e5 8d 7d d4 9b da 54 87 c1 e3 42 93 ff 00 1f 57 d0 a7 de b9 78 ec 3d ec 0e 0e cc ba e7 c7 Data Ascii: wW__u?QGN8uHUc}TBWx=?2KNt3wl?d,#+?,14,>cbBp6m_?\|tb\_`>FH_mc#6b7R7>?
Jan 14, 2025 22:56:55.299371958 CET	1236	IN	Data Raw: 29 d9 ec d3 91 c7 ff 00 9e 18 02 47 7c 95 5c 7f 2f 9d 67 a1 a7 61 97 54 23 0c 0a e0 fc 8e fe 35 f2 dd 2f 53 ff 00 ca 57 1f d5 ee 0b f7 bf 93 56 c6 a0 e8 c3 fe 50 fa d5 15 74 d0 d0 4a 42 3d 33 37 d4 4f 67 fe 1f be 3e da c9 d2 d4 5b 68 d3 8a db 11 Data Ascii: )G\|\/gaT#5/SWVPtJB=37Og>[hA%~}ZFc#Wqcrs\<$G`W^(pauqc'?8j*wy@T~\|wbwidMC`A9~
Jan 14, 2025 22:56:55.299406052 CET	1236	IN	Data Raw: 58 fd e0 cf 82 40 c6 b1 cb 20 a3 9a c7 9a 7c af 2f a4 63 e7 fd 79 d5 bc 94 eb 82 04 79 3c bb 0f 27 cf fc 75 93 78 00 72 17 20 7c e0 7c 91 a4 b4 51 b8 ec 0f db f4 ec 71 f3 ff 00 2f be 82 b6 6b 22 89 de b1 cf 11 1d 9b fc fb e4 8f d7 fd 7f 86 97 2d Data Ascii: X@ \|/cyy<'uxr \|\|Qq/k"-9*e'Fs\br}.H;qXK^/4R3jE/ag2>\qCE)`qOy+u`S4'`9DYOV g9-:
Jan 14, 2025 22:56:55.299438953 CET	1236	IN	Data Raw: 37 e9 fe 5a 7c 14 4e b8 46 3c 48 5c 30 2d aa 14 7d 48 cc 4b 67 be 40 f8 d3 d4 77 3c 81 3d f1 9f f4 35 9e 58 c2 89 a4 09 cd 56 b4 ec ea 08 65 60 30 7b 6a a8 51 5a 4c fb 63 c8 fd 72 71 fe 8e be a3 46 06 38 60 83 8e c7 39 1f e1 fc f4 c4 78 55 08 2b Data Ascii: 7Z\|NF<H\0-}HKg@w<=5XVe`0{jQZLcrqF8`9xU+?QIQ\|Cio9y9a'k3Oj7{@8T?c%>@$dh$ti\,PXhv FlUrUi_!]
Jan 14, 2025 22:56:55.299472094 CET	1236	IN	Data Raw: ed 1f 90 b4 74 7c eb ff 00 da 0a c7 82 f8 d1 a6 70 1e 4e 8d 7d 2a 57 e4 8b 13 70 3c 0d 18 1e 06 9d c0 f9 1a 38 1f 23 55 5c 16 c5 a9 38 1e 06 8c 0f 03 4e e0 7c 8d 1c 0f 91 a5 c1 2d 49 c0 f0 34 60 78 1a 77 03 e4 68 e0 7c 8d 2e 09 6a 4e 07 81 a3 03 Data Ascii: t\|pN}*Wp<8#U\8N\|-I4`xwh\|.jN#GipKRp<8#KZh4\Fp>Fx0<;4p>F'i4%8N\|-I4`xwh\|.jN#GipKRp<8#KZ
Jan 14, 2025 22:56:55.299505949 CET	776	IN	Data Raw: d9 d6 12 9f d5 97 40 5e 9a 7a f6 df f0 88 e9 67 7a 79 de 5a 19 e3 e1 22 37 12 ac 1a 31 82 5b 92 81 fe f1 8e 40 b9 31 bf 1c 5e d8 27 82 0a 6e 9c c2 94 51 95 b2 08 ef fe 3f 3f cf 4e 56 90 fd 28 47 61 90 71 f6 d4 4f 6f f5 9d e9 9a e1 29 8a 9f ab 54 Data Ascii: @^zgzyZ"71[@1^'nQ??NV(GaqOo)TvxfQ8;>4TS-aa\L~%d83*KeuU"VEp[@Got `dQ\^=<WP:s,P56U$j=6GkTOWyGH"
Jan 14, 2025 22:56:55.299540043 CET	1236	IN	Data Raw: 8a 7e df bf dd 69 29 69 fa 63 71 e3 24 ca b7 26 84 b3 98 93 01 9d a2 e4 15 64 f9 fd d8 73 18 94 65 b2 83 19 c3 71 34 48 9b 84 2c 3a 8d 4b a0 05 d7 8d 27 21 82 d9 fa b1 db be 74 b7 94 aa 90 00 3d bb f1 c6 75 cb cd f8 97 6c 6a 1b f5 25 15 f7 6b 5c Data Ascii: ~i)icq$&dseq4H,:K'!t=ulj%k\`Dyp#:+,{9{6.T-Ui+`I,Dc8"Rg~37&CW]<r$`\|Y/7{~?\W\JQ$$'9!<2j'i-&y6%u&
Jan 14, 2025 22:56:55.304332018 CET	1236	IN	Data Raw: 4f 57 ef bd 76 df a2 a8 79 cb 67 dc 2f 02 31 6c fe b9 ce 75 f4 1d 41 c4 b2 b6 36 bd ad 23 cc 6e df ee 5f 9b 7e 12 34 1d 4f 41 68 f9 20 fe 99 fb 27 e6 82 cd e0 78 1a 34 ee 07 c8 d1 af a8 dc 17 e4 7b 53 78 0f 27 47 01 e4 ea be 07 c8 d1 c0 f9 1a aa Data Ascii: OWvyg/1luA6#n_~4OAh 'x4{Sx'GJG<W8#I)jtpN\|Qy:8'U>FJZ<#Gi%-TpN\|48'GIKUu_h\|$y:4p>FRG<W8#I)jt
Jan 14, 2025 22:56:55.478984118 CET	294	OUT	GET /files/IMG_11.jpg HTTP/1.1 Host: www.northamericaniron.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 14, 2025 22:56:55.636298895 CET	578	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 21:56:55 GMT Server: Apache Last-Modified: Mon, 05 Oct 2020 07:04:23 GMT ETag: "10824a9-135-5b0e717930bc0" Accept-Ranges: bytes Content-Length: 309 Keep-Alive: timeout=5 Connection: Keep-Alive Content-Type: image/jpeg Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 02 01 01 01 01 01 02 01 01 01 02 02 02 02 02 04 03 02 02 02 02 05 04 04 03 04 06 05 06 06 06 05 06 06 06 07 09 08 06 07 09 07 06 06 08 0b 08 09 0a 0a 0a 0a 0a 06 08 0b 0c 0b 0a 0c 09 0a 0a 0a ff db 00 43 01 02 02 02 02 02 02 05 03 03 05 0a 07 06 07 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a ff c0 00 11 08 01 0f 00 01 03 01 22 00 02 11 01 03 11 01 ff c4 00 15 00 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 ff c4 00 14 10 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff c4 00 14 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff c4 00 14 11 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 ff d9 Data Ascii: JFIF``CC"?
Jan 14, 2025 22:56:55.637959957 CET	289	OUT	GET /favicon.ico HTTP/1.1 Host: www.northamericaniron.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 14, 2025 22:56:55.799829960 CET	290	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 21:56:55 GMT Server: Apache Last-Modified: Mon, 05 Oct 2020 07:17:54 GMT ETag: "104142d-0-5b0e747e9ec80" Accept-Ranges: bytes Content-Length: 0 Vary: Accept-Encoding Keep-Alive: timeout=5 Connection: Keep-Alive Content-Type: image/x-icon

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49749	50.63.8.11	80	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jan 14, 2025 22:56:55.322396994 CET	298	OUT	GET /files/new%20logo.png HTTP/1.1 Host: www.northamericaniron.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 14, 2025 22:56:55.903974056 CET	1236	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 21:56:55 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, Keep-Alive Last-Modified: Mon, 05 Oct 2020 07:04:24 GMT ETag: "10824cd-6a25-5b0e717a24e00" Accept-Ranges: bytes Content-Length: 27173 Keep-Alive: timeout=5 Content-Type: image/png Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 30 00 00 01 a4 08 06 00 00 00 2f ee 1f a7 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 69 c5 49 44 41 54 78 da ed 9d 0b 74 24 55 9d ff 99 3c 3a a9 f4 a4 33 99 c9 4c 49 20 a6 21 da 31 1a 68 8d c4 f4 12 36 21 12 69 89 c6 c2 68 33 39 c6 d3 51 f7 68 f4 af 98 5d 16 1d 77 0f 90 d5 45 a2 ab 12 50 98 01 64 88 88 30 8a 40 5c 14 02 8b 32 8b 28 28 20 33 ca 43 e4 31 c3 1b 41 86 a0 3c 56 c4 63 ff 7f bf ec ed d9 4a a5 1e b7 ba aa ba ab 93 ef 9c f3 39 33 53 75 9f bf fb bb b7 be 7d ef ad 5b 07 e4 72 b9 03 00 00 00 00 00 ca 09 18 01 00 00 00 00 10 30 00 00 00 00 00 10 30 00 00 00 00 00 10 30 00 00 00 00 80 80 01 00 00 00 00 80 80 01 00 00 00 00 80 80 01 00 00 00 00 04 0c 00 00 00 00 00 04 0c 00 00 00 00 00 04 0c 00 00 00 00 20 60 00 00 00 00 00 20 60 00 00 00 00 00 20 60 00 00 00 00 00 01 03 00 00 00 00 00 01 03 00 00 00 00 00 01 03 00 00 00 00 08 18 00 00 00 00 00 08 18 00 00 00 00 [TRUNCATED] Data Ascii: PNGIHDR0/bKGDpHYs~iIDATxt$U<:3LI !1h6!ih39Qh]wEPd0@\2(( 3C1A<VcJ93Su}[r000 ` ` `@@@000 ` ` `R-k?Y&]]]YQY.ftYQQr@rY3a%ZTUUm.QOmm,j)<Qes4\__3HS$rIlFYCnLEE\|MM$n6to3VO>Z[[(9cwsuuus3 `VnD:6,0s\|_X$a4i=1Oy]V\H$2Mi$ `VR`X'H[[\|E1D7OFV3-"kf%Xpi\|GG\|81tm0n6 bhk
Jan 14, 2025 22:56:55.904042006 CET	1236	IN	Data Raw: 10 30 2b 4b c0 cc b8 15 04 2d 2d 2d f3 83 83 83 f3 c7 1e fb 8e f9 8d 1b 37 ca cc 84 4c 92 18 92 12 31 24 98 c6 df f0 86 37 ec 70 33 d3 e2 44 2c 16 9b 47 5b 03 00 00 80 80 59 c5 02 46 bc 95 34 df de de 3e 7f d4 51 47 2d fe 6d 36 f3 62 36 13 53 53 Data Ascii: 0+K---7L1$7p3D,G[YF4>QG-m6b6SSScDaz(\|yhFX9o%""r8;fb%eUeFX9o%l)$=x%'>glc#&xh_&1D"iFv~m}=FXaT'
Jan 14, 2025 22:56:55.904076099 CET	1236	IN	Data Raw: eb e7 d7 af 5f ef f6 e3 8e b3 68 4f 00 00 00 10 30 ab 67 f9 48 0b d3 69 ba 6b d7 ae 9d ec ec ec d4 9a 9b 9b c7 65 e3 e1 35 6a 00 00 00 10 30 ab 8c 48 24 32 1b a2 03 e9 c6 75 6f 45 b5 92 a0 c1 6b d4 00 00 00 20 60 c0 b2 57 a7 db 49 04 84 e9 ed a3 Data Ascii: _hO0gHike5j0H$2uoEk `WIMrFC{Y=G[B\|h5,b1\|Jiv6cLmm-UtCLKK?m~bl:(rI'4VoCo+
Jan 14, 2025 22:56:55.904130936 CET	1236	IN	Data Raw: 21 dc f0 ba b9 50 01 b3 76 ed da 92 7f 5d 5b 36 8d 23 8e 38 62 e6 b0 c3 0e eb 21 21 39 85 53 7b 01 00 00 02 06 b8 7c e8 d3 03 55 e3 a3 ef cb f9 75 6a 5d 7d b6 14 eb ad 22 1f ce bd 99 7f db db ba c7 15 45 69 ad aa aa da 02 7f 04 00 00 08 18 e0 7e Data Ascii: !Pv][6#8b!!9S{\|Uuj]}"Ei~So:,"++'4b;,Izc?@8HRxt1i&f7/!`8_RxLf`#dq3o_.bKJuUUUKIT
Jan 14, 2025 22:56:55.904181004 CET	896	IN	Data Raw: 0e 22 06 00 00 20 60 20 60 64 c4 8b 17 01 53 c8 6c 50 00 1f 9d ec 29 c4 96 54 f6 50 6e ea 25 fb a4 e1 eb 00 00 00 01 b3 92 96 8f 5a 6b 6a 6a 66 fd 16 2f 22 ed f1 02 97 3d ca 56 c0 04 f5 66 92 d7 25 3e 3e e4 0e 9b 7a 01 00 00 02 06 b3 2f ff b7 3c Data Ascii: " ` `dSlP)TPn%Zkjjf/"=Vf%>>z/<1m /6^1fxS/006oE:-TF,'aS/@KWAa!*`Bf\$Lfgv(F#N0s5550et4]G2zgj
Jan 14, 2025 22:56:55.904215097 CET	1236	IN	Data Raw: ce 58 2c d6 ca a7 b6 1a 66 69 96 2d 23 d5 d7 d7 4f 96 ab 80 21 41 b2 8d eb c4 cb 63 fc 3d 27 2b e8 fe b6 fc ec 04 2f fd 84 55 78 40 c0 00 00 00 04 4c b9 9d fd 92 f6 f1 a1 be ff 95 69 9e 35 30 dc db 41 2c 59 46 7a d3 9b de 34 15 b6 fd 1c 00 02 06 Data Ascii: X,fi-#O!Ac='+/Ux@Li50A,YFz4 `~{iUUUj$f<@3;v,/*\|-#xg:_fxCx`ZY9Y0@@0 ` `0
Jan 14, 2025 22:56:55.904247046 CET	1236	IN	Data Raw: a6 db e0 73 9a 7c 4a ef dc 6a 10 30 d1 68 54 83 80 41 3f 02 00 40 c0 80 12 ec 83 e1 33 61 02 98 dd e9 a7 87 db 8a 17 31 35 35 35 13 10 30 e8 47 00 00 08 18 50 7c 01 d3 53 59 59 b9 25 a0 b7 9c 56 fc ab d5 7e ef 21 82 80 01 00 00 08 18 e0 e2 75 6a Data Ascii: s\|Jj0hTA?@3a15550GP\|SYY%V~!uj1>0W)~f0rD+v)I>%0A.Sz Y!(3A,^^_b `,?ZSzWRtuuu0+r)to<W!A `@)
Jan 14, 2025 22:56:55.904284954 CET	1236	IN	Data Raw: f0 e2 2d 24 08 18 00 01 03 64 76 e0 b3 80 a9 a9 a9 c9 c5 62 b1 5c 43 43 43 2e 1a 8d e6 6a 6b 6b f3 c2 66 a7 17 01 a3 3b 8b 66 2e e4 4b 48 7c 16 cc 8c 10 08 bb 64 06 31 89 81 6f aa 0c 05 cc 38 04 4c 49 5f e1 dd 89 37 90 20 60 00 04 0c f0 e7 15 c2 Data Ascii: -$dvb\CCC.jkkf;f.KH\|d1o8LI_7 `W#,`xHbP4@0I#~F0$^nm ar0@J3QE W3b*0o?~CK4[BhKZWl
Jan 14, 2025 22:56:55.904340982 CET	1236	IN	Data Raw: 8c 71 5a 14 02 06 02 26 8c 02 46 83 80 b1 3f 68 cd 29 dd da da da 5c 63 63 e3 bd 17 5d 74 51 fb b5 d7 5e db c3 42 e6 b9 e7 9e d3 8e 3b ee b8 1c d3 db db bb 38 63 c3 c2 67 dd ba 75 8b a2 26 c0 07 e9 14 04 4c 49 04 cc 14 04 0c 58 69 02 66 1c 02 06 Data Ascii: qZ&F?h)\cc]tQ^B;8cgu&LIXif&fFnpi5]vQttt9\6\|/\|;IB@@>cNHdqe{gyV3'\|T*{^(~xvBs=
Jan 14, 2025 22:56:55.904376030 CET	896	IN	Data Raw: 2e ea 0c 01 03 01 03 41 b0 42 05 4c 6b a1 fb 07 20 60 20 60 ca 40 c0 cc 59 bd 79 b3 da 04 8c 51 bc f0 1e 94 fc cc 09 c3 5f 9c 7e fd eb 5f 9f 7b e3 1b df 98 4b 26 93 b9 bf fb bb bf cb 69 9a b6 78 e4 3f 2f f7 18 f6 a7 4c 7f e3 1b df c8 c9 8a 12 17 Data Ascii: .ABLk ` `@YyQ_~_{K&ix?/LfZk>nO_z/zC@@D#\{k9/}K~z~??6\|kVO_Gs###7/\|S?o-gEo0%$=b'\|2}5
Jan 14, 2025 22:56:55.909395933 CET	1236	IN	Data Raw: 71 12 9a 07 29 04 0c 04 0c 04 c1 0a 16 30 85 ee 83 81 80 29 4b 01 93 f3 5b c0 e4 67 29 f2 62 62 d3 a6 4d 7b be fc e5 2f b7 d2 83 b1 fd ba eb ae 6b 7f fc f1 c7 93 bc 31 34 95 4a 2d ee c1 e0 25 84 81 81 81 dc 3b de f1 8e dc b1 c7 1e 9b a3 87 26 8b Data Ascii: q)0)K[g)bbM{/k14J-%;&_7\rE%($>-gAa~jeE^?fG,J Xx*H^{m(JAA,0:h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49750	50.63.8.11	80	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jan 14, 2025 22:56:55.322426081 CET	298	OUT	GET /files/background.jpg HTTP/1.1 Host: www.northamericaniron.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 14, 2025 22:56:55.917063951 CET	1236	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 21:56:55 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, Keep-Alive Last-Modified: Mon, 05 Oct 2020 07:04:24 GMT ETag: "10824c4-d2c2-5b0e717a24e00" Accept-Ranges: bytes Content-Length: 53954 Keep-Alive: timeout=5 Content-Type: image/jpeg Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 02 01 01 01 01 01 02 01 01 01 02 02 02 02 02 04 03 02 02 02 02 05 04 04 03 04 06 05 06 06 06 05 06 06 06 07 09 08 06 07 09 07 06 06 08 0b 08 09 0a 0a 0a 0a 0a 06 08 0b 0c 0b 0a 0c 09 0a 0a 0a ff db 00 43 01 02 02 02 02 02 02 05 03 03 05 0a 07 06 07 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a ff c0 00 11 08 00 cc 01 a5 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 00 01 05 00 03 01 01 00 00 00 00 00 00 00 00 00 07 03 04 05 06 08 01 02 09 00 0a ff c4 00 42 10 00 02 02 01 03 03 03 02 03 06 03 06 06 02 02 03 01 02 03 04 05 06 11 12 00 07 21 08 13 31 22 41 09 14 51 15 23 32 61 71 f0 81 91 a1 16 42 b1 c1 d1 e1 0a 17 24 33 52 f1 18 19 25 34 43 26 62 ff c4 00 1b 01 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 02 03 01 04 05 00 06 07 ff c4 00 3b 11 00 01 03 02 03 04 09 04 02 01 02 06 03 00 00 00 01 02 03 11 00 21 04 12 31 05 13 [TRUNCATED] Data Ascii: JFIF``CC"B!1"AQ#2aqB$3R%4C&b;!1AQ"aq2#bBR3r?3a,%6,8-?o =FJE!ITFQQ,6yuFy@G>wi^%4>8.ECy]?6_$4?R6?l}d_~?@m?xb,4%<'t\|iJ?~zq^I6>t.L;Q=B%w<u8?lZb)69q=?#!~wgFKE_ThtekM ZN!89q,<{7J77S XTW`4'EKO0H9l4@>/;;Camg@_I{mo?~VA;uVD~?])e*P?~4P
Jan 14, 2025 22:56:55.917098045 CET	1236	IN	Data Raw: 5f 04 ee 50 0d ba 4a 4c 9a c0 38 1b 2e 76 23 ec bf 3f df e9 d4 7b 5a 91 c1 2a 76 03 61 b0 1e 00 ff 00 90 f3 d7 3e f4 fb 7d 43 e0 1e 5b 31 1e 7e 7f a7 eb d3 03 74 b5 3c 48 81 4e db 3d 68 20 58 e4 66 20 6c 48 8d 49 ff 00 87 49 9d 41 92 52 d2 46 40 Data Ascii: _PJL8.v#?{Z*va>}C[1~t<HN=h Xf lHIIARF@?n1I!]vvO!@]Zf39#l63?oC>]b~Gi(~j`A;Oc[y,}ld\|/R+`W
Jan 14, 2025 22:56:55.917130947 CET	448	IN	Data Raw: 0a 91 85 0a 3e cb f0 76 03 c6 df f1 ea 66 6a b2 ac 45 65 d9 89 dc 94 04 ec 3e ff 00 df cf 4d 2d c1 1b 21 46 01 7c 80 5b 90 24 ef f7 f3 f0 3f ea 7f af 52 5d b5 49 45 a0 0a 88 58 fd a9 5e 24 9e 45 50 7e 9e 2b b8 f9 3f cc 75 f7 4a d9 88 a3 06 f6 f7 Data Ascii: >vfjEe>M-!F\|[$?R]IEX^$EP~+?uJ7$BmPV(xr8\41p6^@nC)~zZe}j]wPUCFQ8CNk-+9t`@_nyy\|NE]eB}P
Jan 14, 2025 22:56:55.917251110 CET	1236	IN	Data Raw: e4 f9 f1 fa ed bf f8 f4 e5 21 02 4d f8 1f 1f 3b 9f 07 fd 3c 74 ac 51 38 fd e9 20 0f b0 5f b7 f3 ff 00 21 d2 89 18 23 66 51 c8 fc 15 f9 ff 00 bf 40 5e a8 2d 99 8a 6e b0 ee be 01 fd 47 2f ef e3 a5 62 81 7c 49 cf c6 fe 37 fd 3f ef d2 ab 58 08 b7 3f Data Ascii: !M;<tQ8 _!#fQ@^-nG/b\|I7?X?$o>1Dv\|z-/>Oc=,7pvHO.mzj'c\|\|C}tKpBbz@@,a[/]}:p
Jan 14, 2025 22:56:55.917284966 CET	1236	IN	Data Raw: df fe 9f d3 fe bb 75 d9 14 96 2d b7 1d cf 80 0f fd 3f c7 fe dd 24 df ba 22 4f 05 5f 60 a7 90 f2 36 f0 07 f4 eb bd 69 19 d5 59 0f 2d 80 2b ed 8d f7 27 cf db a7 a5 72 8a 4a 90 03 96 a7 b5 52 3e 5e 64 5f a4 6e 79 38 5d ff 00 97 f2 ea 42 0e 32 96 70 Data Ascii: u-?$"O_`6iY-+'rJR>^d_ny8]B2pmt(!O\|y<6PWSC!!'d+A:A.$>~v?~]j?5iQK!n/u&3 ov}y{X~`@8
Jan 14, 2025 22:56:55.917319059 CET	1236	IN	Data Raw: f8 27 c0 e9 29 6c 0e 3b fb 9b 02 36 24 ef fa 91 fe 3b 74 da cc bc 49 56 3e 77 fe 26 4f 9f 3f df f9 75 17 8a 94 d8 de 9d c9 28 46 20 15 56 3b ff 00 0f df c0 fe 7f de fd 20 64 8e 41 c5 08 2d be e1 7e 01 fe 7f df eb fc ba 41 a7 dc 95 f7 57 6d fc 15 Data Ascii: ')l;6$;tIV>w&O?u(F V; dA-~AWm_=!5Ax<uDRf~aIOG{S3]?:B{ oMmV#m;N4TNe-H?LYXs??KlwRv@>t1bYx
Jan 14, 2025 22:56:55.917351007 CET	1236	IN	Data Raw: df 76 0a 64 46 e4 51 9a 40 ff 00 52 6c ab 2d 1f fa 72 b2 48 35 a9 a2 d5 18 29 f4 db eb 38 33 55 0e 1e 30 3d dc a2 ce a6 b2 7d 66 3d cc a3 e9 1f bc fa 3c 9f e2 fa 7e 7c 74 de d7 72 fb 7d 42 08 6e df d6 f8 98 a1 9b 76 86 49 32 51 01 28 21 88 e2 77 Data Ascii: vdFQ@Rl-rH5)83U0=}f=<~\|tr}BnvI2Q(!w+mzr1`T-8%)~rrah-dcz9(V%@_S$ui#gRr4aWd6>G)\|7nn2MEn`7
Jan 14, 2025 22:56:55.917385101 CET	896	IN	Data Raw: b1 e1 40 30 6d 4e 86 7e 72 af 5f 2e fa c7 f4 29 16 32 c5 cc 6f a9 1b 77 1e 0a d3 ca 16 0d 17 76 24 95 a2 2b c6 15 69 82 13 24 a0 b7 0d d5 53 78 d8 3b a0 d8 91 9c 9e bd bb 34 6c d8 ca e5 33 f6 30 97 71 50 34 72 e0 32 58 d9 4c f9 18 a4 20 f2 85 95 Data Ascii: @0mN~r_.)2owv$+i$Sx;4l30qP4r2XL x!BUH}'~lvKRjh94`!^b#<UQS}cM( .hDl8{jrbnz#x3 z[atcISba8jJrNJ]UdSv)-$]l
Jan 14, 2025 22:56:55.917417049 CET	1236	IN	Data Raw: 48 3b 8f 62 3b 52 4f 18 75 3c b8 f2 60 76 43 b2 93 b6 e4 f8 d8 6f b1 df 0f 62 35 9e a1 d1 99 39 21 93 1b 6a b6 3c dc 31 46 f6 e2 e2 c5 49 01 09 e2 58 72 03 81 3b 31 fe 21 fa 8e ad 1a df 49 f7 0a fd 1a 3d c2 b1 a3 b2 cd 8c 92 28 96 6c a0 c5 cc 6a Data Ascii: H;b;ROu<`vCob59!j<1FIXr;1!I=(ljj(QXQ)(s"/`2+[a}StjOHG=sGZ_3WJb$"IXTmq7NAvgij0Q0N6v
Jan 14, 2025 22:56:55.917452097 CET	1236	IN	Data Raw: ee 2d 59 cf f9 54 7e 76 d4 06 84 5d 29 f0 1e d5 a8 6d e5 71 7f 98 96 b4 38 c9 ec dd 89 62 79 61 87 9f b1 b3 6e 49 65 0b bf 21 ba fc 0f b9 2d f1 b7 4b 43 73 09 8e cb 8b 78 7c 7e a0 c9 53 49 22 82 bd b3 49 c2 72 75 2c bc 9d 91 43 90 db 82 c5 54 0e Data Ascii: -YT~v])mq8byanIe!-KCsx\|~SI"Iru,CT/GJhz[,8+QYtkb9}GVx2tLiC_BYAPA).&}[O4n+fGe~%mX\|5V>vf06G
Jan 14, 2025 22:56:55.922442913 CET	1236	IN	Data Raw: f7 0f 50 d3 b5 78 52 c7 56 c7 fe 66 3b 7f 95 15 cc b2 d9 2f 3c c8 26 f7 59 e7 8a 56 88 f2 3c 42 3d 9e f5 c9 df ac d6 1f 4f ff 00 f9 2d dd 5e e6 d9 c3 5e d3 19 8b d6 29 d8 d4 59 0c b4 39 88 6c e0 a1 af 06 40 c2 f7 a2 2a b0 4a 4d c3 0b 3c 11 a3 4c Data Ascii: PxRVf;/<&YV<B=O-^^)Y9l@*JM<L<UM1x\|SR?1rzsj\|6{)v6YTDp3al,'$2;wDhdYeTx,dVuV^5J:kYh9RZXp+4yY

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49751	50.63.8.11	80	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jan 14, 2025 22:56:55.323970079 CET	294	OUT	GET /files/IMG_10.jpg HTTP/1.1 Host: www.northamericaniron.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 14, 2025 22:56:55.918492079 CET	1236	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 21:56:55 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, Keep-Alive Last-Modified: Mon, 05 Oct 2020 07:04:23 GMT ETag: "10824a8-19b1-5b0e717930bc0" Accept-Ranges: bytes Content-Length: 6577 Keep-Alive: timeout=5 Content-Type: image/jpeg Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 02 01 01 01 01 01 02 01 01 01 02 02 02 02 02 04 03 02 02 02 02 05 04 04 03 04 06 05 06 06 06 05 06 06 06 07 09 08 06 07 09 07 06 06 08 0b 08 09 0a 0a 0a 0a 0a 06 08 0b 0c 0b 0a 0c 09 0a 0a 0a ff db 00 43 01 02 02 02 02 02 02 05 03 03 05 0a 07 06 07 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a ff c0 00 11 08 01 42 03 63 03 01 22 00 02 11 01 03 11 01 ff c4 00 1d 00 01 01 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 05 07 09 04 06 08 03 01 02 ff c4 00 38 10 01 00 01 03 02 03 04 09 03 02 07 01 01 00 00 00 00 01 02 03 04 05 06 07 11 12 08 13 19 a6 14 21 36 57 68 76 b5 d4 e4 15 22 31 17 32 09 16 23 24 41 51 61 25 33 ff c4 00 17 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 01 02 03 ff c4 00 2b 11 01 00 01 02 03 07 04 02 03 01 00 00 00 00 00 00 00 01 02 11 31 41 f0 12 21 22 61 a1 b1 d1 71 91 c1 e1 51 81 03 13 d2 62 ff da [TRUNCATED] Data Ascii: JFIF``CCBc"8!6Whv"12#$AQa%3+1A!"aqQb?_^O6Gj~wMu5S<L<<D!v;\|necYiqk7?MiSLz\|Qqjj>ow&9zm&{D[w67%<Dvkfm\|n1^&MUEtt5DG;ur)8Y4;M}NE&zMs1&}^ri1klSK/nxv9C\|W^nwUhq[4[:\|t\lM_&_x3:\Q^kUE=<j?c?.><}%krgv/p^^G]eOLzz:bjnhy69:eJTWyt
Jan 14, 2025 22:56:55.918586016 CET	224	IN	Data Raw: f2 e7 cf fe 09 dd 13 7c 96 22 6a 98 88 cd b3 1f 11 2e c7 3e f8 3c bf a8 7d b9 e2 25 d8 e7 df 07 97 f5 0f b7 6b d7 73 76 71 e3 5e da e2 06 a1 c3 48 e1 b6 b7 a8 ea 7a 74 57 72 ba 34 bd 1f 26 f4 5e b1 17 26 dc 64 db 8e ee 2a aa cd 55 44 c5 37 39 44 Data Ascii: \|"j.><}%ksvq^HztWr4&^&dUD79DKlo-.gysU6\Q\13?)T/zSkf_c\|_>sovm={32%5m3"{92)]oM*spolk
Jan 14, 2025 22:56:55.918617010 CET	1236	IN	Data Raw: 38 d7 b0 b5 2b d8 b5 e4 d9 d3 f2 f4 7b f6 ef d7 66 98 aa 6a b9 16 ea a6 2a 9a 22 28 ae 66 a8 8e 51 14 cf fd 4b 53 13 13 31 39 7c 6e ee 46 fc 35 ba fd 9b 23 f1 12 ec 73 ef 83 cb fa 87 db 9e 22 5d 8e 7d f0 79 7f 50 fb 77 84 36 ef 64 4e 32 e7 dc db Data Ascii: 8+{fj"(fQKS19\|nF5#s"]}yPw6dN2[hj(2234LU/]((oQ7~[6TM->?.QLsHj]36U%<Dsm}wm:p/ouLESf
Jan 14, 2025 22:56:55.918651104 CET	1236	IN	Data Raw: a8 9f e6 ba e9 8e 7f c4 73 e7 3c a3 d6 e4 20 71 2b d9 dc 6f 98 34 9f a8 63 af a2 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: s< q+o4cY}p}NVdcvqj8:^V];;g/JG.]1O(>1Z~ucus9s\|"<l17~~b2S^>&
Jan 14, 2025 22:56:55.918684959 CET	1236	IN	Data Raw: cd 9c ff 00 45 c4 bf 4e ad 7b 2e 2c de 9c 29 a7 22 ab 75 da e8 8e ab 33 54 44 d5 4c 55 13 4f 5c 44 be 28 71 83 41 d7 36 46 ec db 78 1b 97 4d ab 27 51 ce db d6 ec 5a d0 31 73 ad 62 65 62 e1 e1 e4 5b aa 22 72 e6 ab b5 d3 45 53 62 39 de 98 aa a9 a6 Data Ascii: EN{.,)"u3TDLUO\D(qA6FxM'QZ1sbeb["rESb9}^<"<eZv<HZqA/NWcVMXZ\|cZ3M*St\|HhxOuMzKk^y6&{ft)Du=UU9K#?x=DyG
Jan 14, 2025 22:56:55.918716908 CET	672	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 e2 57 b3 b8 df 30 69 3f 50 c7 5f 40 Data Ascii: @W0i?P_@W0i?P_%{;u%{;u
Jan 14, 2025 22:56:56.023977041 CET	1034	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 e2 57 b3 b8 df 30 69 3f 50 c7 5f 40 e2 57 b3 b8 df 30 69 3f 50 c7 5f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: @W0i?P_@W0i?P_%{;u%{;u@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49762	50.63.8.11	80	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jan 14, 2025 22:57:08.657933950 CET	494	OUT	GET /about.html HTTP/1.1 Host: www.northamericaniron.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Referer: http://www.northamericaniron.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 14, 2025 22:57:09.214212894 CET	1236	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 21:57:09 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, Keep-Alive Last-Modified: Mon, 05 Oct 2020 07:17:54 GMT ETag: "1041740-11f9-5b0e747e9ec80-gzip" Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 1521 Keep-Alive: timeout=5 Content-Type: text/html Data Raw: 1f 8b 08 00 00 00 00 00 00 03 bd 58 db 6e db 38 10 7d 5f 60 ff 61 56 c5 36 6d 11 eb ea 8b 2c 5f 80 c4 71 d3 74 73 db d8 6d 37 4f 01 2d d1 36 5b 49 d4 92 54 5c b7 e8 bf 2f 29 d9 b1 64 cb 69 0a 04 9b 20 b6 44 0e cf 99 33 24 67 c8 74 ff 38 b9 1a 8c 6f af 87 30 17 51 08 d7 1f 8e cf cf 06 a0 d5 0c e3 93 33 30 8c 93 f1 09 bc 1b 5f 9c 43 5d 37 2d 18 33 14 73 22 08 8d 51 68 18 c3 4b 0d b4 b9 10 89 67 18 8b c5 42 5f 38 3a 65 33 63 7c 63 28 a8 ba 11 52 ca b1 1e 88 40 eb ff fe 5b 57 b5 c9 6f f5 84 51 a0 5a 22 2c 10 c4 28 c2 3d 6d 86 63 cc 90 a0 4c 03 9f c6 02 c7 a2 a7 0d e8 74 8a f1 20 4d e0 23 e1 29 0a 61 44 04 86 13 cc c9 4c 1a 1f c2 47 cc b8 f4 04 5a ba 09 c7 29 09 03 70 61 4a 19 7c 22 71 40 17 5c 7b a0 50 2e d6 f0 bf 29 b9 57 a0 19 7a 6d bc 4c 70 81 4b e0 af 22 f3 ba e3 cf 11 e3 58 f4 52 31 ad b9 d5 18 bf ee 2c bc 52 f1 f1 33 1b 3f 4d e4 53 f4 5a db 0a 81 cf 30 12 38 28 60 8e 53 7c 08 32 ea 6f f1 04 6c d3 b2 c0 6c 79 75 d7 b3 9a 70 7a 31 d6 b2 58 4a 08 41 44 88 fb 70 b1 84 4f 78 c2 15 6b 0d 8e 26 34 15 d0 [TRUNCATED] Data Ascii: Xn8}_`aV6m,_qtsm7O-6[IT\/)di D3$gt8o0Q30_C]7-3s"QhKgB_8:e3c\|c(R@[WoQZ",(=mcLt M#)aDLGZ)paJ\|"q@\{P.)WzmLpK"XR1,R3?MSZ08(`S\|2ollyupz1XJADpOxk&45eAH+>9o`<gpo+lE$\zc4dMLfsE(!{2~rU;>)^L"0W1oqu~8H@gwHh<44LgTxVS=5zf~aOi%ka>.;0`\Oq%-4v`aJc?J,0`r(Jo.(ISX@=l)-Gc7,Y^qXE-,kX'4Xw!6#/$j2?kN~ 4j$B3AWSbn(YNf})]UvIEh'K{2~^VMiZgG2%fr3)9]ofUQ02)P(Wgf=y0n5L2FUE5Vb
Jan 14, 2025 22:57:09.214271069 CET	633	IN	Data Raw: 6a 03 12 c8 0a bb 76 2f af 7b 59 bb 1f 22 ce 7b da 43 56 d7 fa 5d 59 ec 19 9e f6 34 a4 8a a8 ae 0e 05 1a f4 bb 2a 28 9c f9 3d 2d 9f c7 b3 8b d3 3b ab a1 26 51 03 40 a1 ac d6 5a ee 79 4f b3 d4 de d0 56 aa 7a 9a ad de fa 5d 03 c9 3f c9 b8 97 ba 5d Data Ascii: jv/{Y"{CV]Y4(=-;&Q@ZyOVz]?];/ht.^p&w's<JYyT=Y('PVxDacWLlbDBbkD{[b]3Il_S!tm+%:Kgh6[EG]'=9e
Jan 14, 2025 22:57:09.248516083 CET	409	OUT	GET /files/IMG_15.jpg HTTP/1.1 Host: www.northamericaniron.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.northamericaniron.com/about.html Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 14, 2025 22:57:09.412400007 CET	1236	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 21:57:09 GMT Server: Apache Last-Modified: Mon, 05 Oct 2020 07:04:23 GMT ETag: "10824ab-508-5b0e717930bc0" Accept-Ranges: bytes Content-Length: 1288 Keep-Alive: timeout=5 Connection: Keep-Alive Content-Type: image/jpeg Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 02 01 01 01 01 01 02 01 01 01 02 02 02 02 02 04 03 02 02 02 02 05 04 04 03 04 06 05 06 06 06 05 06 06 06 07 09 08 06 07 09 07 06 06 08 0b 08 09 0a 0a 0a 0a 0a 06 08 0b 0c 0b 0a 0c 09 0a 0a 0a ff db 00 43 01 02 02 02 02 02 02 05 03 03 05 0a 07 06 07 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a ff c0 00 11 08 00 1d 00 6d 03 01 22 00 02 11 01 03 11 01 ff c4 00 19 00 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 06 07 05 08 03 ff c4 00 2c 10 00 01 03 02 03 08 02 02 03 01 00 00 00 00 00 00 02 01 03 04 00 05 06 15 52 07 11 12 13 14 51 53 a1 21 91 08 22 23 31 32 71 ff c4 00 1b 01 00 02 02 03 01 00 00 00 00 00 00 00 00 00 00 00 00 04 02 03 05 06 07 09 ff c4 00 2b 11 00 01 02 04 05 03 03 05 01 00 00 00 00 00 00 00 01 02 11 00 03 12 21 04 05 14 31 61 15 41 51 22 32 81 06 13 16 42 91 e1 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 [TRUNCATED] Data Ascii: JFIF``CCm",RQS!"#12q+!1aAQ"2B?l~El~Eu3EutGK5.h'u.b6?"6?"^3$_2AO^v-Il&1'.#(Rx$O`h(?J.lXS[v.>]gR6@\dbAfKvc-3c-Y9~a}8ui,G{%=Uucaeem::h'PSd&wf~<_h\4RNjnP>w6?"6?"%.F[$=\|:$2`AR'8H"d#f~0A\Xg1y<QHS9PbI\LSY_f~'\.l~El~Eu3Eti8s9j:wwu[64=y,u5u;:{{KLb,p[p]N.1]QS;.{'A-5B2&\.T.LI~_uNfx"
Jan 14, 2025 22:57:09.412436962 CET	322	IN	Data Raw: 62 41 76 7f 87 6e fc 9f e9 87 f0 9f 51 e6 58 05 21 58 79 85 25 04 94 b3 58 aa 97 dc 1d e9 4e ef ed 0c d1 b4 b3 f9 59 89 ad b3 ad c3 87 30 7e 1f b5 d9 ed f1 e6 b2 58 6a 33 32 5c 85 2c 66 0a 04 ae 72 bc fb 8f 1a b8 02 03 bd 1d 4e 14 6c 78 38 55 37 Data Ascii: bAvnQX!Xy%XNY0~Xj32\,frNlx8U7(IX'ds0@\|dEuM^RR"EUkwuUl\|1mCQlc8Wn#y}8;%'Yj:wwuWIL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49763	50.63.8.11	80	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jan 14, 2025 22:57:09.248464108 CET	409	OUT	GET /files/IMG_22.jpg HTTP/1.1 Host: www.northamericaniron.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.northamericaniron.com/about.html Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 14, 2025 22:57:09.409087896 CET	1148	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 21:57:09 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, Keep-Alive Last-Modified: Mon, 05 Oct 2020 07:04:23 GMT ETag: "10824ac-355-5b0e717930bc0" Accept-Ranges: bytes Content-Length: 853 Keep-Alive: timeout=5 Content-Type: image/jpeg Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 02 01 01 01 01 01 02 01 01 01 02 02 02 02 02 04 03 02 02 02 02 05 04 04 03 04 06 05 06 06 06 05 06 06 06 07 09 08 06 07 09 07 06 06 08 0b 08 09 0a 0a 0a 0a 0a 06 08 0b 0c 0b 0a 0c 09 0a 0a 0a ff db 00 43 01 02 02 02 02 02 02 05 03 03 05 0a 07 06 07 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a ff c0 00 11 08 00 1d 00 6d 03 01 22 00 02 11 01 03 11 01 ff c4 00 18 00 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 07 06 05 01 ff c4 00 27 10 00 01 03 04 02 02 02 01 05 00 00 00 00 00 00 00 01 02 03 04 00 05 06 11 12 13 07 14 08 15 21 22 23 42 51 61 ff c4 00 16 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 02 ff c4 00 24 11 00 02 01 02 05 04 03 00 00 00 00 00 00 00 00 00 00 01 11 31 f0 02 41 91 b1 d1 21 71 c1 e1 12 51 a1 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 a8 52 94 a0 14 a5 28 05 2b 53 e0 fc 6e cd 98 f9 97 15 [TRUNCATED] Data Ascii: JFIF``CCm"'!"#BQa$1A!qQ?R(+Sn(~C,;TRI;\|`xf[ij9u#m_r<O%K){&EUk/lK-l~Srnrc'$-+[H)^m+R/,e,DK(pQZ[.Uwb1UJetjY}M3y4QGEQu*?\Jbx]W)@)JPRSXej,0=kHPI`oDWcFi3xLR<TtjetHIp==-ezeYMh}&9:K<{/9)Z2fE6/ed8-Mfg:'EDN>EE)JJR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49764	50.63.8.11	80	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jan 14, 2025 22:57:09.253745079 CET	409	OUT	GET /files/IMG_24.jpg HTTP/1.1 Host: www.northamericaniron.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.northamericaniron.com/about.html Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 14, 2025 22:57:09.832762003 CET	1236	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 21:57:09 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, Keep-Alive Last-Modified: Mon, 05 Oct 2020 07:04:23 GMT ETag: "10824ad-7e0-5b0e717930bc0" Accept-Ranges: bytes Content-Length: 2016 Keep-Alive: timeout=5 Content-Type: image/jpeg Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 02 01 01 01 01 01 02 01 01 01 02 02 02 02 02 04 03 02 02 02 02 05 04 04 03 04 06 05 06 06 06 05 06 06 06 07 09 08 06 07 09 07 06 06 08 0b 08 09 0a 0a 0a 0a 0a 06 08 0b 0c 0b 0a 0c 09 0a 0a 0a ff db 00 43 01 02 02 02 02 02 02 05 03 03 05 0a 07 06 07 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a ff c0 00 11 08 01 42 03 63 03 01 22 00 02 11 01 03 11 01 ff c4 00 15 00 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 ff c4 00 14 10 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff c4 00 14 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff c4 00 14 11 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 bf 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: JFIF``CCBc"?
Jan 14, 2025 22:57:09.832814932 CET	1076	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49765	50.63.8.11	80	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jan 14, 2025 22:57:09.254265070 CET	409	OUT	GET /files/IMG_25.jpg HTTP/1.1 Host: www.northamericaniron.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.northamericaniron.com/about.html Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 14, 2025 22:57:09.839962959 CET	1236	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 21:57:09 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, Keep-Alive Last-Modified: Mon, 05 Oct 2020 07:04:23 GMT ETag: "10824ae-f917-5b0e717930bc0" Accept-Ranges: bytes Content-Length: 63767 Keep-Alive: timeout=5 Content-Type: image/jpeg Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 02 01 01 01 01 01 02 01 01 01 02 02 02 02 02 04 03 02 02 02 02 05 04 04 03 04 06 05 06 06 06 05 06 06 06 07 09 08 06 07 09 07 06 06 08 0b 08 09 0a 0a 0a 0a 0a 06 08 0b 0c 0b 0a 0c 09 0a 0a 0a ff db 00 43 01 02 02 02 02 02 02 05 03 03 05 0a 07 06 07 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a ff c0 00 11 08 00 de 03 63 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 00 02 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 03 07 02 04 05 06 08 09 01 0a ff c4 00 4f 10 00 02 01 03 03 03 02 04 02 07 05 05 05 05 06 07 01 02 03 04 05 11 00 06 12 07 21 51 08 13 22 31 41 61 09 14 15 23 32 71 91 a1 f0 16 62 81 c1 d2 17 24 42 b1 d1 0a 25 95 e1 f1 18 33 34 43 52 19 26 82 85 94 a2 53 54 56 57 65 75 c2 ff c4 00 1d 01 01 00 02 03 01 01 01 01 00 00 00 00 00 00 00 00 00 02 04 01 03 05 08 06 07 09 ff c4 00 52 11 00 01 03 02 03 03 07 06 09 09 04 0a [TRUNCATED] Data Ascii: JFIF``CCc"O!Q"1Aa#2qb$B%34CR&STVWeuR!1AQa"q2Sr#BCRb$34DEUcsT%&'5?`x0<W\|h5jjGQh5_BZ4`x\|i!-T`x0<W\|h40<4p_HKUU_8/$%F/F\|IjjGQh5_BZ4`x\|i!-T`x0<W\|h40<4p_HKUU_8/$%F/F\|IjjGQh5_BZ4`x\|i!-T`x0<W\|h40<4p_HKUU_8/$%F/F\|IjjGQh5_BZ43-u?aw/I[~=O4.rxoWdldJGw~
Jan 14, 2025 22:57:09.840020895 CET	224	IN	Data Raw: 2b 0f 89 c4 ba 88 a4 c6 b8 16 b5 a6 49 7d b0 6e d0 71 cb 35 1c 0b 55 c4 b7 11 6d 9b 39 c6 3d 93 ff 00 4d 56 96 4b bc 9f b1 68 a9 6f dd 4e c7 fc b5 21 55 53 52 bd 5a 91 12 aa f6 50 91 c6 40 fa fd 7f 90 ff 00 3d 5c 50 d0 ba 85 32 d3 33 2f c2 5b f5 Data Ascii: +I}nq5Um9=MVKhoN!USRZP@=\P23/[7{$Y_?`mr6=?1W=[jcC~SvOP;\Tc6_nWQ5PCk
Jan 14, 2025 22:57:09.840051889 CET	1236	IN	Data Raw: 31 9c 67 f2 4f f3 fe 1a 9e 56 d9 52 15 5b f2 f0 aa 91 92 04 e3 b1 ef 9c f6 ef fb be fa bf 82 9a 30 38 ca f1 05 19 ee 26 f9 76 07 fa 3f 7d 44 ef 8d 71 a5 26 f6 95 96 fc 1c b6 29 90 76 85 50 7e 85 2e f5 ce e7 67 ee b0 32 76 b5 c0 67 e5 fe e3 27 fd Data Ascii: 1gOVR[08&v?}Dq&)vP~.g2vg'5RnGPIt<6!tHZSON;}1#J#-FKs#\|y/uzu6-dQ]8K<.$\|LqigoQ+}]>
Jan 14, 2025 22:57:09.840075016 CET	1236	IN	Data Raw: 0f 8b 4d 22 9e 48 a4 2f 1c 1e d8 fe 5a c1 df 1a e3 f6 4d ed 2b 3f 9b c6 c5 cb fd 3e af a9 4f bd 72 ef f6 07 7c 7f fd 15 75 ff 00 c3 65 ff 00 4e 8f ec 1e f6 1f 3d 99 75 ff 00 c3 a4 ff 00 4e ba 7c c2 80 a9 23 fe 1f e3 aa 05 38 20 ae 4f 2c 64 0e 5d Data Ascii: M"H/ZM+?>Or\|ueN=uN\|#8 O,d]4\|{\~WM>{6?O\|}\|M<.J#9=a?7}5a<N?3s'uIBG?899X7
Jan 14, 2025 22:57:09.840094090 CET	1236	IN	Data Raw: a4 6e 6d 48 d9 00 66 4e 47 18 fe 5f d0 d2 62 a6 6c 02 ca 72 57 05 4b e0 03 9f eb ff 00 2d 5e d3 46 0b 05 23 07 3d d8 f6 1f 3f eb f9 eb e1 dc e5 ea a6 07 44 05 79 47 5f 43 0b fb 70 5b 23 4e 3f 3c 03 db eb f3 fa e7 fc b5 7b 1d dc 87 31 2d 02 80 18 Data Ascii: nmHfNG_blrWK-^F#=?DyG_Cp[#N?<{1-w5cK(<*Rg;2#B#8j;T^Y%3F2#9j$v\|q_53g2b3~Zz&c{?$<`o\|NE
Jan 14, 2025 22:57:09.840110064 CET	672	IN	Data Raw: ac a4 28 90 56 28 d3 06 91 9d b0 a3 e5 9c 63 27 ff 00 5d 52 d1 b1 38 70 58 06 ec 07 d0 e4 eb 20 61 72 c3 01 58 64 af 73 db 1d fb 76 f9 e9 26 9f 1d f8 9c e7 27 2c 09 c7 f5 fe 7a c9 ac a4 28 ac 73 41 c5 09 95 48 ee 3b 93 8f fd 7e 67 5f 0c 22 36 c4 Data Ascii: (V(c']R8pX arXdsv&',z(sAH;~g_"6k,3w8:D~e~\>*M8R`>d_VPCHX8bT6~>Kg%F{uV'lIOr5CS{@@~d$heGg>ZZ+V+\|
Jan 14, 2025 22:57:09.840127945 CET	1236	IN	Data Raw: e4 e9 29 62 5f 05 f1 a3 82 f8 d3 38 0f 27 47 01 e4 e9 29 62 5f 05 f1 a3 82 f8 d3 38 0f 27 47 01 e4 e9 29 62 5f 05 f1 a3 82 f8 d3 38 0f 27 47 01 e4 e9 29 62 5f 05 f1 a3 82 f8 d3 38 0f 27 47 01 e4 e9 29 62 5f 05 f1 a3 82 f8 d3 38 0f 27 47 01 e4 e9 Data Ascii: )b_8'G)b_8'G)b_8'G)b_8'G)b_8'G)b_8'G)b_8'G)b_8'G)b_8'G)b_8'G)b_8'G)b_8'G)b_:M(*4'9ky:8M@S!$>c8>
Jan 14, 2025 22:57:09.840140104 CET	224	IN	Data Raw: e6 3b 9f 97 fd 34 b7 98 03 97 55 c0 18 39 fe bf ac 68 5c 56 79 21 cc be 32 f1 8f 38 c7 cb bf 7c 11 a4 94 70 4b 29 25 33 83 fd 7f 96 ab 77 6c 71 2c 06 0f d4 60 81 fb f4 a6 9d 24 c2 b3 02 09 00 03 f5 fb 7d 8f fd 35 8b f2 59 14 e5 2a 48 7e 1c 02 57 Data Ascii: ;4U9h\Vy!28\|pK)%3wlq,`$}5YH~Wd/`~zL<rA}fZL#by\|Km>o>z7=My?,!__=~vSE8_$T\]=<~[C3yI#9^
Jan 14, 2025 22:57:09.840157032 CET	1236	IN	Data Raw: 7f 40 6a 83 2a e3 8b b7 62 c0 8c 60 1c 1d 46 f2 a7 c9 88 0a 89 a3 3c b8 9f 91 3f 32 33 93 df b9 fa 63 e5 a5 34 25 9d 95 07 1c af 6c a0 00 9c 8f f2 d7 d6 9d 32 64 8c e7 c9 55 fa fc f1 fd 7d bc e9 32 c9 1b b1 69 18 7c 3d c6 7c f6 ef 8f 3a c5 e8 29 Data Ascii: @jb`F<?23c4%l2dU}2i\|=\|:)KvVN2!$c>YP'+diJsV#0f99l~}f[9q3I~Y?x8=1X;P$3n?@'Rv_fg1_4
Jan 14, 2025 22:57:09.840177059 CET	1236	IN	Data Raw: 90 46 3c f6 f9 8d 39 46 94 2c 70 5b 74 6e 98 02 57 60 a0 7d 06 7b fd 49 fb ea be 5c 7e 12 bc 88 ec 7f c7 5a f5 9b 7b 6d 4b ec 4f 25 97 73 50 d6 2c 05 04 9f 94 aa 59 44 7c d9 15 43 71 27 8e 5a 44 03 3f 57 51 f5 1a 75 9f 7b 6d 1b da 44 6c bb ae d9 Data Ascii: F<9F,p[tnW`}{I\~Z{mKO%sP,YD\|Cq'ZD?WQu{mDlT`b`9F0r_y(F<75'8Z}im~mzt'=8wzY%zw)}fC%lI'1B(9b@;;:>
Jan 14, 2025 22:57:09.845519066 CET	1236	IN	Data Raw: 55 3f d7 df 4b 32 77 0d c8 02 7e 60 7d 47 cb 5c 65 72 fc 4e b7 02 de bf 27 6c d9 96 8f cb c9 52 51 66 a8 ae 64 2b 19 70 15 dc 0c 85 21 58 16 19 3f 23 8c ea ca f3 f8 a5 ee 6b 5c ed 4b 17 4e ac 95 ac b5 4d 05 43 d1 df 15 d6 32 09 05 d4 ae 41 4c 8e Data Ascii: U?K2w~`}G\erN'lRQfd+p!X?#k\KNMC2ALqJDzWRq199vyUT+;/qD[zb@`5Aj}KKLcZEd>5hV]jG%@0F;peK_EOUo1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49766	50.63.8.11	80	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jan 14, 2025 22:57:09.423069000 CET	294	OUT	GET /files/IMG_22.jpg HTTP/1.1 Host: www.northamericaniron.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 14, 2025 22:57:09.993910074 CET	1148	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 21:57:09 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, Keep-Alive Last-Modified: Mon, 05 Oct 2020 07:04:23 GMT ETag: "10824ac-355-5b0e717930bc0" Accept-Ranges: bytes Content-Length: 853 Keep-Alive: timeout=5 Content-Type: image/jpeg Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 02 01 01 01 01 01 02 01 01 01 02 02 02 02 02 04 03 02 02 02 02 05 04 04 03 04 06 05 06 06 06 05 06 06 06 07 09 08 06 07 09 07 06 06 08 0b 08 09 0a 0a 0a 0a 0a 06 08 0b 0c 0b 0a 0c 09 0a 0a 0a ff db 00 43 01 02 02 02 02 02 02 05 03 03 05 0a 07 06 07 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a ff c0 00 11 08 00 1d 00 6d 03 01 22 00 02 11 01 03 11 01 ff c4 00 18 00 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 07 06 05 01 ff c4 00 27 10 00 01 03 04 02 02 02 01 05 00 00 00 00 00 00 00 01 02 03 04 00 05 06 11 12 13 07 14 08 15 21 22 23 42 51 61 ff c4 00 16 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 02 ff c4 00 24 11 00 02 01 02 05 04 03 00 00 00 00 00 00 00 00 00 00 01 11 31 f0 02 41 91 b1 d1 21 71 c1 e1 12 51 a1 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 a8 52 94 a0 14 a5 28 05 2b 53 e0 fc 6e cd 98 f9 97 15 [TRUNCATED] Data Ascii: JFIF``CCm"'!"#BQa$1A!qQ?R(+Sn(~C,;TRI;\|`xf[ij9u#m_r<O%K){&EUk/lK-l~Srnrc'$-+[H)^m+R/,e,DK(pQZ[.Uwb1UJetjY}M3y4QGEQu*?\Jbx]W)@)JPRSXej,0=kHPI`oDWcFi3xLR<TtjetHIp==-ezeYMh}&9:K<{/9)Z2fE6/ed8-Mfg:'EDN>EE)JJR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49767	50.63.8.11	80	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jan 14, 2025 22:57:09.423985958 CET	294	OUT	GET /files/IMG_15.jpg HTTP/1.1 Host: www.northamericaniron.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 14, 2025 22:57:10.008574963 CET	1236	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 21:57:09 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, Keep-Alive Last-Modified: Mon, 05 Oct 2020 07:04:23 GMT ETag: "10824ab-508-5b0e717930bc0" Accept-Ranges: bytes Content-Length: 1288 Keep-Alive: timeout=5 Content-Type: image/jpeg Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 02 01 01 01 01 01 02 01 01 01 02 02 02 02 02 04 03 02 02 02 02 05 04 04 03 04 06 05 06 06 06 05 06 06 06 07 09 08 06 07 09 07 06 06 08 0b 08 09 0a 0a 0a 0a 0a 06 08 0b 0c 0b 0a 0c 09 0a 0a 0a ff db 00 43 01 02 02 02 02 02 02 05 03 03 05 0a 07 06 07 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a ff c0 00 11 08 00 1d 00 6d 03 01 22 00 02 11 01 03 11 01 ff c4 00 19 00 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 06 07 05 08 03 ff c4 00 2c 10 00 01 03 02 03 08 02 02 03 01 00 00 00 00 00 00 02 01 03 04 00 05 06 15 52 07 11 12 13 14 51 53 a1 21 91 08 22 23 31 32 71 ff c4 00 1b 01 00 02 02 03 01 00 00 00 00 00 00 00 00 00 00 00 00 04 02 03 05 06 07 09 ff c4 00 2b 11 00 01 02 04 05 03 03 05 01 00 00 00 00 00 00 00 01 02 11 00 03 12 21 04 05 14 31 61 15 41 51 22 32 81 06 13 16 42 91 e1 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 [TRUNCATED] Data Ascii: JFIF``CCm",RQS!"#12q+!1aAQ"2B?l~El~Eu3EutGK5.h'u.b6?"6?"^3$_2AO^v-Il&1'.#(Rx$O`h(?J.lXS[v.>]gR6@\dbAfKvc-3c-Y9~a}8ui,G{%=Uucaeem::h'PSd&wf~<_h\4RNjnP>w6?"6?"%.F[$=\|:$2`AR'8H"d#f~0A\Xg1y<QHS9PbI\LSY_f~'\.l~El~Eu3Eti8s9j:wwu[64=y,u5u;:{{KLb,p[p]N.1]QS;.{'A-5B2&\.T.
Jan 14, 2025 22:57:10.008614063 CET	348	IN	Data Raw: 4c 49 17 7e f4 5f 8d ca 88 b5 96 75 ee f6 f7 4e bd de de ea 89 b9 66 1e 78 22 62 41 76 7f 87 6e fc 9f e9 87 f0 9f 51 e6 58 05 21 58 79 85 25 04 94 b3 58 aa 97 dc 1d e9 4e ef ed 0c d1 b4 b3 f9 59 89 ad b3 ad c3 87 30 7e 1f b5 d9 ed f1 e6 b2 58 6a Data Ascii: LI~_uNfx"bAvnQX!Xy%XNY0~Xj32\,frNlx8U7(IX'ds0@\|dEuM^RR"EUkwuUl\|1mCQlc8Wn#y}8;%'
Jan 14, 2025 22:57:10.035563946 CET	294	OUT	GET /files/IMG_25.jpg HTTP/1.1 Host: www.northamericaniron.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 14, 2025 22:57:10.197272062 CET	1236	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 21:57:10 GMT Server: Apache Last-Modified: Mon, 05 Oct 2020 07:04:23 GMT ETag: "10824ae-f917-5b0e717930bc0" Accept-Ranges: bytes Content-Length: 63767 Keep-Alive: timeout=5 Connection: Keep-Alive Content-Type: image/jpeg Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 02 01 01 01 01 01 02 01 01 01 02 02 02 02 02 04 03 02 02 02 02 05 04 04 03 04 06 05 06 06 06 05 06 06 06 07 09 08 06 07 09 07 06 06 08 0b 08 09 0a 0a 0a 0a 0a 06 08 0b 0c 0b 0a 0c 09 0a 0a 0a ff db 00 43 01 02 02 02 02 02 02 05 03 03 05 0a 07 06 07 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a ff c0 00 11 08 00 de 03 63 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 00 02 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 03 07 02 04 05 06 08 09 01 0a ff c4 00 4f 10 00 02 01 03 03 03 02 04 02 07 05 05 05 05 06 07 01 02 03 04 05 11 00 06 12 07 21 51 08 13 22 31 41 61 09 14 15 23 32 71 91 a1 f0 16 62 81 c1 d2 17 24 42 b1 d1 0a 25 95 e1 f1 18 33 34 43 52 19 26 82 85 94 a2 53 54 56 57 65 75 c2 ff c4 00 1d 01 01 00 02 03 01 01 01 01 00 00 00 00 00 00 00 00 00 02 04 01 03 05 08 06 07 09 ff c4 00 52 11 00 01 03 02 03 03 07 06 09 09 04 0a [TRUNCATED] Data Ascii: JFIF``CCc"O!Q"1Aa#2qb$B%34CR&STVWeuR!1AQa"q2Sr#BCRb$34DEUcsT%&'5?`x0<W\|h5jjGQh5_BZ4`x\|i!-T`x0<W\|h40<4p_HKUU_8/$%F/F\|IjjGQh5_BZ4`x\|i!-T`x0<W\|h40<4p_HKUU_8/$%F/F\|IjjGQh5_BZ4`x\|i!-T`x0<W\|h40<4p_HKUU_8/$%F/F\|IjjGQh5_BZ43-u?aw/I[~=O4.rxoWdldJGw~+I}nq5U
Jan 14, 2025 22:57:10.197320938 CET	1236	IN	Data Raw: 6d 9b 39 c6 3d 93 ff 00 4d 56 96 4b bc 9f b1 68 a9 6f dd 4e c7 fc b5 21 55 53 52 bd 5a 91 12 aa f6 50 91 c6 40 fa fd 7f 90 ff 00 3d 5c 50 d0 ba 85 32 d3 33 2f c2 5b f5 98 c1 cf fe a7 fa c9 e2 37 7b ab 96 cf 24 07 59 5f ae 3f e0 e9 b1 9a 60 6d 0a Data Ascii: m9=MVKhoN!USRZP@=\P23/[7{$Y_?`mr6=?1W=[jcC~SvOP;\Tc6_nWQ5PCk1gOVR[08&v?
Jan 14, 2025 22:57:10.197357893 CET	1236	IN	Data Raw: 7f ec 0e f8 c6 7f b1 57 5c 79 fd 1b 2f fa 74 0d 85 bd cf 71 b2 ee bd fe 5f f7 74 bf e9 d7 51 d4 db 66 a6 90 c7 32 90 d9 2a c1 87 cb 3f 5f f9 6a 81 4b c5 b2 a3 b1 1d ce 7b f9 c6 83 7c 6b 91 3c 93 7b 4a c1 f8 3b ec 60 7f db ea fa 94 fb d7 2f 9d 85 Data Ascii: W\y/tq_tQf2?_jK{\|k<{J;`/Aw^?_v=Sjv\|}oiXv0W\|l~[\|*uSI'lar3XM"H/ZM+?>Or\|ue
Jan 14, 2025 22:57:10.197391033 CET	1236	IN	Data Raw: e0 e9 be df df 47 b7 f7 d2 e4 b5 2b 07 c1 d1 83 e0 e9 be df df 47 b7 f7 d2 e4 b5 2b 07 c1 d1 83 e0 e9 be df df 47 b7 f7 d2 e4 b5 2b 07 c1 d1 83 e0 e9 be df df 47 b7 f7 d2 e4 b5 2b 07 c1 d1 83 e0 e9 be df df 47 b7 f7 d2 e4 b5 2b 07 c1 d1 83 e0 e9 Data Ascii: G+G+G+G+G+G+G+i2hG=\|q5[hQGW-C?UTE\|#~sTnmHfNG_blrWK-^F#=?
Jan 14, 2025 22:57:10.197443962 CET	896	IN	Data Raw: 92 9c 4f d4 78 f1 ff 00 31 ac ab 51 77 3c 63 18 24 8f 9f db e7 aa 0c 0a 8b 8e 1c bc 1c 0e ff 00 d7 f9 eb 3c b6 49 c8 90 b1 bf 96 6f 73 2a 83 07 e6 30 72 7e fa 05 31 c7 63 91 f4 18 ce 35 90 30 0e 20 7b 40 78 c1 f9 8f be a9 78 49 52 a7 38 5f 96 06 Data Ascii: Ox1Qw<c$<Ios*0r~1c50 {@xxIR8_GX5sNHXI$#-$p~-dZYg$?{\|ZV9:H6}\}F'AGl@\|p;1Q?(V(c']R8pX arXdsv
Jan 14, 2025 22:57:10.197477102 CET	1236	IN	Data Raw: d3 38 0f 27 47 01 e4 e9 29 62 5f 05 f1 a3 82 f8 d3 38 0f 27 47 01 e4 e9 29 62 5f 05 f1 a3 82 f8 d3 38 0f 27 47 01 e4 e9 29 62 5f 05 f1 a3 82 f8 d3 38 0f 27 47 01 e4 e9 29 62 5f 05 f1 a3 82 f8 d3 38 0f 27 47 01 e4 e9 29 62 5f 05 f1 a3 82 f8 d3 38 Data Ascii: 8'G)b_8'G)b_8'G)b_8'G)b_8'G)b_8'G)b_8'G)b_8'G)b_8'G)b_8'G)b_8'G)b_:M(*4'9ky:8M@S!$>c8>~}j?HG;gh3
Jan 14, 2025 22:57:10.197510004 CET	224	IN	Data Raw: 8f 38 c7 cb bf 7c 11 a4 94 70 4b 29 25 33 83 fd 7f 96 ab 77 6c 71 2c 06 0f d4 60 81 fb f4 a6 9d 24 c2 b3 02 09 00 03 f5 fb 7d 8f fd 35 8b f2 59 14 e5 2a 48 7e 1c 02 57 04 64 2f 60 7e 7a 4c 90 85 3c d9 b2 72 41 c8 f9 e0 7d b4 d9 66 ec 10 1f 96 0f Data Ascii: 8\|pK)%3wlq,`$}5YH~Wd/`~zL<rA}fZL#by\|Km>o>z7=My?,!__=~vSE8_$T\]=<~[C3yI#9^@j*b`F<
Jan 14, 2025 22:57:10.197540045 CET	1236	IN	Data Raw: 3f 32 33 93 df b9 fa 63 e5 a5 34 25 9d 95 07 1c af 6c a0 00 9c 8f f2 d7 d6 9d 32 64 8c e7 c9 55 fa fc f1 fd 7d bc e9 32 c9 1b b1 69 18 7c 3d c6 7c f6 ef 8f 3a c5 e8 29 88 4b 76 56 4e 32 21 24 63 e4 3e bf e1 8f eb e7 ab 59 f9 b8 fd 50 27 2b f1 1c Data Ascii: ?23c4%l2dU}2i\|=\|:)KvVN2!$c>YP'+diJsV#0f99l~}f[9*q3I~Y?x8=1X;P$3n?@'Rv_fg1_4x2Fp>FjN
Jan 14, 2025 22:57:10.197573900 CET	224	IN	Data Raw: be 5c 7e 12 bc 88 ec 7f c7 5a f5 9b 7b 6d 4b ec 4f 25 97 73 50 d6 2c 05 04 9f 94 aa 59 44 7c d9 15 43 71 27 8e 5a 44 03 3f 57 51 f5 1a 75 9f 7b 6d 1b da 44 6c bb ae d9 54 b2 cc 60 8c d3 dc 62 60 d2 82 39 46 30 dd dc 72 5f 87 e7 dc 79 1a 8f 28 d1 Data Ascii: \~Z{mKO%sP,YD\|Cq'ZD?WQu{mDlT`b`9F0r_y(F<75'8Z}im~mzt'=8wzY%zw)}fC%lI'1B(9b@;;:>u2
Jan 14, 2025 22:57:10.197668076 CET	1236	IN	Data Raw: 8e 05 ed 99 0c 32 91 c5 98 2a b8 c2 77 46 c8 2a dd c3 02 19 49 04 1d 5d 5b 3d 5a fa 78 ba 81 1d bf aa 34 52 92 1b 9a c7 0c d9 42 01 24 36 53 b1 18 fa f7 ef f2 f9 6a 06 ab 06 52 b3 c9 3b 99 49 d1 f3 90 82 09 e2 4e 70 70 3f af 99 d3 d1 8a 7c c0 3e Data Ascii: 2wFI][=Zx4RB$6SjR;INpp?\|>ru\Ht6e7:fjNfTAiZ<vv[uJ^QOP 1U,fPX65MXpGc30?mhoT^sN#Mj)Vq,L0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49768	50.63.8.11	80	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jan 14, 2025 22:57:09.845412970 CET	294	OUT	GET /files/IMG_24.jpg HTTP/1.1 Host: www.northamericaniron.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 14, 2025 22:57:10.412861109 CET	1236	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 21:57:10 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, Keep-Alive Last-Modified: Mon, 05 Oct 2020 07:04:23 GMT ETag: "10824ad-7e0-5b0e717930bc0" Accept-Ranges: bytes Content-Length: 2016 Keep-Alive: timeout=5 Content-Type: image/jpeg Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 02 01 01 01 01 01 02 01 01 01 02 02 02 02 02 04 03 02 02 02 02 05 04 04 03 04 06 05 06 06 06 05 06 06 06 07 09 08 06 07 09 07 06 06 08 0b 08 09 0a 0a 0a 0a 0a 06 08 0b 0c 0b 0a 0c 09 0a 0a 0a ff db 00 43 01 02 02 02 02 02 02 05 03 03 05 0a 07 06 07 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a ff c0 00 11 08 01 42 03 63 03 01 22 00 02 11 01 03 11 01 ff c4 00 15 00 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 ff c4 00 14 10 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff c4 00 14 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff c4 00 14 11 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 bf 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: JFIF``CCBc"?
Jan 14, 2025 22:57:10.412909031 CET	1076	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 1440, Parent PID: 6048

General

Target ID:	0
Start time:	16:56:43
Start date:	14/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 5352, Parent PID: 1440

General

Target ID:	2
Start time:	16:56:46
Start date:	14/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2108 --field-trial-handle=2000,i,13573262282238499897,10695487862641750673,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6516, Parent PID: 6048

General

Target ID:	3
Start time:	16:56:52
Start date:	14/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.northamericaniron.com"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://www.northamericaniron.com

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 49

Chrome Cache Entry: 50

Chrome Cache Entry: 51

Chrome Cache Entry: 52

Chrome Cache Entry: 53

Chrome Cache Entry: 54

Chrome Cache Entry: 55

Chrome Cache Entry: 56

Chrome Cache Entry: 57

Chrome Cache Entry: 58

Chrome Cache Entry: 59

Chrome Cache Entry: 60

Chrome Cache Entry: 61

Chrome Cache Entry: 62

Chrome Cache Entry: 63

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Windows Analysis Report
http://www.northamericaniron.com